last executing test programs: 1m39.697312292s ago: executing program 4 (id=1074): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xb, &(0x7f0000000400)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd9a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc_extfrag\x00', r0}, 0x18) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x1}, 0x0, 0x40000000}) syz_io_uring_setup(0x64d, &(0x7f0000000100)={0x0, 0x11f8, 0x8, 0xa, 0x240}, &(0x7f0000000300), &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYBLOB, @ANYRES32], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x140) socket$rxrpc(0x21, 0x2, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x7, &(0x7f0000000300)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x200, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pivot_root(&(0x7f0000000000)='.\x00', 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1400000010007c0000000000006000002500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000010900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018005000100d1000000200000001100010000000000000000000100000a"], 0xa4}}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2c020400) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x10, 0x3, 0x9) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x303e00, 0x0) sendfile(r7, r8, 0x0, 0x7fffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r6, 0x0, 0x1000000000000}, 0x18) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000140), 0x18) r9 = perf_event_open(&(0x7f0000001180)={0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7, 0x2, @perf_config_ext={0x80, 0xffffffffffffffff}, 0x10000, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$PERF_EVENT_IOC_RESET(r9, 0x2403, 0x9) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000000500010006000000057ec6e72e0000000900020073797a3100000080050005000200fcff11000300686173683a69702c706f7274", @ANYRESOCT=r6, @ANYRES16=r2, @ANYRESOCT=r6, @ANYBLOB="5a243240271adcfd25f4"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4801) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m39.599272126s ago: executing program 4 (id=1076): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f00000003c0)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180040000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r9, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0xfffffffffffffd5e) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x8, 0x41, 0xf, 0x4, {{0x19, 0x4, 0x1, 0x31, 0x64, 0x65, 0x0, 0x5, 0x2f, 0x0, @broadcast, @local, {[@timestamp={0x44, 0xc, 0x9e, 0x0, 0x6, [0x0, 0x2]}, @end, @timestamp_addr={0x44, 0xc, 0xe3, 0x1, 0x0, [{@multicast1, 0x8}]}, @timestamp_prespec={0x44, 0xc, 0xe4, 0x3, 0x0, [{@broadcast, 0x81}]}, @timestamp_prespec={0x44, 0x14, 0x36, 0x3, 0xc, [{@broadcast, 0x9}, {@rand_addr=0x64010101, 0x2}]}, @lsrr={0x83, 0x17, 0xf9, [@broadcast, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x1a}, @remote]}]}}}}}) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="03000000000000000000000000000000000000003a52c48d10d402b16c30fffe109e3d840b768a2154dc5547e4e7dbca855e6b6bbb6dd5ef1dbf3b5a08fe8ead0e12dfb8908e25551b97c83f81c1ea2dafbd40b7f57cb911a558babd73f57da5757d1a923337ab86363c3dbbcf65189c001d0a2940e7f1ee338fa32634381825c3693c17770a296957b4c395c907f363e7d61c59401da9115db908b20015a1ef28110f8eaea31e359a4ceae887a38857dce5c900062111c2b0d25cc7bae1ea63e2ce994f4a3c92518a0f60cf07400b36f4c44e4c64cd5623e3a497c79aa573ff073d27f23be51b2ab28edd54332dc4cf7ecc637921e8b823029b7adcdcdb6473e68ebb2e241eaae412ec9e0f721bf00c44f25eedff9ed82d70a252d46fe197ff21ad2f6ed9c69c42b92600"/326, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000500"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x19, &(0x7f0000000700)=ANY=[@ANYBLOB="1800f9ff00d98ca3959e4bc5fdb3fe3753bd34ab1a3a455193e7de9cee6cf916bcf994df96af88ebaf0704249113bec0e576c252ccb22943f77cbaf002dd343aa92f0f2f0470b970d082e9ff596cb6a4d4f88c87aec7200f5652bd13a1525f5ffa2d0a", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000018000000000000000000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x800, 0x15, &(0x7f00000001c0)=""/21, 0x41000, 0x26, '\x00', r11, 0x0, r0, 0x8, &(0x7f0000000500)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x6, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r12, r8, r8, r8, r8, r8], 0x0, 0x10, 0xffffffff}, 0x94) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) dup2(r7, r1) 1m38.685392845s ago: executing program 4 (id=1092): mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x400, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30, 0x2d]}}}}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a00)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB="095ea6cc22dae5ee2fdd29d9d956785b763e4b12d111089c1a9c00dd201ea80c10466d8f02f143bcd20875bec6222cd680373f55060c5ad80f7fc0392a229a964602c002c985ad93c8f4675d8e47bc8b85e22eb35f86de731db187dcc40eb9a1e773989f7382a707ec9c7176c70534224f68331d0fccbe0fc4f0515bf356eccf13194cf096c58bf66f7b840004dcf7bf0d86a749626c4c55b54053c867bad50ab43d105add7cd33d2328bb3a2ceb44f24bba2baeea91d065dfd25d54ec521cc498e883d5f0616b3639d5936ef91b4407997e86e53fb29eee973f9174704112b843af24d163d36e61", @ANYRESHEX, @ANYRES16, @ANYRES16=0x0], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {0x0}, &(0x7f0000000440)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x60, 0x4}}], 0x48, 0x8004}, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x84000221) read(r2, 0x0, 0x20) close(r2) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000380)=ANY=[@ANYBLOB="025258756b4c8d81ddab6258ec42b7905fcec8db7399"], 0x9, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001b40)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket(0x10, 0x2, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0xa}, 0xff85) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 1m37.586905081s ago: executing program 4 (id=1102): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f00000003c0)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180040000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r9, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0xfffffffffffffd5e) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x8, 0x41, 0xf, 0x4, {{0x19, 0x4, 0x1, 0x31, 0x64, 0x65, 0x0, 0x5, 0x2f, 0x0, @broadcast, @local, {[@timestamp={0x44, 0xc, 0x9e, 0x0, 0x6, [0x0, 0x2]}, @end, @timestamp_addr={0x44, 0xc, 0xe3, 0x1, 0x0, [{@multicast1, 0x8}]}, @timestamp_prespec={0x44, 0xc, 0xe4, 0x3, 0x0, [{@broadcast, 0x81}]}, @timestamp_prespec={0x44, 0x14, 0x36, 0x3, 0xc, [{@broadcast, 0x9}, {@rand_addr=0x64010101, 0x2}]}, @lsrr={0x83, 0x17, 0xf9, [@broadcast, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x1a}, @remote]}]}}}}}) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="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"/326, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000500"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x19, &(0x7f0000000700)=ANY=[@ANYBLOB="1800f9ff00d98ca3959e4bc5fdb3fe3753bd34ab1a3a455193e7de9cee6cf916bcf994df96af88ebaf0704249113bec0e576c252ccb22943f77cbaf002dd343aa92f0f2f0470b970d082e9ff596cb6a4d4f88c87aec7200f5652bd13a1525f5ffa2d0a", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000018000000000000000000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x800, 0x15, &(0x7f00000001c0)=""/21, 0x41000, 0x26, '\x00', r11, 0x0, r0, 0x8, &(0x7f0000000500)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x6, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r12, r8, r8, r8, r8, r8], 0x0, 0x10, 0xffffffff}, 0x94) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) dup2(r7, r1) 1m36.652165562s ago: executing program 4 (id=1123): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000050000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x200000000000000) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m36.638597702s ago: executing program 4 (id=1124): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000280)={0x2, 'macvlan0\x00'}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x3a6f, &(0x7f0000000380)={0x0, 0x7b26, 0x200, 0x3, 0x39}, &(0x7f0000000240), &(0x7f0000000400)) r3 = syz_io_uring_setup(0x10f, &(0x7f0000000440)={0x0, 0x46ec, 0x40, 0xffffdffd, 0x314, 0x0, r2}, &(0x7f0000000140)=0x0, &(0x7f0000001080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r1, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1}) (async) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r1, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r8}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r8}, 0x18) wait4(0x0, 0x0, 0x8, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r13}, 0x10) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e746572"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r11}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) writev(r6, &(0x7f0000000040)=[{&(0x7f00000001c0)="25ffad7e998223bff89a8674c4ea5c8506553d402834eca7d31fbff3c20e9ae25fd9a22e079473874c2f0a4bbffb0c5e1e767c6a6067d978f5c2d7cb2f775d437bcb1e2531147d", 0x47}], 0x1) (async) writev(r6, &(0x7f0000000040)=[{&(0x7f00000001c0)="25ffad7e998223bff89a8674c4ea5c8506553d402834eca7d31fbff3c20e9ae25fd9a22e079473874c2f0a4bbffb0c5e1e767c6a6067d978f5c2d7cb2f775d437bcb1e2531147d", 0x47}], 0x1) io_uring_enter(r3, 0x3516, 0x67f, 0x64, 0x0, 0x0) (async) io_uring_enter(r3, 0x3516, 0x67f, 0x64, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'xfrm0\x00', 0x2}, 0x18) 1m20.52607635s ago: executing program 32 (id=1124): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000280)={0x2, 'macvlan0\x00'}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_io_uring_setup(0x3a6f, &(0x7f0000000380)={0x0, 0x7b26, 0x200, 0x3, 0x39}, &(0x7f0000000240), &(0x7f0000000400)) r3 = syz_io_uring_setup(0x10f, &(0x7f0000000440)={0x0, 0x46ec, 0x40, 0xffffdffd, 0x314, 0x0, r2}, &(0x7f0000000140)=0x0, &(0x7f0000001080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r1, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1}) (async) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r1, 0x22, &(0x7f00000000c0)=@un=@file={0x1, './file0\x00'}, 0x0, 0x0, 0x1}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x101) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r8}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r8}, 0x18) wait4(0x0, 0x0, 0x8, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r13}, 0x10) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e746572"], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000080)='9p_client_res\x00', r11}, 0x10) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) (async) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r9, @ANYBLOB=',wfdno=', @ANYRESHEX=r10]) writev(r6, &(0x7f0000000040)=[{&(0x7f00000001c0)="25ffad7e998223bff89a8674c4ea5c8506553d402834eca7d31fbff3c20e9ae25fd9a22e079473874c2f0a4bbffb0c5e1e767c6a6067d978f5c2d7cb2f775d437bcb1e2531147d", 0x47}], 0x1) (async) writev(r6, &(0x7f0000000040)=[{&(0x7f00000001c0)="25ffad7e998223bff89a8674c4ea5c8506553d402834eca7d31fbff3c20e9ae25fd9a22e079473874c2f0a4bbffb0c5e1e767c6a6067d978f5c2d7cb2f775d437bcb1e2531147d", 0x47}], 0x1) io_uring_enter(r3, 0x3516, 0x67f, 0x64, 0x0, 0x0) (async) io_uring_enter(r3, 0x3516, 0x67f, 0x64, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000180)={0x2, 'xfrm0\x00', 0x2}, 0x18) 1m12.234463865s ago: executing program 1 (id=1407): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x8840c4, &(0x7f00000001c0)=ANY=[@ANYRESOCT=r1, @ANYRES16=r0, @ANYRES8=r2, @ANYRESHEX=r1]) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) close(r0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00'}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000080b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) mount$9p_fd(0x0, 0x0, 0x0, 0x18802, &(0x7f0000000540)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[], [{@fsuuid={'fsuuid', 0x3d, {[0x32, 0x36, 0x39, 0x35, 0x55, 0x33, 0x31, 0x64], 0x2d, [0x31, 0x30, 0x32, 0x65], 0x2d, [0x65, 0x32, 0x59, 0x31], 0x2d, [0x30, 0x38, 0x64, 0x35], 0x2d, [0x33, 0x35, 0x62, 0x36, 0x35, 0x65, 0x36, 0x57]}}}, {@flag='nolazytime'}]}}) r5 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x44010) sendmsg$inet(r5, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0x4f21, @multicast2}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000300)="0800c8460f2a2a2a", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$INCFS_IOC_PERMIT_FILL(r7, 0x40046721, &(0x7f0000000180)={r7}) shutdown(r7, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x7a, &(0x7f0000000340)={r8, @in6={{0xa, 0x3, 0x5, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt(r6, 0x84, 0x7f, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}, 0xbd}], 0x1, 0x1, 0x0) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000003580)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0xffffffffffffffff}], 0x9, 0x0) 1m12.233926525s ago: executing program 1 (id=1408): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sched_switch\x00', r1, 0x0, 0x80000001}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0xad, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd672d5115007700fffc010000000000000000000000000001ff0200000000000000000000000000013200"], 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000010000000000000000000000850000004100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 1m10.94916682s ago: executing program 1 (id=1428): r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r3, 0x0, 0x5c4, 0x404c844, &(0x7f0000000540)={0x2, 0x4e24, 0x0, @local, 0x4000000}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000c00)={[{@bsdgroups}, {@grpjquota_path={'grpjquota', 0x3d, './bus'}}, {@noblock_validity}, {@nodelalloc}, {@usrjquota}, {@usrquota}, {@auto_da_alloc}, {@noload}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, 0x0) readv(r0, &(0x7f0000000a80)=[{&(0x7f00000004c0)=""/216, 0xd8}], 0x1) 1m10.835223304s ago: executing program 1 (id=1429): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], 0x0, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r0}, 0x10) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x4, 0x1, 0x6, 0x1, 0x4, 0x2ca, 0x5, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x4, 0x101, 0x1000, 0x9, 0x1, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x763, 0x3, 0x0, 0xe, 0x2b12, 0x7, 0x2, 0x1c00, 0xb, 0x40, 0xbed4, 0x1, 0x8000100, 0x2, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x102, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x9, 0x180000, 0x4007, 0x8b, 0x1030, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x10002, 0xfffffffe, 0x84, 0x100, 0x5, 0x3, 0x81, 0xb, 0x5, 0x20002, 0x7, 0x2, 0xb, 0x4, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x80003b, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000980), r3) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000000, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$eJzs3U9oHGUbAPBnZrNN/+T70g++Dz6lh6JChdJN0j9aPbVXsVDoQfCiYbMNJZtsySbahIDpvYg9iEov9aYHj4oHD+LFo1cvimeh2KDQ9KArm51N03S3bmI2W7O/H0z2fWdm93nfmX3e7AwzTAB962j9TxrxVERcTCKGNywbiGzh0cZ6qytLxfsrS8UkarVLvySRRMS9laVic/0kez0UEcsR8f+I+CYfcTxd/8h9zUJ1YXFqvFwuzWb1kbnpqyPVhcUTV6bHJ0uTpZlTL7505uzpM2MnxzY2935tYy2/tb7e+PHmuze+e+X2zU8/O7JcfH88iXMxlC3b2I+d1Ngm+Ti3af7pbgTroaTXDWBbclme11PpfzEcuSzrW6ltHBwGd6V5QBfVBiNq6zYUgT6QSHroU83fAfXj3+a0m78/7pxvHIDU466uLBXfiWb8gca5idi/dmxy8NfkoSOT+vHm4d1sKHvS8vWIGB0YePT7n2Tfv+0b3YkG0lVfn2/sqEf3f7o+/kSL8Weoee70b2qOf6vZ+LfaIn6uzfh3scMYv7/+00dt418fjKdbxk/W4yct4qcR8WaH8W+99uXZdstqH0cci9bxm5LHnx8euXylXBpt/G0Z46tjR15u3/+Ig23iN87Z7l9ryMb+78valHbY/y++/fyZ5cfEf/7Zx+//Vtv/QES812H8/9z75NV2y+5cT+7WfwVsdf8nkY/bHcZ/4dzRH7Kis4YAAAAAAAAAALCD0rVr2ZK0sF5O00KhcQ/vf+NgWq5U545frszPTDSueTsc+bR5pdVwo57U62PZ9bjN+slN9VO5LGDuwFq9UKyUJ3rcdwAAAAAAAAAAAAAAAAAAAHhSHNp0//9vubX7/zc/rhrYq9o/8hvY6+Q/9K+H8z/pWTuA3ef/P/StmvyH/iX/oX/Jf+hf8h/6l/yH/iX/oX/JfwAAAAAAAAAAAAAAAAAAAAAAAAAA6IqLFy7Up9r9laVivT4xsDA/VXnrxESpOlWYni8WipXZq4XJSmWyXCoUK9N/9XlJpXJ1NGbmr43MlapzI9WFxTemK/MzzWeKlvJd7xEAAAAAAAAAAAAAAAAAAAD88wytTUlaiMg36mlaKET8KyIOJ5FcvlIujUbEvyPi+1x+sF4f63WjAQAAAAAAAAAAAAAAAAAAYI+pLixOjZfLpdnuFQayUF0M0XlhYCsrR8Tyzjaj/olbflc+24A93nR7o5B7Mr6HT36hh4MSAAAAAAAAAAAAAAAAAAD0qQc3/Xb6jj+62yAAAAAAAAAAAAAAAAAAAADoS+nPSUTUp2PDzw1tXrovWc2tvUbE27cufXBtfG5udqw+/+76/LkPs/kne9F+oFPNPE0jop7HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwAPVhcWp8XK5NLvNwmAH6/S6jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADb8WcAAAD//y4WzlE=") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) writev(r6, &(0x7f0000000580)=[{&(0x7f0000000440)="dd", 0x1}], 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendfile(r7, r7, 0x0, 0xe3aa6ea) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001e0000000800040000000000080001"], 0x24}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8, 0x0, 0xfffffffffffffffc}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911034000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socketpair(0x9, 0x3, 0x4, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) open_by_handle_at(r9, &(0x7f0000000540)=@reiserfs_6={0x18, 0x6, {0x5, 0x3, 0x0, 0x1, 0x2, 0x800}}, 0x10000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="800000007044040008001b0005000000300012790b000100697036746e6c"], 0x58}, 0x1, 0x0, 0x0, 0x400c054}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}}, 0xf, 0x1c0}, 0x90) 1m10.518969538s ago: executing program 1 (id=1432): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r1, &(0x7f00000007c0)={&(0x7f0000000640)=@can, 0x80, &(0x7f0000000000)=[{&(0x7f00000002c0)="774cad6980cfd06e9868", 0xa}], 0x1, &(0x7f0000000700)=ANY=[@ANYBLOB="18d15aab26731f0c655f2abd01ad7f5fe79128109a725921", @ANYRES16=r0, @ANYRES32=r1, @ANYRESOCT, @ANYRES8=0x0, @ANYRESDEC=r0], 0x18}, 0x41) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x50) r3 = syz_clone(0x17ef2be687b8416e, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0), 0x4) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x2000011, &(0x7f0000000180), 0x0, 0x617, &(0x7f0000001100)="$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") r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x110, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0x2}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0xd8, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xcd, 0x7f, 0x8, 0x0, 0x0, 0x0, 0x2}}, {0x4}}, {{0x1c, 0x1, {0x2, 0xec, 0x3, 0xd, 0x0, 0x8001, 0x7, 0x1}}, {0x6, 0x2, [0x8001]}}, {{0x1c, 0x1, {0x6, 0x2, 0x7d4, 0x10000000, 0x1, 0x0, 0x8001, 0x3}}, {0xa, 0x2, [0x600, 0x8000, 0x7]}}, {{0xfffffffffffffe3c, 0x1, {0xa0, 0x8, 0x83c5, 0x2a, 0x2, 0x1, 0xfffffffa}}, {0x4}}, {{0x1c, 0x1, {0x4, 0x2, 0x6, 0x77dd, 0x1, 0x7, 0x9, 0x4}}, {0xc, 0x2, [0x1, 0x1000, 0x69c4, 0xfff6]}}, {{0x1c, 0x1, {0x7, 0x79, 0x8, 0x8, 0x0, 0x41, 0xf}}, {0x4}}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4008094}, 0x8840) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='kfree\x00', r6}, 0xfffffffffffffcf6) ptrace(0x10, r3) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x804) rt_tgsigqueueinfo(r3, r3, 0x32, &(0x7f0000000100)={0x1e, 0x7, 0xffff9553}) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x729481, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'pimreg\x00', 0x84aebfbd6349b7f2}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000880)="1f3c641a5caacb6db3001c1dd7ebdfd4a7acb774500a2be6769f8aa25011ac7a93757191f0b03e2a2d1928f4f7358abfd627396f06ab5776c3c80e6b42450eba969c07f1718ee9f82d953dc00c3b6b2515544d", 0x8000, r2, 0x4}, 0x38) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095528a3c03988121ef5ce709f756001c"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000280)='console\x00', r9, 0x0, 0xdc73}, 0x18) socket$inet(0x10, 0x3, 0x0) 1m9.615937286s ago: executing program 1 (id=1444): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040004) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x100}, 0x18) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x44000, 0x0) 1m9.52230185s ago: executing program 33 (id=1444): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040004) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x100}, 0x18) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x44000, 0x0) 1m6.090264517s ago: executing program 2 (id=1457): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x2, '\x00', 0x0, r2, 0x3, 0x1}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x22, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x10000001, 0x0, 0x3}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000140)={0x800100, 0x0, 0x97e, 0x0, 0x0, 0x4000003}) close_range(r4, 0xffffffffffffffff, 0x0) 1m5.853110257s ago: executing program 2 (id=1458): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000930d000000000000010000352b531400000000009500000000000000"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffff8001}, 0x18) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x8, 0x0, 0x0, 0x800000000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c56, 0x0, @perf_bp={0x0, 0x3}, 0x104000, 0x5, 0x43a1bd76, 0x7, 0x8000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) rename(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x72051052ae3513ca}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000006c0)='cp3\nW\xb0\x8aQtT\x87\x86\xf5\x13v&[\xa9\nF\xdf\x8d5\xe76\xd5\xe8\x9d\a\x17\x16\xfcc\xba\x1f\x85\'\x84^\xb0\x87m\xaa\x1dsM\x17\x99\xaf\x05\xd8\x96\xae%\x1e\xb2\xfc\xae+#c.5zY\x1a\xcb\xfe\x97\x8d\xcc\x8es\xfd11\xd0\"M\xebe\xdb\x11\xd0\xd38\xa6!\x97\xd7VQ\x8b\xa9>\x92x\x0f\xc5\xab\xc8\xd7\x03e\xed\x81G\xd2n\xb1Eu\a\x1c0\x82\x05\x84Hn\x9c=\x89\x85\xf7Z\x12\x0exA\xe1\xf9XI\xa1\xcf\xa2\xfe\xd8\xd3\x19\x1ba\x1c\xec\r\xe4\x1e\x19\xb2\x9f\xc9 8!\xe0\xb5\xeaH\x88\x1f\x98\x94\x18Q\xbe\xa1l\x93/\xb4f\xca\x1f\xb3O\r\xa8\x9bv\x05\x8c\x1b[XM\x176\x1c 0\xcd7\xef\x94T\xc8B\\2(b\x16\x85yi7\xa1\x00'/220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x82080, 0x174) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00'], 0x20}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) setgroups(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r8, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000024) 1m4.903264728s ago: executing program 2 (id=1462): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$inet_udplite(0x2, 0x2, 0x88) close_range(r1, r0, 0x2) r2 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x224800, 0x0) pidfd_send_signal(r2, 0xa, 0x0, 0x0) r3 = fcntl$getown(r2, 0x9) sched_setscheduler(r3, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000000)={{}, {}, [], {0x4, 0x6}, [{}], {0x10, 0x4}, {0x20, 0x3}}, 0x2c, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) close(r0) 1m4.416921829s ago: executing program 2 (id=1466): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) r1 = syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f639489314a7a8eda839df64e9f6f6d7072657373"], 0x3, 0x54c, &(0x7f0000000540)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xdb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x300, 0x198, 0xffffffff, 0xffffffff, 0x198, 0xffffffff, 0x268, 0xffffff7a, 0xffffffff, 0x268, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'veth1\x00', 'veth0_to_team\x00', {}, {}, 0x0, 0x0, 0x41}, 0x6, 0x130, 0x198, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x7d}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x2, 0x0, 'snmp_trap\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x360) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r1, @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd22, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000004200), 0x0) r8 = shmget(0x0, 0x2000, 0x2c000400, &(0x7f0000fae000/0x2000)=nil) shmctl$IPC_RMID(r8, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) fcntl$setlease(r9, 0x400, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) inotify_init() 1m3.840616723s ago: executing program 2 (id=1471): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000930d000000000000010000352b531400000000009500000000000000"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffff8001}, 0x18) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x8, 0x0, 0x0, 0x800000000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c56, 0x0, @perf_bp={0x0, 0x3}, 0x104000, 0x5, 0x43a1bd76, 0x7, 0x8000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) rename(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x72051052ae3513ca}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000006c0)='cp3\nW\xb0\x8aQtT\x87\x86\xf5\x13v&[\xa9\nF\xdf\x8d5\xe76\xd5\xe8\x9d\a\x17\x16\xfcc\xba\x1f\x85\'\x84^\xb0\x87m\xaa\x1dsM\x17\x99\xaf\x05\xd8\x96\xae%\x1e\xb2\xfc\xae+#c.5zY\x1a\xcb\xfe\x97\x8d\xcc\x8es\xfd11\xd0\"M\xebe\xdb\x11\xd0\xd38\xa6!\x97\xd7VQ\x8b\xa9>\x92x\x0f\xc5\xab\xc8\xd7\x03e\xed\x81G\xd2n\xb1Eu\a\x1c0\x82\x05\x84Hn\x9c=\x89\x85\xf7Z\x12\x0exA\xe1\xf9XI\xa1\xcf\xa2\xfe\xd8\xd3\x19\x1ba\x1c\xec\r\xe4\x1e\x19\xb2\x9f\xc9 8!\xe0\xb5\xeaH\x88\x1f\x98\x94\x18Q\xbe\xa1l\x93/\xb4f\xca\x1f\xb3O\r\xa8\x9bv\x05\x8c\x1b[XM\x176\x1c 0\xcd7\xef\x94T\xc8B\\2(b\x16\x85yi7\xa1\x00'/220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x82080, 0x174) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00'], 0x20}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) setgroups(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r8, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000024) 1m3.397820642s ago: executing program 2 (id=1476): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x81, @rand_addr=' \x01\x00', 0x3}, 0x1c) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x8, 0x1, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2050}}) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = memfd_create(&(0x7f0000000480)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x03\x00\x00\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xcaX\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\xb1\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedP\xff\xff\xff\xff\xff\xff\xff\xef)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xb4Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x9b-\xe3\xe6R\xa2T\x1e\n!\xad$\x93c\xd3\"\xd6\xa1\xd6\xfc\v\x81\x9e\xc1\xb3T\n\xd9\xff\x18 \xf8\xc4\xef\xd2\xb0\xf8\x80\xb8\x1e\xb7fo\x1c\a\xc9\x1a!D\xde\xc6\xf1\x13\xc2F\xc44A\x1d\xb7\xe6\xfbB\xee4\xa1\xdf+\xa5\xb1\xc2\xfb\xc0\t\x15\x7fA{\xe0\xc7\xe0\x96\xc9\xe6\x8fk\xe6\x87;\x03\xff\xb0\x10\x10\x1e\x14\x99\xc7\xd5)\x8d\xc7\xf0\xfd\xe9d\xc9\xce\x85\x88\x88\xcd\xf6\xb2\xbf\xf8E\xe4\xd8\xd0\xe00\xbd\xc2M\xe7\x1b\xac\xc0\v\xb0\xfc\"\x12\x8d\xa5\x96\x10\xf3\x82~2\xa3[\xa4w]\n\xb1+\xac\bR&B\xebW0\xe2\xffBO9y\x8e\xb6\x03\x99\r', 0x3) r9 = dup(r8) write$binfmt_elf64(r9, &(0x7f0000000c00)=ANY=[@ANYBLOB="7f454c4606ff78a3050000000000000002003e00cd220000c9030000000000004000000000000000ea02000000000000020001000500380001000600b10600040300000081000000ff000000000000000900000000000000070000000000000009"], 0x178) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0xfffffffffffff001}, 0x18) execveat(r9, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x2f08, 0x17f, 0x0, &(0x7f0000000a80)="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", 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffff9}, 0x27) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000000180001002abd7000fcdbdf250a200000fd00ff050010000014000500fefeff"], 0x30}, 0x1, 0x0, 0x0, 0xcdb281c6bf69a511}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 1m3.369135843s ago: executing program 34 (id=1476): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e23, 0x81, @rand_addr=' \x01\x00', 0x3}, 0x1c) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9, 0x8, 0x1, 0x3d4}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x2050}}) io_uring_enter(r3, 0xdb4, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r2, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000040)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r6}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = memfd_create(&(0x7f0000000480)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x03\x00\x00\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xcaX\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\xb1\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedP\xff\xff\xff\xff\xff\xff\xff\xef)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xb4Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x9b-\xe3\xe6R\xa2T\x1e\n!\xad$\x93c\xd3\"\xd6\xa1\xd6\xfc\v\x81\x9e\xc1\xb3T\n\xd9\xff\x18 \xf8\xc4\xef\xd2\xb0\xf8\x80\xb8\x1e\xb7fo\x1c\a\xc9\x1a!D\xde\xc6\xf1\x13\xc2F\xc44A\x1d\xb7\xe6\xfbB\xee4\xa1\xdf+\xa5\xb1\xc2\xfb\xc0\t\x15\x7fA{\xe0\xc7\xe0\x96\xc9\xe6\x8fk\xe6\x87;\x03\xff\xb0\x10\x10\x1e\x14\x99\xc7\xd5)\x8d\xc7\xf0\xfd\xe9d\xc9\xce\x85\x88\x88\xcd\xf6\xb2\xbf\xf8E\xe4\xd8\xd0\xe00\xbd\xc2M\xe7\x1b\xac\xc0\v\xb0\xfc\"\x12\x8d\xa5\x96\x10\xf3\x82~2\xa3[\xa4w]\n\xb1+\xac\bR&B\xebW0\xe2\xffBO9y\x8e\xb6\x03\x99\r', 0x3) r9 = dup(r8) write$binfmt_elf64(r9, &(0x7f0000000c00)=ANY=[@ANYBLOB="7f454c4606ff78a3050000000000000002003e00cd220000c9030000000000004000000000000000ea02000000000000020001000500380001000600b10600040300000081000000ff000000000000000900000000000000070000000000000009"], 0x178) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0xfffffffffffff001}, 0x18) execveat(r9, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r7, 0x2f08, 0x17f, 0x0, &(0x7f0000000a80)="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", 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffff9}, 0x27) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000000180001002abd7000fcdbdf250a200000fd00ff050010000014000500fefeff"], 0x30}, 0x1, 0x0, 0x0, 0xcdb281c6bf69a511}, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 46.228212765s ago: executing program 3 (id=1677): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, 0x0}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x633) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) (fail_nth: 9) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000000c0)="1a0000", 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) semctl$IPC_RMID(0x0, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) 45.155982821s ago: executing program 3 (id=1681): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400"], 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000038000900000000000021000004000000040000800c000380"], 0x24}}, 0x0) (fail_nth: 1) 44.983949838s ago: executing program 3 (id=1683): mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x400, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30, 0x2d]}}}}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a00)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB="095ea6cc22dae5ee2fdd29d9d956785b763e4b12d111089c1a9c00dd201ea80c10466d8f02f143bcd20875bec6222cd680373f55060c5ad80f7fc0392a229a964602c002c985ad93c8f4675d8e47bc8b85e22eb35f86de731db187dcc40eb9a1e773989f7382a707ec9c7176c70534224f68331d0fccbe0fc4f0515bf356eccf13194cf096c58bf66f7b840004dcf7bf0d86a749626c4c55b54053c867bad50ab43d105add7cd33d2328bb3a2ceb44f24bba2baeea91d065dfd25d54ec521cc498e883d5f0616b3639d5936ef91b4407997e86e53fb29eee973f9174704112b843af24d163d36e61", @ANYRESHEX, @ANYRES16, @ANYRESDEC=0x0, @ANYRES16=0x0], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {0x0}, &(0x7f0000000440)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x60, 0x4}}], 0x48, 0x8004}, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r2 = inotify_init1(0x0) read(r2, 0x0, 0x20) close(r2) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000380)=ANY=[@ANYBLOB="025258756b4c8d81ddab6258ec42b7905fcec8db7399"], 0x9, 0x3) socket(0x10, 0x2, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0xa}, 0xff85) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 43.999426031s ago: executing program 3 (id=1699): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x17, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], 0x0, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r0}, 0x10) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0x4, 0x1, 0x6, 0x1, 0x4, 0x2ca, 0x5, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x4, 0x101, 0x1000, 0x9, 0x1, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x763, 0x3, 0x0, 0xe, 0x2b12, 0x7, 0x2, 0x1c00, 0xb, 0x40, 0xbed4, 0x1, 0x8000100, 0x2, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x102, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x9, 0x180000, 0x4007, 0x8b, 0x1030, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x10002, 0xfffffffe, 0x84, 0x100, 0x5, 0x3, 0x81, 0xb, 0x5, 0x20002, 0x7, 0x2, 0xb, 0x4, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x80003b, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000980), r3) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000000, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@barrier}, {@auto_da_alloc}, {@nodioread_nolock}]}, 0x1, 0x59c, &(0x7f0000001840)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x1c3) writev(r6, &(0x7f0000000580)=[{&(0x7f0000000440)="dd", 0x1}], 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f00000005c0)='\"', 0x1, 0x4fed0) sendfile(r7, r7, 0x0, 0xe3aa6ea) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000001e0000000800040000000000080001"], 0x24}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8, 0x0, 0xfffffffffffffffc}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="911034000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socketpair(0x9, 0x3, 0x4, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) open_by_handle_at(r9, &(0x7f0000000540)=@reiserfs_6={0x18, 0x6, {0x5, 0x3, 0x0, 0x1, 0x2, 0x800}}, 0x10000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="800000007044040008001b0005000000300012790b000100697036746e6c"], 0x58}, 0x1, 0x0, 0x0, 0x400c054}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e24, 0x6, @ipv4={'\x00', '\xff\xff', @loopback}, 0x6}}, 0xf, 0x1c0}, 0x90) 43.77113979s ago: executing program 3 (id=1705): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x1, {}, 0xff}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000000)={&(0x7f0000000440)={0x1d, r2, 0x2, {0x0, 0xf0, 0x5}, 0xfe}, 0x18, &(0x7f0000000180)={0x0, 0x20}, 0x4, 0x0, 0x0, 0x24004045}, 0x8001) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000500)="e08b2fce275b75b6562af5fb77e21abcab71f04b60616815d31f784cd1f902031d6f24cf306bc4a2ed7865cc75da280fbfc87852a4d3aaa9cff21662563b5e7155af41cc92b55374cfbd7e9abfef3156d886e0538b4804f47ae9b7922cce0efb0cf28d2da0fe57fdb5b3b6879150322dc95f754476cc8339761a7f8cfbe5898d751ad0", 0x83, 0x200008d0, &(0x7f00000002c0)={0x11, 0x15, r2, 0x1, 0x68, 0x6, @link_local}, 0x14) 42.865958159s ago: executing program 3 (id=1708): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000004c0)='kmem_cache_free\x00', r1, 0x0, 0x400000}, 0x18) mq_unlink(0x0) 42.83840342s ago: executing program 35 (id=1708): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000004c0)='kmem_cache_free\x00', r1, 0x0, 0x400000}, 0x18) mq_unlink(0x0) 2.288519662s ago: executing program 5 (id=2286): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7ffc0002}]}) r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r2}, &(0x7f0000001c00)=0x8000000, &(0x7f0000001c40)=r3}, 0x20) dup3(r0, r1, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 2.255709653s ago: executing program 5 (id=2288): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) listen(r0, 0x5) r1 = socket(0x28, 0x5, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x18) setrlimit(0x40000000000008, &(0x7f0000000000)) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002480)=@deltfilter={0x24, 0x2d, 0x4, 0x70bd2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff2}, {0x1, 0x2}, {0x4, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004885}, 0x40004) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x79e}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 2.197173436s ago: executing program 5 (id=2290): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xc2d3, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) r3 = timerfd_create(0x0, 0x0) timerfd_gettime(r3, &(0x7f0000000040)) 2.123118839s ago: executing program 5 (id=2291): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) socket$xdp(0x2c, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0xb, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@fallback=r3, r3, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="2f0000001c"], 0x20) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000008c0d00000000000026bddb2d05d145739b941da3eed39a2f2b10b5ba", @ANYRES32, @ANYRES8=r1], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000000140)) setsockopt$sock_cred(r6, 0x1, 0x11, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r9, 0x421, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc35d4f6d52288271}, 0x200048c4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x4, &(0x7f0000000240), 0x22, 0x4d5, &(0x7f0000000580)="$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") r10 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x3) ioctl$EXT4_IOC_MOVE_EXT(r11, 0xc028660f, &(0x7f0000000080)={0x3920e, r10, 0xfffffffe, 0x0, 0x42}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="c3c700fe0000000072101a000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 1.711170186s ago: executing program 8 (id=2297): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x70) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@nodioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42041, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 1.63029301s ago: executing program 8 (id=2298): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x1d8, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1d8, 0x178, 0x178, 0x1d8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x1, "7a7d0d9452729a5afa3851200a44a3d28da04828d1768c081f126a6bc527"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x238) 1.479512386s ago: executing program 7 (id=2301): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x89, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0, 0x0, 0x9}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400"], 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) 1.461696417s ago: executing program 7 (id=2302): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000930d000000000000010000352b531400000000009500000000000000"], &(0x7f0000000800)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe3}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xffffffffffff8001}, 0x18) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x8, 0x0, 0x0, 0x800000000000009, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c56, 0x0, @perf_bp={0x0, 0x3}, 0x104000, 0x5, 0x43a1bd76, 0x7, 0x8000000000000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) rename(0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0xbf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x72051052ae3513ca}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000006c0)='cp3\nW\xb0\x8aQtT\x87\x86\xf5\x13v&[\xa9\nF\xdf\x8d5\xe76\xd5\xe8\x9d\a\x17\x16\xfcc\xba\x1f\x85\'\x84^\xb0\x87m\xaa\x1dsM\x17\x99\xaf\x05\xd8\x96\xae%\x1e\xb2\xfc\xae+#c.5zY\x1a\xcb\xfe\x97\x8d\xcc\x8es\xfd11\xd0\"M\xebe\xdb\x11\xd0\xd38\xa6!\x97\xd7VQ\x8b\xa9>\x92x\x0f\xc5\xab\xc8\xd7\x03e\xed\x81G\xd2n\xb1Eu\a\x1c0\x82\x05\x84Hn\x9c=\x89\x85\xf7Z\x12\x0exA\xe1\xf9XI\xa1\xcf\xa2\xfe\xd8\xd3\x19\x1ba\x1c\xec\r\xe4\x1e\x19\xb2\x9f\xc9 8!\xe0\xb5\xeaH\x88\x1f\x98\x94\x18Q\xbe\xa1l\x93/\xb4f\xca\x1f\xb3O\r\xa8\x9bv\x05\x8c\x1b[XM\x176\x1c 0\xcd7\xef\x94T\xc8B\\2(b\x16\x85yi7\xa1\x00'/220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x82080, 0x174) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB=' \x00\x00', @ANYRES16=r6, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00'], 0x20}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) setgroups(0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) sendmsg$inet(r8, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000400)='\b\x00', 0x2}, {0x0}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000024) 1.458895977s ago: executing program 8 (id=2303): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x1d8, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1d8, 0x178, 0x178, 0x1d8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x1, "7a7d0d9452729a5afa3851200a44a3d28da04828d1768c081f126a6bc527"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x238) 1.432296448s ago: executing program 8 (id=2304): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sched_switch\x00', r1, 0x0, 0x80000001}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0xad, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd672d5115007700fffc010000000000000000000000000001ff0200000000000000000000000000013200"], 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 1.219146917s ago: executing program 5 (id=2306): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x89, '\x00', 0x0, 0x2}, 0x94) getpgrp(0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000200)=0x2, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000180)=[{0x61}]}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x38, r1, 0x7, 0x0, 0xfffffffe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) 1.189737109s ago: executing program 5 (id=2309): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x10, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_procfs(0x0, &(0x7f00000006c0)='clear_refs\x00') pread64(r2, 0x0, 0x0, 0x100008) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x54, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x2c, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15946395916e2b388abc3d6ce2316334e8278ad"}, @NFTA_MATCH_NAME={0xa, 0x1, 'limit\x00'}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) ppoll(0x0, 0x0, &(0x7f0000000240), 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x0) syz_usb_connect(0x2, 0xfffffffffffffe86, 0x0, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r5, &(0x7f0000000300)="3d03aaf8d85676cbb59a3873d9488bc98be4b83b1c4e5a59de5c5427008c2223", &(0x7f0000000340)=@tcp6=r7}, 0x20) r8 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[@ANYBLOB="36400000250091"], 0xfe33) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r5, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYRESOCT=r8, @ANYRES32=r6], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x94) 1.135191541s ago: executing program 7 (id=2311): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x6}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x1d8, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1d8, 0x178, 0x178, 0x1d8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x1, "7a7d0d9452729a5afa3851200a44a3d28da04828d1768c081f126a6bc527"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x238) 1.017389556s ago: executing program 7 (id=2314): r0 = perf_event_open(0x0, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f00000003c0)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180040000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r9, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0xfffffffffffffd5e) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) fcntl$getown(r1, 0x9) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000380)={'syztnl2\x00', 0x0, 0x8, 0x41, 0xf, 0x4, {{0x19, 0x4, 0x1, 0x31, 0x64, 0x65, 0x0, 0x5, 0x2f, 0x0, @broadcast, @local, {[@timestamp={0x44, 0xc, 0x9e, 0x0, 0x6, [0x0, 0x2]}, @end, @timestamp_addr={0x44, 0xc, 0xe3, 0x1, 0x0, [{@multicast1, 0x8}]}, @timestamp_prespec={0x44, 0xc, 0xe4, 0x3, 0x0, [{@broadcast, 0x81}]}, @timestamp_prespec={0x44, 0x14, 0x36, 0x3, 0xc, [{@broadcast, 0x9}, {@rand_addr=0x64010101, 0x2}]}, @lsrr={0x83, 0x17, 0xf9, [@broadcast, @multicast2, @broadcast, @dev={0xac, 0x14, 0x14, 0x1a}, @remote]}]}}}}}) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="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"/326, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000500"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x19, &(0x7f0000000700)=ANY=[@ANYBLOB="1800f9ff00d98ca3959e4bc5fdb3fe3753bd34ab1a3a455193e7de9cee6cf916bcf994df96af88ebaf0704249113bec0e576c252ccb22943f77cbaf002dd343aa92f0f2f0470b970d082e9ff596cb6a4d4f88c87aec7200f5652bd13a1525f5ffa2d0a", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000850000000600000018000000000000000000000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x800, 0x15, &(0x7f00000001c0)=""/21, 0x41000, 0x26, '\x00', r11, 0x0, r0, 0x8, &(0x7f0000000500)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x6, 0x8, 0x7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r12, r8, r8, r8, r8, r8], 0x0, 0x10, 0xffffffff}, 0x94) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000000), 0x4) dup2(r7, r1) 457.96659ms ago: executing program 6 (id=2328): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000b50000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$inet6(r1, &(0x7f0000000040)={&(0x7f0000000000)={0xa, 0xfffe, 0x0, @private2, 0x5}, 0x1c, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="280000000000000029000000390000008402020100000000ff02000000000000000000000000310118000000000000002900000003"], 0x40}, 0x24004800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='kfree\x00'}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000020220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 425.556341ms ago: executing program 8 (id=2329): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)=r2}, 0x20) 425.169241ms ago: executing program 0 (id=2330): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x70) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@nodioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42041, 0x0) pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 398.124592ms ago: executing program 6 (id=2331): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000500)="e08b2fce275b75b6562af5fb77e21abcab71f04b60616815d31f784cd1f902031d6f24cf306bc4a2ed7865cc75da280fbfc87852a4d3aaa9cff21662563b5e7155af41cc92b55374cfbd7e9abfef3156d886e0538b4804f47ae9b7922cce0efb0cf28d2da0fe57fdb5b3b6879150322dc95f754476cc8339761a7f8cfbe5898d751ad0", 0x83, 0x200008d0, &(0x7f00000002c0)={0x11, 0x15, r2, 0x1, 0x68, 0x6, @link_local}, 0x14) 385.744923ms ago: executing program 6 (id=2332): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x70) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000200)={[{@nouid32}, {@nodioread_nolock}, {@noquota}, {@delalloc}, {@journal_dev={'journal_dev', 0x3d, 0x9}}, {@nodioread_nolock}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$eJzs3T1sG3UbAPDnznHTj7xv+krvK72gDhUgFamqk/QDClO7IipV6oDEApHjRlWcuIodaKJIpHuF6IAAdSkbDIwgBgbEwsjKwseMVNEIpKYDGDk+p2nqFCfEMcS/n3TJ/3939vP8fX7OvtOdHEDfOtr4k0Y8EREXk4jhdcsGIlt4tLneyvJi8f7yYjGJev3Sz0kkEXFvebHYWj/J/h+KiKWI+H9EfJWPOJ6uPeW+VqM6vzA1Xi6XZrP+SG366kh1fuHElenxydJkaebU8y+cOXv6zNjJsfXp3q+v7+W3NtYb3998+8Y3L92++fEnR5aK744ncS6GsmXrx7GTmq9JPs5tmH+6G8F6KOl1AmxLLqvzRin9L4Yjl1V9O/X1O4fBXUkP6KL6YER9zbom0AcSRQ99qvU9oHH825p28/vHnfPNA5BG3JXlxeJb0Yo/0Dw3EftXj00O/pI8dGTSON48vJuJsictXY+I0YGBR9//Sfb+277RnUiQrvryfHNDPbr907X9T7TZ/wy1zp3+Ra3930q2/1tpEz+3yf7vYocxfnv1xw82jX99MJ5sGz9Zi5+0iZ9GxOsdxr/1yudnN1tW/zDiWLSP35I8/vzwyOUr5dJo82/bGF8cO/Li5uOPOLhJ/OY52/2riawf/74sp7TD8X/29adPLT0m/rNPP377t3v9D0TEOx3G/8+9j17ebNmd68ndxreArW7/JPJxu8P4z507+l3WdNYQAAAAAAAAAAB2ULp6LVuSFtbaaVooNO/h/W8cTMuVau345crczETzmrfDkU9bV1oNN/tJoz+WXY/b6p/c0D+VywLmDqz2C8VKeaLHYwcAAAAAAAAAAAAAAAAAAIC/i0Mb7v//Nbd6///Gn6sG9qrNf/Ib2OvUP/Svh+s/6VkewO7z+Q99q67+oX+pf+hf6h/6l/qH/tW2/g/sfh7A7vP5D/1L/QMAAAAAAAAAAAAAAAAAAAAAAAAAQFdcvHChMdXvLy8WG/2Jgfm5qcobJyZK1anC9FyxUKzMXi1MViqT5VKhWJn+s+dLKpWrozEzd22kVqrWRqrzC69NV+ZmWr8pWsp3fUQAAAAAAAAAAAAAAAAAAADwzzO0OiVpISLf7KdpoRDxr4g4nERy+Uq5NBoR/46Ib3P5wUZ/rNdJAwAAAAAAAAAAAAAAAAAAwB5TnV+YGi+XS7PdawxkoTp71A+1ruYzsJWVI2JpZ9NoPOOWH5XPXsDubqY+aeQ6fB/2faOHOyUAAAAAAAAAAAAAAAAAAOhTD2767fQRv3c3IQAAAAAAAAAAAAAAAAAAAOhL6U9JRDSmY8PPDG1cui9Zya3+j4g3b11679p4rTY71ph/d21+7f1s/sle5A90qlWnaUQ06hgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4oDq/MDVeLpdmt9kY7GCdXo8RAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYDv+CAAA//9bQM66") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42041, 0x0) pwritev2(r2, &(0x7f00000001c0), 0x0, 0xe7b, 0x0, 0x0) 376.271214ms ago: executing program 0 (id=2333): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000cc0)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x89, '\x00', 0x0, 0x2}, 0x94) getpgrp(0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000200)=0x2, 0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000280)={0x1, &(0x7f0000000180)=[{0x61}]}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x38, r1, 0x7, 0x0, 0xfffffffe, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) 314.296926ms ago: executing program 8 (id=2334): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x7, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r2, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x2}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r3}, 0x10) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r4, 0x0, 0x138) r5 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r5, 0xffffffffffffffff, 0x4}, 0x10) write$UHID_CREATE(r5, &(0x7f00000008c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000580)=""/154, 0x9a, 0x94, 0x9, 0x856, 0x6, 0x6}}, 0x120) write$UHID_DESTROY(r4, &(0x7f0000000340), 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="05000000fb13f975ff0f00000700000000000020", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r9}, 0x10) setitimer(0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0) r10 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) readv(r10, &(0x7f00000000c0)=[{&(0x7f0000001000)=""/4096, 0x1000}], 0x1) write$evdev(r10, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) bpf$PROG_LOAD(0x5, 0x0, 0x0) 267.811468ms ago: executing program 6 (id=2335): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x1d8, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1d8, 0x178, 0x178, 0x1d8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x1, "7a7d0d9452729a5afa3851200a44a3d28da04828d1768c081f126a6bc527"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x238) 267.361198ms ago: executing program 0 (id=2336): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000480)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x38, 0x2}, @cond=[{0x2, 0x5, 0x40, 0x9, 0x8001, 0xfc01}, {0x9, 0x6, 0x401, 0x3, 0x2000, 0x8}]}) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) bind$xdp(r4, &(0x7f00000002c0)={0x2c, 0xe, 0x0, 0x5, r4}, 0x10) sendmmsg$unix(r3, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x7, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) readlink(&(0x7f0000000080)='./cgroup\x00', &(0x7f00000005c0)=""/15, 0xf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r2}, 0x10) ioctl$VT_RESIZEX(r0, 0x4bfa, &(0x7f00000006c0)={0x4, 0x66, 0x0, 0x0, 0x132, 0x3}) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/reserved_size', 0x141a82, 0x0) sendfile(r5, r5, 0x0, 0x3) 248.002078ms ago: executing program 0 (id=2337): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) socket$l2tp6(0xa, 0x2, 0x73) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x24048011}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000020220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 245.636229ms ago: executing program 6 (id=2338): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6c, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffbf8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) getcwd(&(0x7f0000000140)=""/237, 0xfffffee1) 222.23572ms ago: executing program 6 (id=2339): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sched_switch\x00', r1, 0x0, 0x80000001}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0xad, &(0x7f0000000380)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd672d5115007700fffc010000000000000000000000000001ff0200000000000000000000000000013200"], 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0xe, 0x0, &(0x7f00000003c0)="131c8701feaa16bca4ac74ab821d", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) 211.90592ms ago: executing program 0 (id=2340): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x6}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x8, 0x3, 0x1d8, 0x128, 0x43, 0xa0, 0x128, 0x98, 0x1d8, 0x178, 0x178, 0x1d8, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth0_vlan\x00', 'bond0\x00', {0xff}, {}, 0x0, 0x2}, 0x12a, 0x70, 0x90, 0x0, {0x0, 0x7a010000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x3, 0x1, "7a7d0d9452729a5afa3851200a44a3d28da04828d1768c081f126a6bc527"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x238) 184.592932ms ago: executing program 0 (id=2341): mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x400, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '', @val={0x3a, [0x30, 0x2d]}}}}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a00)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX=0x0, @ANYRES32=0x0, @ANYBLOB, @ANYRESHEX, @ANYRES16, @ANYRESDEC=0x0, @ANYRES16=0x0], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x3}, {0x0}, &(0x7f0000000440)=[{&(0x7f0000000a00)=""/4096, 0x1000}], 0x1, 0x60, 0x4}}], 0x48, 0x8004}, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000140)='./file0\x00', 0x84000221) read(r2, 0x0, 0x20) close(r2) lsetxattr$security_evm(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000380)=ANY=[@ANYBLOB="025258756b4c8d81ddab6258ec42b7905fcec8db7399"], 0x9, 0x3) socket(0x10, 0x2, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0xa}, 0xff85) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) set_mempolicy_home_node(&(0x7f0000146000/0x1000)=nil, 0x1000, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) 18.870439ms ago: executing program 7 (id=2342): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ff"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000500)="e08b2fce275b75b6562af5fb77e21abcab71f04b60616815d31f784cd1f902031d6f24cf306bc4a2ed7865cc75da280fbfc87852a4d3aaa9cff21662563b5e7155af41cc92b55374cfbd7e9abfef3156d886e0538b4804f47ae9b7922cce0efb0cf28d2da0fe57fdb5b3b6879150322dc95f754476cc8339761a7f8cfbe5898d751ad0", 0x83, 0x200008d0, &(0x7f00000002c0)={0x11, 0x15, r2, 0x1, 0x68, 0x6, @link_local}, 0x14) 0s ago: executing program 7 (id=2343): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc"], 0x0}, 0x94) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r1, &(0x7f0000000740)=[{&(0x7f0000000180)=""/16, 0x10}, {0x0}], 0x2, 0xfff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7f}, 0x18) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x4f, &(0x7f00000002c0)={@rand_addr, @private, 0x0}, &(0x7f0000000600)=0xc) r5 = open(&(0x7f0000002ec0)='./bus\x00', 0x145143, 0x1) sendfile(r5, r5, 0x0, 0x800000009) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x5, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x19, 0x21, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x4}, @jmp={0x5, 0x1, 0x0, 0x3, 0x6, 0xfffffffffffffffe, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x37}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000280)='syzkaller\x00', 0x7, 0xb4, &(0x7f00000003c0)=""/180, 0x40f00, 0x30, '\x00', r4, @fallback, r5, 0x8, &(0x7f0000000640)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000680)={0x2, 0xd, 0x200, 0x9}, 0x10, r6, r3, 0x0, &(0x7f00000006c0)=[r1], 0x0, 0x10, 0x8}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x12, 0x10, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xe}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000740)='GPL\x00', 0x75, 0x39, &(0x7f0000000780)=""/57, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x3, 0xe, 0xbd0c}, 0x10, 0x0, r0, 0xa, 0x0, &(0x7f0000000840)=[{0x0, 0x5, 0xd}, {0x5, 0x3, 0x0, 0xa}, {0x1, 0x3, 0xe, 0x3}, {0x0, 0x4, 0x3, 0x7}, {0x2, 0x3, 0xe, 0xa}, {0x1, 0x1, 0xa, 0xa}, {0x1, 0x4, 0x0, 0x9}, {0x1, 0x3, 0x8, 0x4}, {0x1, 0x4, 0x6, 0xc}, {0x3, 0x1, 0x4, 0x3}], 0x10, 0xa}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x0, &(0x7f0000000500), &(0x7f0000000640)='GPL\x00', 0xe, 0xb, &(0x7f0000000680)=""/11, 0x0, 0x40, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r7, 0x3, 0x0, &(0x7f00000009c0)=[{0x0, 0x5, 0x7, 0xa}, {0x4, 0x5, 0x1, 0x1}, {0x1, 0x5, 0xf, 0x1}], 0x10, 0x5}, 0x94) syz_clone(0x8000, &(0x7f0000000280)="d9b2360985904cbc21866d5057f8389dba34cc1163fc775a0dc45ecb194d9317f564d65b3f0ca054319e91af12c301f19e2f0c4d73577f5797140a35cab7afc02a071850f57ff3c10aa1bdb10ac375f400cfc14b596da139ce93e469573283712869f3ecc6df79a8673c7edd254e529dde44ea2b582fa84a69bee254482b86efea890352277606603264753f91060e0214a0b54d397ee1a2a9a6d0ef5323e16908e8b64768b4152983a2a06441872e6ea769a66a45a43eab06c4c8f68d776a47b5bc61e7e29014305253bf78b1b2628ecc9b3e14", 0xd4, &(0x7f0000000040), &(0x7f0000000140), &(0x7f0000000380)="30d8227fbdba796a2718f75d19d219a7b8891dd00fb338ee977ea4b3eabaeab1bdf4720f93b57777c5d0d93e22baec08bd31a3bdc74c7a27b48ac0c0c55f6bf01612be56878c63cb696f9ccdece424fa75d5a7bbc1a5d14619da7978a584051e311fd65d6eb4d8554e26da79ff5ebf1e3655f1f3ab80b5ff7cc0200e47afcf6f") perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x402, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r11, 0xc0189374, &(0x7f0000000440)={{0x1, 0x1, 0x18, r0, {0x1}}, '\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10}, 0x10) r12 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000008000000001000000ffff000001"], 0x50) preadv2(r12, &(0x7f0000000580)=[{&(0x7f0000003280)=""/4108, 0x1000}], 0x10000000000000ec, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): . [ 167.092675][ T8788] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1701'. [ 167.118455][ T8790] tmpfs: Bad value for 'mpol' [ 167.132035][ T8791] loop3: detected capacity change from 0 to 1024 [ 167.175713][ T8791] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 167.231020][ T8786] EXT4-fs error (device loop3): ext4_map_blocks:813: inode #15: comm syz.3.1699: lblock 0 mapped to illegal pblock 0 (length 1) [ 167.279166][ T3326] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /325/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0 [ 167.301062][ T3326] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /325/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 167.322048][ T3326] EXT4-fs error (device loop3): ext4_empty_dir:3120: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 167.341057][ T3326] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /325/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 167.519226][ T3326] EXT4-fs error (device loop3): ext4_empty_dir:3120: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 167.538210][ T3326] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /325/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 167.608318][ T3326] EXT4-fs error (device loop3): ext4_empty_dir:3120: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 167.627503][ T3326] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 37: comm syz-executor: path /325/file1/lost+found: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=0, rec_len=1279, size=1024 fake=0 [ 167.665669][ T3326] EXT4-fs error (device loop3): ext4_empty_dir:3120: inode #11: block 37: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=5120, inode=0, rec_len=1279, size=1024 fake=0 [ 168.093985][ T3430] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 168.106397][ T3430] EXT4-fs (loop3): This should not happen!! Data will be lost [ 168.106397][ T3430] [ 168.118230][ T8126] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 117 [ 168.130499][ T8126] EXT4-fs (loop3): This should not happen!! Data will be lost [ 168.130499][ T8126] [ 168.172133][ T3326] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 168.528380][ T8813] chnl_net:caif_netlink_parms(): no params data found [ 168.601640][ T8813] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.601670][ T8813] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.601790][ T8813] bridge_slave_0: entered allmulticast mode [ 168.602639][ T8813] bridge_slave_0: entered promiscuous mode [ 168.638066][ T8813] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.638093][ T8813] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.638314][ T8813] bridge_slave_1: entered allmulticast mode [ 168.638919][ T8813] bridge_slave_1: entered promiscuous mode [ 168.676228][ T8838] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1712'. [ 168.685285][ T8838] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1712'. [ 168.698720][ T8813] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.700203][ T8813] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.737420][ T8813] team0: Port device team_slave_0 added [ 168.738592][ T8813] team0: Port device team_slave_1 added [ 168.765473][ T8813] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.772468][ T8813] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.772529][ T8813] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.834518][ T8813] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.834531][ T8813] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.834620][ T8813] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.893001][ T8813] hsr_slave_0: entered promiscuous mode [ 168.893568][ T8813] hsr_slave_1: entered promiscuous mode [ 168.893957][ T8813] debugfs: 'hsr0' already exists in 'hsr' [ 168.910721][ T8813] Cannot create hsr debugfs directory [ 168.946962][ T8844] tmpfs: Bad value for 'mpol' [ 169.049794][ T8813] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 169.058690][ T8813] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 169.067670][ T8813] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 169.076457][ T8813] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 169.116023][ T8855] tmpfs: Bad value for 'mpol' [ 169.133198][ T8813] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.138515][ T8813] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.151766][ T8126] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.151795][ T8126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.158778][ T7992] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.173684][ T7992] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.269078][ T29] kauditd_printk_skb: 536 callbacks suppressed [ 169.269092][ T29] audit: type=1326 audit(165.032:18273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8861 comm="syz.7.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214ca0f749 code=0x7ffc0000 [ 169.305212][ T8813] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.312858][ T29] audit: type=1326 audit(165.070:18274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8861 comm="syz.7.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214ca0f749 code=0x7ffc0000 [ 169.335841][ T29] audit: type=1326 audit(165.070:18275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8861 comm="syz.7.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f214ca0f749 code=0x7ffc0000 [ 169.358832][ T29] audit: type=1326 audit(165.070:18276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8861 comm="syz.7.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214ca0f749 code=0x7ffc0000 [ 169.359176][ T8862] loop7: detected capacity change from 0 to 8192 [ 169.381753][ T29] audit: type=1326 audit(165.070:18277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8861 comm="syz.7.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f214ca0f749 code=0x7ffc0000 [ 169.411048][ T29] audit: type=1326 audit(165.070:18278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8861 comm="syz.7.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214ca0f749 code=0x7ffc0000 [ 169.433979][ T29] audit: type=1326 audit(165.070:18279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8861 comm="syz.7.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f214ca0f749 code=0x7ffc0000 [ 169.456956][ T29] audit: type=1326 audit(165.070:18280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8861 comm="syz.7.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214ca0f749 code=0x7ffc0000 [ 169.479886][ T29] audit: type=1326 audit(165.070:18281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8861 comm="syz.7.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f214ca0f749 code=0x7ffc0000 [ 169.502794][ T29] audit: type=1326 audit(165.070:18282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8861 comm="syz.7.1717" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f214ca0f783 code=0x7ffc0000 [ 169.521424][ T8813] veth0_vlan: entered promiscuous mode [ 169.534872][ T8813] veth1_vlan: entered promiscuous mode [ 169.552370][ T8813] veth0_macvtap: entered promiscuous mode [ 169.560006][ T8813] veth1_macvtap: entered promiscuous mode [ 169.566101][ T8862] loop7: p1 < > p2 < > p3 p4 < > [ 169.571159][ T8862] loop7: partition table partially beyond EOD, truncated [ 169.573290][ T8813] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.578438][ T8862] loop7: p1 start 67108864 is beyond EOD, truncated [ 169.590869][ T8813] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.600509][ T8862] loop7: p3 start 100859904 is beyond EOD, truncated [ 169.607979][ T1084] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.619262][ T1084] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.628636][ T1084] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.639336][ T1084] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.675910][ T8878] tmpfs: Bad value for 'mpol' [ 169.709575][ T8605] Bluetooth: hci0: command 0x1003 tx timeout [ 169.715625][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 169.849531][ T8886] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1720'. [ 169.858590][ T8886] IPVS: Error connecting to the multicast addr [ 169.897200][ T8891] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1722'. [ 169.906674][ T8891] IPVS: Error connecting to the multicast addr [ 169.958068][ T8893] loop7: detected capacity change from 0 to 512 [ 170.045622][ T8899] loop6: detected capacity change from 0 to 512 [ 170.183682][ T8893] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.211758][ T8899] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 170.245889][ T8899] EXT4-fs (loop6): mount failed [ 170.386294][ T8911] loop5: detected capacity change from 0 to 8192 [ 170.436157][ T8911] loop5: p1 < > p2 < > p3 p4 < > [ 170.441229][ T8911] loop5: partition table partially beyond EOD, truncated [ 170.448994][ T8911] loop5: p1 start 67108864 is beyond EOD, truncated [ 170.456623][ T8911] loop5: p3 start 100859904 is beyond EOD, truncated [ 170.887620][ T8899] netlink: 'syz.6.1724': attribute type 4 has an invalid length. [ 171.020225][ T8916] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1732'. [ 171.038888][ T8918] loop8: detected capacity change from 0 to 512 [ 171.052876][ T8916] IPVS: Error connecting to the multicast addr [ 171.064131][ T8918] EXT4-fs warning (device loop8): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 171.118194][ T8918] EXT4-fs (loop8): mount failed [ 171.128011][ T8925] tmpfs: Bad value for 'mpol' [ 171.165643][ T8918] netlink: 'syz.8.1731': attribute type 4 has an invalid length. [ 171.266122][ T8931] loop0: detected capacity change from 0 to 512 [ 171.294788][ T8931] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 171.345372][ T8931] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.414166][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.527143][ T8949] tmpfs: Bad value for 'mpol' [ 171.557658][ T8951] tmpfs: Bad value for 'mpol' [ 171.871296][ T8955] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8955 comm=syz.6.1745 [ 171.896201][ T8955] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=8955 comm=syz.6.1745 [ 171.982903][ T8962] loop8: detected capacity change from 0 to 1024 [ 171.998129][ T8962] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 172.023929][ T58] EXT4-fs error (device loop8): ext4_map_blocks:813: inode #15: block 3: comm kworker/u8:4: lblock 3 mapped to illegal pblock 3 (length 3) [ 172.039110][ T58] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 172.051408][ T58] EXT4-fs (loop8): This should not happen!! Data will be lost [ 172.051408][ T58] [ 172.062611][ T8058] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.071798][ T1084] EXT4-fs error (device loop8): ext4_map_blocks:813: inode #15: block 8: comm kworker/u8:7: lblock 8 mapped to illegal pblock 8 (length 8) [ 172.087172][ T1084] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 172.099474][ T1084] EXT4-fs (loop8): This should not happen!! Data will be lost [ 172.099474][ T1084] [ 172.113881][ T8813] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 172.147706][ T8974] tmpfs: Bad value for 'mpol' [ 172.518071][ T8989] loop5: detected capacity change from 0 to 512 [ 172.535657][ T8989] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 172.550824][ T8989] EXT4-fs (loop5): mount failed [ 172.563686][ T8989] netlink: 'syz.5.1756': attribute type 4 has an invalid length. [ 172.601778][ T8995] loop5: detected capacity change from 0 to 512 [ 172.635976][ T8995] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.666647][ T8995] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 172.682484][ T8995] 9pnet_fd: Insufficient options for proto=fd [ 172.696360][ T7422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.712914][ T9000] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1759'. [ 172.722005][ T9000] IPVS: Error connecting to the multicast addr [ 172.797377][ T9001] loop6: detected capacity change from 0 to 512 [ 172.822414][ T9001] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 173.188601][ T9009] loop7: detected capacity change from 0 to 512 [ 173.206685][ T9009] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 173.226955][ T9009] EXT4-fs (loop7): mount failed [ 173.737457][ T997] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.775124][ T9009] netlink: 'syz.7.1761': attribute type 4 has an invalid length. [ 173.819850][ T997] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.848123][ T9027] tmpfs: Bad value for 'mpol' [ 173.901768][ T997] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.969220][ T997] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.995909][ T8733] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 174.125459][ T9036] loop5: detected capacity change from 0 to 512 [ 174.153763][ T997] bridge_slave_1: left allmulticast mode [ 174.159555][ T997] bridge_slave_1: left promiscuous mode [ 174.165311][ T997] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.189290][ T9036] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 174.198033][ T9036] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 174.231837][ T9034] loop8: detected capacity change from 0 to 8192 [ 174.262363][ T997] bridge_slave_0: left promiscuous mode [ 174.268168][ T997] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.297106][ T9036] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.1770: Allocating blocks 41-42 which overlap fs metadata [ 174.316782][ T9034] loop8: p1 < > p2 < > p3 p4 < > [ 174.321924][ T9034] loop8: partition table partially beyond EOD, truncated [ 174.360956][ T9034] loop8: p1 start 67108864 is beyond EOD, truncated [ 174.370367][ T9036] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.1770: Allocating blocks 41-42 which overlap fs metadata [ 174.399303][ T9034] loop8: p3 start 100859904 is beyond EOD, truncated [ 174.427084][ T9036] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.1770: Failed to acquire dquot type 1 [ 174.454332][ T9036] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 174.469613][ T9036] EXT4-fs error (device loop5): ext4_do_update_inode:5628: inode #12: comm syz.5.1770: corrupted inode contents [ 174.627534][ T997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.655247][ T997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.679862][ T997] bond0 (unregistering): Released all slaves [ 174.686650][ T9036] EXT4-fs error (device loop5): ext4_dirty_inode:6513: inode #12: comm syz.5.1770: mark_inode_dirty error [ 174.717668][ T9036] EXT4-fs error (device loop5): ext4_do_update_inode:5628: inode #12: comm syz.5.1770: corrupted inode contents [ 174.752333][ T9036] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.1770: mark_inode_dirty error [ 174.753991][ T7895] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 174.764058][ T9036] EXT4-fs error (device loop5): ext4_do_update_inode:5628: inode #12: comm syz.5.1770: corrupted inode contents [ 174.835893][ T9036] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 174.845384][ T9036] EXT4-fs error (device loop5): ext4_do_update_inode:5628: inode #12: comm syz.5.1770: corrupted inode contents [ 174.872799][ T9036] EXT4-fs error (device loop5): ext4_truncate:4633: inode #12: comm syz.5.1770: mark_inode_dirty error [ 174.884142][ T9036] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 174.893562][ T9036] EXT4-fs (loop5): 1 truncate cleaned up [ 174.905952][ T9036] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 174.917608][ T9053] tmpfs: Bad value for 'mpol' [ 174.929566][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 174.929599][ T29] audit: type=1326 audit(170.336:18597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9046 comm="syz.7.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214ca0f749 code=0x7ffc0000 [ 174.958650][ T29] audit: type=1326 audit(170.336:18598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9046 comm="syz.7.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f214ca0f749 code=0x7ffc0000 [ 174.981594][ T29] audit: type=1326 audit(170.336:18599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9046 comm="syz.7.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214ca0f749 code=0x7ffc0000 [ 175.004595][ T29] audit: type=1326 audit(170.336:18600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9046 comm="syz.7.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f214ca0f749 code=0x7ffc0000 [ 175.039195][ T997] hsr_slave_0: left promiscuous mode [ 175.055064][ T997] hsr_slave_1: left promiscuous mode [ 175.075574][ T997] veth1_macvtap: left promiscuous mode [ 175.081088][ T997] veth0_macvtap: left promiscuous mode [ 175.087742][ T7422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 175.097473][ T997] veth1_vlan: left promiscuous mode [ 175.102754][ T997] veth0_vlan: left promiscuous mode [ 175.211766][ T997] team0 (unregistering): Port device team_slave_1 removed [ 175.234675][ T997] team0 (unregistering): Port device team_slave_0 removed [ 175.242907][ T3430] smc: removing ib device !yz! [ 175.316866][ T29] audit: type=1326 audit(170.692:18601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9059 comm="syz.5.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c69ff749 code=0x7ffc0000 [ 175.355853][ T29] audit: type=1326 audit(170.692:18602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9059 comm="syz.5.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c69ff749 code=0x7ffc0000 [ 175.378867][ T29] audit: type=1326 audit(170.720:18603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9059 comm="syz.5.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fd8c69ff749 code=0x7ffc0000 [ 175.401828][ T29] audit: type=1326 audit(170.720:18604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9059 comm="syz.5.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c69ff749 code=0x7ffc0000 [ 175.424794][ T29] audit: type=1326 audit(170.720:18605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9059 comm="syz.5.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c69ff749 code=0x7ffc0000 [ 175.447976][ T29] audit: type=1326 audit(170.729:18606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9059 comm="syz.5.1776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd8c69fdf90 code=0x7ffc0000 [ 175.475092][ T9060] hub 9-0:1.0: USB hub found [ 175.484334][ T9060] hub 9-0:1.0: 8 ports detected [ 175.601451][ T9067] loop8: detected capacity change from 0 to 1024 [ 175.608054][ T9067] EXT4-fs: inline encryption not supported [ 175.622953][ T9067] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.657443][ T997] IPVS: stop unused estimator thread 0... [ 175.672162][ T9067] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4193: comm syz.8.1779: Allocating blocks 385-513 which overlap fs metadata [ 175.711954][ T9067] EXT4-fs (loop8): pa ffff888106e2fa10: logic 16, phys. 129, len 24 [ 175.711982][ T9067] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 175.712305][ T9067] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 175.712329][ T9067] EXT4-fs (loop8): This should not happen!! Data will be lost [ 175.712329][ T9067] [ 175.748173][ T9071] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1780'. [ 175.752357][ T9067] EXT4-fs (loop8): Total free blocks count 0 [ 175.752374][ T9067] EXT4-fs (loop8): Free/Dirty block details [ 175.752385][ T9067] EXT4-fs (loop8): free_blocks=128 [ 175.752396][ T9067] EXT4-fs (loop8): dirty_blocks=0 [ 175.752406][ T9067] EXT4-fs (loop8): Block reservation details [ 175.761815][ T9071] IPVS: Error connecting to the multicast addr [ 175.767393][ T9067] EXT4-fs (loop8): i_reserved_data_blocks=0 [ 175.878209][ T9077] FAULT_INJECTION: forcing a failure. [ 175.878209][ T9077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.878298][ T9077] CPU: 0 UID: 0 PID: 9077 Comm: syz.8.1782 Not tainted syzkaller #0 PREEMPT(voluntary) [ 175.878382][ T9077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 175.878395][ T9077] Call Trace: [ 175.878401][ T9077] [ 175.878407][ T9077] __dump_stack+0x1d/0x30 [ 175.878426][ T9077] dump_stack_lvl+0xe8/0x140 [ 175.878444][ T9077] dump_stack+0x15/0x1b [ 175.878461][ T9077] should_fail_ex+0x265/0x280 [ 175.878507][ T9077] should_fail+0xb/0x20 [ 175.878524][ T9077] should_fail_usercopy+0x1a/0x20 [ 175.878546][ T9077] _copy_from_iter+0xcf/0xe70 [ 175.878568][ T9077] ? lockref_put_return+0xf7/0x130 [ 175.878599][ T9077] ? __rcu_read_unlock+0x4f/0x70 [ 175.878627][ T9077] tun_get_user+0x3d0/0x2650 [ 175.878653][ T9077] ? _parse_integer_limit+0x170/0x190 [ 175.878737][ T9077] ? ref_tracker_alloc+0x1f2/0x2f0 [ 175.878772][ T9077] ? selinux_file_permission+0x1e4/0x320 [ 175.878938][ T9077] tun_chr_write_iter+0x15e/0x210 [ 175.878961][ T9077] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 175.878983][ T9077] vfs_write+0x52a/0x960 [ 175.879031][ T9077] ksys_write+0xda/0x1a0 [ 175.879050][ T9077] __x64_sys_write+0x40/0x50 [ 175.879101][ T9077] x64_sys_call+0x2847/0x3000 [ 175.879124][ T9077] do_syscall_64+0xd8/0x2a0 [ 175.879165][ T9077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.879193][ T9077] RIP: 0033:0x7f51faa6f749 [ 175.879207][ T9077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.879225][ T9077] RSP: 002b:00007f51f94d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 175.879245][ T9077] RAX: ffffffffffffffda RBX: 00007f51facc5fa0 RCX: 00007f51faa6f749 [ 175.879258][ T9077] RDX: 000000000000004e RSI: 0000200000000280 RDI: 0000000000000003 [ 175.879272][ T9077] RBP: 00007f51f94d7090 R08: 0000000000000000 R09: 0000000000000000 [ 175.879356][ T9077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.879367][ T9077] R13: 00007f51facc6038 R14: 00007f51facc5fa0 R15: 00007fffb8042638 [ 175.879387][ T9077] [ 175.909924][ T9081] loop0: detected capacity change from 0 to 1024 [ 176.127538][ T9081] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 176.151796][ T2639] EXT4-fs error (device loop0): ext4_map_blocks:813: inode #15: block 3: comm kworker/u8:8: lblock 3 mapped to illegal pblock 3 (length 3) [ 176.152032][ T2639] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 176.152057][ T2639] EXT4-fs (loop0): This should not happen!! Data will be lost [ 176.152057][ T2639] [ 176.153188][ T3430] EXT4-fs error (device loop0): ext4_map_blocks:813: inode #15: block 8: comm kworker/u8:9: lblock 8 mapped to illegal pblock 8 (length 8) [ 176.203607][ T3430] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 176.215895][ T3430] EXT4-fs (loop0): This should not happen!! Data will be lost [ 176.215895][ T3430] [ 176.227422][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 176.342167][ T9105] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1792'. [ 176.354272][ T9104] loop8: detected capacity change from 0 to 8192 [ 176.363741][ T9105] IPVS: Error connecting to the multicast addr [ 176.412365][ T9104] loop8: p1 < > p2 < > p3 p4 < > [ 176.417416][ T9104] loop8: partition table partially beyond EOD, truncated [ 176.427027][ T9111] tmpfs: Bad value for 'mpol' [ 176.433550][ T9114] tmpfs: Bad value for 'mpol' [ 176.443658][ T9104] loop8: p1 start 67108864 is beyond EOD, truncated [ 176.450869][ T9104] loop8: p3 start 100859904 is beyond EOD, truncated [ 176.515605][ T9120] tmpfs: Bad value for 'mpol' [ 176.737844][ T9125] tmpfs: Bad value for 'mpol' [ 176.802479][ T9129] FAULT_INJECTION: forcing a failure. [ 176.802479][ T9129] name failslab, interval 1, probability 0, space 0, times 0 [ 176.815219][ T9129] CPU: 0 UID: 0 PID: 9129 Comm: syz.8.1800 Not tainted syzkaller #0 PREEMPT(voluntary) [ 176.815292][ T9129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 176.815305][ T9129] Call Trace: [ 176.815313][ T9129] [ 176.815321][ T9129] __dump_stack+0x1d/0x30 [ 176.815341][ T9129] dump_stack_lvl+0xe8/0x140 [ 176.815359][ T9129] dump_stack+0x15/0x1b [ 176.815374][ T9129] should_fail_ex+0x265/0x280 [ 176.815446][ T9129] ? do_signalfd4+0xe5/0x320 [ 176.815468][ T9129] should_failslab+0x8c/0xb0 [ 176.815492][ T9129] __kmalloc_cache_noprof+0x4c/0x4a0 [ 176.815519][ T9129] do_signalfd4+0xe5/0x320 [ 176.815569][ T9129] __x64_sys_signalfd4+0xce/0x100 [ 176.815593][ T9129] x64_sys_call+0x1d9c/0x3000 [ 176.815637][ T9129] do_syscall_64+0xd8/0x2a0 [ 176.815664][ T9129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.815685][ T9129] RIP: 0033:0x7f51faa6f749 [ 176.815707][ T9129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.815726][ T9129] RSP: 002b:00007f51f94d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000121 [ 176.815747][ T9129] RAX: ffffffffffffffda RBX: 00007f51facc5fa0 RCX: 00007f51faa6f749 [ 176.815760][ T9129] RDX: 0000000000000008 RSI: 0000200000000280 RDI: ffffffffffffffff [ 176.815825][ T9129] RBP: 00007f51f94d7090 R08: 0000000000000000 R09: 0000000000000000 [ 176.815837][ T9129] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001 [ 176.815851][ T9129] R13: 00007f51facc6038 R14: 00007f51facc5fa0 R15: 00007fffb8042638 [ 176.815868][ T9129] [ 176.985100][ T9132] netlink: 'syz.0.1801': attribute type 1 has an invalid length. [ 177.035530][ T9142] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1804'. [ 177.044770][ T9142] IPVS: Error connecting to the multicast addr [ 177.431575][ T9158] tmpfs: Bad value for 'mpol' [ 177.721880][ T9171] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1814'. [ 177.766876][ T9175] loop5: detected capacity change from 0 to 512 [ 177.781473][ T9175] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 177.781728][ T9175] EXT4-fs (loop5): mount failed [ 177.812980][ T9175] netlink: 'syz.5.1816': attribute type 4 has an invalid length. [ 178.076588][ T9187] tmpfs: Bad value for 'mpol' [ 178.396534][ T9208] loop7: detected capacity change from 0 to 512 [ 178.421878][ T9208] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 178.437729][ T9208] EXT4-fs (loop7): mount failed [ 178.458242][ T9208] netlink: 'syz.7.1827': attribute type 4 has an invalid length. [ 178.756355][ T9221] loop7: detected capacity change from 0 to 8192 [ 178.807337][ T9221] loop7: p1 < > p2 < > p3 p4 < > [ 178.807346][ T9221] loop7: partition table partially beyond EOD, truncated [ 178.807412][ T9221] loop7: p1 start 67108864 is beyond EOD, truncated [ 178.820227][ T9221] loop7: p3 start 100859904 is beyond EOD, truncated [ 179.036572][ T9247] loop5: detected capacity change from 0 to 1024 [ 179.058710][ T9247] EXT4-fs: inline encryption not supported [ 179.067301][ T9247] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 179.119387][ T9247] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4193: comm syz.5.1841: Allocating blocks 385-513 which overlap fs metadata [ 179.122932][ T9247] EXT4-fs (loop5): pa ffff888106e69380: logic 16, phys. 129, len 24 [ 179.122995][ T9247] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5444: group 0, free 0, pa_free 8 [ 179.123088][ T9247] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 179.123110][ T9247] EXT4-fs (loop5): This should not happen!! Data will be lost [ 179.123110][ T9247] [ 179.123124][ T9247] EXT4-fs (loop5): Total free blocks count 0 [ 179.123136][ T9247] EXT4-fs (loop5): Free/Dirty block details [ 179.123235][ T9247] EXT4-fs (loop5): free_blocks=128 [ 179.123249][ T9247] EXT4-fs (loop5): dirty_blocks=0 [ 179.123262][ T9247] EXT4-fs (loop5): Block reservation details [ 179.123274][ T9247] EXT4-fs (loop5): i_reserved_data_blocks=0 [ 179.210741][ T9261] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1845'. [ 179.210762][ T9261] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1845'. [ 179.453124][ T9276] tmpfs: Bad value for 'mpol' [ 179.494498][ T9283] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1856'. [ 179.503658][ T9283] IPVS: Error connecting to the multicast addr [ 179.540035][ T9288] netlink: 7 bytes leftover after parsing attributes in process `syz.0.1855'. [ 179.565925][ T9288] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1855'. [ 179.640756][ T9293] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1859'. [ 179.650019][ T9293] IPVS: Error connecting to the multicast addr [ 180.358402][ T9337] IPVS: Error connecting to the multicast addr [ 180.447227][ T9345] loop6: detected capacity change from 0 to 1024 [ 180.465728][ T9345] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 180.484211][ T9348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.484346][ T9348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.493996][ T3430] EXT4-fs error (device loop6): ext4_map_blocks:813: inode #15: block 3: comm kworker/u8:9: lblock 3 mapped to illegal pblock 3 (length 3) [ 180.516191][ T3430] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 180.516220][ T3430] EXT4-fs (loop6): This should not happen!! Data will be lost [ 180.516220][ T3430] [ 180.516556][ T1084] EXT4-fs error (device loop6): ext4_map_blocks:813: inode #15: block 8: comm kworker/u8:7: lblock 8 mapped to illegal pblock 8 (length 8) [ 180.516730][ T1084] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 180.516778][ T1084] EXT4-fs (loop6): This should not happen!! Data will be lost [ 180.516778][ T1084] [ 180.517561][ T7895] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 180.734293][ T29] kauditd_printk_skb: 363 callbacks suppressed [ 180.734374][ T29] audit: type=1326 audit(175.762:18968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.0.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0abdbf749 code=0x7ffc0000 [ 180.769972][ T29] audit: type=1326 audit(175.762:18969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.0.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0abdbf749 code=0x7ffc0000 [ 180.792990][ T29] audit: type=1326 audit(175.762:18970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.0.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fa0abdbf749 code=0x7ffc0000 [ 180.815896][ T29] audit: type=1326 audit(175.762:18971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.0.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0abdbf749 code=0x7ffc0000 [ 180.838903][ T29] audit: type=1326 audit(175.762:18972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.0.1882" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0abdbf749 code=0x7ffc0000 [ 180.891472][ T29] audit: type=1326 audit(175.902:18973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9362 comm="syz.5.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c69ff749 code=0x7ffc0000 [ 180.928945][ T29] audit: type=1326 audit(175.939:18974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9362 comm="syz.5.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8c69ff749 code=0x7ffc0000 [ 180.951948][ T29] audit: type=1326 audit(175.939:18975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9362 comm="syz.5.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c69ff749 code=0x7ffc0000 [ 180.975067][ T29] audit: type=1326 audit(175.939:18976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9362 comm="syz.5.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8c69ff749 code=0x7ffc0000 [ 180.980017][ T9372] 9pnet_fd: Insufficient options for proto=fd [ 180.998349][ T29] audit: type=1326 audit(175.939:18977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9362 comm="syz.5.1886" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c69ff749 code=0x7ffc0000 [ 181.010350][ T9371] loop5: detected capacity change from 0 to 1024 [ 181.046872][ T9371] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 181.100551][ T3430] EXT4-fs error (device loop5): ext4_map_blocks:813: inode #15: block 3: comm kworker/u8:9: lblock 3 mapped to illegal pblock 3 (length 3) [ 181.115826][ T3430] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 181.128267][ T3430] EXT4-fs (loop5): This should not happen!! Data will be lost [ 181.128267][ T3430] [ 181.141620][ T997] EXT4-fs error (device loop5): ext4_map_blocks:813: inode #15: block 8: comm kworker/u8:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 181.156927][ T997] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 181.169333][ T997] EXT4-fs (loop5): This should not happen!! Data will be lost [ 181.169333][ T997] [ 181.181939][ T7422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 181.214690][ T9381] __nla_validate_parse: 6 callbacks suppressed [ 181.214706][ T9381] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1894'. [ 181.230067][ T9381] IPVS: Error connecting to the multicast addr [ 181.283221][ T9376] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1891'. [ 181.355764][ T9397] netlink: 532 bytes leftover after parsing attributes in process `syz.7.1896'. [ 181.442267][ T9399] FAULT_INJECTION: forcing a failure. [ 181.442267][ T9399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.455385][ T9399] CPU: 1 UID: 0 PID: 9399 Comm: syz.5.1899 Not tainted syzkaller #0 PREEMPT(voluntary) [ 181.455412][ T9399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 181.455422][ T9399] Call Trace: [ 181.455430][ T9399] [ 181.455438][ T9399] __dump_stack+0x1d/0x30 [ 181.455459][ T9399] dump_stack_lvl+0xe8/0x140 [ 181.455477][ T9399] dump_stack+0x15/0x1b [ 181.455492][ T9399] should_fail_ex+0x265/0x280 [ 181.455512][ T9399] should_fail+0xb/0x20 [ 181.455528][ T9399] should_fail_usercopy+0x1a/0x20 [ 181.455548][ T9399] strncpy_from_user+0x27/0x260 [ 181.455573][ T9399] ? cmp_ex_search+0x25/0x40 [ 181.455591][ T9399] strncpy_from_user_nofault+0x68/0xf0 [ 181.455617][ T9399] bpf_probe_read_user_str+0x2a/0x70 [ 181.455643][ T9399] bpf_prog_7f11bb5dfa26a882+0x43/0x49 [ 181.455660][ T9399] bpf_trace_run2+0x107/0x1c0 [ 181.455694][ T9399] ? __hugetlb_zap_end+0x1bd/0x240 [ 181.455714][ T9399] ? __hugetlb_zap_end+0x1bd/0x240 [ 181.455732][ T9399] __traceiter_kfree+0x2e/0x50 [ 181.455749][ T9399] ? __hugetlb_zap_end+0x1bd/0x240 [ 181.455766][ T9399] kfree+0x351/0x400 [ 181.455784][ T9399] __hugetlb_zap_end+0x1bd/0x240 [ 181.455801][ T9399] unmap_vmas+0x289/0x3a0 [ 181.455827][ T9399] vms_clear_ptes+0x201/0x2e0 [ 181.455852][ T9399] mmap_region+0x745/0x15f0 [ 181.455873][ T9399] ? selinux_file_open+0x2df/0x330 [ 181.455901][ T9399] ? lockref_put_return+0xf7/0x130 [ 181.455940][ T9399] do_mmap+0x9b3/0xbe0 [ 181.455970][ T9399] __se_sys_remap_file_pages+0x537/0x5e0 [ 181.455990][ T9399] ? mutex_unlock+0x4f/0x90 [ 181.456012][ T9399] ? fput+0x8f/0xc0 [ 181.456038][ T9399] __x64_sys_remap_file_pages+0x67/0x80 [ 181.456055][ T9399] x64_sys_call+0x248c/0x3000 [ 181.456072][ T9399] do_syscall_64+0xd8/0x2a0 [ 181.456097][ T9399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.456117][ T9399] RIP: 0033:0x7fd8c69ff749 [ 181.456131][ T9399] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.456145][ T9399] RSP: 002b:00007fd8c545f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 181.456161][ T9399] RAX: ffffffffffffffda RBX: 00007fd8c6c55fa0 RCX: 00007fd8c69ff749 [ 181.456172][ T9399] RDX: 0000000000000000 RSI: 0000000000800000 RDI: 0000200000800000 [ 181.456185][ T9399] RBP: 00007fd8c545f090 R08: 0000000000000000 R09: 0000000000000000 [ 181.456197][ T9399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.456209][ T9399] R13: 00007fd8c6c56038 R14: 00007fd8c6c55fa0 R15: 00007fffe196efd8 [ 181.456228][ T9399] [ 181.551288][ T9401] 9pnet_fd: Insufficient options for proto=fd [ 181.633769][ T9407] 9pnet_fd: Insufficient options for proto=fd [ 181.816240][ T9411] loop6: detected capacity change from 0 to 164 [ 181.817025][ T9411] ISOFS: unable to read i-node block [ 181.817041][ T9411] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 181.817780][ T9411] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9411 comm=syz.6.1905 [ 181.818578][ T9411] FAULT_INJECTION: forcing a failure. [ 181.818578][ T9411] name failslab, interval 1, probability 0, space 0, times 0 [ 181.818609][ T9411] CPU: 1 UID: 0 PID: 9411 Comm: syz.6.1905 Not tainted syzkaller #0 PREEMPT(voluntary) [ 181.818635][ T9411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 181.818704][ T9411] Call Trace: [ 181.818710][ T9411] [ 181.818719][ T9411] __dump_stack+0x1d/0x30 [ 181.818748][ T9411] dump_stack_lvl+0xe8/0x140 [ 181.818771][ T9411] dump_stack+0x15/0x1b [ 181.818794][ T9411] should_fail_ex+0x265/0x280 [ 181.818814][ T9411] should_failslab+0x8c/0xb0 [ 181.818869][ T9411] kmem_cache_alloc_noprof+0x50/0x480 [ 181.818894][ T9411] ? alloc_empty_file+0x76/0x200 [ 181.819001][ T9411] alloc_empty_file+0x76/0x200 [ 181.819091][ T9411] path_openat+0x63/0x23b0 [ 181.819113][ T9411] ? _parse_integer_limit+0x170/0x190 [ 181.819148][ T9411] ? _parse_integer+0x27/0x40 [ 181.819236][ T9411] ? kstrtoull+0x111/0x140 [ 181.819265][ T9411] ? kstrtouint+0x76/0xc0 [ 181.819297][ T9411] do_filp_open+0x109/0x230 [ 181.819330][ T9411] do_sys_openat2+0xa6/0x150 [ 181.819403][ T9411] __x64_sys_openat+0xf2/0x120 [ 181.819473][ T9411] x64_sys_call+0x2b07/0x3000 [ 181.819497][ T9411] do_syscall_64+0xd8/0x2a0 [ 181.819568][ T9411] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.819591][ T9411] RIP: 0033:0x7f85ab87f749 [ 181.819609][ T9411] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.819676][ T9411] RSP: 002b:00007f85aa2e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 181.819701][ T9411] RAX: ffffffffffffffda RBX: 00007f85abad5fa0 RCX: 00007f85ab87f749 [ 181.819715][ T9411] RDX: 0000000000000042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 181.819729][ T9411] RBP: 00007f85aa2e7090 R08: 0000000000000000 R09: 0000000000000000 [ 181.819741][ T9411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.819752][ T9411] R13: 00007f85abad6038 R14: 00007f85abad5fa0 R15: 00007fff2b8b8438 [ 181.819820][ T9411] [ 181.820899][ T9411] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1905'. [ 182.038796][ T9417] loop5: detected capacity change from 0 to 512 [ 182.155778][ T9417] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 182.321433][ T9422] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1907'. [ 182.321569][ T9422] IPVS: Error connecting to the multicast addr [ 182.704984][ T9432] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1911'. [ 182.725207][ T9432] IPVS: Error connecting to the multicast addr [ 182.781074][ T9437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1913'. [ 182.790068][ T9437] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1913'. [ 182.867709][ T9445] loop0: detected capacity change from 0 to 1024 [ 182.881097][ T9445] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 182.911160][ T997] EXT4-fs error (device loop0): ext4_map_blocks:813: inode #15: block 3: comm kworker/u8:6: lblock 3 mapped to illegal pblock 3 (length 3) [ 182.926172][ T997] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 182.938557][ T997] EXT4-fs (loop0): This should not happen!! Data will be lost [ 182.938557][ T997] [ 182.950876][ T997] EXT4-fs error (device loop0): ext4_map_blocks:813: inode #15: block 8: comm kworker/u8:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 182.965705][ T997] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 182.977988][ T997] EXT4-fs (loop0): This should not happen!! Data will be lost [ 182.977988][ T997] [ 182.989490][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 183.363026][ T9462] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1922'. [ 183.372234][ T9462] IPVS: Error connecting to the multicast addr [ 183.380820][ T9461] SELinux: ebitmap: truncated map [ 183.402486][ T9461] SELinux: failed to load policy [ 183.417913][ T9464] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1923'. [ 183.438114][ T9464] IPVS: Error connecting to the multicast addr [ 183.496196][ T9466] loop0: detected capacity change from 0 to 8192 [ 183.550238][ T9473] loop7: detected capacity change from 0 to 1024 [ 183.564421][ T9466] loop0: p1 < > p2 < > p3 p4 < > [ 183.569483][ T9466] loop0: partition table partially beyond EOD, truncated [ 183.578912][ T9473] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 183.591226][ T9466] loop0: p1 start 67108864 is beyond EOD, truncated [ 183.598930][ T9466] loop0: p3 start 100859904 is beyond EOD, truncated [ 183.652585][ T3430] EXT4-fs error (device loop7): ext4_map_blocks:813: inode #15: block 3: comm kworker/u8:9: lblock 3 mapped to illegal pblock 3 (length 3) [ 183.668066][ T9477] bridge0: entered allmulticast mode [ 183.676616][ T9477] loop8: detected capacity change from 0 to 512 [ 183.683764][ T9477] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 183.715390][ T9477] EXT4-fs error (device loop8): ext4_get_branch:178: inode #11: block 4294967295: comm syz.8.1929: invalid block [ 183.748250][ T3430] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 183.760568][ T3430] EXT4-fs (loop7): This should not happen!! Data will be lost [ 183.760568][ T3430] [ 183.778274][ T9477] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1929: invalid indirect mapped block 4294967295 (level 1) [ 183.807163][ T9477] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.1929: invalid indirect mapped block 4294967295 (level 1) [ 183.828940][ T3430] EXT4-fs error (device loop7): ext4_map_blocks:813: inode #15: block 8: comm kworker/u8:9: lblock 8 mapped to illegal pblock 8 (length 8) [ 183.851581][ T9477] EXT4-fs (loop8): 2 truncates cleaned up [ 183.862446][ T9477] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.875102][ T3430] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 183.887416][ T3430] EXT4-fs (loop7): This should not happen!! Data will be lost [ 183.887416][ T3430] [ 183.925887][ T9477] bridge_slave_1: left allmulticast mode [ 183.931585][ T9477] bridge_slave_1: left promiscuous mode [ 183.937231][ T9477] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.039254][ T8058] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 184.098789][ T9477] bridge_slave_0: left allmulticast mode [ 184.104493][ T9477] bridge_slave_0: left promiscuous mode [ 184.110221][ T9477] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.135290][ T9477] bridge0 (unregistering): left allmulticast mode [ 184.204954][ T7422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.237608][ T9492] loop5: detected capacity change from 0 to 512 [ 184.244078][ T9492] EXT4-fs: Ignoring removed bh option [ 184.251076][ T9492] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 184.260362][ T9492] EXT4-fs (loop5): 1 truncate cleaned up [ 184.266338][ T9492] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.279012][ T8813] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.298857][ T7422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.355354][ T9503] tmpfs: Bad value for 'mpol' [ 184.616098][ T9508] loop0: detected capacity change from 0 to 512 [ 184.645125][ T9508] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 184.660129][ T9508] EXT4-fs (loop0): mount failed [ 184.671748][ T9508] netlink: 'syz.0.1938': attribute type 4 has an invalid length. [ 184.827246][ T3483] hid (null): global environment stack underflow [ 184.833651][ T3483] hid (null): report_id 0 is invalid [ 184.840069][ T3483] hid_parser_main: 23 callbacks suppressed [ 184.840080][ T3483] hid-generic 0000:0010:0000.0029: unknown main item tag 0x2 [ 184.853275][ T3483] hid-generic 0000:0010:0000.0029: unknown main item tag 0x0 [ 184.860680][ T3483] hid-generic 0000:0010:0000.0029: unknown main item tag 0x0 [ 184.868070][ T3483] hid-generic 0000:0010:0000.0029: unknown main item tag 0x0 [ 184.875496][ T3483] hid-generic 0000:0010:0000.0029: unknown main item tag 0x0 [ 184.882911][ T3483] hid-generic 0000:0010:0000.0029: unknown main item tag 0x0 [ 184.890343][ T3483] hid-generic 0000:0010:0000.0029: unknown main item tag 0x0 [ 184.897739][ T3483] hid-generic 0000:0010:0000.0029: unknown main item tag 0x0 [ 184.905190][ T3483] hid-generic 0000:0010:0000.0029: unknown main item tag 0x0 [ 184.912586][ T3483] hid-generic 0000:0010:0000.0029: unknown main item tag 0x0 [ 184.919977][ T3483] hid-generic 0000:0010:0000.0029: global environment stack underflow [ 184.928191][ T3483] hid-generic 0000:0010:0000.0029: item 0 4 1 11 parsing failed [ 184.936056][ T3483] hid-generic 0000:0010:0000.0029: probe with driver hid-generic failed with error -22 [ 185.040258][ T9525] loop0: detected capacity change from 0 to 512 [ 185.047545][ T9525] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 185.062091][ T9525] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.090446][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.268952][ T9537] IPVS: Error connecting to the multicast addr [ 185.322453][ T9543] IPVS: Error connecting to the multicast addr [ 185.473445][ T9555] 9pnet_fd: Insufficient options for proto=fd [ 185.672717][ T9562] IPVS: Error connecting to the multicast addr [ 185.692314][ T9564] tmpfs: Bad value for 'mpol' [ 185.938503][ T9572] loop5: detected capacity change from 0 to 1024 [ 185.949801][ T9572] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 185.971584][ T1084] EXT4-fs error (device loop5): ext4_map_blocks:813: inode #15: block 3: comm kworker/u8:7: lblock 3 mapped to illegal pblock 3 (length 3) [ 185.986171][ T1084] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 185.998501][ T1084] EXT4-fs (loop5): This should not happen!! Data will be lost [ 185.998501][ T1084] [ 186.008509][ T58] EXT4-fs error (device loop5): ext4_map_blocks:813: inode #15: block 8: comm kworker/u8:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 186.023107][ T58] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 186.035469][ T58] EXT4-fs (loop5): This should not happen!! Data will be lost [ 186.035469][ T58] [ 186.036264][ T9448] hid (null): global environment stack underflow [ 186.048879][ T7422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 186.051581][ T9448] hid (null): report_id 0 is invalid [ 186.052910][ T9448] hid-generic 0000:0010:0000.002A: global environment stack underflow [ 186.073925][ T9448] hid-generic 0000:0010:0000.002A: item 0 4 1 11 parsing failed [ 186.081825][ T9448] hid-generic 0000:0010:0000.002A: probe with driver hid-generic failed with error -22 [ 186.315653][ T9592] loop6: detected capacity change from 0 to 8192 [ 186.379547][ T29] kauditd_printk_skb: 360 callbacks suppressed [ 186.379560][ T29] audit: type=1326 audit(181.047:19337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9593 comm="syz.5.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c69ff749 code=0x7ffc0000 [ 186.408982][ T29] audit: type=1326 audit(181.047:19338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9593 comm="syz.5.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c69ff749 code=0x7ffc0000 [ 186.410491][ T9592] loop6: p1 < > p2 < > p3 p4 < > [ 186.431893][ T29] audit: type=1326 audit(181.047:19339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9593 comm="syz.5.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8c69ff749 code=0x7ffc0000 [ 186.436932][ T9592] loop6: partition table partially beyond EOD, truncated [ 186.459786][ T29] audit: type=1326 audit(181.047:19340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9593 comm="syz.5.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c69ff749 code=0x7ffc0000 [ 186.459814][ T29] audit: type=1326 audit(181.047:19341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9593 comm="syz.5.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8c69ff749 code=0x7ffc0000 [ 186.459919][ T29] audit: type=1326 audit(181.047:19342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9593 comm="syz.5.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c69ff749 code=0x7ffc0000 [ 186.459945][ T29] audit: type=1326 audit(181.047:19343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9593 comm="syz.5.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd8c69ff749 code=0x7ffc0000 [ 186.459969][ T29] audit: type=1326 audit(181.047:19344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9593 comm="syz.5.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c69ff749 code=0x7ffc0000 [ 186.525172][ T9592] loop6: p1 start 67108864 is beyond EOD, [ 186.535751][ T29] audit: type=1326 audit(181.047:19345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9593 comm="syz.5.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd8c69ff749 code=0x7ffc0000 [ 186.558424][ T9592] truncated [ 186.581420][ T29] audit: type=1326 audit(181.047:19346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9593 comm="syz.5.1972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8c69ff749 code=0x7ffc0000 [ 186.621731][ T9592] loop6: p3 start 100859904 is beyond EOD, truncated [ 186.689678][ T9598] loop8: detected capacity change from 0 to 1024 [ 186.706378][ T9602] __nla_validate_parse: 7 callbacks suppressed [ 186.706393][ T9602] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1976'. [ 186.721645][ T9602] IPVS: Error connecting to the multicast addr [ 186.730811][ T9598] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 186.756395][ T9604] loop6: detected capacity change from 0 to 8192 [ 186.777872][ T3430] EXT4-fs error (device loop8): ext4_map_blocks:813: inode #15: block 3: comm kworker/u8:9: lblock 3 mapped to illegal pblock 3 (length 3) [ 186.792579][ T3430] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 186.804962][ T3430] EXT4-fs (loop8): This should not happen!! Data will be lost [ 186.804962][ T3430] [ 186.815266][ T9604] loop6: p1 < > p2 < > p3 p4 < > [ 186.820287][ T9604] loop6: partition table partially beyond EOD, truncated [ 186.828654][ T3430] EXT4-fs error (device loop8): ext4_map_blocks:813: inode #15: block 8: comm kworker/u8:9: lblock 8 mapped to illegal pblock 8 (length 8) [ 186.844137][ T9613] tmpfs: Bad value for 'mpol' [ 186.848968][ T9604] loop6: p1 start 67108864 is beyond EOD, truncated [ 186.856029][ T3430] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 186.868328][ T3430] EXT4-fs (loop8): This should not happen!! Data will be lost [ 186.868328][ T3430] [ 186.878542][ T9604] loop6: p3 start 100859904 is beyond EOD, truncated [ 186.885726][ T8813] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 186.954092][ T9620] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1982'. [ 186.984824][ T9620] IPVS: Error connecting to the multicast addr [ 187.181766][ T9629] loop6: detected capacity change from 0 to 8192 [ 187.230919][ T9629] loop6: p1 < > p2 < > p3 p4 < > [ 187.235987][ T9629] loop6: partition table partially beyond EOD, truncated [ 187.243969][ T9629] loop6: p1 start 67108864 is beyond EOD, truncated [ 187.250985][ T9629] loop6: p3 start 100859904 is beyond EOD, truncated [ 187.285292][ T9633] tmpfs: Bad value for 'mpol' [ 187.471243][ T9638] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1988'. [ 187.480478][ T9638] IPVS: Error connecting to the multicast addr [ 187.502388][ T9448] hid (null): global environment stack underflow [ 187.508791][ T9448] hid (null): report_id 0 is invalid [ 187.515587][ T9448] hid-generic 0000:0010:0000.002B: global environment stack underflow [ 187.523788][ T9448] hid-generic 0000:0010:0000.002B: item 0 4 1 11 parsing failed [ 187.531781][ T9448] hid-generic 0000:0010:0000.002B: probe with driver hid-generic failed with error -22 [ 187.629354][ T9646] hub 9-0:1.0: USB hub found [ 187.634182][ T9646] hub 9-0:1.0: 8 ports detected [ 187.650552][ T7992] Bluetooth: hci0: Frame reassembly failed (-84) [ 187.790113][ T9648] loop0: detected capacity change from 0 to 1024 [ 187.848941][ T9653] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1993'. [ 187.858842][ T9653] IPVS: Error connecting to the multicast addr [ 187.866366][ T9648] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 187.909525][ T7992] EXT4-fs error (device loop0): ext4_map_blocks:813: inode #15: block 3: comm kworker/u8:11: lblock 3 mapped to illegal pblock 3 (length 3) [ 187.931776][ T7992] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 187.944168][ T7992] EXT4-fs (loop0): This should not happen!! Data will be lost [ 187.944168][ T7992] [ 187.971843][ T3430] EXT4-fs error (device loop0): ext4_map_blocks:813: inode #15: block 8: comm kworker/u8:9: lblock 8 mapped to illegal pblock 8 (length 8) [ 188.000542][ T3430] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 188.012903][ T3430] EXT4-fs (loop0): This should not happen!! Data will be lost [ 188.012903][ T3430] [ 188.149322][ T9657] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1994'. [ 188.687473][ T9672] loop6: detected capacity change from 0 to 512 [ 189.344035][ T9683] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2004'. [ 189.404324][ T9683] IPVS: Error connecting to the multicast addr [ 189.661676][ T9693] tmpfs: Bad value for 'mpol' [ 189.807076][ T8605] Bluetooth: hci0: command 0x1003 tx timeout [ 189.807382][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 190.205546][ T9698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2010'. [ 190.593088][ T9714] loop6: detected capacity change from 0 to 8192 [ 190.601626][ T9717] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2017'. [ 190.601685][ T9717] IPVS: Error connecting to the multicast addr [ 190.630540][ T9714] loop6: p1 < > p2 < > p3 p4 < > [ 190.630550][ T9714] loop6: partition table partially beyond EOD, truncated [ 190.630593][ T9714] loop6: p1 start 67108864 is beyond EOD, truncated [ 190.631071][ T9714] loop6: p3 start 100859904 is beyond EOD, truncated [ 190.668900][ T9719] loop5: detected capacity change from 0 to 512 [ 190.699935][ T9719] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 190.714976][ T9719] EXT4-fs (loop5): mount failed [ 190.721770][ T9719] netlink: 'syz.5.2018': attribute type 4 has an invalid length. [ 190.746942][ T9725] loop6: detected capacity change from 0 to 1024 [ 190.785672][ T7826] EXT4-fs error (device loop6): ext4_map_blocks:813: inode #15: block 3: comm kworker/u8:10: lblock 3 mapped to illegal pblock 3 (length 3) [ 190.816283][ T9732] loop0: detected capacity change from 0 to 1024 [ 190.825069][ T7826] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 190.837352][ T7826] EXT4-fs (loop6): This should not happen!! Data will be lost [ 190.837352][ T7826] [ 190.849613][ T7826] EXT4-fs error (device loop6): ext4_map_blocks:813: inode #15: block 8: comm kworker/u8:10: lblock 8 mapped to illegal pblock 8 (length 8) [ 190.865080][ T7826] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 190.877450][ T7826] EXT4-fs (loop6): This should not happen!! Data will be lost [ 190.877450][ T7826] [ 190.939484][ T7826] EXT4-fs error (device loop0): ext4_map_blocks:813: inode #15: block 3: comm kworker/u8:10: lblock 3 mapped to illegal pblock 3 (length 3) [ 190.995204][ T7826] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 191.007647][ T7826] EXT4-fs (loop0): This should not happen!! Data will be lost [ 191.007647][ T7826] [ 191.029854][ T7826] EXT4-fs error (device loop0): ext4_map_blocks:813: inode #15: block 8: comm kworker/u8:10: lblock 8 mapped to illegal pblock 8 (length 8) [ 191.074209][ T7826] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 191.086517][ T7826] EXT4-fs (loop0): This should not happen!! Data will be lost [ 191.086517][ T7826] [ 191.306210][ T9746] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2026'. [ 191.317290][ T9746] bridge0: entered allmulticast mode [ 191.328940][ T9746] loop6: detected capacity change from 0 to 512 [ 191.370597][ T9747] loop0: detected capacity change from 0 to 512 [ 191.390490][ T3423] hid (null): global environment stack underflow [ 191.396995][ T3423] hid (null): report_id 0 is invalid [ 191.403787][ T3423] hid_parser_main: 23 callbacks suppressed [ 191.403804][ T3423] hid-generic 0000:0010:0000.002C: unknown main item tag 0x2 [ 191.416985][ T3423] hid-generic 0000:0010:0000.002C: unknown main item tag 0x0 [ 191.424388][ T3423] hid-generic 0000:0010:0000.002C: unknown main item tag 0x0 [ 191.431783][ T3423] hid-generic 0000:0010:0000.002C: unknown main item tag 0x0 [ 191.439282][ T3423] hid-generic 0000:0010:0000.002C: unknown main item tag 0x0 [ 191.446735][ T3423] hid-generic 0000:0010:0000.002C: unknown main item tag 0x0 [ 191.454209][ T3423] hid-generic 0000:0010:0000.002C: unknown main item tag 0x0 [ 191.461584][ T3423] hid-generic 0000:0010:0000.002C: unknown main item tag 0x0 [ 191.469056][ T3423] hid-generic 0000:0010:0000.002C: unknown main item tag 0x0 [ 191.476448][ T3423] hid-generic 0000:0010:0000.002C: unknown main item tag 0x0 [ 191.483828][ T3423] hid-generic 0000:0010:0000.002C: global environment stack underflow [ 191.492270][ T3423] hid-generic 0000:0010:0000.002C: item 0 4 1 11 parsing failed [ 191.510480][ T9746] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 191.638339][ T9746] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.2026: invalid block [ 191.698370][ T9746] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2026: invalid indirect mapped block 4294967295 (level 1) [ 191.787784][ T9746] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2026: invalid indirect mapped block 4294967295 (level 1) [ 191.886811][ T9746] EXT4-fs (loop6): 2 truncates cleaned up [ 191.938531][ T9757] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2028'. [ 191.954524][ T9746] bridge_slave_1: left allmulticast mode [ 191.960207][ T9746] bridge_slave_1: left promiscuous mode [ 191.965989][ T9746] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.985690][ T3423] hid-generic 0000:0010:0000.002C: probe with driver hid-generic failed with error -22 [ 192.093842][ T9760] tmpfs: Bad value for 'mpol' [ 192.115737][ T9746] bridge_slave_0: left allmulticast mode [ 192.121510][ T9746] bridge_slave_0: left promiscuous mode [ 192.127153][ T9746] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.156157][ T9746] bridge0 (unregistering): left allmulticast mode [ 192.211950][ T9757] IPVS: Error connecting to the multicast addr [ 192.297474][ T9765] __nla_validate_parse: 1 callbacks suppressed [ 192.297490][ T9765] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2032'. [ 192.322149][ T29] kauditd_printk_skb: 279 callbacks suppressed [ 192.322215][ T29] audit: type=1326 audit(186.603:19625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.6.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ab87f749 code=0x7ffc0000 [ 192.554611][ T29] audit: type=1326 audit(186.631:19626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.6.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ab87f749 code=0x7ffc0000 [ 192.577548][ T29] audit: type=1326 audit(186.631:19627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.6.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f85ab87df90 code=0x7ffc0000 [ 192.600485][ T29] audit: type=1326 audit(186.631:19628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.6.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ab87f749 code=0x7ffc0000 [ 192.623401][ T29] audit: type=1326 audit(186.631:19629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.6.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ab87f749 code=0x7ffc0000 [ 192.646290][ T29] audit: type=1326 audit(186.640:19630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.6.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f85ab87df90 code=0x7ffc0000 [ 192.669158][ T29] audit: type=1326 audit(186.640:19631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.6.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ab87f749 code=0x7ffc0000 [ 192.692020][ T29] audit: type=1326 audit(186.640:19632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.6.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f85ab87f749 code=0x7ffc0000 [ 192.715007][ T29] audit: type=1326 audit(186.640:19633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.6.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ab87f749 code=0x7ffc0000 [ 192.737965][ T29] audit: type=1326 audit(186.640:19634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9766 comm="syz.6.2031" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f85ab87f749 code=0x7ffc0000 [ 193.068660][ T3317] EXT4-fs unmount: 10 callbacks suppressed [ 193.068674][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.167474][ T9769] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2033'. [ 193.280644][ T9782] FAULT_INJECTION: forcing a failure. [ 193.280644][ T9782] name failslab, interval 1, probability 0, space 0, times 0 [ 193.280672][ T9782] CPU: 1 UID: 0 PID: 9782 Comm: syz.7.2035 Not tainted syzkaller #0 PREEMPT(voluntary) [ 193.280696][ T9782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 193.280708][ T9782] Call Trace: [ 193.280715][ T9782] [ 193.280721][ T9782] __dump_stack+0x1d/0x30 [ 193.280740][ T9782] dump_stack_lvl+0xe8/0x140 [ 193.280756][ T9782] dump_stack+0x15/0x1b [ 193.280770][ T9782] should_fail_ex+0x265/0x280 [ 193.280787][ T9782] should_failslab+0x8c/0xb0 [ 193.280809][ T9782] kmem_cache_alloc_noprof+0x50/0x480 [ 193.280833][ T9782] ? mas_alloc_nodes+0x1a2/0x210 [ 193.280857][ T9782] mas_alloc_nodes+0x1a2/0x210 [ 193.280879][ T9782] mas_preallocate+0x2ca/0x510 [ 193.280909][ T9782] __split_vma+0x240/0x650 [ 193.280933][ T9782] ? mas_find+0x5d5/0x700 [ 193.280961][ T9782] vms_gather_munmap_vmas+0x2b2/0x7b0 [ 193.280982][ T9782] mmap_region+0x52b/0x15f0 [ 193.281000][ T9782] ? number+0x9ae/0xab0 [ 193.281034][ T9782] do_mmap+0x9b3/0xbe0 [ 193.281058][ T9782] __se_sys_remap_file_pages+0x537/0x5e0 [ 193.281083][ T9782] __x64_sys_remap_file_pages+0x67/0x80 [ 193.281102][ T9782] x64_sys_call+0x248c/0x3000 [ 193.281123][ T9782] do_syscall_64+0xd8/0x2a0 [ 193.281153][ T9782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.281171][ T9782] RIP: 0033:0x7f214ca0f749 [ 193.281185][ T9782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.281201][ T9782] RSP: 002b:00007f214b46f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 193.281219][ T9782] RAX: ffffffffffffffda RBX: 00007f214cc65fa0 RCX: 00007f214ca0f749 [ 193.281231][ T9782] RDX: 0000000000000000 RSI: 0000000000400d00 RDI: 000020000051c000 [ 193.281242][ T9782] RBP: 00007f214b46f090 R08: 0000000000000000 R09: 0000000000000000 [ 193.281283][ T9782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.281295][ T9782] R13: 00007f214cc66038 R14: 00007f214cc65fa0 R15: 00007ffcee1daf28 [ 193.281313][ T9782] [ 193.326274][ T9783] loop0: detected capacity change from 0 to 512 [ 193.336966][ T9783] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 193.368755][ T9783] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.383307][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.406229][ T9790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2037'. [ 193.406319][ T9790] bridge_slave_0: left promiscuous mode [ 193.406474][ T9790] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.541942][ T9798] tmpfs: Bad value for 'mpol' [ 193.638172][ T9801] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2042'. [ 193.638249][ T9801] IPVS: Error connecting to the multicast addr [ 194.040958][ T9813] loop5: detected capacity change from 0 to 512 [ 194.048303][ T9813] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 194.065338][ T9813] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.093784][ T7422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.423080][ T3504] hid (null): global environment stack underflow [ 194.429527][ T3504] hid (null): report_id 0 is invalid [ 194.437640][ T3504] hid-generic 0000:0010:0000.002D: global environment stack underflow [ 194.445810][ T3504] hid-generic 0000:0010:0000.002D: item 0 4 1 11 parsing failed [ 194.454111][ T3504] hid-generic 0000:0010:0000.002D: probe with driver hid-generic failed with error -22 [ 194.565705][ T9836] loop0: detected capacity change from 0 to 1024 [ 194.574080][ T9837] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2054'. [ 194.583412][ T9837] IPVS: Error connecting to the multicast addr [ 194.600250][ T9836] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 194.652135][ T7826] EXT4-fs error (device loop0): ext4_map_blocks:813: inode #15: block 3: comm kworker/u8:10: lblock 3 mapped to illegal pblock 3 (length 3) [ 194.670789][ T7826] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 194.683192][ T7826] EXT4-fs (loop0): This should not happen!! Data will be lost [ 194.683192][ T7826] [ 194.713842][ T58] EXT4-fs error (device loop0): ext4_map_blocks:813: inode #15: block 8: comm kworker/u8:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 194.735486][ T58] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 194.747938][ T58] EXT4-fs (loop0): This should not happen!! Data will be lost [ 194.747938][ T58] [ 194.772807][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 194.843095][ T9855] 9pnet_fd: Insufficient options for proto=fd [ 194.936784][ T9861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2064'. [ 194.984618][ T9861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2064'. [ 195.063668][ T9865] tmpfs: Bad value for 'mpol' [ 195.157618][ T9869] FAULT_INJECTION: forcing a failure. [ 195.157618][ T9869] name failslab, interval 1, probability 0, space 0, times 0 [ 195.170420][ T9869] CPU: 1 UID: 0 PID: 9869 Comm: syz.5.2067 Not tainted syzkaller #0 PREEMPT(voluntary) [ 195.170494][ T9869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 195.170582][ T9869] Call Trace: [ 195.170589][ T9869] [ 195.170596][ T9869] __dump_stack+0x1d/0x30 [ 195.170616][ T9869] dump_stack_lvl+0xe8/0x140 [ 195.170710][ T9869] dump_stack+0x15/0x1b [ 195.170728][ T9869] should_fail_ex+0x265/0x280 [ 195.170750][ T9869] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 195.170772][ T9869] should_failslab+0x8c/0xb0 [ 195.170798][ T9869] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 195.170880][ T9869] ? shmem_alloc_inode+0x34/0x50 [ 195.170902][ T9869] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 195.170921][ T9869] shmem_alloc_inode+0x34/0x50 [ 195.170960][ T9869] alloc_inode+0x40/0x170 [ 195.170984][ T9869] new_inode+0x1d/0xe0 [ 195.171010][ T9869] shmem_get_inode+0x244/0x750 [ 195.171037][ T9869] shmem_mknod+0x46/0x180 [ 195.171140][ T9869] shmem_create+0x34/0x50 [ 195.171160][ T9869] vfs_create+0x29e/0x2e0 [ 195.171182][ T9869] do_mknodat+0x28e/0x500 [ 195.171292][ T9869] __x64_sys_mknodat+0x5e/0x70 [ 195.171311][ T9869] x64_sys_call+0x2b33/0x3000 [ 195.171379][ T9869] do_syscall_64+0xd8/0x2a0 [ 195.171413][ T9869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.171436][ T9869] RIP: 0033:0x7fd8c69ff749 [ 195.171452][ T9869] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.171470][ T9869] RSP: 002b:00007fd8c545f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 195.171489][ T9869] RAX: ffffffffffffffda RBX: 00007fd8c6c55fa0 RCX: 00007fd8c69ff749 [ 195.171576][ T9869] RDX: 00000000000081c0 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 195.171590][ T9869] RBP: 00007fd8c545f090 R08: 0000000000000000 R09: 0000000000000000 [ 195.171642][ T9869] R10: 00000000fffff001 R11: 0000000000000246 R12: 0000000000000001 [ 195.171653][ T9869] R13: 00007fd8c6c56038 R14: 00007fd8c6c55fa0 R15: 00007fffe196efd8 [ 195.171670][ T9869] [ 195.515464][ T9878] loop5: detected capacity change from 0 to 1024 [ 195.552410][ T9878] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 195.594857][ T3430] EXT4-fs error (device loop5): ext4_map_blocks:813: inode #15: block 3: comm kworker/u8:9: lblock 3 mapped to illegal pblock 3 (length 3) [ 195.609651][ T3430] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 195.621984][ T3430] EXT4-fs (loop5): This should not happen!! Data will be lost [ 195.621984][ T3430] [ 195.649887][ T3430] EXT4-fs error (device loop5): ext4_map_blocks:813: inode #15: block 8: comm kworker/u8:9: lblock 8 mapped to illegal pblock 8 (length 8) [ 195.664340][ T3430] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 195.676648][ T3430] EXT4-fs (loop5): This should not happen!! Data will be lost [ 195.676648][ T3430] [ 195.695513][ T7422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 195.770213][ T9894] 9pnet_fd: Insufficient options for proto=fd [ 195.806351][ T9898] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2078'. [ 195.816255][ T9898] bridge0: entered allmulticast mode [ 195.827327][ T9898] loop5: detected capacity change from 0 to 512 [ 195.834477][ T9898] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 195.846966][ T9898] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.2078: invalid block [ 195.861322][ T9898] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2078: invalid indirect mapped block 4294967295 (level 1) [ 195.875405][ T9898] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.2078: invalid indirect mapped block 4294967295 (level 1) [ 195.889665][ T9898] EXT4-fs (loop5): 2 truncates cleaned up [ 195.896006][ T9898] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.909999][ T9898] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2078'. [ 195.919114][ T9898] bridge_slave_1: left allmulticast mode [ 195.924881][ T9898] bridge_slave_1: left promiscuous mode [ 195.930612][ T9898] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.938949][ T9898] bridge_slave_0: left allmulticast mode [ 195.944699][ T9898] bridge_slave_0: left promiscuous mode [ 195.950338][ T9898] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.971273][ T9898] bridge0 (unregistering): left allmulticast mode [ 196.080209][ T7422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.492866][ T9924] loop5: detected capacity change from 0 to 512 [ 196.513737][ T9924] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 196.529068][ T9924] EXT4-fs (loop5): mount failed [ 196.542376][ T9924] netlink: 'syz.5.2088': attribute type 4 has an invalid length. [ 196.633747][ T9929] loop7: detected capacity change from 0 to 1024 [ 196.640277][ T9930] loop0: detected capacity change from 0 to 1024 [ 196.657888][ T9932] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2091'. [ 196.670169][ T9929] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 196.683911][ T9930] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 196.702441][ T9932] loop8: detected capacity change from 0 to 512 [ 196.709613][ T9932] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 196.741992][ T3430] EXT4-fs error (device loop0): ext4_map_blocks:813: inode #15: block 3: comm kworker/u8:9: lblock 3 mapped to illegal pblock 3 (length 3) [ 196.756366][ T997] EXT4-fs error (device loop7): ext4_map_blocks:813: inode #15: block 3: comm kworker/u8:6: lblock 3 mapped to illegal pblock 3 (length 3) [ 196.756390][ T9940] loop5: detected capacity change from 0 to 8192 [ 196.778529][ T997] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 196.790857][ T997] EXT4-fs (loop7): This should not happen!! Data will be lost [ 196.790857][ T997] [ 196.801994][ T3430] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 196.814298][ T3430] EXT4-fs (loop0): This should not happen!! Data will be lost [ 196.814298][ T3430] [ 196.825441][ T9940] loop5: p1 < > p2 < > p3 p4 < > [ 196.830475][ T9940] loop5: partition table partially beyond EOD, truncated [ 196.837856][ T9940] loop5: p1 start 67108864 is beyond EOD, truncated [ 196.837921][ T7826] EXT4-fs error (device loop0): ext4_map_blocks:813: inode #15: block 8: comm kworker/u8:10: lblock 8 mapped to illegal pblock 8 (length 8) [ 196.850425][ T58] EXT4-fs error (device loop7): ext4_map_blocks:813: inode #15: block 8: comm kworker/u8:4: lblock 8 mapped to illegal pblock 8 (length 8) [ 196.859105][ T7826] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 196.873311][ T9932] EXT4-fs error (device loop8): ext4_get_branch:178: inode #11: block 4294967295: comm syz.8.2091: invalid block [ 196.885232][ T7826] EXT4-fs (loop0): This should not happen!! Data will be lost [ 196.885232][ T7826] [ 196.907345][ T9940] loop5: p3 start 100859904 is beyond EOD, truncated [ 196.914349][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 196.926362][ T58] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 196.926447][ T9932] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.2091: invalid indirect mapped block 4294967295 (level 1) [ 196.938745][ T58] EXT4-fs (loop7): This should not happen!! Data will be lost [ 196.938745][ T58] [ 196.963223][ T9945] loop6: detected capacity change from 0 to 512 [ 196.963460][ T8058] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 196.993031][ T9945] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 197.002162][ T9932] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.2091: invalid indirect mapped block 4294967295 (level 1) [ 197.023681][ T9932] EXT4-fs (loop8): 2 truncates cleaned up [ 197.030336][ T9932] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.044869][ T9945] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.085997][ T7895] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.095618][ T9957] FAULT_INJECTION: forcing a failure. [ 197.095618][ T9957] name failslab, interval 1, probability 0, space 0, times 0 [ 197.108269][ T9957] CPU: 1 UID: 0 PID: 9957 Comm: syz.5.2102 Not tainted syzkaller #0 PREEMPT(voluntary) [ 197.108374][ T9957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 197.108387][ T9957] Call Trace: [ 197.108394][ T9957] [ 197.108401][ T9957] __dump_stack+0x1d/0x30 [ 197.108421][ T9957] dump_stack_lvl+0xe8/0x140 [ 197.108438][ T9957] dump_stack+0x15/0x1b [ 197.108530][ T9957] should_fail_ex+0x265/0x280 [ 197.108551][ T9957] should_failslab+0x8c/0xb0 [ 197.108576][ T9957] kmem_cache_alloc_noprof+0x50/0x480 [ 197.108626][ T9957] ? security_file_alloc+0x32/0x100 [ 197.108654][ T9957] security_file_alloc+0x32/0x100 [ 197.108679][ T9957] init_file+0x5c/0x1c0 [ 197.108718][ T9957] alloc_empty_file+0x8b/0x200 [ 197.108745][ T9957] alloc_file_pseudo+0xc6/0x160 [ 197.108776][ T9957] __shmem_file_setup+0x1de/0x210 [ 197.108894][ T9957] shmem_file_setup+0x3b/0x50 [ 197.109002][ T9957] __se_sys_memfd_create+0x2ef/0x5f0 [ 197.109026][ T9957] __x64_sys_memfd_create+0x31/0x40 [ 197.109116][ T9957] x64_sys_call+0x28cb/0x3000 [ 197.109215][ T9957] do_syscall_64+0xd8/0x2a0 [ 197.109249][ T9957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.109272][ T9957] RIP: 0033:0x7fd8c69ff749 [ 197.109288][ T9957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.109316][ T9957] RSP: 002b:00007fd8c545ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 197.109377][ T9957] RAX: ffffffffffffffda RBX: 000000000000046f RCX: 00007fd8c69ff749 [ 197.109391][ T9957] RDX: 00007fd8c545eef0 RSI: 0000000000000000 RDI: 00007fd8c6a84960 [ 197.109405][ T9957] RBP: 0000200000000bc0 R08: 00007fd8c545ebb7 R09: 00007fd8c545ee40 [ 197.109472][ T9957] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 197.109486][ T9957] R13: 00007fd8c545eef0 R14: 00007fd8c545eeb0 R15: 00002000000007c0 [ 197.109543][ T9957] [ 197.335861][ T9966] loop5: detected capacity change from 0 to 1024 [ 197.344474][ T8813] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.360888][ T9970] loop0: detected capacity change from 0 to 1024 [ 197.409691][ T9966] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 197.433881][ T9970] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 197.467696][ T58] EXT4-fs error (device loop5): ext4_map_blocks:813: inode #15: block 3: comm kworker/u8:4: lblock 3 mapped to illegal pblock 3 (length 3) [ 197.491801][ T997] EXT4-fs error (device loop0): ext4_map_blocks:813: inode #15: block 3: comm kworker/u8:6: lblock 3 mapped to illegal pblock 3 (length 3) [ 197.499988][ T9978] loop7: detected capacity change from 0 to 8192 [ 197.508580][ T58] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 197.524649][ T58] EXT4-fs (loop5): This should not happen!! Data will be lost [ 197.524649][ T58] [ 197.534848][ T997] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 197.547156][ T997] EXT4-fs (loop0): This should not happen!! Data will be lost [ 197.547156][ T997] [ 197.557615][ T997] EXT4-fs error (device loop0): ext4_map_blocks:813: inode #15: block 8: comm kworker/u8:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 197.598811][ T9984] loop6: detected capacity change from 0 to 512 [ 197.627474][ T9983] loop8: detected capacity change from 0 to 512 [ 197.635300][ T9983] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 197.644825][ T997] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 197.657106][ T997] EXT4-fs (loop0): This should not happen!! Data will be lost [ 197.657106][ T997] [ 197.668705][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 197.679513][ T9978] loop7: p1 < > p2 < > p3 p4 < > [ 197.684578][ T9978] loop7: partition table partially beyond EOD, truncated [ 197.693638][ T29] kauditd_printk_skb: 385 callbacks suppressed [ 197.693649][ T29] audit: type=1326 audit(191.551:20019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9982 comm="syz.8.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51faa6f749 code=0x7ffc0000 [ 197.722793][ T29] audit: type=1326 audit(191.551:20020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9982 comm="syz.8.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51faa6f749 code=0x7ffc0000 [ 197.745670][ T29] audit: type=1326 audit(191.551:20021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9982 comm="syz.8.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51faa6f749 code=0x7ffc0000 [ 197.768541][ T29] audit: type=1326 audit(191.551:20022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9982 comm="syz.8.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51faa6f749 code=0x7ffc0000 [ 197.791490][ T29] audit: type=1326 audit(191.551:20023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9982 comm="syz.8.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51faa6f749 code=0x7ffc0000 [ 197.814344][ T29] audit: type=1326 audit(191.551:20024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9982 comm="syz.8.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51faa6f749 code=0x7ffc0000 [ 197.837242][ T29] audit: type=1326 audit(191.551:20025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9982 comm="syz.8.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51faa6f749 code=0x7ffc0000 [ 197.860145][ T29] audit: type=1326 audit(191.551:20026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9982 comm="syz.8.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51faa6f749 code=0x7ffc0000 [ 197.883019][ T29] audit: type=1326 audit(191.551:20027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9982 comm="syz.8.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51faa6f749 code=0x7ffc0000 [ 197.905865][ T29] audit: type=1326 audit(191.551:20028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9982 comm="syz.8.2111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51faa6f749 code=0x7ffc0000 [ 197.937684][ T9978] loop7: p1 start 67108864 is beyond EOD, truncated [ 197.944794][ T997] EXT4-fs error (device loop5): ext4_map_blocks:813: inode #15: block 8: comm kworker/u8:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 197.960710][ T9978] loop7: p3 start 100859904 is beyond EOD, truncated [ 197.971030][ T9983] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.987141][ T997] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 197.999411][ T997] EXT4-fs (loop5): This should not happen!! Data will be lost [ 197.999411][ T997] [ 198.089868][ T9984] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.107129][ T7422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 198.116924][ T8813] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.314516][ T9992] __nla_validate_parse: 3 callbacks suppressed [ 198.314534][ T9992] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2114'. [ 198.334627][ T9992] team0 (unregistering): Port device team_slave_0 removed [ 198.343719][ T9992] team0 (unregistering): Port device team_slave_1 removed [ 198.352872][ T9992] team0 (unregistering): Port device vlan2 removed [ 198.392245][ T9995] pim6reg: entered allmulticast mode [ 198.399720][ T9995] pim6reg: left allmulticast mode [ 198.481929][ T9997] loop7: detected capacity change from 0 to 512 [ 198.499735][ T9997] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 198.514664][ T9997] EXT4-fs (loop7): mount failed [ 198.563987][ T9997] netlink: 'syz.7.2115': attribute type 4 has an invalid length. [ 198.584693][T10007] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2116'. [ 198.596644][T10010] lo speed is unknown, defaulting to 1000 [ 198.602380][T10010] lo speed is unknown, defaulting to 1000 [ 198.608368][T10010] lo speed is unknown, defaulting to 1000 [ 198.614898][T10010] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 198.644265][T10010] lo speed is unknown, defaulting to 1000 [ 198.658089][T10010] lo speed is unknown, defaulting to 1000 [ 198.666991][T10007] loop0: detected capacity change from 0 to 512 [ 198.691641][T10007] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 198.706144][T10010] lo speed is unknown, defaulting to 1000 [ 198.723873][T10010] lo speed is unknown, defaulting to 1000 [ 198.734554][T10007] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.2116: invalid block [ 198.750343][T10018] loop5: detected capacity change from 0 to 1024 [ 198.757880][T10016] tipc: Started in network mode [ 198.762740][T10016] tipc: Node identity 825d5ab023b3, cluster identity 4711 [ 198.769953][T10016] tipc: Enabled bearer , priority 0 [ 198.778720][T10010] lo speed is unknown, defaulting to 1000 [ 198.785647][T10010] lo speed is unknown, defaulting to 1000 [ 198.793223][T10018] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 198.805425][T10007] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2116: invalid indirect mapped block 4294967295 (level 1) [ 198.825854][T10022] syzkaller0: entered promiscuous mode [ 198.830068][T10007] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.2116: invalid indirect mapped block 4294967295 (level 1) [ 198.831332][T10022] syzkaller0: entered allmulticast mode [ 198.849132][T10007] EXT4-fs (loop0): 2 truncates cleaned up [ 198.862678][T10015] tipc: Resetting bearer [ 198.868701][ T7992] EXT4-fs error (device loop5): ext4_map_blocks:813: inode #15: block 3: comm kworker/u8:11: lblock 3 mapped to illegal pblock 3 (length 3) [ 198.885466][T10015] tipc: Disabling bearer [ 198.891399][ T7992] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 198.903739][ T7992] EXT4-fs (loop5): This should not happen!! Data will be lost [ 198.903739][ T7992] [ 198.916950][T10007] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.929948][ T7992] EXT4-fs error (device loop5): ext4_map_blocks:813: inode #15: block 8: comm kworker/u8:11: lblock 8 mapped to illegal pblock 8 (length 8) [ 198.946257][T10007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2116'. [ 198.958816][ T7992] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 198.971113][ T7992] EXT4-fs (loop5): This should not happen!! Data will be lost [ 198.971113][ T7992] [ 199.027578][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.061203][T10026] loop7: detected capacity change from 0 to 512 [ 199.077783][T10026] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 199.097885][ T7422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 199.110861][T10026] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.137643][ T8058] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.224429][ T7895] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.233755][T10030] loop5: detected capacity change from 0 to 1024 [ 199.260788][T10030] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 199.285593][ T7992] EXT4-fs error (device loop5): ext4_map_blocks:813: inode #15: block 3: comm kworker/u8:11: lblock 3 mapped to illegal pblock 3 (length 3) [ 199.300016][T10038] loop6: detected capacity change from 0 to 8192 [ 199.300169][ T7992] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 199.318692][ T7992] EXT4-fs (loop5): This should not happen!! Data will be lost [ 199.318692][ T7992] [ 199.328751][ T7992] EXT4-fs error (device loop5): ext4_map_blocks:813: inode #15: block 8: comm kworker/u8:11: lblock 8 mapped to illegal pblock 8 (length 8) [ 199.343224][ T7992] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 199.355543][ T7992] EXT4-fs (loop5): This should not happen!! Data will be lost [ 199.355543][ T7992] [ 199.365443][T10038] loop6: p1 < > p2 < > p3 p4 < > [ 199.366075][ T7422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 199.370549][T10038] loop6: partition table partially beyond EOD, truncated [ 199.386684][T10038] loop6: p1 start 67108864 is beyond EOD, truncated [ 199.393894][T10038] loop6: p3 start 100859904 is beyond EOD, truncated [ 199.427145][T10046] loop0: detected capacity change from 0 to 512 [ 199.454211][T10046] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 199.469287][T10046] EXT4-fs (loop0): mount failed [ 199.480721][T10046] netlink: 'syz.0.2130': attribute type 4 has an invalid length. [ 199.493134][T10057] tmpfs: Bad value for 'mpol' [ 199.537700][T10061] tmpfs: Bad value for 'mpol' [ 199.798182][T10069] loop0: detected capacity change from 0 to 512 [ 199.922839][T10069] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.869909][T10079] tmpfs: Bad value for 'mpol' [ 201.361063][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.380432][T10095] loop0: detected capacity change from 0 to 512 [ 201.396871][T10095] EXT4-fs warning (device loop0): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 201.411784][T10095] EXT4-fs (loop0): mount failed [ 201.422583][T10095] netlink: 'syz.0.2147': attribute type 4 has an invalid length. [ 201.438481][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 201.438516][T10055] Bluetooth: hci0: command 0x1003 tx timeout [ 201.450708][T10037] FAULT_INJECTION: forcing a failure. [ 201.450708][T10037] name failslab, interval 1, probability 0, space 0, times 0 [ 201.463374][T10037] CPU: 0 UID: 0 PID: 10037 Comm: syz.7.2127 Not tainted syzkaller #0 PREEMPT(voluntary) [ 201.463463][T10037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 201.463475][T10037] Call Trace: [ 201.463481][T10037] [ 201.463488][T10037] __dump_stack+0x1d/0x30 [ 201.463614][T10037] dump_stack_lvl+0xe8/0x140 [ 201.463626][T10037] dump_stack+0x15/0x1b [ 201.463694][T10037] should_fail_ex+0x265/0x280 [ 201.463706][T10037] should_failslab+0x8c/0xb0 [ 201.463720][T10037] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 201.463735][T10037] ? __alloc_skb+0x101/0x320 [ 201.463810][T10037] __alloc_skb+0x101/0x320 [ 201.463825][T10037] ? cancel_delayed_work_sync+0xa6/0xc0 [ 201.463853][T10037] hci_sock_dev_event+0xd0/0x2f0 [ 201.463937][T10037] hci_unregister_dev+0x244/0x2b0 [ 201.464015][T10037] hci_uart_tty_close+0x115/0x170 [ 201.464042][T10037] ? __pfx_hci_uart_tty_close+0x10/0x10 [ 201.464086][T10037] tty_ldisc_kill+0x8d/0x140 [ 201.464157][T10037] tty_ldisc_hangup+0x2fa/0x370 [ 201.464181][T10037] __tty_hangup+0x3c2/0x540 [ 201.464280][T10037] tty_ioctl+0x601/0xb80 [ 201.464301][T10037] ? __pfx_tty_ioctl+0x10/0x10 [ 201.464319][T10037] __se_sys_ioctl+0xce/0x140 [ 201.464338][T10037] __x64_sys_ioctl+0x43/0x50 [ 201.464423][T10037] x64_sys_call+0x14b0/0x3000 [ 201.464445][T10037] do_syscall_64+0xd8/0x2a0 [ 201.464476][T10037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.464499][T10037] RIP: 0033:0x7f214ca0f749 [ 201.464523][T10037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.464538][T10037] RSP: 002b:00007f214b46f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 201.464554][T10037] RAX: ffffffffffffffda RBX: 00007f214cc65fa0 RCX: 00007f214ca0f749 [ 201.464565][T10037] RDX: 0000000000000000 RSI: 0000000000005437 RDI: 0000000000000008 [ 201.464577][T10037] RBP: 00007f214b46f090 R08: 0000000000000000 R09: 0000000000000000 [ 201.464589][T10037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.464670][T10037] R13: 00007f214cc66038 R14: 00007f214cc65fa0 R15: 00007ffcee1daf28 [ 201.464686][T10037] [ 201.681279][ T8605] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 201.681427][ T44] Bluetooth: hci1: command 0x1003 tx timeout [ 201.740987][T10103] tmpfs: Bad value for 'mpol' [ 201.969381][T10121] loop8: detected capacity change from 0 to 1024 [ 201.988386][T10121] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 202.012939][ T7992] EXT4-fs error (device loop8): ext4_map_blocks:813: inode #15: block 3: comm kworker/u8:11: lblock 3 mapped to illegal pblock 3 (length 3) [ 202.027799][ T7992] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 202.040219][ T7992] EXT4-fs (loop8): This should not happen!! Data will be lost [ 202.040219][ T7992] [ 202.050343][ T8126] EXT4-fs error (device loop8): ext4_map_blocks:813: inode #15: block 8: comm kworker/u8:12: lblock 8 mapped to illegal pblock 8 (length 8) [ 202.064917][ T8126] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 202.077258][ T8126] EXT4-fs (loop8): This should not happen!! Data will be lost [ 202.077258][ T8126] [ 202.087779][ T8813] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 202.261261][T10163] loop6: detected capacity change from 0 to 1024 [ 202.290483][T10163] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 202.321939][ T8126] EXT4-fs error (device loop6): ext4_map_blocks:813: inode #15: block 3: comm kworker/u8:12: lblock 3 mapped to illegal pblock 3 (length 3) [ 202.338423][ T8126] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 202.350780][ T8126] EXT4-fs (loop6): This should not happen!! Data will be lost [ 202.350780][ T8126] [ 202.362666][ T8126] EXT4-fs error (device loop6): ext4_map_blocks:813: inode #15: block 8: comm kworker/u8:12: lblock 8 mapped to illegal pblock 8 (length 8) [ 202.377391][ T8126] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 202.390010][ T8126] EXT4-fs (loop6): This should not happen!! Data will be lost [ 202.390010][ T8126] [ 202.403981][ T7895] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 202.493500][T10178] FAULT_INJECTION: forcing a failure. [ 202.493500][T10178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 202.506751][T10178] CPU: 1 UID: 0 PID: 10178 Comm: syz.7.2175 Not tainted syzkaller #0 PREEMPT(voluntary) [ 202.506776][T10178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 202.506846][T10178] Call Trace: [ 202.506851][T10178] [ 202.506856][T10178] __dump_stack+0x1d/0x30 [ 202.506871][T10178] dump_stack_lvl+0xe8/0x140 [ 202.506882][T10178] dump_stack+0x15/0x1b [ 202.506894][T10178] should_fail_ex+0x265/0x280 [ 202.506907][T10178] should_fail+0xb/0x20 [ 202.506983][T10178] should_fail_usercopy+0x1a/0x20 [ 202.506995][T10178] _copy_to_user+0x20/0xa0 [ 202.507083][T10178] poll_select_finish+0x2d4/0x3f0 [ 202.507100][T10178] __se_sys_select+0x1da/0x210 [ 202.507115][T10178] __x64_sys_select+0x67/0x80 [ 202.507175][T10178] x64_sys_call+0x295a/0x3000 [ 202.507188][T10178] do_syscall_64+0xd8/0x2a0 [ 202.507207][T10178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.507219][T10178] RIP: 0033:0x7f214ca0f749 [ 202.507228][T10178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.507243][T10178] RSP: 002b:00007f214b46f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 202.507283][T10178] RAX: ffffffffffffffda RBX: 00007f214cc65fa0 RCX: 00007f214ca0f749 [ 202.507291][T10178] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 202.507347][T10178] RBP: 00007f214b46f090 R08: 0000200000000440 R09: 0000000000000000 [ 202.507354][T10178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.507361][T10178] R13: 00007f214cc66038 R14: 00007f214cc65fa0 R15: 00007ffcee1daf28 [ 202.507379][T10178] [ 202.737928][T10196] hub 9-0:1.0: USB hub found [ 202.746403][T10196] hub 9-0:1.0: 8 ports detected [ 202.766630][ T8126] Bluetooth: hci0: Frame reassembly failed (-84) [ 202.835920][T10204] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.2182'. [ 203.120208][ T29] kauditd_printk_skb: 242 callbacks suppressed [ 203.120223][ T29] audit: type=1326 audit(196.705:20268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10211 comm="syz.6.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ab87f749 code=0x7ffc0000 [ 203.152214][ T29] audit: type=1326 audit(196.705:20269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10211 comm="syz.6.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f85ab87f749 code=0x7ffc0000 [ 203.174833][T10213] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2190'. [ 203.175471][ T29] audit: type=1326 audit(196.705:20270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10211 comm="syz.6.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ab87f749 code=0x7ffc0000 [ 203.207366][ T29] audit: type=1326 audit(196.705:20271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10211 comm="syz.6.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f85ab87f749 code=0x7ffc0000 [ 203.230390][ T29] audit: type=1326 audit(196.705:20272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10211 comm="syz.6.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ab87f749 code=0x7ffc0000 [ 203.230426][ T29] audit: type=1326 audit(196.705:20273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10211 comm="syz.6.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f85ab87f749 code=0x7ffc0000 [ 203.230501][ T29] audit: type=1326 audit(196.705:20274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10211 comm="syz.6.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ab87f749 code=0x7ffc0000 [ 203.230533][ T29] audit: type=1326 audit(196.705:20275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10211 comm="syz.6.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f85ab87f749 code=0x7ffc0000 [ 203.254637][ T29] audit: type=1326 audit(196.836:20276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10211 comm="syz.6.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ab87f749 code=0x7ffc0000 [ 203.254798][ T29] audit: type=1326 audit(196.836:20277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10211 comm="syz.6.2190" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85ab87f749 code=0x7ffc0000 [ 203.454656][T10229] tmpfs: Bad value for 'mpol' [ 203.669866][T10235] loop5: detected capacity change from 0 to 2048 [ 203.716902][T10235] Alternate GPT is invalid, using primary GPT. [ 203.717039][T10235] loop5: p1 p2 p3 [ 203.717046][T10235] loop5: partition table partially beyond EOD, truncated [ 203.785749][T10241] netlink: 'syz.5.2199': attribute type 13 has an invalid length. [ 203.788582][T10241] loop5: detected capacity change from 0 to 512 [ 203.814771][T10241] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 203.815265][T10241] EXT4-fs (loop5): mount failed [ 203.978618][T10258] tmpfs: Bad value for 'mpol' [ 204.024360][T10265] loop0: detected capacity change from 0 to 512 [ 204.033819][T10265] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 204.048158][T10265] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 204.061618][T10265] EXT4-fs (loop0): 1 truncate cleaned up [ 204.067719][T10265] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.403057][T10274] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2210'. [ 204.428141][T10274] loop8: detected capacity change from 0 to 512 [ 204.435253][T10274] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 204.445481][T10274] EXT4-fs error (device loop8): ext4_get_branch:178: inode #11: block 4294967295: comm syz.8.2210: invalid block [ 204.457773][T10274] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.2210: invalid indirect mapped block 4294967295 (level 1) [ 204.472080][T10274] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.2210: invalid indirect mapped block 4294967295 (level 1) [ 204.486654][T10274] EXT4-fs (loop8): 2 truncates cleaned up [ 204.492772][T10274] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.506558][T10274] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2210'. [ 204.531666][ T8813] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.935272][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.945091][ T8605] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 204.945230][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 204.975291][T10289] 9pnet_fd: Insufficient options for proto=fd [ 205.068540][T10299] loop5: detected capacity change from 0 to 512 [ 205.076748][T10299] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.2220: iget: bad extended attribute block 1 [ 205.089561][T10299] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.2220: couldn't read orphan inode 15 (err -117) [ 205.102637][T10299] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 205.120867][T10299] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2220'. [ 205.163124][T10311] tmpfs: Bad value for 'mpol' [ 205.249125][ T7422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.557068][T10351] loop8: detected capacity change from 0 to 1024 [ 205.569750][T10347] 8021q: VLANs not supported on ip6gre0 [ 205.575996][T10351] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 205.603012][ T7992] EXT4-fs error (device loop8): ext4_map_blocks:813: inode #15: block 3: comm kworker/u8:11: lblock 3 mapped to illegal pblock 3 (length 3) [ 205.618402][T10359] loop7: detected capacity change from 0 to 1024 [ 205.619499][ T7992] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 205.637146][ T7992] EXT4-fs (loop8): This should not happen!! Data will be lost [ 205.637146][ T7992] [ 205.648499][ T997] EXT4-fs error (device loop8): ext4_map_blocks:813: inode #15: block 8: comm kworker/u8:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 205.649046][T10359] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 205.680064][ T997] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 205.692452][ T997] EXT4-fs (loop8): This should not happen!! Data will be lost [ 205.692452][ T997] [ 205.705918][ T8813] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 205.724513][ T997] EXT4-fs error (device loop7): ext4_map_blocks:813: inode #15: block 3: comm kworker/u8:6: lblock 3 mapped to illegal pblock 3 (length 3) [ 205.739264][ T997] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 205.751534][ T997] EXT4-fs (loop7): This should not happen!! Data will be lost [ 205.751534][ T997] [ 205.762821][ T997] EXT4-fs error (device loop7): ext4_map_blocks:813: inode #15: block 8: comm kworker/u8:6: lblock 8 mapped to illegal pblock 8 (length 8) [ 205.777474][ T997] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 205.789815][ T997] EXT4-fs (loop7): This should not happen!! Data will be lost [ 205.789815][ T997] [ 205.801108][ T8058] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 205.872899][T10375] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 205.885134][T10375] Cannot find add_set index 0 as target [ 205.901318][ T8126] Bluetooth: hci0: Frame reassembly failed (-84) [ 205.931873][T10382] netlink: 92 bytes leftover after parsing attributes in process `syz.7.2252'. [ 205.941964][T10382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10382 comm=syz.7.2252 [ 206.038973][T10384] syzkaller0: entered promiscuous mode [ 206.044534][T10384] syzkaller0: entered allmulticast mode [ 206.058058][T10384] tipc: Started in network mode [ 206.062938][T10384] tipc: Node identity c24aad110c14, cluster identity 4711 [ 206.070130][T10384] tipc: Enabled bearer , priority 0 [ 206.096087][T10384] tipc: Resetting bearer [ 206.103062][T10383] tipc: Resetting bearer [ 206.111420][T10383] tipc: Disabling bearer [ 206.155906][T10388] loop0: detected capacity change from 0 to 8192 [ 206.175384][T10388] loop0: p1 < > p2 < > p3 p4 < > [ 206.180532][T10388] loop0: partition table partially beyond EOD, truncated [ 206.188922][T10388] loop0: p1 start 67108864 is beyond EOD, truncated [ 206.196391][T10388] loop0: p3 start 100859904 is beyond EOD, truncated [ 206.400414][T10396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2259'. [ 207.040549][T10412] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2264'. [ 207.042498][T10412] bridge0: entered allmulticast mode [ 207.080868][T10412] loop7: detected capacity change from 0 to 512 [ 207.081755][T10412] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 207.101691][T10417] tmpfs: Bad value for 'mpol' [ 207.115726][T10412] EXT4-fs error (device loop7): ext4_get_branch:178: inode #11: block 4294967295: comm syz.7.2264: invalid block [ 207.115847][T10412] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2264: invalid indirect mapped block 4294967295 (level 1) [ 207.115961][T10412] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.2264: invalid indirect mapped block 4294967295 (level 1) [ 207.116312][T10412] EXT4-fs (loop7): 2 truncates cleaned up [ 207.116757][T10412] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.117526][T10412] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2264'. [ 207.117548][T10412] bridge_slave_1: left allmulticast mode [ 207.117561][T10412] bridge_slave_1: left promiscuous mode [ 207.117661][T10412] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.118536][T10412] bridge_slave_0: left allmulticast mode [ 207.118549][T10412] bridge_slave_0: left promiscuous mode [ 207.118638][T10412] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.135472][T10412] bridge0 (unregistering): left allmulticast mode [ 207.236519][ T8058] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.256852][T10421] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2266'. [ 207.465452][T10437] loop7: detected capacity change from 0 to 512 [ 207.485299][T10437] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.2273: iget: bad extended attribute block 1 [ 207.500517][T10437] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.2273: couldn't read orphan inode 15 (err -117) [ 207.538719][T10437] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 207.553366][T10437] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2273'. [ 207.570114][T10438] loop6: detected capacity change from 0 to 512 [ 207.586579][ T8058] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.599000][T10438] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.659531][T10448] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2276'. [ 208.109438][ T8605] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 208.324848][ T7895] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.604666][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 208.604680][ T29] audit: type=1326 audit(201.831:20522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10468 comm="syz.8.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51faa6f749 code=0x7ffc0000 [ 208.666241][ T29] audit: type=1326 audit(201.869:20523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10468 comm="syz.8.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51faa6f749 code=0x7ffc0000 [ 208.689287][ T29] audit: type=1326 audit(201.869:20524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10468 comm="syz.8.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51faa6f749 code=0x7ffc0000 [ 208.689315][ T29] audit: type=1326 audit(201.869:20525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10468 comm="syz.8.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51faa6f749 code=0x7ffc0000 [ 208.689335][ T29] audit: type=1326 audit(201.869:20526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10468 comm="syz.8.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51faa6f749 code=0x7ffc0000 [ 208.689353][ T29] audit: type=1326 audit(201.869:20527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10468 comm="syz.8.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=89 compat=0 ip=0x7f51faa6f749 code=0x7ffc0000 [ 208.689410][ T29] audit: type=1326 audit(201.869:20528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10468 comm="syz.8.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51faa6f749 code=0x7ffc0000 [ 208.689435][ T29] audit: type=1326 audit(201.869:20529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10468 comm="syz.8.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f51faa6f749 code=0x7ffc0000 [ 208.689459][ T29] audit: type=1326 audit(201.869:20530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10468 comm="syz.8.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51faa6f749 code=0x7ffc0000 [ 208.689483][ T29] audit: type=1326 audit(201.869:20531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10468 comm="syz.8.2283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f51faa6f749 code=0x7ffc0000 [ 209.073675][T10488] loop5: detected capacity change from 0 to 512 [ 209.079172][T10479] vlan2: entered allmulticast mode [ 209.079190][T10479] bridge_slave_0: entered allmulticast mode [ 209.130339][T10488] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.230181][T10489] lo speed is unknown, defaulting to 1000 [ 209.284966][T10500] 9pnet: Could not find request transport: rwitch [ 209.344934][T10504] loop7: detected capacity change from 0 to 8192 [ 209.357174][T10508] loop8: detected capacity change from 0 to 1024 [ 209.374241][T10508] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 209.382491][T10504] loop7: p1 < > p2 < > p3 p4 < > [ 209.391385][T10504] loop7: partition table partially beyond EOD, truncated [ 209.415781][T10504] loop7: p1 start 67108864 is beyond EOD, truncated [ 209.422737][ T2639] EXT4-fs error (device loop8): ext4_map_blocks:813: inode #15: block 3: comm kworker/u8:8: lblock 3 mapped to illegal pblock 3 (length 3) [ 209.438313][T10504] loop7: p3 start 100859904 is beyond EOD, truncated [ 209.443594][ T2639] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 209.457470][ T2639] EXT4-fs (loop8): This should not happen!! Data will be lost [ 209.457470][ T2639] [ 209.486032][ T7826] EXT4-fs error (device loop8): ext4_map_blocks:813: inode #15: block 8: comm kworker/u8:10: lblock 8 mapped to illegal pblock 8 (length 8) [ 209.522173][ T7826] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 209.534524][ T7826] EXT4-fs (loop8): This should not happen!! Data will be lost [ 209.534524][ T7826] [ 209.545649][ T8813] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 209.741911][T10530] loop6: detected capacity change from 0 to 128 [ 209.757613][T10530] veth0: entered promiscuous mode [ 209.777804][T10530] FAT-fs (loop6): error, invalid access to FAT (entry 0x0fff0000) [ 209.785654][T10530] FAT-fs (loop6): Filesystem has been set read-only [ 209.797906][T10530] veth0: left promiscuous mode [ 209.817839][ T7422] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.934665][T10542] hub 9-0:1.0: USB hub found [ 209.941899][T10542] hub 9-0:1.0: 8 ports detected [ 209.987657][ T7826] Bluetooth: hci0: Frame reassembly failed (-84) [ 210.072424][T10553] __nla_validate_parse: 5 callbacks suppressed [ 210.072438][T10553] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2309'. [ 210.373742][T10571] loop6: detected capacity change from 0 to 1024 [ 210.389211][T10571] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 210.409773][ T7895] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 210.471350][T10580] loop0: detected capacity change from 0 to 512 [ 210.479442][T10580] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.2324: iget: bad extended attribute block 1 [ 210.492333][T10580] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.2324: couldn't read orphan inode 15 (err -117) [ 210.504531][T10585] loop6: detected capacity change from 0 to 512 [ 210.505209][T10580] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.528770][T10585] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.2326: iget: bad extended attribute block 1 [ 210.550667][T10580] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2324'. [ 210.559812][T10585] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.2326: couldn't read orphan inode 15 (err -117) [ 210.607645][T10590] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2328'. [ 210.623362][T10590] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2328'. [ 210.640994][T10594] loop0: detected capacity change from 0 to 1024 [ 210.670151][ T1084] EXT4-fs error (device loop0): ext4_map_blocks:813: inode #15: block 3: comm kworker/u8:7: lblock 3 mapped to illegal pblock 3 (length 3) [ 210.684515][T10600] loop6: detected capacity change from 0 to 1024 [ 210.691476][ T1084] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 210.703863][ T1084] EXT4-fs (loop0): This should not happen!! Data will be lost [ 210.703863][ T1084] [ 210.715376][ T1084] EXT4-fs error (device loop0): ext4_map_blocks:813: inode #15: block 8: comm kworker/u8:7: lblock 8 mapped to illegal pblock 8 (length 8) [ 210.733353][ T1084] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117 [ 210.745637][ T1084] EXT4-fs (loop0): This should not happen!! Data will be lost [ 210.745637][ T1084] [ 210.805717][T10614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2337'. [ 210.815043][T10614] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2337'. [ 210.866863][T10623] tmpfs: Bad value for 'mpol' [ 211.062591][T10624] ================================================================== [ 211.070695][T10624] BUG: KCSAN: data-race in __bpf_get_stackid / bcmp [ 211.077283][T10624] [ 211.079598][T10624] write to 0xffff8881391e9930 of 96 bytes by task 10631 on cpu 1: [ 211.087394][T10624] __bpf_get_stackid+0x761/0x800 [ 211.092332][T10624] bpf_get_stackid+0xef/0x120 [ 211.097018][T10624] bpf_get_stackid_raw_tp+0xf6/0x120 [ 211.102299][T10624] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 211.107756][T10624] bpf_trace_run2+0x107/0x1c0 [ 211.112440][T10624] __traceiter_kfree+0x2e/0x50 [ 211.117204][T10624] kfree+0x351/0x400 [ 211.121095][T10624] compute_postorder+0x4e0/0x510 [ 211.126037][T10624] bpf_check+0xa1d5/0xd5f0 [ 211.130457][T10624] bpf_prog_load+0xf6e/0x1100 [ 211.135145][T10624] __sys_bpf+0x469/0x7c0 [ 211.139387][T10624] __x64_sys_bpf+0x41/0x50 [ 211.143806][T10624] x64_sys_call+0x28e1/0x3000 [ 211.148478][T10624] do_syscall_64+0xd8/0x2a0 [ 211.152986][T10624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.158868][T10624] [ 211.161183][T10624] read to 0xffff8881391e9978 of 8 bytes by task 10624 on cpu 0: [ 211.168808][T10624] bcmp+0x23/0x90 [ 211.172439][T10624] __bpf_get_stackid+0x371/0x800 [ 211.177373][T10624] bpf_get_stackid+0xef/0x120 [ 211.182065][T10624] bpf_get_stackid_raw_tp+0xf6/0x120 [ 211.187342][T10624] bpf_prog_53f0063d4d7f65ce+0x2a/0x32 [ 211.192788][T10624] bpf_trace_run2+0x107/0x1c0 [ 211.197463][T10624] __traceiter_kfree+0x2e/0x50 [ 211.202217][T10624] kfree+0x351/0x400 [ 211.206103][T10624] ___sys_recvmsg+0x135/0x370 [ 211.210771][T10624] do_recvmmsg+0x1ef/0x540 [ 211.215189][T10624] __x64_sys_recvmmsg+0xe5/0x170 [ 211.220128][T10624] x64_sys_call+0x2b75/0x3000 [ 211.224806][T10624] do_syscall_64+0xd8/0x2a0 [ 211.229312][T10624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.235197][T10624] [ 211.237504][T10624] value changed: 0xffffffff81000130 -> 0xffffffff81276c61 [ 211.244595][T10624] [ 211.246911][T10624] Reported by Kernel Concurrency Sanitizer on: [ 211.253050][T10624] CPU: 0 UID: 0 PID: 10624 Comm: syz.6.2339 Not tainted syzkaller #0 PREEMPT(voluntary) [ 211.262849][T10624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 211.272896][T10624] ================================================================== [ 212.214625][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110