last executing test programs: 2m25.362527772s ago: executing program 1 (id=605): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) open(&(0x7f0000000080)='./bus\x00', 0x143c62, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = socket$kcm(0xa, 0x5, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private0, 0xe0ff}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)='G', 0x1}], 0x1, &(0x7f0000000640)=[{0x10, 0x84, 0x8}, {0x18, 0x84, 0x0, 'b'}], 0x28}, 0x41) 2m25.302181367s ago: executing program 1 (id=608): mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x50) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file2/file0\x00'}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$rtc(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) sendmmsg$inet(r2, &(0x7f0000001480)=[{{&(0x7f0000000100)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x13, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020642500000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) sendto$inet(r2, &(0x7f0000000c80)="e8", 0x6200, 0x12000000, 0x0, 0x0) 2m25.164075048s ago: executing program 1 (id=611): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000004080)={{r0}, &(0x7f00000003c0), &(0x7f0000004040)}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="07062dbd7000000000002d0000000c0005000203aaaaaaaaaaaa08002f00000000000c002d000203aaaaaaaaaaaa0c002d000201aaaaaaaaaaaa05002e00010000000c002d000203aaaaaaaaaaaa08000200", @ANYRES64=r2], 0x5c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x8000000000004}, 0x18) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000bc0)='kfree\x00', r6, 0x0, 0xfffffffffffffff4}, 0x18) r7 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x41a1}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") creat(&(0x7f00000000c0)='./bus\x00', 0x182) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r8, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fff}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xa, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001840000004000000000000000000000095000000000000009500000000000000950000000000000018400000feffffffaf5a00000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x9, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x94) 2m24.578903735s ago: executing program 1 (id=614): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r2 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') listen(0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180015000600142603600e120800110000000401a8001600a400014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a", 0x94}], 0x1}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0x1}) socketpair(0x9, 0x80000, 0x3fc, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8924, &(0x7f0000000080)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f00000001c0)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x1c) listen(0xffffffffffffffff, 0x8) preadv(r2, &(0x7f00000000c0)=[{&(0x7f00000008c0)=""/4106, 0x100a}], 0x1, 0x141, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xbe887424ef5b87e9, 0xc, &(0x7f00000002c0)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000100)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1a, 0xc, &(0x7f0000000180)=ANY=[@ANYRES64=r5, @ANYRESOCT=r0, @ANYRES8=r5, @ANYRESOCT=r4, @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x2000000, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x2}, 0x20, 0xfffffffffffffffb, 0x0) io_setup(0x8, &(0x7f0000002740)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="b13c2449f65425def9"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000100)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) sendmsg$tipc(r7, &(0x7f0000000080)={&(0x7f0000000ec0)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x140400c0}, 0x40810) io_getevents(r6, 0x4, 0x13, &(0x7f0000000000), 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) 2m23.585187795s ago: executing program 1 (id=626): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8102) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x97a3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="140000001000010000000000000000030000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000020900010073797a30000000000900030073797a3200000000240b0000060a010400000000000000000100000008000b4000000000fc0a048028000180080001006c6f67001c0002800e00024073797a6b616c6c65720000000800054000000008d00a01800e000100696d6d656469617465000000bc0a0280640002804c0002800900020073797a32000000000900020073797a310000000008000180fffffffc0900020073797a31000000000800034000009c920900020073797a300000000008000180ffffffff14000280080003400000000808000180fffffffb0800014000000002080001400000000b500002804b000100fa62d7ba9ceeacf9aa4f832b78f35731f355d63e192a72aef5e68a05d1b806151b6bd1e2d74abafd383790ad363fdc1b7766748630b48f9beefdb33c86d5835a470b5ffd20d7e9006c0102805c00028008000180fffffffe0900020073797a30000000000900020073797a320000000008000180ffffffff0900020073797a320000000008000180fffffffd0900020073797a310000000008000180fffffffc0800034000000e5628000280080003400000000608000340000000070900020073797a320000000008000180fffffffe540002800900020073797a320000000008000180fffffffe0800034000000000080003400000000008000340000000090900020073797a310000000008000180fffffffe080003400000800108000180fffffffd8e000100818ce881ff18470752e86442e8b77ddcfc7a4c87f05cd36147be26c85cc854cc117db1906007a5a8c298f4724c8c743d46ec7f3ba478d9dfb10bbe9e4fdfc2188d62db9bb1364fed383fe0b0c3fbbab83959470cb0ffb14765c32f10b54d99531d04caaf264214997543a1c63637d9a3a20b7ce9312e545626eb375c88462c198f35cf8a11616de4fa0c000098020280eb00010099c8e680eb4d0e7f78e1fb62226ae541d997c8cb51c5ebd0bb7e2730b61310dcd7525807288a7ad8c00f6aa230a1d1b876ddb0e188384e7c79cd8af94a02451a04d8f116bde38077da45650d82bdd1767b03e3f35bc4a5769e659d8cdb6d9d9d717c78b50f6b3ac899b07a9eaf2c989654de7d6609299bad01ca1f3fa8b6229a6c69627a07f627880e902231b20368f3ae64fd12fc37afeb95f14a4dc3d0bc5f6e2afd0fc8ef6982054cffa703ee1376654019ad6d2add9052c5d2f2e0ba3318f931b2c5f2dcce5cbca6093c64d23b64e2f2061da3dd5983644280de22d592b63b5d7f6b571beb005400010041bbc64da6bacaad1bebec23352accccbca40d6ba87943f82df945bf4ccc5250a0c2b2cb13793380f424b280bfb960885af6df4afa26efa8fcd7a1243389ef3fcf1d709f775a9cd1dfb2b84fd03e5d70f800010001950b7c0ec30534e476b721ba6e82d03078fe63b683918ecbbb9c339c8cdd63689339ac43acd5973f4aac8720a98d18e13b98e11e291f3f3621ed29c717639f84bdd28810da6ae30538775f15e00133741e9de3f96f69ab363752fa962b3c71041ba1e463a91d782a968d9febb648b66e71a6827c53b3be014b785f61c4fd46fef00658f64cdd465edb61ba4c5f00849b2935c485da99a38489ecc29837433ac5446c3922d73153fd8fb2368a5ce4201760ca6778f570b7fcb38be633a02d57c5884b6bcbaf3bc28ca7686edb5d59e1b823a8f0f5ff788625995d51c16413783c6290a9714bd4dcbd2a388139f3e46f69916f335c0002800900020073797a3000000000080003400000000908000180000000000900020073797a3000000000080003400000000808000180fffffffd080003400000000408000340fffffff908000180fffffffb0800034000000003a80002801c000280080003400000020008000340fffffff508000340000000001400028008000340000000050800034000000007720001001c2cce526d2ee30fb33f426450278cb35ac06b1cef15fefc26b5c17a8c9251bed316fccb5588f2e071fc355537fcf458cf14217f16ce4c12a4b559f3e807c94c6cc4f418baebc6024b74b9dbc5ef66dbbe91812ea247db80670c101ed494f105ad9c09b4eaf8d5c133b46a311c1a00001c0302802000028008000180fffffffc0900020073797a320000000008000340000000035c00028008000180fffffffc08000180fffffffc08000180fffffffb0900020073797a300000000008000340000000060900020073797a30000000000900020073797a31000000000900020073797a310000000008000180fffffffbf6000100330e5af714359ac9da33381a13071148dbe4293800e6be0290efbb549850cda132ca27a55553fd77c3067504c4596086f4001f53d49e8111395ebccb983c6b04735a58ab2617dfc62123b09c8dc5a47154667414dc28e8369829764b2e3cc23303a882890bad6d3a70d9e15701ec8c4c15a46d38c9ed6bc8658f8a45a02083f563324a27c649bab7cbcb485c289bd8df0a040128df6891ab48095977e0463f8e3ed7ba6df976ee30768954dfeb3f08c942b2c9384aa0b78baf92ecf5e4d73788afb1bc5a8f7c4b454897cd8bcac7f19cdd949fac66756da3b9311e13362eee317df853f6bc7e4638eb145a1484d3780e09b50000c8000100d5c1e4159bf770e02e6e1ebe911d7513709588175328d2e11f2ebf3f6967c49bedcb2a5459a45272bb8084e3bb55ea7a80166d97ec16457ed7d2a834d9aafdb2a54110ddc7975eaeda4f897ec7d533c27df0ce5ff92cfedadc67fff850ee5d07822d72b27af229d17ad2f8d802ae40d98f373e348a04b4f0270c71f82319de3a0331f165204896e0e448cf7ea0f8eb32a312fda6716f72f0234742fe6708ad0adf587ea21d94b8c8f5080028dda1e21d3d9ac82d8edd12941631b72b692ecc262d6ae12393000100c56deda494a09379df59bad8f0f17376b307ce49571034af728b1c4bf694e3b91406b976944238ab36ccaf40e3d92952ba87aa27af6353a82868c9508577a1b6a349fce75b3e4952b04b9527f496b5555e6db110dec07430b01446635eff12f136dbcb54fd4dc90b02e1bc6488ed74efd9eeb1b6de6e2a234f6c323df5c28a0352d03b34ee4f64ab614078125aa3cc0048000280080003400000000c08000340000000010900020073797a310000000008000180fffffffd0800034000008000080003400000dc5b08000180fffffffc08000180fffffffb2c0202804b000100cece2d8ff50c68c1060c2e691ddc50c6d87b46b4e5f6695010163d98bac2d9d7693cff0ec1e2107f58d3c305c78e5a596df92f1dbe80793dce5424be9e7951890023db7d0b9b2700e5000100f46e4b21dd4b92221713eece21b0e3bfb3fe995725eca78713a8d11ac82a6aefeeeab4720bd136479523ccafa34771afedeafc55275842bb7adb37ff3c93b19d9d5139f8b67ee81e380faa9506e6c8e5956cf7efc9828438d340aa4bfe771769c6ddb2f8c31049c1fc37e8f28812ea0aadd0caa7e32f6bb4b2b7a4473e5fa876c87bf285a503660ea12a0cfff6863a87c64ea83c31e737e278edcad77cb964828c7049d335e25156fd4d1c2faada6a8363794fe487155fbfd7c2e1b8504d4a744357734f51fca0426ffe929280df27411f8a90a067b285e970fa1e403722ae91dd000000f400010073e22ba6603d1c92836887468b100c2dc430efeb2ef19c66bd0582fe94df7b5a20292fdfbd2009980dbf9651685f7713bfb0f42583e452670f29e2cabf848fcdcb7a2067f0b257efd7dc927e540584b08f026e14be231afa797e36410d8ad6cbced8c5d2cce2f5a8b75713e57b3161b5b4ce78f283bf59a04f90bc1c5a4371abed0124c621ecb51b6166ad39f14216c09456232b7ea8dd7058bbbeae8b1c13df7ffa1515a359309683421d783f4fb00547cb06b3f974e65f28397c2c16675436a414b6e28d61800c35bdc05f9837e14491ce0fa7c0fbf6f61dd8f7eceac62373ed913de212a188ad5fa12d0eab8a0b440900010073797a30"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0xffffff81}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r6}, 0x10) ioctl$SCSI_IOCTL_START_UNIT(r2, 0x5) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYBLOB="0000000016b62218a5dbe68c00"/28], 0x48) 2m22.572320306s ago: executing program 1 (id=635): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x176, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa48847000000000000000000000000603f599001340600fe8000000000000000000000000000aafe8000000000000000000000000000000000000000000000c204000000000000000c000000000000fc02000000000000000000000000000000000000000000000000ffff00000000fe800000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000fc00"/190, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800006c3e4af6e95497a4e1f23137ae5d9ab0d6a6a3ff1ff52b15b109af0f93abe7bddfe72723968479f91c26bda6d7d589fb8cb68c4f8760051117d27ab8434eb2818254ab55825a80ba277e953c42c3e3a34d6f1998abd85935442e96e25dc77ffb0469578ffae16aa69caf18e96b08085370c0c242147969cf393604407755c55c4b539a2e36241dc73a3d65b8b2585660c1365e7ec6c7a536a08d21e53aa4e60cad0bd8eb60a00943"], 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x24000000) (async) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) (async) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="3f00678fcc0ec7a84e0000000000", @ANYRESHEX=r2, @ANYBLOB=',k']) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0xfffffffd) (async) r6 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r7, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r5, 0x0, 0x0, 0x0, 0x0, 0x3, r6}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) (async) shutdown(r5, 0x1) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x18) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r10}, 0x10) (async) r11 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) write$selinux_validatetrans(r11, 0x0, 0x6d) (async) r12 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r12, &(0x7f0000000200)=[{&(0x7f0000001380)=""/129, 0x81}], 0x1, 0x0, 0x4, 0x0) (async) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r12, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)={0x4e0, r13, 0x0, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_OURS={0x198, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'kfree\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3602}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x42a2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '9p\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.^.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'trans=fd,'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xd8, 0x4, "6558d801aa9e0108007e88ec077dc0d2891701f8e8f6e26140974807d210a39e4ffebf996a2dbc0e554acfad763ba18f81a2bd83f51b0a0c0fe64dae68f575bc645e39ce4ef359cb23fa0462c7853ff29c53716e91c6eab6781bd443eb197e713332e8003643b843a2295b1bd6ce350f10d758fc20c1b2b13b97d403e07487edcabb2b4946b0ee5bc3add66dae132618cda34ab84a19c8eb927641b72904a6ca9eaca28681fb742072db5edd6df369285bd173ba3f584167e7e866696ef7e930cadf2239bd4a25cfc0e8a56d4269b4b085acbcf0"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_LINKMODES_OURS={0x32c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '%{{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ',^${/-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\-}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '9p\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/@[+.[&\\)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xfb, 0x5, "bd02154830b052dbcade6425677f995e16b27ac8e1fa11e8117f1729d3422467e4b89d323950a95496c148d96526c865c18aa55bf8f107fe44e5358c08b51f1d27556e87abf8779b4b23ce7958092f4077c8a36575a48795a360d364c3a0b86c26b78caab04fc55ed1366af9ec324b808001cd2090d7f6b5272352adde9a6574ca27cb881efdaaa5a3376780c6dd5c90a60807420bfed4c74bd7d4652352fe5b0b23208c0a1ac526f60a56c5b3f4ea71cc5c72f6b719b803b7127b51ca97c19b73272a617cb94a4319437e9a499c46c623e17a5b013e609c65f369b5113e0c00d22f35d10d8b41c58ea7dcf442d11a798e6111c400b31b"}, @ETHTOOL_A_BITSET_BITS={0x128, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\'%(n\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8b9e}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'rfdno'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'trans=fd,'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb63}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ',\xbc!(-\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x1b, 0x2, '/selinux/validatetrans\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'kfree\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\x99$]\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, ']$*!#!+@$\'%-)^(,!{$@\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '!@&\xae\'}*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '9p\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3614}]}]}, @ETHTOOL_A_BITSET_MASK={0x5e, 0x5, "67e2335a4d0db6bb875d6a74115b267a75ab41ae363c0747f0ce9fecbd80bf6607467c0bc79f874cbed433c96a8574bb83a6bd88d7506c03f2e2e4250de03aa9b54ed25ac1ab47b5e57d834afd284318a2cd7e0fec0c8675bc90"}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}]}, 0x4e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 2m7.509767258s ago: executing program 32 (id=635): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x0) syz_emit_ethernet(0x176, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaa48847000000000000000000000000603f599001340600fe8000000000000000000000000000aafe8000000000000000000000000000000000000000000000c204000000000000000c000000000000fc02000000000000000000000000000000000000000000000000ffff00000000fe800000000000000000000000000000fe80000000000000000000000000000000000000000000000000000000000000fc00"/190, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50000000907800006c3e4af6e95497a4e1f23137ae5d9ab0d6a6a3ff1ff52b15b109af0f93abe7bddfe72723968479f91c26bda6d7d589fb8cb68c4f8760051117d27ab8434eb2818254ab55825a80ba277e953c42c3e3a34d6f1998abd85935442e96e25dc77ffb0469578ffae16aa69caf18e96b08085370c0c242147969cf393604407755c55c4b539a2e36241dc73a3d65b8b2585660c1365e7ec6c7a536a08d21e53aa4e60cad0bd8eb60a00943"], 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x24000000) (async) write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f00000008c0)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) (async) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000800000003003c02ffffffef3501"], 0x7c8) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="3f00678fcc0ec7a84e0000000000", @ANYRESHEX=r2, @ANYBLOB=',k']) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0xfffffffd) (async) r6 = eventfd2(0x0, 0x0) io_setup(0x6, &(0x7f0000000140)=0x0) io_submit(r7, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffd, r5, 0x0, 0x0, 0x0, 0x0, 0x3, r6}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r5, 0x0}]) (async) shutdown(r5, 0x1) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000060000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x18) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r10}, 0x10) (async) r11 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) write$selinux_validatetrans(r11, 0x0, 0x6d) (async) r12 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv2(r12, &(0x7f0000000200)=[{&(0x7f0000001380)=""/129, 0x81}], 0x1, 0x0, 0x4, 0x0) (async) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r2) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r12, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000900)={0x4e0, r13, 0x0, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_OURS={0x198, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'kfree\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3602}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x42a2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '9p\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.^.\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'trans=fd,'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xd8, 0x4, "6558d801aa9e0108007e88ec077dc0d2891701f8e8f6e26140974807d210a39e4ffebf996a2dbc0e554acfad763ba18f81a2bd83f51b0a0c0fe64dae68f575bc645e39ce4ef359cb23fa0462c7853ff29c53716e91c6eab6781bd443eb197e713332e8003643b843a2295b1bd6ce350f10d758fc20c1b2b13b97d403e07487edcabb2b4946b0ee5bc3add66dae132618cda34ab84a19c8eb927641b72904a6ca9eaca28681fb742072db5edd6df369285bd173ba3f584167e7e866696ef7e930cadf2239bd4a25cfc0e8a56d4269b4b085acbcf0"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}]}, @ETHTOOL_A_LINKMODES_OURS={0x32c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x9c, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '%{{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ',^${/-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\\-}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '9p\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/@[+.[&\\)\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'kmem_cache_free\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xfb, 0x5, "bd02154830b052dbcade6425677f995e16b27ac8e1fa11e8117f1729d3422467e4b89d323950a95496c148d96526c865c18aa55bf8f107fe44e5358c08b51f1d27556e87abf8779b4b23ce7958092f4077c8a36575a48795a360d364c3a0b86c26b78caab04fc55ed1366af9ec324b808001cd2090d7f6b5272352adde9a6574ca27cb881efdaaa5a3376780c6dd5c90a60807420bfed4c74bd7d4652352fe5b0b23208c0a1ac526f60a56c5b3f4ea71cc5c72f6b719b803b7127b51ca97c19b73272a617cb94a4319437e9a499c46c623e17a5b013e609c65f369b5113e0c00d22f35d10d8b41c58ea7dcf442d11a798e6111c400b31b"}, @ETHTOOL_A_BITSET_BITS={0x128, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '\'%(n\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8b9e}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'rfdno'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'trans=fd,'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb63}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ',\xbc!(-\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x1b, 0x2, '/selinux/validatetrans\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'kfree\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\x99$]\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x19, 0x2, ']$*!#!+@$\'%-)^(,!{$@\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '!@&\xae\'}*\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '9p\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3614}]}]}, @ETHTOOL_A_BITSET_MASK={0x5e, 0x5, "67e2335a4d0db6bb875d6a74115b267a75ab41ae363c0747f0ce9fecbd80bf6607467c0bc79f874cbed433c96a8574bb83a6bd88d7506c03f2e2e4250de03aa9b54ed25ac1ab47b5e57d834afd284318a2cd7e0fec0c8675bc90"}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}]}, 0x4e0}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) 3.197376923s ago: executing program 5 (id=3059): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) r6 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x88b, 0x0, r3, 0x6, '\x00', 0x0, r6, 0x0, 0x5, 0x4}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r7}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10, 0x0, 0x0, &(0x7f0000000cc0)=[@mask_cswp={0x58, 0x114, 0x9, {{0x4, 0x5}, 0x0, 0x0, 0x3, 0x6, 0x100, 0x8000, 0x10, 0x4}}, @mask_cswp={0x58, 0x114, 0x9, {{0x2, 0x7fffffff}, 0x0, 0x0, 0xd63, 0x8, 0x4, 0x4, 0x30, 0x3}}], 0xb0, 0xc004}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 2.425500315s ago: executing program 4 (id=3086): socket(0x10, 0x4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001080)=ANY=[@ANYBLOB="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"/2282], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x1, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000380)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x7) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0x4}, 0x18) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r6 = socket$netlink(0x10, 0x3, 0x15) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0xc, &(0x7f00000000c0)=0x108005, 0x4) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="1c00000056000106000000000000000007"], 0x1c}], 0x1}, 0x0) fcntl$notify(r5, 0x402, 0x8000001f) fcntl$notify(r5, 0x402, 0x3) connect$pppoe(r5, &(0x7f0000000140)={0x18, 0x0, {0x3, @broadcast, 'veth1_to_team\x00'}}, 0x1e) ioctl$SG_SET_RESERVED_SIZE(0xffffffffffffffff, 0x2275, &(0x7f0000000040)) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f00000001c0)=0x8, 0x4) sync() openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240), 0x8180, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x20c201, 0x40) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000640), 0x2000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)) unshare(0x42000080) syz_usb_disconnect(0xffffffffffffffff) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000400)=0x4, 0x4) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) 1.976095781s ago: executing program 5 (id=3090): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$kcm(r0, 0x0, 0x41) 1.911377526s ago: executing program 5 (id=3091): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) umount2(&(0x7f0000000580)='./file0\x00', 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x81c0, 0x80000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) 1.876388279s ago: executing program 5 (id=3093): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000900000000000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00578cbcc07111e9e800000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018111800", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='rxrpc_tx_ack\x00', r2}, 0x18) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r3 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 1.360879531s ago: executing program 2 (id=3104): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) write$binfmt_elf32(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030000000903000038000000fcffffff0e"], 0x58) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 1.342881212s ago: executing program 2 (id=3105): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x41a1}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) fallocate(r1, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 1.228746631s ago: executing program 2 (id=3108): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001200), 0xa0000) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335, @time={0xa2eb, 0x8}, 0x0, {}, 0x20}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000940)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x9e, 0x1, 'queue1\x00', 0x10000}) tkill(r0, 0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000540)=ANY=[@ANYRESDEC, @ANYBLOB="da295ec9b1b015f739f590dc63cbbc2ae94f1770430f9fd8db05661e906c461da919bf09409f7bd4bbce8830a00fe928c9651ab119928c79e4672a1c5458e82c436c7e191f2ceafd819723b468e8ab96f342066d3e8d350b89b669356399a9a349ec471db0d500bd2420b1e4c76a87c056b075b7a1b70a2a6cff75fcf31f08", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa6}, 0x94) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x5, 0x570, &(0x7f0000000680)="$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") r4 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000c00)={0x4, 0x0, 0x10}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x330}}, 0x0) mq_getsetattr(0xffffffffffffffff, &(0x7f00000007c0)={0x800, 0x1ed00000000000, 0x9, 0x4}, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) mq_timedreceive(0xffffffffffffffff, &(0x7f0000000080)=""/92, 0x5c, 0x1000002, 0x0) 1.228291021s ago: executing program 4 (id=3109): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}) (async) r5 = pidfd_getfd(r4, r4, 0x0) setns(r5, 0x66020000) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000400000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe26}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x18) (async) r7 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) fgetxattr(r7, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x100010e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4a}}, {@jqfmt_vfsv0}, {@quota}, {@acl}, {@stripe={'stripe', 0x3d, 0x1}}, {@init_itable_val={'init_itable', 0x3d, 0x8}}, {@jqfmt_vfsv0}, {@auto_da_alloc}]}, 0x2, 0x471, &(0x7f00000002c0)="$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") 1.175156316s ago: executing program 3 (id=3110): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x602, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair(0x11, 0xa, 0x0, 0x0) writev(r1, &(0x7f0000000440), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x700000, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 1.174999066s ago: executing program 4 (id=3111): r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) 1.172102486s ago: executing program 3 (id=3112): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)='G', 0x1}], 0x1, &(0x7f0000000640)=[{0x10, 0x84, 0x8}, {0x18, 0x84, 0x0, 'b'}], 0x28}, 0x41) 1.12211202s ago: executing program 4 (id=3113): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x3, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) preadv2(r1, &(0x7f0000000740)=[{&(0x7f0000000080)=""/115, 0x73}, {&(0x7f0000000100)=""/141, 0x8d}, {&(0x7f0000000280)=""/41, 0x29}], 0x3, 0x3c, 0x163c, 0x7) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x429a, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x7, @perf_config_ext={0x100000008}, 0x88025, 0xccf8, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x1) r4 = dup(r3) io_setup(0x1, &(0x7f00000001c0)=0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x0) io_submit(r5, 0x1, &(0x7f0000000380)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x403, r6, 0x0, 0x0, 0x0, 0x0, 0x2}]) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) syz_clone3(&(0x7f0000000080)={0x801400, 0x0, 0x0, 0x0, {0xe}, 0x0, 0x0, 0x0, 0x0}, 0x58) timer_create(0x2, 0x0, &(0x7f0000000400)=0x0) timer_settime(r7, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) read$char_usb(r4, &(0x7f0000000180)=""/147, 0xfdef) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) chown(0x0, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, 0x0, 0x4000000) setxattr$trusted_overlay_opaque(0x0, &(0x7f00000001c0), &(0x7f0000000380), 0x2, 0x1) r10 = socket$packet(0x11, 0x2, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYRES64=0x0], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r11}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000200007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYRES32=0x0, @ANYRESHEX=r10, @ANYBLOB="ac84f6efea33cffcbdcde277ef851818359e1712586844da34f60489c98cce9520b2ea1c8022e7efa845521f00b67202fea3cf9a607c41b8056d2801203c5cdda684235af063544a832f9ffab222357300133d648e32f394a3fd1f7bea1a5c36b7caf0fb002e9ae4a95a0007eee1b087695d8789ae782dbdf5b8b274178c646f7c1ff40abf40d0154224ffbd1580ec35c678a0d6e84f054dc67e394c8bfaa451e1905fdd7777c572688af8006b17ce148182353070fef24f8abbbc00", @ANYRES8=r1], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.12173979s ago: executing program 3 (id=3114): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x3, 0x1, 0xdf, 0x0, 0x0, 0x7, 0x706, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0x5, 0xa0}, 0x19240, 0x7f, 0x0, 0x1, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet_udp(0x2, 0x2, 0x0) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma,port=0x0010000000']) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYRES16=r1], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000980)='kfree\x00', r2}, 0x18) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) readv(r3, &(0x7f0000000880)=[{&(0x7f0000000800)=""/116, 0x18}], 0x300) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x105d0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x9, 0x0, 0x7, 0x5, 0x20005, 0xb, 0x0, 0x3, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) recvmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x61) r4 = socket$l2tp6(0xa, 0x2, 0x73) socket$packet(0x11, 0x2, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r5 = gettid() epoll_create(0xf7b) r6 = eventfd(0x0) kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r6, 0x0) (fail_nth: 10) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) syz_emit_ethernet(0x1e, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb000c000000e000030000c7b69ba692344ff09e339c7da540b135bbf0cafdd68ea8d59f5a3e46edb75c64a7daf19a2b513bc8ff0e1441be739c0bd311872ad132db9b09637378326d0fc2f82131e104b9e40d9db3bdb57938ffb36f84b2ba7b443aa0ac18dd7e4cf007e4da9251826d054f771b3b473c3ede53b0d0a66b04a06fd33ec7931c961e12fefb8c754690e7721200d1041da7d4050955df9132b069d56f341a1dbae4f7"], &(0x7f0000000200)={0x0, 0x2, [0xd25, 0x630, 0xc50, 0x9de]}) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000280)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) sendmmsg$inet6(r4, &(0x7f0000000080)=[{{&(0x7f00000002c0)={0xa, 0x4e21, 0x80000001, @private1, 0xfe}, 0x1c, 0x0}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0xc) 855.481811ms ago: executing program 5 (id=3115): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) umount2(&(0x7f0000000580)='./file0\x00', 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x81c0, 0x80000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) 819.298954ms ago: executing program 4 (id=3117): r0 = gettid() r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001200), 0xa0000) read(r1, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x335, @time={0xa2eb, 0x8}, 0x0, {}, 0x20}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000940)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x9e, 0x1, 'queue1\x00', 0x10000}) tkill(r0, 0x7) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext, 0x4000, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000540)=ANY=[@ANYRESDEC, @ANYBLOB="da295ec9b1b015f739f590dc63cbbc2ae94f1770430f9fd8db05661e906c461da919bf09409f7bd4bbce8830a00fe928c9651ab119928c79e4672a1c5458e82c436c7e191f2ceafd819723b468e8ab96f342066d3e8d350b89b669356399a9a349ec471db0d500bd2420b1e4c76a87c056b075b7a1b70a2a6cff75fcf31f08", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095", @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x28, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) socket$netlink(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f00000002c0)=ANY=[], 0x1, 0x5b1, &(0x7f0000001000)="$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") socket$unix(0x1, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa6}, 0x94) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x5, 0x570, &(0x7f0000000680)="$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") r4 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000c00)={0x4, 0x0, 0x10}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$igmp(0x2, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x330}}, 0x0) r6 = mq_open(&(0x7f0000000180)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x92\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\xf6\v\xe8\xf2\xd3\b\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xa2.\xb6{\xb5\x85#\x88\xdc\xf0\x0f\x05\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1c6\xe7`83\xb7n#\xe0\xc1_\xec\xba\xde\a\x8b\xc5\x86woo\xbc\x1c\xa3r\x82\xf3enq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000040)={0x0, 0x1, 0x4}) mq_getsetattr(r6, &(0x7f00000007c0)={0x800, 0x1ed00000000000, 0x9, 0x4}, 0x0) mq_timedreceive(r6, &(0x7f0000000340)=""/195, 0xc3, 0x0, 0x0) mq_timedreceive(r6, &(0x7f0000000080)=""/92, 0x5c, 0x1000002, 0x0) 818.635674ms ago: executing program 0 (id=3118): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r0 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x41a1}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) fallocate(r1, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) 812.941135ms ago: executing program 5 (id=3119): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000040000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f00000000c0)={[{@errors_remount}, {@delalloc}, {@bsdgroups}]}, 0x3, 0x56d, &(0x7f0000000c00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r3, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @b}}) r4 = open(&(0x7f00000000c0)='.\x00', 0x800, 0x50) getdents(r4, 0x0, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x9) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001800110101000000000000000a00800000020008"], 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000030601010000000000000000010000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) io_uring_setup(0x1fbb, &(0x7f00000000c0)={0x0, 0x1ae0, 0x2000, 0x8000002, 0xb5}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000023c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffffffffff0800074000000001"], 0x94}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000000001050500000000000000000a0000001800028006000340000300000c0002800500010000000000100001800c0002800500010001000000d7f893dfb97e14fbcf7369e7589929d46266534da7a153256732f7184603157e2f24946a92eb1281f5db490572bf0fa5698abb7cccea9d6bc4de0f3a9585b0e352109dbbd6e774dcafa991ccb8be5ee8ef58c2c83806a970048a1c15d732f011a758e12222156eaea009e9d394139813db845f9fd576852c2b5348a6cf432292aeda25b9350c1f09ac43cdd54b8ac2cc840c260c8786efca48b753a49b965f32de101b7a69"], 0x3c}, 0x1, 0x0, 0x0, 0x4040081}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0xe, &(0x7f00000014c0)=ANY=[@ANYRES32=r5], &(0x7f0000000340)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x5e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004f0000500000000000059040ac1414006401010244140503e0000002000000000000000000000009890f77e0000002ac1e0001ac141432830200000000040000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x5, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) recvmsg$unix(r10, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) 812.772765ms ago: executing program 3 (id=3120): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r0}, 0x10) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x200}, 0x3a) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r2, 0x0) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000040)) r3 = msgget(0x1, 0x80) msgrcv(r3, &(0x7f0000000180)={0x0, ""/68}, 0x4c, 0x3, 0x1800) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0x8, 0x4) 709.324933ms ago: executing program 3 (id=3121): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = creat(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x68, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r3, 0x0, 0xb}, 0x18) mount$9p_fd(0x0, 0x0, &(0x7f0000000200), 0x1000040, &(0x7f0000000340)=ANY=[]) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, 0x0, 0x0) shmget(0x1, 0x3000, 0x30, &(0x7f0000001000/0x3000)=nil) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$evdev(0x0, 0x3, 0x24000) r4 = socket$inet(0x2, 0x3, 0xd) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, 0x0, 0x0) socket$pppoe(0x18, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_OPERSTATE={0x5, 0x10, 0xb}]}, 0x28}, 0x1, 0x0, 0x0, 0x40011}, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) 681.889235ms ago: executing program 3 (id=3122): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x3, 0x2000000000000000}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040), 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000100)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000080)="88", 0x1}], 0x1, 0x0, 0x80fe}, 0x4048053) dup(r1) 576.114164ms ago: executing program 0 (id=3123): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0180000000000000000001000000000000000b00000000030014"], 0x28}}, 0x40000) 531.710867ms ago: executing program 2 (id=3124): r0 = socket$kcm(0xa, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)='G', 0x1}], 0x1, &(0x7f0000000640)=[{0x10, 0x84, 0x8}, {0x18, 0x84, 0x0, 'b'}], 0x28}, 0x41) 456.998013ms ago: executing program 2 (id=3125): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000900000000000000", @ANYRES32, @ANYBLOB='\a\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00578cbcc07111e9e800000000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018111800", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='rxrpc_tx_ack\x00', r2}, 0x18) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r3 = socket$packet(0x11, 0x3, 0x300) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 420.854176ms ago: executing program 0 (id=3126): pipe(&(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, 0x0, &(0x7f0000000d40)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) openat2$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', &(0x7f0000000780)={0x200000, 0x8054794491b696db, 0x10}, 0x18) mkdirat(0xffffffffffffffff, &(0x7f0000001f40)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x1c) r0 = creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) write$cgroup_type(r0, &(0x7f00000009c0), 0xd4ba0ff) r1 = semget$private(0x0, 0x4000000009, 0x208) semctl$GETALL(r1, 0x0, 0xd, &(0x7f0000000300)=""/241) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000f40)=@newtfilter={0xd8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xa}, {}, {0x8}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xa8, 0x2, [@TCA_CGROUP_EMATCHES={0xa4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2, 0x1, 0xfff}, {0x3, 0x1, 0x332e, 0x0, 0x8, 0x0, 0x2}}}]}, @TCA_EMATCH_TREE_LIST={0x7c, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x64, 0x7, 0x1}, {{0x4, 0x1, 0x0, 0x1}, {0x1, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x4, 0x3, 0x4828}, {0x5, 0x4e, 0xa, 0x800}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0xa, 0x7, 0xc1}, {{0x1, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x8, 0x8, 0x8}, {0x2, 0x1, 0x9e4cae75c9fbb8ff}}}, @TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x8000, 0x2, 0x3}, {0x6, 0x3, 0x2, "ede09d"}}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x6, 0x8, 0x8}, {0xffffffffffffffff, 0x6, 0x1}}}]}]}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x8080}, 0x4800) (fail_nth: 6) 127.80823ms ago: executing program 2 (id=3127): bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat(0xffffffffffffffff, 0x0, 0x101000, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) r1 = socket$key(0xf, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005000000000000", @ANYRES32, @ANYBLOB="000019001f91ff0300007f6a7a620b50", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8f1}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000600000008000000ae00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r6, r6, 0x21) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0d00000002000000040000000640000005000000", @ANYRES32=r5, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000080000000000000000000000000000000000000000b5d3db9f0ded4274af0784ff1d37005c92c8da235e34564a2822f340524d89816e4a7bfaf32ab4d85c51c229fb89087aebf14c6557f26c4160b893a50dfe94fab9a171e357969a5ef88d2e8ed314de004c085dc0cea8d872acd03d7e291491ff205edfa69b01f693957f7f7294574726d43b6b0fba92f08f7eeeb1e3ce414b512031c0a5d23a8b338dbf0a92a33c5188934deb4eadab566735c8c0a8b28faff31f8f0633f408a3479ce32d094c175b4bce7e21bbaed225203e7dd7"], 0x50) sendmsg$key(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) 85.787913ms ago: executing program 4 (id=3128): syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000a80)='./file1\x00', 0x2800810, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], 0x3, 0x15d, &(0x7f0000000f00)="$eJzs27+KE1EUB+AzJmrUJrVYDNhYBbWyVCSCOKAoKbRSiDaJBEwzWgWfxNaHEyRVCuGKzpLshoRl/8zO7ub7mhz4ccM9xZ3LGZj3dz6PhpPpp8mreXSyLNqPI49FFt24Eq2ozAIAuEwWKcXvlFK6PosbPyKl1PSOAIC6uf8BYPccev8/amhjAEBtzP8AsHvevH334klR9F/neSfi16wclIPqt8qfPS/69/P/uqtV87IctJb5gyrPD+ZX4+Ze/nBjfi3u3a3yf9nTl8VafiuG9bcPAAAAO6GXL22c73u9bXlV7Xs/sDa/t+N2+8zaAACOYPr12+jDePzxi0JxQYs/KaVjLP/+szoC56SL0y2yiDjZ/zT9ZALqtjr0Te8EAAAAAAAAAAAAAADYpt6vkVpNtwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb/Q0AAP//LjxONw==") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r4, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) sendmmsg$inet(r4, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="15b26f226e2966667482d50903b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5d07d691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6bea1764fbde5500fa30c5f2459cff4d7f123ab94cfd5762d586ec7a28abc2f8c9e608f8f964b96ecb0883d60d444f317834a3d734cb304051a60d1a084a84da8f9a23a1b9d4951c0a81985c63ae193f40e9deb358b2f08553324fd6086be9e70e5061568abefebcda50e70f4dab2e4dc0cf6d85aced044d7005326922886194895267165f7f592036ebe11dcf1cad98f5cda766eaea90fb4cb5e793525126c7594f8599055192d63a81d3cd26aadd50983f1c3f1d4655c1b5f59e80f733e3abc4792b760729fd26298ef15141cf76cc4", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r6, 0x0, 0x2, 0x7) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x0, 0x2, 0x40}) connect$bt_sco(r7, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) 19.540788ms ago: executing program 0 (id=3129): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000a00)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030000000903000038000000fcffffff0e"], 0x58) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 18.658078ms ago: executing program 0 (id=3130): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) umount2(&(0x7f0000000580)='./file0\x00', 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x81c0, 0x80000000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000400)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) 0s ago: executing program 0 (id=3131): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7fff}, 0x18) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) kernel console output (not intermixed with test programs): e:7127: comm syz.5.2564: Bad quota inode: 3, type: 0 [ 160.146388][T14046] ext4 filesystem being mounted at /503/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.160865][T14048] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 160.202072][T14048] EXT4-fs (loop5): mount failed [ 160.210488][T14055] FAULT_INJECTION: forcing a failure. [ 160.210488][T14055] name failslab, interval 1, probability 0, space 0, times 0 [ 160.223545][T14055] CPU: 1 UID: 0 PID: 14055 Comm: syz.2.2566 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 160.223578][T14055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 160.223591][T14055] Call Trace: [ 160.223598][T14055] [ 160.223605][T14055] __dump_stack+0x1d/0x30 [ 160.223635][T14055] dump_stack_lvl+0xe8/0x140 [ 160.223675][T14055] dump_stack+0x15/0x1b [ 160.223692][T14055] should_fail_ex+0x265/0x280 [ 160.223715][T14055] should_failslab+0x8c/0xb0 [ 160.223803][T14055] kmem_cache_alloc_node_noprof+0x57/0x320 [ 160.223843][T14055] ? __alloc_skb+0x101/0x320 [ 160.223903][T14055] __alloc_skb+0x101/0x320 [ 160.223933][T14055] netlink_ack+0xfd/0x500 [ 160.223956][T14055] netlink_rcv_skb+0x192/0x220 [ 160.223974][T14055] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 160.224014][T14055] rtnetlink_rcv+0x1c/0x30 [ 160.224037][T14055] netlink_unicast+0x5c0/0x690 [ 160.224139][T14055] netlink_sendmsg+0x58b/0x6b0 [ 160.224162][T14055] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.224183][T14055] __sock_sendmsg+0x145/0x180 [ 160.224290][T14055] ____sys_sendmsg+0x31e/0x4e0 [ 160.224368][T14055] ___sys_sendmsg+0x17b/0x1d0 [ 160.224403][T14055] __x64_sys_sendmsg+0xd4/0x160 [ 160.224428][T14055] x64_sys_call+0x191e/0x2ff0 [ 160.224451][T14055] do_syscall_64+0xd2/0x200 [ 160.224475][T14055] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 160.224575][T14055] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 160.224598][T14055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.224616][T14055] RIP: 0033:0x7f77177aebe9 [ 160.224681][T14055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.224696][T14055] RSP: 002b:00007f7716217038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.224739][T14055] RAX: ffffffffffffffda RBX: 00007f77179d5fa0 RCX: 00007f77177aebe9 [ 160.224750][T14055] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000006 [ 160.224761][T14055] RBP: 00007f7716217090 R08: 0000000000000000 R09: 0000000000000000 [ 160.224772][T14055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.224782][T14055] R13: 00007f77179d6038 R14: 00007f77179d5fa0 R15: 00007ffe2ae68a68 [ 160.224839][T14055] [ 160.499955][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.503351][T14062] loop2: detected capacity change from 0 to 512 [ 160.536284][T14065] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2570'. [ 160.556302][T14062] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 160.569478][T14062] ext4 filesystem being mounted at /513/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 160.638042][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.718888][T14080] loop2: detected capacity change from 0 to 256 [ 160.738844][T14084] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2572'. [ 160.755336][T14080] FAT-fs (loop2): Directory bread(block 1285) failed [ 161.031870][T14090] loop2: detected capacity change from 0 to 1024 [ 161.066239][T14090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.131392][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.133281][T14112] 9pnet_fd: Insufficient options for proto=fd [ 161.159762][T14112] tipc: Started in network mode [ 161.164719][T14112] tipc: Node identity ac14140f, cluster identity 4711 [ 161.169700][T14118] loop2: detected capacity change from 0 to 512 [ 161.179908][T14112] tipc: New replicast peer: 255.255.255.255 [ 161.186170][T14112] tipc: Enabled bearer , priority 10 [ 161.198209][T14118] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.214161][T14118] ext4 filesystem being mounted at /516/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.278571][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.341214][T14146] loop2: detected capacity change from 0 to 512 [ 161.367893][T14146] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.381111][T14146] ext4 filesystem being mounted at /518/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 161.471685][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.678949][T14203] loop2: detected capacity change from 0 to 512 [ 161.745348][T14207] loop4: detected capacity change from 0 to 512 [ 162.008094][T14207] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2585: bg 0: block 393: padding at end of block bitmap is not set [ 162.023643][T14203] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.039620][T14207] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 162.049156][T14207] EXT4-fs (loop4): 2 truncates cleaned up [ 162.055542][T14207] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.071551][T14207] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.117737][T14203] ext4 filesystem being mounted at /521/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.360012][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.638533][ T5851] tipc: Node number set to 2886997007 [ 162.899765][T14229] loop2: detected capacity change from 0 to 1024 [ 163.016244][T14229] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.085617][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.326875][T14265] tipc: Started in network mode [ 163.331790][T14265] tipc: Node identity ac14140f, cluster identity 4711 [ 163.347821][T14265] tipc: New replicast peer: 255.255.255.255 [ 163.353932][T14265] tipc: Enabled bearer , priority 10 [ 163.461527][T14276] loop4: detected capacity change from 0 to 512 [ 163.487387][T14276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.500291][T14276] ext4 filesystem being mounted at /511/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.553461][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.606163][T14281] loop4: detected capacity change from 0 to 512 [ 163.616072][T14281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.629686][T14281] ext4 filesystem being mounted at /512/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.675629][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.718695][T14294] netlink: 'syz.3.2605': attribute type 1 has an invalid length. [ 163.728080][T14294] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2605'. [ 163.843980][T14296] loop4: detected capacity change from 0 to 1024 [ 163.861787][T14299] loop3: detected capacity change from 0 to 512 [ 163.875415][T14296] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.894187][T14303] sctp: [Deprecated]: syz.5.2608 (pid 14303) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.894187][T14303] Use struct sctp_sack_info instead [ 163.898757][T14299] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.946628][T14299] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.027269][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.029109][T13788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.297522][T14315] loop3: detected capacity change from 0 to 512 [ 164.318354][T14315] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.331779][T14315] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.400616][ T29] kauditd_printk_skb: 424 callbacks suppressed [ 164.400631][ T29] audit: type=1400 audit(1755018325.801:15417): avc: denied { firmware_load } for pid=14309 comm="syz.3.2610" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 164.407286][T13788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.431986][ T29] audit: type=1400 audit(1755018325.851:15418): avc: denied { create } for pid=14302 comm="syz.5.2608" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 164.461335][ T29] audit: type=1400 audit(1755018325.991:15419): avc: denied { allowed } for pid=14314 comm="syz.3.2612" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 164.464355][ T5845] tipc: Node number set to 2886997007 [ 164.481140][ T29] audit: type=1400 audit(1755018325.991:15420): avc: denied { create } for pid=14314 comm="syz.3.2612" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 164.528439][ T29] audit: type=1326 audit(1755018326.241:15421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14318 comm="syz.2.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77177aebe9 code=0x7ffc0000 [ 164.552529][ T29] audit: type=1326 audit(1755018326.241:15422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14318 comm="syz.2.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77177aebe9 code=0x7ffc0000 [ 164.576199][ T29] audit: type=1326 audit(1755018326.241:15423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14318 comm="syz.2.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f77177aebe9 code=0x7ffc0000 [ 164.599996][ T29] audit: type=1326 audit(1755018326.241:15424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14318 comm="syz.2.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77177aebe9 code=0x7ffc0000 [ 164.623879][ T29] audit: type=1326 audit(1755018326.241:15425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14318 comm="syz.2.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77177aebe9 code=0x7ffc0000 [ 164.647946][ T29] audit: type=1326 audit(1755018326.241:15427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14318 comm="syz.2.2614" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77177aebe9 code=0x7ffc0000 [ 164.676935][T14328] loop3: detected capacity change from 0 to 512 [ 164.707672][T14328] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.720387][T14328] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 164.783987][T13788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.016793][T14360] loop3: detected capacity change from 0 to 512 [ 165.036490][T14360] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.058461][T14360] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.105935][T14335] loop5: detected capacity change from 0 to 1024 [ 165.129400][T13788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.150888][T14335] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.197445][ T6849] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.266371][T14391] tipc: Started in network mode [ 165.271275][T14391] tipc: Node identity ac14140f, cluster identity 4711 [ 165.297494][T14391] tipc: New replicast peer: 255.255.255.255 [ 165.303654][T14391] tipc: Enabled bearer , priority 10 [ 165.425566][T14407] loop2: detected capacity change from 0 to 512 [ 165.437915][T14407] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.451214][T14407] ext4 filesystem being mounted at /527/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.498934][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.542654][T14426] loop5: detected capacity change from 0 to 512 [ 165.556430][T14426] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.576249][T14426] ext4 filesystem being mounted at /334/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.621080][ T6849] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.669544][T14454] loop5: detected capacity change from 0 to 512 [ 165.698026][T14454] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.710838][T14454] ext4 filesystem being mounted at /335/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 165.794955][ T6849] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.867781][T14473] loop2: detected capacity change from 0 to 512 [ 165.919267][T14473] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.932198][T14473] ext4 filesystem being mounted at /530/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.047744][T14490] loop5: detected capacity change from 0 to 512 [ 166.054609][T14490] EXT4-fs: Ignoring removed i_version option [ 166.066790][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.085972][T14490] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.2632: corrupted in-inode xattr: invalid ea_ino [ 166.100050][T14490] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2632: couldn't read orphan inode 15 (err -117) [ 166.116098][T14490] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.304326][ T3404] tipc: Node number set to 2886997007 [ 166.783028][T14519] loop3: detected capacity change from 0 to 512 [ 166.796174][T14519] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.808939][T14519] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.853155][T13788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.010117][T14515] loop2: detected capacity change from 0 to 1024 [ 167.047042][T14515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 167.095817][T14531] loop4: detected capacity change from 0 to 512 [ 167.118043][T14531] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.137278][T14531] ext4 filesystem being mounted at /520/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.274025][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.274639][ T6849] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.293162][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.317803][T14539] loop4: detected capacity change from 0 to 512 [ 167.336774][T14539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.349541][T14539] ext4 filesystem being mounted at /521/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.384167][T14547] loop5: detected capacity change from 0 to 512 [ 167.395210][T14547] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 167.403500][T14547] EXT4-fs (loop5): orphan cleanup on readonly fs [ 167.411437][T14547] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.2644: corrupted inode contents [ 167.423854][T14547] EXT4-fs (loop5): Remounting filesystem read-only [ 167.430703][T14547] EXT4-fs (loop5): 1 truncate cleaned up [ 167.436762][ T8492] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 167.447378][ T8492] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 167.459443][ T8492] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 167.471610][T14553] loop3: detected capacity change from 0 to 1024 [ 167.479448][T14553] EXT4-fs: Ignoring removed nobh option [ 167.482970][T14552] loop4: detected capacity change from 0 to 512 [ 167.485074][T14553] EXT4-fs: Ignoring removed bh option [ 167.500982][T14547] tipc: Started in network mode [ 167.505930][T14547] tipc: Node identity ac14140f, cluster identity 4711 [ 167.513069][T14547] tipc: New replicast peer: 255.255.255.83 [ 167.519088][T14547] tipc: Enabled bearer , priority 10 [ 167.531539][T14552] ext4 filesystem being mounted at /522/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.637238][T14538] loop2: detected capacity change from 0 to 1024 [ 167.927680][T14583] loop4: detected capacity change from 0 to 512 [ 167.958388][T14583] ext4 filesystem being mounted at /525/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.989178][T14589] loop2: detected capacity change from 0 to 512 [ 168.884322][ T5851] tipc: Node number set to 2886997007 [ 168.885517][T14589] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2648: bg 0: block 393: padding at end of block bitmap is not set [ 168.905127][T14589] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 168.914568][T14589] EXT4-fs (loop2): 2 truncates cleaned up [ 169.576807][T14685] loop5: detected capacity change from 0 to 512 [ 169.591837][T14685] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 169.602433][ T29] kauditd_printk_skb: 347 callbacks suppressed [ 169.602447][ T29] audit: type=1326 audit(1755018331.321:15768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14695 comm="syz.4.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd073b7ebe9 code=0x7ffc0000 [ 169.632336][ T29] audit: type=1326 audit(1755018331.321:15769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14695 comm="syz.4.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd073b7ebe9 code=0x7ffc0000 [ 169.656042][ T29] audit: type=1326 audit(1755018331.321:15770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14695 comm="syz.4.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd073b7ebe9 code=0x7ffc0000 [ 169.679750][ T29] audit: type=1326 audit(1755018331.321:15771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14695 comm="syz.4.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd073b7ebe9 code=0x7ffc0000 [ 169.703482][ T29] audit: type=1326 audit(1755018331.321:15772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14695 comm="syz.4.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd073b7ebe9 code=0x7ffc0000 [ 169.727215][ T29] audit: type=1326 audit(1755018331.331:15773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14695 comm="syz.4.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd073b7ebe9 code=0x7ffc0000 [ 169.751032][ T29] audit: type=1326 audit(1755018331.331:15774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14695 comm="syz.4.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd073b7ebe9 code=0x7ffc0000 [ 169.774673][ T29] audit: type=1326 audit(1755018331.331:15775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14695 comm="syz.4.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd073b7ebe9 code=0x7ffc0000 [ 169.798381][ T29] audit: type=1326 audit(1755018331.331:15776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14695 comm="syz.4.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd073b7ebe9 code=0x7ffc0000 [ 169.822168][ T29] audit: type=1326 audit(1755018331.331:15777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14695 comm="syz.4.2656" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd073b7ebe9 code=0x7ffc0000 [ 169.928772][T14713] loop2: detected capacity change from 0 to 1024 [ 169.941593][T14713] EXT4-fs: Ignoring removed bh option [ 169.951498][T14713] EXT4-fs: Ignoring removed nobh option [ 169.957379][T14713] EXT4-fs: inline encryption not supported [ 169.988514][T14713] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.2658: Allocating blocks 385-513 which overlap fs metadata [ 170.012459][T14713] EXT4-fs (loop2): pa ffff88810719bee0: logic 16, phys. 129, len 24 [ 170.020677][T14713] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 170.038739][T14713] netlink: 'syz.2.2658': attribute type 21 has an invalid length. [ 170.047541][T14713] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2658'. [ 170.108921][T14740] FAULT_INJECTION: forcing a failure. [ 170.108921][T14740] name failslab, interval 1, probability 0, space 0, times 0 [ 170.121694][T14740] CPU: 1 UID: 0 PID: 14740 Comm: syz.2.2665 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 170.121724][T14740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 170.121736][T14740] Call Trace: [ 170.121743][T14740] [ 170.121793][T14740] __dump_stack+0x1d/0x30 [ 170.121816][T14740] dump_stack_lvl+0xe8/0x140 [ 170.121837][T14740] dump_stack+0x15/0x1b [ 170.121855][T14740] should_fail_ex+0x265/0x280 [ 170.121915][T14740] should_failslab+0x8c/0xb0 [ 170.121935][T14740] __kvmalloc_node_noprof+0x123/0x4e0 [ 170.121960][T14740] ? alloc_netdev_mqs+0xa0/0xa20 [ 170.121980][T14740] ? vsnprintf+0x829/0x890 [ 170.122040][T14740] ? __pfx_vlan_setup+0x10/0x10 [ 170.122089][T14740] alloc_netdev_mqs+0xa0/0xa20 [ 170.122113][T14740] rtnl_create_link+0x239/0x710 [ 170.122210][T14740] rtnl_newlink_create+0x14c/0x620 [ 170.122245][T14740] ? security_capable+0x83/0x90 [ 170.122335][T14740] ? netlink_ns_capable+0x86/0xa0 [ 170.122360][T14740] rtnl_newlink+0xf29/0x12d0 [ 170.122464][T14740] ? __kfree_skb+0x109/0x150 [ 170.122481][T14740] ? __memcg_slab_free_hook+0x135/0x230 [ 170.122514][T14740] ? __rcu_read_unlock+0x4f/0x70 [ 170.122596][T14740] ? avc_has_perm_noaudit+0x1b1/0x200 [ 170.122619][T14740] ? cred_has_capability+0x210/0x280 [ 170.122645][T14740] ? selinux_capable+0x31/0x40 [ 170.122673][T14740] ? security_capable+0x83/0x90 [ 170.122692][T14740] ? ns_capable+0x7d/0xb0 [ 170.122712][T14740] ? __pfx_rtnl_newlink+0x10/0x10 [ 170.122745][T14740] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 170.122776][T14740] netlink_rcv_skb+0x120/0x220 [ 170.122822][T14740] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 170.122922][T14740] rtnetlink_rcv+0x1c/0x30 [ 170.122945][T14740] netlink_unicast+0x5c0/0x690 [ 170.122978][T14740] netlink_sendmsg+0x58b/0x6b0 [ 170.123001][T14740] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.123031][T14740] __sock_sendmsg+0x145/0x180 [ 170.123121][T14740] ____sys_sendmsg+0x345/0x4e0 [ 170.123146][T14740] ___sys_sendmsg+0x17b/0x1d0 [ 170.123182][T14740] __sys_sendmmsg+0x178/0x300 [ 170.123258][T14740] __x64_sys_sendmmsg+0x57/0x70 [ 170.123357][T14740] x64_sys_call+0x1c4a/0x2ff0 [ 170.123379][T14740] do_syscall_64+0xd2/0x200 [ 170.123442][T14740] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 170.123466][T14740] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 170.123536][T14740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.123606][T14740] RIP: 0033:0x7f77177aebe9 [ 170.123622][T14740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.123640][T14740] RSP: 002b:00007f7716217038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 170.123660][T14740] RAX: ffffffffffffffda RBX: 00007f77179d5fa0 RCX: 00007f77177aebe9 [ 170.123673][T14740] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 170.123687][T14740] RBP: 00007f7716217090 R08: 0000000000000000 R09: 0000000000000000 [ 170.123710][T14740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 170.123754][T14740] R13: 00007f77179d6038 R14: 00007f77179d5fa0 R15: 00007ffe2ae68a68 [ 170.123775][T14740] [ 170.434073][T14709] loop4: detected capacity change from 0 to 1024 [ 170.750287][T14753] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2670'. [ 170.759367][T14753] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2670'. [ 170.766544][T14752] loop4: detected capacity change from 0 to 512 [ 170.775728][T14753] bridge0: entered promiscuous mode [ 170.782423][T14753] bridge0: port 3(macsec1) entered blocking state [ 170.789251][T14753] bridge0: port 3(macsec1) entered disabled state [ 170.795963][T14753] macsec1: entered allmulticast mode [ 170.801266][T14753] bridge0: entered allmulticast mode [ 170.807325][T14753] macsec1: left allmulticast mode [ 170.812390][T14753] bridge0: left allmulticast mode [ 170.817939][T14753] bridge0: left promiscuous mode [ 170.893840][T14752] ext4 filesystem being mounted at /531/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.927776][T14769] loop5: detected capacity change from 0 to 1024 [ 170.934661][T14769] EXT4-fs: Ignoring removed bh option [ 170.940305][T14769] EXT4-fs: Ignoring removed nobh option [ 170.946089][T14769] EXT4-fs: inline encryption not supported [ 171.067786][T14765] loop3: detected capacity change from 0 to 736 [ 171.130917][T14765] rock: directory entry would overflow storage [ 171.137428][T14765] rock: sig=0x3b10, size=4, remaining=3 [ 171.818073][T14769] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.2675: Allocating blocks 385-513 which overlap fs metadata [ 171.852889][T14769] EXT4-fs (loop5): pa ffff888107248d20: logic 16, phys. 129, len 24 [ 171.861085][T14769] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 171.890814][T14769] netlink: 'syz.5.2675': attribute type 21 has an invalid length. [ 171.915671][T14769] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2675'. [ 171.931749][T14786] loop3: detected capacity change from 0 to 512 [ 171.956173][T14786] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.049277][T14794] loop4: detected capacity change from 0 to 512 [ 172.071567][T14794] ext4 filesystem being mounted at /533/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.213216][T14768] loop2: detected capacity change from 0 to 1024 [ 172.558371][T14826] loop4: detected capacity change from 0 to 512 [ 172.579771][T14826] netlink: 'syz.4.2690': attribute type 10 has an invalid length. [ 172.632645][T14826] bond0: (slave dummy0): Releasing backup interface [ 172.644414][T14831] netlink: 'syz.4.2690': attribute type 10 has an invalid length. [ 172.669296][T14826] team0: Port device dummy0 added [ 172.693233][T14831] team0: Port device dummy0 removed [ 172.709925][T14831] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 172.792948][T14844] loop4: detected capacity change from 0 to 512 [ 172.817088][T14844] ext4 filesystem being mounted at /538/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.906515][T14867] loop4: detected capacity change from 0 to 1024 [ 172.913465][T14867] EXT4-fs: Ignoring removed bh option [ 172.919022][T14867] EXT4-fs: Ignoring removed nobh option [ 172.924693][T14867] EXT4-fs: inline encryption not supported [ 172.993921][T14867] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.2694: Allocating blocks 385-513 which overlap fs metadata [ 173.009805][T14867] EXT4-fs (loop4): pa ffff88810719bc40: logic 16, phys. 129, len 24 [ 173.017878][T14867] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 173.034362][T14867] netlink: 'syz.4.2694': attribute type 21 has an invalid length. [ 173.043184][T14867] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2694'. [ 173.419583][T14920] loop4: detected capacity change from 0 to 512 [ 173.436728][T14920] ext4 filesystem being mounted at /541/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 173.798897][T14935] loop4: detected capacity change from 0 to 1024 [ 173.972008][T14997] loop4: detected capacity change from 0 to 512 [ 173.988797][T14997] netlink: 'syz.4.2701': attribute type 10 has an invalid length. [ 174.017048][T14997] bond0: (slave dummy0): Releasing backup interface [ 174.027144][T14997] team0: Port device dummy0 added [ 174.035439][T14997] netlink: 'syz.4.2701': attribute type 10 has an invalid length. [ 174.053696][T14997] team0: Port device dummy0 removed [ 174.061056][T14997] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 174.150626][T15013] loop4: detected capacity change from 0 to 736 [ 174.175058][T15013] rock: directory entry would overflow storage [ 174.181330][T15013] rock: sig=0x3b10, size=4, remaining=3 [ 174.276280][T15039] loop4: detected capacity change from 0 to 512 [ 174.299431][T15039] ext4 filesystem being mounted at /546/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.443894][T15064] loop4: detected capacity change from 0 to 512 [ 174.458209][T15064] ext4 filesystem being mounted at /548/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.609178][ T29] kauditd_printk_skb: 419 callbacks suppressed [ 174.609193][ T29] audit: type=1326 audit(1755018336.341:16197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15096 comm="syz.0.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77765bebe9 code=0x7ffc0000 [ 174.653425][ T29] audit: type=1326 audit(1755018336.371:16198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15091 comm="syz.4.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd073b7ebe9 code=0x7ffc0000 [ 174.677060][ T29] audit: type=1326 audit(1755018336.371:16199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15091 comm="syz.4.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd073b7ebe9 code=0x7ffc0000 [ 174.700691][ T29] audit: type=1326 audit(1755018336.371:16200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15091 comm="syz.4.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd073b7ebe9 code=0x7ffc0000 [ 174.724355][ T29] audit: type=1326 audit(1755018336.371:16201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15096 comm="syz.0.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77765bebe9 code=0x7ffc0000 [ 174.748057][ T29] audit: type=1326 audit(1755018336.371:16202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15096 comm="syz.0.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77765bebe9 code=0x7ffc0000 [ 174.771708][ T29] audit: type=1326 audit(1755018336.371:16203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15096 comm="syz.0.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77765bebe9 code=0x7ffc0000 [ 174.795435][ T29] audit: type=1326 audit(1755018336.371:16205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15096 comm="syz.0.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77765bebe9 code=0x7ffc0000 [ 174.819098][ T29] audit: type=1326 audit(1755018336.371:16204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15091 comm="syz.4.2711" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd073b7ebe9 code=0x7ffc0000 [ 174.842756][ T29] audit: type=1326 audit(1755018336.371:16207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15096 comm="syz.0.2712" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77765bebe9 code=0x7ffc0000 [ 175.368735][T15224] loop4: detected capacity change from 0 to 512 [ 175.430503][T15224] netlink: 'syz.4.2714': attribute type 10 has an invalid length. [ 175.446134][T15241] loop5: detected capacity change from 0 to 512 [ 175.453113][T15224] bond0: (slave dummy0): Releasing backup interface [ 175.463598][T15224] team0: Port device dummy0 added [ 175.481593][T15241] ext4 filesystem being mounted at /345/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.496236][T15224] netlink: 'syz.4.2714': attribute type 10 has an invalid length. [ 175.547610][T15224] team0: Port device dummy0 removed [ 175.570336][T15224] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 175.649671][T15238] loop3: detected capacity change from 0 to 736 [ 175.660664][T15257] loop4: detected capacity change from 0 to 512 [ 175.691238][T15257] ext4 filesystem being mounted at /552/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.716486][T15262] loop5: detected capacity change from 0 to 512 [ 175.728082][T15238] rock: directory entry would overflow storage [ 175.735219][T15238] rock: sig=0x3b10, size=4, remaining=3 [ 175.748926][T15262] ext4 filesystem being mounted at /346/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 175.880233][T15280] loop5: detected capacity change from 0 to 512 [ 175.908243][T15280] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.153765][T15294] loop3: detected capacity change from 0 to 1024 [ 176.228089][T15349] loop3: detected capacity change from 0 to 512 [ 176.257958][T15349] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.337207][T15363] loop3: detected capacity change from 0 to 512 [ 176.347828][T15363] netlink: 'syz.3.2728': attribute type 10 has an invalid length. [ 176.360589][T15363] team0: Port device dummy0 added [ 176.369527][T15363] netlink: 'syz.3.2728': attribute type 10 has an invalid length. [ 176.380841][T15363] team0: Port device dummy0 removed [ 176.390847][T15363] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 176.426815][T15373] loop3: detected capacity change from 0 to 512 [ 176.436378][T15373] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.515816][T15389] loop3: detected capacity change from 0 to 1024 [ 176.522815][T15389] EXT4-fs: Ignoring removed bh option [ 176.529372][T15389] EXT4-fs: Ignoring removed nobh option [ 176.535033][T15389] EXT4-fs: inline encryption not supported [ 176.549360][T15389] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.2730: Allocating blocks 385-513 which overlap fs metadata [ 176.564955][T15389] EXT4-fs (loop3): pa ffff88810719bd90: logic 16, phys. 129, len 24 [ 176.573104][T15389] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 176.588866][T15389] netlink: 'syz.3.2730': attribute type 21 has an invalid length. [ 176.597836][T15389] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2730'. [ 176.682097][T15418] loop3: detected capacity change from 0 to 512 [ 176.696146][T15418] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.763364][T15434] loop3: detected capacity change from 0 to 512 [ 176.781974][T15434] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.831099][T15425] loop4: detected capacity change from 0 to 736 [ 176.890076][T15425] rock: directory entry would overflow storage [ 176.899655][T15425] rock: sig=0x3b10, size=4, remaining=3 [ 177.355194][T15519] loop5: detected capacity change from 0 to 512 [ 177.372642][T15521] loop2: detected capacity change from 0 to 512 [ 177.389721][T15521] ext4 filesystem being mounted at /546/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.400802][T15519] ext4 filesystem being mounted at /349/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.530730][T15541] netlink: 'syz.0.2742': attribute type 21 has an invalid length. [ 177.550087][T15541] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2742'. [ 177.575045][T15475] loop4: detected capacity change from 0 to 1024 [ 177.585801][T15550] loop5: detected capacity change from 0 to 512 [ 177.601942][T15550] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2744: bg 0: block 393: padding at end of block bitmap is not set [ 177.618009][T15550] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 177.640761][T15550] EXT4-fs (loop5): 2 truncates cleaned up [ 177.739387][T15561] loop4: detected capacity change from 0 to 512 [ 177.777186][T15561] ext4 filesystem being mounted at /558/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.778643][T15563] loop5: detected capacity change from 0 to 512 [ 177.794417][T15563] EXT4-fs: dax option not supported [ 178.645822][T15687] loop3: detected capacity change from 0 to 512 [ 178.670898][T15687] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.688151][T15686] loop4: detected capacity change from 0 to 512 [ 178.706690][T15686] ext4 filesystem being mounted at /561/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.811592][T15703] loop3: detected capacity change from 0 to 512 [ 178.847388][T15703] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 179.177236][T15763] loop3: detected capacity change from 0 to 512 [ 179.226687][T15763] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.2764: bg 0: block 393: padding at end of block bitmap is not set [ 179.242120][T15763] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 179.251448][T15763] EXT4-fs (loop3): 2 truncates cleaned up [ 180.064981][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 180.064997][ T29] audit: type=1326 audit(1755018341.801:16415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15796 comm="syz.0.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77765bebe9 code=0x7ffc0000 [ 180.151883][ T29] audit: type=1326 audit(1755018341.841:16416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15796 comm="syz.0.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77765bebe9 code=0x7ffc0000 [ 180.175762][ T29] audit: type=1326 audit(1755018341.841:16417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15796 comm="syz.0.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77765bebe9 code=0x7ffc0000 [ 180.199780][ T29] audit: type=1326 audit(1755018341.841:16418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15796 comm="syz.0.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77765bebe9 code=0x7ffc0000 [ 180.223791][ T29] audit: type=1326 audit(1755018341.841:16419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15796 comm="syz.0.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77765bebe9 code=0x7ffc0000 [ 180.247922][ T29] audit: type=1326 audit(1755018341.841:16420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15796 comm="syz.0.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77765bebe9 code=0x7ffc0000 [ 180.271659][ T29] audit: type=1326 audit(1755018341.841:16421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15796 comm="syz.0.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77765bebe9 code=0x7ffc0000 [ 180.295570][ T29] audit: type=1326 audit(1755018341.841:16422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15796 comm="syz.0.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77765bebe9 code=0x7ffc0000 [ 180.319399][ T29] audit: type=1326 audit(1755018341.841:16423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15796 comm="syz.0.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77765bebe9 code=0x7ffc0000 [ 180.343575][ T29] audit: type=1326 audit(1755018341.841:16424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15796 comm="syz.0.2769" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f77765bebe9 code=0x7ffc0000 [ 180.673917][T15819] loop2: detected capacity change from 0 to 512 [ 180.696599][T15829] 9pnet_fd: Insufficient options for proto=fd [ 180.697449][T15819] ext4 filesystem being mounted at /550/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 180.778103][T15838] loop5: detected capacity change from 0 to 512 [ 180.797552][T15838] ext4 filesystem being mounted at /357/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.877253][T16006] loop4: detected capacity change from 0 to 1024 [ 182.884505][T16006] EXT4-fs: Ignoring removed bh option [ 182.894169][T16006] EXT4-fs: Ignoring removed nobh option [ 182.899987][T16006] EXT4-fs: inline encryption not supported [ 183.026815][T16006] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.2803: Allocating blocks 385-513 which overlap fs metadata [ 183.054115][T16006] EXT4-fs (loop4): pa ffff88810719bd90: logic 16, phys. 129, len 24 [ 183.062247][T16006] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 183.123493][T16024] loop5: detected capacity change from 0 to 512 [ 183.140194][T16024] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2805: bg 0: block 393: padding at end of block bitmap is not set [ 183.156555][T16024] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 183.165897][T16024] EXT4-fs (loop5): 2 truncates cleaned up [ 183.190981][T16025] netlink: 'syz.4.2803': attribute type 21 has an invalid length. [ 183.227904][T16002] loop3: detected capacity change from 0 to 736 [ 183.247243][T16030] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2803'. [ 183.384623][T16002] rock: directory entry would overflow storage [ 183.391011][T16002] rock: sig=0x3b10, size=4, remaining=3 [ 183.677659][T16039] FAULT_INJECTION: forcing a failure. [ 183.677659][T16039] name failslab, interval 1, probability 0, space 0, times 0 [ 183.690885][T16039] CPU: 1 UID: 0 PID: 16039 Comm: syz.3.2813 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 183.690912][T16039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 183.690922][T16039] Call Trace: [ 183.690946][T16039] [ 183.690955][T16039] __dump_stack+0x1d/0x30 [ 183.690977][T16039] dump_stack_lvl+0xe8/0x140 [ 183.690993][T16039] dump_stack+0x15/0x1b [ 183.691031][T16039] should_fail_ex+0x265/0x280 [ 183.691054][T16039] should_failslab+0x8c/0xb0 [ 183.691078][T16039] kmem_cache_alloc_node_noprof+0x57/0x320 [ 183.691186][T16039] ? __alloc_skb+0x101/0x320 [ 183.691218][T16039] __alloc_skb+0x101/0x320 [ 183.691249][T16039] netlink_ack+0xfd/0x500 [ 183.691288][T16039] netlink_rcv_skb+0x192/0x220 [ 183.691303][T16039] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 183.691358][T16039] rtnetlink_rcv+0x1c/0x30 [ 183.691376][T16039] netlink_unicast+0x5c0/0x690 [ 183.691404][T16039] netlink_sendmsg+0x58b/0x6b0 [ 183.691423][T16039] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.691524][T16039] __sock_sendmsg+0x145/0x180 [ 183.691551][T16039] ____sys_sendmsg+0x31e/0x4e0 [ 183.691612][T16039] ___sys_sendmsg+0x17b/0x1d0 [ 183.691649][T16039] __x64_sys_sendmsg+0xd4/0x160 [ 183.691676][T16039] x64_sys_call+0x191e/0x2ff0 [ 183.691696][T16039] do_syscall_64+0xd2/0x200 [ 183.691732][T16039] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 183.691847][T16039] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 183.691916][T16039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.691934][T16039] RIP: 0033:0x7f02e1c0ebe9 [ 183.691948][T16039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.691962][T16039] RSP: 002b:00007f02e066f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.692026][T16039] RAX: ffffffffffffffda RBX: 00007f02e1e35fa0 RCX: 00007f02e1c0ebe9 [ 183.692071][T16039] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 183.692138][T16039] RBP: 00007f02e066f090 R08: 0000000000000000 R09: 0000000000000000 [ 183.692151][T16039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 183.692164][T16039] R13: 00007f02e1e36038 R14: 00007f02e1e35fa0 R15: 00007ffe040eab08 [ 183.692185][T16039] [ 184.853738][T16055] loop5: detected capacity change from 0 to 512 [ 184.919007][T16055] ext4 filesystem being mounted at /360/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.218793][ T29] kauditd_printk_skb: 200 callbacks suppressed [ 185.218808][ T29] audit: type=1326 audit(1755018346.951:16625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16108 comm="syz.4.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd073b7ebe9 code=0x7ffc0000 [ 185.249341][ T29] audit: type=1326 audit(1755018346.951:16626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16108 comm="syz.4.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd073b7ebe9 code=0x7ffc0000 [ 185.285848][ T29] audit: type=1326 audit(1755018346.991:16627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16108 comm="syz.4.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd073b7ebe9 code=0x7ffc0000 [ 185.309798][ T29] audit: type=1326 audit(1755018346.991:16628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16108 comm="syz.4.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd073b7ebe9 code=0x7ffc0000 [ 185.333647][ T29] audit: type=1326 audit(1755018346.991:16629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16108 comm="syz.4.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd073b7ebe9 code=0x7ffc0000 [ 185.357470][ T29] audit: type=1326 audit(1755018346.991:16630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16108 comm="syz.4.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd073b7ebe9 code=0x7ffc0000 [ 185.381207][ T29] audit: type=1326 audit(1755018346.991:16631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16108 comm="syz.4.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd073b7ebe9 code=0x7ffc0000 [ 185.382892][T16082] loop5: detected capacity change from 0 to 1024 [ 185.405153][ T29] audit: type=1326 audit(1755018346.991:16632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16108 comm="syz.4.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd073b7ebe9 code=0x7ffc0000 [ 185.405215][ T29] audit: type=1326 audit(1755018346.991:16633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16108 comm="syz.4.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd073b7ebe9 code=0x7ffc0000 [ 185.405241][ T29] audit: type=1326 audit(1755018346.991:16634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16108 comm="syz.4.2821" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd073b7ebe9 code=0x7ffc0000 [ 185.502327][T16127] loop5: detected capacity change from 0 to 1024 [ 185.509965][T16127] EXT4-fs: Ignoring removed bh option [ 185.519786][T16127] EXT4-fs: Ignoring removed nobh option [ 185.525448][T16127] EXT4-fs: inline encryption not supported [ 185.560083][T16127] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.2822: Allocating blocks 385-513 which overlap fs metadata [ 185.583701][T16127] EXT4-fs (loop5): pa ffff88810719bc40: logic 16, phys. 129, len 24 [ 185.591752][T16127] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 185.603450][T16148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2826'. [ 185.612699][T16148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2826'. [ 185.640139][T16148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2826'. [ 185.648417][T16127] netlink: 'syz.5.2822': attribute type 21 has an invalid length. [ 185.649930][T16148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2826'. [ 185.659802][T16127] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2822'. [ 185.695580][T16156] usb usb8: usbfs: process 16156 (syz.4.2826) did not claim interface 0 before use [ 185.704361][T16148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2826'. [ 185.713923][T16148] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2826'. [ 186.263875][T16183] loop2: detected capacity change from 0 to 512 [ 186.290744][T16183] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2828: bg 0: block 393: padding at end of block bitmap is not set [ 186.311487][T16183] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 186.323490][T16183] EXT4-fs (loop2): 2 truncates cleaned up [ 187.738228][T16222] loop2: detected capacity change from 0 to 512 [ 187.756587][T16222] ext4 filesystem being mounted at /555/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 187.856813][T16235] loop3: detected capacity change from 0 to 512 [ 187.886216][T16235] netlink: 'syz.3.2840': attribute type 10 has an invalid length. [ 187.919807][ T3308] EXT4-fs unmount: 94 callbacks suppressed [ 187.919824][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 187.941928][T16235] bond0: (slave dummy0): Releasing backup interface [ 187.950304][T16240] netlink: 'syz.3.2840': attribute type 10 has an invalid length. [ 187.972630][T16235] team0: Port device dummy0 added [ 187.992607][T16240] team0: Port device dummy0 removed [ 188.002389][T16240] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 190.325168][T16384] loop3: detected capacity change from 0 to 32768 [ 190.333684][ T29] kauditd_printk_skb: 53 callbacks suppressed [ 190.333696][ T29] audit: type=1400 audit(1755018352.061:16688): avc: denied { create } for pid=16381 comm="syz.3.2850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 190.374783][ T29] audit: type=1400 audit(1755018352.101:16689): avc: denied { write } for pid=16381 comm="syz.3.2850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 190.395199][ T29] audit: type=1400 audit(1755018352.101:16690): avc: denied { nlmsg_write } for pid=16381 comm="syz.3.2850" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 190.416222][ T29] audit: type=1326 audit(1755018352.101:16691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16399 comm="syz.0.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77765bebe9 code=0x7ffc0000 [ 190.440063][ T29] audit: type=1326 audit(1755018352.101:16692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16399 comm="syz.0.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77765bebe9 code=0x7ffc0000 [ 190.463775][ T29] audit: type=1326 audit(1755018352.101:16693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16399 comm="syz.0.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f77765bebe9 code=0x7ffc0000 [ 190.470613][T16402] loop4: detected capacity change from 0 to 512 [ 190.487463][ T29] audit: type=1326 audit(1755018352.101:16694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16399 comm="syz.0.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77765bebe9 code=0x7ffc0000 [ 190.517602][ T29] audit: type=1326 audit(1755018352.101:16695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16399 comm="syz.0.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77765bebe9 code=0x7ffc0000 [ 190.527346][T16402] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.541186][ T29] audit: type=1326 audit(1755018352.101:16696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16399 comm="syz.0.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77765bebe9 code=0x7ffc0000 [ 190.553897][T16402] ext4 filesystem being mounted at /581/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.577607][ T29] audit: type=1326 audit(1755018352.101:16697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16399 comm="syz.0.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77765bebe9 code=0x7ffc0000 [ 190.624759][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.641381][T16384] loop3: p1 p2 p3 < p5 p6 p7 > [ 190.647749][T16384] loop3: p2 size 16775168 extends beyond EOD, truncated [ 190.665389][T16412] loop4: detected capacity change from 0 to 512 [ 190.671925][T16384] loop3: p5 start 4294970168 is beyond EOD, truncated [ 190.683794][T16412] netlink: 'syz.4.2855': attribute type 10 has an invalid length. [ 190.705939][T16412] bond0: (slave dummy0): Releasing backup interface [ 190.725306][T16412] team0: Port device dummy0 added [ 190.744179][T16412] netlink: 'syz.4.2855': attribute type 10 has an invalid length. [ 190.765497][T16412] team0: Port device dummy0 removed [ 190.772583][T16412] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 190.803949][T16416] loop3: detected capacity change from 0 to 512 [ 190.830233][T16416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.862790][T16416] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.002250][T13788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.120326][T16445] loop4: detected capacity change from 0 to 512 [ 191.143859][T16445] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.2863: bg 0: block 393: padding at end of block bitmap is not set [ 191.159756][T16445] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 191.170192][T16445] EXT4-fs (loop4): 2 truncates cleaned up [ 191.176489][T16445] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.191888][T16445] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.509579][T16424] loop2: detected capacity change from 0 to 736 [ 191.660570][T16449] loop5: detected capacity change from 0 to 1024 [ 191.714565][T16449] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 192.512434][T16457] loop3: detected capacity change from 0 to 512 [ 192.537324][T16424] rock: directory entry would overflow storage [ 192.543761][T16424] rock: sig=0x3b10, size=4, remaining=3 [ 192.552227][T16457] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.576117][T16457] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.654684][T13788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.680535][ T6849] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.772417][T16463] loop4: detected capacity change from 0 to 512 [ 192.808190][T16468] loop3: detected capacity change from 0 to 512 [ 192.826726][T16463] netlink: 'syz.4.2869': attribute type 10 has an invalid length. [ 192.845678][T16463] bond0: (slave dummy0): Releasing backup interface [ 192.851339][T16468] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.865022][T16468] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.878308][T16463] team0: Port device dummy0 added [ 192.883983][T16477] netlink: 'syz.4.2869': attribute type 10 has an invalid length. [ 192.913237][T16477] team0: Port device dummy0 removed [ 192.939891][T16477] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 192.953736][T13788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.083477][T16495] loop4: detected capacity change from 0 to 512 [ 193.122488][T16495] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.141176][T16495] ext4 filesystem being mounted at /587/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.160707][T16506] netlink: 'syz.3.2876': attribute type 13 has an invalid length. [ 193.168583][T16506] netlink: 'syz.3.2876': attribute type 17 has an invalid length. [ 193.257790][T16506] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 193.289958][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.352818][T16521] loop3: detected capacity change from 0 to 512 [ 193.369999][T16521] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.774930][T16521] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.847403][T13788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.100844][T16547] loop3: detected capacity change from 0 to 1024 [ 194.137562][T16547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 194.190028][T13788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.293995][T16610] loop4: detected capacity change from 0 to 512 [ 194.320367][T16610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.341865][T16610] ext4 filesystem being mounted at /590/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.370465][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.404119][T16624] loop4: detected capacity change from 0 to 136 [ 194.420783][T16624] Attempt to read inode for relocated directory [ 194.489987][T16635] loop4: detected capacity change from 0 to 512 [ 194.513757][T16635] netlink: 'syz.4.2885': attribute type 10 has an invalid length. [ 194.534663][T16635] bond0: (slave dummy0): Releasing backup interface [ 194.554245][T16635] team0: Port device dummy0 added [ 194.566485][T16642] netlink: 'syz.4.2885': attribute type 10 has an invalid length. [ 194.591463][T16642] team0: Port device dummy0 removed [ 194.600599][T16604] loop3: detected capacity change from 0 to 736 [ 194.610399][T16642] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 194.660806][T16648] loop4: detected capacity change from 0 to 512 [ 194.672174][T16604] rock: directory entry would overflow storage [ 194.679372][T16604] rock: sig=0x3b10, size=4, remaining=3 [ 194.694825][T16648] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.720806][T16648] ext4 filesystem being mounted at /593/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.835715][T16660] loop3: detected capacity change from 0 to 512 [ 194.848691][T16662] loop5: detected capacity change from 0 to 512 [ 194.857201][T16660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.869849][T16660] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.882992][T16662] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.896652][T16662] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.917393][T13788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.951717][ T6849] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.275001][T16670] loop5: detected capacity change from 0 to 1024 [ 195.348253][T16670] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.379561][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 195.379577][ T29] audit: type=1326 audit(1755018357.101:16994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16669 comm="syz.5.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe0f642d550 code=0x7ffc0000 [ 195.409867][ T29] audit: type=1326 audit(1755018357.101:16995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16669 comm="syz.5.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fe0f642d937 code=0x7ffc0000 [ 195.433361][ T29] audit: type=1326 audit(1755018357.101:16996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16669 comm="syz.5.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe0f642d550 code=0x7ffc0000 [ 195.459003][T16679] loop2: detected capacity change from 0 to 512 [ 195.459561][ T29] audit: type=1326 audit(1755018357.111:16997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16669 comm="syz.5.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f642ebe9 code=0x7ffc0000 [ 195.488925][ T29] audit: type=1326 audit(1755018357.111:16998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16669 comm="syz.5.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f642ebe9 code=0x7ffc0000 [ 195.512639][ T29] audit: type=1326 audit(1755018357.131:16999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16669 comm="syz.5.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fe0f642ebe9 code=0x7ffc0000 [ 195.536076][ T29] audit: type=1326 audit(1755018357.131:17000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16669 comm="syz.5.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f642ebe9 code=0x7ffc0000 [ 195.559699][ T29] audit: type=1326 audit(1755018357.131:17001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16669 comm="syz.5.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0f642ebe9 code=0x7ffc0000 [ 195.564009][T16679] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.583373][ T29] audit: type=1326 audit(1755018357.131:17002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16669 comm="syz.5.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0f642ebe9 code=0x7ffc0000 [ 195.596972][T16679] ext4 filesystem being mounted at /560/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.619528][ T29] audit: type=1326 audit(1755018357.131:17003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16669 comm="syz.5.2891" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe0f642ebe9 code=0x7ffc0000 [ 195.656386][ T6849] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.656810][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.690853][T16686] loop4: detected capacity change from 0 to 512 [ 195.713701][T16686] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.728451][T16686] ext4 filesystem being mounted at /594/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.741204][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.764749][T16695] loop2: detected capacity change from 0 to 512 [ 195.783722][T16695] netlink: 'syz.2.2897': attribute type 10 has an invalid length. [ 195.794167][T16695] $Hÿ: (slave dummy0): Releasing backup interface [ 195.807669][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.817076][T16695] dummy0: left promiscuous mode [ 195.824586][T16700] netlink: 'syz.0.2896': attribute type 13 has an invalid length. [ 195.825555][T16695] team0: Port device dummy0 added [ 195.832674][T16700] netlink: 'syz.0.2896': attribute type 17 has an invalid length. [ 195.849067][T16702] netlink: 'syz.2.2897': attribute type 10 has an invalid length. [ 195.858046][T16703] loop3: detected capacity change from 0 to 512 [ 195.878951][T16703] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.891890][T16703] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 195.906345][T16700] bridge0: port 3(macvlan2) entered blocking state [ 195.913011][T16700] bridge0: port 3(macvlan2) entered forwarding state [ 195.922102][T16700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.930925][T16700] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.941317][T16700] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 195.958590][T13788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 195.968708][T16702] team0: Port device dummy0 removed [ 195.975920][T16702] dummy0: entered promiscuous mode [ 195.981537][T16702] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 196.093661][T16705] loop4: detected capacity change from 0 to 736 [ 196.123366][T16705] rock: directory entry would overflow storage [ 196.129745][T16705] rock: sig=0x3b10, size=4, remaining=3 [ 196.251538][T16741] loop4: detected capacity change from 0 to 512 [ 196.289590][T16741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.310162][T16741] ext4 filesystem being mounted at /596/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.399054][T16716] loop2: detected capacity change from 0 to 1024 [ 196.446675][T16716] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.524047][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.654083][T16790] loop2: detected capacity change from 0 to 512 [ 196.686528][T16790] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.700822][T16790] ext4 filesystem being mounted at /564/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.749071][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.774132][T16804] loop2: detected capacity change from 0 to 512 [ 196.790617][T16804] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.804196][T16804] ext4 filesystem being mounted at /565/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.886464][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.229354][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.285979][T16837] loop2: detected capacity change from 0 to 512 [ 197.295612][T16837] netlink: 'syz.2.2916': attribute type 10 has an invalid length. [ 197.310008][T16837] $Hÿ: (slave dummy0): Releasing backup interface [ 197.318317][T16837] dummy0: left promiscuous mode [ 197.325263][T16837] team0: Port device dummy0 added [ 197.332089][T16837] netlink: 'syz.2.2916': attribute type 10 has an invalid length. [ 197.342856][T16837] team0: Port device dummy0 removed [ 197.350318][T16837] dummy0: entered promiscuous mode [ 197.355785][T16837] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 197.686411][T16850] loop2: detected capacity change from 0 to 736 [ 197.741841][T16850] rock: directory entry would overflow storage [ 197.750160][T16850] rock: sig=0x3b10, size=4, remaining=3 [ 198.088534][T16948] loop2: detected capacity change from 0 to 512 [ 198.116755][T16948] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.147263][T16948] ext4 filesystem being mounted at /569/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.159198][ T8504] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.211988][ T8504] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.263345][ T8504] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.328738][ T8504] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.360826][T16941] chnl_net:caif_netlink_parms(): no params data found [ 198.452320][ T8504] bridge_slave_1: left allmulticast mode [ 198.458082][ T8504] bridge_slave_1: left promiscuous mode [ 198.463763][ T8504] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.477530][ T8504] bridge_slave_0: left allmulticast mode [ 198.483404][ T8504] bridge_slave_0: left promiscuous mode [ 198.489413][ T8504] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.667678][ T8504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.678827][ T8504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.698831][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.708614][ T8504] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 198.727156][ T8504] bond0 (unregistering): Released all slaves [ 198.760581][T16941] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.767809][T16941] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.780279][T16941] bridge_slave_0: entered allmulticast mode [ 198.787005][T16941] bridge_slave_0: entered promiscuous mode [ 198.796638][ T8504] hsr_slave_0: left promiscuous mode [ 198.802339][ T8504] hsr_slave_1: left promiscuous mode [ 198.808042][ T8504] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.815466][ T8504] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.823234][ T8504] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.830777][ T8504] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.847125][ T8504] veth1_macvtap: left promiscuous mode [ 198.854390][ T8504] veth0_macvtap: left promiscuous mode [ 198.859899][ T8504] veth1_vlan: left promiscuous mode [ 198.866476][ T8504] veth0_vlan: left promiscuous mode [ 199.342902][ T8504] team0 (unregistering): Port device team_slave_1 removed [ 199.368867][ T8504] team0 (unregistering): Port device team_slave_0 removed [ 199.400932][T16941] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.408123][T16941] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.415862][T16941] bridge_slave_1: entered allmulticast mode [ 199.422428][T16941] bridge_slave_1: entered promiscuous mode [ 199.474441][T16941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.490579][T16941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.557504][T17076] loop5: detected capacity change from 0 to 512 [ 199.648279][T17076] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2931: bg 0: block 393: padding at end of block bitmap is not set [ 199.663286][T17076] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 199.672710][T17076] EXT4-fs (loop5): 2 truncates cleaned up [ 199.679114][T17076] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.693414][T17076] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.772963][T17065] loop3: detected capacity change from 0 to 1024 [ 199.832911][T16941] team0: Port device team_slave_0 added [ 199.844839][T17082] loop2: detected capacity change from 0 to 512 [ 199.891456][T16941] team0: Port device team_slave_1 added [ 199.981860][T16941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.988872][T16941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.015070][T16941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 200.121270][T17082] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.219355][T17082] ext4 filesystem being mounted at /572/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.246744][T16941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 200.253720][T16941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 200.279799][T16941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 200.333617][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.354870][T17089] loop3: detected capacity change from 0 to 736 [ 200.432444][T17089] rock: directory entry would overflow storage [ 200.439314][T17089] rock: sig=0x3b10, size=4, remaining=3 [ 200.462768][T16941] hsr_slave_0: entered promiscuous mode [ 200.473064][T16941] hsr_slave_1: entered promiscuous mode [ 200.486651][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 200.486665][ T29] audit: type=1326 audit(1755018362.221:17189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17083 comm="syz.3.2935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f02e1c0d550 code=0x7ffc0000 [ 200.580237][T17097] loop2: detected capacity change from 0 to 512 [ 200.596430][T17095] netlink: 'syz.0.2938': attribute type 21 has an invalid length. [ 200.628952][ T29] audit: type=1326 audit(1755018362.261:17190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17083 comm="syz.3.2935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f02e1c0d937 code=0x7ffc0000 [ 200.652700][ T29] audit: type=1326 audit(1755018362.261:17191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17083 comm="syz.3.2935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f02e1c0d550 code=0x7ffc0000 [ 200.676539][ T29] audit: type=1326 audit(1755018362.261:17192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17083 comm="syz.3.2935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02e1c0ebe9 code=0x7ffc0000 [ 200.700211][ T29] audit: type=1326 audit(1755018362.261:17193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17083 comm="syz.3.2935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02e1c0ebe9 code=0x7ffc0000 [ 200.756320][T17095] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2938'. [ 200.826149][T17097] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.859162][T17097] ext4 filesystem being mounted at /573/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.930163][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.128155][T16941] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 201.147446][T16941] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 201.616536][T16941] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 201.636966][T16941] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 201.763469][T16941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.796216][T16941] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.806135][ T29] audit: type=1326 audit(1755018363.531:17194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17176 comm="syz.0.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77765bebe9 code=0x7ffc0000 [ 201.829893][ T29] audit: type=1326 audit(1755018363.531:17195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17176 comm="syz.0.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77765bebe9 code=0x7ffc0000 [ 201.853761][ T29] audit: type=1326 audit(1755018363.531:17196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17176 comm="syz.0.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f77765bebe9 code=0x7ffc0000 [ 201.877498][ T29] audit: type=1326 audit(1755018363.531:17197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17176 comm="syz.0.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77765bebe9 code=0x7ffc0000 [ 201.901094][ T29] audit: type=1326 audit(1755018363.531:17198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17176 comm="syz.0.2944" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77765bebe9 code=0x7ffc0000 [ 201.930876][ T8516] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.938075][ T8516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.952461][ T8516] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.959611][ T8516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.976990][T17187] loop2: detected capacity change from 0 to 512 [ 201.992559][T16941] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 202.003109][T16941] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 202.022593][T17187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.040308][T17187] ext4 filesystem being mounted at /577/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.128456][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.177027][T16941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.292919][T17197] loop5: detected capacity change from 0 to 1024 [ 202.351963][T17197] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.395194][T17209] loop2: detected capacity change from 0 to 1024 [ 202.439878][T16941] veth0_vlan: entered promiscuous mode [ 202.461080][T16941] veth1_vlan: entered promiscuous mode [ 202.491849][T17251] loop2: detected capacity change from 0 to 512 [ 202.511351][T16941] veth0_macvtap: entered promiscuous mode [ 202.521081][T17251] netlink: 'syz.2.2950': attribute type 10 has an invalid length. [ 202.530848][T16941] veth1_macvtap: entered promiscuous mode [ 202.539386][T17251] $Hÿ: (slave dummy0): Releasing backup interface [ 202.546705][T17251] dummy0: left promiscuous mode [ 202.553638][T17251] team0: Port device dummy0 added [ 202.561442][T17251] netlink: 'syz.2.2950': attribute type 10 has an invalid length. [ 202.576722][T16941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.592986][T17251] team0: Port device dummy0 removed [ 202.602613][T17251] dummy0: entered promiscuous mode [ 202.608567][T17251] $Hÿ: (slave dummy0): Enslaving as an active interface with an up link [ 202.619495][T16941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.644133][ T8497] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.685607][ T6849] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.686882][T17275] loop2: detected capacity change from 0 to 512 [ 202.704739][ T8526] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.725605][ T8526] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.739060][T17275] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 202.761753][ T8526] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.762211][T17275] ext4 filesystem being mounted at /580/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 202.771474][T17279] loop5: detected capacity change from 0 to 1024 [ 202.811041][T17279] EXT4-fs: Ignoring removed bh option [ 202.818629][T17279] EXT4-fs: Ignoring removed nobh option [ 202.824288][T17279] EXT4-fs: inline encryption not supported [ 202.836526][T17279] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 202.861289][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 202.876664][T17279] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.2955: Allocating blocks 385-513 which overlap fs metadata [ 202.902204][T17279] EXT4-fs (loop5): pa ffff888107248a80: logic 16, phys. 129, len 24 [ 202.910563][T17279] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 202.956709][T17279] netlink: 'syz.5.2955': attribute type 21 has an invalid length. [ 202.972191][T17279] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2955'. [ 203.012372][T17311] loop2: detected capacity change from 0 to 512 [ 203.019565][ T6849] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.062939][T17311] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.076002][T17311] ext4 filesystem being mounted at /583/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.312945][T17332] loop5: detected capacity change from 0 to 512 [ 203.324137][T17332] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.2960: bg 0: block 393: padding at end of block bitmap is not set [ 203.338961][T17332] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 203.348226][T17332] EXT4-fs (loop5): 2 truncates cleaned up [ 203.354537][T17332] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.369540][T17332] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.381992][ T8595] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.393333][ T3308] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.455753][ T8595] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.516352][ T8595] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.596306][ T8595] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.623021][T17300] loop4: detected capacity change from 0 to 1024 [ 203.711239][T17300] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.728151][ T8595] macvlan2: left promiscuous mode [ 203.733194][ T8595] bond0: left promiscuous mode [ 203.738048][ T8595] bond_slave_0: left promiscuous mode [ 203.743492][ T8595] bond_slave_1: left promiscuous mode [ 203.783998][ T8595] bridge0: port 3(macvlan2) entered disabled state [ 203.817205][ T8595] bridge_slave_1: left allmulticast mode [ 203.822990][ T8595] bridge_slave_1: left promiscuous mode [ 203.828765][ T8595] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.839544][ T8595] bridge_slave_0: left allmulticast mode [ 203.845294][ T8595] bridge_slave_0: left promiscuous mode [ 203.851030][ T8595] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.893236][T17342] loop3: detected capacity change from 0 to 512 [ 203.903066][ T8595] dummy0: left promiscuous mode [ 203.911820][T17342] netlink: 'syz.3.2964': attribute type 10 has an invalid length. [ 203.962887][T17343] netlink: 'syz.3.2964': attribute type 10 has an invalid length. [ 204.006190][ T8595] bond0 (unregistering): left allmulticast mode [ 204.012455][ T8595] bond_slave_0: left allmulticast mode [ 204.017955][ T8595] bond_slave_1: left allmulticast mode [ 204.025750][ T8595] dummy0: left allmulticast mode [ 204.034498][ T8595] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 204.044026][ T8595] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 204.056326][ T8595] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 204.066401][ T8595] bond0 (unregistering): Released all slaves [ 204.111534][T17342] bond0: (slave dummy0): Releasing backup interface [ 204.121918][T17342] team0: Port device dummy0 added [ 204.134134][T17343] team0: Port device dummy0 removed [ 204.142592][T17343] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 204.172278][ T8595] tipc: Disabling bearer [ 204.177570][ T8595] tipc: Left network mode [ 204.276448][ T8595] hsr_slave_0: left promiscuous mode [ 204.312680][ T8595] hsr_slave_1: left promiscuous mode [ 204.517033][ T8595] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.527400][T17351] loop3: detected capacity change from 0 to 512 [ 204.546126][ T8595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.553666][T17355] loop4: detected capacity change from 0 to 512 [ 204.573015][T17351] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.596950][T17355] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.692979][T17367] loop2: detected capacity change from 0 to 512 [ 204.706700][ T8595] team0 (unregistering): Port device team_slave_1 removed [ 204.718131][T17367] ext4 filesystem being mounted at /587/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.724769][ T8595] team0 (unregistering): Port device team_slave_0 removed [ 204.806914][T17327] chnl_net:caif_netlink_parms(): no params data found [ 204.917320][T17383] loop2: detected capacity change from 0 to 512 [ 204.927945][T17383] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 204.951038][T17383] EXT4-fs (loop2): 1 truncate cleaned up [ 204.961559][T17327] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.969007][T17327] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.969790][T17364] loop5: detected capacity change from 0 to 736 [ 204.987369][T17327] bridge_slave_0: entered allmulticast mode [ 204.993909][T17327] bridge_slave_0: entered promiscuous mode [ 205.000723][T17327] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.007923][T17327] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.015343][T17327] bridge_slave_1: entered allmulticast mode [ 205.022113][T17327] bridge_slave_1: entered promiscuous mode [ 205.031598][T17364] rock: directory entry would overflow storage [ 205.039010][T17364] rock: sig=0x3b10, size=4, remaining=3 [ 205.063527][T17327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.085608][T17327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.095553][T17395] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2978'. [ 205.222443][ T8595] IPVS: stop unused estimator thread 0... [ 205.241908][T17327] team0: Port device team_slave_0 added [ 205.250915][T17327] team0: Port device team_slave_1 added [ 205.290654][T17327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.297745][T17327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.324079][T17327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.354334][T17401] loop2: detected capacity change from 0 to 512 [ 205.369669][T17327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.376667][T17327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.402610][T17327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.458125][T17404] bridge: RTM_NEWNEIGH with invalid ether address [ 205.468644][T17401] ext4 filesystem being mounted at /592/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.509764][T17327] hsr_slave_0: entered promiscuous mode [ 205.518942][T17327] hsr_slave_1: entered promiscuous mode [ 205.524983][T17327] debugfs: 'hsr0' already exists in 'hsr' [ 205.530728][T17327] Cannot create hsr debugfs directory [ 205.537732][T17413] netlink: 'syz.5.2983': attribute type 10 has an invalid length. [ 205.555110][T17413] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 205.602111][ T29] kauditd_printk_skb: 293 callbacks suppressed [ 205.602148][ T29] audit: type=1400 audit(1755018367.331:17492): avc: denied { nlmsg_read } for pid=17417 comm="syz.4.2985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 205.652809][ T29] audit: type=1326 audit(1755018367.381:17493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17425 comm="syz.2.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77177aebe9 code=0x7ffc0000 [ 205.680024][ T29] audit: type=1326 audit(1755018367.381:17494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17425 comm="syz.2.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f77177ad550 code=0x7ffc0000 [ 205.703961][ T29] audit: type=1326 audit(1755018367.381:17495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17425 comm="syz.2.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f77177b0417 code=0x7ffc0000 [ 205.727927][ T29] audit: type=1326 audit(1755018367.381:17496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17425 comm="syz.2.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f77177aebe9 code=0x7ffc0000 [ 205.751899][ T29] audit: type=1326 audit(1755018367.381:17497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17425 comm="syz.2.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f77177b0417 code=0x7ffc0000 [ 205.775791][ T29] audit: type=1326 audit(1755018367.381:17498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17425 comm="syz.2.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f77177ad84a code=0x7ffc0000 [ 205.799271][ T29] audit: type=1326 audit(1755018367.381:17499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17425 comm="syz.2.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77177aebe9 code=0x7ffc0000 [ 205.823395][ T29] audit: type=1326 audit(1755018367.381:17500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17425 comm="syz.2.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f77177aebe9 code=0x7ffc0000 [ 205.847138][ T29] audit: type=1326 audit(1755018367.381:17501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17425 comm="syz.2.2987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f77177aebe9 code=0x7ffc0000 [ 205.948932][T17431] loop4: detected capacity change from 0 to 736 [ 205.969826][T17439] loop2: detected capacity change from 0 to 1024 [ 205.984769][T17439] EXT4-fs: Ignoring removed bh option [ 205.994363][T17439] EXT4-fs: Ignoring removed nobh option [ 205.999940][T17439] EXT4-fs: inline encryption not supported [ 206.018035][T17431] rock: directory entry would overflow storage [ 206.024608][T17431] rock: sig=0x3b10, size=4, remaining=3 [ 206.033372][T17442] loop3: detected capacity change from 0 to 512 [ 206.051650][T17439] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.2992: Allocating blocks 385-513 which overlap fs metadata [ 206.073750][T17439] EXT4-fs (loop2): pa ffff888107248a80: logic 16, phys. 129, len 24 [ 206.081885][T17439] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 206.096489][T17442] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 206.111686][T17439] netlink: 'syz.2.2992': attribute type 21 has an invalid length. [ 206.133138][T17439] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2992'. [ 206.151335][T17327] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 206.160485][T17327] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 206.175722][T17327] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 206.185117][T17327] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 206.255525][T17327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.268538][T17327] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.286301][ T8526] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.293469][ T8526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.313983][ T8504] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.321062][ T8504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.374801][T17456] FAULT_INJECTION: forcing a failure. [ 206.374801][T17456] name failslab, interval 1, probability 0, space 0, times 0 [ 206.387493][T17456] CPU: 1 UID: 0 PID: 17456 Comm: syz.3.2996 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 206.387525][T17456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 206.387598][T17456] Call Trace: [ 206.387605][T17456] [ 206.387614][T17456] __dump_stack+0x1d/0x30 [ 206.387638][T17456] dump_stack_lvl+0xe8/0x140 [ 206.387658][T17456] dump_stack+0x15/0x1b [ 206.387676][T17456] should_fail_ex+0x265/0x280 [ 206.387727][T17456] ? do_mq_timedreceive+0x23c/0x6d0 [ 206.387749][T17456] should_failslab+0x8c/0xb0 [ 206.387788][T17456] __kmalloc_cache_noprof+0x4c/0x320 [ 206.387818][T17456] do_mq_timedreceive+0x23c/0x6d0 [ 206.387847][T17456] __x64_sys_mq_timedreceive+0xc6/0x160 [ 206.387871][T17456] x64_sys_call+0x2906/0x2ff0 [ 206.387917][T17456] do_syscall_64+0xd2/0x200 [ 206.387939][T17456] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 206.387963][T17456] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 206.387987][T17456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.388025][T17456] RIP: 0033:0x7f02e1c0ebe9 [ 206.388041][T17456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.388059][T17456] RSP: 002b:00007f02e066f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f3 [ 206.388079][T17456] RAX: ffffffffffffffda RBX: 00007f02e1e35fa0 RCX: 00007f02e1c0ebe9 [ 206.388093][T17456] RDX: 00000000fffffceb RSI: 0000200000004600 RDI: 0000000000000008 [ 206.388106][T17456] RBP: 00007f02e066f090 R08: 0000000000000000 R09: 0000000000000000 [ 206.388119][T17456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.388132][T17456] R13: 00007f02e1e36038 R14: 00007f02e1e35fa0 R15: 00007ffe040eab08 [ 206.388170][T17456] [ 206.417570][T17327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.633213][T17327] veth0_vlan: entered promiscuous mode [ 206.642835][T17327] veth1_vlan: entered promiscuous mode [ 206.661406][T17327] veth0_macvtap: entered promiscuous mode [ 206.670544][T17327] veth1_macvtap: entered promiscuous mode [ 206.687964][T17327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.698125][T17327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.728765][ T8526] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.780717][ T8526] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.829955][ T8526] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.888788][ T8526] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 207.013115][T17495] loop5: detected capacity change from 0 to 512 [ 207.026336][T17495] ext4 filesystem being mounted at /389/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 207.103401][T17504] loop3: detected capacity change from 0 to 1024 [ 207.111929][T17504] EXT4-fs: Ignoring removed bh option [ 207.118674][T17504] EXT4-fs: Ignoring removed nobh option [ 207.124565][T17504] EXT4-fs: inline encryption not supported [ 207.140950][T17504] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.3005: Allocating blocks 385-513 which overlap fs metadata [ 207.177307][T17504] EXT4-fs (loop3): pa ffff888107248af0: logic 16, phys. 129, len 24 [ 207.185401][T17504] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 207.202937][T17504] netlink: 'syz.3.3005': attribute type 21 has an invalid length. [ 207.212346][T17504] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3005'. [ 207.250995][ T8497] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.300101][T17524] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 207.300944][ T8497] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.306632][T17524] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 207.306808][T17524] vhci_hcd vhci_hcd.0: Device attached [ 207.399560][ T8497] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.446732][T17529] vhci_hcd: connection closed [ 207.446874][ T8504] vhci_hcd: stop threads [ 207.456007][ T8504] vhci_hcd: release socket [ 207.460430][ T8504] vhci_hcd: disconnect device [ 207.491505][ T8497] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.504400][T17514] loop5: detected capacity change from 0 to 1024 [ 207.596053][T17559] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3016'. [ 207.623906][T17518] chnl_net:caif_netlink_parms(): no params data found [ 207.648684][ T8497] bridge_slave_1: left allmulticast mode [ 207.654421][ T8497] bridge_slave_1: left promiscuous mode [ 207.660134][ T8497] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.669634][T17559] SELinux: ebitmap: map size 1768714096 does not match my size 64 (high bit was 25955) [ 207.680604][ T8497] bridge_slave_0: left allmulticast mode [ 207.680827][T17559] SELinux: failed to load policy [ 207.686436][ T8497] bridge_slave_0: left promiscuous mode [ 207.697115][ T8497] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.748605][ T8497] dvmrp1 (unregistering): left allmulticast mode [ 207.806308][ T8497] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.815385][ T8497] bond_slave_0: left promiscuous mode [ 207.821738][ T8497] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.830816][ T8497] bond_slave_1: left promiscuous mode [ 207.837622][ T8497] $Hÿ (unregistering): (slave dummy0): Releasing backup interface [ 207.846737][ T8497] dummy0: left promiscuous mode [ 207.852231][ T8497] $Hÿ (unregistering): Released all slaves [ 207.860612][ T8497] bond0 (unregistering): Released all slaves [ 207.898227][T17518] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.905351][T17518] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.912652][T17518] bridge_slave_0: entered allmulticast mode [ 207.920478][T17518] bridge_slave_0: entered promiscuous mode [ 207.928015][T17518] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.935335][T17518] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.942644][T17518] bridge_slave_1: entered allmulticast mode [ 207.950142][T17518] bridge_slave_1: entered promiscuous mode [ 207.975814][T17574] loop3: detected capacity change from 0 to 1024 [ 207.980242][ T8497] tipc: Disabling bearer [ 207.982722][T17574] EXT4-fs: Ignoring removed bh option [ 207.987588][ T8497] tipc: Left network mode [ 207.993067][T17574] EXT4-fs: Ignoring removed nobh option [ 208.002950][T17574] EXT4-fs: inline encryption not supported [ 208.025991][T17574] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.3020: Allocating blocks 385-513 which overlap fs metadata [ 208.040054][ T8497] hsr_slave_0: left promiscuous mode [ 208.040757][T17574] EXT4-fs (loop3): pa ffff88810719bc40: logic 16, phys. 129, len 24 [ 208.053526][T17574] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 208.063718][ T8497] hsr_slave_1: left promiscuous mode [ 208.069778][ T8497] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.073957][T17574] netlink: 'syz.3.3020': attribute type 21 has an invalid length. [ 208.077488][ T8497] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.078567][T17580] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3021'. [ 208.086028][ T8497] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.109099][ T8497] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.117763][ T8497] veth1_macvtap: left promiscuous mode [ 208.123655][ T8497] veth0_macvtap: left promiscuous mode [ 208.129378][ T8497] veth1_vlan: left promiscuous mode [ 208.130223][T17581] netlink: 132 bytes leftover after parsing attributes in process `syz.3.3020'. [ 208.135777][ T8497] veth0_vlan: left promiscuous mode [ 208.241528][ T8497] team0 (unregistering): Port device team_slave_1 removed [ 208.253234][ T8497] team0 (unregistering): Port device team_slave_0 removed [ 208.285827][T17518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.303791][T17518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.350029][T17518] team0: Port device team_slave_0 added [ 208.358039][T17518] team0: Port device team_slave_1 added [ 208.376384][T17518] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.383409][T17518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.388542][T17596] loop4: detected capacity change from 0 to 512 [ 208.409388][T17518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.420520][T17518] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.427716][T17596] EXT4-fs: Ignoring removed mblk_io_submit option [ 208.433393][T17518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.440775][T17596] ext4: Unknown parameter 'noacl' [ 208.466210][T17518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.491139][T17593] loop3: detected capacity change from 0 to 736 [ 208.508344][T17593] rock: directory entry would overflow storage [ 208.514616][T17593] rock: sig=0x3b10, size=4, remaining=3 [ 208.547120][T17518] hsr_slave_0: entered promiscuous mode [ 208.553311][T17518] hsr_slave_1: entered promiscuous mode [ 208.559683][T17518] debugfs: 'hsr0' already exists in 'hsr' [ 208.565521][T17518] Cannot create hsr debugfs directory [ 208.609045][T17610] loop5: detected capacity change from 0 to 512 [ 208.629230][T17613] loop3: detected capacity change from 0 to 128 [ 208.654657][T17610] ext4 filesystem being mounted at /395/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.921262][T17518] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 208.931721][T17518] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 208.941104][T17518] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 208.950914][T17518] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 208.994501][T17518] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.007248][T17630] loop3: detected capacity change from 0 to 736 [ 209.008517][T17518] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.024460][ T8492] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.031733][ T8492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.032493][T17630] rock: directory entry would overflow storage [ 209.045295][T17630] rock: sig=0x3b10, size=4, remaining=3 [ 209.053926][ T8504] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.061134][ T8504] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.161669][T17518] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.348403][T17518] veth0_vlan: entered promiscuous mode [ 209.358778][T17518] veth1_vlan: entered promiscuous mode [ 209.383672][T17518] veth0_macvtap: entered promiscuous mode [ 209.397284][T17723] loop3: detected capacity change from 0 to 512 [ 209.411907][T17518] veth1_macvtap: entered promiscuous mode [ 209.427576][T17518] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.442773][T17723] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3042: bg 0: block 393: padding at end of block bitmap is not set [ 209.458911][T17723] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 209.469847][T17723] EXT4-fs (loop3): 2 truncates cleaned up [ 209.486064][T17518] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.499720][ T8516] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.548302][ T8516] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.631123][ T8516] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.383154][ T8516] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.424251][T17717] loop5: detected capacity change from 0 to 1024 [ 210.438823][T17730] loop2: detected capacity change from 0 to 512 [ 210.467954][T17730] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.576147][T17802] loop2: detected capacity change from 0 to 512 [ 210.596879][T17802] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 210.606937][T17802] EXT4-fs (loop2): group descriptors corrupted! [ 210.619246][T17805] loop5: detected capacity change from 0 to 512 [ 210.628654][T17805] netlink: 'syz.5.3047': attribute type 10 has an invalid length. [ 210.639373][T17805] bond0: (slave dummy0): Releasing backup interface [ 210.649053][T17805] team0: Port device dummy0 added [ 210.657226][T17805] netlink: 'syz.5.3047': attribute type 10 has an invalid length. [ 210.668446][T17805] team0: Port device dummy0 removed [ 210.695415][T17805] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 210.710326][ T29] kauditd_printk_skb: 333 callbacks suppressed [ 210.710357][ T29] audit: type=1326 audit(1755018372.441:17835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17808 comm="syz.0.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaa313ebe9 code=0x7ffc0000 [ 210.742183][ T29] audit: type=1326 audit(1755018372.481:17836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17808 comm="syz.0.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faaa313ebe9 code=0x7ffc0000 [ 210.758991][T17815] loop5: detected capacity change from 0 to 1024 [ 210.766264][ T29] audit: type=1326 audit(1755018372.481:17837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17808 comm="syz.0.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaa313ebe9 code=0x7ffc0000 [ 210.773449][T17815] EXT4-fs: Ignoring removed bh option [ 210.796330][ T29] audit: type=1326 audit(1755018372.481:17838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17808 comm="syz.0.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaa313ebe9 code=0x7ffc0000 [ 210.803942][T17815] EXT4-fs: Ignoring removed nobh option [ 210.830962][ T29] audit: type=1326 audit(1755018372.571:17839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17808 comm="syz.0.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=263 compat=0 ip=0x7faaa313ebe9 code=0x7ffc0000 [ 210.832113][T17815] EXT4-fs: inline encryption not supported [ 210.856567][ T29] audit: type=1326 audit(1755018372.571:17840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17808 comm="syz.0.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaa313ebe9 code=0x7ffc0000 [ 210.886631][ T29] audit: type=1326 audit(1755018372.571:17841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17808 comm="syz.0.3049" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faaa313ebe9 code=0x7ffc0000 [ 210.939219][T17815] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.3052: Allocating blocks 385-513 which overlap fs metadata [ 210.953809][T17821] loop4: detected capacity change from 0 to 512 [ 210.963328][T17815] EXT4-fs (loop5): pa ffff888107248a80: logic 16, phys. 129, len 24 [ 210.971474][T17815] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 210.976995][T17821] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.997221][T17815] netlink: 'syz.5.3052': attribute type 21 has an invalid length. [ 211.006353][T17815] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3052'. [ 211.019097][T17823] loop2: detected capacity change from 0 to 512 [ 211.048788][T17823] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.122750][T17811] loop3: detected capacity change from 0 to 736 [ 211.130161][ T29] audit: type=1326 audit(1755018372.851:17842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17810 comm="syz.3.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02e1c0ebe9 code=0x7ffc0000 [ 211.154324][ T29] audit: type=1326 audit(1755018372.851:17843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17810 comm="syz.3.3050" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f02e1c0ebe9 code=0x7ffc0000 [ 211.201423][T17811] rock: directory entry would overflow storage [ 211.202840][ T29] audit: type=1326 audit(1755018372.921:17844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17844 comm="syz.2.3061" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb1f85debe9 code=0x7ffc0000 [ 211.207736][T17811] rock: sig=0x3b10, size=4, remaining=3 [ 211.406022][T17881] loop3: detected capacity change from 0 to 1024 [ 211.415132][T17881] ext4: Unknown parameter 'nouser_xattr' [ 211.421285][T17880] loop2: detected capacity change from 0 to 512 [ 211.457802][T17880] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.751684][T17902] loop3: detected capacity change from 0 to 736 [ 211.761137][T17885] loop4: detected capacity change from 0 to 1024 [ 211.770254][T17902] rock: directory entry would overflow storage [ 211.777024][T17902] rock: sig=0x3b10, size=4, remaining=3 [ 211.861730][T17963] ------------[ cut here ]------------ [ 211.867292][T17963] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0x4000000, 0x0] s64=[0x4000000, 0x0] u32=[0x4000000, 0x0] s32=[0x4000000, 0x0] var_off=(0x0, 0x0)(1) [ 211.885561][T17963] WARNING: CPU: 0 PID: 17963 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0x673/0x680 [ 211.896096][T17963] Modules linked in: [ 211.900063][T17963] CPU: 0 UID: 0 PID: 17963 Comm: syz.4.3086 Not tainted 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 211.912909][T17963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 211.923512][T17963] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 211.929998][T17963] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 72 80 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 211.949870][T17963] RSP: 0018:ffffc90010c93440 EFLAGS: 00010292 [ 211.956043][T17963] RAX: e21c28bff9b2b300 RBX: ffff88811a826b10 RCX: 0000000000080000 [ 211.964083][T17963] RDX: ffffc9000524d000 RSI: 000000000000515f RDI: 0000000000005160 [ 211.972121][T17963] RBP: 0000000000000000 R08: 0001c90010c9327f R09: 0000000000000000 [ 211.980295][T17963] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff88811a826ad0 [ 211.988711][T17963] R13: ffff88812e958000 R14: ffff88812e958000 R15: ffff88811a826b08 [ 211.997007][T17963] FS: 00007ff40b6df6c0(0000) GS:ffff8882aee44000(0000) knlGS:0000000000000000 [ 212.006107][T17963] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 212.012713][T17963] CR2: 0000000100000000 CR3: 000000011575a000 CR4: 00000000003506f0 [ 212.021100][T17963] Call Trace: [ 212.024495][T17963] [ 212.026501][T17976] loop2: detected capacity change from 0 to 512 [ 212.027698][T17963] reg_set_min_max+0x215/0x260 [ 212.027735][T17963] check_cond_jmp_op+0x1013/0x16e0 [ 212.044275][T17963] do_check+0x332a/0x7a10 [ 212.048665][T17963] do_check_common+0xc3a/0x12a0 [ 212.053576][T17963] bpf_check+0x942b/0xd9e0 [ 212.058055][T17963] ? __rcu_read_unlock+0x4f/0x70 [ 212.063085][T17963] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 212.069295][T17963] ? alloc_pages_bulk_noprof+0x4b8/0x540 [ 212.075153][T17963] ? __vmap_pages_range_noflush+0xbb3/0xbd0 [ 212.081273][T17963] ? css_rstat_updated+0xb7/0x240 [ 212.086528][T17963] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 212.092707][T17963] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 212.099338][T17963] ? css_rstat_updated+0xb7/0x240 [ 212.104492][T17963] ? __rcu_read_unlock+0x4f/0x70 [ 212.109560][T17963] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 212.115420][T17963] ? should_fail_ex+0x30/0x280 [ 212.120354][T17963] ? selinux_bpf_prog_load+0x36/0xf0 [ 212.125694][T17963] ? should_failslab+0x8c/0xb0 [ 212.130531][T17963] ? __kmalloc_cache_noprof+0x189/0x320 [ 212.136257][T17963] ? selinux_bpf_prog_load+0xbf/0xf0 [ 212.141641][T17963] ? security_bpf_prog_load+0x2c/0xa0 [ 212.147105][T17963] bpf_prog_load+0xedd/0x1070 [ 212.151914][T17963] ? security_bpf+0x2b/0x90 [ 212.156487][T17963] __sys_bpf+0x462/0x7b0 [ 212.160817][T17963] __x64_sys_bpf+0x41/0x50 [ 212.165437][T17963] x64_sys_call+0x2aea/0x2ff0 [ 212.170166][T17963] do_syscall_64+0xd2/0x200 [ 212.174819][T17963] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 212.180907][T17963] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 212.186701][T17963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.192681][T17963] RIP: 0033:0x7ff40cc7ebe9 [ 212.197175][T17963] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.206993][T17976] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.216953][T17963] RSP: 002b:00007ff40b6df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 212.236105][T17963] RAX: ffffffffffffffda RBX: 00007ff40cea5fa0 RCX: 00007ff40cc7ebe9 [ 212.244161][T17963] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 212.252276][T17963] RBP: 00007ff40cd01e19 R08: 0000000000000000 R09: 0000000000000000 [ 212.260296][T17963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.268481][T17963] R13: 00007ff40cea6038 R14: 00007ff40cea5fa0 R15: 00007ffd7bb877a8 [ 212.276730][T17963] [ 212.279740][T17963] ---[ end trace 0000000000000000 ]--- [ 212.379054][T18007] loop3: detected capacity change from 0 to 512 [ 212.384214][T18006] loop2: detected capacity change from 0 to 512 [ 212.401708][T18007] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.422187][T18006] ext4 filesystem being mounted at /18/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 212.745661][T18031] loop2: detected capacity change from 0 to 1024 [ 212.777617][T18026] loop3: detected capacity change from 0 to 736 [ 212.819198][T18026] rock: directory entry would overflow storage [ 212.825829][T18026] rock: sig=0x3b10, size=4, remaining=3 [ 212.952579][T18100] tmpfs: Too few inodes for current use [ 212.957161][T18098] loop2: detected capacity change from 0 to 512 [ 212.976854][T18102] netlink: 'syz.3.3107': attribute type 10 has an invalid length. [ 212.983922][T18098] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.006747][T18102] batman_adv: batadv0: Adding interface: netdevsim1 [ 213.013373][T18102] batman_adv: batadv0: The MTU of interface netdevsim1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.039077][T18102] batman_adv: batadv0: Not using interface netdevsim1 (retrying later): interface not active [ 213.070196][T18108] loop4: detected capacity change from 0 to 512 [ 213.136497][T18122] FAULT_INJECTION: forcing a failure. [ 213.136497][T18122] name failslab, interval 1, probability 0, space 0, times 0 [ 213.149240][T18122] CPU: 1 UID: 0 PID: 18122 Comm: syz.3.3114 Tainted: G W 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 213.149303][T18122] Tainted: [W]=WARN [ 213.149310][T18122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 213.149322][T18122] Call Trace: [ 213.149329][T18122] [ 213.149337][T18122] __dump_stack+0x1d/0x30 [ 213.149357][T18122] dump_stack_lvl+0xe8/0x140 [ 213.149374][T18122] dump_stack+0x15/0x1b [ 213.149467][T18122] should_fail_ex+0x265/0x280 [ 213.149487][T18122] should_failslab+0x8c/0xb0 [ 213.149512][T18122] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 213.149543][T18122] ? sidtab_sid2str_get+0xa0/0x130 [ 213.149607][T18122] kmemdup_noprof+0x2b/0x70 [ 213.149628][T18122] sidtab_sid2str_get+0xa0/0x130 [ 213.149650][T18122] security_sid_to_context_core+0x1eb/0x2e0 [ 213.149673][T18122] security_sid_to_context+0x27/0x40 [ 213.149692][T18122] selinux_lsmprop_to_secctx+0x67/0xf0 [ 213.149750][T18122] security_lsmprop_to_secctx+0x43/0x80 [ 213.149774][T18122] audit_log_task_context+0x77/0x190 [ 213.149875][T18122] audit_log_task+0xf4/0x250 [ 213.149899][T18122] audit_seccomp+0x61/0x100 [ 213.149986][T18122] ? __seccomp_filter+0x68c/0x10d0 [ 213.150011][T18122] __seccomp_filter+0x69d/0x10d0 [ 213.150040][T18122] ? rep_movs_alternative+0x1e/0x90 [ 213.150069][T18122] ? _copy_from_user+0x3b/0xb0 [ 213.150144][T18122] ? kcmp_epoll_target+0x66/0x190 [ 213.150173][T18122] __secure_computing+0x82/0x150 [ 213.150190][T18122] syscall_trace_enter+0xcf/0x1e0 [ 213.150226][T18122] do_syscall_64+0xac/0x200 [ 213.150250][T18122] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 213.150270][T18122] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 213.150352][T18122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.150372][T18122] RIP: 0033:0x7f02e1c0d5fc [ 213.150460][T18122] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 213.150474][T18122] RSP: 002b:00007f02e066f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 213.150486][T18122] RAX: ffffffffffffffda RBX: 00007f02e1e35fa0 RCX: 00007f02e1c0d5fc [ 213.150493][T18122] RDX: 000000000000000f RSI: 00007f02e066f0a0 RDI: 000000000000000a [ 213.150564][T18122] RBP: 00007f02e066f090 R08: 0000000000000000 R09: 0000000000000000 [ 213.150571][T18122] R10: 0000000000000009 R11: 0000000000000246 R12: 0000000000000002 [ 213.150583][T18122] R13: 00007f02e1e36038 R14: 00007f02e1e35fa0 R15: 00007ffe040eab08 [ 213.150594][T18122] [ 213.468833][T18134] pim6reg: entered allmulticast mode [ 213.503314][T18138] loop5: detected capacity change from 0 to 512 [ 213.530358][T18138] ext4 filesystem being mounted at /407/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 213.605708][T18138] EXT4-fs (loop5): shut down requested (2) [ 213.612298][T18138] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3119'. [ 213.647412][T18114] loop2: detected capacity change from 0 to 1024 [ 213.747776][T18131] loop4: detected capacity change from 0 to 736 [ 213.791545][T18131] rock: directory entry would overflow storage [ 213.799172][T18131] rock: sig=0x3b10, size=4, remaining=3 [ 213.859507][T18160] FAULT_INJECTION: forcing a failure. [ 213.859507][T18160] name failslab, interval 1, probability 0, space 0, times 0 [ 213.872317][T18160] CPU: 1 UID: 0 PID: 18160 Comm: syz.0.3126 Tainted: G W 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 213.872350][T18160] Tainted: [W]=WARN [ 213.872357][T18160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 213.872369][T18160] Call Trace: [ 213.872375][T18160] [ 213.872382][T18160] __dump_stack+0x1d/0x30 [ 213.872517][T18160] dump_stack_lvl+0xe8/0x140 [ 213.872537][T18160] dump_stack+0x15/0x1b [ 213.872554][T18160] should_fail_ex+0x265/0x280 [ 213.872576][T18160] ? __tcf_chain_get+0x91/0x280 [ 213.872641][T18160] should_failslab+0x8c/0xb0 [ 213.872732][T18160] __kmalloc_cache_noprof+0x4c/0x320 [ 213.872820][T18160] __tcf_chain_get+0x91/0x280 [ 213.872848][T18160] ? __tcf_block_find+0x11a/0x1a0 [ 213.872871][T18160] tc_new_tfilter+0x5ac/0x10a0 [ 213.872891][T18160] ? __rcu_read_unlock+0x4f/0x70 [ 213.872920][T18160] ? avc_has_perm_noaudit+0x1b1/0x200 [ 213.872981][T18160] ? ns_capable+0x7d/0xb0 [ 213.873010][T18160] ? __pfx_tc_new_tfilter+0x10/0x10 [ 213.873070][T18160] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 213.873101][T18160] netlink_rcv_skb+0x120/0x220 [ 213.873120][T18160] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 213.873171][T18160] rtnetlink_rcv+0x1c/0x30 [ 213.873211][T18160] netlink_unicast+0x5c0/0x690 [ 213.873244][T18160] netlink_sendmsg+0x58b/0x6b0 [ 213.873268][T18160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.873306][T18160] __sock_sendmsg+0x145/0x180 [ 213.873346][T18160] ____sys_sendmsg+0x31e/0x4e0 [ 213.873370][T18160] ___sys_sendmsg+0x17b/0x1d0 [ 213.873449][T18160] __x64_sys_sendmsg+0xd4/0x160 [ 213.873534][T18160] x64_sys_call+0x191e/0x2ff0 [ 213.873555][T18160] do_syscall_64+0xd2/0x200 [ 213.873580][T18160] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 213.873604][T18160] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 213.873702][T18160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.873721][T18160] RIP: 0033:0x7faaa313ebe9 [ 213.873735][T18160] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.873752][T18160] RSP: 002b:00007faaa1ba7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.873828][T18160] RAX: ffffffffffffffda RBX: 00007faaa3365fa0 RCX: 00007faaa313ebe9 [ 213.873877][T18160] RDX: 0000000000004800 RSI: 0000200000006040 RDI: 0000000000000007 [ 213.873891][T18160] RBP: 00007faaa1ba7090 R08: 0000000000000000 R09: 0000000000000000 [ 213.873904][T18160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.873922][T18160] R13: 00007faaa3366038 R14: 00007faaa3365fa0 R15: 00007ffc6cb50b28 [ 213.873941][T18160] [ 214.194577][T18164] loop4: detected capacity change from 0 to 128 [ 214.359386][ T6849] ================================================================== [ 214.367760][ T6849] BUG: KCSAN: data-race in __lru_add_drain_all / folio_add_lru [ 214.375319][ T6849] [ 214.377687][ T6849] read-write to 0xffff888237d25ea8 of 1 bytes by task 18175 on cpu 1: [ 214.385924][ T6849] folio_add_lru+0xa5/0x1f0 [ 214.390441][ T6849] shmem_get_folio_gfp+0x7ab/0xd60 [ 214.395635][ T6849] shmem_fallocate+0x57c/0x840 [ 214.400402][ T6849] vfs_fallocate+0x3b3/0x400 [ 214.405011][ T6849] __x64_sys_fallocate+0x7a/0xd0 [ 214.409945][ T6849] x64_sys_call+0x2514/0x2ff0 [ 214.414616][ T6849] do_syscall_64+0xd2/0x200 [ 214.419122][ T6849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.425099][ T6849] [ 214.427416][ T6849] read to 0xffff888237d25ea8 of 1 bytes by task 6849 on cpu 0: [ 214.434951][ T6849] __lru_add_drain_all+0x12b/0x3f0 [ 214.440051][ T6849] lru_add_drain_all+0x10/0x20 [ 214.444886][ T6849] invalidate_bdev+0x47/0x70 [ 214.449520][ T6849] ext4_put_super+0x624/0x7d0 [ 214.454180][ T6849] generic_shutdown_super+0xe3/0x210 [ 214.459460][ T6849] kill_block_super+0x2a/0x70 [ 214.464125][ T6849] ext4_kill_sb+0x42/0x80 [ 214.468456][ T6849] deactivate_locked_super+0x72/0x1c0 [ 214.473822][ T6849] deactivate_super+0x97/0xa0 [ 214.478510][ T6849] cleanup_mnt+0x269/0x2e0 [ 214.482927][ T6849] __cleanup_mnt+0x19/0x20 [ 214.487350][ T6849] task_work_run+0x12e/0x1a0 [ 214.492030][ T6849] exit_to_user_mode_loop+0xe4/0x100 [ 214.497315][ T6849] do_syscall_64+0x1d6/0x200 [ 214.501908][ T6849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.507787][ T6849] [ 214.510092][ T6849] value changed: 0x0c -> 0x15 [ 214.514750][ T6849] [ 214.517056][ T6849] Reported by Kernel Concurrency Sanitizer on: [ 214.523188][ T6849] CPU: 0 UID: 0 PID: 6849 Comm: syz-executor Tainted: G W 6.17.0-rc1-syzkaller-00004-g53e760d89498 #0 PREEMPT(voluntary) [ 214.537327][ T6849] Tainted: [W]=WARN [ 214.541114][ T6849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 214.551178][ T6849] ================================================================== [ 214.603101][T18184] loop5: detected capacity change from 0 to 512 [ 214.618901][T18184] ext4: Unknown parameter 'fowner<00000000000000000000' [ 214.702547][T18204] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3132'.