last executing test programs: 3m18.812661911s ago: executing program 32 (id=3719): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000002180)=ANY=[], 0x118) r4 = geteuid() r5 = getegid() getresuid(&(0x7f00000004c0)=0x0, &(0x7f0000000500)=0x0, &(0x7f0000000540)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073727a3100000000080041007369770014003300626f6e643000000000"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000400)=[{&(0x7f0000000240)="a50769f9b1", 0x5}, {&(0x7f0000000840)="e2bb1ed63a57576cc2dcd86b8604be154e8a76003933", 0x16}], 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="1c0000000000000002000000", @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r3, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r8, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r9, @ANYRES32, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES16=r10, @ANYRES32, @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES8=r7, @ANYBLOB="00630509a023a04e5cf700000010000000000000000100000001000000"], 0xe8, 0x200400d1}, 0x80) r11 = getegid() lstat(&(0x7f0000000980)='./file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000540)='system.posix_acl_default\x00', &(0x7f0000000ac0)={{}, {0x1, 0x1}, [{0x2, 0x4}, {0x2, 0x4}, {}], {0x4, 0x2}, [{0x8, 0x3}, {0x8, 0x4}, {}, {0x8, 0x0, r5}, {0x8, 0x4, r11}, {0x8, 0x0, r12}, {0x8, 0x5}], {0x10, 0x6}, {0x20, 0x6}}, 0x74, 0x1) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r13}, 0x0, &(0x7f0000000300)}, 0x20) socket$inet(0x2, 0x800, 0x4) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r15 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r14, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r15}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000030428b57000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a100000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0xba01, 0x0, 0x4004}, 0x810) 3m12.851480656s ago: executing program 2 (id=3890): r0 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x2, @multicast1}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000080)}], 0x1}}], 0x1, 0x0) 3m12.835518836s ago: executing program 2 (id=3891): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000340)='\\\\\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x11\xc9\xc5\xc4\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18r\x8e\x9a\xc8\xb09Bl{\x82\\\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xb1\xc3j\x03/\x00\x00\x00\x00\x00\x00\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\b\xe0R\x9d\x18\x19a:\xa2\xa1\xcb\xd7jx\x94\v1\xb7\xb5\xdb\x9a\b\xf9\xb4\x8c\xab{\x1dU \r\xc1\x19!\x86~\xa9\x01\xda\x020\xe7\xc0\x9b\xf8Nt\xf0\x9fV\xf3\x03XV\xf5\xe7\xb2\xc6\x16A\xa9\xe8\xea\x95?IO\xdf\x14+\xcd\xe66\x0f\xb6\xb1$i\x11\xde\xa7w\xf9}\a\xdd6}a)\xb4\xa9C\xc4\xfa\xf9L\x8d}\xf2>\xc5p4\x16\x91G\xe3\x9ef\xe7\xdc9;\x1c|\x1b.q\xb2\xc7\xed\xa8{\xac\x13\xe1\x05\xd8]\"\xeaD%\xc5\r', 0x0) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000080001000000000014000480050003000000000005000300000000000800020001000000980008800c00078008000600000000002400078008000500"], 0xd0}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001940)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{0x0, 0x0, 0x9c}, {}]}, [{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {0x448eade7}, {0x0, 0x0, 0x80000000}, {0x0, 0x0, 0x0, 0x7, 0x5}, {0x0, 0x0, 0x0, 0x2000}, {0x0, 0x0, 0x0, 0x0, 0x400}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x400}, {}, {0x0, 0x1, 0x0, 0x0, 0xfffffffe, 0x8001}, {}, {}, {}, {}, {}, {}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {}, {0x0, 0x0, 0x100}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, {0x0, 0x4, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x4000bf}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {}, {}, {}, {0x7}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0xd5}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {0x0, 0x5, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x100}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe6f1}, {}, {0x0, 0x0, 0x0, 0x0, 0x3e0d905c, 0x6}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x4}, {}, {}, {0x0, 0x5, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x57, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x0, 0x0, 0x5}, {}, {0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {0x0, 0x8, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x800000}, {0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, {}, {}, {}, {0x2}, {0x4}, {}, {0xa7}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, {0x0, 0x0, 0x1000}, {}, {0xd2, 0x0, 0x0, 0x0, 0x0, 0x20000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x4, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1000000}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x10000000}, {}, {}, {0x0, 0x1}, {}, {0x523e, 0xfffffffe}, {}, {0x4, 0x0, 0x0, 0x10}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}], [{}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x4}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x5}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {0x2}, {0x2}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {0x1}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r5, 0xec, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 3m12.757196648s ago: executing program 2 (id=3892): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000580)={0x2c, r1, 0x105, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x240080c0) 3m12.756720987s ago: executing program 2 (id=3893): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = io_uring_setup(0xdac, &(0x7f0000000240)={0x0, 0x0, 0x3, 0x8000000b, 0xfffffffc}) close_range(r0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000002b00)) lstat(&(0x7f0000002b40)='./bus\x00', &(0x7f0000002b80)) getresgid(&(0x7f0000002c00), &(0x7f0000002c40), &(0x7f0000002c80)) socket$can_bcm(0x1d, 0x2, 0x2) socket$tipc(0x1e, 0x6, 0x0) r2 = syz_clone(0xad133c00, 0x0, 0xff6d, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$poke(0x5, r2, &(0x7f0000000080), 0x7) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18070000000000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000640)='kmem_cache_free\x00', r3}, 0x10) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000600), r4) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002cc0), &(0x7f0000002d00)=0xc) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) ioprio_set$uid(0x3, r6, 0x0) getresgid(&(0x7f0000002d40), &(0x7f0000002d80), &(0x7f0000002dc0)) getpid() getuid() getgid() getresgid(&(0x7f0000000c40), &(0x7f0000000140), &(0x7f0000000240)=0x0) syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000200)='./file0\x00', 0x10814, &(0x7f0000000700)=ANY=[@ANYBLOB='umask=00000000000000000000000,flush,nodots,dots,gid=', @ANYRESHEX=r7, @ANYBLOB="00006b746769643d0092", @ANYRESDEC, @ANYBLOB="1500bba7d41fabba4332de3ca642acf6f8de847e3f21783608008708a887d30aaf0a14b0691d48445fe3b4d1ddde1b81337b2c3b5f88535d7f6fa931b84783704494cebe49ca9f6269b05edde0246c360d0566b4056f0f02ccab035d3d0a5cde0b31bd424949fe23c0a0a25691738006c5c6acdf101fecdb4f79abdfb95c6afaea03dd5903b5240565f31504c207a9a2aa6c8108fb973081e90412a3c6cfa3b2513693727fad9acd8108acb8b90fab033c9dac0dc3e5a61c513e7b5edc5d76320f0e54045ea2b7b8fb1f78d3d346e26ee5ed6926cea1ffe0a1"], 0x1, 0x1fa, &(0x7f0000000500)="$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") syz_clone(0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0) 3m12.632785379s ago: executing program 2 (id=3894): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) msgget$private(0x0, 0x0) 3m12.327469665s ago: executing program 2 (id=3898): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) unshare(0x2c020400) r2 = msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgrcv(r2, &(0x7f00000001c0)={0x0, ""/1}, 0x9, 0x0, 0x3000) 3m12.327300355s ago: executing program 33 (id=3898): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) unshare(0x2c020400) r2 = msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgrcv(r2, &(0x7f00000001c0)={0x0, ""/1}, 0x9, 0x0, 0x3000) 2m13.141071036s ago: executing program 6 (id=5495): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) accept4$tipc(r1, 0x0, &(0x7f00000003c0), 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000004000000040000000200000008000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000009d244340bf53c667ea7c49d5cacc2c008562952d831593fa37", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)}, 0x8091) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000040)=ANY=[], 0x10132) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/pm_freeze_timeout', 0x40, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x16, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}}, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) r7 = gettid() process_vm_writev(r7, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a3f000000a3f500950004000000010045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 2m12.839237911s ago: executing program 6 (id=5501): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) 2m12.778944301s ago: executing program 6 (id=5505): mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000003c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x6, 0x10, 0x21, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x7, 0x4, 0x3}, {0x6, 0x24, 0x1a, 0x2, 0x35}}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xaf, 0x64, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x8, 0x25, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0xd, 0x9}}}}}}}]}}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, @perf_bp={0x0, 0xe}, 0x400, 0xffffffff, 0x6, 0x5, 0x0, 0x40000001, 0xfff9, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000001001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$kcm(0xa, 0x6, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e00000085000000080000"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x10d, 0xa, &(0x7f0000000000)=r1, 0x11) 2m12.32319136s ago: executing program 5 (id=5518): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='net_dev_start_xmit\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x0) 2m12.262932521s ago: executing program 5 (id=5521): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) rseq(&(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x865c, 0x1, 0xa}, 0x1}, 0x20, 0x1, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x4}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) listxattr(0x0, 0x0, 0x0) unshare(0x2a020400) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = dup(r6) ioctl$sock_SIOCGIFINDEX(r7, 0x40043d0d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) 2m12.194556752s ago: executing program 5 (id=5524): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) quotactl$Q_QUOTAON(0xffffffff80000202, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_256={{0x304}, "76f7bc3e4ae1c84c", "af193cff4810ba5ac120d096eb00b40752095b4285514ca312c52e3a08756735", '8\x00', "bc3a20b10f4ad11e"}, 0x38) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000), 0x4) r5 = getpid() r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r6, &(0x7f0000000100)={0x0, 0x4100, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r5}}]}, 0x3c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) 2m12.135632443s ago: executing program 6 (id=5525): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8004, &(0x7f0000000080)={[{@discard}, {@bh}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x7b9, &(0x7f00000007c0)="$eJzs3d9rHNUeAPDvbJLmR3tvcuFy7+1b4EJvoHRzU2Or4EPFBxEsFPTZNmy2oWaTLdlNaULAFhF8EVR8EPSlz/6ob776A3zS/8IHaamaFis+SGR2Z5M02c2vJtloPh+YzDkzsznnO+fMzNmdYTeAQ2sw/ZOLOB4RbycR/dnyJCK6aqnOiHP17R4uLvRERCGJpaWXfkpq2zxYXCjEqtekjmaZ/0TEV29EnMytL7cyNz85VioVZ7L8cHXq6nBlbv7UlamxieJEcfrMyOjo6bNPnj2ze7H+8t38sbvvPP+/T8/99vq/b7/1dRLn4li2bnUcu2UwBrN90pXuwkc8t9uFtVnS7gqwI+mh2VE/yuN49EdHLdVC737WDADYK69FxBIAcMgkrv8AcMg0Pgd4sLhQaEzt/URif917NiJ66vE/zKb6ms7snl1P7T5o34PkkTsjSUQM7EL5gxHx4eevnOjI8mk93EsD9sONmxFxaWBw/fk/WffMwnb9f6OVS9212eCaxYft+gPt9EU6/nmq2fgvtzz+iSbjn+76sfuvxy1/8+M/d+dxy9hIOv57pv5s25rx3/JDawMdWe5vtTFfV3L5SqmYntv+HhFD0dWd5kdqmzYfuQ3d//1+q/Kz8d/H6fTzu69+lJafzle2yN3p7H70NeNj1c5vHjfwzL2b0Zcl18SfLLd/0mL8e2GLZbzw9JsftFqXxp/G25jWx7+3lm5FnGja/ittmWz4fOJwrTsMNzpFE599/35fq/JXt386peWn892PtLl7N6PWAZJkZR/U1yzHP5Csfl6zsv0yvr3V/2WrdZvH37T/jx1JXq6lj2TLro9VqzMjEUeSF9cvP73y2ka+sX0a/9B/mx//9WKb9//0PeGlLcbfeffHT3Ye/95K4x/fuP+vaf+ebPHKks0Stx9OdrQqf2vtP1pLDWVL0vbfLK6t1GtnvRkAAAAAAAAAAAAAAAAAAAAAAAAAti8XEcciyeWX07lcPl//De9/Rl+uVK5UT14uz06PR+23sgeiK9f4qsv+Vd+HOpJ9H34jf3pN/omI+EdEvNfdW8vnC+XSeLuDBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDM0Ra//5/6obvdtQMA9kxPuysAAOw7138AOHy2d/3v3bN6AAD7x/t/ADh8tnz9v7S39QAA9o/3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOyxC+fPp9PSr4sLhTQ/fm1udrJ87dR4sTKZn5ot5Avlmav5iXJ5olTMF8pTLf/RjfqsVC5fHY3p2evD1WKlOlyZm784VZ6drl68MjU2UbxY7Nq3yAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg6ypz85NjpVJx5i+RuLES2C7/5962xtV3MHbvqkRnHIhqHOhEdxyIauwwsfos0duGMxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAn8MfAQAA//94WBdi") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{r4}, 0x0, &(0x7f00000013c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) setns(r1, 0x24020000) syz_clone(0xf5982500, 0x0, 0x0, 0x0, 0x0, 0x0) 2m11.427690155s ago: executing program 6 (id=5532): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = dup2(r1, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='net_dev_start_xmit\x00', r2}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 2m11.196053328s ago: executing program 5 (id=5536): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xe0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xe0, &(0x7f00000000c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000100), &(0x7f0000000140), 0x8, 0x2c, 0x8, 0x8, &(0x7f0000000180)}}, 0x10) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd7000040000000500b600080009000200000008000c00a60a0000060001000500004008000b"], 0x40}, 0x1, 0x0, 0x0, 0xc100}, 0x4040) sendmsg$L2TP_CMD_SESSION_DELETE(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r6, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000007000000140008"], 0x38}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r11 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r11, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0x2]}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r12}, 0x10) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r13 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r14 = fcntl$dupfd(r13, 0x0, r13) ioctl$USBDEVFS_SUBMITURB(r14, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) 2m10.928839003s ago: executing program 5 (id=5540): r0 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@mask_cswp={0x58, 0x114, 0x9, {{0xe, 0x7}, &(0x7f0000000140)=0x6, 0x0, 0x6, 0x2, 0x7ff, 0x4, 0x22, 0xfffffffffffffffa}}], 0x58, 0x8004}, 0x0) 2m10.458590051s ago: executing program 6 (id=5548): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000002c0)={0x10000005}) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001014010027bd7000fedbdf25110003"], 0x30}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=r5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYRES64=r3], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, r4, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r7}, 0x97) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r10 = gettid() ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r9, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_PID={0x8, 0x1c, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) tkill(r10, 0x35) r12 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r12, &(0x7f0000002ac0)=[{{&(0x7f0000000a80)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}], 0x1, 0x4000001) 2m10.411761761s ago: executing program 34 (id=5548): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004000000"], 0x48) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000002c0)={0x10000005}) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001014010027bd7000fedbdf25110003"], 0x30}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040)={0xffffffffffffffff}, 0x4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280)=r5, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYRES64=r3], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, r4, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r7}, 0x97) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r10 = gettid() ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r9, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_PID={0x8, 0x1c, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) tkill(r10, 0x35) r12 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r12, &(0x7f0000002ac0)=[{{&(0x7f0000000a80)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000180)="fd", 0x1}], 0x1}}], 0x1, 0x4000001) 2m9.671432493s ago: executing program 5 (id=5565): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") 2m9.657255404s ago: executing program 35 (id=5565): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$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") 2m5.695539337s ago: executing program 0 (id=5631): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='kfree\x00', r1}, 0x18) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000012c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/102, 0x66}], 0x1, 0x60, 0xffffffff00000001}}], 0x48, 0x8004}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x18}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x4) r4 = fsmount(0xffffffffffffffff, 0x0, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r5, 0x2007ffb) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000200)=r4, 0x4) sendfile(r5, r5, 0x0, 0x1000000201005) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x21, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2m5.353714463s ago: executing program 0 (id=5643): r0 = syz_mount_image$msdos(&(0x7f0000000040), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='nodots,errerrors=remount-rs,errors=continue,\x00'/70], 0x1, 0x30b, &(0x7f0000001640)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESOCT=r0], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x0, 0x9) lseek(r1, 0x0, 0x3) getdents64(r1, &(0x7f0000000380)=""/80, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r1, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) dup2(0xffffffffffffffff, r3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r7, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2}, 0x10) bind$tipc(r8, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r8, &(0x7f0000001b40)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x2}}, 0x10, 0x0}, 0x11) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000bc0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000500)='p', 0x1}], 0x1}}], 0x1, 0x20000004) bpf$MAP_CREATE(0x0, 0x0, 0x0) open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) 2m2.036672985s ago: executing program 0 (id=5652): mknod$loop(&(0x7f0000000240)='./file0\x00', 0x8000, 0x0) r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) process_mrelease(r1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="540100001000130700000000000000007f000001000000000000020000000000ac1e01010000000000000000004000000000fffd000000000a0000003b000000", @ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac1414aa0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000e700000000000000080000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000020000000a0004ff6f00000000000000480002006563622863"], 0x154}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = syz_io_uring_setup(0x1da1, &(0x7f00000000c0)={0x0, 0xe874, 0x40, 0x2000000, 0x2d4}, &(0x7f0000000500), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x22, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0, 0x0, 0x3}]}, 0x1}, 0x1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r6 = dup(r5) write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 2m1.909669598s ago: executing program 0 (id=5683): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b7040000000000008500000001000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) r3 = socket(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x1, 0x1268, &(0x7f0000002500)="$eJzs3U9rI2UcB/Bf2vTv2qbquroL4oNeFCFue/DkpcguiAWl2gUVhFmbamialCYUIuLWkyfBlyHq0ZsgvoFevHgWBJFePO5BHGmT1aZJu7ptU5HP5zIPzzzfeWYyzMCE+TF7L32+sb7WLK9lrRgpFKK4ORbFuylSjMRodOzEc7d+/OnJN956+9XFpaUbyyndXHxz/sWU0uxT373z0ddPf9+6dOub2W8nYnfu3b3fFn7evbJ7de+Pr6LaTNVmqjdaKUu3G41WdrtWSavV5no5pddrlaxZSdV6s7LVs36t1tjcbKesvjozvblVaTZTVm+n9Uo7tQqptdVO2ftZtZ7K5XKamQ5OY+XLu3meR+T5WIxHnuf5VEzHpXgoZmI2SjEXD8cj8WhcjsfiSjweT8TVg1EXvd8AAAAAAAAAAAAAAAAAAADw/3Kf+v+C+n8AAAAAAAAAAAAAAAAAAAA4f0fr/4sRvv8PAAAAAAAAAAAAAAAAAAAAQ3af7/8fqf9/Xv0/AAAAAAAAAAAAAAAAAAAAnIfJzmI5pcmIjU+3V7ZXOstO/+JaVKMWlbgepfg9Dqr/Ozrtm68s3bieDszFCxt3uvk72yujvfn5sVLMFQbm5zv51JufiOnD+YUoxeXB8y8MzE/Gs8/s5z/p5MtRih/ei0bUYjWi0D36g/zH8ym9/NrSVG/+2v64Y42e82kBAACAs1ROf+l/ft/pDhq4vrOq+3yeuiMLJ/w/cOT5vBjXihd11NzTbH+4ntVqla0HbIwfv53x0225r1GIiCwO98xO/7K8P/mZTfGgjdGhTjp28phTnNMo/gd+zDNo/PrFoZ7JGO7sI91LIqvt3z//WSp28vxcd2zgxThxUur4e0ZhCPclhuPvk37RewIAAAAAAAAAAMC/MfDtv6mI6Hsf8IO+nnuvh/fG+7d8/OyfDeEIAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mQHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFcBAAD///ME0UM=") r4 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r4, 0x0) fallocate(r4, 0x0, 0x0, 0x1000f4) chdir(&(0x7f0000000540)='./file0\x00') newfstatat(0xffffffffffffff9c, &(0x7f0000000fc0)='./file0\x00', 0x0, 0x100) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1c, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYRES8=r4], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0xb5}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYRES64=r2, @ANYBLOB="4f3e13e1e650f23cbf70e8f2451ad6829d52c015d1d5868e59a4e5b11b90d998ccc7972745a964daaa81c57397397daeb84e0c25f9231c74a0297c91e62216f6c85d52a7718af22abe8504ec75a36f95fbb259135bc2c19597f92437a484ce0f8bf5d5494faa162beff5f016379d32af516b275e22bc35bdb54c0b047fd37a379c3ea76e06abd5fa736b15e3bd715981221ffcc1b826c4e437f9c35b4a68"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r7, &(0x7f00000000c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x9, 0x3a, '+\'', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x18, 0x32, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2b, &(0x7f0000000940)={0x2, {{0x2, 0x4e21, @rand_addr=0x64010101}}, {{0x2, 0x4e20, @private=0xa010100}}}, 0x108) setsockopt$inet_MCAST_JOIN_GROUP(r8, 0x0, 0x2a, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2}}}, 0xe7) symlink(&(0x7f0000000780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f00000003c0)='net_dev_xmit_timeout\x00', 0xffffffffffffffff, 0x0, 0x3ffffffb}, 0x18) readlink(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)=""/1, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) socket$kcm(0x21, 0x2, 0x2) 2m1.177360769s ago: executing program 0 (id=5700): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sysinfo(0x0) 1m58.707334659s ago: executing program 0 (id=5778): r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0xa5, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xa4, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000006c0)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c460407000600000000000000000200030006000093d603000038000000000000000e0000000000200001000500000000000000000003000000f1000000f30000007f0000000400"], 0x58) close(r4) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x98, r1, 0x200, 0x0, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x32}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x17}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) 1m58.707172809s ago: executing program 36 (id=5778): r0 = socket(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={r2, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0], 0x0, 0xa5, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xa4, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f00000006c0)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r4 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c460407000600000000000000000200030006000093d603000038000000000000000e0000000000200001000500000000000000000003000000f1000000f30000007f0000000400"], 0x58) close(r4) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f0000000180)={0x98, r1, 0x200, 0x0, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x32}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_STATE={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'lblc\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x17}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}]}, 0x98}, 0x1, 0x0, 0x0, 0x8000}, 0x40040) 1m55.080809387s ago: executing program 8 (id=5863): socket$tipc(0x1e, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[], 0x4c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x7, 0xfffff010}, {0x6}]}, 0x10) sendmmsg$unix(r0, &(0x7f00000000c0), 0x3f, 0x0) fsopen(&(0x7f00000001c0)='proc\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="00000000000057b6b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffec5, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) 1m55.032566598s ago: executing program 8 (id=5864): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0xffffffff}, 0x1100, 0x5dd8, 0x3a65, 0x9, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x403, 0x800000000003}, 0x1100, 0x5dd8, 0x3, 0x3, 0x0, 0xa, 0xdffe, 0x0, 0x0, 0x0, 0x2000000000000005}, 0x0, 0x2, 0xffffffffffffffff, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 1m54.968780228s ago: executing program 8 (id=5867): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r0}, 0x10) rseq(&(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2, 0x865c, 0x1, 0xa}, 0x1}, 0x20, 0x1, 0x0) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x4}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000050000000200"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) listxattr(0x0, 0x0, 0x0) unshare(0x2a020400) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r7 = dup(r6) ioctl$sock_SIOCGIFINDEX(r7, 0x40043d0d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) 1m54.830505091s ago: executing program 8 (id=5872): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resuid}, {@data_err_ignore}, {@grpquota}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x553, &(0x7f0000001080)="$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") perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x14011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f00000100000012"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001100)={{r1}, &(0x7f0000001080), &(0x7f00000001c0)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000001440), 0x0, 0x0) ioctl$IMADDTIMER(r4, 0x80044940, &(0x7f0000000080)=0x14) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) close(r4) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r6, &(0x7f0000004440)={&(0x7f0000000ec0)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}, 0x4}}, 0x10, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r7, &(0x7f0000000080)={&(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14, &(0x7f0000000100)={0x0}, 0x7, 0x0, 0x0, 0x4}, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) dup(r3) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000640)={'sit0\x00', &(0x7f0000000580)={'tunl0\x00', 0x0, 0x7800, 0x10, 0x7, 0xd374, {{0x28, 0x4, 0x3, 0x21, 0xa0, 0x66, 0x0, 0xb6, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x2c}, {[@generic={0x44, 0x9, "14afaac6220bb3"}, @lsrr={0x83, 0xf, 0xa5, [@remote, @private=0xa010102, @local]}, @cipso={0x86, 0x34, 0x2, [{0x5, 0x10, "5c32d302d18658e7dcf90dc57362"}, {0x5, 0x2}, {0x7, 0x6, "a368c5bb"}, {0x7, 0x9, "12a01ac6e52072"}, {0x6, 0x4, "8e64"}, {0x1, 0x9, "01cd07c4faebf5"}]}, @ssrr={0x89, 0x17, 0x1b, [@remote, @multicast1, @multicast2, @rand_addr=0x64010101, @private=0xa010101]}, @lsrr={0x83, 0x27, 0xf0, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @local, @empty, @multicast1, @dev={0xac, 0x14, 0x14, 0xf}, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr=0x64010100]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18060dcd0010bd0b530000000000001618120001", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r10, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r11}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(r8, 0x4c82) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r13}, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="4d7e2dbd7000000000002a00000008002f000000000005003600000000000c0005000000000000000000050037000000000008000200", @ANYRES32, @ANYBLOB="060400000000000000000000000000059d40bf3e001ed2868a4a6b9ff6577197c6278cf6f18530766fcdd646d6c5dd6981066936e996648bf90a6ff4d750ff2df0f8bba26e3deee30311fc29a4dc072fe6fb76b080c6ee5f48de6e46d907930124f1dc259409e7f0a63036fec2464c63eac52648d74891edbe24111d51d0f18ffeab8e32227a7953b26a2e9710451a7e8d970f3e79"], 0x50}, 0x4, 0xfd}, 0x0) 1m53.896292656s ago: executing program 8 (id=5881): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m50.167583056s ago: executing program 8 (id=5953): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getuid() 1m50.167511106s ago: executing program 37 (id=5953): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getuid() 4.252724592s ago: executing program 9 (id=7777): bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) unshare(0x22020400) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) ioctl$FICLONE(r0, 0x40049409, r0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000080), 0x4e) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000180)={0x90000001}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) gettid() getpid() setns(0xffffffffffffffff, 0x24020000) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = eventfd2(0x0, 0x0) write$eventfd(r4, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r4, &(0x7f0000000040)=0x8, 0x8) 3.656170441s ago: executing program 1 (id=7783): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x7ffd) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6}]}) ioctl$PPPIOCSPASS(r0, 0x40107447, 0x0) 3.580439522s ago: executing program 1 (id=7785): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r0, 0x0, r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000003c0)='kfree\x00', r1}, 0x18) memfd_create(&(0x7f00000001c0)='\x00\xc76\xbe\x91\x8d\x182)!\x9a%\xd9\x19\x17\xb0\xed|\xb3\xc2\x017h\xe9kL\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00\xeb0\xdd\xe8\x87\x05=\xfb\x8b$\xdcQ\xee\xc5\x1f\x8bQ\xf7fo\"i\xa1hk\x1d\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94Tr@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f2\xf7]#\xed,\xc7\x03\x00\x00\x00\xa3\xee\xcb\xaf\xb3\xe3\'}\x18\xe8O\xa8#K\xb6\xe4R$\xaa\x00U\x92\xd2\x99\xb80xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) 2.689833966s ago: executing program 3 (id=7799): r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000100)={'security\x00', 0x0, [0x5, 0xffffbff7, 0x20000004, 0x40, 0x4]}, &(0x7f0000000040)=0x54) 2.679043527s ago: executing program 1 (id=7800): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x4, 0x1b, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x4d, 0xef, 0xa3, 0x40, 0x41e, 0x403b, 0x1ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, 0x0) ioctl$EVIOCRMFF(r1, 0xc0085508, &(0x7f0000000080)=0x404) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0x0, 0x20}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48801}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000140)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0xfc}}, 0x8884) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 2.623676658s ago: executing program 3 (id=7801): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x0, 0x3}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0xd1, &(0x7f0000000600)=""/209, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup(r0, 0x0, 0x1ff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x80, &(0x7f00000003c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x2, 0x1, 0x6, 0x10, 0x21, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "16902a1c5860"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x7, 0x4, 0x3}, {0x6, 0x24, 0x1a, 0x2, 0x35}, [@mbim={0xc, 0x24, 0x1b, 0x6, 0x9, 0x9, 0x6, 0x81, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xaf, 0x64, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x8, 0x25, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0xd, 0x9}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x5, 0x9, 0x7f, 0x8, 0x2}, 0xb4, &(0x7f0000000840)={0x5, 0xf, 0xb4, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0xbd, 0x5, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x33, "eff1a1b7e363b9a0fa391459ed0f3819"}, @generic={0x91, 0x10, 0x2, "9e24850e89b22c172b3f21957e050c14c797ef5915c20d077adba80a13a777b211a49e1ebd40d2501ca568a2c5fb1988cef61e85097190602735523abe81c3234d7c8b5948fa26d1dc4e27f29e37a8c6232d3ac22f6ec8507d186641fd31f1ecb1690908ab24b09f9547725c8e43027e027ef041274ccd940b9edc8b0fb8196d121e009bf7140d86abf3830c7a44"}]}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x2e}}, {0xfc, &(0x7f0000000a00)=@string={0xfc, 0x3, "327a69f2dbae293d7cffec92f73dd36858eca868b47d4d7444591b1792038545a97aca109bfc549f6caca72575f54c08581f255409d408bf24eb4fdfd32ca55838ba906321fd67d8968e1538c58a3d5d102b62578120357c7bd07fa6dc6d35ac5add47c4c282acf940a6afa24ac06bb841b7c897c93025aad739213c14b331ae9154b02707f25ddf61eebdc5e5c2b9e2e95acc7c40e4c76629f0109d10ef00fb3d8737584e717710b6fbf8a78750c60b011e18f6f8513f5f114b8d267f0db196ca6dc5f896490279cbef6087a2a57561c5681b314d9cf2ecd42744932d6236ac1c2b04fde349df141b0a962e3e3b17c00f2c3005979feda20e98"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc09}}, {0xe3, &(0x7f0000000b00)=@string={0xe3, 0x3, "033a6a56053f4a2e5784ea6dc5a9fe73afa72c564ab6c0c7bc17c4be514ddddcf5d7bd3150dd054c7b30d30797d8b236d4dc948277202524fed822b50e7c8e7e773077dd4c57620b0d8a85903f9115dc0b0edd33743cb563356d2c6318ed838e039dc1f619248d6ed78d0285a421e4fb1f36331ad6f5fafb0fe4f0f784b613a9600f80653d9ac28b91aaff296418d3709d94b2ce528f74a9487b5adc236e266a501ce00b18b047ba0f4f9e9a610c46e1019d8e3cf61d8e258d5ddad2990d720cba5f46daecf4983a278464a86e0be4b6d71b53957158024c9ebffd30bc87a03abe"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x140c}}]}) perf_event_open(0x0, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x9) unshare(0x22020600) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, 0x0, 0x0) r2 = socket$kcm(0xa, 0x6, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r2, 0x10d, 0xa, &(0x7f0000000000)=r3, 0x11) 2.550355669s ago: executing program 4 (id=7802): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) unlink(0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xffffffff, 0x9752333b9a87418, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') 2.44831903s ago: executing program 4 (id=7803): socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) getpid() r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES64=r0, @ANYBLOB="1000000059a52ccf38dd61bc1ef8c2af5715a70000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xfffffeeb, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1000000, 0x810, 0xffffffffffffffff, 0xca0f000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r3, &(0x7f0000000340)=ANY=[], 0xff2e) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{0x6, 0x2, 0x0, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x200, 0x5, 0x4, 0xff, 0x9, 0x8}}, @TCA_NETEM_RATE64={0xc, 0x8, 0xc1160cbda5ab1ab}]}}}]}, 0x90}}, 0x0) sendmsg$inet(r4, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 2.125482506s ago: executing program 7 (id=7805): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@rand_addr=0x64010100, @in, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x3, 0x9}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6, 0x8}}, 0xe8) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES64=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='sched_migrate_task\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="090000000400000006000000ff00000042"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r4}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000000), &(0x7f00000005c0)=r3}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0052036ab82e5f46735af8d1260000289c000400000000fddbffffffff0000", @ANYRES32=0x0, @ANYBLOB="90010400305200001c00128009000100626f6e64000000000c0002800500160001000000"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) listen(r6, 0x4000000) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r3, 0x8008f511, &(0x7f0000000300)) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = accept(r5, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) recvfrom(r8, &(0x7f0000000180)=""/39, 0x27, 0x100, 0x0, 0x0) 2.075044556s ago: executing program 9 (id=7806): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@cgroup, 0xffffffffffffffff, 0x1d, 0x0, 0x4000, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7f, 0x7ffc0002}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.042506547s ago: executing program 9 (id=7807): unlink(0x0) syz_usb_connect(0x3, 0x1c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f00000000c0)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) write(r2, &(0x7f0000000000)="fa", 0xfffffdef) socket(0x1d, 0x2, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000040000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f00000002c0)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 'ip6tnl0\x00'}}, 0x1e) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a000020095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='kfree\x00', r6}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000001200)=@raw={'raw\x00', 0x4001, 0x3, 0x3a8, 0x0, 0x700001b, 0x148, 0x250, 0x148, 0x310, 0x206, 0x240, 0x310, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}}, 0x1ea, 0x1e8, 0x250, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x1, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x2}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r8, r8, 0x0, 0xb) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f0000010000", @ANYRES32=0x0], 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000400000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r10}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.783682881s ago: executing program 7 (id=7808): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00"/13], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f00000004c0)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, 0x0, 0x90) 1.524958255s ago: executing program 4 (id=7809): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20084014) 682.904579ms ago: executing program 3 (id=7810): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)=0x7ffd) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f00000000c0)=[{0x6}]}) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000200)={0x0, 0x0}) 645.295059ms ago: executing program 7 (id=7811): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7040000000000008500000001"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x3, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}]}, 0x20}, 0x1, 0x0, 0x0, 0xc081}, 0x24044830) 629.42183ms ago: executing program 7 (id=7812): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000200)='kfree\x00', r1, 0x0, 0x80}, 0x18) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2}, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0) 535.114611ms ago: executing program 4 (id=7813): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) unlink(0x0) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xffffffff, 0x9752333b9a87418, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') 534.882031ms ago: executing program 3 (id=7814): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000001c0)={[{@nodioread_nolock}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@i_version}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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") umount2(&(0x7f00000002c0)='./file0\x00', 0x2) 533.937261ms ago: executing program 7 (id=7815): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a000000020000000110000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x18) socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x20004081) socket(0x1e, 0x2, 0x0) 453.224082ms ago: executing program 4 (id=7816): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x4, 0x1b, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x4d, 0xef, 0xa3, 0x40, 0x41e, 0x403b, 0x1ac0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9}}]}}, 0x0) ioctl$EVIOCRMFF(r1, 0xc0085508, &(0x7f0000000080)=0x404) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0x0, 0x20}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x48801}, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xee01}}, './file0\x00'}) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000000140)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[], 0xfc}}, 0x8884) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') 452.966422ms ago: executing program 7 (id=7817): sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003801400038010"], 0x44}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c) connect$pppl2tp(r7, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r8, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r7, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x4000000) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 281.189485ms ago: executing program 3 (id=7818): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x3, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}]}, 0x20}, 0x1, 0x0, 0x0, 0xc081}, 0x24044830) 265.598435ms ago: executing program 3 (id=7819): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x6, 0x0) syz_open_dev$loop(&(0x7f00000005c0), 0x9, 0x12d600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000001000), 0xe09) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000000000000cbdf91586bac68c059a066e5f6b9ddfa834b432c82d68723569a65338c7311f5", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "12000700"}, 0x38) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x58) write$binfmt_misc(r1, &(0x7f0000000500)="b3ac6eadcc288ac587f0eae4c27f5fd537da4ca7aee8d3f4a2a3be2e22b2a68bec1ed9fdb8032b7c12fb7b1cdbffb99a22c238f5a3271b5d519862192550fbcd1ac2fc", 0x43) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) unlink(&(0x7f0000000340)='./cgroup.cpu/cpuset.cpus\x00') r3 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xbe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0xffffffff, 0x9752333b9a87418, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') 83.277868ms ago: executing program 9 (id=7820): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x0, 0x3}]}, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0xd1, &(0x7f0000000600)=""/209, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mkdirat$cgroup(r0, 0x0, 0x1ff) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x80, &(0x7f00000003c0)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0xff, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x2, 0x1, 0x6, 0x10, 0x21, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "16902a1c5860"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x7, 0x4, 0x3}, {0x6, 0x24, 0x1a, 0x2, 0x35}, [@mbim={0xc, 0x24, 0x1b, 0x6, 0x9, 0x9, 0x6, 0x81, 0x5}]}, {{0x9, 0x5, 0x81, 0x3, 0x20, 0xaf, 0x64, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x8, 0x25, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0xd, 0x9}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x200, 0x5, 0x9, 0x7f, 0x8, 0x2}, 0xb4, &(0x7f0000000840)={0x5, 0xf, 0xb4, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0xbd, 0x5, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x33, "eff1a1b7e363b9a0fa391459ed0f3819"}, @generic={0x91, 0x10, 0x2, "9e24850e89b22c172b3f21957e050c14c797ef5915c20d077adba80a13a777b211a49e1ebd40d2501ca568a2c5fb1988cef61e85097190602735523abe81c3234d7c8b5948fa26d1dc4e27f29e37a8c6232d3ac22f6ec8507d186641fd31f1ecb1690908ab24b09f9547725c8e43027e027ef041274ccd940b9edc8b0fb8196d121e009bf7140d86abf3830c7a44"}]}, 0x6, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x2e}}, {0xfc, &(0x7f0000000a00)=@string={0xfc, 0x3, "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"}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xc09}}, {0xe3, &(0x7f0000000b00)=@string={0xe3, 0x3, "033a6a56053f4a2e5784ea6dc5a9fe73afa72c564ab6c0c7bc17c4be514ddddcf5d7bd3150dd054c7b30d30797d8b236d4dc948277202524fed822b50e7c8e7e773077dd4c57620b0d8a85903f9115dc0b0edd33743cb563356d2c6318ed838e039dc1f619248d6ed78d0285a421e4fb1f36331ad6f5fafb0fe4f0f784b613a9600f80653d9ac28b91aaff296418d3709d94b2ce528f74a9487b5adc236e266a501ce00b18b047ba0f4f9e9a610c46e1019d8e3cf61d8e258d5ddad2990d720cba5f46daecf4983a278464a86e0be4b6d71b53957158024c9ebffd30bc87a03abe"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x140c}}]}) perf_event_open(0x0, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x9) unshare(0x22020600) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, 0x0, 0x0) r2 = socket$kcm(0xa, 0x6, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000850000000800000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r2, 0x10d, 0xa, &(0x7f0000000000)=r3, 0x11) 74.430698ms ago: executing program 1 (id=7821): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) accept4$tipc(r1, 0x0, &(0x7f00000003c0), 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1000000004000000040000000200000008000000", @ANYRES32=0x1, @ANYBLOB="00000000000000000000000000000000000000009d244340bf53c667ea7c49d5cacc2c008562952d831593fa37", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)}, 0x8091) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000970000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) write$binfmt_elf64(r3, &(0x7f0000000040)=ANY=[], 0x10132) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/power/pm_freeze_timeout', 0x40, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd885000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}}, 0x0) pipe2$9p(&(0x7f00000000c0), 0x0) r7 = gettid() process_vm_writev(r7, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x2b, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0000186df4b1768c36153d42", @ANYRES32, @ANYBLOB="0a3f000000a3f500950004000000010045"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x89f1, &(0x7f0000000080)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 0s ago: executing program 1 (id=7822): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r1 = syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x400, 0x3, 0x8002ae}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x109880}) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0xf, 0x7f, 0xa, 0x56, @ipv4={'\x00', '\xff\xff', @local}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}, 0x700, 0x8, 0x4}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x8000, 0x40, 0x3, 0x639c, {{0x11, 0x4, 0x1, 0x0, 0x44, 0x68, 0x0, 0xc, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@rr={0x7, 0x17, 0xd3, [@dev={0xac, 0x14, 0x14, 0x13}, @dev={0xac, 0x14, 0x14, 0x13}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xf, 0x53, [@local, @empty, @dev={0xac, 0x14, 0x14, 0x1c}]}, @ra={0x94, 0x4, 0x1}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0, 0x93, &(0x7f00000004c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x6c, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f0000000780)={0x250, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x194, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x7, 0x5, "fe727d"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80}, @ETHTOOL_A_BITSET_BITS={0x17c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\''}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+[\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '(,{%+\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff19}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x22}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe59}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x1c, 0x2, '.)]{{\x9d{&.\xae\'((l^\xed-{[\x9a.(,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x10}, 0x40000) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) (async) syz_io_uring_setup(0x83f, &(0x7f00000000c0)={0x0, 0xa9ee, 0x400, 0x3, 0x8002ae}, &(0x7f0000000340), &(0x7f0000000280)) (async) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x109880}) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'xfrm0\x00'}) (async) sendto$packet(r5, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0xf, 0x7f, 0xa, 0x56, @ipv4={'\x00', '\xff\xff', @local}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}, 0x700, 0x8, 0x4}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000300)={'erspan0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x8000, 0x40, 0x3, 0x639c, {{0x11, 0x4, 0x1, 0x0, 0x44, 0x68, 0x0, 0xc, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@rr={0x7, 0x17, 0xd3, [@dev={0xac, 0x14, 0x14, 0x13}, @dev={0xac, 0x14, 0x14, 0x13}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xf, 0x53, [@local, @empty, @dev={0xac, 0x14, 0x14, 0x1c}]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0], 0x0, 0x93, &(0x7f00000004c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x6c, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vxcan1\x00'}) (async) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f0000000a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a00)={&(0x7f0000000780)={0x250, r4, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x194, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x7, 0x5, "fe727d"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80}, @ETHTOOL_A_BITSET_BITS={0x17c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\''}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+[\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '(,{%+\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff19}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x22}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe59}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x1c, 0x2, '.)]{{\x9d{&.\xae\'((l^\xed-{[\x9a.(,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffc}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x10}, 0x40000) (async) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) (async) kernel console output (not intermixed with test programs): 0.377817][T23403] EXT4-fs error (device loop4): ext4_map_blocks:674: inode #3: block 2: comm syz.4.7449: lblock 2 mapped to illegal pblock 2 (length 1) [ 320.392023][T23403] EXT4-fs error (device loop4): ext4_map_blocks:674: inode #3: block 48: comm syz.4.7449: lblock 0 mapped to illegal pblock 48 (length 1) [ 320.406424][T23403] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.7449: Failed to acquire dquot type 0 [ 320.422992][T23403] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 320.433539][T23403] EXT4-fs error (device loop4): ext4_evict_inode:259: inode #11: comm syz.4.7449: mark_inode_dirty error [ 320.445414][T23403] EXT4-fs warning (device loop4): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 320.455794][T23403] EXT4-fs (loop4): 1 orphan inode deleted [ 320.462867][T23403] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.476558][T22023] EXT4-fs error (device loop4): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:59: lblock 1 mapped to illegal pblock 1 (length 1) [ 320.495642][T22023] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:59: Failed to release dquot type 0 [ 320.508348][T23403] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.520470][T23410] loop7: detected capacity change from 0 to 2048 [ 320.522240][T23403] EXT4-fs error (device loop4): __ext4_get_inode_loc:4449: comm syz.4.7449: Invalid inode table block 1 in block_group 0 [ 320.527241][T23410] EXT4-fs: Ignoring removed i_version option [ 320.546062][T23403] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 320.556393][T23403] EXT4-fs error (device loop4): ext4_quota_off:7219: inode #3: comm syz.4.7449: mark_inode_dirty error [ 320.564136][T23410] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.604655][T23410] bond0: (slave 1@): Releasing backup interface [ 320.625014][T23416] FAULT_INJECTION: forcing a failure. [ 320.625014][T23416] name failslab, interval 1, probability 0, space 0, times 0 [ 320.637901][T23416] CPU: 0 UID: 0 PID: 23416 Comm: syz.4.7454 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 320.637928][T23416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 320.638008][T23416] Call Trace: [ 320.638017][T23416] [ 320.638023][T23416] dump_stack_lvl+0xf6/0x150 [ 320.638043][T23416] dump_stack+0x15/0x1a [ 320.638058][T23416] should_fail_ex+0x261/0x270 [ 320.638082][T23416] should_failslab+0x8f/0xb0 [ 320.638206][T23416] kmem_cache_alloc_lru_noprof+0x5e/0x330 [ 320.638226][T23416] ? shmem_alloc_inode+0x34/0x50 [ 320.638242][T23416] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 320.638262][T23416] shmem_alloc_inode+0x34/0x50 [ 320.638287][T23416] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 320.638303][T23416] alloc_inode+0x40/0x170 [ 320.638407][T23416] new_inode+0x1e/0xe0 [ 320.638431][T23416] shmem_get_inode+0x24e/0x730 [ 320.638474][T23416] __shmem_file_setup+0x127/0x1f0 [ 320.638506][T23416] shmem_file_setup+0x3b/0x50 [ 320.638531][T23416] __se_sys_memfd_create+0x2e1/0x5a0 [ 320.638610][T23416] __x64_sys_memfd_create+0x31/0x40 [ 320.638653][T23416] x64_sys_call+0x1163/0x2e10 [ 320.638674][T23416] do_syscall_64+0xc9/0x1c0 [ 320.638700][T23416] ? clear_bhb_loop+0x25/0x80 [ 320.638718][T23416] ? clear_bhb_loop+0x25/0x80 [ 320.638736][T23416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.638840][T23416] RIP: 0033:0x7f9a36d7d169 [ 320.638858][T23416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.638880][T23416] RSP: 002b:00007f9a353e6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 320.638900][T23416] RAX: ffffffffffffffda RBX: 00000000000004c6 RCX: 00007f9a36d7d169 [ 320.638913][T23416] RDX: 00007f9a353e6ef0 RSI: 0000000000000000 RDI: 00007f9a36dfec3c [ 320.638927][T23416] RBP: 0000200000000b00 R08: 00007f9a353e6bb7 R09: 00007f9a353e6e40 [ 320.638942][T23416] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 320.639002][T23416] R13: 00007f9a353e6ef0 R14: 00007f9a353e6eb0 R15: 00002000000000c0 [ 320.639026][T23416] [ 320.868673][T18030] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.895783][T23423] tmpfs: Bad value for 'nr_inodes' [ 320.974659][T23435] loop9: detected capacity change from 0 to 1024 [ 320.983289][T23435] EXT4-fs: Ignoring removed bh option [ 320.991250][T23435] EXT4-fs: inline encryption not supported [ 320.997195][T23435] EXT4-fs: Ignoring removed i_version option [ 321.006153][T23435] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 321.020160][T23435] EXT4-fs error (device loop9): ext4_map_blocks:674: inode #3: block 2: comm syz.9.7464: lblock 2 mapped to illegal pblock 2 (length 1) [ 321.038684][T23435] EXT4-fs error (device loop9): ext4_map_blocks:674: inode #3: block 48: comm syz.9.7464: lblock 0 mapped to illegal pblock 48 (length 1) [ 321.053868][T23435] EXT4-fs error (device loop9): ext4_acquire_dquot:6935: comm syz.9.7464: Failed to acquire dquot type 0 [ 321.065526][T23435] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 321.075346][T23435] EXT4-fs error (device loop9): ext4_evict_inode:259: inode #11: comm syz.9.7464: mark_inode_dirty error [ 321.087673][T23435] EXT4-fs warning (device loop9): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 321.097997][T23435] EXT4-fs (loop9): 1 orphan inode deleted [ 321.104308][T23435] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.117183][T22023] EXT4-fs error (device loop9): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:59: lblock 1 mapped to illegal pblock 1 (length 1) [ 321.133994][T22023] EXT4-fs error (device loop9): ext4_release_dquot:6971: comm kworker/u8:59: Failed to release dquot type 0 [ 321.147073][T23435] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.158014][T23435] EXT4-fs error (device loop9): __ext4_get_inode_loc:4449: comm syz.9.7464: Invalid inode table block 1 in block_group 0 [ 321.170946][T23435] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 321.181545][T23435] EXT4-fs error (device loop9): ext4_quota_off:7219: inode #3: comm syz.9.7464: mark_inode_dirty error [ 321.566725][T23452] FAULT_INJECTION: forcing a failure. [ 321.566725][T23452] name failslab, interval 1, probability 0, space 0, times 0 [ 321.580116][T23452] CPU: 0 UID: 0 PID: 23452 Comm: syz.4.7470 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 321.580146][T23452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 321.580158][T23452] Call Trace: [ 321.580166][T23452] [ 321.580175][T23452] dump_stack_lvl+0xf6/0x150 [ 321.580203][T23452] dump_stack+0x15/0x1a [ 321.580223][T23452] should_fail_ex+0x261/0x270 [ 321.580308][T23452] should_failslab+0x8f/0xb0 [ 321.580345][T23452] kmem_cache_alloc_noprof+0x59/0x340 [ 321.580368][T23452] ? getname_flags+0x81/0x3b0 [ 321.580389][T23452] getname_flags+0x81/0x3b0 [ 321.580410][T23452] user_path_at+0x26/0x140 [ 321.580507][T23452] __se_sys_pivot_root+0xcd/0x1340 [ 321.580563][T23452] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 321.580620][T23452] ? vfs_write+0x669/0x950 [ 321.580652][T23452] ? putname+0xe1/0x100 [ 321.580674][T23452] ? __fget_files+0x186/0x1c0 [ 321.580704][T23452] ? fput+0x99/0xd0 [ 321.580734][T23452] __x64_sys_pivot_root+0x31/0x40 [ 321.580784][T23452] x64_sys_call+0x2cc5/0x2e10 [ 321.580810][T23452] do_syscall_64+0xc9/0x1c0 [ 321.580844][T23452] ? clear_bhb_loop+0x25/0x80 [ 321.580968][T23452] ? clear_bhb_loop+0x25/0x80 [ 321.580988][T23452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.581016][T23452] RIP: 0033:0x7f9a36d7d169 [ 321.581034][T23452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.581054][T23452] RSP: 002b:00007f9a353e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 321.581076][T23452] RAX: ffffffffffffffda RBX: 00007f9a36f95fa0 RCX: 00007f9a36d7d169 [ 321.581159][T23452] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 321.581192][T23452] RBP: 00007f9a353e7090 R08: 0000000000000000 R09: 0000000000000000 [ 321.581207][T23452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.581220][T23452] R13: 0000000000000000 R14: 00007f9a36f95fa0 R15: 00007fff34a7d228 [ 321.581309][T23452] [ 321.814547][T23459] loop4: detected capacity change from 0 to 1024 [ 321.825676][T23459] EXT4-fs: Ignoring removed orlov option [ 321.831765][T23459] EXT4-fs: Ignoring removed nobh option [ 321.835994][T23253] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.837318][T23459] EXT4-fs: Ignoring removed bh option [ 321.857309][T23253] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.869266][T23253] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.881221][T23253] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.908395][T23459] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.935133][T23469] FAULT_INJECTION: forcing a failure. [ 321.935133][T23469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.944097][T23475] loop1: detected capacity change from 0 to 1024 [ 321.948287][T23469] CPU: 0 UID: 0 PID: 23469 Comm: syz.7.7476 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 321.948323][T23469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 321.948339][T23469] Call Trace: [ 321.948348][T23469] [ 321.948357][T23469] dump_stack_lvl+0xf6/0x150 [ 321.948398][T23469] dump_stack+0x15/0x1a [ 321.948420][T23469] should_fail_ex+0x261/0x270 [ 321.948455][T23469] should_fail+0xb/0x10 [ 321.948533][T23469] should_fail_usercopy+0x1a/0x20 [ 321.948728][T23469] _copy_from_user+0x1c/0xa0 [ 321.948822][T23469] ppp_write+0x12c/0x330 [ 321.948846][T23469] ? __pfx_ppp_write+0x10/0x10 [ 321.948872][T23469] vfs_write+0x295/0x950 [ 321.948908][T23469] ? putname+0xe1/0x100 [ 321.948932][T23469] ? __fget_files+0x186/0x1c0 [ 321.948961][T23469] ksys_write+0xeb/0x1b0 [ 321.949034][T23469] __x64_sys_write+0x42/0x50 [ 321.949071][T23469] x64_sys_call+0x2a45/0x2e10 [ 321.949099][T23469] do_syscall_64+0xc9/0x1c0 [ 321.949211][T23469] ? clear_bhb_loop+0x25/0x80 [ 321.949238][T23469] ? clear_bhb_loop+0x25/0x80 [ 321.949281][T23469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.949309][T23469] RIP: 0033:0x7f64c18cd169 [ 321.949329][T23469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.949353][T23469] RSP: 002b:00007f64bff2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 321.949398][T23469] RAX: ffffffffffffffda RBX: 00007f64c1ae5fa0 RCX: 00007f64c18cd169 [ 321.949415][T23469] RDX: 0000000000000002 RSI: 0000200000000480 RDI: 0000000000000003 [ 321.949430][T23469] RBP: 00007f64bff2f090 R08: 0000000000000000 R09: 0000000000000000 [ 321.949504][T23469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.949586][T23469] R13: 0000000000000000 R14: 00007f64c1ae5fa0 R15: 00007ffd905193f8 [ 321.949611][T23469] [ 322.143209][T23475] EXT4-fs: Ignoring removed bh option [ 322.148689][T23475] EXT4-fs: inline encryption not supported [ 322.154596][T23475] EXT4-fs: Ignoring removed i_version option [ 322.161432][T23475] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 322.162067][T19205] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.185393][T23475] EXT4-fs error (device loop1): ext4_map_blocks:674: inode #3: block 2: comm syz.1.7479: lblock 2 mapped to illegal pblock 2 (length 1) [ 322.209013][T23475] __quota_error: 253 callbacks suppressed [ 322.209073][T23475] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 322.267491][T23475] EXT4-fs error (device loop1): ext4_map_blocks:674: inode #3: block 48: comm syz.1.7479: lblock 0 mapped to illegal pblock 48 (length 1) [ 322.324127][T23475] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 322.333083][T23475] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.7479: Failed to acquire dquot type 0 [ 322.377357][T23475] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 322.401626][T23475] EXT4-fs error (device loop1): ext4_evict_inode:259: inode #11: comm syz.1.7479: mark_inode_dirty error [ 322.427659][T23475] EXT4-fs warning (device loop1): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 322.443727][T23475] EXT4-fs (loop1): 1 orphan inode deleted [ 322.450635][T23475] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.468198][T22023] EXT4-fs error (device loop1): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:59: lblock 1 mapped to illegal pblock 1 (length 1) [ 322.486898][T22023] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 322.495441][T22023] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:59: Failed to release dquot type 0 [ 322.512159][T23475] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.523225][T23475] EXT4-fs error (device loop1): __ext4_get_inode_loc:4449: comm syz.1.7479: Invalid inode table block 1 in block_group 0 [ 322.538749][T23475] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 322.548434][T23475] EXT4-fs error (device loop1): ext4_quota_off:7219: inode #3: comm syz.1.7479: mark_inode_dirty error [ 322.777069][T23505] netlink: 'syz.7.7487': attribute type 13 has an invalid length. [ 322.814707][T23505] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 323.121042][T23508] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 323.151974][ T29] audit: type=1326 audit(2000000101.150:36591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23507 comm="syz.3.7489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771005d169 code=0x7ffc0000 [ 323.175757][ T29] audit: type=1326 audit(2000000101.150:36592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23507 comm="syz.3.7489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f771005d169 code=0x7ffc0000 [ 323.199466][ T29] audit: type=1326 audit(2000000101.150:36593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23507 comm="syz.3.7489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771005d169 code=0x7ffc0000 [ 323.223129][ T29] audit: type=1326 audit(2000000101.160:36594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23507 comm="syz.3.7489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f771005bad0 code=0x7ffc0000 [ 323.246722][ T29] audit: type=1326 audit(2000000101.160:36595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23507 comm="syz.3.7489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771005d169 code=0x7ffc0000 [ 323.270403][ T29] audit: type=1326 audit(2000000101.160:36596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23507 comm="syz.3.7489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f771005d169 code=0x7ffc0000 [ 323.293949][ T29] audit: type=1326 audit(2000000101.160:36597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23507 comm="syz.3.7489" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771005d169 code=0x7ffc0000 [ 323.366327][T23520] FAULT_INJECTION: forcing a failure. [ 323.366327][T23520] name failslab, interval 1, probability 0, space 0, times 0 [ 323.379671][T23520] CPU: 0 UID: 0 PID: 23520 Comm: syz.4.7493 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 323.379698][T23520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 323.379710][T23520] Call Trace: [ 323.379716][T23520] [ 323.379723][T23520] dump_stack_lvl+0xf6/0x150 [ 323.379751][T23520] dump_stack+0x15/0x1a [ 323.379769][T23520] should_fail_ex+0x261/0x270 [ 323.379870][T23520] should_failslab+0x8f/0xb0 [ 323.379981][T23520] kmem_cache_alloc_lru_noprof+0x5e/0x330 [ 323.380087][T23520] ? __d_alloc+0x3d/0x350 [ 323.380117][T23520] __d_alloc+0x3d/0x350 [ 323.380142][T23520] d_alloc_parallel+0x57/0xcb0 [ 323.380167][T23520] ? selinux_inode_permission+0x358/0x430 [ 323.380190][T23520] ? lockref_get_not_dead+0x120/0x1c0 [ 323.380251][T23520] ? down_read+0x173/0x4c0 [ 323.380357][T23520] __lookup_slow+0x8f/0x280 [ 323.380385][T23520] lookup_slow+0x3c/0x60 [ 323.380407][T23520] walk_component+0x204/0x240 [ 323.380431][T23520] ? path_lookupat+0xf6/0x2a0 [ 323.380458][T23520] path_lookupat+0x103/0x2a0 [ 323.380486][T23520] filename_lookup+0x14b/0x340 [ 323.380519][T23520] user_path_at+0x3c/0x140 [ 323.380582][T23520] __x64_sys_chmod+0x6d/0x110 [ 323.380606][T23520] x64_sys_call+0x14ae/0x2e10 [ 323.380629][T23520] do_syscall_64+0xc9/0x1c0 [ 323.380703][T23520] ? clear_bhb_loop+0x25/0x80 [ 323.380728][T23520] ? clear_bhb_loop+0x25/0x80 [ 323.380753][T23520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.380778][T23520] RIP: 0033:0x7f9a36d7d169 [ 323.380795][T23520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 323.380825][T23520] RSP: 002b:00007f9a353e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 323.380911][T23520] RAX: ffffffffffffffda RBX: 00007f9a36f95fa0 RCX: 00007f9a36d7d169 [ 323.380926][T23520] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000340 [ 323.380937][T23520] RBP: 00007f9a353e7090 R08: 0000000000000000 R09: 0000000000000000 [ 323.380948][T23520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.380959][T23520] R13: 0000000000000001 R14: 00007f9a36f95fa0 R15: 00007fff34a7d228 [ 323.380978][T23520] [ 323.743848][T23529] loop4: detected capacity change from 0 to 2048 [ 323.781236][T23529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.665268][T23557] __nla_validate_parse: 12 callbacks suppressed [ 324.665317][T23557] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.7507'. [ 324.717893][T23552] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.7507'. [ 324.789774][T23571] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7515'. [ 324.835277][T19205] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.868439][T23576] loop3: detected capacity change from 0 to 1024 [ 324.875366][T23576] EXT4-fs: Ignoring removed bh option [ 324.881655][T23576] EXT4-fs: inline encryption not supported [ 324.887515][T23576] EXT4-fs: Ignoring removed i_version option [ 324.895078][T23576] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 324.926604][T23576] EXT4-fs error (device loop3): ext4_map_blocks:674: inode #3: block 2: comm syz.3.7517: lblock 2 mapped to illegal pblock 2 (length 1) [ 324.942854][T23576] EXT4-fs error (device loop3): ext4_map_blocks:674: inode #3: block 48: comm syz.3.7517: lblock 0 mapped to illegal pblock 48 (length 1) [ 324.958086][T23576] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.7517: Failed to acquire dquot type 0 [ 324.969592][T23576] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 324.980039][T23576] EXT4-fs error (device loop3): ext4_evict_inode:259: inode #11: comm syz.3.7517: mark_inode_dirty error [ 324.998896][T23576] EXT4-fs warning (device loop3): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 325.009280][T23588] loop7: detected capacity change from 0 to 1024 [ 325.009493][T23588] EXT4-fs: Ignoring removed bh option [ 325.009538][T23588] EXT4-fs: inline encryption not supported [ 325.009558][T23588] EXT4-fs: Ignoring removed i_version option [ 325.010040][T23588] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 325.028586][T23576] EXT4-fs (loop3): 1 orphan inode deleted [ 325.049521][T23588] EXT4-fs error (device loop7): ext4_map_blocks:674: inode #3: block 2: comm syz.7.7521: lblock 2 mapped to illegal pblock 2 (length 1) [ 325.055138][T22003] EXT4-fs error (device loop3): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:39: lblock 1 mapped to illegal pblock 1 (length 1) [ 325.080129][T23576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.082835][T23588] EXT4-fs error (device loop7): ext4_map_blocks:674: inode #3: block 48: comm syz.7.7521: lblock 0 mapped to illegal pblock 48 (length 1) [ 325.092690][T22003] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:39: Failed to release dquot type 0 [ 325.106886][T23588] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.7521: Failed to acquire dquot type 0 [ 325.129816][T23588] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 325.134642][T23592] loop1: detected capacity change from 0 to 512 [ 325.139463][T23588] EXT4-fs error (device loop7): ext4_evict_inode:259: inode #11: comm syz.7.7521: mark_inode_dirty error [ 325.139539][T23588] EXT4-fs warning (device loop7): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 325.139601][T23588] EXT4-fs (loop7): 1 orphan inode deleted [ 325.140127][T23588] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.147208][T23592] ext3: Unknown parameter 'nouser_xattr' [ 325.189154][T23576] EXT4-fs error (device loop3): ext4_map_blocks:674: inode #2: block 16: comm syz.3.7517: lblock 0 mapped to illegal pblock 16 (length 1) [ 325.206643][T22003] EXT4-fs error (device loop7): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:39: lblock 1 mapped to illegal pblock 1 (length 1) [ 325.221195][T22003] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:39: Failed to release dquot type 0 [ 325.234758][T23588] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.245554][T23588] EXT4-fs error (device loop7): __ext4_get_inode_loc:4449: comm syz.7.7521: Invalid inode table block 1 in block_group 0 [ 325.245653][T19227] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.267761][T19227] EXT4-fs error (device loop3): __ext4_get_inode_loc:4449: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 325.269566][T23591] xt_hashlimit: max too large, truncated to 1048576 [ 325.285992][T19227] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 325.288067][T23591] Cannot find set identified by id 0 to match [ 325.297169][T23588] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 325.297244][T23588] EXT4-fs error (device loop7): ext4_quota_off:7219: inode #3: comm syz.7.7521: mark_inode_dirty error [ 325.305800][T19227] EXT4-fs error (device loop3): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 325.380250][T23598] FAULT_INJECTION: forcing a failure. [ 325.380250][T23598] name failslab, interval 1, probability 0, space 0, times 0 [ 325.393034][T23598] CPU: 1 UID: 0 PID: 23598 Comm: syz.7.7524 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 325.393146][T23598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 325.393162][T23598] Call Trace: [ 325.393168][T23598] [ 325.393175][T23598] dump_stack_lvl+0xf6/0x150 [ 325.393204][T23598] dump_stack+0x15/0x1a [ 325.393226][T23598] should_fail_ex+0x261/0x270 [ 325.393261][T23598] should_failslab+0x8f/0xb0 [ 325.393342][T23598] __kmalloc_noprof+0xad/0x410 [ 325.393368][T23598] ? kobject_get_path+0x91/0x1c0 [ 325.393411][T23598] kobject_get_path+0x91/0x1c0 [ 325.393496][T23598] input_devices_seq_show+0x36/0x460 [ 325.393569][T23598] seq_read_iter+0x661/0x970 [ 325.393613][T23598] seq_read+0x1fa/0x240 [ 325.393649][T23598] ? __pfx_seq_read+0x10/0x10 [ 325.393679][T23598] proc_reg_read+0x13f/0x1d0 [ 325.393709][T23598] ? __pfx_proc_reg_read+0x10/0x10 [ 325.393812][T23598] vfs_read+0x1b2/0x710 [ 325.393845][T23598] ? __rcu_read_unlock+0x4e/0x70 [ 325.393879][T23598] ? __fget_files+0x186/0x1c0 [ 325.393907][T23598] ksys_read+0xeb/0x1b0 [ 325.393943][T23598] __x64_sys_read+0x42/0x50 [ 325.394010][T23598] x64_sys_call+0x2a3b/0x2e10 [ 325.394038][T23598] do_syscall_64+0xc9/0x1c0 [ 325.394070][T23598] ? clear_bhb_loop+0x25/0x80 [ 325.394096][T23598] ? clear_bhb_loop+0x25/0x80 [ 325.394163][T23598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.394188][T23598] RIP: 0033:0x7f64c18cd169 [ 325.394203][T23598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.394271][T23598] RSP: 002b:00007f64bff2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 325.394297][T23598] RAX: ffffffffffffffda RBX: 00007f64c1ae5fa0 RCX: 00007f64c18cd169 [ 325.394309][T23598] RDX: 0000000000000ffd RSI: 00002000000014c0 RDI: 0000000000000006 [ 325.394323][T23598] RBP: 00007f64bff2f090 R08: 0000000000000000 R09: 0000000000000000 [ 325.394344][T23598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 325.394359][T23598] R13: 0000000000000000 R14: 00007f64c1ae5fa0 R15: 00007ffd905193f8 [ 325.394384][T23598] [ 325.624415][T23600] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7526'. [ 325.651648][T23602] loop7: detected capacity change from 0 to 256 [ 325.762131][T23606] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.877356][T23610] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.887647][T23620] loop4: detected capacity change from 0 to 1024 [ 325.887862][T23620] EXT4-fs: Ignoring removed bh option [ 325.888000][T23620] EXT4-fs: inline encryption not supported [ 325.888020][T23620] EXT4-fs: Ignoring removed i_version option [ 325.888973][T23620] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 325.937023][T23620] EXT4-fs error (device loop4): ext4_map_blocks:674: inode #3: block 2: comm syz.4.7533: lblock 2 mapped to illegal pblock 2 (length 1) [ 325.956274][T23620] EXT4-fs error (device loop4): ext4_map_blocks:674: inode #3: block 48: comm syz.4.7533: lblock 0 mapped to illegal pblock 48 (length 1) [ 325.966504][T23606] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.975898][T23620] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.7533: Failed to acquire dquot type 0 [ 325.997582][T23620] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 326.018177][T23620] EXT4-fs error (device loop4): ext4_evict_inode:259: inode #11: comm syz.4.7533: mark_inode_dirty error [ 326.030836][T23620] EXT4-fs warning (device loop4): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 326.041148][T23620] EXT4-fs (loop4): 1 orphan inode deleted [ 326.047349][T23620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.060345][T22028] EXT4-fs error (device loop4): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:64: lblock 1 mapped to illegal pblock 1 (length 1) [ 326.077439][T23620] EXT4-fs error (device loop4): ext4_map_blocks:674: inode #2: block 16: comm syz.4.7533: lblock 0 mapped to illegal pblock 16 (length 1) [ 326.101694][T23610] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.109750][T22028] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:64: Failed to release dquot type 0 [ 326.144057][T19205] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.158997][T19205] EXT4-fs error (device loop4): __ext4_get_inode_loc:4449: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 326.174711][T19205] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 326.185974][T19205] EXT4-fs error (device loop4): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 326.210858][T23606] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.240497][T23626] loop4: detected capacity change from 0 to 512 [ 326.248724][T23626] EXT4-fs: Ignoring removed oldalloc option [ 326.260197][T23624] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.7534'. [ 326.275585][T23610] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.282062][T23626] EXT4-fs error (device loop4): ext4_quota_enable:7126: inode #4: comm syz.4.7535: unexpected EA_INODE flag [ 326.300566][T23626] EXT4-fs error (device loop4): ext4_quota_enable:7129: comm syz.4.7535: Bad quota inode: 4, type: 1 [ 326.311864][T23626] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 326.328881][T23623] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.7534'. [ 326.338995][T23626] EXT4-fs (loop4): mount failed [ 326.382310][T23630] loop1: detected capacity change from 0 to 1024 [ 326.390075][T23630] EXT4-fs: Ignoring removed bh option [ 326.395694][T23630] EXT4-fs: inline encryption not supported [ 326.401603][T23630] EXT4-fs: Ignoring removed i_version option [ 326.411886][T23630] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 326.422715][T23606] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.453592][T23633] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7537'. [ 326.467405][T23630] EXT4-fs error (device loop1): ext4_map_blocks:674: inode #3: block 2: comm syz.1.7536: lblock 2 mapped to illegal pblock 2 (length 1) [ 326.482510][T23630] EXT4-fs error (device loop1): ext4_map_blocks:674: inode #3: block 48: comm syz.1.7536: lblock 0 mapped to illegal pblock 48 (length 1) [ 326.501313][T23630] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.7536: Failed to acquire dquot type 0 [ 326.515572][T23630] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 326.516698][T23610] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.532964][T23630] EXT4-fs error (device loop1): ext4_evict_inode:259: inode #11: comm syz.1.7536: mark_inode_dirty error [ 326.548485][T23630] EXT4-fs warning (device loop1): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 326.565385][T23630] EXT4-fs (loop1): 1 orphan inode deleted [ 326.576654][T23630] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 326.591204][T22003] EXT4-fs error (device loop1): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:39: lblock 1 mapped to illegal pblock 1 (length 1) [ 326.614843][T23630] EXT4-fs error (device loop1): ext4_map_blocks:674: inode #2: block 16: comm syz.1.7536: lblock 0 mapped to illegal pblock 16 (length 1) [ 326.615046][T23636] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 326.642465][T22003] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:39: Failed to release dquot type 0 [ 326.647369][T23606] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.677971][T23606] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.705742][T23610] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.717778][T23606] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.727856][T20002] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.733044][T23606] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.745565][T20002] EXT4-fs error (device loop1): __ext4_get_inode_loc:4449: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 326.745759][T20002] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 326.745892][T20002] EXT4-fs error (device loop1): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 326.750436][T23610] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.792808][T23610] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.796774][T23610] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.850421][T23650] loop7: detected capacity change from 0 to 256 [ 326.858773][T23652] FAULT_INJECTION: forcing a failure. [ 326.858773][T23652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.872051][T23652] CPU: 0 UID: 0 PID: 23652 Comm: syz.9.7544 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 326.872082][T23652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 326.872143][T23652] Call Trace: [ 326.872151][T23652] [ 326.872160][T23652] dump_stack_lvl+0xf6/0x150 [ 326.872189][T23652] dump_stack+0x15/0x1a [ 326.872215][T23652] should_fail_ex+0x261/0x270 [ 326.872242][T23652] should_fail+0xb/0x10 [ 326.872265][T23652] should_fail_usercopy+0x1a/0x20 [ 326.872333][T23652] _copy_from_user+0x1c/0xa0 [ 326.872369][T23652] copy_msghdr_from_user+0x54/0x2b0 [ 326.872465][T23652] ? __fget_files+0x186/0x1c0 [ 326.872491][T23652] __sys_sendmsg+0x141/0x240 [ 326.872541][T23652] __x64_sys_sendmsg+0x46/0x50 [ 326.872567][T23652] x64_sys_call+0x26f3/0x2e10 [ 326.872670][T23652] do_syscall_64+0xc9/0x1c0 [ 326.872706][T23652] ? clear_bhb_loop+0x25/0x80 [ 326.872733][T23652] ? clear_bhb_loop+0x25/0x80 [ 326.872755][T23652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.872828][T23652] RIP: 0033:0x7efdeda3d169 [ 326.872843][T23652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.872864][T23652] RSP: 002b:00007efdec09f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 326.872887][T23652] RAX: ffffffffffffffda RBX: 00007efdedc55fa0 RCX: 00007efdeda3d169 [ 326.872901][T23652] RDX: 0000000000000000 RSI: 0000200000005c40 RDI: 0000000000000003 [ 326.872988][T23652] RBP: 00007efdec09f090 R08: 0000000000000000 R09: 0000000000000000 [ 326.873000][T23652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.873014][T23652] R13: 0000000000000000 R14: 00007efdedc55fa0 R15: 00007fffa2e336f8 [ 326.873033][T23652] [ 326.875036][T23650] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 326.907831][T23654] loop9: detected capacity change from 0 to 1024 [ 326.908474][T23650] FAT-fs (loop7): Filesystem has been set read-only [ 327.022151][T23658] loop1: detected capacity change from 0 to 2048 [ 327.027279][T23654] EXT4-fs: Ignoring removed bh option [ 327.089122][T23654] EXT4-fs: inline encryption not supported [ 327.089146][T23654] EXT4-fs: Ignoring removed i_version option [ 327.095560][T23654] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 327.113047][T23658] loop1: p1 < > p4 [ 327.118276][T23658] loop1: p4 size 8388608 extends beyond EOD, truncated [ 327.134376][T23654] EXT4-fs error (device loop9): ext4_map_blocks:674: inode #3: block 2: comm syz.9.7545: lblock 2 mapped to illegal pblock 2 (length 1) [ 327.153382][T23654] EXT4-fs error (device loop9): ext4_map_blocks:674: inode #3: block 48: comm syz.9.7545: lblock 0 mapped to illegal pblock 48 (length 1) [ 327.174092][T23654] EXT4-fs error (device loop9): ext4_acquire_dquot:6935: comm syz.9.7545: Failed to acquire dquot type 0 [ 327.186182][T23654] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 327.195885][T23654] EXT4-fs error (device loop9): ext4_evict_inode:259: inode #11: comm syz.9.7545: mark_inode_dirty error [ 327.195980][T23661] loop7: detected capacity change from 0 to 1024 [ 327.215175][T23654] EXT4-fs warning (device loop9): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 327.226263][T23654] EXT4-fs (loop9): 1 orphan inode deleted [ 327.227118][T23665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7548'. [ 327.233032][T23654] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.240983][T23665] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7548'. [ 327.255294][T23666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.263666][T23661] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 327.271302][ T29] kauditd_printk_skb: 107 callbacks suppressed [ 327.271320][ T29] audit: type=1400 audit(2000000105.290:36691): avc: denied { write } for pid=23664 comm="syz.1.7549" name="ip_vs" dev="proc" ino=4026544672 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 327.271382][T22028] EXT4-fs error (device loop9): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:64: lblock 1 mapped to illegal pblock 1 (length 1) [ 327.273052][T22028] Quota error (device loop9): remove_tree: Can't read quota data block 1 [ 327.282689][T23661] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 327.288843][T22028] EXT4-fs error (device loop9): ext4_release_dquot:6971: comm kworker/u8:64: Failed to release dquot type 0 [ 327.314338][T23666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.364391][T23661] JBD2: no valid journal superblock found [ 327.370318][T23661] EXT4-fs (loop7): Could not load journal inode [ 327.383073][T18728] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.385457][T23668] FAULT_INJECTION: forcing a failure. [ 327.385457][T23668] name failslab, interval 1, probability 0, space 0, times 0 [ 327.405464][T23668] CPU: 1 UID: 0 PID: 23668 Comm: syz.4.7551 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 327.405561][T23668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 327.405576][T23668] Call Trace: [ 327.405583][T23668] [ 327.405591][T23668] dump_stack_lvl+0xf6/0x150 [ 327.405618][T23668] dump_stack+0x15/0x1a [ 327.405652][T23668] should_fail_ex+0x261/0x270 [ 327.405722][T23668] should_failslab+0x8f/0xb0 [ 327.405769][T23668] kmem_cache_alloc_noprof+0x59/0x340 [ 327.405793][T23668] ? getname_flags+0x81/0x3b0 [ 327.405819][T23668] getname_flags+0x81/0x3b0 [ 327.405854][T23668] path_getxattrat+0x12c/0x2a0 [ 327.405897][T23668] __x64_sys_getxattr+0x5c/0x70 [ 327.405920][T23668] x64_sys_call+0x2bb7/0x2e10 [ 327.405964][T23668] do_syscall_64+0xc9/0x1c0 [ 327.406008][T23668] ? clear_bhb_loop+0x25/0x80 [ 327.406088][T23668] ? clear_bhb_loop+0x25/0x80 [ 327.406109][T23668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.406130][T23668] RIP: 0033:0x7f9a36d7d169 [ 327.406149][T23668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.406178][T23668] RSP: 002b:00007f9a353e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bf [ 327.406201][T23668] RAX: ffffffffffffffda RBX: 00007f9a36f95fa0 RCX: 00007f9a36d7d169 [ 327.406253][T23668] RDX: 0000000000000000 RSI: 00002000000011c0 RDI: 0000200000001180 [ 327.406268][T23668] RBP: 00007f9a353e7090 R08: 0000000000000000 R09: 0000000000000000 [ 327.406283][T23668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.406298][T23668] R13: 0000000000000001 R14: 00007f9a36f95fa0 R15: 00007fff34a7d228 [ 327.406318][T23668] [ 327.407228][T18728] EXT4-fs error (device loop9): __ext4_get_inode_loc:4449: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 327.476461][ T29] audit: type=1400 audit(2000000105.510:36692): avc: denied { recv } for pid=23660 comm="iou-wrk-23661" saddr=10.128.0.163 src=40400 daddr=10.128.1.133 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 327.487146][T18728] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 327.493122][T23671] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7547'. [ 327.503742][T18728] EXT4-fs error (device loop9): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 327.655330][ T29] audit: type=1400 audit(2000000105.690:36693): avc: denied { accept } for pid=23674 comm="syz.3.7553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 327.688549][ T29] audit: type=1400 audit(2000000105.720:36694): avc: denied { read } for pid=23674 comm="syz.3.7553" path="socket:[86637]" dev="sockfs" ino=86637 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 327.713018][ T29] audit: type=1400 audit(2000000105.720:36695): avc: denied { write } for pid=23672 comm="syz.4.7552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 327.736088][T23679] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 327.745995][T23679] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23679 comm=syz.9.7550 [ 327.759762][T23679] FAULT_INJECTION: forcing a failure. [ 327.759762][T23679] name failslab, interval 1, probability 0, space 0, times 0 [ 327.772495][T23679] CPU: 1 UID: 0 PID: 23679 Comm: syz.9.7550 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 327.772545][T23679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 327.772614][T23679] Call Trace: [ 327.772621][T23679] [ 327.772628][T23679] dump_stack_lvl+0xf6/0x150 [ 327.772656][T23679] dump_stack+0x15/0x1a [ 327.772675][T23679] should_fail_ex+0x261/0x270 [ 327.772708][T23679] should_failslab+0x8f/0xb0 [ 327.772791][T23679] kmem_cache_alloc_noprof+0x59/0x340 [ 327.772818][T23679] ? skb_clone+0x154/0x1f0 [ 327.772865][T23679] skb_clone+0x154/0x1f0 [ 327.772895][T23679] __netlink_deliver_tap+0x2bd/0x4f0 [ 327.772971][T23679] netlink_unicast+0x69e/0x6c0 [ 327.772999][T23679] netlink_sendmsg+0x609/0x720 [ 327.773032][T23679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 327.773057][T23679] __sock_sendmsg+0x140/0x180 [ 327.773111][T23679] sock_write_iter+0x186/0x1c0 [ 327.773152][T23679] do_iter_readv_writev+0x40d/0x4b0 [ 327.773195][T23679] vfs_writev+0x2da/0x880 [ 327.773222][T23679] ? get_pid_task+0x94/0xd0 [ 327.773263][T23679] do_writev+0xf7/0x230 [ 327.773329][T23679] __x64_sys_writev+0x45/0x50 [ 327.773418][T23679] x64_sys_call+0x1d68/0x2e10 [ 327.773445][T23679] do_syscall_64+0xc9/0x1c0 [ 327.773479][T23679] ? clear_bhb_loop+0x25/0x80 [ 327.773548][T23679] ? clear_bhb_loop+0x25/0x80 [ 327.773574][T23679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.773599][T23679] RIP: 0033:0x7efdeda3d169 [ 327.773616][T23679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.773638][T23679] RSP: 002b:00007efdec09f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 327.773659][T23679] RAX: ffffffffffffffda RBX: 00007efdedc55fa0 RCX: 00007efdeda3d169 [ 327.773672][T23679] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000009 [ 327.773686][T23679] RBP: 00007efdec09f090 R08: 0000000000000000 R09: 0000000000000000 [ 327.773700][T23679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.773721][T23679] R13: 0000000000000000 R14: 00007efdedc55fa0 R15: 00007fffa2e336f8 [ 327.773743][T23679] [ 327.991708][T23679] 0X: renamed from caif0 [ 328.017661][T23679] 0X: entered allmulticast mode [ 328.022999][T23679] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 328.039256][T23682] netem: change failed [ 328.047910][T23685] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 328.082274][T23679] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 328.096232][T23694] loop7: detected capacity change from 0 to 512 [ 328.158944][T23698] netlink: 'syz.4.7557': attribute type 13 has an invalid length. [ 328.275440][T23703] loop1: detected capacity change from 0 to 1024 [ 328.286428][T23703] EXT4-fs: Ignoring removed bh option [ 328.293910][T23698] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 328.299315][ T3380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.314453][T23703] EXT4-fs: inline encryption not supported [ 328.324059][T23703] EXT4-fs: Ignoring removed i_version option [ 328.430525][T23703] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 328.473890][ T3380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.485170][T23703] EXT4-fs error (device loop1): ext4_map_blocks:674: inode #3: block 2: comm syz.1.7560: lblock 2 mapped to illegal pblock 2 (length 1) [ 328.506788][T23703] Quota error (device loop1): qtree_write_dquot: dquota write failed [ 328.554320][T23703] EXT4-fs error (device loop1): ext4_map_blocks:674: inode #3: block 48: comm syz.1.7560: lblock 0 mapped to illegal pblock 48 (length 1) [ 328.604978][T23703] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 328.613820][T23703] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.7560: Failed to acquire dquot type 0 [ 328.676778][T23703] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 328.724797][T23703] EXT4-fs error (device loop1): ext4_evict_inode:259: inode #11: comm syz.1.7560: mark_inode_dirty error [ 328.765147][T23703] EXT4-fs warning (device loop1): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 328.778025][T23703] EXT4-fs (loop1): 1 orphan inode deleted [ 328.802910][T22028] EXT4-fs error (device loop1): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:64: lblock 1 mapped to illegal pblock 1 (length 1) [ 328.819730][T22028] Quota error (device loop1): remove_tree: Can't read quota data block 1 [ 328.828216][T22028] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:64: Failed to release dquot type 0 [ 328.833650][T23714] loop4: detected capacity change from 0 to 512 [ 328.845560][T23703] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.860677][T23714] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 328.870468][ T29] audit: type=1326 audit(2000000106.900:36696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23711 comm="syz.7.7563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64c18cd169 code=0x7ffc0000 [ 328.904521][T23714] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.7562: Failed to acquire dquot type 0 [ 328.924137][T20002] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.933283][T23714] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 328.936786][T20002] EXT4-fs error (device loop1): __ext4_get_inode_loc:4449: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 328.961196][T23714] EXT4-fs (loop4): 1 truncate cleaned up [ 328.965146][T20002] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 328.967869][T23714] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.976513][T20002] EXT4-fs error (device loop1): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 329.004517][T23721] loop7: detected capacity change from 0 to 1024 [ 329.026193][T23714] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.7562: corrupted xattr block 19: bad e_name length [ 329.047081][T23714] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 329.056288][T23714] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.7562: corrupted xattr block 19: bad e_name length [ 329.074801][T23714] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 329.079121][T23721] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 329.086128][T23714] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.7562: corrupted xattr block 19: bad e_name length [ 329.094681][T23721] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 329.108261][T23714] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 329.127652][T23714] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.7562: Failed to acquire dquot type 0 [ 329.144828][T23721] JBD2: no valid journal superblock found [ 329.150673][T23721] EXT4-fs (loop7): Could not load journal inode [ 329.190673][T23728] syz1: rxe_newlink: already configured on ipvlan0 [ 329.197595][T23724] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.297641][T19205] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.312186][T23731] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 329.330536][T23724] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.438375][T23724] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.471946][T23750] loop1: detected capacity change from 0 to 1024 [ 329.489159][T23750] EXT4-fs: Ignoring removed bh option [ 329.494826][T23750] EXT4-fs: inline encryption not supported [ 329.500709][T23750] EXT4-fs: Ignoring removed i_version option [ 329.508177][T23750] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 329.522796][T23750] EXT4-fs error (device loop1): ext4_map_blocks:674: inode #3: block 2: comm syz.1.7576: lblock 2 mapped to illegal pblock 2 (length 1) [ 329.537748][T23750] EXT4-fs error (device loop1): ext4_map_blocks:674: inode #3: block 48: comm syz.1.7576: lblock 0 mapped to illegal pblock 48 (length 1) [ 329.550290][T23756] loop4: detected capacity change from 0 to 2048 [ 329.552646][T23750] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.7576: Failed to acquire dquot type 0 [ 329.571190][T23750] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 329.581250][T23750] EXT4-fs error (device loop1): ext4_evict_inode:259: inode #11: comm syz.1.7576: mark_inode_dirty error [ 329.597871][T23750] EXT4-fs warning (device loop1): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 329.623408][T23750] EXT4-fs (loop1): 1 orphan inode deleted [ 329.631011][T23750] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.643937][T22018] EXT4-fs error (device loop1): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:54: lblock 1 mapped to illegal pblock 1 (length 1) [ 329.668294][T23724] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.674460][T23760] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 329.681286][T23756] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.716262][T22018] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:54: Failed to release dquot type 0 [ 329.754913][T20002] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.781552][T19205] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.790896][T20002] EXT4-fs error (device loop1): __ext4_get_inode_loc:4449: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 329.806946][T20002] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 329.821866][T23764] loop7: detected capacity change from 0 to 1024 [ 329.828531][T23764] EXT4-fs: Ignoring removed oldalloc option [ 329.832491][T20002] EXT4-fs error (device loop1): ext4_quota_off:7219: inode #3: comm syz-executor: mark_inode_dirty error [ 329.834625][T23764] EXT4-fs: Ignoring removed orlov option [ 329.855474][T23764] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 329.890392][T23764] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.913704][T23724] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.914296][T23770] loop1: detected capacity change from 0 to 512 [ 329.926643][T23724] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.940168][T23724] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.948585][T23770] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 329.957091][T23724] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.007518][T18030] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.018259][T23770] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.7581: Failed to acquire dquot type 0 [ 330.031749][T23770] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 330.049347][T23770] EXT4-fs (loop1): 1 truncate cleaned up [ 330.061143][T23770] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 330.083881][T23785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.085339][T23770] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.7581: corrupted xattr block 19: bad e_name length [ 330.092595][T23785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.116482][T23770] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 330.126571][T23770] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.7581: corrupted xattr block 19: bad e_name length [ 330.140999][T23770] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 330.142678][T23786] __nla_validate_parse: 7 callbacks suppressed [ 330.142696][T23786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7589'. [ 330.150041][T23770] EXT4-fs error (device loop1): ext4_xattr_block_get:593: inode #15: comm syz.1.7581: corrupted xattr block 19: bad e_name length [ 330.156217][T23786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7589'. [ 330.187684][T23770] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 330.197051][T23770] EXT4-fs error (device loop1): ext4_acquire_dquot:6935: comm syz.1.7581: Failed to acquire dquot type 0 [ 330.220672][T20002] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.293915][T23789] loop1: detected capacity change from 0 to 1024 [ 330.300878][T23789] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 330.311794][T23789] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 330.322799][T23789] JBD2: no valid journal superblock found [ 330.328571][T23789] EXT4-fs (loop1): Could not load journal inode [ 330.397083][T23789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7590'. [ 330.521987][T23797] netlink: 'syz.9.7591': attribute type 13 has an invalid length. [ 330.544672][T23797] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 330.664582][T23801] loop7: detected capacity change from 0 to 2048 [ 330.700765][T23801] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.738458][T18030] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.788903][T23807] FAULT_INJECTION: forcing a failure. [ 330.788903][T23807] name failslab, interval 1, probability 0, space 0, times 0 [ 330.801682][T23807] CPU: 1 UID: 0 PID: 23807 Comm: syz.7.7596 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 330.801716][T23807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 330.801741][T23807] Call Trace: [ 330.801748][T23807] [ 330.801757][T23807] dump_stack_lvl+0xf6/0x150 [ 330.801832][T23807] dump_stack+0x15/0x1a [ 330.801862][T23807] should_fail_ex+0x261/0x270 [ 330.801897][T23807] should_failslab+0x8f/0xb0 [ 330.801958][T23807] __kmalloc_cache_noprof+0x55/0x320 [ 330.801986][T23807] ? sctp_add_bind_addr+0x6f/0x1f0 [ 330.802065][T23807] ? sctp_get_port_local+0x7ce/0xad0 [ 330.802128][T23807] sctp_add_bind_addr+0x6f/0x1f0 [ 330.802166][T23807] sctp_do_bind+0x434/0x4c0 [ 330.802194][T23807] sctp_connect_new_asoc+0x161/0x3c0 [ 330.802224][T23807] sctp_sendmsg+0xe96/0x1870 [ 330.802254][T23807] ? __pfx_sctp_sendmsg+0x10/0x10 [ 330.802333][T23807] inet_sendmsg+0xc5/0xd0 [ 330.802422][T23807] __sock_sendmsg+0x102/0x180 [ 330.802465][T23807] ____sys_sendmsg+0x350/0x4e0 [ 330.802504][T23807] __sys_sendmmsg+0x22a/0x4b0 [ 330.802568][T23807] __x64_sys_sendmmsg+0x57/0x70 [ 330.802661][T23807] x64_sys_call+0x2b53/0x2e10 [ 330.802689][T23807] do_syscall_64+0xc9/0x1c0 [ 330.802725][T23807] ? clear_bhb_loop+0x25/0x80 [ 330.802820][T23807] ? clear_bhb_loop+0x25/0x80 [ 330.802860][T23807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.802886][T23807] RIP: 0033:0x7f64c18cd169 [ 330.802905][T23807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.802927][T23807] RSP: 002b:00007f64bff2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 330.803060][T23807] RAX: ffffffffffffffda RBX: 00007f64c1ae5fa0 RCX: 00007f64c18cd169 [ 330.803075][T23807] RDX: 0000000000000002 RSI: 0000200000001d40 RDI: 0000000000000003 [ 330.803090][T23807] RBP: 00007f64bff2f090 R08: 0000000000000000 R09: 0000000000000000 [ 330.803106][T23807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.803120][T23807] R13: 0000000000000000 R14: 00007f64c1ae5fa0 R15: 00007ffd905193f8 [ 330.803209][T23807] [ 331.053320][T23799] loop1: detected capacity change from 0 to 512 [ 331.071593][T23799] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 331.089057][T23811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23811 comm=syz.4.7598 [ 331.106379][T23799] EXT4-fs (loop1): 1 truncate cleaned up [ 331.106466][T23814] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23814 comm=syz.4.7598 [ 331.135831][T23799] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.168271][T23820] loop3: detected capacity change from 0 to 512 [ 331.175647][T23820] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 331.246237][T23820] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.7600: Failed to acquire dquot type 0 [ 331.258392][T23820] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 331.263142][T23825] loop7: detected capacity change from 0 to 1024 [ 331.277780][T23820] EXT4-fs (loop3): 1 truncate cleaned up [ 331.286548][T23820] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 331.297507][T23829] syz1: rxe_newlink: already configured on ipvlan0 [ 331.303215][T23820] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.7600: corrupted xattr block 19: bad e_name length [ 331.320233][T23825] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 331.331162][T23825] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 331.341185][T23820] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 331.350277][T23820] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.7600: corrupted xattr block 19: bad e_name length [ 331.364395][T23820] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 331.367161][T23825] JBD2: no valid journal superblock found [ 331.375336][T23820] EXT4-fs error (device loop3): ext4_xattr_block_get:593: inode #15: comm syz.3.7600: corrupted xattr block 19: bad e_name length [ 331.379366][T23825] EXT4-fs (loop7): Could not load journal inode [ 331.393695][T23820] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop3 ino=15 [ 331.409464][T23820] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.7600: Failed to acquire dquot type 0 [ 331.500711][T23834] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7602'. [ 331.517378][T19227] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 331.646071][T23840] lo speed is unknown, defaulting to 1000 [ 332.004866][T20002] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.027035][T23846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.045796][T23846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.093861][T23846] netlink: 'syz.7.7609': attribute type 39 has an invalid length. [ 332.107456][T23852] FAULT_INJECTION: forcing a failure. [ 332.107456][T23852] name failslab, interval 1, probability 0, space 0, times 0 [ 332.120181][T23852] CPU: 1 UID: 0 PID: 23852 Comm: syz.4.7612 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 332.120282][T23852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 332.120298][T23852] Call Trace: [ 332.120306][T23852] [ 332.120316][T23852] dump_stack_lvl+0xf6/0x150 [ 332.120347][T23852] dump_stack+0x15/0x1a [ 332.120370][T23852] should_fail_ex+0x261/0x270 [ 332.120407][T23852] should_failslab+0x8f/0xb0 [ 332.120468][T23852] __kmalloc_cache_noprof+0x55/0x320 [ 332.120498][T23852] ? audit_log_d_path+0x8e/0x150 [ 332.120530][T23852] audit_log_d_path+0x8e/0x150 [ 332.120560][T23852] audit_log_d_path_exe+0x42/0x70 [ 332.120625][T23852] audit_log_task+0x1f1/0x250 [ 332.120653][T23852] audit_seccomp+0x68/0x130 [ 332.120679][T23852] __seccomp_filter+0x694/0x10e0 [ 332.120775][T23852] ? vfs_write+0x669/0x950 [ 332.120811][T23852] ? putname+0xe1/0x100 [ 332.120842][T23852] __secure_computing+0x7e/0x160 [ 332.120878][T23852] syscall_trace_enter+0xcf/0x1f0 [ 332.120961][T23852] ? fpregs_assert_state_consistent+0x83/0xa0 [ 332.121012][T23852] do_syscall_64+0xaa/0x1c0 [ 332.121070][T23852] ? clear_bhb_loop+0x25/0x80 [ 332.121097][T23852] ? clear_bhb_loop+0x25/0x80 [ 332.121184][T23852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.121210][T23852] RIP: 0033:0x7f9a36d7d169 [ 332.121229][T23852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 332.121252][T23852] RSP: 002b:00007f9a353e7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ee [ 332.121276][T23852] RAX: ffffffffffffffda RBX: 00007f9a36f95fa0 RCX: 00007f9a36d7d169 [ 332.121292][T23852] RDX: 0000000000000005 RSI: 0000200000000040 RDI: 0000000000008006 [ 332.121307][T23852] RBP: 00007f9a353e7090 R08: 0000000000000000 R09: 0000000000000000 [ 332.121372][T23852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.121387][T23852] R13: 0000000000000000 R14: 00007f9a36f95fa0 R15: 00007fff34a7d228 [ 332.121412][T23852] [ 332.366347][T23855] loop4: detected capacity change from 0 to 1024 [ 332.373366][T23855] EXT4-fs: Ignoring removed bh option [ 332.379500][T23855] EXT4-fs: inline encryption not supported [ 332.385354][T23855] EXT4-fs: Ignoring removed i_version option [ 332.400896][T23855] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 332.416188][T23855] EXT4-fs error (device loop4): ext4_map_blocks:674: inode #3: block 2: comm syz.4.7613: lblock 2 mapped to illegal pblock 2 (length 1) [ 332.430840][T23859] syz1: rxe_newlink: already configured on ipvlan0 [ 332.437419][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 332.437436][ T29] audit: type=1326 audit(2000000110.450:36836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23856 comm="syz.3.7615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771005d169 code=0x7ffc0000 [ 332.468203][ T29] audit: type=1326 audit(2000000110.450:36837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23856 comm="syz.3.7615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771005d169 code=0x7ffc0000 [ 332.492598][ T29] audit: type=1326 audit(2000000110.450:36838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23856 comm="syz.3.7615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f771005d169 code=0x7ffc0000 [ 332.516578][ T29] audit: type=1326 audit(2000000110.450:36839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23856 comm="syz.3.7615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771005d169 code=0x7ffc0000 [ 332.540230][ T29] audit: type=1326 audit(2000000110.450:36840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23856 comm="syz.3.7615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f771005d169 code=0x7ffc0000 [ 332.564622][ T29] audit: type=1326 audit(2000000110.450:36841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23856 comm="syz.3.7615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771005d169 code=0x7ffc0000 [ 332.566623][T23855] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 332.588309][ T29] audit: type=1326 audit(2000000110.450:36842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23856 comm="syz.3.7615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f771005d169 code=0x7ffc0000 [ 332.607015][T23855] EXT4-fs error (device loop4): ext4_map_blocks:674: inode #3: block 48: comm syz.4.7613: lblock 0 mapped to illegal pblock 48 (length 1) [ 332.621551][ T29] audit: type=1326 audit(2000000110.450:36843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23856 comm="syz.3.7615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771005d169 code=0x7ffc0000 [ 332.659493][ T29] audit: type=1326 audit(2000000110.450:36844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23856 comm="syz.3.7615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771005d169 code=0x7ffc0000 [ 332.663850][T23855] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.7613: Failed to acquire dquot type 0 [ 332.694709][T23855] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 332.704486][T23855] EXT4-fs error (device loop4): ext4_evict_inode:259: inode #11: comm syz.4.7613: mark_inode_dirty error [ 332.718252][T23855] EXT4-fs warning (device loop4): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 332.729502][T23855] EXT4-fs (loop4): 1 orphan inode deleted [ 332.735615][T23855] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 332.756048][T15924] EXT4-fs error (device loop4): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:18: lblock 1 mapped to illegal pblock 1 (length 1) [ 332.776380][T23871] loop9: detected capacity change from 0 to 1024 [ 332.782529][T15924] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:18: Failed to release dquot type 0 [ 332.783688][T23871] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 332.798175][T23855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.805130][T23871] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 332.806636][T23871] JBD2: no valid journal superblock found [ 332.819758][T23855] EXT4-fs error (device loop4): __ext4_get_inode_loc:4449: comm syz.4.7613: Invalid inode table block 1 in block_group 0 [ 332.823788][T23871] EXT4-fs (loop9): Could not load journal inode [ 332.834810][T23855] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 332.859290][T23855] EXT4-fs error (device loop4): ext4_quota_off:7219: inode #3: comm syz.4.7613: mark_inode_dirty error [ 332.935309][T23878] loop4: detected capacity change from 0 to 512 [ 332.945245][T23881] netlink: 8 bytes leftover after parsing attributes in process `syz.9.7619'. [ 332.956007][T23878] EXT4-fs: Ignoring removed oldalloc option [ 332.971584][T23878] EXT4-fs error (device loop4): ext4_quota_enable:7126: inode #4: comm syz.4.7621: unexpected EA_INODE flag [ 332.985624][T23878] EXT4-fs error (device loop4): ext4_quota_enable:7129: comm syz.4.7621: Bad quota inode: 4, type: 1 [ 332.997143][T23878] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 333.012643][T23878] EXT4-fs (loop4): mount failed [ 333.044304][T23885] loop4: detected capacity change from 0 to 512 [ 333.051985][T23885] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 333.061871][T23885] EXT4-fs (loop4): orphan cleanup on readonly fs [ 333.068716][T23885] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.7623: invalid indirect mapped block 256 (level 2) [ 333.085776][T23885] EXT4-fs (loop4): 2 truncates cleaned up [ 333.091909][T23885] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 333.105844][T23885] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7623'. [ 333.125597][T19205] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.224837][T23896] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 333.320495][T23900] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.364285][T23906] IPv4: Oversized IP packet from 127.202.26.0 [ 333.371436][T23907] loop9: detected capacity change from 0 to 1024 [ 333.378249][T23907] EXT4-fs: Ignoring removed bh option [ 333.386620][T23907] EXT4-fs: inline encryption not supported [ 333.392691][T23907] EXT4-fs: Ignoring removed i_version option [ 333.401294][T23906] loop3: detected capacity change from 0 to 164 [ 333.405344][T23907] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 333.418228][T23906] Unable to read rock-ridge attributes [ 333.424270][T23907] EXT4-fs error (device loop9): ext4_map_blocks:674: inode #3: block 2: comm syz.9.7632: lblock 2 mapped to illegal pblock 2 (length 1) [ 333.443251][T23907] EXT4-fs error (device loop9): ext4_map_blocks:674: inode #3: block 48: comm syz.9.7632: lblock 0 mapped to illegal pblock 48 (length 1) [ 333.464456][T23907] EXT4-fs error (device loop9): ext4_acquire_dquot:6935: comm syz.9.7632: Failed to acquire dquot type 0 [ 333.477428][T23907] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 333.487336][T23907] EXT4-fs error (device loop9): ext4_evict_inode:259: inode #11: comm syz.9.7632: mark_inode_dirty error [ 333.488676][T23900] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.505298][T23907] EXT4-fs warning (device loop9): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 333.524346][T23907] EXT4-fs (loop9): 1 orphan inode deleted [ 333.535596][T22023] EXT4-fs error (device loop9): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:59: lblock 1 mapped to illegal pblock 1 (length 1) [ 333.550646][T22023] EXT4-fs error (device loop9): ext4_release_dquot:6971: comm kworker/u8:59: Failed to release dquot type 0 [ 333.564934][T23907] EXT4-fs error (device loop9): __ext4_get_inode_loc:4449: comm syz.9.7632: Invalid inode table block 1 in block_group 0 [ 333.577781][T23907] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 333.587819][T23907] EXT4-fs error (device loop9): ext4_quota_off:7219: inode #3: comm syz.9.7632: mark_inode_dirty error [ 333.633289][T23900] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.676232][T23919] FAULT_INJECTION: forcing a failure. [ 333.676232][T23919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.689469][T23919] CPU: 1 UID: 0 PID: 23919 Comm: syz.3.7638 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 333.689529][T23919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 333.689544][T23919] Call Trace: [ 333.689551][T23919] [ 333.689560][T23919] dump_stack_lvl+0xf6/0x150 [ 333.689588][T23919] dump_stack+0x15/0x1a [ 333.689607][T23919] should_fail_ex+0x261/0x270 [ 333.689713][T23919] should_fail+0xb/0x10 [ 333.689748][T23919] should_fail_usercopy+0x1a/0x20 [ 333.689785][T23919] _copy_from_user+0x1c/0xa0 [ 333.689824][T23919] copy_msghdr_from_user+0x54/0x2b0 [ 333.689923][T23919] ? __fget_files+0x186/0x1c0 [ 333.689951][T23919] __sys_sendmsg+0x141/0x240 [ 333.690003][T23919] __x64_sys_sendmsg+0x46/0x50 [ 333.690032][T23919] x64_sys_call+0x26f3/0x2e10 [ 333.690122][T23919] do_syscall_64+0xc9/0x1c0 [ 333.690157][T23919] ? clear_bhb_loop+0x25/0x80 [ 333.690260][T23919] ? clear_bhb_loop+0x25/0x80 [ 333.690286][T23919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.690307][T23919] RIP: 0033:0x7f771005d169 [ 333.690325][T23919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.690346][T23919] RSP: 002b:00007f770e6c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.690369][T23919] RAX: ffffffffffffffda RBX: 00007f7710275fa0 RCX: 00007f771005d169 [ 333.690395][T23919] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 333.690410][T23919] RBP: 00007f770e6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 333.690424][T23919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.690438][T23919] R13: 0000000000000000 R14: 00007f7710275fa0 R15: 00007ffc124bc4e8 [ 333.690462][T23919] [ 333.933836][T23900] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.974864][T23930] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 334.044533][T23934] lo speed is unknown, defaulting to 1000 [ 334.123589][T23938] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7645'. [ 334.143083][T23900] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.162454][T23900] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.184928][T23900] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.204393][T23900] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.210743][T23939] netlink: 'syz.3.7645': attribute type 13 has an invalid length. [ 334.252415][T23941] loop4: detected capacity change from 0 to 1024 [ 334.262257][T23941] EXT4-fs: Ignoring removed bh option [ 334.269709][T23941] EXT4-fs: inline encryption not supported [ 334.275571][T23941] EXT4-fs: Ignoring removed i_version option [ 334.285393][T23941] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 334.303472][T23941] EXT4-fs error (device loop4): ext4_map_blocks:674: inode #3: block 2: comm syz.4.7646: lblock 2 mapped to illegal pblock 2 (length 1) [ 334.331296][T23941] EXT4-fs error (device loop4): ext4_map_blocks:674: inode #3: block 48: comm syz.4.7646: lblock 0 mapped to illegal pblock 48 (length 1) [ 334.349696][T23941] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.7646: Failed to acquire dquot type 0 [ 334.374154][T23939] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 334.384737][T23941] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 334.424485][T23941] EXT4-fs error (device loop4): ext4_evict_inode:259: inode #11: comm syz.4.7646: mark_inode_dirty error [ 334.469852][T23941] EXT4-fs warning (device loop4): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 334.504787][T23941] EXT4-fs (loop4): 1 orphan inode deleted [ 334.518971][T22023] EXT4-fs error (device loop4): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:59: lblock 1 mapped to illegal pblock 1 (length 1) [ 334.543263][T22023] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:59: Failed to release dquot type 0 [ 334.561386][T23941] EXT4-fs error (device loop4): __ext4_get_inode_loc:4449: comm syz.4.7646: Invalid inode table block 1 in block_group 0 [ 334.578956][T23946] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 334.587083][T23941] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 334.603111][T23941] EXT4-fs error (device loop4): ext4_quota_off:7219: inode #3: comm syz.4.7646: mark_inode_dirty error [ 334.699076][T23954] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 334.747381][T23956] FAULT_INJECTION: forcing a failure. [ 334.747381][T23956] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.760624][T23956] CPU: 1 UID: 0 PID: 23956 Comm: syz.9.7654 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 334.760653][T23956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 334.760732][T23956] Call Trace: [ 334.760739][T23956] [ 334.760755][T23956] dump_stack_lvl+0xf6/0x150 [ 334.760779][T23956] dump_stack+0x15/0x1a [ 334.760796][T23956] should_fail_ex+0x261/0x270 [ 334.760824][T23956] should_fail+0xb/0x10 [ 334.760847][T23956] should_fail_usercopy+0x1a/0x20 [ 334.760954][T23956] _copy_from_user+0x1c/0xa0 [ 334.760987][T23956] ip6gre_tunnel_siocdevprivate+0x14b/0x720 [ 334.761027][T23956] dev_ifsioc+0x937/0xb20 [ 334.761102][T23956] dev_ioctl+0x8da/0xad0 [ 334.761129][T23956] sock_ioctl+0x5b8/0x630 [ 334.761162][T23956] ? __pfx_sock_ioctl+0x10/0x10 [ 334.761251][T23956] __se_sys_ioctl+0xc9/0x140 [ 334.761279][T23956] __x64_sys_ioctl+0x43/0x50 [ 334.761304][T23956] x64_sys_call+0x168d/0x2e10 [ 334.761327][T23956] do_syscall_64+0xc9/0x1c0 [ 334.761396][T23956] ? clear_bhb_loop+0x25/0x80 [ 334.761418][T23956] ? clear_bhb_loop+0x25/0x80 [ 334.761439][T23956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.761460][T23956] RIP: 0033:0x7efdeda3d169 [ 334.761481][T23956] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.761500][T23956] RSP: 002b:00007efdec09f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 334.761519][T23956] RAX: ffffffffffffffda RBX: 00007efdedc55fa0 RCX: 00007efdeda3d169 [ 334.761567][T23956] RDX: 0000200000000440 RSI: 00000000000089f3 RDI: 0000000000000008 [ 334.761579][T23956] RBP: 00007efdec09f090 R08: 0000000000000000 R09: 0000000000000000 [ 334.761591][T23956] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.761602][T23956] R13: 0000000000000000 R14: 00007efdedc55fa0 R15: 00007fffa2e336f8 [ 334.761624][T23956] [ 334.766648][T23958] lo speed is unknown, defaulting to 1000 [ 334.954545][T23966] FAULT_INJECTION: forcing a failure. [ 334.954545][T23966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.976260][T23966] CPU: 0 UID: 0 PID: 23966 Comm: syz.1.7656 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 334.976290][T23966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 334.976303][T23966] Call Trace: [ 334.976309][T23966] [ 334.976316][T23966] dump_stack_lvl+0xf6/0x150 [ 334.976352][T23966] dump_stack+0x15/0x1a [ 334.976402][T23966] should_fail_ex+0x261/0x270 [ 334.976432][T23966] should_fail+0xb/0x10 [ 334.976471][T23966] should_fail_usercopy+0x1a/0x20 [ 334.976504][T23966] _copy_to_user+0x20/0xa0 [ 334.976556][T23966] simple_read_from_buffer+0xb2/0x130 [ 334.976593][T23966] proc_fail_nth_read+0x103/0x140 [ 334.976671][T23966] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 334.976744][T23966] vfs_read+0x1b2/0x710 [ 334.976791][T23966] ? __rcu_read_unlock+0x4e/0x70 [ 334.976963][T23966] ? __fget_files+0x186/0x1c0 [ 334.976986][T23966] ksys_read+0xeb/0x1b0 [ 334.977015][T23966] __x64_sys_read+0x42/0x50 [ 334.977053][T23966] x64_sys_call+0x2a3b/0x2e10 [ 334.977116][T23966] do_syscall_64+0xc9/0x1c0 [ 334.977152][T23966] ? clear_bhb_loop+0x25/0x80 [ 334.977174][T23966] ? clear_bhb_loop+0x25/0x80 [ 334.977229][T23966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.977255][T23966] RIP: 0033:0x7fc96968bb7c [ 334.977274][T23966] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 334.977295][T23966] RSP: 002b:00007fc967cb5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 334.977313][T23966] RAX: ffffffffffffffda RBX: 00007fc9698a6160 RCX: 00007fc96968bb7c [ 334.977327][T23966] RDX: 000000000000000f RSI: 00007fc967cb50a0 RDI: 000000000000001f [ 334.977377][T23966] RBP: 00007fc967cb5090 R08: 0000000000000000 R09: 0000000000000000 [ 334.977391][T23966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.977406][T23966] R13: 0000000000000000 R14: 00007fc9698a6160 R15: 00007ffdc79e25e8 [ 334.977428][T23966] [ 335.354807][T23971] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7658'. [ 335.363960][T23971] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7658'. [ 335.435811][T23964] lo speed is unknown, defaulting to 1000 [ 335.628073][T23995] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 335.674294][T24006] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7671'. [ 335.683418][T24006] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7671'. [ 335.719138][T24011] loop9: detected capacity change from 0 to 512 [ 335.728328][T24011] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 335.769700][T24019] netlink: 44 bytes leftover after parsing attributes in process `syz.7.7674'. [ 335.772033][T24018] loop1: detected capacity change from 0 to 164 [ 335.790712][T24011] EXT4-fs error (device loop9): ext4_acquire_dquot:6935: comm syz.9.7673: Failed to acquire dquot type 0 [ 335.807469][T24018] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 335.817706][T24011] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 335.843465][T24021] netlink: 'syz.7.7674': attribute type 13 has an invalid length. [ 335.854129][T24018] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 335.871522][T24011] EXT4-fs (loop9): 1 truncate cleaned up [ 335.883054][T24021] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 335.928522][T24011] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #15: comm syz.9.7673: corrupted xattr block 19: bad e_name length [ 335.956848][T24011] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 335.971908][T24011] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #15: comm syz.9.7673: corrupted xattr block 19: bad e_name length [ 335.992560][T24011] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 336.005928][T24011] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #15: comm syz.9.7673: corrupted xattr block 19: bad e_name length [ 336.024705][T24011] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 336.035746][T24011] EXT4-fs error (device loop9): ext4_acquire_dquot:6935: comm syz.9.7673: Failed to acquire dquot type 0 [ 336.203654][T24035] loop4: detected capacity change from 0 to 1024 [ 336.215154][T24035] EXT4-fs: Ignoring removed bh option [ 336.220905][T24035] EXT4-fs: inline encryption not supported [ 336.226769][T24035] EXT4-fs: Ignoring removed i_version option [ 336.252522][T24038] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 336.312530][T24035] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 336.349106][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.355355][T24041] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7684'. [ 336.367251][T24041] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7684'. [ 336.387252][T24043] loop9: detected capacity change from 0 to 7 [ 336.397808][T24035] EXT4-fs error (device loop4): ext4_map_blocks:674: inode #3: block 2: comm syz.4.7683: lblock 2 mapped to illegal pblock 2 (length 1) [ 336.417104][T24043] Buffer I/O error on dev loop9, logical block 0, async page read [ 336.425636][T24043] Buffer I/O error on dev loop9, logical block 0, async page read [ 336.433560][T24043] loop9: unable to read partition table [ 336.444363][T24035] EXT4-fs error (device loop4): ext4_map_blocks:674: inode #3: block 48: comm syz.4.7683: lblock 0 mapped to illegal pblock 48 (length 1) [ 336.465383][T24043] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 336.465383][T24043] U) failed (rc=-5) [ 336.490362][T24035] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.7683: Failed to acquire dquot type 0 [ 336.543465][T24035] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 336.574721][T24035] EXT4-fs error (device loop4): ext4_evict_inode:259: inode #11: comm syz.4.7683: mark_inode_dirty error [ 336.634421][T24035] EXT4-fs warning (device loop4): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 336.675659][T24035] EXT4-fs (loop4): 1 orphan inode deleted [ 336.712915][T24049] loop7: detected capacity change from 0 to 512 [ 336.722262][T22028] EXT4-fs error (device loop4): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:64: lblock 1 mapped to illegal pblock 1 (length 1) [ 336.722611][T24049] EXT4-fs: Ignoring removed orlov option [ 336.743125][T24049] EXT4-fs (loop7): VFS: Can't find ext4 filesystem [ 336.750086][T22028] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:64: Failed to release dquot type 0 [ 336.767755][T24035] EXT4-fs error (device loop4): __ext4_get_inode_loc:4449: comm syz.4.7683: Invalid inode table block 1 in block_group 0 [ 336.781245][T24049] loop7: detected capacity change from 0 to 512 [ 336.784981][T24035] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 336.788279][T24049] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 336.805488][T24035] EXT4-fs error (device loop4): ext4_quota_off:7219: inode #3: comm syz.4.7683: mark_inode_dirty error [ 336.833530][T24049] ext4 filesystem being mounted at /481/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.855254][T24055] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 336.987862][T24069] loop1: detected capacity change from 0 to 1024 [ 337.123180][T24092] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.139081][T24096] loop7: detected capacity change from 0 to 512 [ 337.150330][T24096] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 337.210617][T24096] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.7699: Failed to acquire dquot type 0 [ 337.228920][T24091] lo speed is unknown, defaulting to 1000 [ 337.255980][T24096] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 337.310343][T24096] EXT4-fs (loop7): 1 truncate cleaned up [ 337.324978][T24096] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.7699: corrupted xattr block 19: bad e_name length [ 337.341250][T24092] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.343412][T24096] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 337.384968][T24096] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.7699: corrupted xattr block 19: bad e_name length [ 337.405203][T24096] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 337.423079][T24096] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.7699: corrupted xattr block 19: bad e_name length [ 337.441094][T24096] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 337.452226][T24096] __quota_error: 541 callbacks suppressed [ 337.452243][T24096] Quota error (device loop7): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0 [ 337.468485][T24096] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 337.477946][T24096] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.7699: Failed to acquire dquot type 0 [ 337.497683][ T29] audit: type=1326 audit(2000000115.530:37369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24090 comm="syz.4.7696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a36d7d169 code=0x7ffc0000 [ 337.521446][ T29] audit: type=1326 audit(2000000115.530:37370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24090 comm="syz.4.7696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a36d7d169 code=0x7ffc0000 [ 337.545076][ T29] audit: type=1326 audit(2000000115.530:37371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24090 comm="syz.4.7696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a36d7d169 code=0x7ffc0000 [ 337.569064][ T29] audit: type=1326 audit(2000000115.530:37372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24090 comm="syz.4.7696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a36d7d169 code=0x7ffc0000 [ 337.592707][ T29] audit: type=1326 audit(2000000115.530:37373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24090 comm="syz.4.7696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a36d7d169 code=0x7ffc0000 [ 337.616333][ T29] audit: type=1326 audit(2000000115.530:37374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24090 comm="syz.4.7696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9a36d7d169 code=0x7ffc0000 [ 337.639961][ T29] audit: type=1326 audit(2000000115.530:37375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24090 comm="syz.4.7696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a36d7d169 code=0x7ffc0000 [ 337.663668][ T29] audit: type=1326 audit(2000000115.530:37376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24090 comm="syz.4.7696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a36d7d169 code=0x7ffc0000 [ 337.844942][T24092] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.929721][T24109] loop1: detected capacity change from 0 to 512 [ 337.938036][T24109] EXT4-fs: Ignoring removed oldalloc option [ 337.952559][T24092] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.974876][T24109] EXT4-fs error (device loop1): ext4_quota_enable:7126: inode #4: comm syz.1.7703: unexpected EA_INODE flag [ 338.014800][T24109] EXT4-fs error (device loop1): ext4_quota_enable:7129: comm syz.1.7703: Bad quota inode: 4, type: 1 [ 338.063751][T24109] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 338.085364][T24092] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.111157][T24109] EXT4-fs (loop1): mount failed [ 338.120834][T24092] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.138361][T24107] loop7: detected capacity change from 0 to 512 [ 338.162825][T24107] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 338.198046][T24124] loop4: detected capacity change from 0 to 512 [ 338.207636][T24092] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.211679][T24092] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.292914][T24124] ext4 filesystem being mounted at /362/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 338.324420][T24129] loop9: detected capacity change from 0 to 512 [ 338.325073][T24129] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 338.341844][T24129] EXT4-fs error (device loop9): ext4_acquire_dquot:6935: comm syz.9.7711: Failed to acquire dquot type 0 [ 338.401036][T24129] EXT4-fs warning (device loop9): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 338.418548][T24129] EXT4-fs (loop9): 1 truncate cleaned up [ 338.433346][T24129] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #15: comm syz.9.7711: corrupted xattr block 19: bad e_name length [ 338.448851][T24129] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 338.457958][T24129] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #15: comm syz.9.7711: corrupted xattr block 19: bad e_name length [ 338.476111][T24129] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 338.485216][T24129] EXT4-fs error (device loop9): ext4_xattr_block_get:593: inode #15: comm syz.9.7711: corrupted xattr block 19: bad e_name length [ 338.503193][T24129] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop9 ino=15 [ 338.514004][T24129] EXT4-fs error (device loop9): ext4_acquire_dquot:6935: comm syz.9.7711: Failed to acquire dquot type 0 [ 338.603724][T24141] loop9: detected capacity change from 0 to 1024 [ 338.608138][T24107] EXT4-fs (loop7): 1 truncate cleaned up [ 338.610327][T24141] EXT4-fs: Ignoring removed bh option [ 338.610380][T24141] EXT4-fs: inline encryption not supported [ 338.610453][T24141] EXT4-fs: Ignoring removed i_version option [ 338.611193][T24141] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 338.660496][T24141] EXT4-fs error (device loop9): ext4_map_blocks:674: inode #3: block 2: comm syz.9.7714: lblock 2 mapped to illegal pblock 2 (length 1) [ 338.684073][T24141] EXT4-fs error (device loop9): ext4_map_blocks:674: inode #3: block 48: comm syz.9.7714: lblock 0 mapped to illegal pblock 48 (length 1) [ 338.706397][T24141] EXT4-fs error (device loop9): ext4_acquire_dquot:6935: comm syz.9.7714: Failed to acquire dquot type 0 [ 338.718149][T24141] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 338.732372][T24141] EXT4-fs error (device loop9): ext4_evict_inode:259: inode #11: comm syz.9.7714: mark_inode_dirty error [ 338.794324][T24141] EXT4-fs warning (device loop9): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 338.825324][T24146] SELinux: failed to load policy [ 338.851098][T24141] EXT4-fs (loop9): 1 orphan inode deleted [ 338.860216][T24146] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.875084][T22023] EXT4-fs error (device loop9): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:59: lblock 1 mapped to illegal pblock 1 (length 1) [ 338.896516][T22023] EXT4-fs error (device loop9): ext4_release_dquot:6971: comm kworker/u8:59: Failed to release dquot type 0 [ 338.911675][T24149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.914295][T24141] EXT4-fs error (device loop9): __ext4_get_inode_loc:4449: comm syz.9.7714: Invalid inode table block 1 in block_group 0 [ 338.920792][T24149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.942807][T24141] EXT4-fs error (device loop9) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 338.952973][T24141] EXT4-fs error (device loop9): ext4_quota_off:7219: inode #3: comm syz.9.7714: mark_inode_dirty error [ 338.953628][T24146] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.003148][T24146] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.106336][T24157] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.145709][T24146] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.198499][T24157] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.235948][T24146] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.247939][T24146] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.260313][T24146] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.277071][T24146] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 339.376546][T24165] loop4: detected capacity change from 0 to 512 [ 339.396426][T24165] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 339.422195][T24157] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.426958][T24165] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.7724: Failed to acquire dquot type 0 [ 339.465272][T24165] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 339.498967][T24165] EXT4-fs (loop4): 1 truncate cleaned up [ 339.511681][T24165] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.7724: corrupted xattr block 19: bad e_name length [ 339.532457][T24165] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 339.546601][T24173] FAULT_INJECTION: forcing a failure. [ 339.546601][T24173] name failslab, interval 1, probability 0, space 0, times 0 [ 339.551632][T24165] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.7724: corrupted xattr block 19: bad e_name length [ 339.560176][T24173] CPU: 0 UID: 0 PID: 24173 Comm: syz.7.7727 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 339.560212][T24173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 339.560230][T24173] Call Trace: [ 339.560239][T24173] [ 339.560249][T24173] dump_stack_lvl+0xf6/0x150 [ 339.560282][T24173] dump_stack+0x15/0x1a [ 339.560320][T24173] should_fail_ex+0x261/0x270 [ 339.560356][T24173] should_failslab+0x8f/0xb0 [ 339.560396][T24173] kmem_cache_alloc_lru_noprof+0x5e/0x330 [ 339.560504][T24173] ? hugetlbfs_alloc_inode+0xbc/0x100 [ 339.560549][T24173] hugetlbfs_alloc_inode+0xbc/0x100 [ 339.560650][T24173] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 339.560694][T24173] alloc_inode+0x40/0x170 [ 339.560734][T24173] new_inode+0x1e/0xe0 [ 339.560759][T24173] hugetlbfs_get_inode+0x7d/0x380 [ 339.560849][T24173] hugetlb_file_setup+0x188/0x3c0 [ 339.560890][T24173] ksys_mmap_pgoff+0x174/0x340 [ 339.560931][T24173] x64_sys_call+0x1945/0x2e10 [ 339.560998][T24173] do_syscall_64+0xc9/0x1c0 [ 339.561038][T24173] ? clear_bhb_loop+0x25/0x80 [ 339.561086][T24173] ? clear_bhb_loop+0x25/0x80 [ 339.561178][T24173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.561205][T24173] RIP: 0033:0x7f64c18cd169 [ 339.561224][T24173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.561326][T24173] RSP: 002b:00007f64bff2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 339.561362][T24173] RAX: ffffffffffffffda RBX: 00007f64c1ae5fa0 RCX: 00007f64c18cd169 [ 339.561378][T24173] RDX: 0000000001000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 339.561436][T24173] RBP: 00007f64bff2f090 R08: ffffffffffffffff R09: 0000000008000000 [ 339.561508][T24173] R10: 000200000005c831 R11: 0000000000000246 R12: 0000000000000001 [ 339.561524][T24173] R13: 0000000000000000 R14: 00007f64c1ae5fa0 R15: 00007ffd905193f8 [ 339.561548][T24173] [ 339.804346][T24165] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 339.831158][T24157] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.843138][T24165] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.7724: corrupted xattr block 19: bad e_name length [ 339.871820][T24165] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 339.900654][T24165] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.7724: Failed to acquire dquot type 0 [ 339.960948][T24184] loop3: detected capacity change from 0 to 2048 [ 339.992551][T24186] loop1: detected capacity change from 0 to 512 [ 339.999870][T24186] EXT4-fs: Ignoring removed oldalloc option [ 340.009047][T24188] rdma_rxe: rxe_newlink: failed to add bond0 [ 340.015866][T24184] loop3: p1 < > p4 [ 340.016148][T24188] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7734'. [ 340.021166][T24184] loop3: p4 size 8388608 extends beyond EOD, truncated [ 340.035439][T24188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.044564][T24186] EXT4-fs error (device loop1): ext4_quota_enable:7126: inode #4: comm syz.1.7732: unexpected EA_INODE flag [ 340.044660][T24186] EXT4-fs error (device loop1): ext4_quota_enable:7129: comm syz.1.7732: Bad quota inode: 4, type: 1 [ 340.044862][T24186] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 340.045076][T24186] EXT4-fs (loop1): mount failed [ 340.109144][T24188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.138456][T24188] loop4: detected capacity change from 0 to 512 [ 340.236782][T24188] EXT4-fs error (device loop4): ext4_do_update_inode:5182: inode #3: comm syz.4.7734: corrupted inode contents [ 340.253038][T24188] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #3: comm syz.4.7734: mark_inode_dirty error [ 340.269861][T24188] EXT4-fs error (device loop4): ext4_do_update_inode:5182: inode #3: comm syz.4.7734: corrupted inode contents [ 340.286275][T24188] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #3: comm syz.4.7734: mark_inode_dirty error [ 340.299167][T24188] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.7734: Failed to acquire dquot type 0 [ 340.315748][T24188] EXT4-fs error (device loop4): ext4_do_update_inode:5182: inode #16: comm syz.4.7734: corrupted inode contents [ 340.388959][T24188] EXT4-fs error (device loop4): ext4_dirty_inode:6074: inode #16: comm syz.4.7734: mark_inode_dirty error [ 340.440482][T24188] EXT4-fs error (device loop4): ext4_do_update_inode:5182: inode #16: comm syz.4.7734: corrupted inode contents [ 340.500361][T24188] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #16: comm syz.4.7734: mark_inode_dirty error [ 340.550621][T24188] EXT4-fs error (device loop4): ext4_do_update_inode:5182: inode #16: comm syz.4.7734: corrupted inode contents [ 340.601644][T24188] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 340.613173][T24188] EXT4-fs error (device loop4): ext4_do_update_inode:5182: inode #16: comm syz.4.7734: corrupted inode contents [ 340.626710][T24188] EXT4-fs error (device loop4): ext4_truncate:4254: inode #16: comm syz.4.7734: mark_inode_dirty error [ 340.640311][T24188] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 340.649976][T24188] EXT4-fs (loop4): 1 truncate cleaned up [ 340.656422][T24188] ext4 filesystem being mounted at /366/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.673742][T24188] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.7734: corrupted xattr block 19: invalid ea_ino [ 340.681281][T24205] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 340.694488][T24188] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 340.707690][T24188] EXT4-fs error (device loop4): ext4_xattr_block_get:593: inode #15: comm syz.4.7734: corrupted xattr block 19: invalid ea_ino [ 340.725079][T24188] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop4 ino=15 [ 340.734745][T24188] EXT4-fs error (device loop4): ext4_xattr_block_find:1869: inode #15: comm syz.4.7734: corrupted xattr block 19: invalid ea_ino [ 340.767542][T24188] lo speed is unknown, defaulting to 1000 [ 340.809604][T24208] xt_hashlimit: max too large, truncated to 1048576 [ 340.827450][T24208] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 340.897939][T24207] loop1: detected capacity change from 0 to 512 [ 340.943844][T24207] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 340.967103][T24207] EXT4-fs (loop1): 1 truncate cleaned up [ 340.978784][T24221] loop3: detected capacity change from 0 to 1024 [ 340.979600][T24221] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 340.979654][T24221] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 340.980652][T24221] JBD2: no valid journal superblock found [ 340.980664][T24221] EXT4-fs (loop3): Could not load journal inode [ 341.132189][T24221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7746'. [ 341.440810][T22003] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:39: Failed to release dquot type 1 [ 341.468948][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.508772][T24233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7749'. [ 341.518428][T24233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7749'. [ 341.528683][T24234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7750'. [ 341.537664][T24234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7750'. [ 341.642073][T24239] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.650774][T24239] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.697008][T24241] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 342.187391][T24249] lo speed is unknown, defaulting to 1000 [ 342.325386][T24252] loop3: detected capacity change from 0 to 512 [ 342.341419][T24252] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7757: bg 0: block 248: padding at end of block bitmap is not set [ 342.360276][T24252] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.7757: Failed to acquire dquot type 1 [ 342.375357][T24252] EXT4-fs (loop3): 1 truncate cleaned up [ 342.382684][T24252] ext4 filesystem being mounted at /396/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.436051][T24256] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7758'. [ 342.455192][T24252] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7757'. [ 342.483732][T21995] __quota_error: 296 callbacks suppressed [ 342.483751][T21995] Quota error (device loop3): do_check_range: Getting block 0 out of range 1-5 [ 342.498603][T21995] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:34: Failed to release dquot type 1 [ 342.539562][T24157] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.551932][T24157] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.564058][T24157] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.576126][T24157] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.637737][T24266] lo speed is unknown, defaulting to 1000 [ 342.650588][T24264] netlink: 36 bytes leftover after parsing attributes in process `syz.9.7762'. [ 342.660878][ T29] audit: type=1400 audit(2000000120.690:37657): avc: denied { ioctl } for pid=24263 comm="syz.9.7762" path="socket:[90230]" dev="sockfs" ino=90230 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 342.843534][T24273] netlink: 'syz.4.7761': attribute type 27 has an invalid length. [ 342.896776][T24271] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7761'. [ 342.977970][T24273] bridge0: port 2(bridge_slave_1) entered disabled state [ 342.985360][T24273] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.035872][T24273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.045717][T24273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.083174][T24273] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.092947][T24273] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.101495][T24273] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.109923][T24273] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.149926][T24272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.159230][T24272] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.170498][T24272] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 343.433427][T24290] loop9: detected capacity change from 0 to 7 [ 343.460325][T24290] Buffer I/O error on dev loop9, logical block 0, async page read [ 343.472574][ T29] audit: type=1326 audit(2000000121.510:37658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24295 comm="syz.3.7771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771005d169 code=0x7ffc0000 [ 343.496467][ T29] audit: type=1326 audit(2000000121.510:37659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24295 comm="syz.3.7771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771005d169 code=0x7ffc0000 [ 343.504501][T24290] Buffer I/O error on dev loop9, logical block 0, async page read [ 343.529945][T24290] loop9: unable to read partition table [ 343.593302][T24290] loop_reread_partitions: partition scan of loop9 (被xڬdƤݡ [ 343.593302][T24290] U) failed (rc=-5) [ 343.615868][ T29] audit: type=1326 audit(2000000121.560:37660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24295 comm="syz.3.7771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f771005d169 code=0x7ffc0000 [ 343.639489][ T29] audit: type=1326 audit(2000000121.560:37661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24295 comm="syz.3.7771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771005d169 code=0x7ffc0000 [ 343.663142][ T29] audit: type=1326 audit(2000000121.560:37662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24295 comm="syz.3.7771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=120 compat=0 ip=0x7f771005d169 code=0x7ffc0000 [ 343.686850][ T29] audit: type=1326 audit(2000000121.560:37663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24295 comm="syz.3.7771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771005d169 code=0x7ffc0000 [ 343.710523][ T29] audit: type=1326 audit(2000000121.570:37664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24295 comm="syz.3.7771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f771005d169 code=0x7ffc0000 [ 343.734198][ T29] audit: type=1326 audit(2000000121.570:37665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24295 comm="syz.3.7771" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f771005d169 code=0x7ffc0000 [ 343.791836][T24301] loop4: detected capacity change from 0 to 512 [ 343.800504][T24301] EXT4-fs: Ignoring removed oldalloc option [ 343.811594][T24301] EXT4-fs error (device loop4): ext4_quota_enable:7126: inode #4: comm syz.4.7773: unexpected EA_INODE flag [ 343.842526][T24301] EXT4-fs error (device loop4): ext4_quota_enable:7129: comm syz.4.7773: Bad quota inode: 4, type: 1 [ 343.857582][T24301] EXT4-fs warning (device loop4): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 343.874107][T24301] EXT4-fs (loop4): mount failed [ 344.194962][T24308] Set syz1 is full, maxelem 65536 reached [ 344.364925][T24325] FAULT_INJECTION: forcing a failure. [ 344.364925][T24325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.378093][T24325] CPU: 0 UID: 0 PID: 24325 Comm: syz.1.7781 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 344.378126][T24325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 344.378139][T24325] Call Trace: [ 344.378145][T24325] [ 344.378152][T24325] dump_stack_lvl+0xf6/0x150 [ 344.378176][T24325] dump_stack+0x15/0x1a [ 344.378193][T24325] should_fail_ex+0x261/0x270 [ 344.378245][T24325] should_fail+0xb/0x10 [ 344.378316][T24325] should_fail_usercopy+0x1a/0x20 [ 344.378349][T24325] _copy_from_user+0x1c/0xa0 [ 344.378432][T24325] ppp_get_filter+0x43/0x160 [ 344.378455][T24325] ppp_ioctl+0xc2a/0x1250 [ 344.378474][T24325] ? __fget_files+0x186/0x1c0 [ 344.378498][T24325] ? __pfx_ppp_ioctl+0x10/0x10 [ 344.378521][T24325] __se_sys_ioctl+0xc9/0x140 [ 344.378560][T24325] __x64_sys_ioctl+0x43/0x50 [ 344.378710][T24325] x64_sys_call+0x168d/0x2e10 [ 344.378738][T24325] do_syscall_64+0xc9/0x1c0 [ 344.378832][T24325] ? clear_bhb_loop+0x25/0x80 [ 344.378859][T24325] ? clear_bhb_loop+0x25/0x80 [ 344.378922][T24325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.378957][T24325] RIP: 0033:0x7fc96968d169 [ 344.378976][T24325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.378997][T24325] RSP: 002b:00007fc967cf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 344.379018][T24325] RAX: ffffffffffffffda RBX: 00007fc9698a5fa0 RCX: 00007fc96968d169 [ 344.379030][T24325] RDX: 0000200000000180 RSI: 0000000040107447 RDI: 0000000000000004 [ 344.379042][T24325] RBP: 00007fc967cf7090 R08: 0000000000000000 R09: 0000000000000000 [ 344.379054][T24325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.379066][T24325] R13: 0000000000000000 R14: 00007fc9698a5fa0 R15: 00007ffdc79e25e8 [ 344.379107][T24325] [ 344.667896][T24334] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7782'. [ 344.704577][T24336] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 344.864899][T24350] netlink: 'syz.4.7791': attribute type 10 has an invalid length. [ 344.873139][T24350] batadv0: entered promiscuous mode [ 344.878433][T24350] batadv0: entered allmulticast mode [ 344.884786][T24350] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.893179][T24350] bridge0: port 3(batadv0) entered blocking state [ 344.899919][T24350] bridge0: port 3(batadv0) entered disabled state [ 344.907154][T24350] bridge0: port 3(batadv0) entered blocking state [ 344.913621][T24350] bridge0: port 3(batadv0) entered forwarding state [ 344.922402][T24351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.931297][T24351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.936085][T24339] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.955660][T24339] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.299498][T22028] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 345.308996][T22028] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 345.506154][T24365] loop4: detected capacity change from 0 to 512 [ 345.506456][T24364] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 345.522932][T24365] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 345.532168][T24365] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 345.545158][T24365] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 345.554208][T24367] loop7: detected capacity change from 0 to 1024 [ 345.554599][T24365] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 345.567408][T24367] EXT4-fs: Ignoring removed bh option [ 345.568970][T24365] System zones: 0-2, 18-18, 34-34 [ 345.576531][T24367] EXT4-fs: inline encryption not supported [ 345.585093][T24367] EXT4-fs: Ignoring removed i_version option [ 345.591592][T24367] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 345.620901][T24365] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 345.625882][T24376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.644664][T24367] EXT4-fs error (device loop7): ext4_map_blocks:674: inode #3: block 2: comm syz.7.7798: lblock 2 mapped to illegal pblock 2 (length 1) [ 345.646288][T24376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.664885][T24365] EXT4-fs (loop4): 1 truncate cleaned up [ 345.673872][T24367] EXT4-fs error (device loop7): ext4_map_blocks:674: inode #3: block 48: comm syz.7.7798: lblock 0 mapped to illegal pblock 48 (length 1) [ 345.674348][T24365] EXT4-fs mount: 28 callbacks suppressed [ 345.674365][T24365] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.691539][T24367] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.7798: Failed to acquire dquot type 0 [ 345.720191][T24367] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 345.730636][T24367] EXT4-fs error (device loop7): ext4_evict_inode:259: inode #11: comm syz.7.7798: mark_inode_dirty error [ 345.743676][T24367] EXT4-fs warning (device loop7): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 345.749294][T19205] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.758274][T24367] EXT4-fs (loop7): 1 orphan inode deleted [ 345.772531][T21995] EXT4-fs error (device loop7): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:34: lblock 1 mapped to illegal pblock 1 (length 1) [ 345.787322][T24367] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.803571][T21995] EXT4-fs error (device loop7): ext4_release_dquot:6971: comm kworker/u8:34: Failed to release dquot type 0 [ 345.820968][T24367] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 345.830561][T24367] EXT4-fs error (device loop7): __ext4_get_inode_loc:4449: comm syz.7.7798: Invalid inode table block 1 in block_group 0 [ 345.850095][T24367] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 345.859915][T24367] EXT4-fs error (device loop7): ext4_quota_off:7219: inode #3: comm syz.7.7798: mark_inode_dirty error [ 345.929342][T24383] loop7: detected capacity change from 0 to 512 [ 345.936440][T24383] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 345.962460][T24373] loop1: detected capacity change from 0 to 512 [ 345.962513][T24383] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.7804: Failed to acquire dquot type 0 [ 345.981143][T24373] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 345.985503][T24383] EXT4-fs warning (device loop7): ext4_update_dynamic_rev:1132: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 346.010944][T24383] EXT4-fs (loop7): 1 truncate cleaned up [ 346.017200][T24383] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.040642][T24383] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.7804: corrupted xattr block 19: bad e_name length [ 346.055219][T24383] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 346.073050][T24383] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.7804: corrupted xattr block 19: bad e_name length [ 346.086887][T24383] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 346.101337][T24383] EXT4-fs error (device loop7): ext4_xattr_block_get:593: inode #15: comm syz.7.7804: corrupted xattr block 19: bad e_name length [ 346.122083][T24383] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 346.132562][T24383] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.7804: Failed to acquire dquot type 0 [ 346.172633][T18030] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.266915][T24373] EXT4-fs (loop1): 1 truncate cleaned up [ 346.273716][T24392] __nla_validate_parse: 5 callbacks suppressed [ 346.273740][T24392] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7805'. [ 346.273764][T24392] netlink: 24 bytes leftover after parsing attributes in process `syz.7.7805'. [ 346.292092][T24393] xt_CT: You must specify a L4 protocol and not use inversions on it [ 346.589076][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.617110][T24373] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 347.705988][T24411] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7812'. [ 347.715334][T24411] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7812'. [ 347.739564][T24415] loop3: detected capacity change from 0 to 1024 [ 347.746310][T24415] EXT4-fs: Ignoring removed bh option [ 347.751900][T24415] EXT4-fs: inline encryption not supported [ 347.757741][T24415] EXT4-fs: Ignoring removed i_version option [ 347.764402][T24415] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 347.778151][T24418] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7815'. [ 347.791316][T24415] EXT4-fs error (device loop3): ext4_map_blocks:674: inode #3: block 2: comm syz.3.7814: lblock 2 mapped to illegal pblock 2 (length 1) [ 347.805753][T24415] __quota_error: 134 callbacks suppressed [ 347.805770][T24415] Quota error (device loop3): qtree_write_dquot: dquota write failed [ 347.823703][T24415] EXT4-fs error (device loop3): ext4_map_blocks:674: inode #3: block 48: comm syz.3.7814: lblock 0 mapped to illegal pblock 48 (length 1) [ 347.845058][T24415] Quota error (device loop3): v2_write_file_info: Can't write info structure [ 347.854026][T24415] EXT4-fs error (device loop3): ext4_acquire_dquot:6935: comm syz.3.7814: Failed to acquire dquot type 0 [ 347.865739][T24415] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 347.876579][T24415] EXT4-fs error (device loop3): ext4_evict_inode:259: inode #11: comm syz.3.7814: mark_inode_dirty error [ 347.888076][T24415] EXT4-fs warning (device loop3): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 347.900799][T24415] EXT4-fs (loop3): 1 orphan inode deleted [ 347.906738][T22018] EXT4-fs error (device loop3): ext4_map_blocks:674: inode #3: block 1: comm kworker/u8:54: lblock 1 mapped to illegal pblock 1 (length 1) [ 347.906991][T24415] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.928280][T22018] Quota error (device loop3): remove_tree: Can't read quota data block 1 [ 347.941815][T22018] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:54: Failed to release dquot type 0 [ 347.954605][T24415] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.964054][T24415] EXT4-fs error (device loop3): __ext4_get_inode_loc:4449: comm syz.3.7814: Invalid inode table block 1 in block_group 0 [ 347.979041][T24415] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5870: Corrupt filesystem [ 347.988653][T24415] EXT4-fs error (device loop3): ext4_quota_off:7219: inode #3: comm syz.3.7814: mark_inode_dirty error [ 348.080474][T24420] loop4: detected capacity change from 0 to 512 [ 348.091916][T24420] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 348.124681][T24420] EXT4-fs (loop4): 1 truncate cleaned up [ 348.133666][T24420] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 348.175880][T24430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.186780][T24430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.219824][T20002] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 348.324820][T24437] ================================================================== [ 348.332948][T24437] BUG: KCSAN: data-race in mas_wmb_replace / mtree_range_walk [ 348.340412][T24437] [ 348.342729][T24437] write to 0xffff88810363d700 of 8 bytes by task 24435 on cpu 0: [ 348.350437][T24437] mas_wmb_replace+0x224/0x1510 [ 348.355283][T24437] mas_wr_store_entry+0x158c/0x2460 [ 348.360485][T24437] mas_store_prealloc+0x6d5/0x960 [ 348.365516][T24437] vma_iter_store_new+0x1d3/0x210 [ 348.370538][T24437] vma_complete+0x12b/0x570 [ 348.375066][T24437] __split_vma+0x56c/0x630 [ 348.379487][T24437] vma_modify+0x105/0x200 [ 348.383860][T24437] vma_modify_flags+0x10a/0x140 [ 348.388748][T24437] mprotect_fixup+0x30f/0x5d0 [ 348.393434][T24437] do_mprotect_pkey+0x6ce/0x9a0 [ 348.398282][T24437] __x64_sys_mprotect+0x48/0x60 [ 348.403129][T24437] x64_sys_call+0x272f/0x2e10 [ 348.407824][T24437] do_syscall_64+0xc9/0x1c0 [ 348.412334][T24437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.418225][T24437] [ 348.420548][T24437] read to 0xffff88810363d700 of 8 bytes by task 24437 on cpu 1: [ 348.428195][T24437] mtree_range_walk+0x347/0x460 [ 348.433076][T24437] mas_walk+0x16e/0x320 [ 348.437246][T24437] lock_vma_under_rcu+0xa7/0x340 [ 348.442216][T24437] exc_page_fault+0x150/0x6a0 [ 348.446907][T24437] asm_exc_page_fault+0x26/0x30 [ 348.451767][T24437] [ 348.454084][T24437] value changed: 0xffff888119230041 -> 0xffff88810363d700 [ 348.461187][T24437] [ 348.463502][T24437] Reported by Kernel Concurrency Sanitizer on: [ 348.469675][T24437] CPU: 1 UID: 0 PID: 24437 Comm: syz.1.7822 Not tainted 6.14.0-syzkaller-13524-gf4d2ef48250a #0 PREEMPT(voluntary) [ 348.481824][T24437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 348.491885][T24437] ================================================================== [ 348.727819][T19205] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 349.148915][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog