last executing test programs: 8m24.875198252s ago: executing program 3 (id=2138): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000f00)=ANY=[@ANYBLOB="e201020100000000ffff0300000000000000000000000001"], 0x18) 8m24.837636713s ago: executing program 3 (id=2141): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000000280)=""/224, 0xe0, 0x0, &(0x7f00000001c0)=""/83, 0x53}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./bus\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36c, &(0x7f00000023c0)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) sendfile(r2, r2, 0x0, 0x7a680000) 8m24.627079832s ago: executing program 3 (id=2146): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), 0x0}, 0x20) 8m24.573669381s ago: executing program 3 (id=2147): perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, @perf_bp={0x0}, 0x10202, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x9) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x42}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x40000042}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r3, &(0x7f00000006c0)={&(0x7f0000000540)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x10000000}}, 0x10, 0x0}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r4}, 0x10) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4a23, 0x0, @mcast2}, 0x1c) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1207, &(0x7f0000002480)="$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") r6 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) ftruncate(r6, 0xee72) r7 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SG_GET_COMMAND_Q(r7, 0x2270, &(0x7f0000000300)) 8m24.24340246s ago: executing program 3 (id=2149): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x2410, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b73, 0x1, @perf_config_ext={0x9, 0x40}, 0x14105, 0x30, 0x8, 0x3, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0xb, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = syz_io_uring_setup(0x2f33, &(0x7f0000000900)={0x0, 0x5f39, 0x80, 0x80, 0x3d1}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 8m23.790476128s ago: executing program 3 (id=2158): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2a8, 0xffffffff, 0x98, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@private, @multicast1, 0x0, 0x0, 'ip6gre0\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x64}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'wlan1\x00'}, 0x0, 0xb0, 0xe0, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), 0x0}, 0x20) 8m23.780864238s ago: executing program 32 (id=2158): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2a8, 0xffffffff, 0x98, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@ip={@private, @multicast1, 0x0, 0x0, 'ip6gre0\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x64}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@private, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'wlan1\x00'}, 0x0, 0xb0, 0xe0, 0x0, {}, [@common=@set={{0x40}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x45, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), 0x0}, 0x20) 4m7.106516138s ago: executing program 4 (id=7377): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xffffffff, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, 0x0, &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x80}, 0x18) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000440)=@gcm_128={{0x303}, "053200", "1ec2d524d78682576ec2d9e13dad1018", "993161e3"}, 0x28) write$binfmt_script(r0, &(0x7f0000001300), 0x8f) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000240)=0x40) writev(r0, &(0x7f00000030c0)=[{0x0}], 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x1}], 0x1) close(r0) 4m6.922141067s ago: executing program 4 (id=7381): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000100), &(0x7f0000000140)=r1}, 0x20) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x149, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x5d031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r6 = socket(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r3, 0xc0189375, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) recvmmsg$unix(r6, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) 4m5.962532123s ago: executing program 4 (id=7401): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xffffffff, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x80}, 0x18) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000001300), 0x8f) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000240)=0x40) writev(r0, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000180)=0x40) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0x1}], 0x1) close(r0) 4m5.939082573s ago: executing program 4 (id=7404): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000500)={0x1, &(0x7f00000004c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0, 0x0, 0x40}, 0x18) r1 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) r3 = socket$nl_audit(0x10, 0x3, 0x9) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000080)=0x12, 0x4) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000002640)=0x831, &(0x7f0000002680)=0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3010052, &(0x7f0000000540)={[{@usrjquota}, {@nodelalloc}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@journal_dev={'journal_dev', 0x3d, 0x7}}, {@nombcache}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@user_xattr}, {@bh}, {@dioread_lock}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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") open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x120) pwritev2(r5, &(0x7f0000000140)=[{&(0x7f0000000080)="ff", 0x4000}], 0x1, 0x5405, 0x0, 0x0) r6 = syz_usb_connect(0x5, 0x13af, &(0x7f0000001080)={{0x12, 0x1, 0x110, 0x3e, 0xef, 0x7c, 0x8, 0x19d2, 0x1110, 0x331f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x139d, 0x4, 0x9, 0x8, 0xc0, 0xf, [{{0x9, 0x4, 0x5f, 0xe3, 0x5, 0xff, 0xff, 0xff, 0x7, [@uac_as={[@format_type_ii_discrete={0x12, 0x24, 0x2, 0x2, 0x1ff, 0xd56f, 0x4, "2b6c8c7d5698950fd9"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x800, 0x1000, 0x1, "38c9e3af505004"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x3, 0x1, 0x3, 0xd, "c3"}]}], [{{0x9, 0x5, 0x8, 0x10, 0x200, 0x6, 0xc7, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0xffff}]}}, {{0x9, 0x5, 0x7, 0x10, 0x40, 0x1, 0x1, 0x2c, [@generic={0x33, 0x2, "a5aee909aa4c290863d8aea6a68a1276dc4556e4206faa5753f1eed492db13fb8bbd4102866170c67a5577252558b5204d"}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0xc, 0xab, 0x6, [@generic={0xd4, 0xc, "bb99204bb6f9279df9ffd44be5912d3ea284da944d04052080920025dba4daaac1a2c23de3345a04cd8232bc1e422968d9a6dec0f29a46fb694eacae968905ef54183d0eb250e9b2f1a648189532a0cda669d4c5ecdc5b7dc48418e0ec72a14e14a289095f09a609b8106c6b4b77901028f1d39a451759890f3c8be7f68782f4d9153662b7744af0a0f0e6af89d3862e7f11988eb5bda8c0b442ba93b7721daa9414e313d4e8b7e33e60750afb66854b0d221484d1d63dd1bc6b361bab2536f8c511e5d1e1c7878d43939ded98dbe5a02129"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x6, 0x2, 0xda, [@generic={0xd2, 0x0, "ae6e1439f24cd88bc275d4957ccfdd432b895d2677c799f03b2fbcdfc110b4c7f45fafd28e65433e77b0f786a32275406ef5bfda12e7e8381ea8d41709de05866777c095b06975bea398ce877e242cdb781297f0f192c83bccc976f8f5449fb9bfdef5339845346c6b188cdf63f31b4e829acae34a46b09bfe603f0e1687b6a23c19918865d54c45c9dcfb2b6618c390c96bc8dd62c44fc04cd78866876794d94e7396bd03a7e3ad52520581564940f3d7e642c61029a699af6e9eb217fdb3efaee5a71030d39de8fbf68707ea2d81b3"}]}}, {{0x9, 0x5, 0x7, 0x8, 0x40, 0x6f, 0xf0, 0x0, [@generic={0xfe, 0xc, "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"}]}}]}}, {{0x9, 0x4, 0x59, 0x5, 0xe, 0xff, 0x1, 0x72, 0x3, [@generic={0x65, 0x23, "aeb24f9988bea2d93281f1fbf9351169a42d894317987d2f6f4731efeac6b0aa8e0baa03ace93f533c5841872ac57a6370844649d3b043df106cf5b293460644b514cf27ba1a991b11f6a8b634897078edc072b3126f63088b5e68654d21fca90e0523"}], [{{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x35, 0x4, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x80, 0x5398}]}}, {{0x9, 0x5, 0x9, 0x0, 0x10, 0x7, 0x0, 0x2, [@generic={0x65, 0x11, "87a2b3c9e09b8abe8a81265882404869641ec955ee5f0e2fc8c3e0d73a47b7e8a7ee2d8a0b18313a119350768b669fb6ced6e23bfac6efff50d9d499ce29ec92613cf9ad42f397984c04584b891b8b59c1b78d086306f83261a2fe7e2fcfd3add06aed"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x3ff, 0x8, 0x0, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x112}, @uac_iso={0x7, 0x25, 0x1, 0x41, 0x3, 0x200}]}}, {{0x9, 0x5, 0x4, 0x3, 0x40, 0xfd, 0x4, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x2, 0x3}]}}, {{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x3, 0x5, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x3}]}}, {{0x9, 0x5, 0x4, 0x0, 0x20, 0x3, 0x9, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xf, 0x1}]}}, {{0x9, 0x5, 0xf, 0x2, 0x20, 0x93, 0x5, 0x3, [@generic={0xa3, 0xc, "09bcb549accf0e24b666df000b1819d61f4abdd0422a7b107d7adabda38bfe1d30a35d3212a020d84251dc89b8863d6ae8da91edd05b8a1ac45214713927debd7a5dad84a02e0c7e9960898febce832c04e6ecf864843678bddcf0c48100f54ca232377655a2cd35726de3e0d05d4c78871a636357fb9fbdbacf49993bd19787bec7409467e011c845945c2e92088830b22cba908ff956eb96c24f8f78ca5df113"}, @uac_iso={0x7, 0x25, 0x1, 0x40, 0x0, 0x4}]}}, {{0x9, 0x5, 0x1, 0x0, 0x40, 0x94, 0x3, 0x6, [@generic={0x82, 0x31, "49a55ec9c2ad22a4c7482a5ab564f21f400ac788aafb967da8810f71a31e72980c18b1171577a45a6d98595fbe65f1aa7004c58ddb71505dccec4b64623ff59216332cee0c543e0e3ae0ddb6f68505882ad1693d0885f3eedd9c926da72fc3d1c96ff6bb7d4ba279b7d7163e81a8bbda62bdc61371950708d173e315c5e7c90f"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x10, 0x3, 0x81, 0x5, [@generic={0x4, 0x9, "b520"}, @generic={0x7a, 0xc, "b55febba656777e6aedfc837548307dfadfef44a7cfe6f73e65e07b60b4516ba39a649daab573c2979900dd3ce5c547ebb60f067a347f1be93b4db01788b17924d6e04903155de96623ffa197605ee3c9efd796d0b8fb4d1de3b166bc88ae5293224e8c38abe2227e356cdfed4ccf99bfe7b922428b695de"}]}}, {{0x9, 0x5, 0x8, 0x14, 0x200, 0x4, 0x0, 0x8, [@generic={0xbb, 0x21, "85bf8f684c631155190df3e8112d77db4c4d2921766e1fd636329e5c497de203cddc8241076fbb07d72537fd3ccf57c845a369d20e7d9fcb0e93991d1fa72aeba2cfa9a1f54e70e85459e64721d21b3f6d01b9bf35577a7fca66faa271c3ff8e1d46355a2008c9307ad19de9e52807735cf48d4534600c8d4cd8838f85790e8884364a819b77cd4b001a8f7c8e7715970d5cac4c89ccabc88428712a8af12843d13800936945ad183f59742ad44d1cb89ecc02ed6655297f8f"}, @generic={0x6b, 0x8, "001317e4830af5a7fac1e0d1bff474783b541c133b90f1a34fd0043b5b4050984963dad196df6330b89326844b35a155a6e71f025f20448fb212d111281e2e4decb986eca4a97dcaf8fa99296ab5567a2986d892a6197547384efeb099d87271caf5ab30e7113e49ce"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x240, 0x40, 0x8, 0xfa, [@generic={0x4a, 0x24, "eddc84b8b15edaa1325cde5651a3feaa439b2f69982d404b3197fd0d705e8a71eb54345aaff99a9d7b65c501284a25f3575cd37353911bd2180c557aa7c5fbe407cb2ce31df42773"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0xf79c}]}}, {{0x9, 0x5, 0xd, 0x8, 0x20, 0x8, 0x8, 0x7, [@generic={0xd5, 0x2d, "7708cf1fcf787e95a44963c000a44fbf9b4ba8f4e03b226d8672e1dbbbcf2673f250c5d2ab857d8141593abb94a04e700ea28b39dca18a6428ba154655dd24cc4e5278e1394caebbe873174a1331e9fd2b2bfc9b275fd48cdbd32f72c769a433de759b20597affa93796c5892cab6d3b39fd433c32f3f408bb123691b56b4abff366393dba1956ed90015e03e1c595e6283926ee5c7d55c4717934dce2f779e77b300d27b4d8057d2c6561972351712a07c1df41e438d47fc8153486f079f31a7d7dbda2c1ae4ac918ad4f3ded134db5383494"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x400, 0x44, 0x9, 0x3, [@generic={0xc7, 0x21, "6a3958a10dafd33dfab521280afecb8e8bdb91699ff32f0f162ccc1c024b416dcd8c322a2f41e8df1de1f474a5681b9eb13a4fe6a47490aaef91d598ebd2aac1e9bb11ab57d0a3694a8b4df4860e6e1e620f0736aee4c1c2cbb4365660ea4cda17671a176d443d7bc446fe02306b6c3f03e805eeedf0687fca4107787c5eca7b25789bfdbd965a684a30f6b8e098b139dd2e8c4e94b47449e162c492abfc0606499651df752fbe9babf0e408ae3dd6b0c3031b9906db7ad5d93472cf726cab4c5ee32d5f14"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x600, 0x0, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0xfff}, @generic={0x1f, 0x24, "c26f9b2ac60ccbf59fcaa655060a9bd0d0faaf9557077486931aa3d4e5"}]}}]}}, {{0x9, 0x4, 0x3a, 0x6, 0x3, 0xe4, 0x79, 0xa4, 0x38, [@cdc_ncm={{0xa, 0x24, 0x6, 0x0, 0x1, "4f5e28c6d8"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x1, 0x81, 0xe1}, {0x6}, [@dmm={0x7, 0x24, 0x14, 0x5, 0xa}, @acm={0x4, 0x24, 0x2, 0x9}, @mbim_extended={0x8, 0x24, 0x1c, 0x81, 0x6, 0x2}, @dmm={0x7, 0x24, 0x14, 0xa662, 0x1}, @acm={0x4}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x97, 0xebf}]}], [{{0x9, 0x5, 0xc, 0x8, 0x20, 0x5, 0x9, 0x8b, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x91, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x7}]}}, {{0x9, 0x5, 0x5, 0x0, 0x0, 0xe, 0xb5, 0x0, [@generic={0xe4, 0x21, "e97e49ed826a552abec8af1953734cc9dfd7dea7aa7b7edbda366a9bf955de3e42e58748efd66729ad80433374404e09dc045b45ed9d50f7434a41d7601905d3be57260ab1b8c0767f3503bdaeb72fff2d72013bcd423babc0e8aec7641826888b558e8769a65ba0f38a30c0280eb157a57fa1bf496570ba11358271ef1a588f8b26b6d68669bb94dba5d2a161710e5d9a6f87866b74357f191c1f0135d5812401c915ee27795ab035631b56fcab2cd0432629e871894c31f5b7834902c6563ff44a38c4c5dad62ef101496afdf3330040c44003635b6687498891a7adcc1de77101"}, @generic={0x60, 0x5, "6939bc7f866c5d3331f782a60760520d9ffe78428aad8be5af7952d80401b56ec3f7f663e24a73f71975af282f02ba982f9f6d295399f22845a83d30bbded2fd32a5952e0f4bf2000828fc420d6ac533a33fc421b41178772f2151b992f0"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0xa, 0x4, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xf, 0x1024}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xf7, 0xfef4}]}}]}}, {{0x9, 0x4, 0xc3, 0x4, 0x10, 0x21, 0xd4, 0x2d, 0x1, [@generic={0x44, 0x24, "a6ea89485de3015bf7186adb59aa1b83e25e93bbca6bd175f4b936de2c64187041c8715f149dcb9e3707e204bf64f86661a7f8772316ce01b5ac3afc869ce92ef830"}, @generic={0xee, 0x2, "1e3bbbcc55bc69bda8247ff99da042df09966707b41ce87160f20e17c3a560514e956a4c9d776ed647e2b995dff51e06554f1b20be4b2e41f9ab722a4ef2e91c994a6251a0050c4a31b7fd3661d354175b6fe96750fd1c3f3c5e5caa17d6b48d15ac5007ce20ddddfab30f76b852b94a9d3db54dbb19b4918ec766e4f01ee7a3f6023a538818c7420bd58d7296cb7851c5f7beb77f391785293524fd158a869385d8e2cd810c26bec8f0dda9ded08d90d64d7a02f3cfc32224dd9fcfd94b6a2b07a6497215094ded4d48c473136e85499250d48c09d05f087f8dd627cedb37f8e58011011e51230106f43979"}], [{{0x9, 0x5, 0x2, 0x0, 0x10, 0xfe, 0x5, 0x7, [@generic={0xc2, 0x2a, "8efea47a180dbe2bfe35a7ebb38f7e33378308d71004613f013d2850fed8f523811159ce3f71eefcd8d9d79996eb2367525573d041281bdf80d4ca6e8c0b9818690b954bdfa987af440afefa3552dc0ce5a01d0f8390e11ec1aa52c272997fc2b8814d57d053e91bf5689516c548bccc434b01678aedd27748643a65cfd71dfd0b0f5c216d88831bd9c4f887680dca2874f46be0785f6aec7da125db6fbcdfe735412a1748bac5e2b222fd7fc80a371ef0163dc260ba0cd2953d28cc4f8a598e"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xf7, 0x4}]}}, {{0x9, 0x5, 0x5, 0xc, 0x10, 0x48, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x800}]}}, {{0x9, 0x5, 0x80, 0x8, 0x400, 0x4, 0x8, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0xb742}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5e, 0x9}]}}, {{0x9, 0x5, 0x3, 0x1, 0x570, 0xf, 0x2, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x6, 0xcee6}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0x3, 0x2, 0x4, [@generic={0xa3, 0x24, "3f36ebc21824099a01ead2b8deae9eb50099c6f382025dc037b7584897ee2da39e0e8eedc30d41d9c78410661c994bb8bec2f3aa1a7b45d86a66ed1a9fa333294f401c87a25d0e933b26c673a38640de3a6bb48c59c62bea4638a760af8c44b3c3af3ac801804362daab3aa476ed68e535b36421f932b02b7bf9720959188afe834505131691ab421fefc8d311bc0f3297c50bc2ab5358466e87383290ed7feeee"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x418, 0x0, 0x6, 0x10, [@generic={0xa, 0xc, "4f68b503b8f13f55"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x200, 0x40, 0x3, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xc, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0xfffb}]}}, {{0x9, 0x5, 0xb, 0x2, 0x0, 0x1, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xa, 0x70}]}}, {{0x9, 0x5, 0xe, 0x2, 0x400, 0x9, 0xf7, 0x1, [@generic={0x83, 0x7, "22a4455bf5fd995090f15acda83893a4973d8a349ae720b5fd0de56eb4b04316aa10ba1c79887b8190430181ee00033043a9df2330cd9932f331e6e4c9857ad967ef87d35e66464e1f97104e3caba6771dedb62dc792906d41b3497e1a9f819daeec99096e3c35773d2b56ccdc30b74865d8360dda4c6dd4fcb2a8c46115987df4"}]}}, {{0x9, 0x5, 0x6, 0x10, 0xc785a9fb1f3fb480, 0xc, 0x4, 0x3, [@generic={0xbf, 0x24, "09ec16d6f5a8df9444e68901d673a3c511b3d59ba1f2a16c3f69589db113836e4916044f077538bd2648233aa7b3cec57d13cd7eec0d9e3ddaef4f2dcfe6b73833b04d1c462ea71e1cbdcc1d698cc62a6c7ff5511cd358cb92f7485efde780da3f989434d636fe7daf4a3dd1e06638051078df28fb5748e748dbc6cde67da7bc3d452f483933ace1573783f4e47b6ea9d34fa66bd67ca9e19e8c48e407591aec314ddd95cddd20894073e2bf9ca3ecf45899f7799b91835896c33075a0"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x40, 0xf7, 0xb, 0xd6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x3}, @generic={0x5a, 0x1, "05ddc78b8baf36c3d3cbae0e1b25fcd588d47a3835a80e4433f8a730bb109e51265d5ee24d3525df13bbebbfe09642c24de61279c87ad1fda5c71f8c0fb7e7acc999e867002dc29bdf983c56258dd8c8b8526ff3344e96e6"}]}}, {{0x9, 0x5, 0x6, 0x4, 0x40, 0x7, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0xc, 0xc}, @generic={0x61, 0x21, "9af5d29eae61536b76985c983300be8a731d9f71bb0ebfa076f51b66eb416435c16c5a77b1fc59eb21d5f4d5a53f8c5c8e84e46fd17c59958604f799e98ea92ae8d3683abbeb3a5a6d00d5cca36093224995ce57c1954206a189632b2e469b"}]}}, {{0x9, 0x5, 0x9, 0x1, 0x8, 0x1, 0xa, 0x9, [@generic={0xcc, 0xf, "723102cc247a0093419e8866af1e07ef19b9d257fade3d67e465324ec9a7f2398e99969afd152096372db592f46b11482811456fb96461b22f89c271eba8bf209a85048091b8dfd6537f23182016681ec4855184525e7a9ce902aaa28cb71729b430b3e65dd3e0c54e063c46f089ffc232a55a9a0fd1e944a4f5a370ab5756b702c4908aa7161c5d2ca78b7508a79310799eb1803b5d4f94cce44edbd0a2c5bd8d79dbdd0902bc46d26a36b55194c5260aa945b8e80955ce153dd3c033c582621f1bb92a76ec3dfdaa61"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x7, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x2, 0xfa79}, @generic={0x80, 0x30, "269f0e5283ae92f4c1e7e7acb03562786d5636407165da38c65230581b764aa19dac83088174f3f0fb7d36f1a6acd1cded556d104b6d7f3d4e8782106c4b1edffa8512b5df36481677c96f4aac49bbc8535d67eef1787bf9a1f490a0546c9396b84b05aa58faa0fbc8e915f976ea5693f919bf9fa6e548ff94d79c788aad"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x3, 0x9, 0x0, [@generic={0xad, 0x22, "987b9d3c6529987b5d1364130fe772003b1a093f0ead7ebacd13a78700270706031ebe65336d36e1b5de2da2ffd06e1a1c780f9cd1bba07d08c6f8dfcab1d50228a09d83dc92c97203fafaeefdbe6e988f2c0783e44d62b2ae7351c51b0b99076c565e0fd7a246cff401dbd061a5f5a5e1c11e38f7e12cd87bc82921a398ea90cf794223daa1058823ce95a9f2ed5d7deb2b00d7b14f1d94c5b0281fc6f3430eb2e465dd9398329603adef"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x10, 0x6, 0x0, 0x0, [@generic={0xae, 0x30, "27c48d74f5b3e9108a496aa3bb23a4930c8454a91aaff6cc5b773d6aa620c489d01c2fbca08920ff16cec8f8f965da42bcb019e44916a6f3a6d2a06a9679db0b974c88f6f63a2667d43b07152b8dc7409b585e0efacf8e14e9c5aa56126abaa581a115d408020a2811a78d0c34e5a4c460f8c133956cc878471586af5909596862563e85f0324fc0e0a443a6bfb87c76994ca291e84e564f841804433878cfc45052ef75ac2c2415760702b9"}]}}]}}]}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0x10, 0xe, 0x6, 0x20, 0x40}, 0x1a, &(0x7f0000000180)={0x5, 0xf, 0x1a, 0x2, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x2ae0383dae629f17, 0x5, 0x9}, @wireless={0xb, 0x10, 0x1, 0x4, 0x38, 0x9, 0x7, 0x3, 0x3}]}, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x457}}]}) syz_usb_control_io(r6, &(0x7f00000006c0)={0x2c, &(0x7f0000000340)={0x40, 0x22, 0xb1, {0xb1, 0x21, "2d459168431224fe8403764c38081f6e9f7395fb37cd489e2d04d3fba1922008cf04f12b2403b1972e5277ce9a75735de85982f28af4671bd9e0ecc57e56660561e1d24df29dd54b8c62018508ef83f89b43e1c7e04e219dfad1dbc2555be83b3db8a7b9cfa0ee76d566abd1f7fbd409512bacca389fd6ca5470aedbe09a5bf62be5305c830e5e977c982b69cfd883d758c5f79cae2b7a3c71936e3efe66f63635dcde8f0e03c68495c1708c085b38"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}, &(0x7f0000000480)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0xe, 0xa9, 0xff, 0x2}]}}, &(0x7f0000000640)={0x20, 0x29, 0xf, {0xf, 0x29, 0x0, 0x10, 0x12, 0x6a, "d887a9c2", "46b5a90b"}}, &(0x7f0000000680)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x60, 0x8, 0xf, 0xa, 0x3, 0x1}}}, &(0x7f0000002580)={0x84, &(0x7f0000000700)={0x20, 0x10, 0xba, "36ebd76c27c467d1eb9a52ffa2b714c4834b958175e57e6c34cd59da3827355a866471ac172cfb96559906d95ba2ebe56d25f0c716e8bd2f234352e33481103b47d5e3617b600be599b3a83e1684de2178e02879b0e509ab028438191500476f5759af2d9832481f995d081f00f5178dd07af783a18dbe479b79dc9c960b849d132627aabee258df51e72dcf56a7f8944bd81fc8032103e1e4d8ad34a8251b1e96f191e637d560dc60ad19fbc14d405a717968c39a891768497a"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000840)={0x20, 0x0, 0x4, {0x3, 0x3}}, &(0x7f0000000880)={0x20, 0x0, 0x8, {0x4, 0x8, [0xf00f]}}, &(0x7f00000008c0)={0x40, 0x7, 0x2, 0xd}, &(0x7f0000000900)={0x40, 0x9, 0x1, 0x2}, &(0x7f0000000a00)={0x40, 0xb, 0x2, "eba9"}, &(0x7f0000000a40)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000a80)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000ac0)={0x40, 0x17, 0x6, @random="bc759a0063d7"}, &(0x7f0000002440)={0x40, 0x19, 0x2, 'z_'}, &(0x7f0000002480)={0x40, 0x1a, 0x2}, &(0x7f00000024c0)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000002500)={0x40, 0x1e, 0x1, 0xa}, &(0x7f0000002540)={0x40, 0x21, 0x1, 0x9}}) setreuid(0x0, r2) clock_getres(0x1, &(0x7f00000000c0)) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000701, r2, 0x0) 4m5.029238089s ago: executing program 4 (id=7421): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000200)={[{@quota}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@block_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x434, &(0x7f0000000940)="$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") creat(&(0x7f0000000340)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"}) 4m4.374695396s ago: executing program 4 (id=7426): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000001000014000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) io_destroy(0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@nolazytime}, {}]}, 0x6, 0x4eb, &(0x7f0000000a40)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) fsetxattr(r2, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='\'\x00', 0x1a, 0x0) 4m4.087358105s ago: executing program 33 (id=7426): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000001000014000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) io_destroy(0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000080)={[{@nolazytime}, {}]}, 0x6, 0x4eb, &(0x7f0000000a40)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) fsetxattr(r2, &(0x7f0000000000)=@known='security.selinux\x00', &(0x7f0000000080)='\'\x00', 0x1a, 0x0) 3m38.775683765s ago: executing program 5 (id=7904): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ptrace(0x10, 0x0) ptrace$ARCH_GET_CPUID(0x1e, 0x0, 0x0, 0x1011) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000900)='./cgroup.net/syz1\x00', 0x200002, 0x0) syz_clone3(&(0x7f00000009c0)={0x8000000, &(0x7f0000000180), &(0x7f0000000780), &(0x7f00000007c0), {0x10}, &(0x7f0000000800)=""/74, 0x4a, &(0x7f0000000880)=""/20, &(0x7f00000008c0)=[r0, r0, r0, r0, r0, r0, r0, 0x0, r0, r0], 0xa, {r3}}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000940)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@abort}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") 3m37.470486119s ago: executing program 5 (id=7920): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0xa6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x50) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000800000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b4000000000400004802800018007000100637400001c000280080001400000000108000240000000090500030000000000140001800a0001007265646972000000040002800900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x5090}, 0x0) 3m35.43323898s ago: executing program 5 (id=7929): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00'}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f00000003c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1401000026000100000000000000000003"], 0x114}], 0x1}, 0x0) mount(0x0, 0x0, &(0x7f00000002c0)='9p\x00', 0x0, 0x0) 3m35.27986346s ago: executing program 5 (id=7930): perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext={0x0, 0x8000}, 0x1401b, 0x3, 0x7, 0x0, 0x0, 0xfffffffa}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000001e80)={[{@inlinecrypt}]}, 0x1, 0x549, &(0x7f0000001800)="$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") openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f00000002c0)='rpm_return_int\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, 0x0, 0x4000) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x81}, 0x18) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000580)=ANY=[]) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='f2fs_bmap\x00', r3, 0x0, 0x7}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x8, &(0x7f00000019c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8b1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffaf4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431410fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6daa790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c7070800000000000000433b809bdb9fbd48bc873495cbff90326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf8714d7bb2366fde41f94290c2a5fdecb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1f5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41ffc12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5eae593fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9db25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27832b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bb0800c51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a540f0c10ec3a11667290b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad95971030000007d00000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c6055bb164ab413d5467ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d7ab3753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf06db539f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe6e7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a1914b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d0104361c37c61a43b5afd865b60d4cae891b73220f17d25979a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c69a795927e3861654736804bed4214040b7724c056d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e64701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8adc67ec92d13a4faa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a2689217380400a9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c027060697a7f10132b1c259d3f28b9ea81232fbef665f6212f875b2a000000000000000000000000000020bd79e41c682139c58ac1deb039a691ad640e12c12fe11d70fe495906f2d5d71778acbd4eee53a3996cb0de84bd2b059d60c0f96a53ea44e0b293865aa68df494f87db976e36ad6c06912244d4c883c4aaa60b4a1392ce0b2f2c519663b4652ff871e0f6dfff9f7d34ecf04be0a58c3d53174b67d1886e34b81ad8c60da56acc64739c3acab24aa8d0ac92d465074f915608b1b60a948bad401b1a7fb3627bbe6c45123ed44bfdf8cc143bd1b7a663dc3d0476b8e39becffc429e41f66b1e37ae52aacaff0f1dc8ea70b68c25072e20586b19127d75fa71577f265c51000000000000000000000000000000000000000000915c2cde78db002a20e370600f56b3803786ffff268fa1782c240a1d3b62bb5c9c5712bc58a0f276f5224b6efaceab36d1468b0800000000000000cbefec08ac7cb62a9f6abcc97daf83edafe4409ecba3050a321a180af12bc59b1b2f1a9cfdf4bf2d260000000000a62f09e2ede938ea300cbefada05c356f12cdc84f66c65e669f0ffcb4ad94f6a8ba978f89ab3d2e62bd2c3eae921e9871acbf36c259d3a86dd5d022bac5ee38f6eccd3e462e47a96dc9e653fb7d7a64405a7c97fb3946f6766f937119652e07464910290873e989f3798f5324de8584a1a8772d2bddfc6eea633f7be50d362159914a877d2fe0fc67783b4fb000000000000000000328b4ed8ac2f2d0440488e4b1d32280373df7ce8847683fae1c73ee4cb320ba8a820"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x49) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sys_enter\x00', r4}, 0x10) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r5, 0x0, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00'}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1000, 0x103) 3m35.022719858s ago: executing program 5 (id=7931): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x1, @multicast1}, 0x10) read(r0, &(0x7f0000000000)=""/33, 0x21) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() read$rfkill(0xffffffffffffffff, &(0x7f0000000100), 0x8) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file3\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000080)='rpc_pipefs\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c000240"], 0xdc}}, 0x0) 3m34.109716164s ago: executing program 5 (id=7943): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9135}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYRES16=r2, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) 3m34.086745994s ago: executing program 34 (id=7943): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9135}, 0x18) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYRES16=r2, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) 4.249693969s ago: executing program 1 (id=11625): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000001000000ff"], 0x48) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811000044", @ANYRES32=r5, @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f0000000040)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003cc0)={@fallback, 0xffffffffffffffff, 0x2, 0x0, 0x0, @void, @value}, 0x20) 3.862742067s ago: executing program 1 (id=11634): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000080000000c"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f00000003c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x20000000000000f4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r3}, 0x18) r4 = io_uring_setup(0x1de0, 0x0) io_uring_register$IORING_REGISTER_PROBE(r4, 0x8, &(0x7f0000000cc0), 0x0) 3.778664957s ago: executing program 1 (id=11635): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) io_setup(0x2004, &(0x7f0000000680)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000540)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 3.693410566s ago: executing program 1 (id=11636): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x800, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRES64, @ANYBLOB="5576472668733ac38ff317863a6a361a2ca1296d09913b55ae69c1a554269b69fb42347ce3807e872d46db2ff5aca500aef1a34988b9f636becc1ac447ba4802214d2a0550795859cbe3f409da3d976ff54177d1d5a8d772a56757821e2fe5fe47ee9a0c9df411a5cba7208a3ebd935aea82daac45b1cb7978814f1d0b50e82b4bdb11aeaa67e104fc35ab11d60162be3a8df928055392d7b18ace13de73ea4e4c36e6de53340735419cdb434dbb9e6d2433ad18954ec63c8151cde9a9d60e5a94", @ANYRESDEC], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x140, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000001040)={{0x1, 0x1, 0x1018}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00'}) 3.627998006s ago: executing program 1 (id=11638): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x400000, 0x100000000000000) 3.232642484s ago: executing program 0 (id=11644): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000001000000ff"], 0x48) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811000044", @ANYRES32=r5, @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, 0x0, &(0x7f0000000040)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003cc0)={@fallback, 0xffffffffffffffff, 0x2, 0x0, 0x0, @void, @value}, 0x20) 2.810616603s ago: executing program 0 (id=11645): syz_open_dev$tty20(0xc, 0x4, 0x1) epoll_create(0xa60c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_gettime(r2, &(0x7f0000000180)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000380)={0x1}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r5 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback={0x3}}, 0x1c) fcntl$lock(r4, 0x26, &(0x7f0000000380)={0x300, 0x0, 0x103ff}) 2.788990732s ago: executing program 0 (id=11646): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000001e80)={[{@inlinecrypt}]}, 0x1, 0x549, &(0x7f0000001800)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) 2.476292171s ago: executing program 0 (id=11649): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002440)={0x6, 0x6, &(0x7f0000001b80)=ANY=[@ANYBLOB="1800001900000000020000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600)={0x0, 0x4, 0x0, 0x100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@cgroup, 0x11, 0x1, 0x10, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={r3, 0x0, 0x25, 0x4, @void}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@fallback=r0, r1, 0x0, 0x2000, 0x0, @value=r5, @void, @void, @void, r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) setpgid(0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7, 0x0, 0xfffffffffffffffc}, 0x18) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x26}, @in6=@loopback, 0x0, 0x5e, 0x0, 0x0, 0xa, 0x20}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@loopback, 0x0, 0x2b}, 0x0, @in6=@rand_addr=' \x01\x00', 0x0, 0x1}}, 0xe8) socket$key(0xf, 0x3, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) chdir(&(0x7f0000000000)='./file0\x00') r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000800)='ext4_es_lookup_extent_enter\x00', r9, 0x0, 0x7ff}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r10}, 0x18) 2.368462641s ago: executing program 0 (id=11650): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) clock_nanosleep(0x2, 0x0, &(0x7f0000000300)={0x0, 0x989680}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811000044", @ANYRES32, @ANYRESDEC=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000003cc0)={@fallback, 0xffffffffffffffff, 0x2, 0x0, 0x0, @void, @value}, 0x20) 1.948404899s ago: executing program 0 (id=11652): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, 0x0, 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0x400000, 0x100000000000000) 1.558542607s ago: executing program 7 (id=11658): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) io_setup(0x2004, &(0x7f0000000680)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000540)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 1.434717596s ago: executing program 7 (id=11662): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffa8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) write$cgroup_devices(r2, 0x0, 0xffdd) r3 = socket$kcm(0x10, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='timerslack_ns\x00') r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f0000000280000012", 0x2d}], 0x1}, 0x0) 1.178420305s ago: executing program 7 (id=11667): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) r0 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000580)=ANY=[@ANYBLOB="e0000001ac1414aa0000000001000000ac1414aa"], 0x14) r2 = socket(0xf, 0x6, 0x102) bind$inet(r2, 0x0, 0x0) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x19cd46b, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESOCT=r8, @ANYRESHEX=r0, @ANYRESDEC=r6, @ANYRESHEX=r7, @ANYRES64=r5, @ANYRES64=r9, @ANYRESHEX=0x0, @ANYRESHEX=r9, @ANYRES64=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r10}, 0x10) r11 = socket(0x10, 0x3, 0x0) write(r11, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000200000008000f0001000000", 0x24) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r12, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e40)=ANY=[@ANYBLOB="10010000070a010200"], 0x110}}, 0x0) 566.699022ms ago: executing program 1 (id=11670): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x4, 0x2, 0x2}, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x48) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sysvipc/msg\x00', 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x3c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x3c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0xeff9, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 554.975843ms ago: executing program 2 (id=11671): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00c500"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x11) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001800090000000000000000001c140000fe000001"], 0x24}}, 0x0) 285.309481ms ago: executing program 6 (id=11674): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x18, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r2, &(0x7f0000000180)=[{&(0x7f0000000400)=""/194, 0xc2}], 0x1, 0x49, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) 258.209891ms ago: executing program 6 (id=11675): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 233.610511ms ago: executing program 6 (id=11676): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = socket$inet6(0xa, 0x3, 0x11) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000040)=0x49, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x1000000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c) socket(0x5, 0x4, 0x5cb673ee) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000180)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54da0e13047e9f62fbb85ccc774b3ec4c81a1a985232d16d0d934460e920a59172e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9ae"], 0xfd, 0x274, &(0x7f0000000500)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) r3 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(r3, &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) write$tun(0xffffffffffffffff, &(0x7f0000000040)={@void, @void, @eth={@empty, @remote, @val, {@mpls_mc={0x86dd, {[], @ipv4=@icmp={{0x5, 0x4, 0x3, 0xa, 0x1c, 0x66, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100}, @info_reply={0x10, 0x0, 0x0, 0x40}}}}}}}, 0x32) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000000100)={[{@noload}, {@resuid}, {@data_err_abort}, {@noblock_validity}, {@nobarrier}, {@lazytime}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") chdir(&(0x7f0000000280)='./file0\x00') link(&(0x7f0000000280)='./file1\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 229.539781ms ago: executing program 7 (id=11677): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xfb, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0)=""/50, 0x32) bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000500"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f00000001c0), 0xff, 0x52e, &(0x7f0000000640)="$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") 193.070481ms ago: executing program 2 (id=11678): mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000800)='ext4_es_lookup_extent_enter\x00', r0, 0x0, 0x7ff}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r1}, 0x18) 186.393071ms ago: executing program 6 (id=11679): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000180)='%-010d \x00'}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x0, 0x3, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0, 0x2}, 0x4a50, 0x80000001, 0x0, 0x0, 0x0, 0xffffffff, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000004cc0)=[{{0x0, 0xfffffffffffffdb9, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r5, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r6], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x400000, 0x100000000000000) 147.541761ms ago: executing program 2 (id=11680): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c250000000000202020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 95.065671ms ago: executing program 2 (id=11681): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00'}, 0xa) 92.00373ms ago: executing program 6 (id=11682): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000500)={[0x5]}, 0x8) name_to_handle_at(r3, &(0x7f0000004740)='\x00', &(0x7f0000000840)=ANY=[@ANYBLOB='\f'], &(0x7f00000047c0), 0x1200) sendmsg$tipc(r3, &(0x7f00000000c0)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x3, {{0x43, 0x2}, 0x1}}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="18ea5054474984e76f7240741984a9050eeed8136519d083444c362cf5c50a4f2be06ce9f46a312b3bc59d260b09360b5dee3ec6302abd6b66a85fe5bc98fcf4edc360054d789f18788b155c2dadfeb27dbde9626b822a87314f2f159733c60dc510fc23f5c9bfab487d3635cdc0240b2b3adb61f0d822ef9dce74edb8e5869a3da58ef026d09636158d1f90fbc5b672c20e39eaa49acd360c25c9e0aa8226811ad821884eb56b6473db128a6f3d7b21b6d0bd33ee8e349f7dbfcb5d4983d2e0ca02ba70e4961fa5bd79f1231082", 0xce}, {&(0x7f0000001480)="c20de0db24113761723e650edbf65cbd2be1c0fd7599088efa05ab8e6de3666094d601f3c0931c0c84805a63e3bc82b378fde772e23353c0e6683d6a4422d01d7d23a7215a0ada21aeea8d5f9454469ca093e76ced5f183c35d8f11ee65fd125ba0dcd30fe0391143f55ec6fb99a2b5c6a6219b832629beeab82d3e2b7490eebe35ebe9d5dcf5eca94e1cd16f88208a5916d8cd9a11c94e1894d747c4cc8b25d10e6b9f37f09b44362a0032d3dbd63060447bba0584a952d0fcca97c1af2ad0c05c2ec6b1540b546b9a5500a39eaa9e0a7d3d4dbc1c280cedf2f2f8a4112e4042ab803ee168bdacaba0f5e886f92e7", 0xef}], 0x3, 0x0, 0x0, 0x48804}, 0x44001) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000001dc0)=0xc) fcntl$setown(r2, 0x8, r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000100)='cgroup.threads\x00', 0x2, 0x0) sendfile(r6, r6, 0x0, 0x1) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_procs(r7, &(0x7f0000000480)='cgroup.threads\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f00000001c0), 0x12) 75.57127ms ago: executing program 7 (id=11683): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r3}, 0x10) io_setup(0x2004, &(0x7f0000000680)) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000540)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010100}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 58.626621ms ago: executing program 2 (id=11684): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002440)={0x6, 0x6, &(0x7f0000001b80)=ANY=[@ANYBLOB="1800001900000000020000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000580)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x14, &(0x7f0000000600)={0x0, 0x4, 0x0, 0x100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000072000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000005c0)={@cgroup, 0x11, 0x1, 0x10, &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={r3, 0x0, 0x25, 0x4, @void}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000640)={@fallback=r0, r1, 0x0, 0x2000, 0x0, @value=r5, @void, @void, @void, r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000200000000000000001809"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) setpgid(0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r7, 0x0, 0xfffffffffffffffc}, 0x18) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x26}, @in6=@loopback, 0x0, 0x5e, 0x0, 0x0, 0xa, 0x20}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@loopback, 0x0, 0x2b}, 0x0, @in6=@rand_addr=' \x01\x00', 0x0, 0x1}}, 0xe8) socket$key(0xf, 0x3, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000800)='ext4_es_lookup_extent_enter\x00', r9, 0x0, 0x7ff}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r10}, 0x18) 40.36314ms ago: executing program 2 (id=11685): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) symlink(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000023ed0000180100002820702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f0000001940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/65, 0x41}}], 0x1, 0x2160, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x204092, &(0x7f0000000180), 0x6, 0x517, &(0x7f0000000c00)="$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") quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000011c0)) 2.07766ms ago: executing program 6 (id=11686): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000a000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000000080)={r2, 0x0, 0x0, 0x0, 0x0, 0xffffffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 0s ago: executing program 7 (id=11687): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x18, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000400)=""/194, 0xc2}], 0x1, 0x49, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) kernel console output (not intermixed with test programs): er failed while replacing table [ 611.766051][ T323] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 611.861567][ T326] loop2: detected capacity change from 0 to 2048 [ 612.049786][ T338] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.107484][ T341] loop6: detected capacity change from 0 to 164 [ 612.127045][ T338] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.206308][ T338] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.296469][ T338] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.336500][ T347] loop1: detected capacity change from 0 to 512 [ 612.360377][ T338] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.392277][ T338] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.420047][ T338] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.444005][ T338] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.510419][ T347] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 612.529744][ T347] EXT4-fs (loop1): mount failed [ 612.549762][ T361] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.598322][ T359] loop0: detected capacity change from 0 to 164 [ 612.622793][ T361] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.672642][ T367] loop6: detected capacity change from 0 to 2048 [ 612.680803][ T361] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.738615][ T361] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 612.805781][ T361] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.832858][ T361] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.859582][ T361] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.888088][ T361] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 612.967739][ T29] kauditd_printk_skb: 177 callbacks suppressed [ 612.967753][ T29] audit: type=1326 audit(1736430647.348:96372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=373 comm="syz.0.11012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4f905d29 code=0x7ffc0000 [ 613.042136][ T29] audit: type=1326 audit(1736430647.388:96373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=373 comm="syz.0.11012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7fdf4f905d29 code=0x7ffc0000 [ 613.065871][ T29] audit: type=1326 audit(1736430647.388:96374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=373 comm="syz.0.11012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4f905d29 code=0x7ffc0000 [ 613.089389][ T29] audit: type=1326 audit(1736430647.388:96375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=373 comm="syz.0.11012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fdf4f90473c code=0x7ffc0000 [ 613.112768][ T29] audit: type=1326 audit(1736430647.388:96376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=373 comm="syz.0.11012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4f905d29 code=0x7ffc0000 [ 613.136424][ T29] audit: type=1326 audit(1736430647.388:96377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=373 comm="syz.0.11012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fdf4f90473c code=0x7ffc0000 [ 613.159803][ T29] audit: type=1326 audit(1736430647.388:96378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=373 comm="syz.0.11012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4f905d29 code=0x7ffc0000 [ 613.183403][ T29] audit: type=1326 audit(1736430647.388:96379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=373 comm="syz.0.11012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fdf4f9047df code=0x7ffc0000 [ 613.206771][ T29] audit: type=1326 audit(1736430647.388:96380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=373 comm="syz.0.11012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4f905d29 code=0x7ffc0000 [ 613.231090][ T29] audit: type=1326 audit(1736430647.388:96381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=373 comm="syz.0.11012" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fdf4f905d29 code=0x7ffc0000 [ 613.256551][ T380] x_tables: duplicate underflow at hook 3 [ 613.403733][ T396] wireguard0: entered promiscuous mode [ 613.409589][ T396] wireguard0: entered allmulticast mode [ 613.430138][ T405] netlink: 'syz.2.11023': attribute type 1 has an invalid length. [ 613.438095][ T405] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11023'. [ 613.448008][ T409] netlink: 48 bytes leftover after parsing attributes in process `syz.7.11018'. [ 613.509417][ T413] loop1: detected capacity change from 0 to 2048 [ 613.535992][ T415] wg2: entered promiscuous mode [ 613.541091][ T415] wg2: entered allmulticast mode [ 613.866179][ T448] loop6: detected capacity change from 0 to 512 [ 613.883850][ T430] sit0 speed is unknown, defaulting to 1000 [ 613.890596][ T448] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.11035: Invalid inode bitmap blk 4 in block_group 0 [ 613.909928][ T448] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 614.099993][ T446] netlink: 'syz.1.11034': attribute type 10 has an invalid length. [ 614.160132][ T467] wireguard0: entered promiscuous mode [ 614.165685][ T467] wireguard0: entered allmulticast mode [ 614.191258][ T430] chnl_net:caif_netlink_parms(): no params data found [ 614.202322][ T473] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11040'. [ 614.339189][ T430] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.346484][ T430] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.353767][ T430] bridge_slave_0: entered allmulticast mode [ 614.360480][ T430] bridge_slave_0: entered promiscuous mode [ 614.376446][ T430] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.383703][ T430] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.399490][ T430] bridge_slave_1: entered allmulticast mode [ 614.400002][ T489] loop1: detected capacity change from 0 to 128 [ 614.409437][ T430] bridge_slave_1: entered promiscuous mode [ 614.443318][ T430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.454460][ T430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.485646][ T430] team0: Port device team_slave_0 added [ 614.496050][ T430] team0: Port device team_slave_1 added [ 614.518146][ T430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.525178][ T430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.551167][ T430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.572171][ T430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.579239][ T430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.605236][ T430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.626545][ T507] wireguard0: entered promiscuous mode [ 614.632042][ T507] wireguard0: entered allmulticast mode [ 614.648389][ T510] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11052'. [ 614.721296][ T430] hsr_slave_0: entered promiscuous mode [ 614.728312][ T430] hsr_slave_1: entered promiscuous mode [ 614.746377][ T430] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 614.756157][ T430] Cannot create hsr debugfs directory [ 614.942413][ T430] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.999390][ T430] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.070093][ T430] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.122513][ T430] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.213604][ T430] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 615.232644][ T430] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 615.249790][ T430] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 615.262068][ T430] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 615.332106][ T430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.353133][ T430] 8021q: adding VLAN 0 to HW filter on device team0 [ 615.368992][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.376096][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 615.433039][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.440264][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 615.525194][ T545] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11065'. [ 615.596774][ T430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.655435][ T554] loop1: detected capacity change from 0 to 2048 [ 615.688722][ T554] EXT4-fs mount: 52 callbacks suppressed [ 615.688744][ T554] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 615.689678][ T561] loop6: detected capacity change from 0 to 128 [ 615.731297][ T554] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 615.767384][ T567] loop2: detected capacity change from 0 to 512 [ 615.826226][T28281] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.856746][ T430] veth0_vlan: entered promiscuous mode [ 615.895961][ T430] veth1_vlan: entered promiscuous mode [ 615.923314][ T430] veth0_macvtap: entered promiscuous mode [ 615.931984][ T430] veth1_macvtap: entered promiscuous mode [ 615.966206][ T430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.976800][ T430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 615.986752][ T430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 615.997879][ T430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.007794][ T430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.018407][ T430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.019811][ T567] loop2: detected capacity change from 0 to 2048 [ 616.029262][ T430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.045714][ T430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.056325][ T430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.066806][ T430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.076758][ T430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.087914][ T430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.097755][ T430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.108340][ T430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.118774][ T430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.129229][ T430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.139054][ T430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.150100][ T430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.160033][ T430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.170476][ T430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.180978][ T430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.191512][ T430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.201513][ T430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.212624][ T430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.222469][ T430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.232925][ T430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.243408][ T430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.253859][ T430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.263707][ T430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.274810][ T430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.284642][ T430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.295071][ T430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.305570][ T430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.316036][ T430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.325947][ T430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 616.337000][ T430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.351146][ T430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 616.360098][ T430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.371248][ T430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.381094][ T430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.391553][ T430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.402212][ T430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.412670][ T430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.422765][ T430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.433910][ T430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.443816][ T430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.454301][ T430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.464840][ T430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.475438][ T430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.485518][ T430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.496919][ T430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.506852][ T430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.518278][ T430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.529018][ T430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.539503][ T430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.549379][ T430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.560554][ T430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.570397][ T430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.580839][ T430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.591334][ T430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.601872][ T430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.611795][ T430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.622861][ T430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.632708][ T430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.643173][ T430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.653951][ T430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.664430][ T430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.675160][ T430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.677137][ T594] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11075'. [ 616.685700][ T430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.685725][ T430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.715829][ T430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.725646][ T430] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 616.736665][ T430] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 616.768437][ T430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 616.793230][ T598] loop0: detected capacity change from 0 to 512 [ 616.801847][ T598] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.11078: Invalid inode bitmap blk 4 in block_group 0 [ 616.816232][ T598] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 616.818379][ T430] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.837228][ T430] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.846008][ T430] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.854828][ T430] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.867930][ T598] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 616.910967][T26966] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.019743][ T612] loop7: detected capacity change from 0 to 512 [ 617.027812][ T612] EXT4-fs: inline encryption not supported [ 617.034584][ T615] wg2: left promiscuous mode [ 617.039450][ T615] wg2: left allmulticast mode [ 617.069880][ T612] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 617.111356][ T612] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 617.141055][ T612] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #2: comm syz.7.11030: corrupted inode contents [ 617.163849][ T612] EXT4-fs error (device loop7): ext4_dirty_inode:6041: inode #2: comm syz.7.11030: mark_inode_dirty error [ 617.180579][ T612] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #2: comm syz.7.11030: corrupted inode contents [ 617.209232][ T612] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.11030: mark_inode_dirty error [ 617.212066][ T629] netlink: 'syz.6.11088': attribute type 1 has an invalid length. [ 617.229097][ T629] netlink: 224 bytes leftover after parsing attributes in process `syz.6.11088'. [ 617.274356][ T430] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.347469][ T639] loop7: detected capacity change from 0 to 512 [ 617.369578][ T639] loop7: detected capacity change from 0 to 2048 [ 617.560527][ T658] loop6: detected capacity change from 0 to 512 [ 617.567050][ T658] EXT4-fs: inline encryption not supported [ 617.590036][ T658] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 617.602926][ T658] ext4 filesystem being mounted at /184/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 617.614932][ T658] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #2: comm syz.6.11100: corrupted inode contents [ 617.627275][ T658] EXT4-fs error (device loop6): ext4_dirty_inode:6041: inode #2: comm syz.6.11100: mark_inode_dirty error [ 617.639559][ T658] EXT4-fs error (device loop6): ext4_do_update_inode:5153: inode #2: comm syz.6.11100: corrupted inode contents [ 617.651598][ T658] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.11100: mark_inode_dirty error [ 617.674177][T30525] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.766213][ T673] loop1: detected capacity change from 0 to 512 [ 617.791719][ T673] loop1: detected capacity change from 0 to 2048 [ 617.881122][ T682] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11110'. [ 617.900326][ T684] loop0: detected capacity change from 0 to 2048 [ 617.922324][ T684] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 617.933120][ T688] loop6: detected capacity change from 0 to 2048 [ 617.982087][ T688] GPT:first_usable_lbas don't match. [ 617.987503][ T688] GPT:34 != 290 [ 617.991007][ T688] GPT: Use GNU Parted to correct GPT errors. [ 617.997166][ T688] loop6: p1 p2 p3 [ 618.056756][ T29] kauditd_printk_skb: 856 callbacks suppressed [ 618.056821][ T29] audit: type=1326 audit(1736430652.417:97238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=685 comm="syz.1.11112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c7065d29 code=0x7ffc0000 [ 618.096062][ T697] loop7: detected capacity change from 0 to 512 [ 618.102851][ T697] EXT4-fs: inline encryption not supported [ 618.109016][ T29] audit: type=1326 audit(1736430652.477:97239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=685 comm="syz.1.11112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c7065d29 code=0x7ffc0000 [ 618.167470][ T699] loop2: detected capacity change from 0 to 512 [ 618.175354][ T697] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.188802][T26966] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.190164][ T697] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 618.218296][ T699] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 618.249823][ T699] EXT4-fs (loop2): invalid journal inode [ 618.255517][ T699] EXT4-fs (loop2): can't get journal size [ 618.259439][ T697] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #2: comm syz.7.11115: corrupted inode contents [ 618.263665][ T29] audit: type=1326 audit(1736430652.636:97240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=685 comm="syz.1.11112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f38c7065d29 code=0x7ffc0000 [ 618.286605][ T697] EXT4-fs error (device loop7): ext4_dirty_inode:6041: inode #2: comm syz.7.11115: mark_inode_dirty error [ 618.296622][ T29] audit: type=1326 audit(1736430652.636:97241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=685 comm="syz.1.11112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c7065d29 code=0x7ffc0000 [ 618.318227][ T697] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #2: comm syz.7.11115: corrupted inode contents [ 618.331382][ T29] audit: type=1326 audit(1736430652.636:97242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=685 comm="syz.1.11112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c7065d29 code=0x7ffc0000 [ 618.376729][ T699] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c119, mo2=0002] [ 618.384777][ T29] audit: type=1326 audit(1736430652.706:97243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=685 comm="syz.1.11112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f38c7065d29 code=0x7ffc0000 [ 618.392130][ T699] System zones: [ 618.408327][ T29] audit: type=1326 audit(1736430652.706:97244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=685 comm="syz.1.11112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c7065d29 code=0x7ffc0000 [ 618.408356][ T29] audit: type=1326 audit(1736430652.706:97245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=685 comm="syz.1.11112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c7065d29 code=0x7ffc0000 [ 618.408566][ T29] audit: type=1326 audit(1736430652.706:97246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=685 comm="syz.1.11112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f38c7065d29 code=0x7ffc0000 [ 618.408590][ T29] audit: type=1326 audit(1736430652.706:97247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=685 comm="syz.1.11112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c7065d29 code=0x7ffc0000 [ 618.448162][ T697] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.11115: mark_inode_dirty error [ 618.460331][ T699] 1-12, 13-13 [ 618.535199][ T699] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.11116: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 618.552716][ T699] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.11116: couldn't read orphan inode 15 (err -117) [ 618.565432][ T699] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 618.617916][ T430] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.629417][ T716] wireguard0: entered promiscuous mode [ 618.634983][ T716] wireguard0: entered allmulticast mode [ 618.664949][ T723] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11121'. [ 618.677708][ T721] loop7: detected capacity change from 0 to 128 [ 618.836473][ T729] loop1: detected capacity change from 0 to 128 [ 619.157002][ T743] loop0: detected capacity change from 0 to 512 [ 619.169361][ T740] loop7: detected capacity change from 0 to 2048 [ 619.178713][ T743] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.11130: Invalid inode bitmap blk 4 in block_group 0 [ 619.197140][ T743] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 619.212147][ T740] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 619.229151][ T743] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 619.368849][T26966] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.437784][ T430] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.476115][T25045] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.528313][ T755] wireguard0: entered promiscuous mode [ 619.533829][ T755] wireguard0: entered allmulticast mode [ 619.537284][ T757] loop2: detected capacity change from 0 to 128 [ 619.571632][ T763] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11135'. [ 619.733837][ T774] loop6: detected capacity change from 0 to 512 [ 619.779771][ T774] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.11141: Invalid inode bitmap blk 4 in block_group 0 [ 619.786904][ T777] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11142'. [ 619.807845][ T774] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 619.824523][ T774] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 619.874905][T30525] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.946443][ T793] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.978948][ T796] loop1: detected capacity change from 0 to 128 [ 619.990822][ T793] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.038127][ T798] FAULT_INJECTION: forcing a failure. [ 620.038127][ T798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 620.051876][ T798] CPU: 1 UID: 0 PID: 798 Comm: syz.0.11146 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 620.062570][ T798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 620.072686][ T798] Call Trace: [ 620.075962][ T798] [ 620.078946][ T798] dump_stack_lvl+0xf2/0x150 [ 620.083603][ T798] dump_stack+0x15/0x1a [ 620.087818][ T798] should_fail_ex+0x223/0x230 [ 620.092499][ T798] should_fail+0xb/0x10 [ 620.096662][ T798] should_fail_usercopy+0x1a/0x20 [ 620.101745][ T798] _copy_from_iter+0xd5/0xd00 [ 620.106430][ T798] ? kmalloc_reserve+0x16e/0x190 [ 620.111369][ T798] ? __build_skb_around+0x196/0x1f0 [ 620.116589][ T798] ? __alloc_skb+0x21f/0x310 [ 620.121187][ T798] ? __virt_addr_valid+0x1ed/0x250 [ 620.126366][ T798] ? __check_object_size+0x364/0x520 [ 620.131652][ T798] netlink_sendmsg+0x460/0x6e0 [ 620.136460][ T798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 620.141782][ T798] __sock_sendmsg+0x140/0x180 [ 620.146471][ T798] sock_write_iter+0x15e/0x1a0 [ 620.151316][ T798] do_iter_readv_writev+0x394/0x450 [ 620.156539][ T798] vfs_writev+0x2d4/0x880 [ 620.160921][ T798] ? from_kuid+0xf0/0x340 [ 620.165380][ T798] do_writev+0xf4/0x220 [ 620.169537][ T798] __x64_sys_writev+0x45/0x50 [ 620.174329][ T798] x64_sys_call+0x1fab/0x2dc0 [ 620.179008][ T798] do_syscall_64+0xc9/0x1c0 [ 620.183513][ T798] ? clear_bhb_loop+0x55/0xb0 [ 620.188216][ T798] ? clear_bhb_loop+0x55/0xb0 [ 620.192918][ T798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.198870][ T798] RIP: 0033:0x7fdf4f905d29 [ 620.203285][ T798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.222923][ T798] RSP: 002b:00007fdf4df2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 620.231334][ T798] RAX: ffffffffffffffda RBX: 00007fdf4faf6160 RCX: 00007fdf4f905d29 [ 620.239347][ T798] RDX: 0000000000000001 RSI: 00000000200003c0 RDI: 0000000000000008 [ 620.247318][ T798] RBP: 00007fdf4df2f090 R08: 0000000000000000 R09: 0000000000000000 [ 620.255372][ T798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.263346][ T798] R13: 0000000000000000 R14: 00007fdf4faf6160 R15: 00007ffd13296a38 [ 620.271328][ T798] [ 620.302989][ T799] loop6: detected capacity change from 0 to 164 [ 620.348060][ T793] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.388937][ T803] wireguard0: entered promiscuous mode [ 620.394530][ T803] wireguard0: entered allmulticast mode [ 620.406017][ T793] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.436379][ T805] netlink: 48 bytes leftover after parsing attributes in process `syz.1.11151'. [ 620.483881][ T793] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.496038][ T793] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.508670][ T793] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.522071][ T793] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.644324][ T814] pimreg: entered allmulticast mode [ 620.664679][ T814] pimreg: left allmulticast mode [ 620.683046][ T814] FAULT_INJECTION: forcing a failure. [ 620.683046][ T814] name failslab, interval 1, probability 0, space 0, times 0 [ 620.695734][ T814] CPU: 0 UID: 0 PID: 814 Comm: syz.7.11155 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 620.706417][ T814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 620.716464][ T814] Call Trace: [ 620.719796][ T814] [ 620.722754][ T814] dump_stack_lvl+0xf2/0x150 [ 620.727347][ T814] dump_stack+0x15/0x1a [ 620.731556][ T814] should_fail_ex+0x223/0x230 [ 620.736231][ T814] should_failslab+0x8f/0xb0 [ 620.740839][ T814] kmem_cache_alloc_node_noprof+0x59/0x320 [ 620.746747][ T814] ? __alloc_skb+0x10b/0x310 [ 620.751378][ T814] __alloc_skb+0x10b/0x310 [ 620.755846][ T814] rtmsg_ifinfo_build_skb+0x63/0x1b0 [ 620.761124][ T814] rtmsg_ifinfo+0x6b/0x100 [ 620.765629][ T814] dev_close_many+0x151/0x240 [ 620.770366][ T814] ? x64_sys_call+0x282e/0x2dc0 [ 620.775208][ T814] ? do_syscall_64+0xc9/0x1c0 [ 620.779934][ T814] unregister_netdevice_many_notify+0x263/0x11b0 [ 620.786253][ T814] ? vif_delete+0x3a8/0x430 [ 620.790763][ T814] unregister_netdevice_many+0x19/0x20 [ 620.796255][ T814] mroute_clean_tables+0x17c/0x610 [ 620.801371][ T814] ? _copy_from_user+0x8d/0xb0 [ 620.806341][ T814] ip_mroute_setsockopt+0x82f/0x950 [ 620.811636][ T814] do_ip_setsockopt+0xd4b/0x2340 [ 620.816665][ T814] ip_setsockopt+0x63/0x100 [ 620.821217][ T814] raw_setsockopt+0x101/0x150 [ 620.825963][ T814] sock_common_setsockopt+0x64/0x80 [ 620.831155][ T814] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 620.837049][ T814] __sys_setsockopt+0x187/0x200 [ 620.841942][ T814] __x64_sys_setsockopt+0x66/0x80 [ 620.846991][ T814] x64_sys_call+0x282e/0x2dc0 [ 620.851665][ T814] do_syscall_64+0xc9/0x1c0 [ 620.856171][ T814] ? clear_bhb_loop+0x55/0xb0 [ 620.860875][ T814] ? clear_bhb_loop+0x55/0xb0 [ 620.865536][ T814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.871428][ T814] RIP: 0033:0x7f5e856a5d29 [ 620.875827][ T814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 620.895454][ T814] RSP: 002b:00007f5e83d11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 620.903857][ T814] RAX: ffffffffffffffda RBX: 00007f5e85895fa0 RCX: 00007f5e856a5d29 [ 620.911830][ T814] RDX: 00000000000000d4 RSI: 0000000000000000 RDI: 0000000000000006 [ 620.919792][ T814] RBP: 00007f5e83d11090 R08: 0000000000000004 R09: 0000000000000000 [ 620.927789][ T814] R10: 00000000200008c0 R11: 0000000000000246 R12: 0000000000000001 [ 620.935826][ T814] R13: 0000000000000000 R14: 00007f5e85895fa0 R15: 00007ffe84676858 [ 620.943851][ T814] [ 620.984699][ T809] netlink: 'syz.6.11153': attribute type 10 has an invalid length. [ 621.081192][ T824] netlink: 'syz.7.11159': attribute type 1 has an invalid length. [ 621.089146][ T824] netlink: 224 bytes leftover after parsing attributes in process `syz.7.11159'. [ 621.126535][ T826] loop2: detected capacity change from 0 to 2048 [ 621.143832][ T834] loop6: detected capacity change from 0 to 512 [ 621.164685][ T826] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 621.175191][ T834] EXT4-fs warning (device loop6): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 621.200235][ T834] EXT4-fs (loop6): mount failed [ 621.273997][ T842] syz.0.11165[842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 621.274054][ T842] syz.0.11165[842] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 621.286194][ T842] xt_hashlimit: max too large, truncated to 1048576 [ 621.306610][ T842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11165'. [ 621.317097][T25045] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.333600][ T842] loop0: detected capacity change from 0 to 512 [ 621.347861][ T849] loop6: detected capacity change from 0 to 512 [ 621.357990][ T849] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.11168: Invalid inode bitmap blk 4 in block_group 0 [ 621.373773][ T849] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 621.373773][ T842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 621.373839][ T842] ext4 filesystem being mounted at /448/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 621.411174][ T849] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 621.425538][ T842] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.11165: corrupted inode contents [ 621.425655][ T842] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #2: comm syz.0.11165: mark_inode_dirty error [ 621.449244][ T842] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.11165: corrupted inode contents [ 621.461518][ T842] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.11165: mark_inode_dirty error [ 621.461960][T30525] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 621.521148][ T860] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11171'. [ 621.548617][T26966] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.111361][ T873] loop7: detected capacity change from 0 to 512 [ 622.118099][ T873] EXT4-fs: inline encryption not supported [ 622.133552][ T873] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 622.146616][ T873] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 622.161017][ T873] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #2: comm syz.7.11176: corrupted inode contents [ 622.171863][ T877] loop6: detected capacity change from 0 to 128 [ 622.173070][ T873] EXT4-fs error (device loop7): ext4_dirty_inode:6041: inode #2: comm syz.7.11176: mark_inode_dirty error [ 622.191189][ T873] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #2: comm syz.7.11176: corrupted inode contents [ 622.208616][ T873] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.11176: mark_inode_dirty error [ 622.260532][ T885] loop2: detected capacity change from 0 to 512 [ 622.272335][ T881] loop6: detected capacity change from 0 to 128 [ 622.272891][ T885] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.11181: Invalid inode bitmap blk 4 in block_group 0 [ 622.281904][ T430] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.294431][ T885] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 622.323617][ T888] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11183'. [ 622.347686][ T885] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 622.358638][ T890] loop7: detected capacity change from 0 to 2048 [ 622.382725][ T892] wireguard0: entered promiscuous mode [ 622.388300][ T892] wireguard0: entered allmulticast mode [ 622.395260][T25045] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.397847][ T896] netlink: 48 bytes leftover after parsing attributes in process `syz.6.11184'. [ 622.427142][ T890] GPT:first_usable_lbas don't match. [ 622.433208][ T890] GPT:34 != 290 [ 622.436735][ T890] GPT: Use GNU Parted to correct GPT errors. [ 622.442906][ T890] loop7: p1 p2 p3 [ 622.482660][ T906] loop2: detected capacity change from 0 to 128 [ 622.512760][ T900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 622.513265][ T905] loop7: detected capacity change from 0 to 512 [ 622.522506][ T900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.539324][ T900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 622.549085][ T900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.559122][ T900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 622.569589][ T900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.579522][ T900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 622.589290][ T900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.599774][ T900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 622.609744][ T900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.619654][ T900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 622.630017][ T900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.639860][ T900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 622.649629][ T900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.659831][ T900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 622.669656][ T900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.679493][ T900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 622.689676][ T900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.699526][ T900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 622.709419][ T900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.719603][ T900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 622.729534][ T900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.739536][ T900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 622.749946][ T900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.759826][ T900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 622.769561][ T900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.780011][ T900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 622.789833][ T900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.799656][ T900] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 622.809982][ T900] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.823152][ T900] dummy0: entered promiscuous mode [ 622.829785][ T900] dummy0: left promiscuous mode [ 623.037900][ T926] loop6: detected capacity change from 0 to 512 [ 623.045129][ T926] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 623.053745][ T926] EXT4-fs (loop6): invalid journal inode [ 623.060133][ T926] EXT4-fs (loop6): can't get journal size [ 623.063755][ T925] netlink: 16 bytes leftover after parsing attributes in process `syz.1.11195'. [ 623.066318][ T926] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c119, mo2=0002] [ 623.082921][ T926] System zones: 1-12, 13-13 [ 623.084862][ T29] kauditd_printk_skb: 1281 callbacks suppressed [ 623.084876][ T29] audit: type=1326 audit(1736430657.442:98528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=912 comm="syz.2.11191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efce8a3cce7 code=0x7ffc0000 [ 623.089911][ T926] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2240: inode #15: comm syz.6.11196: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 623.093721][ T29] audit: type=1326 audit(1736430657.442:98529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=912 comm="syz.2.11191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efce89e1f29 code=0x7ffc0000 [ 623.121777][ T926] EXT4-fs error (device loop6): ext4_orphan_get:1394: comm syz.6.11196: couldn't read orphan inode 15 (err -117) [ 623.133771][ T29] audit: type=1326 audit(1736430657.442:98530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=912 comm="syz.2.11191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7efce8a45d29 code=0x7ffc0000 [ 623.171017][ T926] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.206951][ T29] audit: type=1326 audit(1736430657.562:98531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=912 comm="syz.2.11191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efce8a3cce7 code=0x7ffc0000 [ 623.231161][ T29] audit: type=1326 audit(1736430657.562:98532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=912 comm="syz.2.11191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efce89e1f29 code=0x7ffc0000 [ 623.255220][ T29] audit: type=1326 audit(1736430657.562:98533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=912 comm="syz.2.11191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7efce8a45d29 code=0x7ffc0000 [ 623.289764][ T29] audit: type=1326 audit(1736430657.601:98534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=912 comm="syz.2.11191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efce8a3cce7 code=0x7ffc0000 [ 623.313310][ T29] audit: type=1326 audit(1736430657.601:98535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=912 comm="syz.2.11191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efce89e1f29 code=0x7ffc0000 [ 623.337309][ T29] audit: type=1326 audit(1736430657.601:98536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=912 comm="syz.2.11191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7efce8a45d29 code=0x7ffc0000 [ 623.360915][ T29] audit: type=1326 audit(1736430657.601:98537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=912 comm="syz.2.11191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efce8a3cce7 code=0x7ffc0000 [ 623.481613][ T938] syz.1.11201[938] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 623.481737][ T938] syz.1.11201[938] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 623.493947][ T938] syz.1.11201[938] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 623.644659][ T955] loop0: detected capacity change from 0 to 512 [ 623.665943][ T955] EXT4-fs: inline encryption not supported [ 623.687953][ T955] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 623.727103][ T955] ext4 filesystem being mounted at /454/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 623.765422][ T955] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.11208: corrupted inode contents [ 623.822729][ T955] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #2: comm syz.0.11208: mark_inode_dirty error [ 623.849627][ T955] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.11208: corrupted inode contents [ 623.910586][ T955] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.11208: mark_inode_dirty error [ 623.926075][ T969] netlink: 'syz.2.11212': attribute type 1 has an invalid length. [ 623.934578][ T969] __nla_validate_parse: 3 callbacks suppressed [ 623.934591][ T969] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11212'. [ 623.961023][T26966] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 623.984100][ T972] syz.0.11214[972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 623.984176][ T972] syz.0.11214[972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 624.014658][ T972] syz.0.11214[972] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 624.287320][T30525] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.324407][ T986] loop7: detected capacity change from 0 to 2048 [ 624.342200][ T988] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11221'. [ 624.382226][ T986] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 624.411871][ T992] loop6: detected capacity change from 0 to 2048 [ 624.450527][ T992] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 624.513656][ T1003] syz.0.11225[1003] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 624.517450][ T1003] syz.0.11225[1003] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 624.556343][ T1005] loop1: detected capacity change from 0 to 512 [ 624.580990][ T430] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.656733][ T1005] loop1: detected capacity change from 0 to 2048 [ 624.672943][ T1012] loop7: detected capacity change from 0 to 512 [ 624.693840][ T1014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11228'. [ 624.714364][ T1012] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.11227: Invalid inode bitmap blk 4 in block_group 0 [ 624.728777][ T1012] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 624.741078][ T1014] bridge_slave_1: left allmulticast mode [ 624.746812][ T1014] bridge_slave_1: left promiscuous mode [ 624.752483][ T1014] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.812495][ T1012] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 624.827792][T30525] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.847780][ T1014] bridge_slave_0: left allmulticast mode [ 624.854518][ T1014] bridge_slave_0: left promiscuous mode [ 624.860470][ T1014] bridge0: port 1(bridge_slave_0) entered disabled state [ 624.873575][ T430] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 624.964684][ T1020] FAULT_INJECTION: forcing a failure. [ 624.964684][ T1020] name failslab, interval 1, probability 0, space 0, times 0 [ 624.977392][ T1020] CPU: 0 UID: 0 PID: 1020 Comm: syz.7.11230 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 624.988209][ T1020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 624.998268][ T1020] Call Trace: [ 625.001595][ T1020] [ 625.004606][ T1020] dump_stack_lvl+0xf2/0x150 [ 625.009209][ T1020] dump_stack+0x15/0x1a [ 625.013438][ T1020] should_fail_ex+0x223/0x230 [ 625.018224][ T1020] should_failslab+0x8f/0xb0 [ 625.022814][ T1020] kmem_cache_alloc_node_noprof+0x59/0x320 [ 625.028615][ T1020] ? __alloc_skb+0x10b/0x310 [ 625.033261][ T1020] __alloc_skb+0x10b/0x310 [ 625.037802][ T1020] dccp_connect+0x233/0x420 [ 625.042378][ T1020] dccp_v6_connect+0x735/0x8a0 [ 625.047146][ T1020] __inet_stream_connect+0x162/0x790 [ 625.052436][ T1020] ? _raw_spin_unlock_bh+0x36/0x40 [ 625.057595][ T1020] ? release_sock+0x117/0x150 [ 625.062321][ T1020] ? _raw_spin_unlock_bh+0x36/0x40 [ 625.067426][ T1020] ? lock_sock_nested+0x10f/0x140 [ 625.072528][ T1020] ? selinux_netlbl_socket_connect+0x113/0x130 [ 625.078678][ T1020] inet_stream_connect+0x48/0x70 [ 625.083623][ T1020] ? __pfx_inet_stream_connect+0x10/0x10 [ 625.089259][ T1020] __sys_connect+0x18f/0x1b0 [ 625.094000][ T1020] __x64_sys_connect+0x41/0x50 [ 625.098818][ T1020] x64_sys_call+0x22a7/0x2dc0 [ 625.103559][ T1020] do_syscall_64+0xc9/0x1c0 [ 625.108094][ T1020] ? clear_bhb_loop+0x55/0xb0 [ 625.112842][ T1020] ? clear_bhb_loop+0x55/0xb0 [ 625.117511][ T1020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.123418][ T1020] RIP: 0033:0x7f5e856a5d29 [ 625.127824][ T1020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.147527][ T1020] RSP: 002b:00007f5e83d11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 625.156029][ T1020] RAX: ffffffffffffffda RBX: 00007f5e85895fa0 RCX: 00007f5e856a5d29 [ 625.164072][ T1020] RDX: 000000000000001c RSI: 0000000020000040 RDI: 0000000000000006 [ 625.172037][ T1020] RBP: 00007f5e83d11090 R08: 0000000000000000 R09: 0000000000000000 [ 625.180006][ T1020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.187971][ T1020] R13: 0000000000000000 R14: 00007f5e85895fa0 R15: 00007ffe84676858 [ 625.195979][ T1020] [ 625.238434][ T1023] loop1: detected capacity change from 0 to 128 [ 625.358301][ T1034] loop6: detected capacity change from 0 to 2048 [ 625.368598][ T1036] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11233'. [ 625.384040][ T1036] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 625.469923][ T1028] ebtables: ebtables: counters copy to user failed while replacing table [ 625.596596][ T1051] netlink: 'syz.1.11240': attribute type 1 has an invalid length. [ 625.604532][ T1051] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11240'. [ 625.629565][ T1034] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 625.953205][ T1060] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11243'. [ 626.007067][ T1034] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 626.039287][ T1034] EXT4-fs (loop6): Delayed block allocation failed for inode 16 at logical offset 7680 with max blocks 32 with error 28 [ 626.052646][ T1034] EXT4-fs (loop6): This should not happen!! Data will be lost [ 626.052646][ T1034] [ 626.062335][ T1034] EXT4-fs (loop6): Total free blocks count 0 [ 626.068328][ T1034] EXT4-fs (loop6): Free/Dirty block details [ 626.074255][ T1034] EXT4-fs (loop6): free_blocks=2415919104 [ 626.080097][ T1034] EXT4-fs (loop6): dirty_blocks=32 [ 626.085987][ T1034] EXT4-fs (loop6): Block reservation details [ 626.092015][ T1034] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 626.122746][T30525] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 626.263571][ T1070] loop2: detected capacity change from 0 to 128 [ 626.274876][ T1066] wireguard0: entered promiscuous mode [ 626.280387][ T1066] wireguard0: entered allmulticast mode [ 626.313362][ T1074] netlink: 48 bytes leftover after parsing attributes in process `syz.6.11245'. [ 626.431907][ T1077] wireguard0: entered promiscuous mode [ 626.437414][ T1077] wireguard0: entered allmulticast mode [ 626.474248][ T1082] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11249'. [ 626.576767][ T1091] ebtables: ebtables: counters copy to user failed while replacing table [ 626.607799][ T1094] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11254'. [ 626.638134][ T1091] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 626.650681][ T1096] netlink: 16 bytes leftover after parsing attributes in process `syz.6.11255'. [ 626.729281][ T1101] bpf_get_probe_write_proto: 4 callbacks suppressed [ 626.729298][ T1101] syz.6.11258[1101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 626.752601][ T1101] syz.6.11258[1101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 626.774969][ T1101] syz.6.11258[1101] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 626.942946][ T1105] loop2: detected capacity change from 0 to 512 [ 626.981503][ T1105] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 627.004966][ T1105] EXT4-fs (loop2): orphan cleanup on readonly fs [ 627.022695][ T1105] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.11256: bg 0: block 248: padding at end of block bitmap is not set [ 627.127388][ T1105] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.11256: Failed to acquire dquot type 1 [ 627.154013][ T1105] EXT4-fs (loop2): 1 truncate cleaned up [ 627.183076][ T1105] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 627.398471][ T1115] wireguard0: entered promiscuous mode [ 627.404075][ T1115] wireguard0: entered allmulticast mode [ 627.753544][ T1131] ebtables: ebtables: counters copy to user failed while replacing table [ 627.784841][ T1131] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 628.031636][ T1137] netlink: 'syz.1.11269': attribute type 10 has an invalid length. [ 628.047622][ T1143] wireguard0: entered promiscuous mode [ 628.053203][ T1143] wireguard0: entered allmulticast mode [ 628.111194][ T29] kauditd_printk_skb: 701 callbacks suppressed [ 628.111210][ T29] audit: type=1326 audit(1736430662.451:99237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1138 comm="syz.0.11270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf4f8fcce7 code=0x7ffc0000 [ 628.141692][ T29] audit: type=1326 audit(1736430662.451:99238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1138 comm="syz.0.11270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdf4f8a1f29 code=0x7ffc0000 [ 628.165900][ T29] audit: type=1326 audit(1736430662.451:99239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1138 comm="syz.0.11270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fdf4f905d29 code=0x7ffc0000 [ 628.235136][ T29] audit: type=1326 audit(1736430662.531:99240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1138 comm="syz.0.11270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf4f8fcce7 code=0x7ffc0000 [ 628.259483][ T29] audit: type=1326 audit(1736430662.531:99241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1138 comm="syz.0.11270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdf4f8a1f29 code=0x7ffc0000 [ 628.283847][ T29] audit: type=1326 audit(1736430662.531:99242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1138 comm="syz.0.11270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fdf4f905d29 code=0x7ffc0000 [ 628.308050][ T29] audit: type=1326 audit(1736430662.541:99243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1138 comm="syz.0.11270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf4f8fcce7 code=0x7ffc0000 [ 628.331929][ T29] audit: type=1326 audit(1736430662.541:99244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1138 comm="syz.0.11270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdf4f8a1f29 code=0x7ffc0000 [ 628.356076][ T29] audit: type=1326 audit(1736430662.541:99245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1138 comm="syz.0.11270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fdf4f905d29 code=0x7ffc0000 [ 628.380078][ T29] audit: type=1326 audit(1736430662.541:99246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1138 comm="syz.0.11270" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf4f8fcce7 code=0x7ffc0000 [ 628.622608][ T1165] loop1: detected capacity change from 0 to 512 [ 628.654985][ T1165] loop1: detected capacity change from 0 to 2048 [ 628.926056][ T1182] loop6: detected capacity change from 0 to 512 [ 628.964685][ T1182] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.11288: Invalid inode bitmap blk 4 in block_group 0 [ 628.998453][ T1182] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 629.044546][ T1182] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 629.104115][T30525] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 629.278294][ T1197] loop6: detected capacity change from 0 to 512 [ 629.300111][ T1197] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 629.316513][ T1199] loop7: detected capacity change from 0 to 512 [ 629.338795][ T1197] EXT4-fs (loop6): orphan cleanup on readonly fs [ 629.357586][ T1197] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.11293: bg 0: block 248: padding at end of block bitmap is not set [ 629.376481][ T1199] loop7: detected capacity change from 0 to 2048 [ 629.383364][ T1197] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.11293: Failed to acquire dquot type 1 [ 629.408744][ T1197] EXT4-fs (loop6): 1 truncate cleaned up [ 629.542615][ T1197] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 629.744974][ T1206] __nla_validate_parse: 4 callbacks suppressed [ 629.744991][ T1206] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11297'. [ 629.973574][T25045] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.058482][ T1221] wireguard0: entered promiscuous mode [ 630.064102][ T1221] wireguard0: entered allmulticast mode [ 630.074960][ T1224] netlink: 48 bytes leftover after parsing attributes in process `syz.2.11303'. [ 630.274143][ T1235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 630.284046][ T1235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.293910][ T1235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 630.303777][ T1235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.313622][ T1235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 630.323476][ T1235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.333351][ T1235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 630.343112][ T1235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.352958][ T1235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 630.362724][ T1235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.372628][ T1235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 630.382456][ T1235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.392393][ T1235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 630.402163][ T1235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.412003][ T1235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 630.421752][ T1235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.431606][ T1235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 630.441360][ T1235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.451239][ T1235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 630.461282][ T1235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.471208][ T1235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 630.481055][ T1235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.481071][ T1235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 630.481086][ T1235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.481102][ T1235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 630.481116][ T1235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.481141][ T1235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 630.481155][ T1235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.481170][ T1235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 630.481181][ T1235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 630.482514][ T1235] dummy0: entered promiscuous mode [ 630.583386][ T1235] dummy0: left promiscuous mode [ 630.966582][ T1245] sit0 speed is unknown, defaulting to 1000 [ 631.064076][ T1267] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11317'. [ 631.093919][ T1269] wireguard0: entered promiscuous mode [ 631.099420][ T1269] wireguard0: entered allmulticast mode [ 631.134828][ T1280] netlink: 48 bytes leftover after parsing attributes in process `syz.7.11318'. [ 631.340433][ T1245] chnl_net:caif_netlink_parms(): no params data found [ 631.415585][ T1289] netlink: 16 bytes leftover after parsing attributes in process `syz.7.11321'. [ 631.481204][ T1245] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.488325][ T1245] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.521421][ T1245] bridge_slave_0: entered allmulticast mode [ 631.528522][ T1245] bridge_slave_0: entered promiscuous mode [ 631.541562][ T1245] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.548637][ T1245] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.561992][ T1245] bridge_slave_1: entered allmulticast mode [ 631.582003][ T1245] bridge_slave_1: entered promiscuous mode [ 631.609895][ T1298] loop1: detected capacity change from 0 to 128 [ 631.620168][ T1245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.632941][ T1245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.675906][ T1245] team0: Port device team_slave_0 added [ 631.689520][ T1245] team0: Port device team_slave_1 added [ 631.730518][ T1245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 631.737561][ T1245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.764105][ T1245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 631.782394][ T1245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.789415][ T1245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.816015][ T1245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.878563][ T1245] hsr_slave_0: entered promiscuous mode [ 631.890735][ T1245] hsr_slave_1: entered promiscuous mode [ 631.909058][ T1245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 631.929644][ T1245] Cannot create hsr debugfs directory [ 632.113706][ T1245] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.183664][ T1245] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.229290][ T1320] ebtables: ebtables: counters copy to user failed while replacing table [ 632.245095][ T1245] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.260263][ T1320] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11330'. [ 632.278420][ T1320] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 632.324269][ T1245] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.393400][ T1245] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 632.412347][ T1245] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 632.426245][ T1245] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 632.440883][ T1245] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 632.472314][ T1330] loop1: detected capacity change from 0 to 128 [ 632.570612][ T1245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 632.606896][ T1245] 8021q: adding VLAN 0 to HW filter on device team0 [ 632.631405][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.638537][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.662699][ T1595] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.669963][ T1595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.726164][ T1245] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 632.767705][ T1341] FAULT_INJECTION: forcing a failure. [ 632.767705][ T1341] name failslab, interval 1, probability 0, space 0, times 0 [ 632.780589][ T1341] CPU: 0 UID: 0 PID: 1341 Comm: syz.7.11338 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 632.791354][ T1341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 632.801409][ T1341] Call Trace: [ 632.804771][ T1341] [ 632.807705][ T1341] dump_stack_lvl+0xf2/0x150 [ 632.812346][ T1341] dump_stack+0x15/0x1a [ 632.816566][ T1341] should_fail_ex+0x223/0x230 [ 632.821316][ T1341] should_failslab+0x8f/0xb0 [ 632.825917][ T1341] kmem_cache_alloc_node_noprof+0x59/0x320 [ 632.831803][ T1341] ? __alloc_skb+0x10b/0x310 [ 632.836474][ T1341] ? avc_has_perm_noaudit+0x1cc/0x210 [ 632.841935][ T1341] __alloc_skb+0x10b/0x310 [ 632.846350][ T1341] alloc_skb_with_frags+0x80/0x450 [ 632.851480][ T1341] ? selinux_file_open+0x34a/0x3b0 [ 632.856656][ T1341] ? should_fail_ex+0xd7/0x230 [ 632.861487][ T1341] sock_alloc_send_pskb+0x435/0x4f0 [ 632.866698][ T1341] tun_get_user+0xa24/0x25c0 [ 632.871397][ T1341] ? _parse_integer+0x27/0x30 [ 632.876149][ T1341] ? ref_tracker_alloc+0x1f5/0x2f0 [ 632.878270][ T1348] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11340'. [ 632.881267][ T1341] tun_chr_write_iter+0x188/0x240 [ 632.895322][ T1341] vfs_write+0x77f/0x920 [ 632.899578][ T1341] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 632.905135][ T1341] ksys_write+0xe8/0x1b0 [ 632.909408][ T1341] __x64_sys_write+0x42/0x50 [ 632.914015][ T1341] x64_sys_call+0x287e/0x2dc0 [ 632.918754][ T1341] do_syscall_64+0xc9/0x1c0 [ 632.922513][ T1348] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 632.923303][ T1341] ? clear_bhb_loop+0x55/0xb0 [ 632.923328][ T1341] ? clear_bhb_loop+0x55/0xb0 [ 632.939239][ T1341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.945389][ T1341] RIP: 0033:0x7f5e856a5d29 [ 632.949898][ T1341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 632.969601][ T1341] RSP: 002b:00007f5e83d11038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 632.978087][ T1341] RAX: ffffffffffffffda RBX: 00007f5e85895fa0 RCX: 00007f5e856a5d29 [ 632.986149][ T1341] RDX: 000000000000fdef RSI: 00000000200003c0 RDI: 0000000000000003 [ 632.994144][ T1341] RBP: 00007f5e83d11090 R08: 0000000000000000 R09: 0000000000000000 [ 633.002168][ T1341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 633.010141][ T1341] R13: 0000000000000000 R14: 00007f5e85895fa0 R15: 00007ffe84676858 [ 633.018133][ T1341] [ 633.043963][ T1346] ebtables: ebtables: counters copy to user failed while replacing table [ 633.106829][ T1245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 633.123744][ T29] kauditd_printk_skb: 1188 callbacks suppressed [ 633.123756][ T29] audit: type=1326 audit(1736430667.463:100433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1325 comm="syz.0.11332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf4f8fcce7 code=0x7ffc0000 [ 633.158988][ T29] audit: type=1326 audit(1736430667.493:100434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1325 comm="syz.0.11332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdf4f8a1f29 code=0x7ffc0000 [ 633.159082][ T29] audit: type=1326 audit(1736430667.493:100435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1325 comm="syz.0.11332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf4f8fcce7 code=0x7ffc0000 [ 633.159152][ T29] audit: type=1326 audit(1736430667.493:100436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1325 comm="syz.0.11332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdf4f8a1f29 code=0x7ffc0000 [ 633.159273][ T1357] loop7: detected capacity change from 0 to 512 [ 633.159362][ T29] audit: type=1326 audit(1736430667.493:100437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1325 comm="syz.0.11332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fdf4f905d29 code=0x7ffc0000 [ 633.159510][ T1357] EXT4-fs: inline encryption not supported [ 633.164723][ T29] audit: type=1326 audit(1736430667.493:100438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1325 comm="syz.0.11332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf4f8fcce7 code=0x7ffc0000 [ 633.284149][ T1245] veth0_vlan: entered promiscuous mode [ 633.316937][ T29] audit: type=1326 audit(1736430667.563:100439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1325 comm="syz.0.11332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdf4f8a1f29 code=0x7ffc0000 [ 633.340655][ T29] audit: type=1326 audit(1736430667.563:100440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1325 comm="syz.0.11332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf4f8fcce7 code=0x7ffc0000 [ 633.364629][ T29] audit: type=1326 audit(1736430667.563:100441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1325 comm="syz.0.11332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdf4f8a1f29 code=0x7ffc0000 [ 633.379559][ T1357] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 633.388340][ T29] audit: type=1326 audit(1736430667.563:100442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1325 comm="syz.0.11332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fdf4f905d29 code=0x7ffc0000 [ 633.411353][ T1357] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 633.495977][ T1357] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #2: comm syz.7.11342: corrupted inode contents [ 633.511888][ T1370] loop1: detected capacity change from 0 to 128 [ 633.513232][T30525] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.535769][ T1245] veth1_vlan: entered promiscuous mode [ 633.554151][ T1357] EXT4-fs error (device loop7): ext4_dirty_inode:6041: inode #2: comm syz.7.11342: mark_inode_dirty error [ 633.566792][ T1245] veth0_macvtap: entered promiscuous mode [ 633.586091][ T1374] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 633.590956][ T1357] EXT4-fs error (device loop7): ext4_do_update_inode:5153: inode #2: comm syz.7.11342: corrupted inode contents [ 633.606418][ T1245] veth1_macvtap: entered promiscuous mode [ 633.618726][ T1357] EXT4-fs error (device loop7): __ext4_ext_dirty:207: inode #2: comm syz.7.11342: mark_inode_dirty error [ 633.619905][ T1245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.640546][ T1245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.650440][ T1245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.661010][ T1245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.670893][ T1245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.681416][ T1245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.691293][ T1245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.701764][ T1245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.711619][ T1245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.722073][ T1245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.731929][ T1245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.742383][ T1245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.754724][ T1245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.765661][ T1245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.775551][ T1245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.786508][ T1245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.787723][ T1384] loop0: detected capacity change from 0 to 128 [ 633.796421][ T1245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.796439][ T1245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.796493][ T1245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.796507][ T1245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.796522][ T1245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.796535][ T1245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.796550][ T1245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.796561][ T1245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.796577][ T1245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.796591][ T1245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.796614][ T1245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.796685][ T1245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.796699][ T1245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.796713][ T1245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.796728][ T1245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.796739][ T1245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.796753][ T1245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.796766][ T1245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.796781][ T1245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.796792][ T1245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.796839][ T1245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 633.796853][ T1245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 633.797657][ T1245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 633.817067][ T430] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 633.825022][ T1245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.053395][ T1245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.063216][ T1245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.073888][ T1245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.083764][ T1245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.094202][ T1245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.104093][ T1245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.114606][ T1245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.124432][ T1245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.135010][ T1245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.144853][ T1245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.155413][ T1245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.165295][ T1245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.175785][ T1245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.185697][ T1245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.196152][ T1245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.205994][ T1245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.216424][ T1245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.226284][ T1245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.236723][ T1245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.246560][ T1245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.257070][ T1245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.266954][ T1245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.277382][ T1245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.287249][ T1245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.297783][ T1245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.307772][ T1245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.318277][ T1245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.328211][ T1245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.338642][ T1245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.348476][ T1245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.358919][ T1245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.368923][ T1245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.379384][ T1245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.389437][ T1245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.400015][ T1245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.409843][ T1245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.420404][ T1245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.431240][ T1245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.449354][ T1374] wireguard0: entered promiscuous mode [ 634.454936][ T1374] wireguard0: entered allmulticast mode [ 634.473648][ T1245] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.482634][ T1245] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.491538][ T1245] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.500208][ T1394] loop7: detected capacity change from 0 to 512 [ 634.500522][ T1245] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.512448][ T1394] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 634.518693][ T1395] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11351'. [ 634.525655][ T1394] EXT4-fs (loop7): invalid journal inode [ 634.540011][ T1390] wireguard0: entered promiscuous mode [ 634.543752][ T1394] EXT4-fs (loop7): can't get journal size [ 634.545711][ T1390] wireguard0: entered allmulticast mode [ 634.562818][ T1394] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c119, mo2=0002] [ 634.575130][ T1394] System zones: 1-12, 13-13 [ 634.588757][ T1394] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2240: inode #15: comm syz.7.11353: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 634.634056][ T1394] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.11353: couldn't read orphan inode 15 (err -117) [ 634.712877][ T1394] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 634.844174][ T1418] netlink: 'syz.1.11358': attribute type 1 has an invalid length. [ 634.852124][ T1418] netlink: 224 bytes leftover after parsing attributes in process `syz.1.11358'. [ 634.898902][ T1417] loop6: detected capacity change from 0 to 512 [ 634.934326][ T1417] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 634.953781][ T1417] EXT4-fs (loop6): orphan cleanup on readonly fs [ 634.967849][ T1417] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.11354: bg 0: block 248: padding at end of block bitmap is not set [ 635.091642][ T1417] EXT4-fs error (device loop6): ext4_acquire_dquot:6938: comm syz.6.11354: Failed to acquire dquot type 1 [ 635.120960][ T1417] EXT4-fs (loop6): 1 truncate cleaned up [ 635.139975][ T1417] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 635.703865][ T430] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 635.781727][ T1425] netlink: 64 bytes leftover after parsing attributes in process `syz.2.11361'. [ 635.785408][ T1429] loop7: detected capacity change from 0 to 1024 [ 635.848290][ T1429] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 635.907093][ T1429] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 635.955234][ T1429] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 635.967483][ T1429] EXT4-fs (loop7): This should not happen!! Data will be lost [ 635.967483][ T1429] [ 635.977219][ T1429] EXT4-fs (loop7): Total free blocks count 0 [ 635.983230][ T1429] EXT4-fs (loop7): Free/Dirty block details [ 635.989308][ T1429] EXT4-fs (loop7): free_blocks=68451041280 [ 635.995124][ T1429] EXT4-fs (loop7): dirty_blocks=16 [ 636.000263][ T1429] EXT4-fs (loop7): Block reservation details [ 636.006280][ T1429] EXT4-fs (loop7): i_reserved_data_blocks=1 [ 636.028483][ T1439] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 636.051324][ T1429] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 636.060540][ T1429] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 636.205993][ T1444] wireguard0: entered promiscuous mode [ 636.211691][ T1444] wireguard0: entered allmulticast mode [ 636.267007][ T1448] netlink: 48 bytes leftover after parsing attributes in process `syz.7.11366'. [ 636.309219][ T1437] pimreg: entered allmulticast mode [ 636.330768][ T1450] random: crng reseeded on system resumption [ 636.347341][ T1440] pimreg: left allmulticast mode [ 636.662173][ T1459] ebtables: ebtables: counters copy to user failed while replacing table [ 636.694268][ T1459] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11369'. [ 636.695559][ T1464] loop1: detected capacity change from 0 to 512 [ 636.725773][ T1464] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 636.728622][ T1459] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 636.775752][ T1464] EXT4-fs error (device loop1): ext4_orphan_get:1389: inode #17: comm syz.1.11370: iget: bad i_size value: -6917529027641081756 [ 636.800988][ T1464] EXT4-fs error (device loop1): ext4_orphan_get:1394: comm syz.1.11370: couldn't read orphan inode 17 (err -117) [ 636.821399][ T1464] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 636.914886][ T1475] loop2: detected capacity change from 0 to 512 [ 636.932417][T28281] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 637.239410][ T1475] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 637.284122][ T1475] EXT4-fs (loop2): mount failed [ 637.366939][ T1490] loop7: detected capacity change from 0 to 512 [ 637.455468][ T1490] EXT4-fs warning (device loop7): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 637.574511][ T1490] EXT4-fs (loop7): mount failed [ 637.897671][ T1500] netlink: 'syz.2.11381': attribute type 1 has an invalid length. [ 637.905713][ T1500] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11381'. [ 638.673602][T30525] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.891245][ T29] kauditd_printk_skb: 497 callbacks suppressed [ 638.891260][ T29] audit: type=1326 audit(1736430673.217:100936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1512 comm="syz.7.11386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e856a5d29 code=0x7ffc0000 [ 638.958866][ T29] audit: type=1326 audit(1736430673.257:100937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1512 comm="syz.7.11386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f5e856a5d29 code=0x7ffc0000 [ 638.983162][ T29] audit: type=1326 audit(1736430673.257:100938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1512 comm="syz.7.11386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e856a5d29 code=0x7ffc0000 [ 639.006897][ T29] audit: type=1326 audit(1736430673.257:100939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1512 comm="syz.7.11386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f5e856a5d29 code=0x7ffc0000 [ 639.031141][ T29] audit: type=1326 audit(1736430673.257:100940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1512 comm="syz.7.11386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e856a5d29 code=0x7ffc0000 [ 639.054888][ T29] audit: type=1326 audit(1736430673.257:100941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1512 comm="syz.7.11386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f5e856a5d29 code=0x7ffc0000 [ 639.079109][ T29] audit: type=1326 audit(1736430673.257:100942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1512 comm="syz.7.11386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e856a5d29 code=0x7ffc0000 [ 639.103449][ T29] audit: type=1326 audit(1736430673.257:100943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1512 comm="syz.7.11386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e856a5d29 code=0x7ffc0000 [ 639.127210][ T29] audit: type=1326 audit(1736430673.257:100944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1512 comm="syz.7.11386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e856a5d29 code=0x7ffc0000 [ 639.151512][ T29] audit: type=1326 audit(1736430673.257:100945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1512 comm="syz.7.11386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e856a5d29 code=0x7ffc0000 [ 639.559754][ T1530] loop2: detected capacity change from 0 to 512 [ 639.570736][ T1530] EXT4-fs: inline encryption not supported [ 639.617837][ T1530] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 639.636804][ T1530] ext4 filesystem being mounted at /14/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 639.670829][ T1530] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.11391: corrupted inode contents [ 639.695049][ T1530] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #2: comm syz.2.11391: mark_inode_dirty error [ 639.720099][ T1530] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.11391: corrupted inode contents [ 639.743101][ T1530] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.11391: mark_inode_dirty error [ 639.789690][ T1245] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.909915][ T1557] netlink: 132 bytes leftover after parsing attributes in process `syz.2.11399'. [ 640.048303][ T1566] loop0: detected capacity change from 0 to 512 [ 640.084853][ T1566] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.11401: Invalid inode bitmap blk 4 in block_group 0 [ 640.091533][ T1570] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11402'. [ 640.098840][ T1563] netlink: 'syz.2.11400': attribute type 1 has an invalid length. [ 640.113213][ T1566] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 640.114812][ T1563] netlink: 224 bytes leftover after parsing attributes in process `syz.2.11400'. [ 640.134502][ T1566] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 640.198904][T26966] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.600563][ T1600] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11414'. [ 640.636784][ T1602] loop6: detected capacity change from 0 to 512 [ 640.655338][ T1602] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.11415: Invalid inode bitmap blk 4 in block_group 0 [ 640.681897][ T1602] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 640.706257][ T1602] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 640.815558][T30525] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.867153][ T1610] ebtables: ebtables: counters copy to user failed while replacing table [ 640.889968][ T1610] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11419'. [ 640.905445][ T1610] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 641.007371][ T1627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11425'. [ 641.042239][ T1629] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11426'. [ 641.136087][ T1637] loop0: detected capacity change from 0 to 512 [ 641.167693][ T1637] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.11429: Invalid inode bitmap blk 4 in block_group 0 [ 641.196321][ T1637] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 641.431435][ T1655] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11437'. [ 641.476934][ T1661] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11440'. [ 641.789214][ T1684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 641.799693][ T1684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.809635][ T1684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 641.819853][ T1684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.830477][ T1684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 641.840434][ T1684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.850447][ T1684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 641.860199][ T1684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.870686][ T1684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 641.880470][ T1684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.890310][ T1684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 641.900696][ T1684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.910635][ T1684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 641.920507][ T1684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.930992][ T1684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 641.940862][ T1684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.950883][ T1684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 641.961386][ T1684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.971237][ T1684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 641.981097][ T1684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 641.991583][ T1684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 642.001382][ T1684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.011271][ T1684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 642.021658][ T1684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.031505][ T1684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 642.041264][ T1684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.051714][ T1684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 642.061480][ T1684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.071337][ T1684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 642.081798][ T1684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 642.098459][ T1684] dummy0: entered promiscuous mode [ 642.119270][ T1684] dummy0: left promiscuous mode [ 642.262826][ T1694] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11454'. [ 642.289921][ T1696] ebtables: ebtables: counters copy to user failed while replacing table [ 642.319881][ T1696] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 642.383145][ T1708] loop2: detected capacity change from 0 to 512 [ 642.408999][ T1708] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 642.426082][ T1708] EXT4-fs (loop2): mount failed [ 642.476217][ T1720] netlink: 'syz.0.11462': attribute type 1 has an invalid length. [ 642.491218][ T1718] loop2: detected capacity change from 0 to 512 [ 642.576940][ T1718] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.11463: Invalid inode bitmap blk 4 in block_group 0 [ 642.614501][ T1718] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 642.693797][ T1730] loop2: detected capacity change from 0 to 512 [ 642.717402][ T1730] EXT4-fs: inline encryption not supported [ 642.735010][ T1730] ext4 filesystem being mounted at /24/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 642.750903][ T1730] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.11466: corrupted inode contents [ 642.768233][ T1730] EXT4-fs error (device loop2): ext4_dirty_inode:6041: inode #2: comm syz.2.11466: mark_inode_dirty error [ 642.779996][ T1730] EXT4-fs error (device loop2): ext4_do_update_inode:5153: inode #2: comm syz.2.11466: corrupted inode contents [ 642.797842][ T1730] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.11466: mark_inode_dirty error [ 642.914547][ T1741] ebtables: ebtables: counters copy to user failed while replacing table [ 642.926492][ T1741] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 643.034971][ T1751] loop2: detected capacity change from 0 to 512 [ 643.045492][ T1751] EXT4-fs warning (device loop2): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 643.061193][ T1751] EXT4-fs (loop2): mount failed [ 644.072314][ T1774] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 644.199836][ T1772] ebtables: ebtables: counters copy to user failed while replacing table [ 644.428564][ T1784] loop1: detected capacity change from 0 to 512 [ 644.464994][ T1784] __quota_error: 472 callbacks suppressed [ 644.465008][ T1784] Quota error (device loop1): v2_read_file_info: Free block number 1 out of range (1, 6). [ 644.500182][ T1788] loop2: detected capacity change from 0 to 128 [ 644.506931][ T1784] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 644.548712][ T1784] EXT4-fs (loop1): mount failed [ 644.611677][ T29] audit: type=1326 audit(1736430678.932:101416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1794 comm="syz.1.11490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c7065d29 code=0x7ffc0000 [ 644.647509][ T1797] loop2: detected capacity change from 0 to 2048 [ 644.654569][ T29] audit: type=1326 audit(1736430678.932:101417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1794 comm="syz.1.11490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c7065d29 code=0x7ffc0000 [ 644.678941][ T29] audit: type=1326 audit(1736430678.932:101418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1794 comm="syz.1.11490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f38c7065d29 code=0x7ffc0000 [ 644.702612][ T29] audit: type=1326 audit(1736430678.932:101419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1794 comm="syz.1.11490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c7065d29 code=0x7ffc0000 [ 644.726902][ T29] audit: type=1326 audit(1736430678.932:101420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1794 comm="syz.1.11490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38c7065d29 code=0x7ffc0000 [ 644.750702][ T29] audit: type=1326 audit(1736430678.932:101421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1794 comm="syz.1.11490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c7065d29 code=0x7ffc0000 [ 644.774490][ T29] audit: type=1326 audit(1736430678.932:101422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1794 comm="syz.1.11490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38c7065d29 code=0x7ffc0000 [ 644.799024][ T29] audit: type=1326 audit(1736430678.932:101423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1794 comm="syz.1.11490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38c7065d29 code=0x7ffc0000 [ 644.822775][ T29] audit: type=1326 audit(1736430678.932:101424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1794 comm="syz.1.11490" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f38c7065d29 code=0x7ffc0000 [ 645.293117][ T1817] loop6: detected capacity change from 0 to 128 [ 645.779432][ T1827] __nla_validate_parse: 7 callbacks suppressed [ 645.779442][ T1827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11500'. [ 646.054255][ T1839] loop2: detected capacity change from 0 to 512 [ 646.062763][ T1836] ebtables: ebtables: counters copy to user failed while replacing table [ 646.073366][ T1836] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11504'. [ 646.079222][ T1839] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.11505: Invalid inode bitmap blk 4 in block_group 0 [ 646.084197][ T1836] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 646.095727][ T1839] EXT4-fs mount: 8 callbacks suppressed [ 646.095742][ T1839] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 646.137290][ T1839] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 646.151969][ T1843] wireguard0: entered promiscuous mode [ 646.157691][ T1843] wireguard0: entered allmulticast mode [ 646.164928][ T1245] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.189919][ T1848] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11506'. [ 646.191268][ T1846] loop2: detected capacity change from 0 to 128 [ 646.321512][ T1856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11510'. [ 646.722058][ T1870] ebtables: ebtables: counters copy to user failed while replacing table [ 646.740108][ T1870] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11516'. [ 646.752353][ T1870] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 647.307598][ T1883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11520'. [ 647.555241][ T1885] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11521'. [ 647.815905][ T1891] loop0: detected capacity change from 0 to 2048 [ 647.941341][ T1891] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 648.064593][T26966] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.092714][ T1908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 648.102589][ T1908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.102633][ T1908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 648.102654][ T1908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.102669][ T1908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 648.102683][ T1908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.102696][ T1908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 648.102707][ T1908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.102726][ T1908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 648.102738][ T1908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.102754][ T1908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 648.102767][ T1908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.102780][ T1908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 648.102794][ T1908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.102806][ T1908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 648.102818][ T1908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.102835][ T1908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 648.102846][ T1908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.102858][ T1908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 648.102868][ T1908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.102885][ T1908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 648.102899][ T1908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.102913][ T1908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 648.102926][ T1908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.102941][ T1908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 648.102969][ T1908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.102982][ T1908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 648.102992][ T1908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.103007][ T1908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 648.103021][ T1908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 648.103885][ T1908] dummy0: entered promiscuous mode [ 648.115800][ T1908] dummy0: left promiscuous mode [ 648.464791][ T1926] loop2: detected capacity change from 0 to 2048 [ 648.489547][ T1926] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 648.623818][ T1245] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.730511][ T1948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11546'. [ 648.751814][ T1946] loop0: detected capacity change from 0 to 512 [ 648.759335][ T1950] loop2: detected capacity change from 0 to 512 [ 648.766771][ T1950] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 648.776974][ T1946] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.11545: Invalid inode bitmap blk 4 in block_group 0 [ 648.793996][ T1950] EXT4-fs (loop2): invalid journal inode [ 648.800104][ T1950] EXT4-fs (loop2): can't get journal size [ 648.803325][ T1955] ebtables: ebtables: counters copy to user failed while replacing table [ 648.809990][ T1946] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 648.819069][ T1955] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11549'. [ 648.840600][ T1955] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 648.841457][ T1946] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 648.885337][T26966] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.888774][ T1950] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a056c119, mo2=0002] [ 648.903843][ T1950] System zones: 1-12, 13-13 [ 648.914967][ T1950] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.11548: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 648.948509][ T1950] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.11548: couldn't read orphan inode 15 (err -117) [ 648.963537][ T1950] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 649.037385][ T1977] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11558'. [ 649.207874][ T1987] ebtables: ebtables: counters copy to user failed while replacing table [ 649.224548][ T1987] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 649.405772][ T2007] loop6: detected capacity change from 0 to 512 [ 649.424080][ T2007] EXT4-fs warning (device loop6): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 649.427087][ T2000] pimreg: entered allmulticast mode [ 649.449583][ T2000] pimreg: left allmulticast mode [ 649.461420][ T2007] EXT4-fs (loop6): mount failed [ 649.508152][ T2000] random: crng reseeded on system resumption [ 649.508589][ T29] kauditd_printk_skb: 1405 callbacks suppressed [ 649.508602][ T29] audit: type=1326 audit(1736430683.830:102829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1999 comm="syz.7.11566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e856a5d29 code=0x7ffc0000 [ 649.544474][ T29] audit: type=1326 audit(1736430683.830:102830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1999 comm="syz.7.11566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e856a5d29 code=0x7ffc0000 [ 649.568419][ T29] audit: type=1326 audit(1736430683.830:102831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1999 comm="syz.7.11566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5e856a5d29 code=0x7ffc0000 [ 649.649487][ T29] audit: type=1326 audit(1736430683.930:102832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1999 comm="syz.7.11566" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5e856a5d29 code=0x0 [ 649.673366][ T29] audit: type=1326 audit(1736430683.930:102833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1999 comm="syz.7.11566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e856a5d29 code=0x7ffc0000 [ 649.697807][ T29] audit: type=1326 audit(1736430683.930:102834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1999 comm="syz.7.11566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e856a5d29 code=0x7ffc0000 [ 649.737316][ T29] audit: type=1326 audit(1736430684.040:102835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1999 comm="syz.7.11566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5e856a5d29 code=0x7ffc0000 [ 649.761344][ T29] audit: type=1326 audit(1736430684.040:102836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1999 comm="syz.7.11566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e856a5d29 code=0x7ffc0000 [ 649.785252][ T29] audit: type=1326 audit(1736430684.040:102837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1999 comm="syz.7.11566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5e856a5d29 code=0x7ffc0000 [ 649.864804][ T29] audit: type=1326 audit(1736430684.130:102838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1984 comm="syz.0.11561" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4f905d29 code=0x7ffc0000 [ 649.887938][ T2022] ebtables: ebtables: counters copy to user failed while replacing table [ 649.898584][ T1245] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.912106][ T2022] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 650.084885][ T2046] loop6: detected capacity change from 0 to 128 [ 650.173875][ T2057] loop7: detected capacity change from 0 to 512 [ 650.180909][ T2057] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 650.202663][ T2057] EXT4-fs error (device loop7): ext4_orphan_get:1389: inode #17: comm syz.7.11589: iget: bad i_size value: -6917529027641081756 [ 650.217165][ T2057] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.11589: couldn't read orphan inode 17 (err -117) [ 650.233481][ T2057] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 650.266031][ T430] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.307281][ T2074] wireguard0: entered promiscuous mode [ 650.312869][ T2074] wireguard0: entered allmulticast mode [ 650.444805][ T2083] loop2: detected capacity change from 0 to 128 [ 650.659224][ T2090] pimreg: entered allmulticast mode [ 650.735855][ T2088] pimreg: left allmulticast mode [ 650.788931][ T2090] random: crng reseeded on system resumption [ 650.923649][ T2095] loop2: detected capacity change from 0 to 512 [ 651.016814][ T2095] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 651.311171][ T2095] EXT4-fs (loop2): orphan cleanup on readonly fs [ 651.352591][ T2095] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.11601: bg 0: block 248: padding at end of block bitmap is not set [ 651.449590][ T2105] loop1: detected capacity change from 0 to 512 [ 651.489010][ T2095] EXT4-fs error (device loop2): ext4_acquire_dquot:6938: comm syz.2.11601: Failed to acquire dquot type 1 [ 651.508164][ T2105] EXT4-fs warning (device loop1): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 651.549890][ T2105] EXT4-fs (loop1): mount failed [ 651.588093][ T2095] EXT4-fs (loop2): 1 truncate cleaned up [ 651.633724][ T2095] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 651.732608][ T2122] __nla_validate_parse: 7 callbacks suppressed [ 651.732626][ T2122] netlink: 8 bytes leftover after parsing attributes in process `syz.7.11612'. [ 651.770618][ T2123] loop1: detected capacity change from 0 to 128 [ 651.806572][ T2125] ebtables: ebtables: counters copy to user failed while replacing table [ 651.826536][ T2125] netlink: 24 bytes leftover after parsing attributes in process `syz.7.11613'. [ 651.846817][ T2125] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 652.338445][ T2156] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11623'. [ 652.410740][ T2161] loop7: detected capacity change from 0 to 512 [ 652.442179][ T2161] EXT4-fs warning (device loop7): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 652.479943][ T2161] EXT4-fs (loop7): mount failed [ 652.484999][ T2164] ebtables: ebtables: counters copy to user failed while replacing table [ 652.509867][ T2171] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11628'. [ 652.533879][ T2171] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 652.585941][ T2175] loop7: detected capacity change from 0 to 128 [ 653.014864][ T2202] netlink: 'syz.6.11639': attribute type 1 has an invalid length. [ 653.022764][ T2202] netlink: 224 bytes leftover after parsing attributes in process `syz.6.11639'. [ 653.094241][ T2208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11642'. [ 653.251911][ T2211] loop0: detected capacity change from 0 to 128 [ 653.791784][ T2219] loop0: detected capacity change from 0 to 512 [ 653.811688][ T2219] EXT4-fs: inline encryption not supported [ 653.849229][ T2219] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 653.878139][ T2219] ext4 filesystem being mounted at /544/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 653.926902][ T2219] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.11646: corrupted inode contents [ 653.956715][ T2219] EXT4-fs error (device loop0): ext4_dirty_inode:6041: inode #2: comm syz.0.11646: mark_inode_dirty error [ 653.992381][ T2219] EXT4-fs error (device loop0): ext4_do_update_inode:5153: inode #2: comm syz.0.11646: corrupted inode contents [ 654.024951][ T2219] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.11646: mark_inode_dirty error [ 654.077705][T26966] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.106667][ T2225] loop7: detected capacity change from 0 to 2048 [ 654.179852][ T2225] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 654.318623][ T430] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.429756][ T2235] loop7: detected capacity change from 0 to 512 [ 654.448497][ T2235] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 654.492949][ T2235] EXT4-fs error (device loop7): ext4_orphan_get:1389: inode #17: comm syz.7.11651: iget: bad i_size value: -6917529027641081756 [ 654.519229][ T2235] EXT4-fs error (device loop7): ext4_orphan_get:1394: comm syz.7.11651: couldn't read orphan inode 17 (err -117) [ 654.542078][ T2235] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 654.678541][ T430] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.823925][ T2244] loop7: detected capacity change from 0 to 128 [ 654.983050][ T2252] ebtables: ebtables: counters copy to user failed while replacing table [ 654.999585][ T2252] netlink: 24 bytes leftover after parsing attributes in process `syz.6.11657'. [ 655.011850][ T2252] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 655.054458][ T2258] netlink: 8 bytes leftover after parsing attributes in process `syz.6.11659'. [ 655.272369][ T2270] loop6: detected capacity change from 0 to 128 [ 655.620780][ T2281] netlink: 4 bytes leftover after parsing attributes in process `syz.7.11667'. [ 655.630486][ T2281] netlink: 252 bytes leftover after parsing attributes in process `syz.7.11667'. [ 655.998030][ T1245] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.342904][ T2296] loop6: detected capacity change from 0 to 128 [ 656.383931][ T2298] loop7: detected capacity change from 0 to 512 [ 656.406864][ T2298] __quota_error: 72 callbacks suppressed [ 656.406882][ T2298] Quota error (device loop7): v2_read_file_info: Free block number 1 out of range (1, 6). [ 656.422809][ T2298] EXT4-fs warning (device loop7): ext4_enable_quotas:7156: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 656.441441][ T2298] EXT4-fs (loop7): mount failed [ 656.523894][ T2321] loop2: detected capacity change from 0 to 512 [ 656.531665][ T2321] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 656.552035][ T2321] EXT4-fs error (device loop2): ext4_orphan_get:1389: inode #17: comm syz.2.11685: iget: bad i_size value: -6917529027641081756 [ 656.569688][ T2321] EXT4-fs error (device loop2): ext4_orphan_get:1394: comm syz.2.11685: couldn't read orphan inode 17 (err -117) [ 656.569808][ T2324] ================================================================== [ 656.569831][ T2324] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 656.583322][ T2321] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 656.589734][ T2324] [ 656.589743][ T2324] write to 0xffffffff86723a38 of 8 bytes by task 2321 on cpu 1: [ 656.589759][ T2324] prb_reserve+0x740/0xb60 [ 656.623526][ T2324] vprintk_store+0x558/0x870 [ 656.628115][ T2324] vprintk_emit+0x15e/0x680 [ 656.632615][ T2324] vprintk_default+0x26/0x30 [ 656.637200][ T2324] vprintk+0x75/0x80 [ 656.641089][ T2324] _printk+0x7a/0xa0 [ 656.644975][ T2324] __ext4_error+0x221/0x310 [ 656.649480][ T2324] ext4_orphan_get+0x172/0x3e0 [ 656.654322][ T2324] ext4_orphan_cleanup+0x5df/0x9e0 [ 656.659431][ T2324] ext4_fill_super+0x36bb/0x3a10 [ 656.664362][ T2324] get_tree_bdev_flags+0x29f/0x310 [ 656.669468][ T2324] get_tree_bdev+0x1f/0x30 [ 656.673987][ T2324] ext4_get_tree+0x1c/0x30 [ 656.678403][ T2324] vfs_get_tree+0x56/0x1e0 [ 656.682813][ T2324] do_new_mount+0x227/0x690 [ 656.687316][ T2324] path_mount+0x49b/0xb30 [ 656.691640][ T2324] __se_sys_mount+0x27c/0x2d0 [ 656.696312][ T2324] __x64_sys_mount+0x67/0x80 [ 656.700911][ T2324] x64_sys_call+0x2c84/0x2dc0 [ 656.705580][ T2324] do_syscall_64+0xc9/0x1c0 [ 656.710083][ T2324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.715977][ T2324] [ 656.718291][ T2324] read to 0xffffffff86723a38 of 8 bytes by task 2324 on cpu 0: [ 656.725829][ T2324] _prb_read_valid+0x1ec/0xba0 [ 656.730590][ T2324] prb_read_valid+0x3d/0x60 [ 656.735089][ T2324] console_unlock+0x175/0x330 [ 656.739775][ T2324] con_shutdown+0x4b/0x60 [ 656.744094][ T2324] release_tty+0x84/0x4f0 [ 656.748422][ T2324] tty_release_struct+0x97/0xb0 [ 656.753270][ T2324] tty_release+0x8e4/0x930 [ 656.757686][ T2324] __fput+0x17a/0x6d0 [ 656.761661][ T2324] ____fput+0x1c/0x30 [ 656.765634][ T2324] task_work_run+0x13a/0x1a0 [ 656.770238][ T2324] syscall_exit_to_user_mode+0xa8/0x120 [ 656.775782][ T2324] do_syscall_64+0xd6/0x1c0 [ 656.780276][ T2324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.786191][ T2324] [ 656.788500][ T2324] value changed: 0x0000000000003a1d -> 0x0000000000005a1d [ 656.795591][ T2324] [ 656.797901][ T2324] Reported by Kernel Concurrency Sanitizer on: [ 656.804040][ T2324] CPU: 0 UID: 0 PID: 2324 Comm: syz.7.11687 Not tainted 6.13.0-rc6-syzkaller-00051-geea6e4b4dfb8 #0 [ 656.814791][ T2324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 656.824840][ T2324] ================================================================== [ 656.863831][ T1245] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.