last executing test programs: 8m41.767177151s ago: executing program 4 (id=1468): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r3, 0x0, 0x1e}, 0x18) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r4}}]}}) 8m41.675612761s ago: executing program 4 (id=1470): r0 = socket(0x10, 0x803, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) epoll_create1(0x0) listxattr(0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='oom_score\x00') io_uring_setup(0x1d58, 0x0) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdf}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f00000001c0)='.\x00', 0x1ac8431, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, &(0x7f00000001c0)) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000004004091) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x24040084) 8m41.067990841s ago: executing program 4 (id=1472): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x100000001}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x200000, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40840d4}, 0x0) 8m39.253137933s ago: executing program 4 (id=1494): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) munmap(&(0x7f0000004000/0x2000)=nil, 0x2000) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x9cf, 0x1, 0x800000000001004}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000010100)={0x4, 0xf, 0x200, 0x7, 0xda, 0x10001, &(0x7f0000010000)="2d547af59663519b5bdc9cdfc29f80666d15f6e38ed1957b3ad618a3486213a9ce7ba7769246861a6002e3b72cf0ffdbe8e998d8076be44278bcbf3c7e34d3561225220b422208d82e928bfa7f4cb102d571027916f1da17c896ee5fcb8ca6c0e88da1e46ba5c8a19dfaf3ccbfbf8a032f295c4c064404f16b7f718f3c9eb36f64eb8cdb48b7294cf5006db12a85f8ee60ae71ddbfb4ea994803ca4cfe84f1d24cb10753e2306fd3efedc1257e33ef2e0c532e1d67032d6d7d63a0a8d60f38cbe37caf17932d733e6b7f0c5bfad61be1c14213e7b8682b9eb8eb"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f00000004c0), &(0x7f0000000300)=r2}, 0x20) 8m39.023257936s ago: executing program 4 (id=1497): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) fcntl$setsig(0xffffffffffffffff, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{}], 0x200000000000000e, 0x0, &(0x7f00000001c0)={[0x8001a0ffffffff]}, 0x8) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) sendmsg$NFC_CMD_DEP_LINK_UP(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) 8m35.213226227s ago: executing program 4 (id=1601): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="89070404", 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) unshare(0x42000000) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) 8m35.212924097s ago: executing program 32 (id=1601): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="89070404", 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) unshare(0x42000000) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) 1m22.19424802s ago: executing program 3 (id=7068): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="bcdfc45dd30325c315223f92e8f1a3246939bb7830b83eb36137b11cffe4a29d282859bf", 0x24}, {&(0x7f0000000580)="0a9ac28bd79d370e2ede297807b064710e185ad0e896c0ab9ba48964475b801a233873d0714c526add5d250e1c04e0574de6fc9e1330bafcd8798cc7f946160fe05d8bf937ed3ed2e1299dc4f210de232b0ee4ae43a21b4f094d2976ade6c57f01f409b094c81776817199a4877006f04c35bec8ff9ddf967ba89e1df784a10d1e79edacdf0efb2d1b29404a755e86734df3141c05a2679052020c075f115a57141108bae51201eadd72228fc5edd76a654649b4308ceef64dcd76f6bbbab403ca34998a04e7859e0997f188125095906eb0b5a24679597803b6", 0xda}, {&(0x7f00000002c0)="353d0d7864d7bbee6620728ac2e005b3e34e32317c69473a88af975092", 0x1d}, {&(0x7f0000000800)="19080dfc347157dbfb46132e161a9f79e43472b608c7445e96cb7bf62b97b30faeeac0d3d42c3eb85c862305b0011521509713f5f2b457643d9c5f84a15308d821a634c61f1c00a7b6aac0c1376036b5cb61a000ba35", 0x56}, {&(0x7f00000019c0)="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", 0x542}], 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="000000000800acde000000000000000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x800}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="04000000"], 0x18, 0x40810}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4080}}, {{0x0, 0x0, &(0x7f0000002ec0), 0x0, &(0x7f00000030c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000f0002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001000000000000000010000000100"], 0x50, 0x84}}], 0x4, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000740)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4}}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000001280)="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", 0x103}, {&(0x7f0000000780)="6724bf49a9", 0x5}, {&(0x7f0000001180)="6bd579223f3ff25e570739d4afa282315c6f68e9c2e2c24389c0dcf6a698b3aa5ae9be11ba578cf3de1d7c9122d5f5c3e312a404d36debcee3826109205a551579763d4d040b0457d40a442b404b5ae6ae2fb9ff7df7b7c9c6b71437486b6976f2abe20f9e532c4fade2a275c8065f82c93fc24ad02faf5f2e6516d4ac151816d5dd4aae94c8ba670345961697597c8fce611e301f806af8a31bad5d5abbdb29bd8023a59df9f0343048ab9454e43b041e1b1b1460105cb99edfde65b92f8072fb911a494d6e56b1841bd498e8ec0c5e46f55b5477b832578d22495febcd7fe1b5f31e549f8b6027a271d752b89f31a4f139a2", 0xf3}, {&(0x7f00000007c0)="8a1d50b9941c5c54980e532db7d80fe111c8f5c5a79ed9a990a3526449c70aaf0da1266d72cbed4f45", 0x29}, {&(0x7f0000000940)="5b86862650503afb02d4137d798882de92859deb7f23f7f8530f06ee2d508ddfc401f0ba5e52795675cc8b9e2607e28eee934cb292f6b5ec02710100dc", 0x3d}], 0x5, 0x0, 0x0, 0x8000}, 0x20008000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xcfdc}, 0x1a0fb94f25892cbe) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001", @ANYRES64=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) unshare(0x2060600) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) timer_create(0x7, &(0x7f0000000280)={0x0, 0x3d, 0x1}, &(0x7f0000000300)) getpeername(r1, &(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x2, 0x8) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r7}, 0x18) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000001b) r10 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) close_range(r9, r10, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f0000000680)={0x2004000, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff], 0x1}, 0x58) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r7, r5}, 0xc) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000280)={0x5, 0xfe, 0x8006}) 1m21.369928042s ago: executing program 3 (id=7076): perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x47, 0x1e0411, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfefffffe, 0x1, @perf_bp={0x0, 0x3}, 0x300, 0x4005, 0xb, 0x3, 0x4, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000001b40)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x400002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x2, &(0x7f0000000480)={0x0, 0x21, 0x2}, &(0x7f00000004c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 1m20.338413936s ago: executing program 3 (id=7085): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0x401}, 0x11) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x43d, 0x70bd2b, 0x10008, {0x0, 0x0, 0x0, r4, {0x5, 0x2}, {0x0, 0xffef}, {0xfff3, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x8014}, 0x4004000) 1m20.184851671s ago: executing program 3 (id=7086): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="bcdfc45dd30325c315223f92e8f1a3246939bb7830b83eb36137b11cffe4a29d282859bf", 0x24}, {&(0x7f0000000580)="0a9ac28bd79d370e2ede297807b064710e185ad0e896c0ab9ba48964475b801a233873d0714c526add5d250e1c04e0574de6fc9e1330bafcd8798cc7f946160fe05d8bf937ed3ed2e1299dc4f210de232b0ee4ae43a21b4f094d2976ade6c57f01f409b094c81776817199a4877006f04c35bec8ff9ddf967ba89e1df784a10d1e79edacdf0efb2d1b29404a755e86734df3141c05a2679052020c075f115a57141108bae51201eadd72228fc5edd76a654649b4308ceef64dcd76f6bbbab403ca34998a04e7859e0997f188125095906eb0b5a24679597803b6", 0xda}, {&(0x7f00000002c0)="353d0d7864d7bbee6620728ac2e005b3e34e32317c69473a88af975092", 0x1d}, {&(0x7f0000000800)="19080dfc347157dbfb46132e161a9f79e43472b608c7445e96cb7bf62b97b30faeeac0d3d42c3eb85c862305b0011521509713f5f2b457643d9c5f84a15308d821a634c61f1c00a7b6aac0c1376036b5cb61a000ba35", 0x56}, {&(0x7f00000019c0)="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", 0x542}], 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="000000000800acde000000000000000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x800}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="04000000"], 0x18, 0x40810}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4080}}, {{0x0, 0x0, &(0x7f0000002ec0), 0x0, &(0x7f00000030c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000f0002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001000000000000000010000000100"], 0x50, 0x84}}], 0x4, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000740)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4}}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000001280)="ad86f15d18f82d2f86dec287d4911b3017925ad4168d945aef195e1288c419a59646773722378154a5c2316bbbaa62538091bf4dfcafeaa41f8128f990075f856d5a34d8ee0cbab9ee80d599bf571509d6b4045fe6e9934d259b3e062108b446b45fc403e980d4bf139517f280fd3f5e083f812b7f7e4fe7d84d262aed751523ccf61d77cc57f24143750aae79fbc6dfb7eb740f79f1e99c9d570929b6b00f1fb471c9a64f70748320d8ed2916ac3779681d1f948410c919b68061f1fc2368c30d4ef093e0abf40362727ec86681c35881c93692339c40e08eaba1772c32f1416e020ae75a193d49385c8f22f9e3a757de990a8b954037b46becb3e385ed46b0c74052", 0x103}, {&(0x7f0000000780)="6724bf49a9", 0x5}, {&(0x7f0000001180)="6bd579223f3ff25e570739d4afa282315c6f68e9c2e2c24389c0dcf6a698b3aa5ae9be11ba578cf3de1d7c9122d5f5c3e312a404d36debcee3826109205a551579763d4d040b0457d40a442b404b5ae6ae2fb9ff7df7b7c9c6b71437486b6976f2abe20f9e532c4fade2a275c8065f82c93fc24ad02faf5f2e6516d4ac151816d5dd4aae94c8ba670345961697597c8fce611e301f806af8a31bad5d5abbdb29bd8023a59df9f0343048ab9454e43b041e1b1b1460105cb99edfde65b92f8072fb911a494d6e56b1841bd498e8ec0c5e46f55b5477b832578d22495febcd7fe1b5f31e549f8b6027a271d752b89f31a4f139a2", 0xf3}, {&(0x7f00000007c0)="8a1d50b9941c5c54980e532db7d80fe111c8f5c5a79ed9a990a3526449c70aaf0da1266d72cbed4f45", 0x29}, {&(0x7f0000000940)="5b86862650503afb02d4137d798882de92859deb7f23f7f8530f06ee2d508ddfc401f0ba5e52795675cc8b9e2607e28eee934cb292f6b5ec02710100dc", 0x3d}], 0x5, 0x0, 0x0, 0x8000}, 0x20008000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xcfdc}, 0x1a0fb94f25892cbe) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001", @ANYRES64=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) unshare(0x2060600) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) timer_create(0x7, &(0x7f0000000280)={0x0, 0x3d, 0x1}, &(0x7f0000000300)) getpeername(r1, &(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x2, 0x8) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r7}, 0x18) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000001b) r10 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) close_range(r9, r10, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f0000000680)={0x2004000, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff], 0x1}, 0x58) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r7, r5}, 0xc) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000280)={0x5, 0xfe, 0x8006}) 1m18.433257286s ago: executing program 3 (id=7096): syz_io_uring_setup(0x88f, &(0x7f00000008c0)={0x0, 0xaee2, 0x80, 0x2, 0x41f9}, &(0x7f0000000280)=0x0, &(0x7f0000000680)) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7040000080000008500000078000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2b40, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x9}, 0xc84, 0x7f, 0x0, 0x1, 0x8, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0xb, 0xb, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) write$selinux_validatetrans(r1, 0x0, 0x79) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0900000004000000e27f00000100000012000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x1, 0x0, 0x18, 0x4500, r5, 0xffffffff, '\x00', 0x0, r5, 0x1, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2a, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffff9}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0x6}, @generic={0x4, 0x7, 0x7, 0x9, 0x8}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7ff}}, @map_val={0x18, 0x7, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x1000}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x9, 0x1, 0x0, r5}, @ldst={0x2, 0x2, 0x3, 0x8, 0x5, 0x40, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9ee6, 0x200000005}, 0x104022, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) linkat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0xffffffffffffffff, 0x0, 0x1400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r10}, &(0x7f0000000180), 0x0}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2ecdac547792d1b2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000160a01080000000000000000020000070900020073797a30000000000900010073797a3000000000300003"], 0x84}}, 0x24040884) 1m18.424114198s ago: executing program 3 (id=7101): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r5, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000400)}, 0x44) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x1000, 0x4) sendmsg$NFT_BATCH(r7, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x84}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x84}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900), 0x0) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f00000001c0)='rxrpc_transmit\x00', r8, 0x0, 0x2982c000000000}, 0x18) r11 = dup(r10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[], [], 0x6b}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x3c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x3c}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000006500)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r12, {0xfffd, 0xfff3}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000006500)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r12, {0xfffd, 0xfff3}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000500)={[{@nodioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xa}}, {@acl}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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") (async) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000500)={[{@nodioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xa}}, {@acl}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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") 1m4.01632196s ago: executing program 33 (id=7101): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x18) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r5, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000400)}, 0x44) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x1000, 0x4) sendmsg$NFT_BATCH(r7, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x84}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f0000001b80)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x84}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900), 0x0) (async) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f00000001c0)='rxrpc_transmit\x00', r8, 0x0, 0x2982c000000000}, 0x18) r11 = dup(r10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[], [], 0x6b}}) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r9}, 0x2c, {'wfdno', 0x3d, r11}, 0x2c, {[], [], 0x6b}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x3c}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)={0x3c, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x9}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}]}, 0x3c}}, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000006500)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r12, {0xfffd, 0xfff3}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000006500)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r12, {0xfffd, 0xfff3}, {0x1, 0xfff1}, {0xfff2, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x14004804}, 0x840) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000500)={[{@nodioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xa}}, {@acl}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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") (async) syz_mount_image$ext4(&(0x7f0000000600)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000500)={[{@nodioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xa}}, {@acl}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x450, &(0x7f0000000940)="$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") 3.950441393s ago: executing program 2 (id=8123): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) recvmsg$unix(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0}, 0x1c0) syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x2000000000000118, &(0x7f0000000640)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, 0x0, 0x15) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r4, 0x89e3, &(0x7f0000000000)={0x77, 0x8003, 0x4, 0x9, 0x7f}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f0000000000000000000000000000c6835807974b5da7297f4b32f0293ba1d7eb8f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) r6 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @none}, &(0x7f0000000140)=0xe, 0x400) getsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, &(0x7f0000000180)=0x1, &(0x7f00000001c0)=0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r7}, 0x10) io_pgetevents(0x0, 0x3, 0x0, 0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r8}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="19"], 0x48) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x4000040) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1f2e99000000000000000000000000000000007d65000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000006, 0x40032, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000), 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="24000000021401002cbd7000fddbdf250900020073798d30000000000800010000000000"], 0x24}, 0x1, 0x0, 0x0, 0x24000841}, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) 3.946498424s ago: executing program 2 (id=8125): sendmsg$inet(0xffffffffffffffff, 0x0, 0x1) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000180), 0x1, 0x453, &(0x7f0000000540)="$eJzs3U9sFFUcB/DvbrslAbRg/IP4r4JKEaW2NUESTCTKSS4GE88NLYRYqKE1EUKMJh68eTHx7EG5eeTgyXjAoyZ48aaejJEYIvGk1sx2ly5lt3RD26nu55PM7pud132/mdffzO7ryzRAzxoqHirJ1iTfJxlcWL25wtDC0/VrF47/ee3C8Urm54/9XqnX++PahePNqs2f21I8VJPhalL9oJKH2rQ7e+78mxPT01NnG+sjc6ffGpk9d/7ZU6cnTk6dnDozeuDgC+OjB8bGx1dtX1+9+O6xLa+9dOSjySu/zVz86csi3q2Nba37sVqGMnTzsWzx1Go3VrL7WsqV/hIDoSt9SYruqtXzfzB9Wey8wXzzY6nBAWtqvrCp4+b35oH/sUrKjgAoR/NCX3z/bS7r9dmD8l09vPAFsOj3641lYUt/qo06tSXf71fTUJJDl458USxZo3EYAAAAgF721eEkz7Qb/6vm/pZ6RfmBJDuSPJhkZ1Kf1/NwkkeSPJrkseZ8oi4srb90/KfSaQINq+Lq4eRQY27XzeN/zdG/bOtrrN1VrKRWOXFqeuq5JHcnGU5tU7E+ukwbl7/957tO21rH/4qlaL85FtiI49f+JX+fnpyYm7iTfWbR1feTnf3t+r9yYyZQkYKPJ9nVzRvXFos/79p7slO12/c/a2n+02RP2/xvnHivHKw/LTM/c6R+PhhpnhVu9eHo2Cud2tf/5Sryf/Ny/Z9sq7TO153tvo3LOy692Glb9+f/Hz4rzv8DldfrAQ40Xn1nYm7u7GgyUDl66+tj3cf839b5Q1PzeDSPV9H/w7vbX//vaXm33UmeSPJkY+7ynvq1P9mb5Okk+5aJ5u+XD7zRaZv8L1fR/5Nt8//G1IAl+d994dD2T452an9l+f98/Rd6uPGKz3+3t9IOKjtOAAAAAAAAAFZHtX4PvEp1/41ytbp//8I9/O7N5ur0zOzcvhMzb5+ZXLhX3rbUqs2ZXoMt80FH6+XF9bEl6+NJtif5uO+vxp0HZqYny9556HFbOuR/4Ze+sqMD1pz7tULvWkH+19YjDmD9uf5D75L/0LvkP/Qu+Q+9S/5D75L/0LtWnv8DaxoHsP5c/6En3cl9/TZaoT8bIoy2heb8qZLCaP5L/g1yNDZm4fOvk3Voqy/JRtnlZQplnpUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANo5/AwAA//9EA9s8") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r4}, 0x18) syz_clone(0x44044000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) lseek(r0, 0x3, 0x1) 2.848289634s ago: executing program 1 (id=8139): syz_io_uring_setup(0x88f, &(0x7f00000008c0)={0x0, 0xaee2, 0x80, 0x2, 0x41f9}, &(0x7f0000000280)=0x0, &(0x7f0000000680)) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x2b40, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x3, 0x9}, 0xc84, 0x7f, 0x0, 0x1, 0x8, 0x20005, 0x1, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = fsmount(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0xb, 0xb, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r6}, 0x10) write$selinux_validatetrans(r1, 0x0, 0x79) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0900000004000000e27f00000100000012000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000240000000000000000000000000000000000000000af5396fbd5f9622d7610c77010e40c61247f9f403373df61c1cd34aa6f016c71935658461913e0fa86d6a8fcc264029ab98d168d2c1fe27b6143f3151a25286f1a01c7426f8e519cab3d4ce1217c68235d1d56b885021b71a265a918cee4899d1be44dbde16b50cd2b8e090e8b711c3a8b9e854f2ef413775e5c"], 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x1, 0x0, 0x18, 0x4500, r5, 0xffffffff, '\x00', 0x0, r5, 0x1, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2a, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffff9}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0x6}, @generic={0x4, 0x7, 0x7, 0x9, 0x8}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7ff}}, @map_val={0x18, 0x7, 0x2, 0x0, r8, 0x0, 0x0, 0x0, 0x1000}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x9, 0x1, 0x0, r5}, @ldst={0x2, 0x2, 0x3, 0x8, 0x5, 0x40, 0x4}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9ee6, 0x200000005}, 0x104022, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) linkat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0xffffffffffffffff, 0x0, 0x1400) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r10}, &(0x7f0000000180), 0x0}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2ecdac547792d1b2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r11}, 0x10) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000160a01080000000000000000020000070900020073797a30000000000900010073797a3000000000300003"], 0x84}}, 0x24040884) 2.729986626s ago: executing program 6 (id=8143): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = memfd_create(&(0x7f0000000480)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x2) ftruncate(r0, 0xffff) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {}, 0xfe}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010400000000000000000a0000060900020073797a31000000000900010073797a310000600014000380100000800c00018006000100d65b000014000000110001000000000000000000070000"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 2.705953639s ago: executing program 6 (id=8144): socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="2801000000000000e6871605b8165b05cc22e3950100000001"], 0x128}, 0x24004004) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0x1c, &(0x7f00000005c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x17}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3a4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x400, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], 0x1, 0x26b, &(0x7f0000001240)="$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") perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e880000850000007000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000005a0000008500000022000000180100002020702500000000002020200100000000000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x0, 0x0, &(0x7f0000000000)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000500)='hrtimer_start\x00', r7}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) io_setup(0x2, &(0x7f0000000d40)=0x0) io_pgetevents(r8, 0x2, 0x2, &(0x7f0000000d80)=[{}, {}], &(0x7f0000000e40), 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r9}, &(0x7f0000000340), &(0x7f0000000380)=r4}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000001140)=ANY=[], &(0x7f0000000100)=""/4117, 0x1a, 0x1015, 0x1}, 0x28) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) close(r0) 2.629094076s ago: executing program 1 (id=8148): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x1a00404, &(0x7f0000000080)={[{@noblock_validity}, {@grpquota}]}, 0x1, 0xbb9, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = open(&(0x7f0000000240)='./file2\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r3, 0x0, 0x100000000}, 0x18) 2.001973829s ago: executing program 1 (id=8149): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x5}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) fadvise64(r2, 0x6, 0x3, 0x0) chdir(0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x7) r5 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0xf8c2392b1b6f138c) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) write(r4, &(0x7f0000000180)="c63c78a00a71e8", 0x7) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0xff, 0x65, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r6, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=[0x6], 0x0, 0x0, 0x1}}, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x88, 0xad, 0x4}]}) lsetxattr$security_selinux(0x0, &(0x7f0000000940), 0x0, 0x0, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) timer_create(0x6, &(0x7f0000000700)={0x0, 0x1}, &(0x7f0000000740)) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000700)=@generic={&(0x7f00000006c0)='./bus\x00', r7}, 0x18) r8 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) syz_io_uring_setup(0x7dac, &(0x7f0000000080)={0x0, 0x81e0, 0x20000, 0x4, 0x4000032f, 0x0, r8}, &(0x7f0000000340), &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x245ce000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) 1.711869788s ago: executing program 6 (id=8151): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x1800, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 1.658709603s ago: executing program 6 (id=8154): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(0x0, 0xecf86c37d53049cc) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="3801000010000100feffffbf000100000000000000000000000000000000000000000000000000000000ffffac1414bb000103944e230005000000003a00", @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000009000000080000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000060000000000000000000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd7000043500000a0002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 1.630112336s ago: executing program 6 (id=8157): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000100)={[{@errors_remount}, {}, {@stripe={'stripe', 0x3d, 0x5}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x1, 0x4c0, &(0x7f0000000a00)="$eJzs3U9vVF0ZAPBnblvatxRalMQ/UUFE0RCm7QANYYUbjUESI3HlAmo7bZpOO01nirSyKN/BRBJX+hFcmLgwYeXene7c4MIEFTXUxMWYO3NbSplph5cyN+n8fsnl3nPOMM9zGO4509N2TgB962JEbEfEqYh4GBHjWX0hO+JO60gf9/rVk7mdV0/mCtFo3P9Hodme1sW+v5M6nT3nSET88LsRPym8G7e2ubU8W6mU17PyZH1lbbK2uXVtaWV2sbxYXi2VZqZnpm5dv1k6tr5eWPnNy+8s3f3R73/35Rd/3P7Wz9K0xrK2/f04Tq2uD+3FSQ1GxN2PESwHA1l/TuWdCJ9KEhGfiYhL6f3fyDsbAKAXGo3xaIzvL78lq91uAAAnR9JcAyskxWwtYCySpFhsreGdj9GkUq3Vry5UN1bnW2tlEzGULCxVylPZWuFEDBXS8nTz+k25dKB8PSLORcTPhz9plotz1cp8Xm96AKDPnT4w//9nuDX/AwAn3EjeCQAAPWf+B4D+Y/4HgP5j/geA/mP+B4D+Y/4HgP5j/geAvvKDe/fSo7GTff71/KPNjeXqo2vz5dpycWVjrjhXXV8rLlari83P7Fk56vkq1era9I3YeDxZL9fqk7XNrQcr1Y3V+oPm53o/KA/1pFcAwGHOXXj+50JEbN/+pHnEvr0czNVwsiV5JwDkZiDvBIDcDOadAJAbX+MDbbbofUvHHxF6dvy5AL1x5QvW/6FfWf+H/mX9H/qX9X/oX41G4eCe/wDACWeNH/D9fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh/Y82jkBSzvcDHIkmKxYgzETERQ3vbA52NiD8NDw0vLFXK0/mmDAB8sORvhWz/ryvjl8cOtp4q/He4eY6In/7y/i8ez9br69Np/T/36uvPsvpSHvkDAEfZnad35/Fdr189mds9epnPy2+3NhdN4+5kR6tlMAab55EYiojRfxeyckv6fmXgGOJvP42Iz7frf6G5NjKR7Xx6MH4a+0xP4ydvxU+aba1z+m/x2WPIBfrN83T8udPu/kviYvPc/v4faY5QH253/Nt5Z/xL9sa/gQ7j38VuY9z4w/c6tj2N+OJgu/iFvfiFDvEvdxn/L1/6yqVObY1fRVyJ9vH3x5qsr6xN1r6f1SyWV0ulmemZqVvXb5YmF5Yq5anWn21j/P321bOH9X+0Q/yRI/r/9S77/+v/PfzxVw+J/82vtX/9zx8SP50Tv9Fl/NnR33bcvjuNP9+h/0e9/le7jP/ir1vzXT4UAOiB2ubW8mylUl530bOL9L1br2KN9DCWi24v0v8BRz/4X0c+z+e6CppGe/9U8x6ZgI/tzU2fdyYAAAAAAAAAAAAAAEAnvfiFp7z7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMn1/wAAAP//gX7Hxg==") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x24, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioprio_set$pid(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) io_setup(0x2, &(0x7f0000000000)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRESHEX=r3], &(0x7f0000000400)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000380)=r8}, 0x20) recvmsg$unix(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) shutdown(r7, 0x0) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4050) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r10, &(0x7f0000000080)={0xc000200e}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[], 0x0) eventfd(0x7) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r11) 1.553639273s ago: executing program 0 (id=8160): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x18) setgid(0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r4, 0x1, 0x0) r5 = socket(0x10, 0x3, 0x0) setuid(0x0) r6 = getgid() getpeername$qrtr(r5, &(0x7f0000000100), &(0x7f0000000140)=0xc) lchown(0x0, 0x0, r6) newfstatat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) eventfd(0x0) ptrace(0x10, 0x0) ptrace$ARCH_SET_GS(0x1e, 0x0, 0x0, 0x1001) msgctl$IPC_SET(r4, 0x1, &(0x7f0000000180)={{0x0, 0x0, r6, r7, 0xee00, 0x140, 0x3ff}, 0x0, 0x0, 0xffffffff, 0xc, 0x5, 0xc0e, 0x7, 0x4, 0x1, 0x1}) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 1.28785226s ago: executing program 2 (id=8161): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x20005) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) flock(0xffffffffffffffff, 0x1780f9c373410de4) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x13, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRESOCT=r1, @ANYRES16=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r8}, 0x18) ppoll(&(0x7f0000000040)=[{r3, 0x4044}, {r7, 0x4021}, {r5, 0x84c3}, {r6}], 0x4, &(0x7f0000000300), 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x0, 0x1000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "00000008000000ab", "3882d50807f4f623e77845b42de16a74735fa3617666da2602e663441f13e3d8", "1360ce84", "32ae571649bfa024"}, 0x38) close_range(r7, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) 1.015180968s ago: executing program 1 (id=8163): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) gettid() timer_create(0x6, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @thr={&(0x7f00000002c0)="c8af8ddff778766ba9751fbba091c5ec0db412a501481cda1426a05101bc3b93272454ce0d7b70c3201a4dd8a3f963160b512c7d5b0164a5ac9cdc2644841220c5512d14df84ee133dc6fa1a8be0de8407ff3e1b84bac3d69e163b1f7c1d6330335e0ab6f3e63453cbe3f523384fcb420d33f4e201eb6cda3d304fd0f42104d13b76be9f6d12ed843fa1c51066437ac300927ddc0897080717c5f18308885a54fda5e20b66af2838a96c44783fa37930ac9befb946f26d8554ab25ad9821", &(0x7f0000000240)="fa712b026e9f232cef2ff748114be1ca4d"}}, &(0x7f0000bbdffc)=0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x6c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_TCP_CLOSE_WAIT={0x8, 0x5, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_TCP_SYN_SENT2={0x8, 0x9, 0x1, 0x0, 0xffffff45}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0xa7}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) timer_settime(r0, 0x1141d5a274f1f552, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 954.612875ms ago: executing program 5 (id=8164): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setgid(0x0) r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000080), 0x4) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r3 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3, 0xffffffffffffffff}) socket(0x10, 0x3, 0x0) setuid(0x0) r4 = getgid() lchown(0x0, 0x0, r4) newfstatat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) eventfd(0x0) setreuid(r5, r5) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) msgctl$IPC_SET(r3, 0x1, &(0x7f0000000180)={{0x0, 0x0, r4, r5, 0xee00, 0x140, 0x3ff}, 0x0, 0x0, 0xffffffff, 0xc, 0x5, 0xc0e, 0x7, 0x4, 0x1, 0x1, r6}) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) 697.913281ms ago: executing program 0 (id=8165): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x1800, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 682.062042ms ago: executing program 0 (id=8166): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="19000000040000000800"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0xffffffffffffffff}, 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r1, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000700)=ANY=[], 0x0) 666.801934ms ago: executing program 0 (id=8167): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) creat(0x0, 0xecf86c37d53049cc) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c40)=ANY=[@ANYBLOB="3801000010000100feffffbf000100000000000000000000000000000000000000000000000000000000ffffac1414bb000103944e230005000000003a00", @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000009000000080000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000060000000000000000000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd7000043500000a0002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10) 640.353706ms ago: executing program 6 (id=8168): socket(0xa, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f00000001c0)="f1", 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendfile(r2, r0, 0x0, 0x400fe) sendfile(r2, r1, 0x0, 0x7ffff000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x18) 639.503276ms ago: executing program 0 (id=8169): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0x401}, 0x11) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x8014}, 0x4004000) 563.522944ms ago: executing program 0 (id=8170): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) socket(0x1e, 0x4, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) socket$key(0xf, 0x3, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000f400850000008600000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r0, 0x0, 0x0) 503.69316ms ago: executing program 5 (id=8171): socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="19000000040000000800000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5, 0x0, 0xffffffffffffffff}, 0x13) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r3}, &(0x7f0000000240), &(0x7f00000006c0)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r1, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000700)=ANY=[], 0x0) 480.174312ms ago: executing program 5 (id=8172): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRES64], 0x50) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000003c0)={0x0, 0x1, 0x3, 0x4, @vifc_lcl_addr=@remote, @empty}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x20, 0x10, 0x2, 0x805, {{0xc, 0x4, 0x2, 0xd, 0x30, 0x67, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@noop, @timestamp={0x44, 0x18, 0x10, 0x0, 0x7, [0x10000, 0x5, 0x409, 0x1, 0x8]}]}}}}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=ANY=[@ANYBLOB="d300000010010000180a00000000000000000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x1, &(0x7f000000cf3d)=""/195}, 0x23) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) getrusage(0xd6a66cbced244c1f, 0x0) r4 = syz_open_dev$vcsu(&(0x7f0000000680), 0x3, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000006c0)={0x0}, &(0x7f0000000700)=0x8) rmdir(&(0x7f0000001cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000740)={r5, 0x8, 0x30}, &(0x7f0000000880)=0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r6}, 0x10) r7 = syz_clone(0x1004500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) connect$packet(0xffffffffffffffff, &(0x7f0000000940)={0x11, 0x0, r1, 0x1, 0x9, 0x6, @local}, 0x14) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0xee01, 0xee00}}, './file0\x00'}) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000ac0)=@nat={'nat\x00', 0x1b, 0x5, 0x508, 0x0, 0x110, 0xffffffff, 0x3a0, 0x218, 0x470, 0x470, 0xffffffff, 0x470, 0x470, 0x5, &(0x7f00000005c0), {[{{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@inet=@iprange={{0x68}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, @ipv6=@empty, @ipv4=@private=0xa010101, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x4, @multicast2, @rand_addr=0x64010102, @port=0x4e23, @port=0x4e24}}}}, {{@ip={@private=0xa010102, @empty, 0x0, 0xff000000, 'pim6reg\x00', 'bridge_slave_0\x00', {}, {0xff}, 0xff}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x5, 0x2, 0x5, 0x3, 0x1, 0x1], 0x2, 0x4}}}, @common=@socket0={{0x20}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x10, @local, @empty, @port=0x4e22, @gre_key=0x70}}}}, {{@ip={@local, @loopback, 0xffffffff, 0xffffffff, 'wg0\x00', 'nr0\x00', {}, {0xff}, 0x5e, 0x0, 0x4b}, 0x0, 0x150, 0x188, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x9}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@dev={0xac, 0x14, 0x14, 0x40}, [0xff000000, 0xe04347267a5293c, 0xff, 0xff000000], @ipv6=@mcast2, [0xffffff00, 0xff000000, 0xffffff00, 0xff], @ipv4=@broadcast, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@private2, [0xff000000, 0xffffffff, 0x0, 0xffffff00], 0x2, 0x1, 0x2, 0x4e20, 0x4e23, 0x4e24, 0x4e24, 0x2021, 0x319a9e9558bd2948}, 0x41, 0x10}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x3, 0x2}, {0x2}, {0xffffffffffffffff, 0x0, 0x5}, 0xaf9, 0xe}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local, 0x100, 0x9, [0x3d, 0x10, 0x40, 0x3a, 0x21, 0x1a, 0x33, 0x1, 0x9, 0x3d, 0x29, 0x2e, 0x2f, 0x37, 0x1f, 0x3c], 0x0, 0x4, 0xac0}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x568) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000000), &(0x7f0000000180)=r2}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r9 = getpid() process_vm_readv(r9, &(0x7f00000001c0)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}, {&(0x7f0000001980)=""/4089, 0x1000}], 0x3, &(0x7f0000008640)=[{&(0x7f00000003c0)=""/95, 0xffffff1a}], 0x1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) r10 = mq_open(&(0x7f0000000280)='\x00', 0x40, 0x21, &(0x7f00000002c0)={0x7fffffff, 0x8, 0x800, 0x7fffffffffffffff}) mq_timedsend(r10, &(0x7f0000000300)="7151c4e96e430086346cba07f9333b0cd4cc2698807cac8b81e59820ffb16c50c98ee58741b5fdd675b13a71e6e4c911fd77001102d5283c7bf97245aafa72a81094fa9ff607ea6240bebade6b3a6e817272647089aff26fa2b8bb91b6abfd6989bf15a754a0838e70b2b34bea375c0ecb125cb82ded766fa0088fd2805a743ba96bb05c1876a5c24bd278dc31e8842ccf8b3788c66eebe0d75a99decb5510912ab6f2ef5b76ebdbd5bcca3e9e338b6cc4d1ff", 0xb3, 0x7, 0x0) ioctl$sock_SIOCSPGRP(r8, 0x8902, &(0x7f0000000640)=r7) 392.316011ms ago: executing program 2 (id=8173): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f02, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0, 0x0, 0x1075}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x16c) 391.217341ms ago: executing program 2 (id=8174): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x311, &(0x7f0000000500)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a010400000000000000000200000038000480340001800c0001007061796c6f6164002400028008000440000000020800014000000008080003400000008208000240000000000900010073690f30000000000900020073797a3200000000140000001100010000000000000000000000000a6a9a325bb283ad711a7dd6fcaf4f0bbbe20e2fbd45725164080cb31a97e82f299262590f85a43b166facd93f4819aec1085dc28d0b7debc5449fe1b79a798d38eda565eb986aac630fd7404f06272eae33d89391235df8b7f12fc328e7fd1c9bcac94a0d6daa9cdeceaf908b25f1d33430f91f0b5a2bfd9acf99ed59259a769027fa5f00eaf4b54ce84a18ee3b6fcaa7cc6052f503b31b0cac019f7415d7f276d9795f121ea629f28d1b5aba474f8182dfe76d3041cb3369fa4d835db98523cc28f0147ef5a6a8588b08b387f32cdba33220ddd1ee72aee3da88e88849c7fafa876923e3961d641f83032f213058"], 0x8c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8f70000000000ff000044850000000e000000650000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$selinux_access(r5, &(0x7f0000001a80)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a7570647077645f657865635f742073797374656d5f753a73797374656d5f723afaffffffffffffff3a73302030"], 0x56) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x50300, 0x0) ioctl$PIO_UNIMAPCLR(r6, 0x4b68, &(0x7f0000000140)={0x0, 0x4, 0x4}) ioctl$VT_DISALLOCATE(r6, 0x5608) 328.888487ms ago: executing program 2 (id=8175): prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r0 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="bcdfc45dd30325c315223f92e8f1a3246939bb7830b83eb36137b11cffe4a29d282859bf", 0x24}, {&(0x7f0000000580)="0a9ac28bd79d370e2ede297807b064710e185ad0e896c0ab9ba48964475b801a233873d0714c526add5d250e1c04e0574de6fc9e1330bafcd8798cc7f946160fe05d8bf937ed3ed2e1299dc4f210de232b0ee4ae43a21b4f094d2976ade6c57f01f409b094c81776817199a4877006f04c35bec8ff9ddf967ba89e1df784a10d1e79edacdf0efb2d1b29404a755e86734df3141c05a2679052020c075f115a57141108bae51201eadd72228fc5edd76a654649b4308ceef64dcd76f6bbbab403ca34998a04e7859e0997f188125095906eb0b5a24679597803b6", 0xda}, {&(0x7f00000002c0)="353d0d7864d7bbee6620728ac2e005b3e34e32317c69473a88af975092", 0x1d}, {&(0x7f0000000800)="19080dfc347157dbfb46132e161a9f79e43472b608c7445e96cb7bf62b97b30faeeac0d3d42c3eb85c862305b0011521509713f5f2b457643d9c5f84a15308d821a634c61f1c00a7b6aac0c1376036b5cb61a000ba35", 0x56}, {&(0x7f00000019c0)="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", 0x542}], 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="000000000800acde000000000000000002000000", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x38, 0x800}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="04000000"], 0x18, 0x40810}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4080}}, {{0x0, 0x0, &(0x7f0000002ec0), 0x0, &(0x7f00000030c0)=ANY=[@ANYBLOB="1c00000000000000010000000200", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000f0002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000010000000000000000100000001000000"], 0x50, 0x84}}], 0x4, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000740)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x4}}, 0x10, &(0x7f0000000b00)=[{&(0x7f0000001280)="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", 0x103}, {&(0x7f0000000780)="6724bf49a9", 0x5}, {&(0x7f0000001180)="6bd579223f3ff25e570739d4afa282315c6f68e9c2e2c24389c0dcf6a698b3aa5ae9be11ba578cf3de1d7c9122d5f5c3e312a404d36debcee3826109205a551579763d4d040b0457d40a442b404b5ae6ae2fb9ff7df7b7c9c6b71437486b6976f2abe20f9e532c4fade2a275c8065f82c93fc24ad02faf5f2e6516d4ac151816d5dd4aae94c8ba670345961697597c8fce611e301f806af8a31bad5d5abbdb29bd8023a59df9f0343048ab9454e43b041e1b1b1460105cb99edfde65b92f8072fb911a494d6e56b1841bd498e8ec0c5e46f55b5477b832578d22495febcd7fe1b5f31e549f8b6027a271d752b89f31a4f139a2", 0xf3}, {&(0x7f00000007c0)="8a1d50b9941c5c54980e532db7d80fe111c8f5c5a79ed9a990a3526449c70aaf0da1266d72cbed4f45", 0x29}, {&(0x7f0000000940)="5b86862650503afb02d4137d798882de92859deb7f23f7f8530f06ee2d508ddfc401f0ba5e52795675cc8b9e2607e28eee934cb292f6b5ec02710100dc", 0x3d}], 0x5, 0x0, 0x0, 0x8000}, 0x20008000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xcfdc}, 0x1a0fb94f25892cbe) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001", @ANYRES64=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) unshare(0x2060600) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) timer_create(0x7, &(0x7f0000000280)={0x0, 0x3d, 0x1}, &(0x7f0000000300)) getpeername(r1, &(0x7f0000000480)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x0) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x2, 0x8) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r7}, 0x18) r9 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x8000001b) r10 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) close_range(r9, r10, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone3(&(0x7f0000000680)={0x2004000, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0xffffffffffffffff], 0x1}, 0x58) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r7, r5}, 0xc) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000280)={0x5, 0xfe, 0x8006}) 262.778964ms ago: executing program 5 (id=8176): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000200)={[{@orlov}, {@norecovery}, {@jqfmt_vfsv0}]}, 0x1, 0x55c, &(0x7f00000006c0)="$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") r0 = memfd_create(&(0x7f0000000540)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,U\xb1]*\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3S\xef}\xfd\x12\xbc:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f\xe2\\Z\xef\xa3\xe1c\xc5\xe6\x11z\x18\r\x17\x1d\xb6~a\x1a\x81I\xe7\x1b\"\xd5s\xbfC\x86~~85\fv\xed!\xf5\xde\xe7i\x9b\x9aP^\x91\xa8\x1c\x95\xaa\xf1\xf7\b\x9d\xdd\xfe\xa3\xce\xdc\xd5\x89\x9e\x84{\v}\xe6^[`K8\x9fC\xf2@\x8fJ1k', 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r2, 0x6628) 235.440837ms ago: executing program 5 (id=8177): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x1800, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x5, 0x6, 0x2, 0x0, 0x8, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}}]}, 0x94}}, 0x0) 215.069949ms ago: executing program 5 (id=8178): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000100)={[{@errors_remount}, {}, {@stripe={'stripe', 0x3d, 0x5}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x7}}]}, 0x1, 0x4c0, &(0x7f0000000a00)="$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") r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2400, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x24, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioprio_set$pid(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) io_setup(0x2, &(0x7f0000000000)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYRESHEX=r3], &(0x7f0000000400)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000380)=r8}, 0x20) recvmsg$unix(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) shutdown(r7, 0x0) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4050) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid:\xc4e', 0x0) r10 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r10, &(0x7f0000000080)={0xc000200e}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[], 0x0) eventfd(0x7) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r11) 106.32709ms ago: executing program 1 (id=8179): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x17, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0, r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xe, 0x1}, {0x0, 0x3}}}, 0x24}}, 0x800) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000030601010000000000000000010002000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x38000016) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x6, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xab}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010002104000010000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000200000001c00128009000100626f6e64000000000c00028008001c0009000000"], 0x3c}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xb, &(0x7f0000000180)=ANY=[@ANYRES64], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x3e) splice(r0, &(0x7f0000000040)=0xf6, r10, &(0x7f0000000080)=0x3, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000007110a9000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='mm_collapse_huge_page_swapin\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) 0s ago: executing program 1 (id=8180): syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000bc0)='./file1\x00', 0x1a00404, &(0x7f0000000080)={[{@noblock_validity}, {@grpquota}]}, 0x1, 0xbb9, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = open(&(0x7f0000000240)='./file2\x00', 0x145142, 0x0) sendfile(r1, r1, 0x0, 0x800000009) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r3, 0x0, 0x100000000}, 0x18) kernel console output (not intermixed with test programs): 18316][T12074] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7620'. [ 602.734914][T12066] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.746459][T12074] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7620'. [ 602.769811][T12084] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7620'. [ 602.779236][T12077] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7621'. [ 602.788500][T12074] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7620'. [ 602.808688][T12066] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.825607][T12086] siw: device registration error -23 [ 602.859526][T12091] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.861548][T12090] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7621'. [ 602.878395][T12090] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7621'. [ 602.932037][T12091] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 602.942925][ T316] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 602.971574][ T316] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.004332][ T316] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.016845][T12091] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.045845][ T316] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.071111][T12091] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.085446][T12111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7624'. [ 603.109809][T12111] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7624'. [ 603.144034][T12119] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.184298][ T316] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 603.192608][ T316] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 603.201715][T12119] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.215628][ T316] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 603.223946][ T316] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 603.247471][ T316] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 603.255794][ T316] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 603.264218][ T316] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 603.272609][ T316] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 603.281729][T12119] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.340784][T12119] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.860875][T12153] lo speed is unknown, defaulting to 1000 [ 603.915385][T12153] chnl_net:caif_netlink_parms(): no params data found [ 603.954249][T12153] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.961405][T12153] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.968708][T12153] bridge_slave_0: entered allmulticast mode [ 603.975240][T12153] bridge_slave_0: entered promiscuous mode [ 603.981932][T12153] bridge0: port 2(bridge_slave_1) entered blocking state [ 603.989016][T12153] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.996274][T12153] bridge_slave_1: entered allmulticast mode [ 604.002947][T12153] bridge_slave_1: entered promiscuous mode [ 604.022302][T12153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 604.033018][T12153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 604.053394][T12153] team0: Port device team_slave_0 added [ 604.060142][T12153] team0: Port device team_slave_1 added [ 604.077202][T12153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 604.084172][T12153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.110110][T12153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 604.121239][T12153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 604.128178][T12153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 604.154184][T12153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 604.158052][T12387] loop1: detected capacity change from 0 to 128 [ 604.187165][T12153] hsr_slave_0: entered promiscuous mode [ 604.193850][T12153] hsr_slave_1: entered promiscuous mode [ 604.199728][T12153] debugfs: 'hsr0' already exists in 'hsr' [ 604.205467][T12153] Cannot create hsr debugfs directory [ 604.280681][T12153] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.380833][T12153] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.440704][T12153] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.501948][T12153] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 604.599367][T12487] loop1: detected capacity change from 0 to 512 [ 604.606031][T12487] EXT4-fs: Ignoring removed orlov option [ 604.612093][T12487] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 604.620902][T12487] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 604.640719][T12487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 604.708772][T12487] netlink: 'syz.1.7634': attribute type 15 has an invalid length. [ 604.726492][ T2174] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 604.742809][ T29] kauditd_printk_skb: 454 callbacks suppressed [ 604.742882][ T29] audit: type=1326 audit(612.738:131180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12495 comm="syz.1.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7072f6c9 code=0x7ffc0000 [ 604.772390][ T29] audit: type=1326 audit(612.738:131181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12495 comm="syz.1.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7072f6c9 code=0x7ffc0000 [ 604.795486][ T29] audit: type=1326 audit(612.738:131182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12495 comm="syz.1.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fba7072f6c9 code=0x7ffc0000 [ 604.818414][ T29] audit: type=1326 audit(612.738:131183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12495 comm="syz.1.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7072f6c9 code=0x7ffc0000 [ 604.841538][ T29] audit: type=1326 audit(612.738:131184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12495 comm="syz.1.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7fba7072f6c9 code=0x7ffc0000 [ 604.864448][ T29] audit: type=1326 audit(612.738:131185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12495 comm="syz.1.7635" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7072f6c9 code=0x7ffc0000 [ 604.887610][ T29] audit: type=1326 audit(612.788:131186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12497 comm="syz.1.7636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7072f6c9 code=0x7ffc0000 [ 604.910697][ T29] audit: type=1326 audit(612.788:131187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12497 comm="syz.1.7636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7072f6c9 code=0x7ffc0000 [ 604.933734][ T29] audit: type=1326 audit(612.798:131188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12497 comm="syz.1.7636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fba7072f6c9 code=0x7ffc0000 [ 604.956834][ T29] audit: type=1326 audit(612.798:131189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12497 comm="syz.1.7636" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7072f6c9 code=0x7ffc0000 [ 604.981247][T12498] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 604.991283][T12498] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 605.009209][ T6516] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.021769][ T2611] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.033803][ T2611] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.051053][T12498] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 605.061074][T12498] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 605.077050][ T2611] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.099598][T12523] loop6: detected capacity change from 0 to 4096 [ 605.107841][T12523] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 605.140993][T12498] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 605.150927][T12498] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 605.230518][T12498] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 605.240511][T12498] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 605.290424][ T9692] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.359732][T12554] xt_hashlimit: max too large, truncated to 1048576 [ 605.377735][T12554] loop6: detected capacity change from 0 to 512 [ 605.386218][T12554] EXT4-fs: Ignoring removed nobh option [ 605.392131][T12554] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 605.402306][T12554] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.7650: iget: bad i_size value: 38620345925642 [ 605.415257][T12554] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.7650: couldn't read orphan inode 15 (err -117) [ 605.427638][T12554] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 605.443962][T12554] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.7650: bg 0: block 5: invalid block bitmap [ 605.464985][ T9692] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.495912][T12570] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.511452][T12573] loop0: detected capacity change from 0 to 512 [ 605.520207][T12573] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.7652: iget: bad extra_isize 90 (inode size 256) [ 605.533770][T12573] EXT4-fs (loop0): Remounting filesystem read-only [ 605.534671][T12570] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.540342][T12573] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -30) [ 605.559207][T12573] EXT4-fs (loop0): 1 orphan inode deleted [ 605.565217][T12573] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 605.600765][T12570] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.611255][T28762] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 605.660967][T12570] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.856361][T12600] loop0: detected capacity change from 0 to 4096 [ 605.864952][T12600] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 606.028124][T28762] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.063270][T12153] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 606.072260][T12153] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 606.081018][T12153] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 606.089714][T12153] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 606.116362][ T316] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.128443][ T316] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.145177][ T316] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.158302][ T316] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.180147][T12153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 606.192828][T12153] 8021q: adding VLAN 0 to HW filter on device team0 [ 606.203207][ T316] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.210296][ T316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 606.222374][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.229494][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 606.235356][T12640] siw: device registration error -23 [ 606.272470][T12643] loop2: detected capacity change from 0 to 512 [ 606.282187][T12643] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.7663: iget: bad extra_isize 90 (inode size 256) [ 606.296423][T12643] EXT4-fs (loop2): Remounting filesystem read-only [ 606.303173][T12643] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -30) [ 606.303305][T12153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 606.312268][T12643] EXT4-fs (loop2): 1 orphan inode deleted [ 606.325087][T12643] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 606.381761][ T3445] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.400852][ T2611] bridge_slave_1: left allmulticast mode [ 606.401257][T12661] loop2: detected capacity change from 0 to 512 [ 606.406521][ T2611] bridge_slave_1: left promiscuous mode [ 606.418405][ T2611] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.426680][ T2611] bridge_slave_0: left allmulticast mode [ 606.432365][ T2611] bridge_slave_0: left promiscuous mode [ 606.435142][T12661] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 606.437996][ T2611] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.464096][T12661] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 606.479025][T12661] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7664: bg 0: block 248: padding at end of block bitmap is not set [ 606.493811][T12661] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.7664: Failed to acquire dquot type 1 [ 606.506844][T12661] EXT4-fs (loop2): 1 truncate cleaned up [ 606.514333][T12661] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 606.527194][ T2611] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.537480][ T2611] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.547513][ T2611] bond0 (unregistering): Released all slaves [ 606.555296][ T3445] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 606.564513][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 1 [ 606.591510][T12153] veth0_vlan: entered promiscuous mode [ 606.605575][T12673] loop2: detected capacity change from 0 to 512 [ 606.608244][T12153] veth1_vlan: entered promiscuous mode [ 606.622301][T12673] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 606.628128][T12153] veth0_macvtap: entered promiscuous mode [ 606.638914][T12153] veth1_macvtap: entered promiscuous mode [ 606.646497][ T2611] hsr_slave_0: left promiscuous mode [ 606.653281][ T2611] hsr_slave_1: left promiscuous mode [ 606.655611][T12673] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 606.658955][ T2611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 606.673877][T12673] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7666: bg 0: block 248: padding at end of block bitmap is not set [ 606.680473][ T2611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 606.695046][T12673] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.7666: Failed to acquire dquot type 1 [ 606.714531][T12673] EXT4-fs (loop2): 1 truncate cleaned up [ 606.714699][ T2611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 606.721200][T12673] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 606.727747][ T2611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 606.765616][ T3445] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 606.788808][ T2611] team0 (unregistering): Port device team_slave_1 removed [ 606.798853][ T2611] team0 (unregistering): Port device team_slave_0 removed [ 606.831472][ T2968] infiniband syz1: ib_query_port failed (-19) [ 606.835476][T12153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.849842][T12153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.860777][ T6516] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.870328][ T6516] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.879296][ T6516] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.890465][ T6516] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.961444][T12701] siw: device registration error -23 [ 607.064924][ T316] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 607.073385][ T316] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 607.084930][ T89] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 607.093233][ T89] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 607.103987][ T89] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 607.112309][ T89] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 607.123497][ T89] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 607.131783][ T89] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 607.179555][T12721] loop0: detected capacity change from 0 to 512 [ 607.192627][T12728] loop5: detected capacity change from 0 to 512 [ 607.200563][T12721] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 607.212339][T12728] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 607.578012][T12749] lo speed is unknown, defaulting to 1000 [ 607.891511][T12774] loop2: detected capacity change from 0 to 512 [ 607.912777][T12774] EXT4-fs: Ignoring removed orlov option [ 607.921541][T12774] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 607.930258][T12774] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 608.002821][T12774] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 608.341021][T12786] __nla_validate_parse: 6 callbacks suppressed [ 608.341037][T12786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7688'. [ 608.387473][T12792] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.403116][T12796] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.452420][T12803] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7688'. [ 608.461818][T12803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7688'. [ 608.472694][T12792] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.520831][T12796] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.542134][T12792] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.580990][T12796] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.620728][T12792] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.660993][T12796] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.696384][ T6516] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.713620][ T6516] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.732559][ T6516] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.752020][ T6516] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 608.864283][T12835] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7692'. [ 608.879022][T12835] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7692'. [ 609.261258][T12843] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 609.271216][T12843] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 609.330716][T12843] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 609.340629][T12843] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 609.430627][T12843] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 609.440553][T12843] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 609.490646][T12843] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 609.500553][T12843] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 609.684792][ T6516] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.696258][ T6516] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.707765][ T6516] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.719298][ T31] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.758805][T12869] loop6: detected capacity change from 0 to 512 [ 609.767523][T12869] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.7697: iget: bad extra_isize 90 (inode size 256) [ 609.781167][T12869] EXT4-fs (loop6): Remounting filesystem read-only [ 609.787714][T12869] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -30) [ 609.796793][T12869] EXT4-fs (loop6): 1 orphan inode deleted [ 609.806988][T12869] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7697'. [ 609.866494][T12875] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.939627][T12875] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.999664][T12875] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.050289][T12875] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.553672][ T6516] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.571636][ T6516] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.580080][ T6516] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.588287][ T6516] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.603354][T12904] loop2: detected capacity change from 0 to 512 [ 611.202892][ T29] kauditd_printk_skb: 595 callbacks suppressed [ 611.202907][ T29] audit: type=1326 audit(619.198:131780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12913 comm="syz.2.7705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd35b9f6c9 code=0x7ffc0000 [ 611.232587][ T29] audit: type=1326 audit(619.198:131781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12913 comm="syz.2.7705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd35b9f6c9 code=0x7ffc0000 [ 611.255871][ T29] audit: type=1326 audit(619.198:131782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12913 comm="syz.2.7705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efd35b9f6c9 code=0x7ffc0000 [ 611.279105][ T29] audit: type=1326 audit(619.198:131783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12913 comm="syz.2.7705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd35b9f6c9 code=0x7ffc0000 [ 611.302250][ T29] audit: type=1326 audit(619.198:131784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12913 comm="syz.2.7705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd35b9f6c9 code=0x7ffc0000 [ 611.325305][ T29] audit: type=1326 audit(619.198:131785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12913 comm="syz.2.7705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7efd35b9f6c9 code=0x7ffc0000 [ 611.348425][ T29] audit: type=1326 audit(619.198:131786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12913 comm="syz.2.7705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd35b9f6c9 code=0x7ffc0000 [ 611.371537][ T29] audit: type=1326 audit(619.198:131787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12913 comm="syz.2.7705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd35b9f6c9 code=0x7ffc0000 [ 611.394782][ T29] audit: type=1326 audit(619.198:131788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12913 comm="syz.2.7705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7efd35b9f6c9 code=0x7ffc0000 [ 611.417880][ T29] audit: type=1326 audit(619.198:131789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12913 comm="syz.2.7705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd35b9f6c9 code=0x7ffc0000 [ 611.466356][T12916] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.482146][T12921] loop0: detected capacity change from 0 to 512 [ 611.490966][T12916] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.491750][T12921] EXT4-fs error (device loop0): ext4_xattr_inode_iget:441: inode #18: comm syz.0.7708: iget: bad extra_isize 90 (inode size 256) [ 611.514320][T12921] EXT4-fs (loop0): Remounting filesystem read-only [ 611.521030][T12921] EXT4-fs warning (device loop0): ext4_evict_inode:274: xattr delete (err -30) [ 611.530099][T12921] EXT4-fs (loop0): 1 orphan inode deleted [ 611.542508][T12921] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7708'. [ 611.560618][T12916] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.610933][T12916] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.723686][ T2611] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 611.732003][ T2611] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 611.743451][ T2611] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 611.751741][ T2611] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 611.762657][ T2611] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 611.770956][ T2611] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 611.783324][ T2611] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 611.791651][ T2611] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 611.833997][T12956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7712'. [ 611.848933][T12956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7712'. [ 611.878035][T12959] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 611.887962][T12959] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 611.920814][T12959] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 611.930717][T12959] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 611.990615][T12959] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 612.000577][T12959] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 612.040382][T12959] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 612.050320][T12959] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 612.456806][T12982] xt_hashlimit: max too large, truncated to 1048576 [ 612.473649][T12982] loop0: detected capacity change from 0 to 512 [ 612.480469][T12982] EXT4-fs: Ignoring removed nobh option [ 612.486252][T12982] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 612.495841][T12982] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.7718: iget: bad i_size value: 38620345925642 [ 612.508821][T12982] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.7718: couldn't read orphan inode 15 (err -117) [ 612.558478][T13004] loop0: detected capacity change from 0 to 512 [ 612.581697][T13002] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.654771][T13004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 612.660407][T13002] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.664101][T13004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 612.753248][T13002] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.819454][T13002] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.904794][ T2611] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.937368][ T2611] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.971533][ T2611] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.003304][ T2611] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.425588][ T2611] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.436760][ T31] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.447929][ T31] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.459394][ T294] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.658912][T13060] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.710425][T13060] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.770476][T13060] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.820284][T13060] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.853969][ T31] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.865033][ T294] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.876294][ T31] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.887232][ T31] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 613.910687][T13080] siw: device registration error -23 [ 614.111843][T13088] loop2: detected capacity change from 0 to 4096 [ 614.298293][T13102] loop2: detected capacity change from 0 to 512 [ 614.316114][T13102] EXT4-fs: Ignoring removed orlov option [ 614.330411][T13102] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 614.339196][T13102] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 614.374393][T13109] loop5: detected capacity change from 0 to 512 [ 614.497046][T13109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.505549][T13109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.643456][T13129] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7740'. [ 614.658168][T13129] 8021q: adding VLAN 0 to HW filter on device bond1 [ 614.667140][T13129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7740'. [ 614.677547][T13129] bond1 (unregistering): Released all slaves [ 614.763644][T13196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7741'. [ 614.842770][T13199] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7741'. [ 614.851856][T13199] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7741'. [ 614.935080][ T316] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 614.943414][ T316] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 614.969925][ T316] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 614.978266][ T316] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 614.991686][T13211] loop0: detected capacity change from 0 to 164 [ 614.992953][ T316] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 615.006455][ T316] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 615.006516][T13211] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 615.014952][ T316] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 615.031206][ T316] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 615.041063][T13211] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 615.073183][T13222] veth2: entered promiscuous mode [ 615.078243][T13222] veth2: entered allmulticast mode [ 615.087982][T13222] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7744'. [ 615.099097][T13222] loop0: detected capacity change from 0 to 128 [ 615.106208][T13222] vfat: Unknown parameter '18446744073709551615⯜k WjTz 4D>Kߖ]Ds3/iesVx9DHld`8i" 9)&7ީV1Kg |sdS:ӳW@q'h{Հ4E> #Nr Rb' [ 615.159502][T13241] loop0: detected capacity change from 0 to 1024 [ 615.166377][T13241] EXT4-fs: Ignoring removed nobh option [ 615.171997][T13241] EXT4-fs: Ignoring removed bh option [ 615.210295][T13240] delete_channel: no stack [ 615.245392][T13248] loop0: detected capacity change from 0 to 512 [ 615.276188][T13253] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.330572][T13253] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.390518][T13253] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.450791][T13253] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.525242][ T6516] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.536516][ T6516] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.547955][ T294] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.559336][ T294] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.638507][T13277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7751'. [ 615.755668][T13281] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7751'. [ 615.764685][T13281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7751'. [ 615.875217][T13291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7755'. [ 616.209331][ T29] kauditd_printk_skb: 627 callbacks suppressed [ 616.209346][ T29] audit: type=1326 audit(624.208:132417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.2.7751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efd35b96567 code=0x7ffc0000 [ 616.238532][ T29] audit: type=1326 audit(624.208:132418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.2.7751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efd35b3b789 code=0x7ffc0000 [ 616.261491][ T29] audit: type=1326 audit(624.208:132419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.2.7751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7efd35b9f6c9 code=0x7ffc0000 [ 616.284523][ T29] audit: type=1326 audit(624.218:132420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.2.7751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efd35b96567 code=0x7ffc0000 [ 616.307469][ T29] audit: type=1326 audit(624.218:132421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.2.7751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efd35b3b789 code=0x7ffc0000 [ 616.330461][ T29] audit: type=1326 audit(624.218:132422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.2.7751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7efd35b9f6c9 code=0x7ffc0000 [ 616.353458][ T29] audit: type=1326 audit(624.228:132423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.2.7751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efd35b96567 code=0x7ffc0000 [ 616.376372][ T29] audit: type=1326 audit(624.228:132424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.2.7751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efd35b3b789 code=0x7ffc0000 [ 616.399331][ T29] audit: type=1326 audit(624.228:132425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.2.7751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7efd35b9f6c9 code=0x7ffc0000 [ 616.422504][ T29] audit: type=1326 audit(624.238:132426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.2.7751" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efd35b96567 code=0x7ffc0000 [ 616.505571][T13304] loop2: detected capacity change from 0 to 512 [ 616.512653][T13304] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 616.524115][T13304] EXT4-fs (loop2): 1 truncate cleaned up [ 616.690301][ T31] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.702118][ T31] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.713726][ T31] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.730606][ T31] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.931131][T13341] loop0: detected capacity change from 0 to 164 [ 616.938149][T13341] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 616.947384][T13341] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 617.388533][T13365] loop5: detected capacity change from 0 to 164 [ 617.395720][T13365] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 617.404539][T13365] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 617.456385][T13373] loop2: detected capacity change from 0 to 512 [ 617.463881][T13373] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 617.480607][T13373] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 617.495230][T13373] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7777: bg 0: block 248: padding at end of block bitmap is not set [ 617.509869][T13373] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.7777: Failed to acquire dquot type 1 [ 617.521814][T13373] EXT4-fs (loop2): 1 truncate cleaned up [ 617.697796][T13387] loop1: detected capacity change from 0 to 512 [ 617.708371][T13387] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 617.741242][T13387] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 617.756464][T13387] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7780: bg 0: block 248: padding at end of block bitmap is not set [ 617.771272][T13387] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.7780: Failed to acquire dquot type 1 [ 617.776641][T13403] loop2: detected capacity change from 0 to 512 [ 617.783149][T13387] EXT4-fs (loop1): 1 truncate cleaned up [ 617.842548][T13412] loop1: detected capacity change from 0 to 4096 [ 617.921502][T13415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 617.939462][T13415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 618.083111][T13432] loop1: detected capacity change from 0 to 4096 [ 618.261078][T13444] siw: device registration error -23 [ 618.283387][T13446] FAULT_INJECTION: forcing a failure. [ 618.283387][T13446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 618.296510][T13446] CPU: 0 UID: 0 PID: 13446 Comm: syz.1.7794 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 618.296531][T13446] Tainted: [W]=WARN [ 618.296536][T13446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 618.296544][T13446] Call Trace: [ 618.296548][T13446] [ 618.296553][T13446] __dump_stack+0x1d/0x30 [ 618.296580][T13446] dump_stack_lvl+0xe8/0x140 [ 618.296593][T13446] dump_stack+0x15/0x1b [ 618.296666][T13446] should_fail_ex+0x265/0x280 [ 618.296744][T13446] should_fail+0xb/0x20 [ 618.296815][T13446] should_fail_usercopy+0x1a/0x20 [ 618.296828][T13446] _copy_from_user+0x1c/0xb0 [ 618.296843][T13446] ____sys_sendmsg+0x1c5/0x4e0 [ 618.296856][T13446] ___sys_sendmsg+0x17b/0x1d0 [ 618.296879][T13446] __x64_sys_sendmsg+0xd4/0x160 [ 618.296944][T13446] x64_sys_call+0x191e/0x3000 [ 618.296957][T13446] do_syscall_64+0xd2/0x200 [ 618.296970][T13446] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 618.297039][T13446] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 618.297069][T13446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.297082][T13446] RIP: 0033:0x7fba7072f6c9 [ 618.297092][T13446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 618.297103][T13446] RSP: 002b:00007fba6f197038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 618.297162][T13446] RAX: ffffffffffffffda RBX: 00007fba70985fa0 RCX: 00007fba7072f6c9 [ 618.297169][T13446] RDX: 0000000000000000 RSI: 0000200000001000 RDI: 0000000000000005 [ 618.297176][T13446] RBP: 00007fba6f197090 R08: 0000000000000000 R09: 0000000000000000 [ 618.297184][T13446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.297191][T13446] R13: 00007fba70986038 R14: 00007fba70985fa0 R15: 00007fff3ed5a768 [ 618.297304][T13446] [ 619.481431][T13484] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.550492][T13484] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.603965][T13484] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.650671][T13484] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.718995][ T6516] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.741222][ T6516] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.762579][ T6516] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.778281][ T6516] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 619.795773][T13515] loop5: detected capacity change from 0 to 512 [ 619.844170][T13524] __nla_validate_parse: 2 callbacks suppressed [ 619.844259][T13524] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7816'. [ 619.859311][T13524] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7816'. [ 620.008813][T13535] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7820'. [ 620.081467][T13540] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.139844][T13536] lo speed is unknown, defaulting to 1000 [ 620.170552][T13540] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.210729][T13540] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.261682][T13540] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.431777][T13576] FAULT_INJECTION: forcing a failure. [ 620.431777][T13576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 620.444850][T13576] CPU: 0 UID: 0 PID: 13576 Comm: syz.1.7823 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 620.444885][T13576] Tainted: [W]=WARN [ 620.444892][T13576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 620.444904][T13576] Call Trace: [ 620.444911][T13576] [ 620.444917][T13576] __dump_stack+0x1d/0x30 [ 620.444937][T13576] dump_stack_lvl+0xe8/0x140 [ 620.444997][T13576] dump_stack+0x15/0x1b [ 620.445016][T13576] should_fail_ex+0x265/0x280 [ 620.445052][T13576] should_fail+0xb/0x20 [ 620.445118][T13576] should_fail_usercopy+0x1a/0x20 [ 620.445176][T13576] copy_to_user_nofault+0x7f/0x120 [ 620.445199][T13576] bpf_probe_write_user+0x83/0xc0 [ 620.445221][T13576] bpf_prog_8f5dadf009f59a0a+0x44/0x4c [ 620.445320][T13576] bpf_trace_run4+0x117/0x1d0 [ 620.445377][T13576] ? update_load_avg+0x1da/0x820 [ 620.445416][T13576] __traceiter_sched_switch+0x3f/0x60 [ 620.445475][T13576] __schedule+0xa17/0xb30 [ 620.445502][T13576] ? __rcu_read_unlock+0x4f/0x70 [ 620.445530][T13576] __cond_resched+0x4e/0x90 [ 620.445629][T13576] wait_for_common+0x28/0x1e0 [ 620.445698][T13576] ? queue_work_on+0xf9/0x160 [ 620.445723][T13576] wait_for_completion_state+0x15/0x40 [ 620.445749][T13576] call_usermodehelper_exec+0x266/0x2c0 [ 620.445769][T13576] __request_module+0x283/0x3e0 [ 620.445821][T13576] ? strncmp+0x34/0x70 [ 620.445842][T13576] get_fs_type+0x11d/0x330 [ 620.445872][T13576] __se_sys_fsopen+0x86/0x1e0 [ 620.445921][T13576] __x64_sys_fsopen+0x31/0x40 [ 620.445945][T13576] x64_sys_call+0x2aa1/0x3000 [ 620.446035][T13576] do_syscall_64+0xd2/0x200 [ 620.446055][T13576] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 620.446085][T13576] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 620.446121][T13576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.446205][T13576] RIP: 0033:0x7fba7072f6c9 [ 620.446219][T13576] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.446236][T13576] RSP: 002b:00007fba6f197038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 620.446253][T13576] RAX: ffffffffffffffda RBX: 00007fba70985fa0 RCX: 00007fba7072f6c9 [ 620.446265][T13576] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000100 [ 620.446276][T13576] RBP: 00007fba6f197090 R08: 0000000000000000 R09: 0000000000000000 [ 620.446301][T13576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.446315][T13576] R13: 00007fba70986038 R14: 00007fba70985fa0 R15: 00007fff3ed5a768 [ 620.446335][T13576] [ 620.756570][T13581] loop1: detected capacity change from 0 to 164 [ 620.767863][T13581] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 620.776874][T13581] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 620.848015][T13594] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.858056][T13589] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7827'. [ 620.920745][T13594] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.959774][T13602] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7827'. [ 620.968805][T13602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7827'. [ 620.981461][T13594] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.030653][T13594] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.158307][T13612] lo speed is unknown, defaulting to 1000 [ 621.227539][ T294] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.259644][ T294] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.284392][ T294] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.299948][ T29] kauditd_printk_skb: 406 callbacks suppressed [ 621.299964][ T29] audit: type=1326 audit(629.258:132829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13592 comm="syz.6.7828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5b502f6c9 code=0x7ffc0000 [ 621.311032][ T294] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.329208][ T29] audit: type=1326 audit(629.258:132830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13592 comm="syz.6.7828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5b502f6c9 code=0x7ffc0000 [ 621.609054][ T29] audit: type=1400 audit(629.598:132831): avc: denied { shutdown } for pid=13648 comm="syz.6.7831" lport=50687 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 621.659215][ T29] audit: type=1326 audit(629.648:132832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13651 comm="syz.6.7832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5b502f6c9 code=0x7ffc0000 [ 621.682286][ T29] audit: type=1326 audit(629.648:132833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13651 comm="syz.6.7832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5b502f6c9 code=0x7ffc0000 [ 621.705472][ T29] audit: type=1326 audit(629.648:132834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13651 comm="syz.6.7832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5b502f6c9 code=0x7ffc0000 [ 621.728698][ T29] audit: type=1326 audit(629.648:132835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13651 comm="syz.6.7832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5b502f6c9 code=0x7ffc0000 [ 621.751813][ T29] audit: type=1326 audit(629.648:132836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13651 comm="syz.6.7832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5b502f6c9 code=0x7ffc0000 [ 621.774850][ T29] audit: type=1326 audit(629.648:132837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13651 comm="syz.6.7832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5b502f6c9 code=0x7ffc0000 [ 621.797975][ T29] audit: type=1326 audit(629.648:132838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13651 comm="syz.6.7832" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe5b502f6c9 code=0x7ffc0000 [ 621.866129][T13655] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 621.876103][T13655] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 621.887819][T12153] EXT4-fs unmount: 34 callbacks suppressed [ 621.887835][T12153] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.921403][T13669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7837'. [ 621.947538][T13673] loop2: detected capacity change from 0 to 164 [ 621.959755][T13673] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 621.961521][T13671] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.968509][T13673] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 621.994734][T13655] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 622.004656][T13655] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 622.062018][T13671] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.092219][T13690] loop2: detected capacity change from 0 to 512 [ 622.095436][T13693] loop6: detected capacity change from 0 to 512 [ 622.105843][T13655] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 622.115714][T13655] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 622.115996][T13693] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 622.133563][T13690] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 622.151111][T13693] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 622.165852][T13693] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7844: bg 0: block 248: padding at end of block bitmap is not set [ 622.175955][T13671] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.189985][T13693] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.7844: Failed to acquire dquot type 1 [ 622.202545][T13693] EXT4-fs (loop6): 1 truncate cleaned up [ 622.208682][T13693] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 622.227732][ T3445] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.238709][ T9692] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 622.249915][T13655] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 622.259893][T13655] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 622.285423][T13715] loop6: detected capacity change from 0 to 512 [ 622.293563][T13715] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 622.317347][T13671] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.376467][ T6516] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 622.384820][ T6516] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 622.403001][ T6516] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 622.411347][ T6516] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 622.419692][ T6516] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 622.428016][ T6516] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 622.436519][ T6516] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 622.444802][ T6516] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 622.553085][ T294] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.633461][ T316] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.709195][ T316] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.746157][T13733] lo speed is unknown, defaulting to 1000 [ 622.752134][ T316] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.798723][T13765] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7849'. [ 622.969716][T13785] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7849'. [ 622.978761][T13785] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7849'. [ 623.334619][T13798] xt_hashlimit: max too large, truncated to 1048576 [ 623.358127][T13798] loop1: detected capacity change from 0 to 512 [ 623.364769][T13798] EXT4-fs: Ignoring removed nobh option [ 623.370771][T13798] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 623.380718][T13798] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.7853: iget: bad i_size value: 38620345925642 [ 623.393644][T13798] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.7853: couldn't read orphan inode 15 (err -117) [ 623.406482][T13798] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.423489][T13798] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.7853: bg 0: block 5: invalid block bitmap [ 623.465336][ T2174] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.515839][T13824] loop2: detected capacity change from 0 to 512 [ 623.523227][T13824] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 623.541201][T13824] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 623.556130][T13824] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7857: bg 0: block 248: padding at end of block bitmap is not set [ 623.572437][T13824] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.7857: Failed to acquire dquot type 1 [ 623.584221][T13824] EXT4-fs (loop2): 1 truncate cleaned up [ 623.590291][T13824] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 623.613758][ T3445] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 623.646880][T13832] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.680821][T13837] loop1: detected capacity change from 0 to 512 [ 623.687988][T13837] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 623.698914][T13837] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 623.713988][T13837] EXT4-fs (loop1): 1 truncate cleaned up [ 623.720237][T13837] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.760713][T13832] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.802535][ T2174] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.850716][T13832] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.900479][T13832] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.955883][ T294] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.968114][ T294] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.994054][ T294] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.009257][ T294] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.077296][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.100806][ T31] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.133000][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.143732][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.240495][ T9692] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.258821][T13887] netlink: 'syz.6.7865': attribute type 1 has an invalid length. [ 624.279815][T13887] 8021q: adding VLAN 0 to HW filter on device bond1 [ 624.326037][T13922] FAULT_INJECTION: forcing a failure. [ 624.326037][T13922] name failslab, interval 1, probability 0, space 0, times 0 [ 624.338690][T13922] CPU: 1 UID: 0 PID: 13922 Comm: syz.0.7866 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 624.338761][T13922] Tainted: [W]=WARN [ 624.338765][T13922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 624.338772][T13922] Call Trace: [ 624.338776][T13922] [ 624.338782][T13922] __dump_stack+0x1d/0x30 [ 624.338827][T13922] dump_stack_lvl+0xe8/0x140 [ 624.338845][T13922] dump_stack+0x15/0x1b [ 624.338863][T13922] should_fail_ex+0x265/0x280 [ 624.338925][T13922] should_failslab+0x8c/0xb0 [ 624.338942][T13922] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 624.339011][T13922] ? __d_alloc+0x3d/0x340 [ 624.339031][T13922] __d_alloc+0x3d/0x340 [ 624.339131][T13922] ? mpol_shared_policy_init+0xbd/0x4c0 [ 624.339156][T13922] d_alloc_pseudo+0x1e/0x80 [ 624.339297][T13922] alloc_file_pseudo+0x71/0x160 [ 624.339310][T13922] __shmem_file_setup+0x1de/0x210 [ 624.339323][T13922] shmem_file_setup+0x3b/0x50 [ 624.339361][T13922] __se_sys_memfd_create+0x2c3/0x590 [ 624.339376][T13922] __x64_sys_memfd_create+0x31/0x40 [ 624.339446][T13922] x64_sys_call+0x2ac2/0x3000 [ 624.339459][T13922] do_syscall_64+0xd2/0x200 [ 624.339471][T13922] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 624.339488][T13922] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 624.339568][T13922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.339632][T13922] RIP: 0033:0x7f36d9c6f6c9 [ 624.339641][T13922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.339709][T13922] RSP: 002b:00007f36d86d6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 624.339721][T13922] RAX: ffffffffffffffda RBX: 000000000000055e RCX: 00007f36d9c6f6c9 [ 624.339729][T13922] RDX: 00007f36d86d6ef0 RSI: 0000000000000000 RDI: 00007f36d9cf2960 [ 624.339736][T13922] RBP: 0000200000001bc0 R08: 00007f36d86d6bb7 R09: 00007f36d86d6e40 [ 624.339796][T13922] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 624.339803][T13922] R13: 00007f36d86d6ef0 R14: 00007f36d86d6eb0 R15: 0000200000000280 [ 624.339814][T13922] [ 624.545610][T13887] bond1 (unregistering): Released all slaves [ 624.678769][T13962] loop6: detected capacity change from 0 to 512 [ 624.691221][T13962] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 624.747229][T13968] siw: device registration error -23 [ 624.918564][T13988] FAULT_INJECTION: forcing a failure. [ 624.918564][T13988] name failslab, interval 1, probability 0, space 0, times 0 [ 624.931246][T13988] CPU: 0 UID: 0 PID: 13988 Comm: syz.2.7878 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 624.931333][T13988] Tainted: [W]=WARN [ 624.931341][T13988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 624.931355][T13988] Call Trace: [ 624.931362][T13988] [ 624.931369][T13988] __dump_stack+0x1d/0x30 [ 624.931390][T13988] dump_stack_lvl+0xe8/0x140 [ 624.931428][T13988] dump_stack+0x15/0x1b [ 624.931477][T13988] should_fail_ex+0x265/0x280 [ 624.931514][T13988] should_failslab+0x8c/0xb0 [ 624.931539][T13988] kmem_cache_alloc_noprof+0x50/0x480 [ 624.931578][T13988] ? alloc_empty_file+0x76/0x200 [ 624.931668][T13988] alloc_empty_file+0x76/0x200 [ 624.931696][T13988] alloc_file_pseudo+0xc6/0x160 [ 624.931715][T13988] __shmem_file_setup+0x1de/0x210 [ 624.931736][T13988] shmem_file_setup+0x3b/0x50 [ 624.931797][T13988] __se_sys_memfd_create+0x2c3/0x590 [ 624.931895][T13988] __x64_sys_memfd_create+0x31/0x40 [ 624.931917][T13988] x64_sys_call+0x2ac2/0x3000 [ 624.931939][T13988] do_syscall_64+0xd2/0x200 [ 624.931957][T13988] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 624.932054][T13988] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 624.932135][T13988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.932159][T13988] RIP: 0033:0x7efd35b9f6c9 [ 624.932176][T13988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 624.932196][T13988] RSP: 002b:00007efd34606e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 624.932217][T13988] RAX: ffffffffffffffda RBX: 000000000000046f RCX: 00007efd35b9f6c9 [ 624.932231][T13988] RDX: 00007efd34606ef0 RSI: 0000000000000000 RDI: 00007efd35c22960 [ 624.932261][T13988] RBP: 0000200000000bc0 R08: 00007efd34606bb7 R09: 00007efd34606e40 [ 624.932273][T13988] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 624.932284][T13988] R13: 00007efd34606ef0 R14: 00007efd34606eb0 R15: 00002000000007c0 [ 624.932300][T13988] [ 625.174251][T13990] loop2: detected capacity change from 0 to 512 [ 625.200753][T13990] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 625.275360][ T9692] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 625.314244][T14001] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.390841][T14001] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.470923][T14001] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.533075][T14001] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.647737][ T2611] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.705748][ T2611] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.744418][ T2611] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.777042][ T2611] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.833102][T14021] __nla_validate_parse: 4 callbacks suppressed [ 625.833118][T14021] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7883'. [ 625.848791][T14021] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7883'. [ 625.902351][T14025] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7885'. [ 625.912841][T14025] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7885'. [ 625.942179][T14027] loop6: detected capacity change from 0 to 512 [ 625.951278][T14027] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.7886: iget: bad extra_isize 90 (inode size 256) [ 625.965028][T14027] EXT4-fs (loop6): Remounting filesystem read-only [ 625.971891][T14027] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -30) [ 625.981073][T14027] EXT4-fs (loop6): 1 orphan inode deleted [ 625.987291][T14027] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 626.006013][T14027] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7886'. [ 626.063591][ T9692] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.309172][ T29] kauditd_printk_skb: 17584 callbacks suppressed [ 626.309260][ T29] audit: type=1326 audit(634.298:150419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13985 comm="syz.1.7877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7072f6c9 code=0x50000 [ 626.339024][ T29] audit: type=1326 audit(634.298:150420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13985 comm="syz.1.7877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7072f6c9 code=0x50000 [ 626.361889][ T29] audit: type=1326 audit(634.308:150421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13985 comm="syz.1.7877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7072f6c9 code=0x50000 [ 626.384747][ T29] audit: type=1326 audit(634.308:150422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13985 comm="syz.1.7877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7072f6c9 code=0x50000 [ 626.407622][ T29] audit: type=1326 audit(634.308:150423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13985 comm="syz.1.7877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7072f6c9 code=0x50000 [ 626.430459][ T29] audit: type=1326 audit(634.308:150424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13985 comm="syz.1.7877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7072f6c9 code=0x50000 [ 626.453224][ T29] audit: type=1326 audit(634.308:150425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13985 comm="syz.1.7877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7072f6c9 code=0x50000 [ 626.476031][ T29] audit: type=1326 audit(634.308:150426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13985 comm="syz.1.7877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7072f6c9 code=0x50000 [ 626.498882][ T29] audit: type=1326 audit(634.308:150427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13985 comm="syz.1.7877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7072f6c9 code=0x50000 [ 626.521682][ T29] audit: type=1326 audit(634.308:150428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13985 comm="syz.1.7877" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba7072f6c9 code=0x50000 [ 626.884302][T14047] xt_hashlimit: max too large, truncated to 1048576 [ 626.924252][T14047] loop5: detected capacity change from 0 to 512 [ 626.946864][T14047] EXT4-fs: Ignoring removed nobh option [ 626.963235][T14047] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 626.996265][T14059] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.017139][T14047] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.7892: iget: bad i_size value: 38620345925642 [ 627.038193][T14047] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.7892: couldn't read orphan inode 15 (err -117) [ 627.064596][T14047] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 627.082878][T14059] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.102976][T14047] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.7892: bg 0: block 5: invalid block bitmap [ 627.140825][T14059] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.158469][T12153] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.194382][T14072] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7894'. [ 627.213954][T14072] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7894'. [ 627.224562][T14059] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.319657][T14082] loop5: detected capacity change from 0 to 512 [ 627.337509][T14082] EXT4-fs error (device loop5): ext4_xattr_inode_iget:441: inode #18: comm syz.5.7898: iget: bad extra_isize 90 (inode size 256) [ 627.351308][T14082] EXT4-fs (loop5): Remounting filesystem read-only [ 627.357930][T14082] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -30) [ 627.367287][T14082] EXT4-fs (loop5): 1 orphan inode deleted [ 627.373438][T14082] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 627.400649][T14082] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7898'. [ 627.482209][T12153] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 627.779449][T14099] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7903'. [ 627.865326][T14102] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7903'. [ 627.923037][T14108] loop1: detected capacity change from 0 to 164 [ 627.930096][T14108] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 627.938829][T14108] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 628.211870][ T3445] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.355994][T14136] siw: device registration error -23 [ 628.461412][T14147] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 628.892835][T14169] SELinux: policydb version 0 does not match my version range 15-35 [ 628.901358][T14169] SELinux: failed to load policy [ 628.961760][T14178] tipc: Started in network mode [ 628.966662][T14178] tipc: Node identity 2a14db890427, cluster identity 4711 [ 628.973905][T14178] tipc: Enabled bearer , priority 0 [ 628.983224][T14178] tipc: Disabling bearer [ 629.027892][T14187] loop5: detected capacity change from 0 to 512 [ 629.049036][T14187] EXT4-fs: Ignoring removed orlov option [ 629.060567][T14187] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 629.069322][T14187] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 629.097666][T14187] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.144313][T12153] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.180164][T14207] loop5: detected capacity change from 0 to 512 [ 629.210984][T14207] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 629.350111][T14216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 629.358999][T14216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 629.568384][ T2611] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.597624][ T2611] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.613075][ T2611] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.621401][ T2611] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 629.903051][T14247] loop1: detected capacity change from 0 to 256 [ 630.086831][T14256] loop0: detected capacity change from 0 to 4096 [ 630.095557][T14256] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.268406][T28762] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.303327][T14274] loop0: detected capacity change from 0 to 512 [ 630.310346][T14274] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 630.330596][T14274] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 630.345287][T14274] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.7946: bg 0: block 248: padding at end of block bitmap is not set [ 630.364599][T14274] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.7946: Failed to acquire dquot type 1 [ 630.376381][T14274] EXT4-fs (loop0): 1 truncate cleaned up [ 630.382608][T14274] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 630.402891][T28762] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 630.439885][T14283] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.523640][T14283] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.584424][T14283] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.650426][T14283] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.754863][ T316] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.794337][ T2611] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.825220][ T316] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.854851][T14309] loop6: detected capacity change from 0 to 512 [ 630.861885][T14309] EXT4-fs: Ignoring removed orlov option [ 630.865997][ T2611] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.868352][T14309] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 630.884476][T14309] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 630.901569][T14309] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.917421][T14315] loop1: detected capacity change from 0 to 512 [ 630.925293][T14315] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 630.940564][T14315] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 630.961017][T14315] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7954: bg 0: block 248: padding at end of block bitmap is not set [ 630.961319][ T9692] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.975890][T14315] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.7954: Failed to acquire dquot type 1 [ 631.002049][T14315] EXT4-fs (loop1): 1 truncate cleaned up [ 631.008014][T14315] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 631.020101][T14329] loop0: detected capacity change from 0 to 512 [ 631.027718][T14329] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 631.046214][T14329] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 631.061320][ T2174] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 631.062431][T14329] EXT4-fs (loop0): 1 truncate cleaned up [ 631.076750][T14329] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.109935][T14337] loop1: detected capacity change from 0 to 512 [ 631.117588][T28762] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.134671][T14337] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 631.158824][ T2174] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.215892][T14351] loop1: detected capacity change from 0 to 1024 [ 631.224110][T14351] EXT4-fs (loop1): stripe (3889) is not aligned with cluster size (16), stripe is disabled [ 631.240646][T14351] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.255211][T14351] FAULT_INJECTION: forcing a failure. [ 631.255211][T14351] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 631.268513][T14351] CPU: 0 UID: 0 PID: 14351 Comm: syz.1.7962 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 631.268609][T14351] Tainted: [W]=WARN [ 631.268616][T14351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 631.268629][T14351] Call Trace: [ 631.268637][T14351] [ 631.268644][T14351] __dump_stack+0x1d/0x30 [ 631.268669][T14351] dump_stack_lvl+0xe8/0x140 [ 631.268750][T14351] dump_stack+0x15/0x1b [ 631.268769][T14351] should_fail_ex+0x265/0x280 [ 631.268806][T14351] should_fail_alloc_page+0xf2/0x100 [ 631.269002][T14351] __alloc_frozen_pages_noprof+0xff/0x360 [ 631.269041][T14351] alloc_pages_mpol+0xb3/0x260 [ 631.269121][T14351] folio_alloc_noprof+0x97/0x150 [ 631.269142][T14351] filemap_alloc_folio_noprof+0x66/0x210 [ 631.269172][T14351] __filemap_get_folio+0x28f/0x650 [ 631.269264][T14351] ? ext4_chunk_trans_extent+0x178/0x1a0 [ 631.269286][T14351] ext4_write_begin+0x2fe/0xeb0 [ 631.269360][T14351] ? __folio_mark_dirty+0x38f/0x4a0 [ 631.269423][T14351] ? __mark_inode_dirty+0x1af/0x750 [ 631.269465][T14351] ext4_da_write_begin+0x1fb/0x6e0 [ 631.269553][T14351] ? balance_dirty_pages_ratelimited_flags+0x40b/0x5e0 [ 631.269585][T14351] generic_perform_write+0x184/0x490 [ 631.269613][T14351] ext4_buffered_write_iter+0x1ee/0x3c0 [ 631.269637][T14351] ? ext4_file_write_iter+0xfe/0xf60 [ 631.269685][T14351] ext4_file_write_iter+0x387/0xf60 [ 631.269708][T14351] ? kstrtouint_from_user+0x9f/0xf0 [ 631.269730][T14351] ? 0xffffffff81000000 [ 631.269745][T14351] ? __rcu_read_unlock+0x4f/0x70 [ 631.269811][T14351] ? avc_policy_seqno+0x15/0x30 [ 631.269831][T14351] ? selinux_file_permission+0x1e4/0x320 [ 631.269868][T14351] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 631.269959][T14351] vfs_write+0x52a/0x960 [ 631.270009][T14351] __x64_sys_pwrite64+0xfd/0x150 [ 631.270120][T14351] x64_sys_call+0xc4d/0x3000 [ 631.270145][T14351] do_syscall_64+0xd2/0x200 [ 631.270168][T14351] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 631.270214][T14351] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 631.270288][T14351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.270313][T14351] RIP: 0033:0x7fba7072f6c9 [ 631.270330][T14351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 631.270350][T14351] RSP: 002b:00007fba6f197038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 631.270376][T14351] RAX: ffffffffffffffda RBX: 00007fba70985fa0 RCX: 00007fba7072f6c9 [ 631.270388][T14351] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000005 [ 631.270457][T14351] RBP: 00007fba6f197090 R08: 0000000000000000 R09: 0000000000000000 [ 631.270471][T14351] R10: 000000000000fecc R11: 0000000000000246 R12: 0000000000000001 [ 631.270485][T14351] R13: 00007fba70986038 R14: 00007fba70985fa0 R15: 00007fff3ed5a768 [ 631.270506][T14351] [ 631.548748][T14351] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 1 with error 28 [ 631.561123][T14351] EXT4-fs (loop1): This should not happen!! Data will be lost [ 631.561123][T14351] [ 631.570807][T14351] EXT4-fs (loop1): Total free blocks count 0 [ 631.576779][T14351] EXT4-fs (loop1): Free/Dirty block details [ 631.582745][T14351] EXT4-fs (loop1): free_blocks=0 [ 631.587698][T14351] EXT4-fs (loop1): dirty_blocks=0 [ 631.592736][T14351] EXT4-fs (loop1): Block reservation details [ 631.598810][T14351] EXT4-fs (loop1): i_reserved_data_blocks=0 [ 631.628124][ T2174] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.638939][ T29] kauditd_printk_skb: 14436 callbacks suppressed [ 631.638953][ T29] audit: type=1326 audit(639.628:164861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14356 comm="syz.2.7963" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd35b9f6c9 code=0x0 [ 631.670298][ T29] audit: type=1326 audit(639.668:164862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14358 comm="syz.6.7965" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe5b502f6c9 code=0x0 [ 631.697104][T14363] loop1: detected capacity change from 0 to 1024 [ 631.705526][T14363] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.759313][T14363] SELinux: failed to load policy [ 631.780912][ T29] audit: type=1400 audit(639.778:164863): avc: denied { create } for pid=14362 comm="syz.1.7964" name="file7" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 631.804345][T14363] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 631.823792][ T2174] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.899645][T14372] loop1: detected capacity change from 0 to 512 [ 631.906511][T14372] EXT4-fs: Ignoring removed orlov option [ 631.912564][T14372] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 631.921276][T14372] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 631.942570][T14372] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 631.964184][ T2174] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.989917][ T29] audit: type=1400 audit(639.988:164864): avc: denied { read } for pid=14378 comm="syz.1.7967" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 632.013824][ T29] audit: type=1400 audit(639.988:164865): avc: denied { open } for pid=14378 comm="syz.1.7967" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 632.043385][ T29] audit: type=1326 audit(640.028:164866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14380 comm="syz.0.7968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d9c6f6c9 code=0x7ffc0000 [ 632.066632][ T29] audit: type=1326 audit(640.038:164867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14380 comm="syz.0.7968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d9c6f6c9 code=0x7ffc0000 [ 632.089857][ T29] audit: type=1326 audit(640.038:164868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14380 comm="syz.0.7968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36d9c6f6c9 code=0x7ffc0000 [ 632.113016][ T29] audit: type=1326 audit(640.038:164869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14380 comm="syz.0.7968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d9c6f6c9 code=0x7ffc0000 [ 632.136158][ T29] audit: type=1326 audit(640.038:164870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14380 comm="syz.0.7968" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d9c6f6c9 code=0x7ffc0000 [ 632.160597][T14381] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.187514][T12153] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.203410][T14392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 632.211993][T14392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 632.221141][T14381] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.244100][T14398] loop1: detected capacity change from 0 to 512 [ 632.250888][T14398] EXT4-fs: Ignoring removed orlov option [ 632.256975][T14398] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 632.265837][T14398] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 632.280699][T14398] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 632.303553][ T2174] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.320036][T14405] loop1: detected capacity change from 0 to 512 [ 632.327053][T14405] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 632.338291][T14405] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 632.338700][T14381] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.352988][T14405] EXT4-fs (loop1): 1 truncate cleaned up [ 632.368296][T14405] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 632.395561][ T2174] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 632.406925][T14381] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.421288][T14415] loop1: detected capacity change from 0 to 512 [ 632.428266][T14415] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 632.441170][T14415] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 632.455794][T14415] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.7972: bg 0: block 248: padding at end of block bitmap is not set [ 632.470834][T14415] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.7972: Failed to acquire dquot type 1 [ 632.482584][T14415] EXT4-fs (loop1): 1 truncate cleaned up [ 632.488574][T14415] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 632.521077][ T2174] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 632.646208][T14428] lo speed is unknown, defaulting to 1000 [ 632.760166][T14475] __nla_validate_parse: 12 callbacks suppressed [ 632.760183][T14475] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7982'. [ 632.760828][T14473] netlink: 'wޣ': attribute type 3 has an invalid length. [ 632.766472][T14475] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7982'. [ 632.876064][T14482] loop5: detected capacity change from 0 to 512 [ 632.899378][T14482] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 632.933531][T14482] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 632.948098][T14488] loop2: detected capacity change from 0 to 512 [ 632.954462][T14482] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7985: bg 0: block 248: padding at end of block bitmap is not set [ 632.957390][T14488] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.7987: iget: bad extra_isize 90 (inode size 256) [ 632.970956][T14482] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.7985: Failed to acquire dquot type 1 [ 632.982585][T14488] EXT4-fs (loop2): Remounting filesystem read-only [ 633.000298][T14488] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -30) [ 633.000713][T14482] EXT4-fs (loop5): 1 truncate cleaned up [ 633.009361][T14488] EXT4-fs (loop2): 1 orphan inode deleted [ 633.015545][T14482] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 633.021037][T14488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 633.054605][T12153] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 633.071199][T14488] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7987'. [ 633.093171][T14498] loop5: detected capacity change from 0 to 4096 [ 633.101353][T14498] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 633.124501][ T3445] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.179374][T14507] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7990'. [ 633.250859][T14515] loop2: detected capacity change from 0 to 1024 [ 633.259576][T14515] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 633.319394][T14515] SELinux: failed to load policy [ 633.336398][T12153] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.347069][ T3445] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.404530][T14529] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7997'. [ 633.413466][T14529] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7997'. [ 633.471256][T14536] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.521076][T14536] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.580839][T14536] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.632498][T14536] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.694976][ T2611] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.710780][ T2611] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.723747][ T2611] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.732305][ T2611] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.761248][T14562] loop1: detected capacity change from 0 to 164 [ 633.768540][T14562] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 633.777583][T14562] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 633.782430][ T6621] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 633.794203][ T6621] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 633.886093][T14565] loop6: detected capacity change from 0 to 128 [ 633.894419][T14565] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 633.949176][ T9692] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 633.978983][T14584] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8007'. [ 634.056439][T14592] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8007'. [ 634.065551][T14592] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8007'. [ 634.242814][T14600] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8011'. [ 634.287883][T14606] xt_hashlimit: max too large, truncated to 1048576 [ 634.307286][T14606] loop5: detected capacity change from 0 to 512 [ 634.314086][T14606] EXT4-fs: Ignoring removed nobh option [ 634.319920][T14606] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 634.330147][T14606] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.8012: iget: bad i_size value: 38620345925642 [ 634.343218][T14606] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.8012: couldn't read orphan inode 15 (err -117) [ 634.356206][T14606] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.371481][T14606] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.8012: bg 0: block 5: invalid block bitmap [ 634.395420][T12153] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 634.408343][T14630] loop2: detected capacity change from 0 to 512 [ 634.416596][T14630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 634.447887][T14642] loop2: detected capacity change from 0 to 512 [ 634.454525][T14642] EXT4-fs: Ignoring removed orlov option [ 634.460633][T14642] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 634.469372][T14642] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 634.498094][T14650] loop2: detected capacity change from 0 to 512 [ 634.665811][ T31] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.676994][ T316] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.688662][ T31] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.699736][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.751952][T14676] xt_hashlimit: max too large, truncated to 1048576 [ 634.850545][T14688] SELinux: failed to load policy [ 634.856945][T14692] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.921247][T14692] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.961631][T14692] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.010929][T14692] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.132439][T14716] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.180620][T14716] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.222055][T14716] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.257590][T14739] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 635.268965][T14739] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 635.310650][T14716] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.379780][T14739] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 635.390021][T14739] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 635.425438][ T294] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.436696][ T294] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.448083][ T294] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.463287][T14739] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 635.473652][T14739] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 635.497342][ T2611] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.543046][T14765] loop2: detected capacity change from 0 to 4096 [ 635.545282][T14739] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 635.560192][T14739] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 635.676653][ T6516] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 635.684986][ T6516] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 635.736584][ T6516] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 635.744915][ T6516] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 635.777844][ T316] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 635.783826][T14783] siw: device registration error -23 [ 635.786425][ T316] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 635.823121][T14787] loop2: detected capacity change from 0 to 512 [ 635.828619][ T6516] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 635.830611][T14787] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 635.837682][ T6516] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 635.853534][T14787] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 635.870552][T14787] EXT4-fs (loop2): 1 truncate cleaned up [ 635.986340][T14814] loop1: detected capacity change from 0 to 512 [ 635.995671][T14814] x_tables: duplicate underflow at hook 1 [ 636.017060][T14819] siw: device registration error -23 [ 636.045185][T14822] FAULT_INJECTION: forcing a failure. [ 636.045185][T14822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 636.058270][T14822] CPU: 0 UID: 0 PID: 14822 Comm: syz.1.8057 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 636.058301][T14822] Tainted: [W]=WARN [ 636.058307][T14822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 636.058399][T14822] Call Trace: [ 636.058404][T14822] [ 636.058409][T14822] __dump_stack+0x1d/0x30 [ 636.058424][T14822] dump_stack_lvl+0xe8/0x140 [ 636.058436][T14822] dump_stack+0x15/0x1b [ 636.058492][T14822] should_fail_ex+0x265/0x280 [ 636.058540][T14822] should_fail+0xb/0x20 [ 636.058557][T14822] should_fail_usercopy+0x1a/0x20 [ 636.058628][T14822] _copy_from_user+0x1c/0xb0 [ 636.058643][T14822] ___sys_sendmsg+0xc1/0x1d0 [ 636.058662][T14822] __x64_sys_sendmsg+0xd4/0x160 [ 636.058676][T14822] x64_sys_call+0x191e/0x3000 [ 636.058729][T14822] do_syscall_64+0xd2/0x200 [ 636.058742][T14822] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 636.058833][T14822] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 636.058854][T14822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 636.058867][T14822] RIP: 0033:0x7fba7072f6c9 [ 636.058876][T14822] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.058951][T14822] RSP: 002b:00007fba6f197038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 636.058963][T14822] RAX: ffffffffffffffda RBX: 00007fba70985fa0 RCX: 00007fba7072f6c9 [ 636.058971][T14822] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000005 [ 636.058978][T14822] RBP: 00007fba6f197090 R08: 0000000000000000 R09: 0000000000000000 [ 636.058986][T14822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.058993][T14822] R13: 00007fba70986038 R14: 00007fba70985fa0 R15: 00007fff3ed5a768 [ 636.059004][T14822] [ 636.262686][T14828] netlink: 'syz.0.8059': attribute type 3 has an invalid length. [ 636.318946][T14825] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.339236][T14836] loop1: detected capacity change from 0 to 512 [ 636.379121][T14825] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.440351][T14825] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.576097][T14825] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.639472][ T29] kauditd_printk_skb: 1009 callbacks suppressed [ 636.639520][ T29] audit: type=1326 audit(644.638:165876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14852 comm="syz.1.8065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fba70726567 code=0x7ffc0000 [ 636.668804][ T29] audit: type=1326 audit(644.638:165877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14852 comm="syz.1.8065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fba706cb789 code=0x7ffc0000 [ 636.691794][ T29] audit: type=1326 audit(644.638:165878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14852 comm="syz.1.8065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fba7072f6c9 code=0x7ffc0000 [ 636.714965][ T29] audit: type=1326 audit(644.668:165879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14852 comm="syz.1.8065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fba70726567 code=0x7ffc0000 [ 636.738000][ T29] audit: type=1326 audit(644.668:165880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14852 comm="syz.1.8065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fba706cb789 code=0x7ffc0000 [ 636.761065][ T29] audit: type=1326 audit(644.668:165881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14852 comm="syz.1.8065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fba7072f6c9 code=0x7ffc0000 [ 636.784087][ T29] audit: type=1326 audit(644.678:165882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14852 comm="syz.1.8065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fba70726567 code=0x7ffc0000 [ 636.807034][ T29] audit: type=1326 audit(644.678:165883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14852 comm="syz.1.8065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fba706cb789 code=0x7ffc0000 [ 636.830031][ T29] audit: type=1326 audit(644.678:165884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14852 comm="syz.1.8065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fba7072f6c9 code=0x7ffc0000 [ 636.853060][ T29] audit: type=1326 audit(644.688:165885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14852 comm="syz.1.8065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fba70726567 code=0x7ffc0000 [ 636.897492][T14863] 8021q: adding VLAN 0 to HW filter on device bond1 [ 636.926059][T14900] xt_hashlimit: max too large, truncated to 1048576 [ 636.952240][T14898] loop2: detected capacity change from 0 to 4096 [ 636.976216][ T2611] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.010731][ T316] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.044647][ T316] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.124044][ T316] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.171843][T14929] loop5: detected capacity change from 0 to 1024 [ 637.223385][T14938] loop5: detected capacity change from 0 to 512 [ 637.230993][T14938] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 637.253644][T14938] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 637.268624][T14938] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.8073: bg 0: block 248: padding at end of block bitmap is not set [ 637.284095][T14938] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.8073: Failed to acquire dquot type 1 [ 637.296264][T14938] EXT4-fs (loop5): 1 truncate cleaned up [ 637.300678][T14948] loop2: detected capacity change from 0 to 512 [ 637.327724][T14955] SELinux: Context system_u:object_r:system_cron_spool_t:s0 is not valid (left unmapped). [ 637.416566][T14964] siw: device registration error -23 [ 637.458582][T14968] loop1: detected capacity change from 0 to 1024 [ 637.656223][ T316] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.678609][ T316] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.696231][ T316] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.712052][ T316] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.723815][T14986] loop6: detected capacity change from 0 to 164 [ 637.733055][T14987] loop1: detected capacity change from 0 to 128 [ 637.742120][T14986] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 637.814166][T14997] loop6: detected capacity change from 0 to 2048 [ 637.854910][T14997] __nla_validate_parse: 7 callbacks suppressed [ 637.854981][T14997] netlink: 44 bytes leftover after parsing attributes in process `syz.6.8088'. [ 637.872350][T14997] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8088'. [ 637.959193][T15007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8090'. [ 638.012593][T15017] netlink: 72 bytes leftover after parsing attributes in process `syz.6.8091'. [ 638.032445][T15019] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8090'. [ 638.041480][T15019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8090'. [ 638.041563][T15021] siw: device registration error -23 [ 638.083067][T15025] loop2: detected capacity change from 0 to 512 [ 638.093074][T15025] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.8094: iget: bad extra_isize 90 (inode size 256) [ 638.107700][T15025] EXT4-fs (loop2): Remounting filesystem read-only [ 638.114662][T15025] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -30) [ 638.123789][T15025] EXT4-fs (loop2): 1 orphan inode deleted [ 638.134482][T15025] netlink: 44 bytes leftover after parsing attributes in process `syz.2.8094'. [ 638.174882][T15040] loop6: detected capacity change from 0 to 164 [ 638.182486][T15040] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 638.194089][T15040] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 638.211504][T15045] loop2: detected capacity change from 0 to 512 [ 638.226382][T15053] FAULT_INJECTION: forcing a failure. [ 638.226382][T15053] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 638.239554][T15053] CPU: 1 UID: 0 PID: 15053 Comm: syz.6.8102 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 638.239590][T15053] Tainted: [W]=WARN [ 638.239662][T15053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 638.239675][T15053] Call Trace: [ 638.239682][T15053] [ 638.239690][T15053] __dump_stack+0x1d/0x30 [ 638.239715][T15053] dump_stack_lvl+0xe8/0x140 [ 638.239745][T15053] dump_stack+0x15/0x1b [ 638.239835][T15053] should_fail_ex+0x265/0x280 [ 638.239930][T15053] should_fail+0xb/0x20 [ 638.239956][T15053] should_fail_usercopy+0x1a/0x20 [ 638.239979][T15053] strncpy_from_user+0x25/0x230 [ 638.240077][T15053] strncpy_from_user_nofault+0x68/0xf0 [ 638.240102][T15053] bpf_probe_read_compat_str+0xb4/0x130 [ 638.240211][T15053] bpf_prog_95f2e3557e98b35e+0x3e/0x44 [ 638.240229][T15053] bpf_trace_run2+0x107/0x1c0 [ 638.240312][T15053] ? bitmap_free+0x15/0x20 [ 638.240344][T15053] ? bitmap_free+0x15/0x20 [ 638.240500][T15053] __traceiter_kfree+0x2e/0x50 [ 638.240524][T15053] ? bitmap_free+0x15/0x20 [ 638.240550][T15053] kfree+0x351/0x400 [ 638.240629][T15053] bitmap_free+0x15/0x20 [ 638.240743][T15053] evdev_release+0x16d/0x4c0 [ 638.240777][T15053] ? __pfx_evdev_release+0x10/0x10 [ 638.240809][T15053] __fput+0x29b/0x650 [ 638.240827][T15053] fput_close_sync+0x6e/0x120 [ 638.240850][T15053] __x64_sys_close+0x56/0xf0 [ 638.240873][T15053] x64_sys_call+0x273c/0x3000 [ 638.240970][T15053] do_syscall_64+0xd2/0x200 [ 638.240991][T15053] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 638.241022][T15053] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 638.241052][T15053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.241106][T15053] RIP: 0033:0x7fe5b502e32a [ 638.241122][T15053] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 43 91 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 a3 91 02 00 8b 44 24 [ 638.241211][T15053] RSP: 002b:00007fe5b3a96ff0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 638.241232][T15053] RAX: ffffffffffffffda RBX: 00007fe5b5285fa0 RCX: 00007fe5b502e32a [ 638.241304][T15053] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 638.241315][T15053] RBP: 00007fe5b3a97090 R08: 0000000000000000 R09: 0000000000000000 [ 638.241330][T15053] R10: 0000000000000005 R11: 0000000000000293 R12: 0000000000000001 [ 638.241343][T15053] R13: 00007fe5b5286038 R14: 00007fe5b5285fa0 R15: 00007ffd79aeba48 [ 638.241363][T15053] [ 638.545559][T15062] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8103'. [ 638.562049][T15055] lo speed is unknown, defaulting to 1000 [ 638.728690][T15086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8105'. [ 638.752169][T15086] 8021q: adding VLAN 0 to HW filter on device bond1 [ 638.787107][T15123] loop1: detected capacity change from 0 to 512 [ 638.798547][T15123] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 638.820406][T15123] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1137: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 638.843622][T15123] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.8107: bg 0: block 248: padding at end of block bitmap is not set [ 638.860063][T15123] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.8107: Failed to acquire dquot type 1 [ 638.874369][T15123] EXT4-fs (loop1): 1 truncate cleaned up [ 638.913745][T15137] loop1: detected capacity change from 0 to 4096 [ 639.053928][T15146] loop5: detected capacity change from 0 to 1024 [ 639.056704][T15148] loop6: detected capacity change from 0 to 512 [ 639.077464][T15148] EXT4-fs: Ignoring removed bh option [ 639.089736][T15146] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 639.108283][T15146] System zones: 0-1, 3-36 [ 639.162055][T15162] xt_hashlimit: max too large, truncated to 1048576 [ 639.183180][T15162] loop2: detected capacity change from 0 to 512 [ 639.183366][T15162] EXT4-fs: Ignoring removed nobh option [ 639.192844][T15162] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 639.195940][T15162] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.8115: iget: bad i_size value: 38620345925642 [ 639.196068][T15162] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.8115: couldn't read orphan inode 15 (err -117) [ 639.200406][T15162] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.8115: bg 0: block 5: invalid block bitmap [ 639.309619][T15189] loop6: detected capacity change from 0 to 512 [ 639.360561][T15194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8120'. [ 639.374510][T15189] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 639.396202][T15189] EXT4-fs (loop6): changing journal_checksum during remount not supported; ignoring [ 639.417888][T15189] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 639.438250][T15201] siw: device registration error -23 [ 639.487761][T15205] loop2: detected capacity change from 0 to 512 [ 639.574009][T15207] loop6: detected capacity change from 0 to 512 [ 639.589374][T15207] EXT4-fs error (device loop6): ext4_xattr_inode_iget:441: inode #18: comm syz.6.8124: iget: bad extra_isize 90 (inode size 256) [ 639.604348][T15207] EXT4-fs (loop6): Remounting filesystem read-only [ 639.613766][T15207] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -30) [ 639.623274][T15207] EXT4-fs (loop6): 1 orphan inode deleted [ 639.760848][T15235] loop6: detected capacity change from 0 to 1024 [ 639.787240][T15235] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e815c09c, mo2=0003] [ 639.813543][T15235] System zones: 0-1, 3-36 [ 639.854962][T15224] lo speed is unknown, defaulting to 1000 [ 639.882599][ T316] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.896224][T15251] FAULT_INJECTION: forcing a failure. [ 639.896224][T15251] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 639.909332][T15251] CPU: 1 UID: 0 PID: 15251 Comm: syz.1.8130 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 639.909360][T15251] Tainted: [W]=WARN [ 639.909364][T15251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 639.909372][T15251] Call Trace: [ 639.909445][T15251] [ 639.909450][T15251] __dump_stack+0x1d/0x30 [ 639.909464][T15251] dump_stack_lvl+0xe8/0x140 [ 639.909476][T15251] dump_stack+0x15/0x1b [ 639.909486][T15251] should_fail_ex+0x265/0x280 [ 639.909506][T15251] should_fail+0xb/0x20 [ 639.909599][T15251] should_fail_usercopy+0x1a/0x20 [ 639.909612][T15251] _copy_from_user+0x1c/0xb0 [ 639.909626][T15251] __sys_bpf+0x183/0x7c0 [ 639.909643][T15251] __x64_sys_bpf+0x41/0x50 [ 639.909661][T15251] x64_sys_call+0x2aee/0x3000 [ 639.909674][T15251] do_syscall_64+0xd2/0x200 [ 639.909686][T15251] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 639.909726][T15251] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 639.909806][T15251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.909822][T15251] RIP: 0033:0x7fba7072f6c9 [ 639.909832][T15251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 639.909894][T15251] RSP: 002b:00007fba6f197038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 639.909911][T15251] RAX: ffffffffffffffda RBX: 00007fba70985fa0 RCX: 00007fba7072f6c9 [ 639.909924][T15251] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 639.910009][T15251] RBP: 00007fba6f197090 R08: 0000000000000000 R09: 0000000000000000 [ 639.910016][T15251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.910023][T15251] R13: 00007fba70986038 R14: 00007fba70985fa0 R15: 00007fff3ed5a768 [ 639.910118][T15251] [ 639.933667][T15264] pim6reg: entered allmulticast mode [ 639.979689][T15270] loop5: detected capacity change from 0 to 512 [ 640.110008][ T316] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 640.156705][ T316] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 640.168074][ T316] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 640.481627][T15296] loop1: detected capacity change from 0 to 512 [ 640.498273][T15296] EXT4-fs: Ignoring removed orlov option [ 640.508447][T15296] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 640.517156][T15296] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 640.601421][T15304] loop1: detected capacity change from 0 to 512 [ 640.620432][T15304] EXT4-fs error (device loop1): ext4_xattr_inode_iget:441: inode #18: comm syz.1.8139: iget: bad extra_isize 90 (inode size 256) [ 640.649318][T15304] EXT4-fs (loop1): Remounting filesystem read-only [ 640.669235][T15304] EXT4-fs warning (device loop1): ext4_evict_inode:274: xattr delete (err -30) [ 640.697818][T15304] EXT4-fs (loop1): 1 orphan inode deleted [ 640.782166][T15328] loop6: detected capacity change from 0 to 512 [ 640.846613][T15333] loop1: detected capacity change from 0 to 4096 [ 641.052132][T15340] lo speed is unknown, defaulting to 1000 [ 641.795620][T15388] loop6: detected capacity change from 0 to 512 [ 641.815271][T15384] 8021q: adding VLAN 0 to HW filter on device bond2 [ 641.871274][ T29] kauditd_printk_skb: 739 callbacks suppressed [ 641.871289][ T29] audit: type=1326 audit(649.868:166621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15430 comm="syz.0.8160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d9c6f6c9 code=0x7ffc0000 [ 641.901560][T15431] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.912035][ T29] audit: type=1326 audit(649.868:166622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15430 comm="syz.0.8160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36d9c6f6c9 code=0x7ffc0000 [ 641.935191][ T29] audit: type=1326 audit(649.868:166623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15430 comm="syz.0.8160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d9c6f6c9 code=0x7ffc0000 [ 641.958338][ T29] audit: type=1326 audit(649.868:166624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15430 comm="syz.0.8160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d9c6f6c9 code=0x7ffc0000 [ 641.981412][ T29] audit: type=1326 audit(649.868:166625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15430 comm="syz.0.8160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36d9c6f6c9 code=0x7ffc0000 [ 642.004492][ T29] audit: type=1326 audit(649.868:166626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15430 comm="syz.0.8160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d9c6f6c9 code=0x7ffc0000 [ 642.027622][ T29] audit: type=1326 audit(649.868:166627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15430 comm="syz.0.8160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d9c6f6c9 code=0x7ffc0000 [ 642.050694][ T29] audit: type=1326 audit(649.868:166628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15430 comm="syz.0.8160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f36d9c6f6c9 code=0x7ffc0000 [ 642.073825][ T29] audit: type=1326 audit(649.868:166629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15430 comm="syz.0.8160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36d9c6f6c9 code=0x7ffc0000 [ 642.097006][ T29] audit: type=1326 audit(649.868:166630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15430 comm="syz.0.8160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f36d9c6f6c9 code=0x7ffc0000 [ 642.138884][T15442] FAULT_INJECTION: forcing a failure. [ 642.138884][T15442] name fail_futex, interval 1, probability 0, space 0, times 1 [ 642.151766][T15442] CPU: 0 UID: 0 PID: 15442 Comm: syz.5.8162 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 642.151864][T15442] Tainted: [W]=WARN [ 642.151870][T15442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 642.151881][T15442] Call Trace: [ 642.151887][T15442] [ 642.151894][T15442] __dump_stack+0x1d/0x30 [ 642.151926][T15442] dump_stack_lvl+0xe8/0x140 [ 642.151948][T15442] dump_stack+0x15/0x1b [ 642.151992][T15442] should_fail_ex+0x265/0x280 [ 642.152029][T15442] should_fail+0xb/0x20 [ 642.152055][T15442] get_futex_key+0x130/0xbd0 [ 642.152123][T15442] futex_lock_pi+0xf3/0x780 [ 642.152142][T15442] ? _parse_integer_limit+0x170/0x190 [ 642.152172][T15442] ? __pfx_futex_wake_mark+0x10/0x10 [ 642.152199][T15442] do_futex+0x21f/0x380 [ 642.152281][T15442] __se_sys_futex+0x2ed/0x360 [ 642.152312][T15442] __x64_sys_futex+0x78/0x90 [ 642.152337][T15442] x64_sys_call+0x2e48/0x3000 [ 642.152362][T15442] do_syscall_64+0xd2/0x200 [ 642.152453][T15442] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 642.152557][T15442] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 642.152589][T15442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.152608][T15442] RIP: 0033:0x7fc61b29f6c9 [ 642.152622][T15442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 642.152642][T15442] RSP: 002b:00007fc619d07038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 642.152674][T15442] RAX: ffffffffffffffda RBX: 00007fc61b4f5fa0 RCX: 00007fc61b29f6c9 [ 642.152763][T15442] RDX: 0000000000000002 RSI: 0000000000000086 RDI: 000020000000cffc [ 642.152778][T15442] RBP: 00007fc619d07090 R08: 0000000000000000 R09: 00000000fffffffc [ 642.152816][T15442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 642.152830][T15442] R13: 00007fc61b4f6038 R14: 00007fc61b4f5fa0 R15: 00007fffca083ec8 [ 642.152850][T15442] [ 642.356448][T15431] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.425747][T15431] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.450547][T15452] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.533230][T15454] lo speed is unknown, defaulting to 1000 [ 642.570416][T15431] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.611020][T15452] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.656490][ T89] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.671293][ T89] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.679754][ T89] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.690439][ T31] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.700791][T15452] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.761938][T15452] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.797253][T15507] loop6: detected capacity change from 0 to 1024 [ 642.802866][T15508] 8021q: adding VLAN 0 to HW filter on device bond3 [ 642.810281][T15507] EXT4-fs: Ignoring removed oldalloc option [ 642.816244][T15507] EXT4-fs: Ignoring removed bh option [ 642.871626][ T316] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.890267][ T6516] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.900002][ T6516] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.916501][ T6516] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 643.038978][T15567] loop2: detected capacity change from 0 to 128 [ 643.047380][T15567] FAT-fs (loop2): bogus sectors per cluster 0 [ 643.053578][T15567] FAT-fs (loop2): Can't find a valid FAT filesystem [ 643.121067][T15577] loop5: detected capacity change from 0 to 512 [ 643.127575][T15577] EXT4-fs: Ignoring removed orlov option [ 643.134031][T15577] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 643.142796][T15577] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 643.210657][T15590] loop5: detected capacity change from 0 to 512 [ 643.274138][T15595] __nla_validate_parse: 22 callbacks suppressed [ 643.274202][T15595] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8179'. [ 643.298628][T15595] team0: Port device team_slave_1 removed [ 643.341540][T15601] bond2: Unable to set peer notification delay as MII monitoring is disabled [ 643.351698][T15601] bond2 (unregistering): Released all slaves [ 643.439815][T15668] loop1: detected capacity change from 0 to 4096 [ 643.453786][T15507] ================================================================== [ 643.461875][T15507] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / inode_cgwb_move_to_attached [ 643.471519][T15507] [ 643.473839][T15507] write to 0xffff88812f269758 of 4 bytes by task 15555 on cpu 0: [ 643.481553][T15507] inode_cgwb_move_to_attached+0x9b/0x310 [ 643.487279][T15507] writeback_single_inode+0x2b5/0x3f0 [ 643.492669][T15507] sync_inode_metadata+0x5b/0x90 [ 643.497620][T15507] generic_buffers_fsync_noflush+0xd9/0x120 [ 643.503520][T15507] ext4_sync_file+0x1ab/0x690 [ 643.508208][T15507] vfs_fsync_range+0x10d/0x130 [ 643.512982][T15507] ext4_buffered_write_iter+0x34f/0x3c0 [ 643.518535][T15507] ext4_file_write_iter+0x387/0xf60 [ 643.523731][T15507] iter_file_splice_write+0x666/0xa60 [ 643.529108][T15507] direct_splice_actor+0x156/0x2a0 [ 643.534218][T15507] splice_direct_to_actor+0x312/0x680 [ 643.539598][T15507] do_splice_direct+0xda/0x150 [ 643.544364][T15507] do_sendfile+0x380/0x650 [ 643.548786][T15507] __x64_sys_sendfile64+0x105/0x150 [ 643.554000][T15507] x64_sys_call+0x2bb4/0x3000 [ 643.558673][T15507] do_syscall_64+0xd2/0x200 [ 643.563177][T15507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.569070][T15507] [ 643.571386][T15507] read to 0xffff88812f269758 of 4 bytes by task 15507 on cpu 1: [ 643.579006][T15507] generic_buffers_fsync_noflush+0x80/0x120 [ 643.584913][T15507] ext4_sync_file+0x1ab/0x690 [ 643.589598][T15507] vfs_fsync_range+0x10d/0x130 [ 643.594373][T15507] ext4_buffered_write_iter+0x34f/0x3c0 [ 643.599927][T15507] ext4_file_write_iter+0x387/0xf60 [ 643.605123][T15507] iter_file_splice_write+0x666/0xa60 [ 643.610503][T15507] direct_splice_actor+0x156/0x2a0 [ 643.615622][T15507] splice_direct_to_actor+0x312/0x680 [ 643.620996][T15507] do_splice_direct+0xda/0x150 [ 643.625761][T15507] do_sendfile+0x380/0x650 [ 643.630188][T15507] __x64_sys_sendfile64+0x105/0x150 [ 643.635405][T15507] x64_sys_call+0x2bb4/0x3000 [ 643.640089][T15507] do_syscall_64+0xd2/0x200 [ 643.644598][T15507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.650503][T15507] [ 643.652814][T15507] value changed: 0x00000002 -> 0x00000040 [ 643.658525][T15507] [ 643.660839][T15507] Reported by Kernel Concurrency Sanitizer on: [ 643.666993][T15507] CPU: 1 UID: 0 PID: 15507 Comm: syz.6.8168 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 643.678376][T15507] Tainted: [W]=WARN [ 643.682167][T15507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 643.692207][T15507] ==================================================================