last executing test programs: 7m0.743066277s ago: executing program 4 (id=902): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x0, 0x0, 0x2ce}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, 0xffffffffffffffff, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 6m59.882262733s ago: executing program 4 (id=915): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x23a, &(0x7f0000000480)={0x0, 0xa101, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000002280)=0xfffffffc, 0x0, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r5, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @multicast1, 0x7}, 0x0, 0x0, 0x2}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) 6m58.96484312s ago: executing program 4 (id=926): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x1, 0x20000041) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(0xffffffffffffffff, 0x0) pipe2$watch_queue(0x0, 0x80) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) recvfrom(r1, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x530, 0x0, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 6m58.942359691s ago: executing program 4 (id=927): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002c00)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x1, 0x20000041) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x2400c840}, 0x0) recvfrom(r1, &(0x7f0000000280)=""/90, 0xfffffffffffffe4a, 0x530, 0x0, 0x0) connect$unix(r2, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 6m57.980826149s ago: executing program 4 (id=944): r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000140), &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$search(0xa, r0, &(0x7f0000000080)='trusted\x00', 0x0, r1) 6m57.980593789s ago: executing program 4 (id=945): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x1) bind$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x0) inotify_init1(0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0xda9917f2, &(0x7f0000000480)='\x00\xff\xff\x00\x02@qGP\xc5\x94\xa6\x8fB\xc3\x93\xe5\xc1a\x05!\x9a\x8b\xeb\xceJP\x1e\xf2\x8a\xd4\xaa\x15@>\xdb\xab\x06\x1b\xe2w\xd8\x1e\xda\xc1\x9f\xe9\xc4c\xdd\xf6^\xcb\xec\xab\x82\xcf\x14\xde\xa5\xef\x162bP\x95/\xefMs\xe0%}\xe4\xf1=\x05\xf6l7\xc1\xe9c\xc3\x7f\tg\xf56\xeasl\xbd\x02\xc1\x8a\xa9\x83\xaf\xfa\x95W+N$\x06R\x92\xe5Z\x97\xfb\xb6e}fW\x8bm\x04\'{\xaf\xe2zd\x91+-\xb1\xd8\ftK|\xb8\xd2\xb6\x7f\xf4\x84\v\x1e\xe6R\xfc\xbcg\x81\xbb\xc4\xcd\xe9\xe5.\x9b\x7f\xeb\x04\xe6,N\x00\x9a\x9d\xf8\xd1\x8aR4;\x7f\x8a\x86\xb7\xd7o\x90\xfd\xa9dJ\xd5.\x18F2\x00\x00\x00\xf2y\x99\xfd\xca\xff*\xd3;\x84F\x8f !N\x1c\xfaI\xa5\x85:\xc1\x9ed\x13\xaf\xd0/\x00\x9b\x0e\xb6\xca\xa5X\xb9]<\n\x90Tk\xa4\xb3\xc4\xa4*\xc2\xf6\x1bw\n6^\xfa\xea\r\xf1\xc1\xd0\xd8\xc7B\x1cP\x02\xcfH\x89\x82G\xcf\x1921\x9e\v4Q\xc6\x9c\xc3\xfd\xf3Z1\xef7cK\xd5\xdc\xbf\x00\xe0{\xa0\xf7\xcd\x82\xf6\x99\xcb\x1a\x17\x02\xd1\x9d(\xa2 \x85\x8e 6zL\xeeqG\t~\xafQ(\xc3\xd8\x05\xcb\xbfB\xb0\xe1b\x0f\xa8f\xe6\xb1\xe8\x9aB\x90\x00\x00\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140014001100010000000000000000000000000a"], 0x28}}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000200)=0x8, r5, 0x0, 0x0, 0x1}}, 0x20) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m51.723201247s ago: executing program 1 (id=1072): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xc8e}, {0x16}]}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r1, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendto$inet(r1, &(0x7f0000000c80)="e8", 0x6200, 0x0, 0x0, 0x0) 6m51.697141408s ago: executing program 1 (id=1073): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6m51.675233448s ago: executing program 1 (id=1074): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) close(0x3) 6m51.60094075s ago: executing program 1 (id=1075): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$netlink(0x10, 0x3, 0x4) writev(r0, &(0x7f0000000300)=[{&(0x7f0000000080)}], 0x1) 6m51.60074928s ago: executing program 1 (id=1076): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000dc0)='\\', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000f00)="5604b1f93280601007f1bfc8446f785300fcfc78c557b8e530dc9f84187a0dd96c1488a0a665ec777782588791c4fd3b0443cd5bde128419bfe468e776011282e789dbfd36ffcbeddbc482d96b9f47e195afe70b764b941e9590c8cfb377d923eaffee045993ff1eb3737b9ec29b8416714cab16f748d946050000002f0100"/137, 0x89}, {&(0x7f0000001a80)="d61f2c7a6ddbff16a09972b62284a63c170b9a6ec5cd29dfa047b76a9a0eeb4055c9dd2244e47c59e557c459c397cd02eb261fc7d521b1", 0x37}], 0x2}}], 0x2, 0x0) shutdown(r0, 0x1) 6m51.5960967s ago: executing program 1 (id=1077): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x1) bind$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x0) inotify_init1(0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0xda9917f2, &(0x7f0000000480)='\x00\xff\xff\x00\x02@qGP\xc5\x94\xa6\x8fB\xc3\x93\xe5\xc1a\x05!\x9a\x8b\xeb\xceJP\x1e\xf2\x8a\xd4\xaa\x15@>\xdb\xab\x06\x1b\xe2w\xd8\x1e\xda\xc1\x9f\xe9\xc4c\xdd\xf6^\xcb\xec\xab\x82\xcf\x14\xde\xa5\xef\x162bP\x95/\xefMs\xe0%}\xe4\xf1=\x05\xf6l7\xc1\xe9c\xc3\x7f\tg\xf56\xeasl\xbd\x02\xc1\x8a\xa9\x83\xaf\xfa\x95W+N$\x06R\x92\xe5Z\x97\xfb\xb6e}fW\x8bm\x04\'{\xaf\xe2zd\x91+-\xb1\xd8\ftK|\xb8\xd2\xb6\x7f\xf4\x84\v\x1e\xe6R\xfc\xbcg\x81\xbb\xc4\xcd\xe9\xe5.\x9b\x7f\xeb\x04\xe6,N\x00\x9a\x9d\xf8\xd1\x8aR4;\x7f\x8a\x86\xb7\xd7o\x90\xfd\xa9dJ\xd5.\x18F2\x00\x00\x00\xf2y\x99\xfd\xca\xff*\xd3;\x84F\x8f !N\x1c\xfaI\xa5\x85:\xc1\x9ed\x13\xaf\xd0/\x00\x9b\x0e\xb6\xca\xa5X\xb9]<\n\x90Tk\xa4\xb3\xc4\xa4*\xc2\xf6\x1bw\n6^\xfa\xea\r\xf1\xc1\xd0\xd8\xc7B\x1cP\x02\xcfH\x89\x82G\xcf\x1921\x9e\v4Q\xc6\x9c\xc3\xfd\xf3Z1\xef7cK\xd5\xdc\xbf\x00\xe0{\xa0\xf7\xcd\x82\xf6\x99\xcb\x1a\x17\x02\xd1\x9d(\xa2 \x85\x8e 6zL\xeeqG\t~\xafQ(\xc3\xd8\x05\xcb\xbfB\xb0\xe1b\x0f\xa8f\xe6\xb1\xe8\x9aB\x90\x00\x00\x00') r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ECN={0x7, 0x6, 0x7}]}}]}, 0x38}}, 0x44080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x28}}, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, &(0x7f00000004c0)) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m43.932651314s ago: executing program 3 (id=1240): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) 6m43.924421805s ago: executing program 3 (id=1241): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000680)=@gcm_128={{0x303}, "045a7cac2b333ef2", "a2ab6a041cb5a5a7a43169caf5259067", "bc780ce3", "82fbb93ae8a6b2fa"}, 0x28) 6m43.862658176s ago: executing program 3 (id=1245): sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x589001, 0x0) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x2c, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7c9f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0) 6m43.575005451s ago: executing program 3 (id=1256): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="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", 0x28e}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)="e2df20f41f2e0dba00fe9238d02d609f0b4754f349263a663b6161ff5eecf74fd88511fbb8a5642943", 0x29}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000e00)="61506eb07117164bdb4ee7ac0a137512738cac7ddf83039c6483d715bcafc5c4f7feff3c5f7c8d0773bb7447d33297aaf2f9e2b9dc15752fdb623d0008f673f7a04836a22be782e61cc35bdea0abd69a4726afa107f95b8922be17921a894c90310251c043c6ffce40aa34acd2ddccc0255708feca96f2563c7318556f4ef40d02bb5cb1f9", 0x85}, {&(0x7f0000000a00)="449f6aed247d197178d7f0a82e1deae14825b22ab6c0ec1ca0c27cd21d8a486374b780581aac75a2f848f285c99133f0435497bf6ae25625c64f82ecc0a7bb7bf4ff", 0x42}, {&(0x7f0000000ec0)="a8186e5cfec4641228a40aab3ba2a51eed6fbde9765fe6098a38dc6c671d34865814d34de5c5bde9e1fab0b2343a4100b8a80fb475ee925b2d0b539b083243652294fa61494ea3dbcff6ee86a24641267027dd88dac0026eb672e1faa4b75c32630a9f0fb76db5eb01e8f7deda19289f97805154d869740ee57414d17b27c10b127b1211464c876f", 0x88}, {&(0x7f0000000f80)="da272d98f0f8962c15832ad9fc3fe69499698607da01faf3742d6a27555ae47f444bad1ea77509fed4623598addf131c04811469c810db02e91468121899cb0cfaa6d06d1cd876e6a0bee56f2bec7b61a58d4bc82f91da6fefe815e7be6c6a07ebeca051d4a71823d1cbd9ec146680bce11c0b821f7e2636c6a64c9fe7d7ea05ddc0076527423e279e470be5", 0x8c}, {&(0x7f0000000040)="09bedb8e", 0x4}, {&(0x7f0000001040)="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", 0x7c8}], 0x6}}], 0x3, 0x480e0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 6m43.508961862s ago: executing program 3 (id=1257): ioctl$sock_ifreq(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)={'bond0\x00', @ifru_names='bond_slave_1\x00'}) 6m43.508785882s ago: executing program 3 (id=1258): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x1) bind$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x0) inotify_init1(0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0xda9917f2, &(0x7f0000000480)='\x00\xff\xff\x00\x02@qGP\xc5\x94\xa6\x8fB\xc3\x93\xe5\xc1a\x05!\x9a\x8b\xeb\xceJP\x1e\xf2\x8a\xd4\xaa\x15@>\xdb\xab\x06\x1b\xe2w\xd8\x1e\xda\xc1\x9f\xe9\xc4c\xdd\xf6^\xcb\xec\xab\x82\xcf\x14\xde\xa5\xef\x162bP\x95/\xefMs\xe0%}\xe4\xf1=\x05\xf6l7\xc1\xe9c\xc3\x7f\tg\xf56\xeasl\xbd\x02\xc1\x8a\xa9\x83\xaf\xfa\x95W+N$\x06R\x92\xe5Z\x97\xfb\xb6e}fW\x8bm\x04\'{\xaf\xe2zd\x91+-\xb1\xd8\ftK|\xb8\xd2\xb6\x7f\xf4\x84\v\x1e\xe6R\xfc\xbcg\x81\xbb\xc4\xcd\xe9\xe5.\x9b\x7f\xeb\x04\xe6,N\x00\x9a\x9d\xf8\xd1\x8aR4;\x7f\x8a\x86\xb7\xd7o\x90\xfd\xa9dJ\xd5.\x18F2\x00\x00\x00\xf2y\x99\xfd\xca\xff*\xd3;\x84F\x8f !N\x1c\xfaI\xa5\x85:\xc1\x9ed\x13\xaf\xd0/\x00\x9b\x0e\xb6\xca\xa5X\xb9]<\n\x90Tk\xa4\xb3\xc4\xa4*\xc2\xf6\x1bw\n6^\xfa\xea\r\xf1\xc1\xd0\xd8\xc7B\x1cP\x02\xcfH\x89\x82G\xcf\x1921\x9e\v4Q\xc6\x9c\xc3\xfd\xf3Z1\xef7cK\xd5\xdc\xbf\x00\xe0{\xa0\xf7\xcd\x82\xf6\x99\xcb\x1a\x17\x02\xd1\x9d(\xa2 \x85\x8e 6zL\xeeqG\t~\xafQ(\xc3\xd8\x05\xcb\xbfB\xb0\xe1b\x0f\xa8f\xe6\xb1\xe8\x9aB\x90\x00\x00\x00') r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ECN={0x7, 0x6, 0x7}]}}]}, 0x38}}, 0x44080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140014001100010000000000000000000000000a"], 0x28}}, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, &(0x7f00000004c0)) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m42.868608304s ago: executing program 32 (id=945): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x1) bind$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x0) inotify_init1(0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0xda9917f2, &(0x7f0000000480)='\x00\xff\xff\x00\x02@qGP\xc5\x94\xa6\x8fB\xc3\x93\xe5\xc1a\x05!\x9a\x8b\xeb\xceJP\x1e\xf2\x8a\xd4\xaa\x15@>\xdb\xab\x06\x1b\xe2w\xd8\x1e\xda\xc1\x9f\xe9\xc4c\xdd\xf6^\xcb\xec\xab\x82\xcf\x14\xde\xa5\xef\x162bP\x95/\xefMs\xe0%}\xe4\xf1=\x05\xf6l7\xc1\xe9c\xc3\x7f\tg\xf56\xeasl\xbd\x02\xc1\x8a\xa9\x83\xaf\xfa\x95W+N$\x06R\x92\xe5Z\x97\xfb\xb6e}fW\x8bm\x04\'{\xaf\xe2zd\x91+-\xb1\xd8\ftK|\xb8\xd2\xb6\x7f\xf4\x84\v\x1e\xe6R\xfc\xbcg\x81\xbb\xc4\xcd\xe9\xe5.\x9b\x7f\xeb\x04\xe6,N\x00\x9a\x9d\xf8\xd1\x8aR4;\x7f\x8a\x86\xb7\xd7o\x90\xfd\xa9dJ\xd5.\x18F2\x00\x00\x00\xf2y\x99\xfd\xca\xff*\xd3;\x84F\x8f !N\x1c\xfaI\xa5\x85:\xc1\x9ed\x13\xaf\xd0/\x00\x9b\x0e\xb6\xca\xa5X\xb9]<\n\x90Tk\xa4\xb3\xc4\xa4*\xc2\xf6\x1bw\n6^\xfa\xea\r\xf1\xc1\xd0\xd8\xc7B\x1cP\x02\xcfH\x89\x82G\xcf\x1921\x9e\v4Q\xc6\x9c\xc3\xfd\xf3Z1\xef7cK\xd5\xdc\xbf\x00\xe0{\xa0\xf7\xcd\x82\xf6\x99\xcb\x1a\x17\x02\xd1\x9d(\xa2 \x85\x8e 6zL\xeeqG\t~\xafQ(\xc3\xd8\x05\xcb\xbfB\xb0\xe1b\x0f\xa8f\xe6\xb1\xe8\x9aB\x90\x00\x00\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140014001100010000000000000000000000000a"], 0x28}}, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r4, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000200)=0x8, r5, 0x0, 0x0, 0x1}}, 0x20) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m36.564289073s ago: executing program 33 (id=1077): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x1) bind$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x0) inotify_init1(0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0xda9917f2, &(0x7f0000000480)='\x00\xff\xff\x00\x02@qGP\xc5\x94\xa6\x8fB\xc3\x93\xe5\xc1a\x05!\x9a\x8b\xeb\xceJP\x1e\xf2\x8a\xd4\xaa\x15@>\xdb\xab\x06\x1b\xe2w\xd8\x1e\xda\xc1\x9f\xe9\xc4c\xdd\xf6^\xcb\xec\xab\x82\xcf\x14\xde\xa5\xef\x162bP\x95/\xefMs\xe0%}\xe4\xf1=\x05\xf6l7\xc1\xe9c\xc3\x7f\tg\xf56\xeasl\xbd\x02\xc1\x8a\xa9\x83\xaf\xfa\x95W+N$\x06R\x92\xe5Z\x97\xfb\xb6e}fW\x8bm\x04\'{\xaf\xe2zd\x91+-\xb1\xd8\ftK|\xb8\xd2\xb6\x7f\xf4\x84\v\x1e\xe6R\xfc\xbcg\x81\xbb\xc4\xcd\xe9\xe5.\x9b\x7f\xeb\x04\xe6,N\x00\x9a\x9d\xf8\xd1\x8aR4;\x7f\x8a\x86\xb7\xd7o\x90\xfd\xa9dJ\xd5.\x18F2\x00\x00\x00\xf2y\x99\xfd\xca\xff*\xd3;\x84F\x8f !N\x1c\xfaI\xa5\x85:\xc1\x9ed\x13\xaf\xd0/\x00\x9b\x0e\xb6\xca\xa5X\xb9]<\n\x90Tk\xa4\xb3\xc4\xa4*\xc2\xf6\x1bw\n6^\xfa\xea\r\xf1\xc1\xd0\xd8\xc7B\x1cP\x02\xcfH\x89\x82G\xcf\x1921\x9e\v4Q\xc6\x9c\xc3\xfd\xf3Z1\xef7cK\xd5\xdc\xbf\x00\xe0{\xa0\xf7\xcd\x82\xf6\x99\xcb\x1a\x17\x02\xd1\x9d(\xa2 \x85\x8e 6zL\xeeqG\t~\xafQ(\xc3\xd8\x05\xcb\xbfB\xb0\xe1b\x0f\xa8f\xe6\xb1\xe8\x9aB\x90\x00\x00\x00') r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ECN={0x7, 0x6, 0x7}]}}]}, 0x38}}, 0x44080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x28}}, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, &(0x7f00000004c0)) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 6m28.427951187s ago: executing program 34 (id=1258): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ptrace(0x10, 0x1) bind$packet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[], 0x38}}, 0x0) inotify_init1(0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0xda9917f2, &(0x7f0000000480)='\x00\xff\xff\x00\x02@qGP\xc5\x94\xa6\x8fB\xc3\x93\xe5\xc1a\x05!\x9a\x8b\xeb\xceJP\x1e\xf2\x8a\xd4\xaa\x15@>\xdb\xab\x06\x1b\xe2w\xd8\x1e\xda\xc1\x9f\xe9\xc4c\xdd\xf6^\xcb\xec\xab\x82\xcf\x14\xde\xa5\xef\x162bP\x95/\xefMs\xe0%}\xe4\xf1=\x05\xf6l7\xc1\xe9c\xc3\x7f\tg\xf56\xeasl\xbd\x02\xc1\x8a\xa9\x83\xaf\xfa\x95W+N$\x06R\x92\xe5Z\x97\xfb\xb6e}fW\x8bm\x04\'{\xaf\xe2zd\x91+-\xb1\xd8\ftK|\xb8\xd2\xb6\x7f\xf4\x84\v\x1e\xe6R\xfc\xbcg\x81\xbb\xc4\xcd\xe9\xe5.\x9b\x7f\xeb\x04\xe6,N\x00\x9a\x9d\xf8\xd1\x8aR4;\x7f\x8a\x86\xb7\xd7o\x90\xfd\xa9dJ\xd5.\x18F2\x00\x00\x00\xf2y\x99\xfd\xca\xff*\xd3;\x84F\x8f !N\x1c\xfaI\xa5\x85:\xc1\x9ed\x13\xaf\xd0/\x00\x9b\x0e\xb6\xca\xa5X\xb9]<\n\x90Tk\xa4\xb3\xc4\xa4*\xc2\xf6\x1bw\n6^\xfa\xea\r\xf1\xc1\xd0\xd8\xc7B\x1cP\x02\xcfH\x89\x82G\xcf\x1921\x9e\v4Q\xc6\x9c\xc3\xfd\xf3Z1\xef7cK\xd5\xdc\xbf\x00\xe0{\xa0\xf7\xcd\x82\xf6\x99\xcb\x1a\x17\x02\xd1\x9d(\xa2 \x85\x8e 6zL\xeeqG\t~\xafQ(\xc3\xd8\x05\xcb\xbfB\xb0\xe1b\x0f\xa8f\xe6\xb1\xe8\x9aB\x90\x00\x00\x00') r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ECN={0x7, 0x6, 0x7}]}}]}, 0x38}}, 0x44080) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140014001100010000000000000000000000000a"], 0x28}}, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, &(0x7f00000004c0)) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) 29.256820934s ago: executing program 5 (id=6596): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r0, 0x80487436, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000c00)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xa00, 0xb) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000140)={r2, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "280991800000598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f000000155cc30cf11d0bc000", [0x4, 0x40000000000000]}}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_deliver\x00', r4, 0x0, 0x9}, 0x18) r5 = add_key$fscrypt_provisioning(&(0x7f0000000100), 0x0, &(0x7f0000000580)={0x2, 0x0, @c}, 0x29, 0xfffffffffffffffc) pipe2$9p(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}, 0x5870a11eafa3e5a8) r7 = dup(r6) setsockopt$inet_mreq(r7, 0x0, 0x24, &(0x7f0000000400)={@broadcast, @multicast1}, 0x8) symlinkat(&(0x7f0000000600)='./file0\x00', r7, &(0x7f0000000640)='./file0\x00') keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f00000005c0)='.request_key_auth\x00', 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001340)=[{{&(0x7f0000000000)=@ll={0x11, 0xf5, 0x0, 0x1, 0x7, 0x6, @broadcast}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000080)="acbc4e3e6bed9de568e942bc2c811c154e34cbb5028a9e1179c4", 0x1a}, {&(0x7f00000000c0)="651dbaeb7bb98692c7b9cd72f2ed2e145de7494512ae5ac01b8637275df94b6ff48d75", 0x23}, {&(0x7f0000000100)}, {&(0x7f0000000200)="23e4e4696497806e7e52df2d70ffebbc06100e6966f46600e80c79fedd9879decf13145c0fed6f4ea2627ed91e937766a23ba526deffab386ec99cec91ddcf523829301ddb9866559f14dc5813b72e8eb3843becc4f84dca3429222c2b447872f1333464cfa9a227bd4a45893678ee198b6fde303e0aa9b8f7c4c730d8646456d267fa01ae3409f3394d9cc51bd0ac837d57758bc2d23a23aec591da70e580dfc2abd01c3ac95cb15f90b0a5ca8df8f25b8add432a47869f6035e6f5761db4b1f00ff275c486e6f76744cd10b499270db7d753eb95fabca28c86c530b13ddc64bdc584db65dc478e4bdb27fa98b39ce757ac29", 0xf3}, {&(0x7f0000001440)="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"}], 0x4, &(0x7f0000001400)=ANY=[@ANYRESHEX=0x0], 0x5d8}}, {{&(0x7f0000000940)=@pppoe={0x18, 0x0, {0x1, @multicast, 'virt_wifi0\x00'}}, 0x80, &(0x7f0000000d00)=[{&(0x7f00000009c0)="b2e931348450b48635a04dda6474986fd6ba2125b227478e4fcf5b543a66763793b8b4a73f922b9761b92b6b938f4242f9bfbe745a29b721d6d04bf92919be035b1bea312136d57bf18948331754040aa61b35d3c13e57f860660cff0625f483d8d4afdbea07314fc2020f07f741ccf231c35ea2e6c069ac263da60039c221089197be5492b7da6ebe6f76f84c480d61b717baee96b504fc8445f192ede7c46b6c129e7af871cc06faf2a9ca732478880afa46f951e68bb00318734b684038", 0xbf}, {&(0x7f0000000a80)="837c"}, {&(0x7f0000000ac0)="eeae91d72a9618ca3eaa2da48d43a9e53345", 0x12}, {&(0x7f0000000b00)="b0a5c9f4c255d15fa94877a6f3e896d0c6cc4e3dfcfc047726e12eb110a6d51ffd3ac42728e359defeb2d0d51b8ab47fc0c97bf83161ca75d5ed1a8855d030271adaca861f3360", 0x47}, {&(0x7f0000000c40)="1d78c92516b164acbf7355d918441cfb350212321d0ece77f75f0166ad917352848a9b0952d043950c2267fb7679c417fcd28d76f80403a5baa80461b628947e3d7b4ff7b242d0713166c4e36953e47b1ff0c3af2c17e87390ba9b7ae51efb3959dfcef50ef1686625f0365832a8a76a446023c8d3d03642cf6f429d458170517e0ba7ea4f73d72763be1b1f5b4e6db260f247acb0b7a50c2261d8f9a2db024fc923e0071b674407f1a400"/182, 0xb6}, {&(0x7f0000000b80)="74a7240e135caad69712a707506b0ad67a1769b3698dacd7c0313b3f7522155682ed743dda5033cca1b86c3c4bebf30362", 0x31}], 0x6, &(0x7f0000000d80)=[{0xd0, 0x116, 0x6, "b856618edbd180075378f15a10ce70b132cfc3608b2a1d497e8ccb2e06ad13e1e3c067f3c443ef16df1030c1f354c02d579cb25c3f90b1f621bcd1cd3f2dcd06820d4aa194466d6a1f25877091707197ff6a4d34e53d8efad50447d45efaf40f7a9949e048267d0e7b8f14fbfbdcc4f607266212a2f0791a7bd003e7346db9d35a7d413ae56b7a15a370ff7bb19a3c453b63d9c3dc3d059f7bc134374341d69436201e55202c6913d9391276e62f5bffe8118d12cb5546b3b058"}], 0xd0}}, {{&(0x7f0000000e80)=@hci={0x1f, 0xffffffffffffffff, 0x1}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000bc0)}, {&(0x7f0000000f00)="9ce98b6212a5c860a65bdd043af5383076428db6e3acda5ab2d1b3da06b3999b9d607d336e8ec0dce4d0b92bb8a58b24c2f4648c996ce36432cfc65025bb3b84f6018f3368142aed86bd6012587e167b27921831ead365c0247fb4c4d774df3020bd64f73b6ad1449020d6961251fbf17ec596b61d8e63c7f6d85c81bfed96827b3fab6b0a1c5b85a87a58a0b88a4b62868980947ac744184dce6dea105ea1ceeeee22f98d4279437ea147180aab3ced6728c8c03363cb9e066c0c04d9dd086c11e0532300d619", 0xc7}, {&(0x7f0000001000)="9588d40137bcb527f09fafcb7b9780c4daf1eb46384a5eb49c939b7c61c61b0a83a84df33f683bf60831bb19f5dfc7414a8505a8d50919fc6dcca07251e9adde40fcac36961f704453d0c2356e9c30dd9dac737c937eb1e7940bc18b962ace8af8179821d3f5e90a13de25b53a709389dddb8d919e2e00c4442eb07973fecc77d7b8f5e0f66df99e259d46c4bf018499656863c389ecf53efbcc9a787f3c8156baf339f98935b30d32a1d18c9d9ee6498d12e1fe", 0xb4}, {&(0x7f00000010c0)="87e30ed870d284fc6fd381a57aa5ede40a1a7deb116fd477038b261169bd1b25e615aab1c345d1e37bd41bfef1416236e1b266e8a42189743f959bd93802d9a0c367597129848870d3ac39d1e06015b6b2759a91", 0x54}, {&(0x7f0000001140)="efe44505f96c01a109e90d2e2eaaa080df5403d4e6fbc0d1933ffdc210a9f7f0da1705606d44fb65cb4d98f9abd595c6e2af75b83ed902534a53e2d947b516", 0x3f}, {&(0x7f0000001180)="90da38f172f9f8332190d662b02fd06720df8308b2b39c0707c075d465d03d447027739809e583fc", 0x28}, {&(0x7f0000000340)="aa5543fa0e111df11aa5e6c38eb66b0fa0a1bc064cc9e27ac97f31a90e66556a03fb0c4b7a02d6569b22cb36e6c4f6eeb9a27c2b7bb6d9334ef73a131184475217838ef7407aa82e13da23a90bb278fd5405c00a8b79a51913d56f513cab7b6e58cffb385db8a632d27e09824552f6b959edeb344efae5cc5547e66ee0099126c268a2456e96674e61f46e40352e4b3a44a56923683c2575ea0091731c212e261461b527bd09480f82d226f5ed7ff5e1"}, {&(0x7f0000000400)="de298430f55cfcc7a839094da69f0d6ebb84abd0de11b7102e17017bfcd3d98417803f07e68ce65065fbac4c34c77598e0225a021617cc937385d86617e09bdc4b4b4cb4955e05f87ea887db709d5c0a58f3d9d08186fa4bf93a2b251de07bbd64da9119d0a5b6acee84038bd0df"}], 0x6, &(0x7f0000001240)=[{0x88, 0x112, 0xc00, "85e88a8a35e9d8a432d7f6e2a89356850037420e24665c619da05e9cf3ff2f82f4df7875d3320e3530c0a7d39526963041a02f9268826e9f7545b86d2207f2b8147c7bbbd50554c3c0f93de1fe9cee743d829216fef592d816e4a427e4e4ad3e17ff7e17846a50973fab8fdd22621f9ad9eed0"}, {0x48, 0x10d, 0xda3, "7985e7d4f07b61cd556b266763db54621d7fb7edf09fba4785fd9045ce872b8a7d87f573c2ed4f4c3e333387caafc0b6388a058aed75"}], 0xd0}}], 0x3, 0x40000) syz_emit_ethernet(0x81, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x3, 0x35, 0x73, 0x67, 0x0, 0x1, 0x21, 0x0, @local, @remote}, {{0x4e20, 0x4e23, 0x4, 0x1, 0x0, 0x0, 0x0, 0x8, 0x5, '(\b\n', 0x3, "cd62c9"}, "4083f42f6a221d03e07035db9842ea26f9791066fdc55807f1bae92e2ce14a867ee322ae10267aeb5f0ed1b96e56622b3f6a1362c516ab456efe5538af8dbccd50390627cd2eecb9aa67ecd36629f6"}}}}}, 0x0) 29.131364146s ago: executing program 5 (id=6598): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x2000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) syz_clone(0x6a00003a, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xff, 0x82, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x200000000000, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 26.705232762s ago: executing program 5 (id=6609): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") 25.306124288s ago: executing program 5 (id=6622): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000280)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x8000000b, 0x3}, 0x10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000300)='./bus\x00', 0x1200840, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x37c, &(0x7f0000000ec0)="$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") r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = epoll_create1(0x0) r5 = socket$unix(0x1, 0x1, 0x0) close(r5) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/91, 0x128000, 0x800, 0x0, 0x2}, 0x20) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_TX_RING(r6, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4) bind$xdp(r6, &(0x7f00000002c0)={0x2c, 0x0, r8}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000080)={0x3000000c}) setns(r3, 0x24020000) r9 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = syz_pidfd_open(r9, 0x0) setns(r10, 0x24020000) r11 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r11, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x1, 0x20000}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8ab8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) 24.340332196s ago: executing program 5 (id=6635): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18) setreuid(0xee00, 0x0) 23.984839562s ago: executing program 5 (id=6638): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0xfe8e, 0x12) (fail_nth: 6) 23.984710382s ago: executing program 35 (id=6638): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0xfe8e, 0x12) (fail_nth: 6) 7.491480921s ago: executing program 2 (id=6817): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000ffffffff0e00ffea00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) mknodat(0xffffffffffffff9c, 0x0, 0x21c0, 0x103) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x1a0000000000000) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa7cde000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000280)=ANY=[@ANYBLOB="facee25c587d9bed1c34000000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/sockstat\x00') preadv(r7, &(0x7f0000000100)=[{&(0x7f0000000140)=""/196, 0xc4}], 0x1, 0x200000, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x7fff, 0x8d84000, 0x3, 0x54216, r7, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x4}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x18) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x20d41, 0x0) syz_clone(0x63081180, 0x0, 0x0, 0x0, 0x0, 0x0) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, 0x0, 0x0) 6.576110818s ago: executing program 2 (id=6823): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) read$nci(r0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, r2, 0x401, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r3}]}, 0x1c}}, 0x0) r4 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}}, 0x0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r6, 0x4, 0x70bd2d, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc010}, 0x800) 5.717924053s ago: executing program 2 (id=6833): r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x502, 0x0) read$rfkill(r0, &(0x7f0000000080), 0xffffff1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x200000000000006}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x9) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r3) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) syz_open_procfs$pagemap(r6, &(0x7f0000000200)) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r9}, 0x18) r10 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r10, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) sendmmsg$inet6(r10, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 3.840063659s ago: executing program 2 (id=6850): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=@newqdisc={0xb0, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x80, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x62, 0xd, "85def352b66e12dffcff85cfbba2ccfd6612b665bf8b01af17af98698a5190c75df64571daeb5e957f52e4345bdce53be16c8cff777d963d610eb55adcec1b3cf1f4c6cbc6b1018cba7a08ded0b1663116027e09834ed456ad593cffdda1"}]}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='bcache_write\x00', r6, 0x0, 0xf7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, 0x0) msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="8c00000009060102000000000000000000000004100008800c00078008000640000000014c00078008000b40000000090c001b40000000000000010114001700767863616e31000000000000000200000c00194000000000000100010900120073797a310000000006001d40000700001c0007801800018014000240fe8000000000000000000000000000bb"], 0x8c}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4010080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r8}, 0x18) capget(&(0x7f0000000280)={0x20080522}, 0x0) socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000001180)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x2}, 0x10000, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0xa, 0x1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={'\x00', 0x5, 0x53, 0x9, 0x0, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x8000800, 0x4, 0x3fe, 0x7fffffff}, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000880)={'sit0\x00', &(0x7f00000007c0)={'erspan0\x00', 0x0, 0x7f00, 0x8000, 0x8, 0x1, {{0x20, 0x4, 0x0, 0x5, 0x80, 0x66, 0x0, 0x9, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, {[@timestamp={0x44, 0xc, 0xa8, 0x0, 0x7, [0x6, 0x2]}, @cipso={0x86, 0x6, 0x2}, @timestamp_prespec={0x44, 0x34, 0xac, 0x3, 0x9, [{@multicast2, 0x88c}, {@multicast1, 0x40}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x435f94ac}, {@multicast1, 0x7}, {@broadcast, 0x8}, {@multicast2, 0x3ff}]}, @lsrr={0x83, 0x23, 0xb1, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x3c}]}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB="740000006c0000032abd7000fbdbdf2500000000", @ANYRES32=r9, @ANYBLOB="0000000008000100050021003d000000380012800b00010067656e65766500002800028008000b40ffff254b080001000300000005000a000100000f0400060005000800010000000a000200000000000000000008001e0000000000"], 0x74}, 0x1, 0x0, 0x0, 0xc0}, 0x4c040) close_range(r11, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004d000048000000000106907864010101ac1414aa070c09904b30ad2bb75f7e1e441409f1ffffffffffffaa80ac1414aa0000800100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7410000090780000"], 0x0) 3.658655942s ago: executing program 2 (id=6853): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x20, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x30008894}, 0x4c010) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x2000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r9}, 0x10) syz_clone(0x6a00003a, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r0}, 0x10) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0xff, 0x82, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x200000000000, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2.774831808s ago: executing program 2 (id=6859): r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x502, 0x0) read$rfkill(r0, &(0x7f0000000080), 0xffffff1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x200000000000006}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x9) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r3) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) syz_open_procfs$pagemap(r6, &(0x7f0000000200)) r9 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 2.15718515s ago: executing program 8 (id=6860): creat(&(0x7f00000000c0)='./file0\x00', 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 2.029914642s ago: executing program 0 (id=6863): bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x151a, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x2}, 0x100b38, 0x6, 0x20, 0x6, 0x8, 0xd, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') close_range(r0, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x1118, &(0x7f00000000c0)={0x0, 0x6926, 0x100, 0x2, 0x1dc}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r8, 0x89e2, &(0x7f0000000100)={r8}) r10 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, &(0x7f0000000340)={r10}) bind$xdp(r11, &(0x7f00000005c0)={0x2d, 0x0, 0x0, 0xc}, 0x10) bind$xdp(r9, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), 0x0}, 0x20) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x1}) io_uring_enter(r4, 0x471b, 0xffffffff, 0x24, 0x0, 0x0) statx(r7, 0x0, 0x2000, 0x52c, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_SETINFO(r4, 0xffffffff80000601, r12, &(0x7f00000005c0)={0x94be, 0x5, 0x1, 0x5}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f00000008c0), &(0x7f0000000880)=r3}, 0x20) faccessat(r1, &(0x7f0000000000)='./file0\x00', 0x5) r13 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r13, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r13, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0, 0x300}, {&(0x7f0000000300)="359cb6", 0x3}], 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c000400"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 1.964737164s ago: executing program 8 (id=6866): write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x12e5) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDGETKEYCODE(r0, 0x4b4c, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000003780)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000004a6d520d0000000c00000000000030002e612e2e2e2e3e00fccf92e4be105d5d2dbb3078c030a502d1e0036b90f480d937ff47a4811781a8c1bc08c142296b553a936dc388529b12dce649bc1dc7e2f25313f2a0d4c12329e632dfa6db308ab77a8614a78a221f719b8c5065d500c0462cb1930db3638232b9a57e150afc3d015b085006976eebf66a6aba2d1309"], 0x0, 0x2f, 0x0, 0x1, 0x8}, 0x28) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000140)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000600000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0xcd1, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x11, 0xc, &(0x7f0000001580)=ANY=[@ANYRES32=r4, @ANYRESHEX=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001000ffff27bd7000fadbdf2500000000", @ANYRES32=0x0, @ANYBLOB="100a050023120100280012800b0001006272696467650000180002800c00230064"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r7) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x2f, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018420000050000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018290000", @ANYRES32=0x1, @ANYBLOB="002ebc2ca156254059110000", @ANYRES8, @ANYBLOB="0000000000000000b7080000400000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000065510c0001000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xeb2, 0x4f, &(0x7f0000000180)=""/79, 0x41000, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0xf, 0x8000, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000240)=[0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x3, 0x2, 0x9, 0xa}, {0x2, 0x3, 0x1, 0x3}, {0x0, 0x2, 0xb, 0xb}], 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001980)={0x6, 0xd, &(0x7f0000001740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xe6}, [@jmp={0x5, 0x1, 0x1, 0x4, 0x1, 0x6, 0xfffffffffffffff0}, @ldst={0x2, 0x1, 0x2, 0x8, 0x4, 0xfffffffffffffffc, 0x1}, @exit, @exit, @jmp={0x5, 0x1, 0x5, 0x2, 0x3, 0xffffffffffffffff, 0x1}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x3}, @alu={0x7, 0x0, 0xc, 0xb, 0xa, 0xffffffffffffffe0, 0x4}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x9}]}, &(0x7f00000017c0)='syzkaller\x00', 0x81, 0x4, &(0x7f0000001800)=""/4, 0x0, 0x2, '\x00', 0x0, 0x25, r2, 0x8, &(0x7f0000001840)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001880)={0x1, 0x0, 0x46b, 0x200}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000018c0)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000001900)=[{0x1, 0x2, 0x0, 0xb}, {0x1, 0x5, 0x6, 0x1}, {0x0, 0x2, 0x9, 0x3}, {0x5, 0x1, 0xb, 0x4}, {0x4, 0x1, 0x2, 0x6}, {0x0, 0x3, 0xc, 0xc}, {0x3, 0x1, 0x1}, {0x0, 0x4, 0x7, 0xa}], 0x10, 0x8}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001ac0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, r2, 0x3, 0x1}, 0x50) 1.752744687s ago: executing program 0 (id=6868): bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="02000000040446063c030000001700000001000000800000007aefa8b9fca467617591c9f1554617b2246f2d2784b8c1423b4c9c422cd231d321e17b37ae1395b44170cb3905162399dc3a9562cf133ab0ce14b9994a2e16b733b61c7b80e4e4bf", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="180500000000000000fcffffff000000b7080000000000007b8af8ff00000000b7081300040000007b3a4640ff3f1f4083a100000000000007090000f8ffffffbfa400000000008007040000f2ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0xdd, 0xa}, 0x50) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x267, &(0x7f0000000bc0)="$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") 1.713540439s ago: executing program 0 (id=6869): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000340)={"908363d22079de6abe8f859279687f02", 0x0, 0x0, {0x9, 0x5}, {0x5, 0x9}, 0x3, [0x8001, 0x7, 0x5, 0x9, 0x2, 0x5, 0x6, 0x0, 0x100, 0x100000000000616e, 0x7, 0xffffffffffffffff, 0x3, 0x3, 0x8d, 0x1]}) timerfd_create(0x5, 0x80000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x15, 0x0, &(0x7f0000000440)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r6 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0xf, &(0x7f0000000080)=[{&(0x7f00000000c0)="0207070002000000e4a17c45c8d260c90ec56959a440278950ff8cdca342f51686908ea4fe07dee035abee82755979fbd7991b71517d20096811c5a663a947eaf378bf56aaccdde0d91d2fa08aba131d91a15f81bfd1e961e534a605e9196747aaf27c0ec3994018ec333b40070beae950827d3efce8a34af6c67c60ee83b76c1132f55a7ccf7843a9a1de5284a60a57f66fa52701bccb915def033b664bc63242c782ecc7", 0x10}], 0x1}, 0x0) 1.617453s ago: executing program 8 (id=6872): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x34, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r5, {0xfff2, 0x4}, {}, {0xd, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) 1.356778875s ago: executing program 7 (id=6873): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_io_uring_setup(0x3b, &(0x7f0000000400)={0x0, 0x2, 0x10100, 0x2, 0x2b5}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r2, r3, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1, 0x0, 0x26}, 0x0, 0x80002101}) io_uring_enter(r1, 0xd81, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0xb}}, './file0\x00'}) ioctl$RTC_RD_TIME(r5, 0x80247009, &(0x7f0000000080)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r4) close_range(r0, 0xffffffffffffffff, 0x0) 1.352829235s ago: executing program 8 (id=6874): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000b40)={'wpan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x20, r5, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_LEVEL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x30008894}, 0x4c010) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 1.335704445s ago: executing program 7 (id=6875): r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x502, 0x0) read$rfkill(r0, &(0x7f0000000080), 0xffffff1c) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x200000000000006}, 0x18) r3 = socket$netlink(0x10, 0x3, 0x9) r4 = inotify_init() inotify_add_watch(r4, &(0x7f0000000340)='.\x00', 0xa50003d1) readv(r4, 0x0, 0x0) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r3) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r6 = getpid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r8, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r9 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 1.125921779s ago: executing program 6 (id=6877): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x34, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x12, 0x0, @opaque='\x00'/10}}}}}, 0x0) recvfrom(r0, &(0x7f00000000c0)=""/10, 0xa, 0x0, 0x0, 0x0) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000600)='ns/user\x00') ioctl$TUNSETIFF(r1, 0xb701, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x6}]}, 0x10) sendmmsg$inet6(r4, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8001) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x44, &(0x7f0000000000)={0x4d, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0xfffffffffffff001}, 0x18) r5 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$selinux_validatetrans(r5, &(0x7f0000001cc0)=ANY=[@ANYBLOB='system_u:object_r:semanage_t system_u:object_r:fixed_disk_device_t:s0 00000000000w'], 0x79) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x3000)=nil) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@o_path={&(0x7f0000000140)='./file0\x00', 0x0, 0x0, r1}, 0x18) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x641, 0x0) fcntl$lock(r6, 0x5, &(0x7f0000000a80)={0x1, 0x0, 0xd, 0x8, 0xffffffffffffffff}) ioctl$SIOCGIFHWADDR(r6, 0x8927, &(0x7f0000000100)={'vlan1\x00'}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000060000000400000000000012020000000000000000000001050000018000000000000000010000850200000000000000010000000000000400000000da"], 0x0, 0x52}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r8, 0x20, &(0x7f0000000080)={&(0x7f0000002700)=""/4116, 0x1014, 0x0, &(0x7f0000000000)=""/102, 0x66}}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x40024, 0x8d85}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x2b6b0}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x20004846) r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r9, &(0x7f0000000d00)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1, 0x6cd, 0x201) 1.09469139s ago: executing program 6 (id=6878): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x1ffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 988.264892ms ago: executing program 6 (id=6879): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "01"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) (fail_nth: 1) 564.31665ms ago: executing program 0 (id=6880): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) unshare(0x20000400) r1 = epoll_create(0x3ff) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0xa0000000}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000280)={0x2000000}) 496.891241ms ago: executing program 6 (id=6881): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_route(0x10, 0x3, 0x0) r0 = fsopen(&(0x7f0000000380)='udf\x00', 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r4}, 0x10) r5 = socket$inet6(0xa, 0x4, 0x2000008) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000800002) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000240)=0x7) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}, 0x1, 0x0, 0x0, 0x44810}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x4c, 0x9, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000080) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) sendmsg$IPSET_CMD_DESTROY(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000020000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24044011}, 0x20000890) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 496.264811ms ago: executing program 0 (id=6882): perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x700, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "01"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x2, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x60}, 0x1, 0x7}, 0x0) 448.822592ms ago: executing program 7 (id=6883): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x101, 0x0, 0x0, 0x61980, 0x59, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400004}, 0x94) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x1ffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 443.606072ms ago: executing program 8 (id=6884): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x0, 0x22c7, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000211000118009000100"], 0x1b8}}, 0x0) 380.328403ms ago: executing program 8 (id=6885): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0}, 0x18) write$P9_RREAD(r1, &(0x7f0000000580)=ANY=[], 0xa0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[], 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x18}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x8, 0x0, 0x2, 0x8, 0xc, 0x7}, {0x1, 0x0, 0x9, 0x401, 0x0, 0x7fffffff}, 0x2000001, 0x1000, 0x575}}, @TCA_TBF_RATE64={0xc, 0x4, 0x274bdcb7db3981e2}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe1e31d5aa9748ab8}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x404}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRESOCT=r2, @ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r5], &(0x7f0000000380)='syzkaller\x00', 0x0, 0xffffffd4, 0x0, 0x41100, 0x22, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xeb) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000c07020000f8ffffffb703000008000000b704000000000000850000000100000095", @ANYRES32=r6, @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000000000000001000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="024000000100"/28], 0x48) unshare(0x2c020400) msgsnd(0x0, &(0x7f0000000340)=ANY=[@ANYRES16], 0x2000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r8}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r9 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r9, 0x3518, 0xaddf, 0x2, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7fffeffd) 354.942564ms ago: executing program 7 (id=6886): ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000580)={0x2, 0x9}) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000140)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0xcd1, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) r2 = dup(0xffffffffffffffff) write$UHID_INPUT(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x1d, 0x2f, 0x0, 0x0, 0xeb2, 0x4f, &(0x7f0000000180)=""/79, 0x41000, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x3, 0xf, 0x8000, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x1], &(0x7f00000002c0), 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, 0x0, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001980)={0x6, 0x0, 0x0, &(0x7f00000017c0)='syzkaller\x00', 0x81, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000001840)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000001880)={0x1, 0x0, 0x46b, 0x200}, 0x10, 0x0, 0x0, 0x8, &(0x7f00000018c0)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000001900)=[{0x1, 0x2, 0x0, 0xb}, {0x1, 0x5, 0x6, 0x1}, {0x0, 0x2, 0x9, 0x3}, {0x5, 0x1, 0xb, 0x4}, {0x4, 0x1, 0x2, 0x6}, {0x0, 0x3, 0xc, 0xc}, {0x3, 0x1, 0x1}, {0x0, 0x4, 0x7, 0xa}], 0x10, 0x8}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001ac0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, r0, 0x3, 0x1}, 0x50) 243.208046ms ago: executing program 0 (id=6887): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000480), 0x80000) sendto$inet(r3, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000400)={0x0, 0xe, 0x6, 0x4}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x8, 0x4, 0xc12, r4}, 0x10) sendto$inet6(r3, &(0x7f0000000200)='x', 0x1, 0x4000000, 0x0, 0x0) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r5, 0xc0189373, &(0x7f00000004c0)={{0x1, 0x1, 0x18, r0, {0x90000}}, './file0\x00'}) r6 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty, 0xffffff5d}, 0x1c) timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) listen(r6, 0xfffffeff) recvmmsg(r6, &(0x7f0000001900)=[{{0x0, 0x0, 0x0}, 0x544}], 0x1, 0x0, 0x0) 136.723748ms ago: executing program 6 (id=6888): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b00)=@newqdisc={0xb0, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x80, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x62, 0xd, "85def352b66e12dffcff85cfbba2ccfd6612b665bf8b01af17af98698a5190c75df64571daeb5e957f52e4345bdce53be16c8cff777d963d610eb55adcec1b3cf1f4c6cbc6b1018cba7a08ded0b1663116027e09834ed456ad593cffdda1"}]}}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='bcache_write\x00', r6, 0x0, 0xf7}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000300), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, 0x0) msync(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="8c00000009060102000000000000000000000004100008800c00078008000640000000014c00078008000b40000000090c001b40000000000000010114001700767863616e31000000000000000200000c00194000000000000100010900120073797a310000000006001d40000700001c0007801800018014000240fe8000000000000000000000000000bb"], 0x8c}, 0x1, 0x0, 0x0, 0x2000c010}, 0x4010080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r8}, 0x18) capget(&(0x7f0000000280)={0x20080522}, 0x0) socket$kcm(0x11, 0x2, 0x0) perf_event_open(&(0x7f0000001180)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x4, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x2}, 0x10000, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$kcm(0xa, 0x1, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={'\x00', 0x5, 0x53, 0x9, 0x0, 0x0, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffc, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x8000800, 0x4, 0x3fe, 0x7fffffff}, r10, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000880)={'sit0\x00', &(0x7f00000007c0)={'erspan0\x00', 0x0, 0x7f00, 0x8000, 0x8, 0x1, {{0x25, 0x4, 0x0, 0x5, 0x94, 0x66, 0x0, 0x9, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, {[@timestamp={0x44, 0xc, 0xa8, 0x0, 0x7, [0x6, 0x2]}, @cipso={0x86, 0x1c, 0x2, [{0x5, 0x6, "2fb912ed"}, {0x6, 0x10, "0992badad6e505b5dac7604e720a"}]}, @timestamp_prespec={0x44, 0x34, 0xac, 0x3, 0x9, [{@multicast2, 0x88c}, {@multicast1, 0x40}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x435f94ac}, {@multicast1, 0x7}, {@broadcast, 0x8}, {@multicast2, 0x3ff}]}, @lsrr={0x83, 0x23, 0xb1, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x3c}]}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)=ANY=[@ANYBLOB="740000006c0000032abd7000fbdbdf2500000000", @ANYRES32=r9, @ANYBLOB="0000000008000100050021003d000000380012800b00010067656e65766500002800028008000b40ffff254b080001000300000005000a000100000f0400060005000800010000000a000200000000000000000008001e0000000000"], 0x74}, 0x1, 0x0, 0x0, 0xc0}, 0x4c040) close_range(r11, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0008004d000048000000000106907864010101ac1414aa070c09904b30ad2bb75f7e1e441409f1ffffffffffffaa80ac1414aa0000800100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="7410000090780000"], 0x0) 85.121479ms ago: executing program 7 (id=6889): creat(&(0x7f00000000c0)='./file0\x00', 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 54.031599ms ago: executing program 6 (id=6890): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = signalfd(r0, &(0x7f0000000100)={[0x4]}, 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e24, @private=0xa010100}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000400)=ANY=[@ANYRES32=r4, @ANYBLOB="1c6ee156027e9663"], 0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000001c0)={r4, 0x6b, "7d03637f7e3b9d0a479de193ec3348e0a25d75f98b3e2f8e1b8f7d245eb0d80b521622ebc9b30692c6269b9ddd890be8938efb9959c6a6dc5a70e27c21c0cace15594718a925fb37f72ec05eed215a9206a97d0606c19a902c065fb04ccdaea3eb22968de8a38e2aa79247"}, &(0x7f0000000140)=0x73) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x58}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x97a3}, 0x18) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r9, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0x8, 0xd215) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r10, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r10, &(0x7f0000000500)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0xfffffffe}, {0xa, 0x4e23, 0x87, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x8}, r11, 0x5cac}}, 0x48) r12 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r12, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r12, &(0x7f0000000440)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @loopback, 0x3}, r13}}, 0x30) r14 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r14, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) 0s ago: executing program 7 (id=6891): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) r2 = syz_io_uring_setup(0x232, &(0x7f0000000080)={0x0, 0x5325, 0x10000, 0x0, 0x174}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) sendmsg$tipc(r1, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) close(r0) close(r1) r5 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r7}, 0x10) kernel console output (not intermixed with test programs): 544] EXT4-fs: inline encryption not supported [ 453.752834][T22544] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 453.792678][T22544] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 453.801752][T22544] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.6494: lblock 2 mapped to illegal pblock 2 (length 1) [ 453.816366][T22544] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 453.824539][T22544] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.6494: lblock 0 mapped to illegal pblock 48 (length 1) [ 453.839914][T22544] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 453.848781][T22544] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.6494: Failed to acquire dquot type 0 [ 453.860368][T22544] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 453.873592][T22544] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.6494: mark_inode_dirty error [ 453.885247][T22544] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 453.896799][T22544] EXT4-fs (loop2): 1 orphan inode deleted [ 453.903695][T22544] FAULT_INJECTION: forcing a failure. [ 453.903695][T22544] name failslab, interval 1, probability 0, space 0, times 0 [ 453.916386][T22544] CPU: 0 UID: 0 PID: 22544 Comm: syz.2.6494 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 453.916490][T22544] Tainted: [W]=WARN [ 453.916499][T22544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 453.916517][T22544] Call Trace: [ 453.916606][T22544] [ 453.916615][T22544] __dump_stack+0x1d/0x30 [ 453.916654][T22544] dump_stack_lvl+0xe8/0x140 [ 453.916722][T22544] dump_stack+0x15/0x1b [ 453.916764][T22544] should_fail_ex+0x265/0x280 [ 453.916795][T22544] should_failslab+0x8c/0xb0 [ 453.916828][T22544] kmem_cache_alloc_noprof+0x50/0x480 [ 453.916940][T22544] ? getname_flags+0x80/0x3b0 [ 453.917063][T22544] ? fput+0x8f/0xc0 [ 453.917109][T22544] getname_flags+0x80/0x3b0 [ 453.917141][T22544] __x64_sys_mkdirat+0x40/0x60 [ 453.917165][T22544] x64_sys_call+0x2b7/0x3000 [ 453.917273][T22544] do_syscall_64+0xd2/0x200 [ 453.917302][T22544] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 453.917341][T22544] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 453.917388][T22544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.917422][T22544] RIP: 0033:0x7fb8584ed617 [ 453.917441][T22544] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.917460][T22544] RSP: 002b:00007fb856f4ee68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 453.917480][T22544] RAX: ffffffffffffffda RBX: 00007fb856f4eef0 RCX: 00007fb8584ed617 [ 453.917501][T22544] RDX: 00000000000001ff RSI: 00002000000001c0 RDI: 00000000ffffff9c [ 453.917519][T22544] RBP: 0000200000000f40 R08: 00002000000001c0 R09: 0000000000000000 [ 453.917536][T22544] R10: 0000200000000f40 R11: 0000000000000246 R12: 00002000000001c0 [ 453.917553][T22544] R13: 00007fb856f4eeb0 R14: 0000000000000000 R15: 00002000000008c0 [ 453.917580][T22544] [ 453.917720][ T31] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 454.114793][T22549] tipc: Enabling of bearer rejected, failed to enable media [ 454.132588][ T31] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 454.141078][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6979: comm kworker/u8:1: Failed to release dquot type 0 [ 454.190567][T22544] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 454.353779][T22569] FAULT_INJECTION: forcing a failure. [ 454.353779][T22569] name failslab, interval 1, probability 0, space 0, times 0 [ 454.366588][T22569] CPU: 0 UID: 0 PID: 22569 Comm: syz.0.6500 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 454.366633][T22569] Tainted: [W]=WARN [ 454.366643][T22569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 454.366663][T22569] Call Trace: [ 454.366673][T22569] [ 454.366684][T22569] __dump_stack+0x1d/0x30 [ 454.366935][T22569] dump_stack_lvl+0xe8/0x140 [ 454.366982][T22569] dump_stack+0x15/0x1b [ 454.367019][T22569] should_fail_ex+0x265/0x280 [ 454.367119][T22569] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 454.367168][T22569] should_failslab+0x8c/0xb0 [ 454.367249][T22569] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 454.367289][T22569] ? debugfs_alloc_inode+0x34/0x40 [ 454.367333][T22569] ? lookup_noperm+0xc9/0x180 [ 454.367382][T22569] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 454.367566][T22569] debugfs_alloc_inode+0x34/0x40 [ 454.367605][T22569] alloc_inode+0x3d/0x170 [ 454.367641][T22569] new_inode+0x1d/0xe0 [ 454.367679][T22569] __debugfs_create_file+0x109/0x330 [ 454.367722][T22569] debugfs_create_file_full+0x3f/0x60 [ 454.367756][T22569] ? __pfx_sl_setup+0x10/0x10 [ 454.367873][T22569] ref_tracker_dir_debugfs+0x100/0x1e0 [ 454.367976][T22569] alloc_netdev_mqs+0x1a7/0xa50 [ 454.368017][T22569] slip_open+0x2d1/0x920 [ 454.368078][T22569] ? serport_ldisc_close+0x25/0x30 [ 454.368119][T22569] ? kfree+0xdb/0x400 [ 454.368146][T22569] ? __kmalloc_cache_noprof+0x249/0x4a0 [ 454.368182][T22569] tty_ldisc_open+0x5d/0xb0 [ 454.368279][T22569] tty_set_ldisc+0x1db/0x380 [ 454.368307][T22569] tiocsetd+0x51/0x60 [ 454.368335][T22569] tty_ioctl+0xa79/0xb80 [ 454.368369][T22569] ? __pfx_tty_ioctl+0x10/0x10 [ 454.368441][T22569] __se_sys_ioctl+0xcb/0x140 [ 454.368463][T22569] __x64_sys_ioctl+0x43/0x50 [ 454.368559][T22569] x64_sys_call+0x1816/0x3000 [ 454.368590][T22569] do_syscall_64+0xd2/0x200 [ 454.368620][T22569] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 454.368651][T22569] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 454.368760][T22569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.368793][T22569] RIP: 0033:0x7f8eb2b1eec9 [ 454.368817][T22569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.368852][T22569] RSP: 002b:00007f8eb1587038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 454.368877][T22569] RAX: ffffffffffffffda RBX: 00007f8eb2d75fa0 RCX: 00007f8eb2b1eec9 [ 454.368897][T22569] RDX: 0000200000000040 RSI: 0000000000005423 RDI: 0000000000000003 [ 454.368943][T22569] RBP: 00007f8eb1587090 R08: 0000000000000000 R09: 0000000000000000 [ 454.368964][T22569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.369055][T22569] R13: 00007f8eb2d76038 R14: 00007f8eb2d75fa0 R15: 00007fff347d54e8 [ 454.369086][T22569] [ 454.369097][T22569] debugfs: out of free dentries, can not create file 'netdev@ffff88813de87550' [ 454.412843][T22565] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6497'. [ 454.653775][T22558] bridge6: entered allmulticast mode [ 454.669097][T22572] loop5: detected capacity change from 0 to 1024 [ 454.697824][T22572] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5 [ 454.707078][T22572] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 454.716509][T22572] EXT4-fs error (device loop5): ext4_acquire_dquot:6943: comm syz.5.6497: Failed to acquire dquot type 0 [ 454.801097][T22572] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 454.825663][T22572] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.6497: corrupted inode contents [ 454.844262][T22580] bridge4: entered allmulticast mode [ 454.869508][T22572] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #13: comm syz.5.6497: mark_inode_dirty error [ 454.908876][T22572] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.6497: corrupted inode contents [ 454.928096][T22572] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.6497: mark_inode_dirty error [ 454.940158][T22572] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.6497: corrupted inode contents [ 454.954846][T22572] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 454.963923][T22572] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #13: comm syz.5.6497: corrupted inode contents [ 454.976136][T22572] EXT4-fs error (device loop5): ext4_truncate:4666: inode #13: comm syz.5.6497: mark_inode_dirty error [ 454.992873][T22572] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 455.003910][T22572] EXT4-fs (loop5): 1 truncate cleaned up [ 455.013680][T22565] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 455.026713][T22600] syzkaller0: entered promiscuous mode [ 455.032383][T22600] syzkaller0: entered allmulticast mode [ 455.594704][T22611] loop2: detected capacity change from 0 to 512 [ 455.611345][T22611] EXT4-fs: Ignoring removed mblk_io_submit option [ 455.618231][T22611] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 455.630683][T22611] EXT4-fs (loop2): 1 truncate cleaned up [ 455.907499][T22625] loop5: detected capacity change from 0 to 512 [ 455.943469][T22625] EXT4-fs: Ignoring removed nobh option [ 456.098037][T22625] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.6521: corrupted inode contents [ 456.169128][T22625] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.6521: mark_inode_dirty error [ 456.466073][T22625] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.6521: corrupted inode contents [ 456.495765][T22625] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.6521: mark_inode_dirty error [ 456.509826][T22625] EXT4-fs error (device loop5): ext4_acquire_dquot:6943: comm syz.5.6521: Failed to acquire dquot type 0 [ 456.541756][T22625] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.6521: corrupted inode contents [ 456.626082][T22625] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.6521: mark_inode_dirty error [ 456.643948][T22625] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.6521: corrupted inode contents [ 456.656205][T22625] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.6521: mark_inode_dirty error [ 456.667846][T22625] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.6521: corrupted inode contents [ 456.680776][T22625] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 456.690484][T22625] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.6521: corrupted inode contents [ 456.703563][T22648] loop6: detected capacity change from 0 to 128 [ 456.714572][T22649] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=22649 comm=syz.0.6526 [ 456.746280][T22649] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=22649 comm=syz.0.6526 [ 456.749401][T22652] __nla_validate_parse: 2 callbacks suppressed [ 456.749422][T22652] netlink: 228 bytes leftover after parsing attributes in process `syz.6.6528'. [ 456.776593][T22625] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.6521: mark_inode_dirty error [ 456.812915][T22652] netlink: 228 bytes leftover after parsing attributes in process `syz.6.6528'. [ 456.824689][T22625] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 456.843165][T22625] EXT4-fs (loop5): 1 truncate cleaned up [ 456.849656][T22625] ext4 filesystem being mounted at /452/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.947740][T22656] syzkaller0: entered promiscuous mode [ 456.953528][T22656] syzkaller0: entered allmulticast mode [ 456.986798][T22646] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.995180][T22660] loop5: detected capacity change from 0 to 128 [ 457.012575][T22662] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6532'. [ 457.048956][T22646] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.069893][T22668] loop6: detected capacity change from 0 to 128 [ 457.083789][T22668] FAT-fs (loop6): Directory bread(block 32) failed [ 457.090453][T22668] FAT-fs (loop6): Directory bread(block 33) failed [ 457.097093][T22668] FAT-fs (loop6): Directory bread(block 34) failed [ 457.103711][T22668] FAT-fs (loop6): Directory bread(block 35) failed [ 457.110293][T22668] FAT-fs (loop6): Directory bread(block 36) failed [ 457.116921][T22668] FAT-fs (loop6): Directory bread(block 37) failed [ 457.123469][T22668] FAT-fs (loop6): Directory bread(block 38) failed [ 457.130195][T22668] FAT-fs (loop6): Directory bread(block 39) failed [ 457.154858][T22646] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.169380][T22668] FAT-fs (loop6): Directory bread(block 40) failed [ 457.175996][T22668] FAT-fs (loop6): Directory bread(block 41) failed [ 457.233859][T22646] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.301736][ T4003] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.315549][ T4003] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.327874][ T4003] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.340342][ T4003] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.351620][T22677] loop5: detected capacity change from 0 to 128 [ 457.363558][T22677] FAT-fs (loop5): Directory bread(block 32) failed [ 457.370328][T22677] FAT-fs (loop5): Directory bread(block 33) failed [ 457.377759][T22677] FAT-fs (loop5): Directory bread(block 34) failed [ 457.384505][T22677] FAT-fs (loop5): Directory bread(block 35) failed [ 457.391118][T22677] FAT-fs (loop5): Directory bread(block 36) failed [ 457.397893][T22677] FAT-fs (loop5): Directory bread(block 37) failed [ 457.404590][T22677] FAT-fs (loop5): Directory bread(block 38) failed [ 457.411753][T22677] FAT-fs (loop5): Directory bread(block 39) failed [ 457.422185][T22679] netlink: 228 bytes leftover after parsing attributes in process `syz.6.6540'. [ 457.431567][T22679] netlink: 228 bytes leftover after parsing attributes in process `syz.6.6540'. [ 457.441776][T22677] FAT-fs (loop5): Directory bread(block 40) failed [ 457.456353][T22677] FAT-fs (loop5): Directory bread(block 41) failed [ 457.548224][T22688] loop5: detected capacity change from 0 to 512 [ 457.555321][T22688] EXT4-fs: Ignoring removed mblk_io_submit option [ 457.562106][T22688] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 457.573161][T22688] EXT4-fs (loop5): 1 truncate cleaned up [ 457.607951][T22694] loop9: detected capacity change from 0 to 7 [ 457.614326][T22694] Buffer I/O error on dev loop9, logical block 0, async page read [ 457.622237][T22694] Buffer I/O error on dev loop9, logical block 0, async page read [ 457.630234][T22694] loop9: unable to read partition table [ 457.635922][T22694] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 457.635922][T22694] ) failed (rc=-5) [ 457.659449][T22689] loop6: detected capacity change from 0 to 1024 [ 457.669153][T22689] EXT4-fs error (device loop6): ext4_acquire_dquot:6943: comm syz.6.6545: Failed to acquire dquot type 0 [ 457.681327][T22689] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 457.696316][T22689] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.6545: corrupted inode contents [ 457.708762][T22689] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #13: comm syz.6.6545: mark_inode_dirty error [ 457.720306][T22689] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.6545: corrupted inode contents [ 457.732718][T22689] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #13: comm syz.6.6545: mark_inode_dirty error [ 457.745707][T22689] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.6545: corrupted inode contents [ 457.758044][T22689] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 457.766968][T22689] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.6545: corrupted inode contents [ 457.779418][T22689] EXT4-fs error (device loop6): ext4_truncate:4666: inode #13: comm syz.6.6545: mark_inode_dirty error [ 457.791573][T22689] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 457.803479][T22689] EXT4-fs (loop6): 1 truncate cleaned up [ 457.809643][T22689] EXT4-fs mount: 16 callbacks suppressed [ 457.809664][T22689] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.836415][T22702] loop9: detected capacity change from 0 to 7 [ 457.845649][T22702] Buffer I/O error on dev loop9, logical block 0, async page read [ 457.853749][T22702] Buffer I/O error on dev loop9, logical block 0, async page read [ 457.861703][T22702] loop9: unable to read partition table [ 457.873278][T22702] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 457.873278][T22702] ) failed (rc=-5) [ 457.887292][T22689] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 457.919910][T16094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.932625][T22706] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6552'. [ 458.083880][T22717] loop5: detected capacity change from 0 to 512 [ 458.092418][T22717] EXT4-fs: Ignoring removed mblk_io_submit option [ 458.099994][T22717] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 458.117301][T22717] EXT4-fs (loop5): 1 truncate cleaned up [ 458.125005][T22717] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.160267][T15881] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.283443][T22729] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6560'. [ 458.323110][T22732] loop0: detected capacity change from 0 to 128 [ 458.647537][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 458.653789][ T29] audit: type=1326 audit(1759477111.455:11614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22718 comm="syz.6.6557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf52f3eec9 code=0x7ffc0000 [ 458.665547][T22732] FAT-fs (loop0): Directory bread(block 32) failed [ 458.677441][ T29] audit: type=1326 audit(1759477111.455:11615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22718 comm="syz.6.6557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf52f3eec9 code=0x7ffc0000 [ 458.684061][T22732] FAT-fs (loop0): Directory bread(block 33) failed [ 458.707493][ T29] audit: type=1326 audit(1759477111.455:11616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22718 comm="syz.6.6557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf52f3eec9 code=0x7ffc0000 [ 458.714212][T22732] FAT-fs (loop0): Directory bread(block 34) failed [ 458.737816][ T29] audit: type=1326 audit(1759477111.455:11617): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22718 comm="syz.6.6557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf52f3eec9 code=0x7ffc0000 [ 458.744497][T22732] FAT-fs (loop0): Directory bread(block 35) failed [ 458.767904][ T29] audit: type=1326 audit(1759477111.455:11618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22718 comm="syz.6.6557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf52f3eec9 code=0x7ffc0000 [ 458.768019][ T29] audit: type=1326 audit(1759477111.455:11619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22718 comm="syz.6.6557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf52f3eec9 code=0x7ffc0000 [ 458.775105][T22732] FAT-fs (loop0): Directory bread(block 36) failed [ 458.798177][ T29] audit: type=1326 audit(1759477111.455:11620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22718 comm="syz.6.6557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf52f3eec9 code=0x7ffc0000 [ 458.851950][ T29] audit: type=1326 audit(1759477111.455:11621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22718 comm="syz.6.6557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf52f3eec9 code=0x7ffc0000 [ 458.875664][ T29] audit: type=1326 audit(1759477111.455:11622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22718 comm="syz.6.6557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf52f3eec9 code=0x7ffc0000 [ 458.899288][ T29] audit: type=1326 audit(1759477111.455:11623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22718 comm="syz.6.6557" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf52f3eec9 code=0x7ffc0000 [ 459.033855][T22732] FAT-fs (loop0): Directory bread(block 37) failed [ 459.061402][T22739] loop9: detected capacity change from 0 to 7 [ 459.069355][T22732] FAT-fs (loop0): Directory bread(block 38) failed [ 459.075926][T22732] FAT-fs (loop0): Directory bread(block 39) failed [ 459.082743][T22739] Buffer I/O error on dev loop9, logical block 0, async page read [ 459.082826][T22732] FAT-fs (loop0): Directory bread(block 40) failed [ 459.107023][T22732] FAT-fs (loop0): Directory bread(block 41) failed [ 459.116914][T22739] Buffer I/O error on dev loop9, logical block 0, async page read [ 459.124824][T22739] loop9: unable to read partition table [ 459.163720][T22739] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 459.163720][T22739] ) failed (rc=-5) [ 459.296629][T22752] loop7: detected capacity change from 0 to 128 [ 459.363576][T22758] loop7: detected capacity change from 0 to 128 [ 459.558523][T22771] loop9: detected capacity change from 0 to 7 [ 459.564901][T22771] Buffer I/O error on dev loop9, logical block 0, async page read [ 459.584892][T22771] Buffer I/O error on dev loop9, logical block 0, async page read [ 459.592888][T22771] loop9: unable to read partition table [ 459.607230][T22771] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 459.607230][T22771] ) failed (rc=-5) [ 459.677196][T22776] loop5: detected capacity change from 0 to 512 [ 459.704690][T22776] EXT4-fs: Ignoring removed nobh option [ 459.902385][T22757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6571'. [ 459.919810][T22757] bridge5: entered allmulticast mode [ 459.968785][T22776] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.6577: corrupted inode contents [ 459.997449][T22776] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.6577: mark_inode_dirty error [ 460.077076][T22776] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.6577: corrupted inode contents [ 460.161730][T22776] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.6577: mark_inode_dirty error [ 460.227778][T22776] EXT4-fs error (device loop5): ext4_acquire_dquot:6943: comm syz.5.6577: Failed to acquire dquot type 0 [ 460.280199][T22776] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.6577: corrupted inode contents [ 460.315181][T22776] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.6577: mark_inode_dirty error [ 460.327675][T22776] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.6577: corrupted inode contents [ 460.342082][T22776] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.6577: mark_inode_dirty error [ 460.372096][T22776] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.6577: corrupted inode contents [ 460.388244][T22776] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 460.396999][T22776] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.6577: corrupted inode contents [ 460.411223][T22776] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.6577: mark_inode_dirty error [ 460.437777][T22776] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 460.451512][T22805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6589'. [ 460.460466][T22805] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6589'. [ 460.461091][T22776] EXT4-fs (loop5): 1 truncate cleaned up [ 460.476089][T22776] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.489370][T22776] ext4 filesystem being mounted at /468/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 460.514876][T15881] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.545154][T22799] loop7: detected capacity change from 0 to 1024 [ 460.554090][T22801] loop6: detected capacity change from 0 to 1024 [ 460.556915][T22799] EXT4-fs error (device loop7): ext4_acquire_dquot:6943: comm syz.7.6587: Failed to acquire dquot type 0 [ 460.562889][T22801] EXT4-fs error (device loop6): ext4_acquire_dquot:6943: comm syz.6.6586: Failed to acquire dquot type 0 [ 460.572397][T22799] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 460.584250][T22801] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 460.598033][T22799] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #13: comm syz.7.6587: corrupted inode contents [ 460.612216][T22801] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.6586: corrupted inode contents [ 460.633331][T22809] loop0: detected capacity change from 0 to 1024 [ 460.636424][T22801] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #13: comm syz.6.6586: mark_inode_dirty error [ 460.644670][T22799] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #13: comm syz.7.6587: mark_inode_dirty error [ 460.655238][T22801] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.6586: corrupted inode contents [ 460.677216][T22801] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #13: comm syz.6.6586: mark_inode_dirty error [ 460.678708][T22809] EXT4-fs error (device loop0): ext4_acquire_dquot:6943: comm syz.0.6590: Failed to acquire dquot type 0 [ 460.706903][T22817] loop2: detected capacity change from 0 to 1024 [ 460.713841][T22809] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 460.730099][T22801] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.6586: corrupted inode contents [ 460.742181][T22799] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #13: comm syz.7.6587: corrupted inode contents [ 460.754813][T22809] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.6590: corrupted inode contents [ 460.757492][T22817] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.6593: Failed to acquire dquot type 0 [ 460.778097][T22801] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 460.787221][T22801] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.6586: corrupted inode contents [ 460.787726][T22817] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144: [ 460.799150][T22809] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #13: comm syz.0.6590: mark_inode_dirty error [ 460.799146][T22817] freeing already freed block (bit 9); block bitmap corrupt. [ 460.799543][T22809] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.6590: corrupted inode contents [ 460.819928][T22817] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.6593: corrupted inode contents [ 460.827293][T22799] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #13: comm syz.7.6587: mark_inode_dirty error [ 460.863375][T22817] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.6593: mark_inode_dirty error [ 460.863992][T22809] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.6590: mark_inode_dirty error [ 460.886599][T22817] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.6593: corrupted inode contents [ 460.887017][T22799] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #13: comm syz.7.6587: corrupted inode contents [ 460.898569][T22801] EXT4-fs error (device loop6): ext4_truncate:4666: inode #13: comm syz.6.6586: mark_inode_dirty error [ 460.910709][T22809] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.6590: corrupted inode contents [ 460.933631][T22801] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 460.933721][T22809] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 460.942575][T22817] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.6593: mark_inode_dirty error [ 460.951280][T22809] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.6590: corrupted inode contents [ 460.962534][T22799] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 460.983344][T22817] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.6593: corrupted inode contents [ 460.983438][T22801] EXT4-fs (loop6): 1 truncate cleaned up [ 460.995848][T22817] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 461.001818][T22801] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.009496][T22809] EXT4-fs error (device loop0): ext4_truncate:4666: inode #13: comm syz.0.6590: mark_inode_dirty error [ 461.022803][T22817] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.6593: corrupted inode contents [ 461.044051][T22799] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #13: comm syz.7.6587: corrupted inode contents [ 461.045192][T22817] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.6593: mark_inode_dirty error [ 461.068393][T22817] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 461.068528][T22801] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 461.077401][T22809] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 461.088139][T22799] EXT4-fs error (device loop7): ext4_truncate:4666: inode #13: comm syz.7.6587: mark_inode_dirty error [ 461.106922][T22817] EXT4-fs (loop2): 1 truncate cleaned up [ 461.113435][T22817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.127083][T22809] EXT4-fs (loop0): 1 truncate cleaned up [ 461.129684][T22831] loop9: detected capacity change from 0 to 7 [ 461.135701][T22809] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.151700][T22831] Buffer I/O error on dev loop9, logical block 0, async page read [ 461.151826][T22799] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 461.159730][T22831] Buffer I/O error on dev loop9, logical block 0, async page read [ 461.169492][T22799] EXT4-fs (loop7): 1 truncate cleaned up [ 461.176400][T22831] loop9: unable to read partition table [ 461.186385][T22831] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 461.186385][T22831] ) failed (rc=-5) [ 461.208354][T22817] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 461.217688][T16094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.223516][T22799] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.239798][T22809] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 461.290793][T22799] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 461.300171][T19715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.311344][T19243] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.378608][T18189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.542892][T22850] __nla_validate_parse: 4 callbacks suppressed [ 462.542916][T22850] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6605'. [ 463.346108][T22850] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6605'. [ 463.359305][T22854] loop0: detected capacity change from 0 to 512 [ 463.371830][T22854] EXT4-fs: Ignoring removed nobh option [ 463.520465][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 463.520499][ T29] audit: type=1326 audit(1759477116.851:11697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22856 comm="syz.7.6601" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f1fc035eec9 code=0x7ffc0000 [ 463.544828][T22854] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.6603: corrupted inode contents [ 463.562202][T22854] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.6603: mark_inode_dirty error [ 463.574329][T22854] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.6603: corrupted inode contents [ 463.586305][T22854] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.6603: mark_inode_dirty error [ 463.598394][T22854] Quota error (device loop0): write_blk: dquota write failed [ 463.621242][T22854] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 463.648977][ T29] audit: type=1326 audit(1759477116.966:11698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22863 comm="syz.7.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fc035eec9 code=0x7ffc0000 [ 463.672743][ T29] audit: type=1326 audit(1759477116.966:11699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22863 comm="syz.7.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fc035eec9 code=0x7ffc0000 [ 463.678964][T22854] EXT4-fs error (device loop0): ext4_acquire_dquot:6943: comm syz.0.6603: Failed to acquire dquot type 0 [ 463.696817][ T29] audit: type=1326 audit(1759477116.966:11700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22863 comm="syz.7.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f1fc035eec9 code=0x7ffc0000 [ 463.708722][T22866] loop9: detected capacity change from 0 to 7 [ 463.731266][ T29] audit: type=1326 audit(1759477116.966:11701): auid=4294967295 uid=0 gid=60928 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22863 comm="syz.7.6607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fc035eec9 code=0x7ffc0000 [ 463.765765][T22866] Buffer I/O error on dev loop9, logical block 0, async page read [ 463.773898][T22866] Buffer I/O error on dev loop9, logical block 0, async page read [ 463.779055][T22854] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.6603: corrupted inode contents [ 463.781835][T22866] loop9: unable to read partition table [ 463.797930][T22868] loop5: detected capacity change from 0 to 512 [ 463.800976][T22866] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 463.800976][T22866] ) failed (rc=-5) [ 463.806252][T22868] EXT4-fs: Ignoring removed nobh option [ 463.825622][T22854] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.6603: mark_inode_dirty error [ 463.847157][T22854] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.6603: corrupted inode contents [ 463.865728][T22854] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.6603: mark_inode_dirty error [ 463.887066][T22854] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.6603: corrupted inode contents [ 463.891453][T22875] syzkaller0: entered promiscuous mode [ 463.899352][T22854] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 463.904464][T22875] syzkaller0: entered allmulticast mode [ 463.911506][T22868] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.6609: corrupted inode contents [ 463.933004][T22854] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.6603: corrupted inode contents [ 463.935274][T22868] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #3: comm syz.5.6609: mark_inode_dirty error [ 463.959501][T22868] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #3: comm syz.5.6609: corrupted inode contents [ 463.971888][T22868] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.6609: mark_inode_dirty error [ 463.972633][T22854] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.6603: mark_inode_dirty error [ 464.013554][T22854] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 464.022787][T22868] Quota error (device loop5): write_blk: dquota write failed [ 464.030940][T22854] EXT4-fs (loop0): 1 truncate cleaned up [ 464.037025][T22854] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.049651][T22868] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 464.066916][T22879] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6613'. [ 464.071449][T22854] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.086505][T22879] loop6: detected capacity change from 0 to 1024 [ 464.101306][T22879] Quota error (device loop6): do_check_range: Getting block 64 out of range 1-5 [ 464.110466][T22879] EXT4-fs error (device loop6): ext4_acquire_dquot:6943: comm syz.6.6613: Failed to acquire dquot type 0 [ 464.121750][T22868] EXT4-fs error (device loop5): ext4_acquire_dquot:6943: comm syz.5.6609: Failed to acquire dquot type 0 [ 464.141212][T22868] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.6609: corrupted inode contents [ 464.154033][T19715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.163764][T22879] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 464.179260][T22868] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #16: comm syz.5.6609: mark_inode_dirty error [ 464.190928][T22879] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.6613: corrupted inode contents [ 464.209451][T22868] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.6609: corrupted inode contents [ 464.221725][T22879] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #13: comm syz.6.6613: mark_inode_dirty error [ 464.233490][T22868] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.6609: mark_inode_dirty error [ 464.245075][T22879] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.6613: corrupted inode contents [ 464.257250][T22879] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #13: comm syz.6.6613: mark_inode_dirty error [ 464.278114][T22868] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.6609: corrupted inode contents [ 464.296818][T22879] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.6613: corrupted inode contents [ 464.322399][T22879] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 464.331191][T22868] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem [ 464.347483][T22879] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.6613: corrupted inode contents [ 464.359715][T22868] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.6609: corrupted inode contents [ 464.372040][T22879] EXT4-fs error (device loop6): ext4_truncate:4666: inode #13: comm syz.6.6613: mark_inode_dirty error [ 464.383484][T22879] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 464.393944][T22868] EXT4-fs error (device loop5): ext4_truncate:4666: inode #16: comm syz.5.6609: mark_inode_dirty error [ 464.649952][T22879] EXT4-fs (loop6): 1 truncate cleaned up [ 464.679157][T22879] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.705329][T22868] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem [ 464.735671][T22879] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 464.825712][T22868] EXT4-fs (loop5): 1 truncate cleaned up [ 464.863617][T22868] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.897022][T16094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.908018][T22891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6615'. [ 464.928081][T22868] ext4 filesystem being mounted at /474/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.974250][T22891] bridge5: entered allmulticast mode [ 465.078423][T15881] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.121385][T22915] loop9: detected capacity change from 0 to 7 [ 465.129058][T22915] Buffer I/O error on dev loop9, logical block 0, async page read [ 465.338023][T22913] loop5: detected capacity change from 0 to 256 [ 465.382996][T22915] Buffer I/O error on dev loop9, logical block 0, async page read [ 465.390885][T22915] loop9: unable to read partition table [ 465.409615][T22913] FAT-fs (loop5): Directory bread(block 64) failed [ 465.463639][T22913] FAT-fs (loop5): Directory bread(block 65) failed [ 465.494843][T22924] FAULT_INJECTION: forcing a failure. [ 465.494843][T22924] name failslab, interval 1, probability 0, space 0, times 0 [ 465.507682][T22924] CPU: 1 UID: 0 PID: 22924 Comm: syz.0.6625 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 465.507796][T22924] Tainted: [W]=WARN [ 465.507803][T22924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 465.507816][T22924] Call Trace: [ 465.507823][T22924] [ 465.507845][T22924] __dump_stack+0x1d/0x30 [ 465.507913][T22924] dump_stack_lvl+0xe8/0x140 [ 465.508016][T22924] dump_stack+0x15/0x1b [ 465.508127][T22924] should_fail_ex+0x265/0x280 [ 465.508163][T22924] should_failslab+0x8c/0xb0 [ 465.508192][T22924] kmem_cache_alloc_noprof+0x50/0x480 [ 465.508240][T22924] ? getname_flags+0x80/0x3b0 [ 465.508315][T22924] getname_flags+0x80/0x3b0 [ 465.508345][T22924] user_path_at+0x28/0x130 [ 465.508369][T22924] __se_sys_mount+0x25b/0x2e0 [ 465.508400][T22924] ? __schedule+0x6b9/0xb30 [ 465.508518][T22924] __x64_sys_mount+0x67/0x80 [ 465.508551][T22924] x64_sys_call+0x2b51/0x3000 [ 465.508579][T22924] do_syscall_64+0xd2/0x200 [ 465.508601][T22924] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 465.508681][T22924] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 465.508719][T22924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.508744][T22924] RIP: 0033:0x7f8eb2b1eec9 [ 465.508764][T22924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.508816][T22924] RSP: 002b:00007f8eb1587038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 465.508841][T22924] RAX: ffffffffffffffda RBX: 00007f8eb2d75fa0 RCX: 00007f8eb2b1eec9 [ 465.508858][T22924] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 465.508875][T22924] RBP: 00007f8eb1587090 R08: 0000200000000140 R09: 0000000000000000 [ 465.508892][T22924] R10: 0000000000800008 R11: 0000000000000246 R12: 0000000000000001 [ 465.508909][T22924] R13: 00007f8eb2d76038 R14: 00007f8eb2d75fa0 R15: 00007fff347d54e8 [ 465.508931][T22924] [ 465.511854][T22913] FAT-fs (loop5): Directory bread(block 66) failed [ 465.553877][T22915] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 465.553877][T22915] ) failed (rc=-5) [ 465.558400][T22913] FAT-fs (loop5): Directory bread(block 67) failed [ 465.683792][T22930] loop2: detected capacity change from 0 to 128 [ 465.691930][T22931] loop7: detected capacity change from 0 to 512 [ 465.703904][T22930] FAT-fs (loop2): Directory bread(block 32) failed [ 465.710489][T22931] EXT4-fs: Ignoring removed mblk_io_submit option [ 465.727801][T22930] FAT-fs (loop2): Directory bread(block 33) failed [ 465.730416][T22913] FAT-fs (loop5): Directory bread(block 68) failed [ 465.743886][T22930] FAT-fs (loop2): Directory bread(block 34) failed [ 465.749652][T22913] FAT-fs (loop5): Directory bread(block 69) failed [ 465.781853][T22913] FAT-fs (loop5): Directory bread(block 70) failed [ 465.788513][T22913] FAT-fs (loop5): Directory bread(block 71) failed [ 465.804890][T22930] FAT-fs (loop2): Directory bread(block 35) failed [ 465.812691][T22930] FAT-fs (loop2): Directory bread(block 36) failed [ 465.817697][T22913] FAT-fs (loop5): Directory bread(block 72) failed [ 465.819658][T22931] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 465.836012][T22930] FAT-fs (loop2): Directory bread(block 37) failed [ 465.843052][T22913] FAT-fs (loop5): Directory bread(block 73) failed [ 465.849713][T22930] FAT-fs (loop2): Directory bread(block 38) failed [ 465.856314][T22930] FAT-fs (loop2): Directory bread(block 39) failed [ 465.866051][T22930] FAT-fs (loop2): Directory bread(block 40) failed [ 465.872789][T22930] FAT-fs (loop2): Directory bread(block 41) failed [ 465.888316][T22931] EXT4-fs (loop7): 1 truncate cleaned up [ 465.897467][T22931] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.961406][T18189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.043914][T15881] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 466.051588][T15881] FAT-fs (loop5): Filesystem has been set read-only [ 466.117807][T22945] loop6: detected capacity change from 0 to 1024 [ 466.134013][T22945] EXT4-fs error (device loop6): ext4_acquire_dquot:6943: comm syz.6.6634: Failed to acquire dquot type 0 [ 466.146588][T22945] EXT4-fs error (device loop6): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 466.161311][T22945] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.6634: corrupted inode contents [ 466.173548][T22945] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #13: comm syz.6.6634: mark_inode_dirty error [ 466.185504][T22945] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.6634: corrupted inode contents [ 466.197702][T22945] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #13: comm syz.6.6634: mark_inode_dirty error [ 466.209245][T22945] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.6634: corrupted inode contents [ 466.221455][T22945] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 466.230663][T22945] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #13: comm syz.6.6634: corrupted inode contents [ 466.243504][T22945] EXT4-fs error (device loop6): ext4_truncate:4666: inode #13: comm syz.6.6634: mark_inode_dirty error [ 466.254971][T22945] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 466.264483][T22945] EXT4-fs (loop6): 1 truncate cleaned up [ 466.270711][T22945] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.294342][T22945] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 466.316237][T16094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.424203][ T1897] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.476665][ T1897] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.513504][T22964] loop9: detected capacity change from 0 to 7 [ 466.533184][T22964] Buffer I/O error on dev loop9, logical block 0, async page read [ 466.564294][T22964] Buffer I/O error on dev loop9, logical block 0, async page read [ 466.572272][T22964] loop9: unable to read partition table [ 466.614300][T22964] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 466.614300][T22964] ) failed (rc=-5) [ 466.776989][ T1897] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.892347][ T1897] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.829255][T22995] loop6: detected capacity change from 0 to 128 [ 467.838124][T22995] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 467.852178][T22995] ext4 filesystem being mounted at /508/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 467.884506][T22995] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=22995 comm=syz.6.6647 [ 467.897221][T22995] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=2065 sclass=netlink_audit_socket pid=22995 comm=syz.6.6647 [ 467.951750][T16094] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 468.005202][ T1897] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.015777][ T1897] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.025627][ T1897] bond0 (unregistering): Released all slaves [ 468.075005][ T1897] tipc: Left network mode [ 468.155899][T23010] 9pnet_fd: Insufficient options for proto=fd [ 468.204427][T23012] loop9: detected capacity change from 0 to 7 [ 468.210771][T23012] Buffer I/O error on dev loop9, logical block 0, async page read [ 468.267755][ T1897] hsr_slave_0: left promiscuous mode [ 468.283786][T23012] Buffer I/O error on dev loop9, logical block 0, async page read [ 468.291707][T23012] loop9: unable to read partition table [ 468.297425][ T1897] hsr_slave_1: left promiscuous mode [ 468.303094][ T1897] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 468.310555][ T1897] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 468.332131][T23018] Buffer I/O error on dev loop9, logical block 0, async page read [ 468.335804][T23012] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 468.335804][T23012] ) failed (rc=-5) [ 468.364867][ T1897] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 468.372408][ T1897] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.392215][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 468.392231][ T29] audit: type=1400 audit(1759477121.974:11773): avc: denied { read write } for pid=23011 comm="syz.2.6652" name="loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 468.392695][T23012] loop2: detected capacity change from 0 to 2048 [ 468.398406][ T29] audit: type=1400 audit(1759477121.974:11774): avc: denied { open } for pid=23011 comm="syz.2.6652" path="/dev/loop2" dev="devtmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 468.469787][ T1897] veth1_macvtap: left promiscuous mode [ 468.475460][ T1897] veth0_macvtap: left promiscuous mode [ 468.481218][ T1897] veth1_vlan: left promiscuous mode [ 468.486551][ T1897] veth0_vlan: left promiscuous mode [ 468.492944][ T29] audit: type=1400 audit(1759477121.974:11775): avc: denied { ioctl } for pid=23011 comm="syz.2.6652" path="/dev/loop2" dev="devtmpfs" ino=102 ioctlcmd=0x4c00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 468.518724][ T29] audit: type=1326 audit(1759477122.037:11776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23020 comm="syz.7.6654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fc035eec9 code=0x7ffc0000 [ 468.542575][ T29] audit: type=1326 audit(1759477122.037:11777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23020 comm="syz.7.6654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1fc035eec9 code=0x7ffc0000 [ 468.566637][ T29] audit: type=1326 audit(1759477122.037:11778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23020 comm="syz.7.6654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1fc035eec9 code=0x7ffc0000 [ 468.590410][ T29] audit: type=1400 audit(1759477122.037:11779): avc: denied { prog_load } for pid=23020 comm="syz.7.6654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 468.609665][ T29] audit: type=1400 audit(1759477122.037:11780): avc: denied { bpf } for pid=23020 comm="syz.7.6654" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 468.630476][ T29] audit: type=1400 audit(1759477122.037:11781): avc: denied { perfmon } for pid=23020 comm="syz.7.6654" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 468.651655][ T29] audit: type=1400 audit(1759477122.037:11782): avc: denied { prog_run } for pid=23020 comm="syz.7.6654" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 468.673637][T23012] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.695257][T23017] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6653'. [ 468.736928][T23006] netlink: 'syz.6.6650': attribute type 21 has an invalid length. [ 468.770811][ T1897] team0 (unregistering): Port device team_slave_1 removed [ 468.780902][ T1897] team0 (unregistering): Port device team_slave_0 removed [ 468.853446][T23017] bridge6: entered allmulticast mode [ 468.859128][T23006] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6650'. [ 468.868297][T23006] netlink: 'syz.6.6650': attribute type 1 has an invalid length. [ 468.954841][T23021] infiniband !yz!: set active [ 468.959614][T23021] infiniband !yz!: added team_slave_0 [ 469.006577][T23021] RDS/IB: !yz!: added [ 469.041600][T19243] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.128420][T23032] loop2: detected capacity change from 0 to 256 [ 469.141801][T22958] chnl_net:caif_netlink_parms(): no params data found [ 469.150716][T23034] FAULT_INJECTION: forcing a failure. [ 469.150716][T23034] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.163949][T23034] CPU: 0 UID: 0 PID: 23034 Comm: syz.6.6655 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 469.163994][T23034] Tainted: [W]=WARN [ 469.164001][T23034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 469.164016][T23034] Call Trace: [ 469.164024][T23034] [ 469.164033][T23034] __dump_stack+0x1d/0x30 [ 469.164135][T23034] dump_stack_lvl+0xe8/0x140 [ 469.164173][T23034] dump_stack+0x15/0x1b [ 469.164241][T23034] should_fail_ex+0x265/0x280 [ 469.164353][T23034] should_fail+0xb/0x20 [ 469.164387][T23034] should_fail_usercopy+0x1a/0x20 [ 469.164420][T23034] _copy_from_user+0x1c/0xb0 [ 469.164493][T23034] ___sys_sendmsg+0xc1/0x1d0 [ 469.164545][T23034] __x64_sys_sendmsg+0xd4/0x160 [ 469.164642][T23034] x64_sys_call+0x191e/0x3000 [ 469.164669][T23034] do_syscall_64+0xd2/0x200 [ 469.164697][T23034] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 469.164732][T23034] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 469.164793][T23034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.164823][T23034] RIP: 0033:0x7fcf52f3eec9 [ 469.164841][T23034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 469.164861][T23034] RSP: 002b:00007fcf519a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.164880][T23034] RAX: ffffffffffffffda RBX: 00007fcf53195fa0 RCX: 00007fcf52f3eec9 [ 469.164926][T23034] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 469.164944][T23034] RBP: 00007fcf519a7090 R08: 0000000000000000 R09: 0000000000000000 [ 469.164961][T23034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.164978][T23034] R13: 00007fcf53196038 R14: 00007fcf53195fa0 R15: 00007ffe27546c78 [ 469.165056][T23034] [ 469.167576][T23032] FAT-fs (loop2): Directory bread(block 64) failed [ 469.353101][T23032] FAT-fs (loop2): Directory bread(block 65) failed [ 469.359712][T23032] FAT-fs (loop2): Directory bread(block 66) failed [ 469.366313][T23032] FAT-fs (loop2): Directory bread(block 67) failed [ 469.372856][T23032] FAT-fs (loop2): Directory bread(block 68) failed [ 469.379427][T23032] FAT-fs (loop2): Directory bread(block 69) failed [ 469.386072][T23032] FAT-fs (loop2): Directory bread(block 70) failed [ 469.392614][T23032] FAT-fs (loop2): Directory bread(block 71) failed [ 469.399394][T23032] FAT-fs (loop2): Directory bread(block 72) failed [ 469.407238][T23032] FAT-fs (loop2): Directory bread(block 73) failed [ 469.505851][T22958] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.512997][T22958] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.520420][T22958] bridge_slave_0: entered allmulticast mode [ 469.527333][T22958] bridge_slave_0: entered promiscuous mode [ 469.534408][T22958] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.541680][T22958] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.548988][T22958] bridge_slave_1: entered allmulticast mode [ 469.555592][T22958] bridge_slave_1: entered promiscuous mode [ 469.579854][T23048] loop2: detected capacity change from 0 to 512 [ 469.596370][T23050] 9pnet_fd: Insufficient options for proto=fd [ 469.602689][T23048] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 469.617087][T23048] EXT4-fs (loop2): 1 truncate cleaned up [ 469.624573][T23048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 469.638881][T22958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.653865][T22958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.723997][T19243] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.736979][T22958] team0: Port device team_slave_0 added [ 469.744137][T22958] team0: Port device team_slave_1 added [ 469.781377][T22958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.788433][T22958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.814528][T22958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.857219][T23060] loop2: detected capacity change from 0 to 1024 [ 469.869477][T23060] EXT4-fs: Ignoring removed mblk_io_submit option [ 469.871188][T22958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.882998][T22958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.909002][T22958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.944362][T23060] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.006102][T22958] hsr_slave_0: entered promiscuous mode [ 470.015007][T23071] 9pnet_fd: Insufficient options for proto=fd [ 470.033501][T23059] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 470.048606][T23059] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 470.049142][T22958] hsr_slave_1: entered promiscuous mode [ 470.060892][T23059] EXT4-fs (loop2): This should not happen!! Data will be lost [ 470.060892][T23059] [ 470.076102][T23059] EXT4-fs (loop2): Total free blocks count 0 [ 470.082128][T23059] EXT4-fs (loop2): Free/Dirty block details [ 470.088063][T23059] EXT4-fs (loop2): free_blocks=68451041280 [ 470.093937][T23059] EXT4-fs (loop2): dirty_blocks=80 [ 470.099162][T23059] EXT4-fs (loop2): Block reservation details [ 470.105207][T23059] EXT4-fs (loop2): i_reserved_data_blocks=5 [ 470.111567][T23060] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 470.162602][T22958] debugfs: 'hsr0' already exists in 'hsr' [ 470.168443][T22958] Cannot create hsr debugfs directory [ 470.204538][T23077] loop0: detected capacity change from 0 to 512 [ 470.217751][T23077] EXT4-fs: Ignoring removed mblk_io_submit option [ 470.231917][T23077] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 470.252814][T23077] EXT4-fs (loop0): 1 truncate cleaned up [ 470.286624][T23077] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.326254][T22958] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 470.336977][T22958] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 470.350659][T22958] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 470.368326][T22958] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 470.375240][T23062] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6667'. [ 470.391691][T23088] netlink: 'syz.2.6676': attribute type 8 has an invalid length. [ 470.397366][T19715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.403272][T23062] bridge7: entered allmulticast mode [ 470.466654][T23098] FAULT_INJECTION: forcing a failure. [ 470.466654][T23098] name failslab, interval 1, probability 0, space 0, times 0 [ 470.479594][T23098] CPU: 0 UID: 0 PID: 23098 Comm: +}[@ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 470.479638][T23098] Tainted: [W]=WARN [ 470.479647][T23098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 470.479664][T23098] Call Trace: [ 470.479672][T23098] [ 470.479682][T23098] __dump_stack+0x1d/0x30 [ 470.479805][T23098] dump_stack_lvl+0xe8/0x140 [ 470.479858][T23098] dump_stack+0x15/0x1b [ 470.479907][T23098] should_fail_ex+0x265/0x280 [ 470.479945][T23098] should_failslab+0x8c/0xb0 [ 470.479977][T23098] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 470.480011][T23098] ? sidtab_sid2str_get+0xa0/0x130 [ 470.480081][T23098] kmemdup_noprof+0x2b/0x70 [ 470.480105][T23098] sidtab_sid2str_get+0xa0/0x130 [ 470.480189][T23098] security_sid_to_context_core+0x1eb/0x2e0 [ 470.480222][T23098] security_sid_to_context+0x27/0x40 [ 470.480244][T23098] avc_audit_post_callback+0x9d/0x520 [ 470.480294][T23098] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 470.480333][T23098] common_lsm_audit+0x1bb/0x230 [ 470.480360][T23098] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 470.480440][T23098] slow_avc_audit+0x104/0x140 [ 470.480470][T23098] avc_has_extended_perms+0x6d0/0x940 [ 470.480555][T23098] ioctl_has_perm+0x257/0x2a0 [ 470.480648][T23098] selinux_file_ioctl+0x308/0x3a0 [ 470.480684][T23098] ? __fget_files+0x184/0x1c0 [ 470.480719][T23098] security_file_ioctl+0x48/0x90 [ 470.480781][T23098] __se_sys_ioctl+0x47/0x140 [ 470.480808][T23098] __x64_sys_ioctl+0x43/0x50 [ 470.480839][T23098] x64_sys_call+0x1816/0x3000 [ 470.480887][T23098] do_syscall_64+0xd2/0x200 [ 470.480928][T23098] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 470.480955][T23098] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 470.481009][T23098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.481053][T23098] RIP: 0033:0x7f1fc035eec9 [ 470.481074][T23098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.481128][T23098] RSP: 002b:00007f1fbedc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 470.481160][T23098] RAX: ffffffffffffffda RBX: 00007f1fc05b5fa0 RCX: 00007f1fc035eec9 [ 470.481172][T23098] RDX: 0000200000000100 RSI: 00000000c004743e RDI: 0000000000000007 [ 470.481185][T23098] RBP: 00007f1fbedc7090 R08: 0000000000000000 R09: 0000000000000000 [ 470.481198][T23098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.481215][T23098] R13: 00007f1fc05b6038 R14: 00007f1fc05b5fa0 R15: 00007ffd9d181878 [ 470.481236][T23098] [ 470.747811][T22958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 470.786591][T22958] 8021q: adding VLAN 0 to HW filter on device team0 [ 470.795642][T23105] loop6: detected capacity change from 0 to 1024 [ 470.802619][T23105] EXT4-fs: Ignoring removed orlov option [ 470.808704][T23105] EXT4-fs: Ignoring removed bh option [ 470.814285][T23105] EXT4-fs: inline encryption not supported [ 470.863094][T23105] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.093582][ T4024] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.100876][ T4024] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.254270][ T4024] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.261412][ T4024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.282784][T23114] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6682'. [ 471.294105][T16094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.351427][T22958] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 471.361868][T22958] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 471.372483][T23119] loop0: detected capacity change from 0 to 512 [ 471.384077][T23121] loop7: detected capacity change from 0 to 736 [ 471.390802][T23121] iso9660: Unknown parameter 'showssoc' [ 471.419715][T23119] EXT4-fs: Ignoring removed nobh option [ 471.436775][T23119] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.6685: corrupted inode contents [ 471.450882][T22958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.469498][T23130] netlink: 'syz.7.6686': attribute type 1 has an invalid length. [ 471.477307][T23130] netlink: 224 bytes leftover after parsing attributes in process `syz.7.6686'. [ 471.512806][T23119] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #3: comm syz.0.6685: mark_inode_dirty error [ 471.551673][T23119] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #3: comm syz.0.6685: corrupted inode contents [ 471.570137][T23138] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6687'. [ 471.579907][T23119] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.6685: mark_inode_dirty error [ 471.593670][T23119] EXT4-fs error (device loop0): ext4_acquire_dquot:6943: comm syz.0.6685: Failed to acquire dquot type 0 [ 471.606152][T23119] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.6685: corrupted inode contents [ 471.620767][T23119] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #16: comm syz.0.6685: mark_inode_dirty error [ 471.647049][T23119] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.6685: corrupted inode contents [ 471.659557][T23119] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.6685: mark_inode_dirty error [ 471.681100][T23119] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.6685: corrupted inode contents [ 471.702046][T23119] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 471.722379][T23119] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #16: comm syz.0.6685: corrupted inode contents [ 471.739497][T23119] EXT4-fs error (device loop0): ext4_truncate:4666: inode #16: comm syz.0.6685: mark_inode_dirty error [ 471.750910][T23119] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 471.768279][T22958] veth0_vlan: entered promiscuous mode [ 471.779442][T22958] veth1_vlan: entered promiscuous mode [ 471.796133][T23119] EXT4-fs (loop0): 1 truncate cleaned up [ 471.797101][T22958] veth0_macvtap: entered promiscuous mode [ 471.802387][T23119] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 471.810398][T22958] veth1_macvtap: entered promiscuous mode [ 471.829511][T23119] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 471.844048][T22958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.861432][T22958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.876750][ T4003] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.886325][ T4003] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.897690][T19715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 471.909146][ T51] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.920087][ T51] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.998337][T23154] loop0: detected capacity change from 0 to 512 [ 472.005854][T23154] EXT4-fs: Ignoring removed mblk_io_submit option [ 472.013468][T23154] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 472.025924][T23154] EXT4-fs (loop0): 1 truncate cleaned up [ 472.041959][T23154] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 472.082048][T19715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 472.219808][T23165] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6693'. [ 472.315149][T23159] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6691'. [ 472.351070][T23159] bridge1: entered allmulticast mode [ 472.553042][T23184] loop9: detected capacity change from 0 to 7 [ 472.564998][T23184] Buffer I/O error on dev loop9, logical block 0, async page read [ 472.593089][T23184] Buffer I/O error on dev loop9, logical block 0, async page read [ 472.601030][T23184] loop9: unable to read partition table [ 472.659980][T23184] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 472.659980][T23184] ) failed (rc=-5) [ 473.088355][T23206] serio: Serial port ptm0 [ 473.145329][T23211] loop2: detected capacity change from 0 to 1024 [ 473.152120][T23211] EXT4-fs: Ignoring removed orlov option [ 473.157831][T23211] EXT4-fs: Ignoring removed nomblk_io_submit option [ 473.179843][T23211] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.190501][T23208] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6706'. [ 473.203521][T23208] bridge5: entered allmulticast mode [ 473.247252][T23219] loop7: detected capacity change from 0 to 128 [ 473.257730][T23219] FAT-fs (loop7): Directory bread(block 32) failed [ 473.264510][T23219] FAT-fs (loop7): Directory bread(block 33) failed [ 473.271269][T23219] FAT-fs (loop7): Directory bread(block 34) failed [ 473.278265][T23219] FAT-fs (loop7): Directory bread(block 35) failed [ 473.284870][T23219] FAT-fs (loop7): Directory bread(block 36) failed [ 473.293320][T23219] FAT-fs (loop7): Directory bread(block 37) failed [ 473.300446][T23219] FAT-fs (loop7): Directory bread(block 38) failed [ 473.301113][T19243] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.307013][T23219] FAT-fs (loop7): Directory bread(block 39) failed [ 473.322679][T23219] FAT-fs (loop7): Directory bread(block 40) failed [ 473.329554][T23219] FAT-fs (loop7): Directory bread(block 41) failed [ 473.352615][ T29] kauditd_printk_skb: 179 callbacks suppressed [ 473.352634][ T29] audit: type=1400 audit(1759477127.181:11960): avc: denied { ioctl } for pid=23218 comm="syz.7.6707" path="socket:[80331]" dev="sockfs" ino=80331 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 473.592643][ T29] audit: type=1400 audit(1759477127.432:11961): avc: denied { read } for pid=23232 comm="syz.6.6712" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 473.617217][ T29] audit: type=1400 audit(1759477127.432:11962): avc: denied { open } for pid=23232 comm="syz.6.6712" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 473.707462][T23237] loop7: detected capacity change from 0 to 512 [ 473.714262][T23237] EXT4-fs: Ignoring removed mblk_io_submit option [ 473.721346][T23237] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 473.732583][T23237] EXT4-fs (loop7): 1 truncate cleaned up [ 473.739313][T23237] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.808457][T23240] FAULT_INJECTION: forcing a failure. [ 473.808457][T23240] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 473.821685][T23240] CPU: 0 UID: 0 PID: 23240 Comm: syz.8.6715 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 473.821728][T23240] Tainted: [W]=WARN [ 473.821738][T23240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 473.821755][T23240] Call Trace: [ 473.821764][T23240] [ 473.821810][T23240] __dump_stack+0x1d/0x30 [ 473.821857][T23240] dump_stack_lvl+0xe8/0x140 [ 473.821902][T23240] dump_stack+0x15/0x1b [ 473.821984][T23240] should_fail_ex+0x265/0x280 [ 473.822029][T23240] should_fail+0xb/0x20 [ 473.822063][T23240] should_fail_usercopy+0x1a/0x20 [ 473.822152][T23240] strncpy_from_user+0x25/0x230 [ 473.822188][T23240] path_setxattrat+0xeb/0x310 [ 473.822379][T23240] __x64_sys_fsetxattr+0x6b/0x80 [ 473.822409][T23240] x64_sys_call+0x1ced/0x3000 [ 473.822431][T23240] do_syscall_64+0xd2/0x200 [ 473.822454][T23240] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 473.822538][T23240] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 473.822620][T23240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.822642][T23240] RIP: 0033:0x7f12e8d3eec9 [ 473.822662][T23240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.822681][T23240] RSP: 002b:00007f12e779f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 473.822759][T23240] RAX: ffffffffffffffda RBX: 00007f12e8f95fa0 RCX: 00007f12e8d3eec9 [ 473.822773][T23240] RDX: 0000200000000380 RSI: 0000200000000240 RDI: 0000000000000007 [ 473.822785][T23240] RBP: 00007f12e779f090 R08: 0000000000000002 R09: 0000000000000000 [ 473.822798][T23240] R10: 0000000000000029 R11: 0000000000000246 R12: 0000000000000001 [ 473.822811][T23240] R13: 00007f12e8f96038 R14: 00007f12e8f95fa0 R15: 00007ffd7e6e53b8 [ 473.822863][T23240] [ 474.695641][T23254] loop0: detected capacity change from 0 to 128 [ 474.714873][T18189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 474.724790][T23254] FAT-fs (loop0): Directory bread(block 32) failed [ 474.733064][T23254] FAT-fs (loop0): Directory bread(block 33) failed [ 474.740561][T23254] FAT-fs (loop0): Directory bread(block 34) failed [ 474.752205][T23254] FAT-fs (loop0): Directory bread(block 35) failed [ 474.766566][T23254] FAT-fs (loop0): Directory bread(block 36) failed [ 474.782495][T23254] FAT-fs (loop0): Directory bread(block 37) failed [ 474.789286][T23247] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6718'. [ 474.789598][T23254] FAT-fs (loop0): Directory bread(block 38) failed [ 474.807386][T23254] FAT-fs (loop0): Directory bread(block 39) failed [ 474.808213][T23247] bridge2: entered allmulticast mode [ 474.814306][T23254] FAT-fs (loop0): Directory bread(block 40) failed [ 474.826132][T23254] FAT-fs (loop0): Directory bread(block 41) failed [ 474.877971][T23263] loop7: detected capacity change from 0 to 2048 [ 474.891105][T23263] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 474.971918][ T29] audit: type=1400 audit(1759477128.881:11963): avc: denied { append } for pid=23262 comm="syz.7.6722" path="/326/file2/cpuacct.usage_percpu" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 474.987119][T23263] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 475.011324][T23263] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28 [ 475.023648][T23263] EXT4-fs (loop7): This should not happen!! Data will be lost [ 475.023648][T23263] [ 475.033365][T23263] EXT4-fs (loop7): Total free blocks count 0 [ 475.039372][T23263] EXT4-fs (loop7): Free/Dirty block details [ 475.045320][T23263] EXT4-fs (loop7): free_blocks=2415919104 [ 475.051145][T23263] EXT4-fs (loop7): dirty_blocks=48 [ 475.056295][T23263] EXT4-fs (loop7): Block reservation details [ 475.062360][T23263] EXT4-fs (loop7): i_reserved_data_blocks=3 [ 475.086379][T18189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 475.108430][T23280] loop7: detected capacity change from 0 to 1024 [ 475.115651][T23280] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 475.126774][T23280] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 475.135070][T23280] EXT4-fs (loop7): orphan cleanup on readonly fs [ 475.141704][T23280] EXT4-fs error (device loop7): ext4_free_blocks:6696: comm syz.7.6726: Freeing blocks not in datazone - block = 0, count = 4096 [ 475.155325][T23280] EXT4-fs (loop7): 1 orphan inode deleted [ 475.161560][T23280] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 475.188415][T18189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.207451][ T29] audit: type=1400 audit(1759477129.133:11964): avc: denied { mount } for pid=23286 comm="syz.7.6728" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 475.248624][ T29] audit: type=1400 audit(1759477129.165:11965): avc: denied { mounton } for pid=23286 comm="syz.7.6728" path="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 475.271809][ T29] audit: type=1400 audit(1759477129.175:11966): avc: denied { unmount } for pid=18189 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 475.332505][T23294] netlink: 'syz.7.6731': attribute type 1 has an invalid length. [ 475.352170][T23294] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 475.363335][T23294] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 475.397374][T23296] netlink: 44 bytes leftover after parsing attributes in process `syz.7.6731'. [ 475.426261][ T29] audit: type=1400 audit(1759477129.364:11967): avc: denied { name_bind } for pid=23297 comm="syz.7.6732" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 475.434207][T23285] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6729'. [ 475.447686][ T29] audit: type=1400 audit(1759477129.364:11968): avc: denied { node_bind } for pid=23297 comm="syz.7.6732" saddr=fe80::aa src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 475.460108][T23285] bridge3: entered allmulticast mode [ 475.484348][ T29] audit: type=1400 audit(1759477129.417:11969): avc: denied { create } for pid=23297 comm="syz.7.6732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 475.490369][T23298] loop7: detected capacity change from 0 to 1024 [ 475.516653][T23298] EXT4-fs error (device loop7): ext4_acquire_dquot:6943: comm syz.7.6732: Failed to acquire dquot type 0 [ 475.528774][T23298] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 475.528894][T23298] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #13: comm syz.7.6732: corrupted inode contents [ 475.556181][T23298] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #13: comm syz.7.6732: mark_inode_dirty error [ 475.566003][T23298] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #13: comm syz.7.6732: corrupted inode contents [ 475.583210][T23298] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #13: comm syz.7.6732: mark_inode_dirty error [ 475.596039][T23298] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #13: comm syz.7.6732: corrupted inode contents [ 475.622746][T23298] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 475.645705][T23306] loop0: detected capacity change from 0 to 512 [ 475.656920][T23298] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #13: comm syz.7.6732: corrupted inode contents [ 475.669377][T23306] EXT4-fs: dax option not supported [ 475.675142][T23298] EXT4-fs error (device loop7): ext4_truncate:4666: inode #13: comm syz.7.6732: mark_inode_dirty error [ 475.686551][T23298] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 475.686603][T23306] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 475.686639][T23306] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 475.709843][T23306] vhci_hcd vhci_hcd.0: Device attached [ 475.710309][T23298] EXT4-fs (loop7): 1 truncate cleaned up [ 475.723597][T23298] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.744890][T23306] 9pnet: Could not find request transport: rema [ 475.789188][T23298] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 475.797772][T23311] vhci_hcd: connection closed [ 475.821196][ T85] vhci_hcd: stop threads [ 475.830440][ T85] vhci_hcd: release socket [ 475.834957][ T85] vhci_hcd: disconnect device [ 475.864296][T18189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.918686][T23320] loop9: detected capacity change from 0 to 7 [ 475.925224][T23320] Buffer I/O error on dev loop9, logical block 0, async page read [ 475.933272][T23320] Buffer I/O error on dev loop9, logical block 0, async page read [ 475.941187][T23320] loop9: unable to read partition table [ 475.951702][T23320] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 475.951702][T23320] ) failed (rc=-5) [ 475.986339][T23326] loop9: detected capacity change from 0 to 7 [ 475.992837][T23326] Buffer I/O error on dev loop9, logical block 0, async page read [ 476.000817][T23326] Buffer I/O error on dev loop9, logical block 0, async page read [ 476.008698][T23326] loop9: unable to read partition table [ 476.014506][T23326] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 476.014506][T23326] ) failed (rc=-5) [ 476.608983][T23352] loop2: detected capacity change from 0 to 512 [ 476.617428][T23352] EXT4-fs (loop2): orphan cleanup on readonly fs [ 476.624383][T23352] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.6749: bad orphan inode 13 [ 476.634794][T23352] ext4_test_bit(bit=12, block=18) = 1 [ 476.640300][T23352] is_bad_inode(inode)=0 [ 476.644604][T23352] NEXT_ORPHAN(inode)=2130706432 [ 476.649544][T23352] max_ino=32 [ 476.652911][T23352] i_nlink=1 [ 476.657223][T23352] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 476.672712][T23352] 9pnet_fd: Insufficient options for proto=fd [ 476.861797][T23352] Falling back ldisc for ttyS3. [ 476.940945][T19243] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.010251][T23363] loop9: detected capacity change from 0 to 7 [ 477.014464][T23365] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23365 comm=syz.2.6753 [ 477.029349][T23363] Buffer I/O error on dev loop9, logical block 0, async page read [ 477.037827][T23363] Buffer I/O error on dev loop9, logical block 0, async page read [ 477.045832][T23363] loop9: unable to read partition table [ 477.051673][T23363] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 477.051673][T23363] ) failed (rc=-5) [ 477.051973][T23365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6753'. [ 477.223237][T23375] bridge_slave_0: left allmulticast mode [ 477.229018][T23375] bridge_slave_0: left promiscuous mode [ 477.234871][T23375] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.272722][T23375] bridge_slave_1: left allmulticast mode [ 477.278432][T23375] bridge_slave_1: left promiscuous mode [ 477.284447][T23375] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.469644][T23388] loop0: detected capacity change from 0 to 1024 [ 477.543591][T23388] EXT4-fs error (device loop0): ext4_acquire_dquot:6943: comm syz.0.6755: Failed to acquire dquot type 0 [ 477.555311][T23375] bond0: (slave bond_slave_0): Releasing backup interface [ 477.565872][T23388] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 477.580547][T23388] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.6755: corrupted inode contents [ 477.592884][T23375] bond0: (slave bond_slave_1): Releasing backup interface [ 477.594924][T23388] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #13: comm syz.0.6755: mark_inode_dirty error [ 477.641050][T23375] team0: Port device team_slave_0 removed [ 477.649377][T23388] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.6755: corrupted inode contents [ 477.667127][T23375] team0: Port device team_slave_1 removed [ 477.675535][T23388] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #13: comm syz.0.6755: mark_inode_dirty error [ 477.681613][T23375] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.694408][T23375] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 477.699692][T23388] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.6755: corrupted inode contents [ 477.719758][T23375] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.727643][T23375] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 477.735073][T23388] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 477.744974][T23388] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #13: comm syz.0.6755: corrupted inode contents [ 477.747066][T23375] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 477.775975][T23388] EXT4-fs error (device loop0): ext4_truncate:4666: inode #13: comm syz.0.6755: mark_inode_dirty error [ 477.821943][T23388] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 477.841290][T23388] EXT4-fs (loop0): 1 truncate cleaned up [ 477.854140][T23388] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 478.035869][T23392] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 478.039792][T23466] loop2: detected capacity change from 0 to 512 [ 478.076333][T19715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.096444][T23466] EXT4-fs (loop2): orphan cleanup on readonly fs [ 478.123673][T23466] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.6760: bad orphan inode 13 [ 478.142928][T23466] ext4_test_bit(bit=12, block=18) = 1 [ 478.148401][T23466] is_bad_inode(inode)=0 [ 478.153166][T23466] NEXT_ORPHAN(inode)=2130706432 [ 478.158114][T23466] max_ino=32 [ 478.161327][T23466] i_nlink=1 [ 478.165310][T23466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 478.179726][ T29] kauditd_printk_skb: 60 callbacks suppressed [ 478.179745][ T29] audit: type=1400 audit(1759477132.251:12026): avc: denied { kexec_image_load } for pid=23479 comm="syz.0.6762" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 478.223500][T23466] 9pnet_fd: Insufficient options for proto=fd [ 478.290185][T23466] Falling back ldisc for ttyS3. [ 478.360707][ T29] audit: type=1326 audit(1759477132.409:12027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23493 comm="syz.6.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf52f3eec9 code=0x7ffc0000 [ 478.384822][ T29] audit: type=1326 audit(1759477132.409:12028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23493 comm="syz.6.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf52f3eec9 code=0x7ffc0000 [ 478.408900][ T29] audit: type=1326 audit(1759477132.409:12029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23493 comm="syz.6.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf52f3eec9 code=0x7ffc0000 [ 478.432596][ T29] audit: type=1326 audit(1759477132.409:12030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23493 comm="syz.6.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf52f3eec9 code=0x7ffc0000 [ 478.456280][ T29] audit: type=1326 audit(1759477132.409:12031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23493 comm="syz.6.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf52f3eec9 code=0x7ffc0000 [ 478.480086][ T29] audit: type=1326 audit(1759477132.409:12032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23493 comm="syz.6.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf52f3eec9 code=0x7ffc0000 [ 478.504404][T19243] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.516664][ T29] audit: type=1326 audit(1759477132.598:12033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23493 comm="syz.6.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf52f3eec9 code=0x7ffc0000 [ 478.540461][ T29] audit: type=1326 audit(1759477132.608:12034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23493 comm="syz.6.6765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf52f3eec9 code=0x7ffc0000 [ 478.570968][T23499] loop2: detected capacity change from 0 to 128 [ 478.582270][T23499] EXT4-fs: Ignoring removed nobh option [ 478.589876][T23499] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 478.602708][T23499] ext4 filesystem being mounted at /263/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 478.604587][T23494] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23494 comm=syz.6.6765 [ 478.615805][T23499] EXT4-fs error (device loop2): htree_dirblock_to_tree:1051: inode #2: comm syz.2.6767: Directory block failed checksum [ 478.625755][ T29] audit: type=1400 audit(1759477132.692:12035): avc: denied { watch watch_reads } for pid=23493 comm="syz.6.6765" path="/532" dev="tmpfs" ino=2832 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 478.667544][T23503] loop0: detected capacity change from 0 to 256 [ 478.668000][T23494] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23494 comm=syz.6.6765 [ 478.692507][T23499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6767'. [ 478.697785][T23503] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 478.711822][T23503] FAT-fs (loop0): Filesystem has been set read-only [ 478.754043][T19243] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 478.773215][T23507] loop2: detected capacity change from 0 to 512 [ 478.780105][T23507] EXT4-fs: Ignoring removed mblk_io_submit option [ 478.787175][T23507] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 478.798263][T23507] EXT4-fs (loop2): 1 truncate cleaned up [ 478.804629][T23507] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.836647][T23510] loop7: detected capacity change from 0 to 256 [ 478.868854][T23510] FAT-fs (loop7): Directory bread(block 64) failed [ 478.869450][T23512] loop8: detected capacity change from 0 to 512 [ 478.882165][T23512] EXT4-fs: Ignoring removed mblk_io_submit option [ 478.889175][T23512] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 478.900652][T23512] EXT4-fs (loop8): 1 truncate cleaned up [ 478.906771][T23512] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 478.912091][T23510] FAT-fs (loop7): Directory bread(block 65) failed [ 478.937383][T23510] FAT-fs (loop7): Directory bread(block 66) failed [ 478.944961][T22958] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 478.954919][T23510] FAT-fs (loop7): Directory bread(block 67) failed [ 478.967850][T23510] FAT-fs (loop7): Directory bread(block 68) failed [ 478.985006][T23510] FAT-fs (loop7): Directory bread(block 69) failed [ 479.052620][T23510] FAT-fs (loop7): Directory bread(block 70) failed [ 479.059398][T23510] FAT-fs (loop7): Directory bread(block 71) failed [ 479.066204][T23510] FAT-fs (loop7): Directory bread(block 72) failed [ 479.073002][T23510] FAT-fs (loop7): Directory bread(block 73) failed [ 479.168412][T23517] infiniband syz0: set active [ 479.173185][T23517] infiniband syz0: added bond_slave_0 [ 479.213283][T23517] RDS/IB: syz0: added [ 479.376155][T23528] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6777'. [ 479.421728][T23530] loop7: detected capacity change from 0 to 1024 [ 479.428678][T23530] EXT4-fs: Ignoring removed nomblk_io_submit option [ 479.488675][T23530] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.605700][T18189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.606218][T19243] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.657074][T23545] loop2: detected capacity change from 0 to 512 [ 479.664171][T23545] EXT4-fs: Ignoring removed mblk_io_submit option [ 479.673446][T23545] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 479.700556][T23545] EXT4-fs (loop2): 1 truncate cleaned up [ 479.987166][T23573] loop0: detected capacity change from 0 to 512 [ 479.994236][T23573] EXT4-fs: Ignoring removed mblk_io_submit option [ 480.003413][T23573] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 480.029506][T23573] EXT4-fs (loop0): 1 truncate cleaned up [ 480.106253][T23583] FAULT_INJECTION: forcing a failure. [ 480.106253][T23583] name failslab, interval 1, probability 0, space 0, times 0 [ 480.119082][T23583] CPU: 1 UID: 0 PID: 23583 Comm: syz.2.6796 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 480.119201][T23583] Tainted: [W]=WARN [ 480.119208][T23583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 480.119222][T23583] Call Trace: [ 480.119229][T23583] [ 480.119238][T23583] __dump_stack+0x1d/0x30 [ 480.119283][T23583] dump_stack_lvl+0xe8/0x140 [ 480.119346][T23583] dump_stack+0x15/0x1b [ 480.119382][T23583] should_fail_ex+0x265/0x280 [ 480.119418][T23583] should_failslab+0x8c/0xb0 [ 480.119471][T23583] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 480.119530][T23583] ? __d_alloc+0x3d/0x340 [ 480.119571][T23583] __d_alloc+0x3d/0x340 [ 480.119612][T23583] d_alloc_pseudo+0x1e/0x80 [ 480.119706][T23583] alloc_file_pseudo+0x71/0x160 [ 480.119751][T23583] anon_inode_getfd+0xc1/0x150 [ 480.119847][T23583] __se_sys_fsopen+0x193/0x1e0 [ 480.119949][T23583] __x64_sys_fsopen+0x31/0x40 [ 480.119979][T23583] x64_sys_call+0x2aa1/0x3000 [ 480.120009][T23583] do_syscall_64+0xd2/0x200 [ 480.120037][T23583] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 480.120071][T23583] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 480.120181][T23583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 480.120211][T23583] RIP: 0033:0x7fb8584eeec9 [ 480.120232][T23583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 480.120272][T23583] RSP: 002b:00007fb856f4f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 480.120294][T23583] RAX: ffffffffffffffda RBX: 00007fb858745fa0 RCX: 00007fb8584eeec9 [ 480.120308][T23583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 480.120320][T23583] RBP: 00007fb856f4f090 R08: 0000000000000000 R09: 0000000000000000 [ 480.120332][T23583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 480.120413][T23583] R13: 00007fb858746038 R14: 00007fb858745fa0 R15: 00007fff67852478 [ 480.120435][T23583] [ 481.004957][T23594] loop2: detected capacity change from 0 to 1024 [ 481.020495][T23594] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.6801: Failed to acquire dquot type 0 [ 481.061188][T23594] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 481.076752][T23602] loop0: detected capacity change from 0 to 512 [ 481.097496][T23594] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.6801: corrupted inode contents [ 481.098311][T23602] EXT4-fs: Ignoring removed mblk_io_submit option [ 481.119206][T23594] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #13: comm syz.2.6801: mark_inode_dirty error [ 481.138450][T23602] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 481.151507][T23594] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.6801: corrupted inode contents [ 481.173988][T23592] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23592 comm=syz.6.6799 [ 481.189383][T23592] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23592 comm=syz.6.6799 [ 481.190566][T23602] EXT4-fs (loop0): 1 truncate cleaned up [ 481.210947][T23594] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #13: comm syz.2.6801: mark_inode_dirty error [ 481.224838][T23594] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.6801: corrupted inode contents [ 481.225851][T23592] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.247549][T23594] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 481.264709][T23594] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #13: comm syz.2.6801: corrupted inode contents [ 481.307125][T23594] EXT4-fs error (device loop2): ext4_truncate:4666: inode #13: comm syz.2.6801: mark_inode_dirty error [ 481.319297][T23592] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.344766][T23594] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 481.373967][T23594] EXT4-fs (loop2): 1 truncate cleaned up [ 481.390841][T23594] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 481.420789][T23592] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.463073][T23608] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6803'. [ 481.477676][T23608] bridge4: entered allmulticast mode [ 481.500827][T23592] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.753675][ T4022] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.776389][ T4022] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.796477][ T4022] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.805936][T23621] batman_adv: batadv0: Adding interface: dummy0 [ 481.812474][T23621] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 481.907499][T23621] batman_adv: batadv0: Interface activated: dummy0 [ 481.929554][ T4010] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.939992][T23630] batadv0: mtu less than device minimum [ 481.946181][T23630] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 481.956876][T23630] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 481.967776][T23630] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 481.978535][T23630] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 481.989416][T23630] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 482.000516][T23630] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 482.011449][T23630] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 482.022146][T23630] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 482.037605][T23632] netlink: 'syz.8.6807': attribute type 30 has an invalid length. [ 482.295690][T23645] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23645 comm=syz.8.6812 [ 482.308324][T23645] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=23645 comm=syz.8.6812 [ 482.696847][T23652] loop7: detected capacity change from 0 to 512 [ 482.703811][T23652] EXT4-fs: Ignoring removed mblk_io_submit option [ 482.718201][T23652] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 482.769344][T23652] EXT4-fs (loop7): 1 truncate cleaned up [ 482.891881][T23665] loop2: detected capacity change from 0 to 512 [ 482.899340][T23665] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 482.940461][T23665] EXT4-fs (loop2): 1 truncate cleaned up [ 482.990661][T23674] loop8: detected capacity change from 0 to 512 [ 482.997871][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 482.997889][ T29] audit: type=1400 audit(1759477137.311:12167): avc: denied { read } for pid=23672 comm="syz.0.6821" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 483.029571][ T29] audit: type=1400 audit(1759477137.311:12168): avc: denied { open } for pid=23672 comm="syz.0.6821" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 483.053387][ T29] audit: type=1400 audit(1759477137.311:12169): avc: denied { create } for pid=23672 comm="syz.0.6821" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 483.181352][T23674] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.972222][ T29] audit: type=1400 audit(1759477138.329:12170): avc: denied { getopt } for pid=23699 comm="syz.7.6825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 484.358737][ T29] audit: type=1400 audit(1759477138.739:12171): avc: denied { ioctl } for pid=23719 comm="syz.8.6832" path="socket:[82057]" dev="sockfs" ino=82057 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 484.660247][ T29] audit: type=1326 audit(1759477139.054:12172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23725 comm="syz.8.6834" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f12e8d3eec9 code=0x0 [ 484.722888][ T29] audit: type=1326 audit(1759477139.117:12173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23724 comm="syz.2.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8584eeec9 code=0x7ffc0000 [ 484.746778][ T29] audit: type=1326 audit(1759477139.117:12174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23724 comm="syz.2.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8584eeec9 code=0x7ffc0000 [ 484.790565][ T29] audit: type=1326 audit(1759477139.169:12175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23724 comm="syz.2.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb8584eeec9 code=0x7ffc0000 [ 484.814216][ T29] audit: type=1326 audit(1759477139.169:12176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23724 comm="syz.2.6833" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8584eeec9 code=0x7ffc0000 [ 484.869030][T23726] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23726 comm=syz.2.6833 [ 484.887227][T23726] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23726 comm=syz.2.6833 [ 484.913465][T23726] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.975282][T23726] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.106527][T23726] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.129622][T23746] loop6: detected capacity change from 0 to 1024 [ 485.136785][T23746] EXT4-fs: Ignoring removed orlov option [ 485.144825][T23746] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 485.243389][T23726] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.330823][T23753] hub 9-0:1.0: USB hub found [ 485.335718][T23753] hub 9-0:1.0: 8 ports detected [ 485.384388][ T85] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.398115][ T85] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.729071][ T85] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.817406][ T85] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.273090][T23769] FAULT_INJECTION: forcing a failure. [ 486.273090][T23769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.286408][T23769] CPU: 1 UID: 0 PID: 23769 Comm: syz.6.6849 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 486.286454][T23769] Tainted: [W]=WARN [ 486.286463][T23769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 486.286484][T23769] Call Trace: [ 486.286493][T23769] [ 486.286502][T23769] __dump_stack+0x1d/0x30 [ 486.286543][T23769] dump_stack_lvl+0xe8/0x140 [ 486.286588][T23769] dump_stack+0x15/0x1b [ 486.286678][T23769] should_fail_ex+0x265/0x280 [ 486.286746][T23769] should_fail+0xb/0x20 [ 486.286818][T23769] should_fail_usercopy+0x1a/0x20 [ 486.286934][T23769] _copy_to_user+0x20/0xa0 [ 486.286962][T23769] simple_read_from_buffer+0xb5/0x130 [ 486.286990][T23769] proc_fail_nth_read+0x10e/0x150 [ 486.287021][T23769] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 486.287155][T23769] vfs_read+0x1a5/0x770 [ 486.287185][T23769] ? __rcu_read_unlock+0x4f/0x70 [ 486.287214][T23769] ? __fget_files+0x184/0x1c0 [ 486.287283][T23769] ksys_read+0xda/0x1a0 [ 486.287311][T23769] __x64_sys_read+0x40/0x50 [ 486.287340][T23769] x64_sys_call+0x27c0/0x3000 [ 486.287368][T23769] do_syscall_64+0xd2/0x200 [ 486.287403][T23769] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 486.287489][T23769] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 486.287530][T23769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.287552][T23769] RIP: 0033:0x7fcf52f3d8dc [ 486.287568][T23769] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 486.287653][T23769] RSP: 002b:00007fcf519a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 486.287673][T23769] RAX: ffffffffffffffda RBX: 00007fcf53195fa0 RCX: 00007fcf52f3d8dc [ 486.287685][T23769] RDX: 000000000000000f RSI: 00007fcf519a70a0 RDI: 0000000000000004 [ 486.287700][T23769] RBP: 00007fcf519a7090 R08: 0000000000000000 R09: 0000000000000000 [ 486.287797][T23769] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 486.287811][T23769] R13: 00007fcf53196038 R14: 00007fcf53195fa0 R15: 00007ffe27546c78 [ 486.287836][T23769] [ 486.515470][T23771] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6848'. [ 486.704341][T23779] loop0: detected capacity change from 0 to 512 [ 486.716881][T23779] EXT4-fs: Ignoring removed mblk_io_submit option [ 486.724535][T23779] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 486.739739][T23779] EXT4-fs (loop0): 1 truncate cleaned up [ 486.746026][T23779] EXT4-fs mount: 16 callbacks suppressed [ 486.746126][T23779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 486.866209][T19715] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.878081][T23786] loop6: detected capacity change from 0 to 512 [ 486.885049][T23786] EXT4-fs: Ignoring removed nobh option [ 487.208848][T23786] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #3: comm syz.6.6856: corrupted inode contents [ 487.233542][T23786] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #3: comm syz.6.6856: mark_inode_dirty error [ 487.384778][T23786] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #3: comm syz.6.6856: corrupted inode contents [ 487.423736][T23794] loop7: detected capacity change from 0 to 1024 [ 487.439146][T23796] loop8: detected capacity change from 0 to 512 [ 487.469056][T23794] EXT4-fs error (device loop7): ext4_acquire_dquot:6943: comm syz.7.6857: Failed to acquire dquot type 0 [ 487.473605][T23786] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.6856: mark_inode_dirty error [ 487.508974][T23786] EXT4-fs error (device loop6): ext4_acquire_dquot:6943: comm syz.6.6856: Failed to acquire dquot type 0 [ 487.509524][T23794] EXT4-fs error (device loop7): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 487.550382][T23796] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 487.565000][T23796] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 487.597061][T23794] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #13: comm syz.7.6857: corrupted inode contents [ 487.613962][T23786] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.6856: corrupted inode contents [ 487.640537][T23794] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #13: comm syz.7.6857: mark_inode_dirty error [ 487.653924][T23786] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #16: comm syz.6.6856: mark_inode_dirty error [ 487.661244][T23794] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #13: comm syz.7.6857: corrupted inode contents [ 487.686355][T23794] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #13: comm syz.7.6857: mark_inode_dirty error [ 487.697856][T23786] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.6856: corrupted inode contents [ 487.698086][T23794] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #13: comm syz.7.6857: corrupted inode contents [ 487.722035][T23786] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.6856: mark_inode_dirty error [ 487.742099][T23786] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.6856: corrupted inode contents [ 487.743382][T23794] EXT4-fs error (device loop7) in ext4_orphan_del:305: Corrupt filesystem [ 487.755562][T23786] EXT4-fs error (device loop6) in ext4_orphan_del:305: Corrupt filesystem [ 487.765883][T23806] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23806 comm=syz.2.6859 [ 487.777812][T23786] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.6856: corrupted inode contents [ 487.784101][ T29] kauditd_printk_skb: 187 callbacks suppressed [ 487.784122][ T29] audit: type=1326 audit(1759477142.319:12360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23802 comm="syz.2.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb8584eeec9 code=0x7ffc0000 [ 487.825848][ T29] audit: type=1326 audit(1759477142.319:12361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23802 comm="syz.2.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8584eeec9 code=0x7ffc0000 [ 487.835079][T23786] EXT4-fs error (device loop6): ext4_truncate:4666: inode #16: comm syz.6.6856: mark_inode_dirty error [ 487.849524][ T29] audit: type=1326 audit(1759477142.319:12362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23802 comm="syz.2.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8584eeec9 code=0x7ffc0000 [ 487.864405][T23794] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #13: comm syz.7.6857: corrupted inode contents [ 487.884191][ T29] audit: type=1326 audit(1759477142.319:12363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23802 comm="syz.2.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7fb8584eeec9 code=0x7ffc0000 [ 487.911744][T23809] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23809 comm=syz.2.6859 [ 487.919772][ T29] audit: type=1326 audit(1759477142.319:12364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23802 comm="syz.2.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8584eeec9 code=0x7ffc0000 [ 487.942274][T23794] EXT4-fs error (device loop7): ext4_truncate:4666: inode #13: comm syz.7.6857: mark_inode_dirty error [ 487.955775][ T29] audit: type=1326 audit(1759477142.319:12365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23802 comm="syz.2.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8584eeec9 code=0x7ffc0000 [ 487.968893][T23786] EXT4-fs error (device loop6) in ext4_process_orphan:347: Corrupt filesystem [ 487.990525][ T29] audit: type=1326 audit(1759477142.319:12366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23802 comm="syz.2.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fb8584eeec9 code=0x7ffc0000 [ 488.023031][ T29] audit: type=1326 audit(1759477142.319:12367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23802 comm="syz.2.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8584eeec9 code=0x7ffc0000 [ 488.030437][T23794] EXT4-fs error (device loop7) in ext4_process_orphan:347: Corrupt filesystem [ 488.046739][ T29] audit: type=1326 audit(1759477142.319:12368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23802 comm="syz.2.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8584eeec9 code=0x7ffc0000 [ 488.075780][T23786] EXT4-fs (loop6): 1 truncate cleaned up [ 488.079220][ T29] audit: type=1326 audit(1759477142.319:12369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23802 comm="syz.2.6859" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fb8584eeec9 code=0x7ffc0000 [ 488.092289][T23786] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.127696][T23806] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.130853][T23794] EXT4-fs (loop7): 1 truncate cleaned up [ 488.143610][T23794] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.177872][T23786] ext4 filesystem being mounted at /554/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.188899][T23794] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 488.200858][T23806] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.223568][T22958] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.256127][T18189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.293843][T23806] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.305979][T16094] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.379240][T23806] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.429083][T23821] loop7: detected capacity change from 0 to 512 [ 488.444995][T23821] EXT4-fs: Ignoring removed mblk_io_submit option [ 488.453481][T23821] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 488.493306][T23821] EXT4-fs (loop7): 1 truncate cleaned up [ 488.499304][T23821] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.578468][T18189] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.598307][T23828] loop0: detected capacity change from 0 to 128 [ 488.607681][T23828] EXT4-fs: Ignoring removed nobh option [ 488.620384][T23828] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 488.632973][T23828] ext4 filesystem being mounted at /250/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 488.657363][T19715] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 488.690535][T23823] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6866'. [ 488.703271][T23823] bridge5: entered allmulticast mode [ 488.737200][T23843] FAULT_INJECTION: forcing a failure. [ 488.737200][T23843] name failslab, interval 1, probability 0, space 0, times 0 [ 488.750046][T23843] CPU: 1 UID: 0 PID: 23843 Comm: syz.7.6871 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 488.750088][T23843] Tainted: [W]=WARN [ 488.750095][T23843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 488.750234][T23843] Call Trace: [ 488.750322][T23843] [ 488.750332][T23843] __dump_stack+0x1d/0x30 [ 488.750379][T23843] dump_stack_lvl+0xe8/0x140 [ 488.750468][T23843] dump_stack+0x15/0x1b [ 488.750499][T23843] should_fail_ex+0x265/0x280 [ 488.750532][T23843] should_failslab+0x8c/0xb0 [ 488.750578][T23843] __kmalloc_noprof+0xa5/0x570 [ 488.750614][T23843] ? sock_kmalloc+0x85/0xc0 [ 488.750692][T23843] ? iovec_from_user+0x5e/0x210 [ 488.750722][T23843] sock_kmalloc+0x85/0xc0 [ 488.750753][T23843] ____sys_sendmsg+0xf8/0x4e0 [ 488.750801][T23843] ___sys_sendmsg+0x17b/0x1d0 [ 488.750855][T23843] __sys_sendmmsg+0x178/0x300 [ 488.750895][T23843] __x64_sys_sendmmsg+0x57/0x70 [ 488.750935][T23843] x64_sys_call+0x1c4a/0x3000 [ 488.751040][T23843] do_syscall_64+0xd2/0x200 [ 488.751068][T23843] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 488.751100][T23843] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 488.751137][T23843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.751170][T23843] RIP: 0033:0x7f1fc035eec9 [ 488.751186][T23843] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 488.751206][T23843] RSP: 002b:00007f1fbedc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 488.751299][T23843] RAX: ffffffffffffffda RBX: 00007f1fc05b5fa0 RCX: 00007f1fc035eec9 [ 488.751312][T23843] RDX: 0000000000000002 RSI: 0000200000000a40 RDI: 0000000000000003 [ 488.751325][T23843] RBP: 00007f1fbedc7090 R08: 0000000000000000 R09: 0000000000000000 [ 488.751338][T23843] R10: 0000000020004874 R11: 0000000000000246 R12: 0000000000000001 [ 488.751399][T23843] R13: 00007f1fc05b6038 R14: 00007f1fc05b5fa0 R15: 00007ffd9d181878 [ 488.751424][T23843] [ 489.117762][T23866] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=23866 comm=syz.7.6875 [ 489.176851][T23866] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=23866 comm=syz.7.6875 [ 489.217486][T23866] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.287652][T23866] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.365768][T23866] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.409711][T23866] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.439031][T23906] FAULT_INJECTION: forcing a failure. [ 489.439031][T23906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 489.452201][T23906] CPU: 1 UID: 0 PID: 23906 Comm: syz.6.6879 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 489.452242][T23906] Tainted: [W]=WARN [ 489.452251][T23906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 489.452267][T23906] Call Trace: [ 489.452275][T23906] [ 489.452285][T23906] __dump_stack+0x1d/0x30 [ 489.452330][T23906] dump_stack_lvl+0xe8/0x140 [ 489.452395][T23906] dump_stack+0x15/0x1b [ 489.452437][T23906] should_fail_ex+0x265/0x280 [ 489.452476][T23906] should_fail+0xb/0x20 [ 489.452573][T23906] should_fail_usercopy+0x1a/0x20 [ 489.452652][T23906] _copy_to_user+0x20/0xa0 [ 489.452681][T23906] simple_read_from_buffer+0xb5/0x130 [ 489.452730][T23906] proc_fail_nth_read+0x10e/0x150 [ 489.452773][T23906] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 489.452841][T23906] vfs_read+0x1a5/0x770 [ 489.452865][T23906] ? __fget_files+0x184/0x1c0 [ 489.452942][T23906] ? __rcu_read_unlock+0x4f/0x70 [ 489.452973][T23906] ? __fget_files+0x184/0x1c0 [ 489.453011][T23906] ksys_read+0xda/0x1a0 [ 489.453071][T23906] __x64_sys_read+0x40/0x50 [ 489.453098][T23906] x64_sys_call+0x27c0/0x3000 [ 489.453119][T23906] do_syscall_64+0xd2/0x200 [ 489.453142][T23906] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 489.453176][T23906] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 489.453231][T23906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.453253][T23906] RIP: 0033:0x7fcf52f3d8dc [ 489.453293][T23906] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 489.453316][T23906] RSP: 002b:00007fcf51986030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 489.453341][T23906] RAX: ffffffffffffffda RBX: 00007fcf53196090 RCX: 00007fcf52f3d8dc [ 489.453364][T23906] RDX: 000000000000000f RSI: 00007fcf519860a0 RDI: 0000000000000004 [ 489.453388][T23906] RBP: 00007fcf51986090 R08: 0000000000000000 R09: 0000000000000000 [ 489.453404][T23906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.453419][T23906] R13: 00007fcf53196128 R14: 00007fcf53196090 R15: 00007ffe27546c78 [ 489.453444][T23906] [ 489.671847][ T4022] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.698163][ T3439] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.789037][ T3439] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.802500][ T3439] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.999369][T23963] loop8: detected capacity change from 0 to 512 [ 490.017505][T23963] EXT4-fs: Ignoring removed mblk_io_submit option [ 490.030215][T23963] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 490.042331][T23963] EXT4-fs (loop8): 1 truncate cleaned up [ 490.048804][T23963] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.571692][T23963] ================================================================== [ 490.579884][T23963] BUG: KCSAN: data-race in filemap_write_and_wait_range / xas_set_mark [ 490.588257][T23963] [ 490.590705][T23963] write to 0xffff888119c6428c of 4 bytes by task 23970 on cpu 0: [ 490.598448][T23963] xas_set_mark+0x12b/0x140 [ 490.602993][T23963] __folio_start_writeback+0x161/0x3d0 [ 490.608492][T23963] ext4_bio_write_folio+0x5ad/0x9f0 [ 490.613901][T23963] mpage_process_page_bufs+0x4a1/0x620 [ 490.619383][T23963] mpage_prepare_extent_to_map+0x786/0xc00 [ 490.625206][T23963] ext4_do_writepages+0xa05/0x2750 [ 490.630435][T23963] ext4_writepages+0x176/0x300 [ 490.635214][T23963] do_writepages+0x1c3/0x310 [ 490.639823][T23963] file_write_and_wait_range+0x156/0x2c0 [ 490.645478][T23963] generic_buffers_fsync_noflush+0x45/0x120 [ 490.651392][T23963] ext4_sync_file+0x1ab/0x690 [ 490.656082][T23963] vfs_fsync_range+0x10a/0x130 [ 490.660951][T23963] ext4_buffered_write_iter+0x34f/0x3c0 [ 490.666510][T23963] ext4_file_write_iter+0xdbf/0xf00 [ 490.671736][T23963] iter_file_splice_write+0x666/0xa60 [ 490.677126][T23963] direct_splice_actor+0x156/0x2a0 [ 490.682253][T23963] splice_direct_to_actor+0x312/0x680 [ 490.687642][T23963] do_splice_direct+0xda/0x150 [ 490.692418][T23963] do_sendfile+0x380/0x650 [ 490.696855][T23963] __x64_sys_sendfile64+0x105/0x150 [ 490.702073][T23963] x64_sys_call+0x2bb4/0x3000 [ 490.706791][T23963] do_syscall_64+0xd2/0x200 [ 490.711308][T23963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.717230][T23963] [ 490.719577][T23963] read to 0xffff888119c6428c of 4 bytes by task 23963 on cpu 1: [ 490.727223][T23963] filemap_write_and_wait_range+0xfc/0x340 [ 490.733072][T23963] filemap_invalidate_pages+0xa4/0x1a0 [ 490.738567][T23963] kiocb_invalidate_pages+0x6e/0x80 [ 490.743795][T23963] __iomap_dio_rw+0x5d1/0x1240 [ 490.748575][T23963] iomap_dio_rw+0x40/0x90 [ 490.752923][T23963] ext4_file_write_iter+0xad9/0xf00 [ 490.758237][T23963] iter_file_splice_write+0x666/0xa60 [ 490.763645][T23963] direct_splice_actor+0x156/0x2a0 [ 490.768811][T23963] splice_direct_to_actor+0x312/0x680 [ 490.774228][T23963] do_splice_direct+0xda/0x150 [ 490.779014][T23963] do_sendfile+0x380/0x650 [ 490.783453][T23963] __x64_sys_sendfile64+0x105/0x150 [ 490.788672][T23963] x64_sys_call+0x2bb4/0x3000 [ 490.793362][T23963] do_syscall_64+0xd2/0x200 [ 490.797882][T23963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.803792][T23963] [ 490.806129][T23963] value changed: 0x0a000021 -> 0x04000021 [ 490.811939][T23963] [ 490.814266][T23963] Reported by Kernel Concurrency Sanitizer on: [ 490.820430][T23963] CPU: 1 UID: 0 PID: 23963 Comm: syz.8.6885 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 490.831855][T23963] Tainted: [W]=WARN [ 490.835674][T23963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 490.845743][T23963] ================================================================== [ 490.879855][ T1897] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.923881][ T1897] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.939482][ T1897] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.954329][ T1897] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.025610][T22958] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.