last executing test programs: 6m28.593741064s ago: executing program 32 (id=129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000000000001f2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000020000000000002000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r4}, 0x18) add_key(0x0, 0x0, &(0x7f0000000100)="01000000020000000000006bb55a2a630bf7c045f94cd977", 0x18, 0xffffffffffffffff) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="300000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3a0000000004000380dd88d1c3fb0b8757eca69d1c141eca1d2d3a14a5cd7c39a8af4dd369034e487627c63d88f5be269ba3c2"], 0x30}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 6m23.189239996s ago: executing program 2 (id=206): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) setxattr$incfs_metadata(&(0x7f0000001b40)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x3) 6m23.166755027s ago: executing program 2 (id=207): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8927, &(0x7f0000000180)='\xcaOKz:|\x7f\xa4Fx\xe1\xf7m!c\x9f\x9a\xf3y\x1fo\xf8b\v\xfe1\x99\xf0\xa2\xf9\x98\x05\xb5\xb3j\xf8\xea\xd7\xe2\xdf\xbf\x1f\t\"\xc3\x11\xb93\x185\xdfD\xd9(b\x11\xb5F3{0\x0e\x90\xc3i\xd3\xce^\xf2\x84\x92\x9a\x16\xa6\x05\xbfq\x11\x03<\xc5\x0f*\x1e\xdc%\xf1\xdd\x01\xb2\xc0\xab:\x9f\x8b\x1e}+\xff\xa9kE\t;\xdb\x8d\xd9v3\x98\xad\xb9\bPd\x13wl\xe3\xc5\xe9\x90') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r4, &(0x7f0000000080), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000380)=ANY=[@ANYRES64=r1, @ANYRES32=r3, @ANYRES64=0x0], 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000040)={[{@noquota}]}, 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r7 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000001ffffeb00000000eb658e0d850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x1c5902, 0x2d) write(r9, &(0x7f0000004200)='t', 0x1) sendfile(r9, r8, 0x0, 0x7ffff000) fallocate(r7, 0x0, 0x0, 0x1001f4) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000240)='4', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="b400455f00bb6211bac6ab2e5d0000009500000009000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xd2, &(0x7f0000000280)=""/210, 0x40f00, 0x24, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x81}, 0x94) 6m22.972799979s ago: executing program 2 (id=208): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x0, 0x1, 0x8, 0x20002, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x4000054) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x12, 0x5}, 0x1009d1, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) (async) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x12, 0x5}, 0x1009d1, 0xc78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x4000054) getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000007c0)=@generic={&(0x7f0000000780)='./file0\x00', r4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x951}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x951}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5, 0x0, 0x7}, 0x18) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x300, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xa0d81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000002c0)={0xffffffff, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r6, 0x402c5342, &(0x7f0000000600)={0x0, 0x7a120, 0x60, {0x3, 0x103}, 0x0, 0x9}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r6, 0x402c5342, &(0x7f0000000600)={0x0, 0x7a120, 0x60, {0x3, 0x103}, 0x0, 0x9}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), 0xffffffffffffffff) 6m22.793976102s ago: executing program 2 (id=209): r0 = socket$netlink(0x10, 0x3, 0x14) r1 = fsopen(&(0x7f0000000280)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) openat(r2, &(0x7f0000000000)='./file0\x00', 0x8180, 0xc0) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r6}, 0x10) dup2(r0, r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) umount2(0x0, 0x1) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x101040, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x400, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r7}}) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x58b, &(0x7f00000006c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @tipc_packet={0x3, 0x6, "805400", 0x555, 0x6, 0x1, @mcast1, @mcast1, {[@srh={0x2f, 0x6, 0x4, 0x3, 0x3, 0x28, 0x7, [@ipv4={'\x00', '\xff\xff', @remote}, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @hopopts={0x0, 0x4, '\x00', [@ra={0x5, 0x2, 0xd}, @pad1, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @local}]}, @routing={0x62, 0x6, 0x1, 0x81, 0x0, [@loopback, @mcast1, @local]}, @dstopts={0x0, 0x28, '\x00', [@calipso={0x7, 0x38, {0x2, 0xc, 0x4, 0x100, [0x0, 0xe, 0xb, 0x2000000000, 0x4, 0x0]}}, @hao={0xc9, 0x10, @mcast1}, @enc_lim={0x4, 0x1, 0x2}, @enc_lim={0x4, 0x1, 0x7}, @calipso={0x7, 0x28, {0x2, 0x8, 0x1, 0x4b9a, [0x275f, 0x81, 0x9cf4, 0xf]}}, @calipso={0x7, 0x58, {0x3, 0x14, 0x7d, 0x4, [0xffffffff, 0x10000, 0x6, 0x0, 0x5816, 0x3, 0x5, 0x4, 0x7, 0xfffffffffffff90c]}}, @calipso={0x7, 0x20, {0x2, 0x6, 0x9, 0x9, [0x5, 0x80000000, 0x5]}}, @calipso={0x7, 0x48, {0x0, 0x10, 0x3a, 0x200, [0x3, 0xffffffffffffffff, 0x9, 0x6ee7, 0x3a64, 0x80000001, 0x3, 0x5]}}]}, @dstopts={0x6c, 0x28, '\x00', [@ra={0x5, 0x2, 0x4}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x38, {0x2, 0xc, 0x2, 0x6, [0x8000000000000001, 0x3, 0x8000, 0x9, 0xfffffffffffff000, 0x6]}}, @calipso={0x7, 0x10, {0x1, 0x2, 0xbd, 0x2, [0x0]}}, @jumbo={0xc2, 0x4, 0x17}, @ra={0x5, 0x2, 0x5}, @generic={0xff, 0xd9, "d965b13a40978ec90b4067e6b4410ad949579768544097ada5eeb20117b586eee94ce8d4ac68870e25dea2447691737e3081601aa9949c2c8c7fc6341ef53dbfa8a05fe8a175661447c14ff37769536be07cc33f4c6aa2c50edc800bb4e677a37c0374ac8efe82f647071b1a9bce7fed60b385715b43a0e08278f07f48c9d8eb0d65a0540325775be36f5624faa6af5c8be8cd8e83272f330c77239f3a0feb7363357d7623d40b917b0ed7c17795f6c28e739a8b20082ba8c75667ccf02811ab470adcbfdc4f2b0b1c93a3e0b41faa61355e809e0edf8bab23"}, @pad1]}, @dstopts={0x73, 0x21, '\x00', [@pad1, @ra, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x30, {0x2, 0xa, 0x7f, 0x84, [0x1, 0x5, 0x7, 0x9, 0x2]}}, @pad1, @jumbo={0xc2, 0x4, 0x8}, @generic={0xa, 0x8e, "63d9604e292721faf5e3f86891641ae304f1479f7085cd20d988eb8d800a4044a2b5aa030f445a8bfe11a877366e211c098b8512d9e93eaf896aa7059d9cf824fc7e02974153f55b45105a7029025bde896ede9ba4775d252f58e5334f16a10e93db51cdda5a56b3ed62699494b58f3bdb9919d5154b3cb31d64db12723c505a7cc93a2214d6a41c9420a6977b1c"}, @padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x28, {0x3, 0x8, 0x9, 0x1, [0x100, 0x7, 0x9c, 0xc000000000000000]}}, @enc_lim={0x4, 0x1, 0xce}]}, @fragment={0x33, 0x0, 0x1, 0x0, 0x0, 0xd, 0x68}, @srh={0x87, 0x2, 0x4, 0x1, 0x2c, 0x10, 0x60e, [@mcast1]}, @hopopts={0x0, 0x14, '\x00', [@generic={0x5, 0x9e, "1b12058529fc0a11c1f38349b288d46275645df59839f179fe3ad7352db0be3504ad364190636e0bf0aa2e295b10c2e3e093dc43a09bcc82da453373fdb299c69d987e9b55a2d49212fd42b0d87b9fd521a91b4059bc3e430e9708bea65dd37f5586f6e3f1374c1981cc7895c816eb52dd02fe46d699ff95938d08ebfe0c7140b7e2cc73bac76f51dfe43354368778c6a7158cc35cb1e783eef2e079e12f"}, @pad1, @ra={0x5, 0x2, 0x2}]}], @payload_mcast={{{{{{0x2d, 0x0, 0x0, 0x0, 0x1, 0xb, 0x1, 0x2, 0xb, 0x0, 0x1, 0xf, 0x0, 0x1, 0x8, 0x5, 0x4, 0x4e20, 0x4e21}, 0x4, 0x1}, 0x4, 0x1}, 0x4}}, [0x0]}}}}}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) syncfs(0xffffffffffffffff) 6m22.699992223s ago: executing program 2 (id=211): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x64, r1, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}]}, 0x64}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x847a563bcbdf3c5f}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_COOKIE={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt(r2, 0x1, 0x4, &(0x7f00000008c0)=""/92, &(0x7f0000000940)=0x5c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_query]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='mm_page_free\x00', r6, 0x0, 0xc}, 0x18) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xfdef, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500fde1030000000011907800e38af4666bbc8bef6f603b0000000000000000004e22004d90780400"/65], 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}, 0x1c) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x2000) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c58777003d5b9538a9dc7e9513fdac550000000003000600000000000200000000000000000000000000000002000100000000000000020d00000000030005000000000002"], 0x78}, 0x1, 0x7}, 0x20000004) 6m22.558126366s ago: executing program 2 (id=212): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r1 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000440)=r0, 0x1) 6m22.528285226s ago: executing program 33 (id=212): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000005c0)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r1 = syz_io_uring_setup(0x39, &(0x7f0000000580)={0x0, 0xe7b7, 0x13500}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r1, 0x21, &(0x7f0000000440)=r0, 0x1) 5m44.407759795s ago: executing program 1 (id=794): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00', r1, 0x0, 0x4092}, 0x18) close(r0) 5m44.213379408s ago: executing program 1 (id=797): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x6c, 0x7f, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) fsync(0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0300001000010400"/20, @ANYRES8=r2, @ANYBLOB="0300005a0000000023ca0012800c0001006d6193e3ed6fb3009606000200000000000000", @ANYRES64=0x0, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT=r0, @ANYRES32=r1, @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getchain={0x2c, 0x66, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xfff2}, {0x6, 0xd}, {0x6, 0x10}}, [{0x8, 0xb, 0x5}]}, 0x2c}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000002e00000095000000000000000000000c00"/32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) personality(0x410000e) 5m43.927784022s ago: executing program 1 (id=800): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) setxattr$incfs_metadata(&(0x7f0000001b40)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x3) 5m43.918511662s ago: executing program 1 (id=802): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4a6, &(0x7f0000000a40)="$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") openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x7, 0x7ffc1ff3}]}) r0 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) shutdown(r1, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000), &(0x7f0000000040)=0x8) tgkill(r0, r0, 0x1000021) 5m43.763271784s ago: executing program 1 (id=804): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0xe, 0x4, 0x7, 0xcf2a, 0x0, 0xffffffffffffffff}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x8, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYRESDEC], 0x50) mlock2(&(0x7f000022a000/0x1000)=nil, 0x1000, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe070066ec", 0xff3b}], 0x4e, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='block_bio_remap\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 5m43.459863089s ago: executing program 1 (id=813): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) setxattr$incfs_metadata(&(0x7f0000001b40)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x3) 5m43.459522519s ago: executing program 34 (id=813): bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) setxattr$incfs_metadata(&(0x7f0000001b40)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x3) 2m24.814708473s ago: executing program 0 (id=3593): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001c00010028bd70000000000007000000", @ANYRES32=r3, @ANYBLOB="80004a020a000200a2aaaa9faa0c0021"], 0x28}}, 0x80) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000002300000080000000", @ANYRES32=r0, @ANYBLOB="000400"/20, @ANYRES32=r3, @ANYRES32, @ANYBLOB="04000000040000000300"/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x13, 0xc, &(0x7f0000000640)=ANY=[@ANYRES8=r3], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) semget(0x1, 0x2, 0x22) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800000000c30000b17f56a569f28f19b0878aac26106b9aa517bddcec28969b9294e02cf0619400"/101], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FICLONE(r7, 0x40049409, r1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, 0x0) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x2) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r8) sendmsg$NFC_CMD_DEP_LINK_UP(r8, &(0x7f0000000600)={0x0, 0xffffffffffffff24, &(0x7f00000005c0)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) personality(0x5400004) socket$nl_sock_diag(0x10, 0x3, 0x4) 2m24.597854247s ago: executing program 0 (id=3596): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 2m24.570723017s ago: executing program 0 (id=3597): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 2m24.494783768s ago: executing program 0 (id=3601): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xc3, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xa19a, 0x1000}, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000340)='cpu\t&0&&\t') r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x6}, 0x18) creat(&(0x7f00000003c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r6 = dup(r5) write$P9_RLERRORu(r6, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r6, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 2m24.416319029s ago: executing program 0 (id=3602): ioprio_set$pid(0x2, 0x0, 0x4007) socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket$inet6(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x45) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r3, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x1f}}}}, @ip_ttl={{0x14, 0x110, 0x2, 0x5398}}], 0x38}, 0x0) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @in6={0xa, 0x4e23, 0x3d1, @empty, 0x6}}}, 0x90) sendto$inet6(r0, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000003c0), 0x228408, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYBLOB="650878e0dc70be432ecfa367c54ae00f7b22b6eaf24a9f901d33d2474721e077497050771708f9cba5ab6f5aca415a4f534503f2bbc9a867570f607a71c42cead4a7a2010ea2a981c65cdcc627a68d04f44bc9053a555e36d114d738ef05c3dd50a99aa07f94fe02da6d46f45b8ff0e2c7ec38b9c2982419ba0ed32176ced0ec33a800c1a18416d1ccec9700fdfb4c", @ANYRES64=r0]) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000280)=0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x64, r5, 0x0, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "a5125ffde194a74a8200821d1f7f4839b021f702df1c5a573d8f8292bb7b359378705629"}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x44004805) write$P9_RWALK(0xffffffffffffffff, &(0x7f0000000240)={0x7e, 0x6f, 0x2, {0x9, [{0x80, 0x4, 0x5}, {0x2, 0x2, 0x4}, {0x2, 0x0, 0x4}, {0x20, 0x3, 0x6}, {0xad4ba2711c3ca4e0, 0x2}, {0x4, 0x3, 0x7}, {0x10, 0x3, 0x8}, {0x4, 0x4, 0x4}, {0x8, 0x1, 0x8}]}}, 0x7e) 2m24.208349822s ago: executing program 0 (id=3608): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 2m8.971360533s ago: executing program 35 (id=3608): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 1m27.69733417s ago: executing program 7 (id=4199): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r0, @ANYBLOB="06001500070000000c001680080001"], 0x38}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000a00)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) perf_event_open(&(0x7f0000000380)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x8) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000003c0)={0x0, 0x0, 0x6, {0x0, 0x1}, {0x45, 0x2}, @period={0x59, 0x200, 0x4, 0x7, 0x0, {0xffff, 0xf, 0x4, 0x5}, 0x0, 0x0}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r3, 0x40095505, 0x0) 1m26.964859971s ago: executing program 7 (id=4213): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='kfree\x00', r0, 0x0, 0x800000000}, 0x18) lsm_get_self_attr(0x65, 0x0, &(0x7f0000000dc0), 0x0) 1m26.888985822s ago: executing program 7 (id=4215): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bf"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffd13}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000005440)=@base={0x12, 0x5, 0x8, 0x9}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r1}, 0x20) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r1, &(0x7f0000005040)=[{{&(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @multicast1}}, 0x80, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000480)=""/46, 0x2e}], 0x2, &(0x7f0000000740)=""/91, 0x5b}, 0x7}], 0x2, 0x10000, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtaction={0xf8, 0x30, 0xffff, 0x70bd2d, 0x0, {}, [{0xe4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10001, 0x5, 0x0, 0x0, 0x0, {}, {0x2, 0x0, 0x0, 0x6}}}]]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2b9, 0xf, 0x4, 0xfffffff8, 0x2e3}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0x2c, 0x3, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf8}}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='io_uring_file_get\x00', r4}, 0x10) r5 = syz_io_uring_setup(0x917, &(0x7f0000000300)={0x0, 0x400, 0x0, 0x1000000}, &(0x7f0000000280)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x7, 0x0, 0x0, 0x0, 0xc}) rmdir(0x0) io_uring_enter(r5, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1m26.712331915s ago: executing program 7 (id=4217): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x41, 0x553, &(0x7f0000000c80)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003500)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd4d}, 0x41) r3 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r3, &(0x7f0000003100)=@id, 0x10) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='netlink_extack\x00', r2}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES16=r4], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) read(r7, &(0x7f0000000000)=""/47, 0x2f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="70000000100003042abd70009da1d2b900000004", @ANYRES32=0x0, @ANYBLOB="0000000000000000500012800b000100627269646765000040000280080005000000000005002900010000000600270004"], 0x70}}, 0x0) 1m26.34026587s ago: executing program 7 (id=4224): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff27}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1m25.948541006s ago: executing program 7 (id=4229): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 1m25.928161206s ago: executing program 36 (id=4229): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x28}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) 52.781472659s ago: executing program 6 (id=4668): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x40095505, 0x0) 52.020820051s ago: executing program 6 (id=4677): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 52.007291361s ago: executing program 6 (id=4679): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, 0x0, 0x0, 0x45833af96e4b28bd, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b000000000000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000040000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d80)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x10000000000000}, 0x18) statx(0xffffffffffffff9c, 0x0, 0x6000, 0x7ff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200)="f6cd6300945fc721edb1538a068a6df644ffc8964626094f81d52bf7b4f2f596bdf6a0d3ca1996b1f31ddcc63dbb25844b7dfa6d18810a72f91347920815c5b16c796c46eabbab336ce90015d13f69ca18be993e620a48e0782d0b644f97f277f0c590e9710358094fec73a7111d95eba3d721cf21027d7dd599addb07a343cd4d4d37537ace6eee875fd7c264f0ee80d2a8f78dc82acef7029bc849eff7", 0x9e) io_submit(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4e}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, 0xffffffffffffffff, &(0x7f00000001c0)='m', 0x1, 0x1}]) 51.948642632s ago: executing program 6 (id=4680): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2000044, &(0x7f0000000040)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8}}, {@jqfmt_vfsold}, {@quota}]}, 0x2, 0x500, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448e3, 0x0) r3 = syz_open_dev$loop(0x0, 0x7, 0x2480) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000002c0)={r4, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0x6e) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd4, 0x1, 0x0, 0x0, 0x0, 0xf, 0x9211, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000400)='tlb_flush\x00', r6}, 0x18) timer_create(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 51.608166087s ago: executing program 6 (id=4683): syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) 50.685283371s ago: executing program 6 (id=4693): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) epoll_create1(0x80000) unshare(0x28000600) r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x109000, 0x0) read$rfkill(r0, &(0x7f00000000c0), 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0208000004000000080000000100000080000000", @ANYBLOB="01000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000fcffffff0000000000000000b7080000000000007b8af8ff00000000b7080000041000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70400000800000085000000950000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff84, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000200000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540959776"], 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x90) 50.658986922s ago: executing program 37 (id=4693): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) epoll_create1(0x80000) unshare(0x28000600) r0 = openat$rfkill(0xffffffffffffff9c, 0x0, 0x109000, 0x0) read$rfkill(r0, &(0x7f00000000c0), 0x8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0208000004000000080000000100000080000000", @ANYBLOB="01000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000fcffffff0000000000000000b7080000000000007b8af8ff00000000b7080000041000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70400000800000085000000950000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff84, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000200000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540959776"], 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x90) 7.622953965s ago: executing program 8 (id=5226): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x17) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f0000000140)={0x0, 0x0, 0xa21b}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 7.593494355s ago: executing program 8 (id=5228): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 7.557631885s ago: executing program 8 (id=5229): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x24, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5e20}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe1b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x1d, &(0x7f00000001c0), 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x18) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r8], 0x30}}, 0x0) close(r4) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) 4.988285174s ago: executing program 8 (id=5252): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = add_key(&(0x7f00000001c0)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000000c0)='9', 0x1, 0xffffffffffffffff) keyctl$chown(0x4, r4, 0xee00, 0xffffffffffffffff) keyctl$chown(0x4, r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001480)='./bus\x00', 0x41, &(0x7f0000001400)={[{@lazytime}, {@noload}, {@bh}, {@grpjquota}, {@noblock_validity}, {}, {@bh}, {@stripe={'stripe', 0x3d, 0x7}}, {@resgid}, {@nodiscard}], [], 0x3d}, 0xfd, 0x526, &(0x7f0000000d00)="$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") r5 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40002, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'}) 4.326869244s ago: executing program 3 (id=5259): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xc}, {0xffff, 0xffff}, {0xffff, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x6}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x5, 0x12, 0x400, 0x1, 0x200}}, {0x4}}]}]}, 0x50}}, 0x0) r0 = getuid() mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f00000000c0)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltuid}], [{@smackfsroot}, {@euid_lt={'euid<', r0}}], 0x6b}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x4110, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x7f) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_nanosleep(0xfffffff2, 0xca9a3b, 0x0, 0xfffffffffffffffe) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r8 = openat$cgroup_devices(r7, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x148640, 0x78e22799f4a46f8e) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) write$cgroup_devices(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB='b *:46'], 0xa) 3.995171639s ago: executing program 8 (id=5263): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x24, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5e20}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe1b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x1d, &(0x7f00000001c0), 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x18) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r8], 0x30}}, 0x0) close(r4) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x2000) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) 3.30829862s ago: executing program 3 (id=5272): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f0000000280)={[], [{@fowner_gt}, {@measure}, {@appraise_type}]}, 0xfc, 0x544, &(0x7f00000022c0)="$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") socket$unix(0x1, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000004, 0x2, @perf_config_ext={0x1, 0x6}, 0x2, 0x0, 0x2, 0x1, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) modify_ldt$write(0x1, &(0x7f00000003c0)={0x23, 0xffffffffffffffff}, 0x10) writev(0xffffffffffffffff, &(0x7f00000025c0), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) getsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000001c0), 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000001c00)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x40000000}, {&(0x7f0000001a00)=""/116, 0x74}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0x4f}], 0x1}}], 0x48}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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", @ANYRES64=r5, @ANYRESHEX, @ANYRESOCT], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x2, 0xe}, 0x10}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x3, 0x2ffffffff}, 0xc) syz_mount_image$iso9660(&(0x7f0000000a80), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES32], 0xfe, 0x5db, &(0x7f0000000380)="$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") r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r7, &(0x7f0000000040)=""/131, 0x83) splice(r5, 0x0, r2, 0x0, 0x408c8, 0xe) 3.220115261s ago: executing program 4 (id=5274): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={@empty, 0x5e, r2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300002095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='percpu_alloc_percpu\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@orlov}, {@stripe}, {@inlinecrypt}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) 3.112212433s ago: executing program 4 (id=5275): bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 3.044979734s ago: executing program 4 (id=5276): creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f00000000c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000006c0)=""/83, 0x53, 0x0, 0x3, 0x10000000}}, 0x120) capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f}) writev(r4, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f00000006c0), 0x1000000}], 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1}}, 0x40) 2.241729986s ago: executing program 4 (id=5281): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}}, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000100)=0xc) setresuid(0xffffffffffffffff, 0x0, r2) 2.196722357s ago: executing program 4 (id=5284): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="850000008a0000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000023000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x61980}, 0x94) socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) syz_emit_ethernet(0x42, &(0x7f00000001c0)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x6071, 0x0, 0xea, {[@timestamp={0x8, 0xa, 0xb7, 0x7}]}}}}}}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000540), 0xfffffd5c) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xf, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2.181685187s ago: executing program 3 (id=5285): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x61980}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) perf_event_open(&(0x7f00000004c0)={0x8, 0x80, 0x0, 0xf, 0x0, 0x0, 0x82, 0x200000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000080), 0x9}, 0x18204, 0x0, 0x3, 0x0, 0x0, 0x5338c7af, 0x0, 0x0, 0x1, 0x0, 0x2}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 2.139731348s ago: executing program 5 (id=5286): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRESOCT=r0], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x0, 0x2022, 0x0) unshare(0x2040400) (async) unshare(0x2040400) r7 = fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)) (async) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000040)) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000007000000020000000400000005"], 0x87) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r8}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) 2.024257299s ago: executing program 3 (id=5288): bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$kcm(0x10, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) fcntl$dupfd(r5, 0x0, r5) 1.881198061s ago: executing program 9 (id=5290): set_mempolicy(0x3, 0x0, 0x8) unshare(0x42000000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x4b2000, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x12) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000008500000061000000850000007d00000095"], &(0x7f0000000200)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x27, 0xe80, 0x0, &(0x7f0000000140)="f80204000000000000007f530800d31e0edf4dd3", 0x0, 0x409, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x802) recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}], 0x2}}], 0x3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0xb) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x1, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x5}, 0x4}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @dev}}, 0x80, &(0x7f00000013c0)=[{0x0}, {&(0x7f00000001c0)="ac7e2d1574", 0x5}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 1.577496346s ago: executing program 9 (id=5291): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x7c40280f}, @NFTA_HOOK_HOOKNUM={0x8}]}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1.533628127s ago: executing program 9 (id=5292): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000001000000400000004000000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000008834ff8f6fcfaa6821"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000b80)={r0, &(0x7f00000014c0)='o', &(0x7f0000000b40)=""/31}, 0x20) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000009000000000000000020000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) 1.463911278s ago: executing program 9 (id=5293): r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.log\x00', 0x501800, 0x4) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0208000004000000080000000100000080000000", @ANYBLOB="01000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0xfffffffc}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff84, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2, 0x0, 0x5}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000680)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0x15, 0x9, 0x34}, 0x2c) r5 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x2004d95, &(0x7f00000000c0)={[{@barrier}]}, 0x1, 0x523, &(0x7f0000000a80)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000740)={0x0, @in={{0x2, 0x4e21, @loopback}}}, &(0x7f0000000880)=0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000980)={r8, 0x9}, &(0x7f00000009c0)=0x8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r9, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r9, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r9, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r9, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2060, 0x0) mknodat$loop(r5, &(0x7f0000000200)='./file2\x00', 0x82a, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r10 = perf_event_open(&(0x7f00000003c0)={0x5, 0x80, 0x6, 0x7, 0x3e, 0x5, 0x0, 0x0, 0x8040, 0xd, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf63c, 0x0, @perf_bp={&(0x7f0000000300), 0x4}, 0x4, 0x4, 0x9, 0x6, 0x10, 0x6, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) read(r10, &(0x7f0000000600)=""/124, 0x7c) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000200000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540959776"], 0x50}, 0x1, 0x0, 0x0, 0x8800}, 0x90) 1.463414058s ago: executing program 5 (id=5294): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x2}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000200)='kfree\x00', r3}, 0x18) socket$inet(0x2, 0x3, 0x4) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) 1.28525892s ago: executing program 4 (id=5295): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x16, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x202, 0x40020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) perf_event_open(0x0, 0x0, 0xffffffbfffffffff, 0xffffffffffffffff, 0x2) close(r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305829, 0x0) socketpair(0x11, 0x3, 0x300, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_clone(0x40002000, 0x0, 0x0, 0x0, 0x0, 0x0) 801.596798ms ago: executing program 3 (id=5296): r0 = io_uring_setup(0x560e, &(0x7f0000000a40)={0x0, 0xb589, 0x800, 0xfffffffe, 0x3bd}) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000240)='4', 0x1}], 0x1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x9, 0x0, r1, 0x2, '\x00', r2, r3, 0x2, 0x4, 0x5}, 0x50) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000850000007d00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r5}, 0x10) r6 = creat(&(0x7f0000000600)='./file0\x00', 0xe5) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) write$qrtrtun(r6, &(0x7f0000001880)="9d8d645e53b6183d874f9e93a18dd009a09560ff682bd07dc3d28385a8f3f9e18418950d4dfe49f13a19e24320444a7d6c121741ba3dc510dba4f980bbd9a315544fa0a1622d949faba79788908354e467989e84b928ecb96e0e4e781bfca4c928c956321dd51400000000000020011584a8bd051f13bad882bea021ffb5ce918a1f87f1d439ec93772d6ecaaf8891f7678f2037ccced78ea5c1aa805f1b9f5a2c3974c5124cac5e163d9b6f5b998c1c7263fa2331d1241523986dccbd4e1f32b2f521380a2ea4732132264de6d26cfbb2eb91e40177a780df98cbf94b96d900a2dfc5c877db675ebb1d7cbc398ca422ddbadc24ee6f3bf036f62cdb056502a63d070000930ea668649ad0003afe9a912179ce61631b3dab94642d2768f1f22299dea6c08073dd0c47b9eddb917fc0076b74406149024514d07417c6007e8cd4dc4e2295be71f412044b52b1ce32aac048cad9c413a8c19528dc1b432fe7f9fda7182a47243af427a76ede78aa5c6ef75ea1f48e2e9e9d203d4760a1ff6a0119b39a2458a050f9519d4bbd821684ef8303985e8f5b8d86346f428788fc374e7eaa0c2a2ef8478a13b4a56d0821201c37a0066fb9f5cc583005b9f71b67daa300311066bacbf43630a8388aff734a568a123a48ba1344a5500e5c6f8cef539617cd3970ffb873579a3b76bd529f1626d1f90543b2a0190df38bb1e8b6fc9bfc5c42693814665679e78ed8adce4d23b8725436101ae4113fee000cb92b32c6a74851a6c4af4625f28810ec16834a1589063af1bf0b29aa57e06dddc0fddf408fab63c536d5afd9ba5a71f9e534f99e5ea9c1eaaaad710ef30a37df0f87978894333850f4feac3740a3b010da7c250d060c8046cab40d0527234d4b4b28366bc7d5899948ddbfac66c848ef0f842eab95248e9d064c0ec4247483f0aa0cad7ca970365e474fe73cf79cf8c70fc7a015caa273ce41723453632cf5b809584d227f7e98e8ec41494518b0b8a8adbaf5ead6529451b116fab06529b653bffdd6d98f8322265305bdc0ff69f4a70dea414fcc63d149c564c834f24b8f7495cd9ccafa1e3f652cd3270935800ee0d5598afcaa41c150dac263408d77a61b5c77e2c3644dda1b8c333a36c30ce893140ce133827dde34d896d35cfe7d498bf6dda965a27cc77e2872fcedaf9dcb89614c758cf62ad769ac05a4fb9e27b421b82c17d15f7d2ffb6ed63c639cee97d9eea8f3934045e60b15eca5c13ebe002467c09815712165cee2af784f9e5db9f7227701ca9a3de588503c84c490f4986aa26e7b63d4c5a30157cdf82e433a1b64496392a1990b2a46b910d9a16429736308f71d8e78824a26f25f21829546b973c0905b20c2ef751eb0064eaf831874f0b58ef8779cafd02bcf075a212e79e07c73c49fc240d6845877fda649d1ab59ea06b907ec5031299a0e1fa2f8cbc241a8531ad241302b569d4581dcc944f27799f25593b97ea7681ba74d6cde9c8f58840ac4c4be3aa90e6273a64e549c47c7232f423406604c9c210eabe3d6a2343bd6c2ae72ab013ce2af32467bcfa8cbf0769f91", 0x45c) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r7, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000005c0)={r8, 0x0, 0x0}, 0x10) bind$rxrpc(r4, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r4, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe000001000000000800", @ANYRES64=r10], 0x24}}, 0x4000000) close_range(r0, r4, 0x0) 702.841659ms ago: executing program 9 (id=5297): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f00000003c0)={[0x1fffffffff]}, 0x8, 0x0) unshare(0x20000400) signalfd4(r0, &(0x7f0000000140), 0x8, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x18, 0x29, 0x0, @local, @local, {[@hopopts={0x88, 0x1, '\x00', [@generic={0x13, 0x7, "7152d593bad94b"}]}]}}}}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) inotify_init() syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x787, &(0x7f0000001000)="$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") socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @multicast1}, &(0x7f0000000280)=0xc) socket$inet_sctp(0x2, 0x1, 0x84) syz_mount_image$vfat(&(0x7f00000008c0), &(0x7f0000000880)='./file1\x00', 0xc80, &(0x7f0000020100)=ANY=[], 0x1, 0x286, &(0x7f00000010c0)="$eJzs281OE18Yx/Efhf+fN6FVFAVjfKIb3UygXkFDIDE20SA1viQmg0y16dCSToOpMcLOrXdhQly6MzHeABuvwIU7Ni5ZGMcwU6FAjWACI/D9bOYhZ370nD6nzVl01u6/mS8XA6fo1pXqMHVJPVqXMkqpU7GO5jUV1f+r1bKuD+W/XLr74OGtXD4/OW02lZu5kTWzwcsfn798d+VTvf/e+8EP3VrNPF77lv26Orw6svZj5lkpsFJglWrdXJutVuvurO/ZXCkoO2Z3fM8NPCtVAq+2bbzoVxcWGuZW5gb6FmpeEJhbaVjZa1i9avVaw9ynbqlijuPYQJ/wJ4WV6Wk3l/QscLBqtZw7IWl010hhJZEJAQCARLU5/y9z/j8p9nD+Tx3aZHBANs7/j9q2kvM/AAAAAAAAAAAAAAAAAAAAAABHwXoYpsMwTP+6/idFT/iEzb97JfVJ6pd0StKApEFJaUkZSaclnZE0JOmspHOShiWdl3RB0kjL/0p6rdjt8Prf3fKqvQmuGK34/J9s9P9ka3lwt0eaf71YWCzE13g8V1RJvjyNKa3vUS+b4nrqZn5yzCIZXZxfauaXFgud2/PjSm9smHb58Thv2/Pd0b7bzGeV3thg7fLZtvkeXbvakneU1ucnqsrXXLQnt/Kvxs0mbud35Eej+447xza17Z/j/G48zu9jf+x4f7s02pXs2iEFjRdl1/e9GgXFcSje6p+YxtEvkv5mwmHYanrSMwEAAAAAAAAAAAAAAAAA7Mff/kIwXIrze7k56TUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDTzwAAAP//zORcow==") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) 515.362342ms ago: executing program 5 (id=5298): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300001d000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1, 0x0, 0x0, 0x8040}], 0x1, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {0x0}], 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000b0000000000000000000000000000000000000003f0b571be4b285837898cc65dba", @ANYRES32=0x0], 0x30}], 0x1, 0x0) 503.032092ms ago: executing program 3 (id=5299): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000030000000"], 0x0, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x1800, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000dc0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000085000000070000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000540)='sys_enter\x00', r2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) readlink(0x0, 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)={[0x0, 0x0, 0x0, &(0x7f00000001c0)='\\@^]$$++/\x00']}, &(0x7f0000000300)) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000070"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)="94da5eccb51e1a", 0x7}], 0x1}, 0x20000001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xa0}}, 0x40880) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) 430.402073ms ago: executing program 9 (id=5300): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) unshare(0x42000000) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x4b2000, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x12) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000002000000000000000008500000061000000850000007d00000095"], &(0x7f0000000200)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r3, 0x27, 0xe80, 0x0, &(0x7f0000000140)="f80204000000000000007f530800d31e0edf4dd3", 0x0, 0x409, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x200, 0x802) recvmmsg(0xffffffffffffffff, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/4096, 0x1000}}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000005100)=[{0x0}, {&(0x7f0000004f40)=""/101, 0x65}], 0x2}}], 0x3, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000800000095000000000000009500a5050000000077d8f3b423cdac8d8000000000000020e16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f68a7d06d10bfe150a7487535f7866907dc6751dfb261a0e3ccae669e173a649c1cfd6587d452d46b7c57d77578f4c35235138d5521f9453559c3421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983c044c03bf3ff03fe3e26e7a23129d6606fd28a7f9105f82317874b33d96b39fa4e045469989d552af6200000003a00000000000000abecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f1623ed38ae89d24e14b40234756ddcebfba2f87925bfacba83109753f543ad027edd68149ee99eebc6f7d6dd4aed4afe1f44ccb19e810879b70a70900000000000000000000d7900a820b6327944e9a217b9800e02a92895614cd50cbf83a1ed25268816b004519c9c5cff097d8000000000009d27d753a30a147b24a48435bd8a568669596e9e08679b3ce48e90defb6670c3d6209000000c773713a66b223fa8b148871c8d31d24000025449f106b99893ed20fa7a050fbbef90327e827e513e9606800000000e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e69ee52b59d13182e1f24ed208ada12f7a1525320e71666f472a972d5eb1affb87ba55b2d72078e9f40b4ae7dc3b2aeb0d11cd22c35d32940f19dff00ffffffff080000ff003853e59de7621e348955735264f34b1046a1813668297a7edad187ef106ae7fcbb25090f17d0baadeb8ae190a1fb5a315f8347fb0379659500000000000000000000000000000000000000002fdf0193ec79c90ed210ebc2fbed6d4216770c1b0dec886b388d138c2b69c6aacb714e7264093061c660a5100b7cc165889eb94c8d7c77b6fa06f1a4d8e4a6b6cb37e319c5c22f276b03cae853f42b07ca0b03b1eb32a6b1a81cd511fd0b59d57a11c6a3ebf9731464ad21f07f618efc31023ac60007426162b57e803519954d7c952197b0a508c0e16fda392fa84be38e937d36af1c35138e05a9e8d6dc0272de72c41500000000304402e22af23437126f330f8eb4075daaeae3134ece35cd86d95bd9836bd186c4b6565e967a4e3e86f299b7400994ba136b4eccf3b0f001a266c0d160b3ce1182001d64b52a5ce7f506295d59eea6903b84ffbabf5a5b91c1d6ecce8728a224aec66c610e3becd60a35e848c224f8251947eed20e2b612cb099bfe8924d33ba7f0691fed04a43e9c64b7a1e3165e86cdb9871c678a6bbb14821f441c6c14d1bd78d8ffdfea12c19ea04264335d60b6b7a7da6fb83f33101db32f6ab137d943dd3c1e8db9f3e1263573dc721ae82fe0bc63598751a5092c9f7dbfc39d564834e3703492c2a651643d8ce5c36d97a4812cf73fc8ea0d6"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0xb) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x1, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x5}, 0x4}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x36, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @dev}}, 0x80, &(0x7f00000013c0)=[{0x0}, {&(0x7f00000001c0)="ac7e2d1574", 0x5}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75dd6900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 426.168543ms ago: executing program 5 (id=5301): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000000000000000000000000008500000008000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f0000000040)={@empty, 0x5e, r2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300002095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@orlov}, {@stripe}, {@inlinecrypt}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000d40)={0x0, 0x2904c, 0x3fffffffffffe52, 0x10003, '\x00', [{}, {0xffffffff}]}) 246.008136ms ago: executing program 8 (id=5302): perf_event_open(&(0x7f00000004c0)={0x2, 0x80, 0xfe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x81, 0x80000003}, 0x40db, 0x4, 0x4, 0x5, 0xa, 0xff, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r1) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) fcntl$F_GET_RW_HINT(r3, 0x40b, 0xfffffffffffffffe) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x20, &(0x7f0000000540)={&(0x7f00000003c0)=""/68, 0x44, 0x0, &(0x7f00000004c0)=""/101, 0x65}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x10, 0x10, &(0x7f0000000040)=ANY=[@ANYRESDEC=r2, @ANYRES8=r2, @ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x4, &(0x7f00000002c0)={[{@bsdgroups}, {@i_version}]}, 0x6, 0x5fd, &(0x7f0000000c00)="$eJzs3c9rHFUcAPDvzCYxaaNpRcQWxYCHFqRpUotVL7b1YA8FC/Yg4qGhSWro9gdNCrYWTMGDgoKIV5Fe/Ae8S+/eRFBvnoUqUlFQ6crszrabZDfdttmdNPP5wGTnvZnd9747eZn3dvJ2Aiit8exHGrEj4taJJGKsZdtoNDaO5/vd/OPKyWxJolZ78/ckkjyvuX+SP27NE8MR8f3hiMcrq8tduHT59HS11vBBxN7FM+f3Lly6vGf+zPSp2VOzZ6f2vbT/wOTLU/un1iXOrfnjkaNvPP3ph+++OPdDdU8SB+P44PszsSKO9TIe43ErD7E1fyAiDmQrbd6Xh80mCKHUKvnv42BEPBljUamnGsZi/pNCKwf0VK0SUQNKKtH+oaSa/YDm2L67cfDxHvdK+ufGocYAaHX8A43PRmK4PjbacjNpGRk1PtvYtg7lZ2X8d2Xnl9kSyz6H+Pv20RlYh3I6WboaEU+1iz+p121bPdIs/nTZWD+JiMmIGMrr99oD1CFpWe/F5zBruZf4W49DGhEH88cs//B9lj++It3v+AEop+uH8hP5Upa6c/7L+h7N/k+06f+Mtjl33Y+iz3+d+3/N8/1wvd+TruiHZX2WY+1fcnBlxi8fH/m8U/mt/b9sycpv9gX74cbViJ0r4v8oCzbv/2TxJ22Of7bLiYPdlfH6j78d6bSt6Phr1yJ2tR3/3OmVZmtrXJ/cOzdfnZ1s/GxbxrffvfN1p/KLjj87/ls6xN9y/NOVz8vek/NdlvHNsWtnOm0bvWv86a9DSWO8OZTnvDe9uHhhKmIoOZrv0pK/b+26NPdpvkYW/+7n2rf/Zb//V5e/zkjzT2YXzr91+manbfdz/FsuJt+qdVmHTrL4Z+5+/Fe1/yzvsy7L+Ovti8902rZW/CMPEhgAAAAAAACUUFq/BpukE7fX03RiojFf9onYklbPLSw+P3fu4tmZiN31/4ccTJtXusca6SRLT+X/D9tM71uRfiEitkfEF5WRenri5LnqTNHBAwAAAAAAAAAAAAAAAAAAwAaxNZ//37xP9Z+Vxvx/oCR6eYM5YGPT/qG86u1/1S2egDJw/ofy0v6hvLR/KC/tH8pL+4fy0v6hvLR/KC/tHwAAAAA2pe3PXv85iYilV0bqS2Yo32ZGEGxug0VXAChMpegKAIW5felfZx9Kp6v+/z/5lwP2vjpAAZJ2mfXOQW3txn+97TMBAAAAAAAAAAAAgB7YtaPz/H9zg2FzM+0PyusB5v/76gB4yPnqfygvY3zgbrP4hzttMP8fAAAAAAAAAAAAAPpmtL4k6UQ+F3g00nRiIuLRiNgWg8ncfHV2MiIei4ifKoOPZOmpoisNAAAAAAAAAAAAAAAAAAAAm8zCpcunp6vV2QutK/+uytncK827oPahrFfjHp8VSf/flpGIKPyg9GxloCUniVjKjvyGqNiFhdgY1aivFPyHCQAAAAAAAAAAAAAAAAAASqhl7nF7O7/qc40AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoP/u3P+/dytFxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPJz+DwAA///LLUAr") bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(r6, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(r7, 0xffffffffffffffff, 0x200000000000000) 189.677207ms ago: executing program 5 (id=5303): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, 0x0, 0x0, 0x45833af96e4b28bd, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d80)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x10000000000000}, 0x18) statx(0xffffffffffffff9c, 0x0, 0x6000, 0x7ff, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200)="f6cd6300945fc721edb1538a068a6df644ffc8964626094f81d52bf7b4f2f596bdf6a0d3ca1996b1f31ddcc63dbb25844b7dfa6d18810a72f91347920815c5b16c796c46eabbab336ce90015d13f69ca18be993e620a48e0782d0b644f97f277f0c590e9710358094fec73a7111d95eba3d721cf21027d7dd599addb07a343cd4d4d37537ace6eee875fd7c264f0ee80d2a8f78dc82acef7029bc849eff7", 0x9e) io_submit(0x0, 0x2, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x4e}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x4, 0x6, 0xffffffffffffffff, &(0x7f00000001c0)='m', 0x1, 0x1}]) 0s ago: executing program 5 (id=5304): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = getpid() socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYRES16=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)=r0}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x1, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) r5 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0x2) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mq_timedsend(r6, &(0x7f0000000680)="a17d312abdfc5eb94cff5ef8d8be3b180385044bbd6014d7283fb895b84fa32ae288b613ee497cf729b875dc53cb9b98f3902bc927c210761b59e838d09cd02970c4f07bfddf6aa004dbc4732aea8203a6ee96121213cdb0956ed43ace0f8dbf4ced16a99742ff100441a03038b8209bcf67ee7fa9c6cbccaabda9148a1bb9f99a4145cfbc700c691bf56807f09741e8aaefd198c6cee7b94126223e578818fa3e58c5d9ca39fd3419adb9d0cb3c976e1bba8cad849faad4ee4cdb286390682f68cda1ab9a6aa1220bb4325f64791a5fe94286448bf4048213288f932cdc82e6b7e985dff9454e788fb0f000", 0xec, 0x3, &(0x7f0000000300)={0x0, 0x3938700}) ioctl$sock_inet6_udp_SIOCINQ(r6, 0x7041, 0x0) write$UHID_DESTROY(r6, &(0x7f0000000000), 0x4) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r7, 0x29, 0xc8, &(0x7f0000000340), 0x4) kernel console output (not intermixed with test programs): 380.585725][T12003] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 380.661392][T17565] siw: device registration error -23 [ 380.961800][T17568] loop5: detected capacity change from 0 to 1024 [ 381.013975][T17568] EXT4-fs: Ignoring removed mblk_io_submit option [ 381.038774][T17568] EXT4-fs: Ignoring removed nomblk_io_submit option [ 381.056955][T17574] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4635'. [ 381.090401][T17568] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.157439][T17566] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.201567][T12003] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.251464][T17566] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.355372][T17566] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.364002][T17566] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.372666][T17566] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.381765][T17566] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.417517][ T9] lo speed is unknown, defaulting to 1000 [ 381.423448][ T9] syz0: Port: 1 Link DOWN [ 381.487981][ T29] audit: type=1326 audit(1752786784.769:42643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17606 comm="syz.6.4647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87fb31e929 code=0x7ffc0000 [ 381.511787][ T29] audit: type=1326 audit(1752786784.769:42644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17606 comm="syz.6.4647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87fb31e929 code=0x7ffc0000 [ 381.538470][ T29] audit: type=1326 audit(1752786784.799:42645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17606 comm="syz.6.4647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7f87fb31e929 code=0x7ffc0000 [ 381.562182][ T29] audit: type=1326 audit(1752786784.799:42646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17606 comm="syz.6.4647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87fb31e929 code=0x7ffc0000 [ 381.586913][ T29] audit: type=1326 audit(1752786784.799:42647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17606 comm="syz.6.4647" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87fb31e929 code=0x7ffc0000 [ 381.751209][T17624] loop5: detected capacity change from 0 to 1024 [ 381.764719][T17624] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.845432][T17628] siw: device registration error -23 [ 382.557945][T12003] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.864558][ T29] kauditd_printk_skb: 78 callbacks suppressed [ 382.864575][ T29] audit: type=1326 audit(1752786786.149:42726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17673 comm="syz.4.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a779e929 code=0x7ffc0000 [ 382.894964][ T29] audit: type=1326 audit(1752786786.149:42727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17673 comm="syz.4.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7f89a779e929 code=0x7ffc0000 [ 382.907948][T17674] 9pnet_fd: Insufficient options for proto=fd [ 382.918645][ T29] audit: type=1326 audit(1752786786.149:42728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17673 comm="syz.4.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a779e929 code=0x7ffc0000 [ 382.948318][ T29] audit: type=1326 audit(1752786786.149:42729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17673 comm="syz.4.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a779e929 code=0x7ffc0000 [ 382.972026][ T29] audit: type=1326 audit(1752786786.149:42730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17673 comm="syz.4.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89a779e929 code=0x7ffc0000 [ 382.995739][ T29] audit: type=1326 audit(1752786786.149:42731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17673 comm="syz.4.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a779e929 code=0x7ffc0000 [ 383.019417][ T29] audit: type=1326 audit(1752786786.149:42732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17673 comm="syz.4.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a779e929 code=0x7ffc0000 [ 383.043484][ T29] audit: type=1326 audit(1752786786.149:42733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17673 comm="syz.4.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89a779e929 code=0x7ffc0000 [ 383.067169][ T29] audit: type=1326 audit(1752786786.149:42734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17673 comm="syz.4.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a779e929 code=0x7ffc0000 [ 383.090764][ T29] audit: type=1326 audit(1752786786.149:42735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17673 comm="syz.4.4672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f89a779e929 code=0x7ffc0000 [ 383.465857][T17693] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 383.515649][T17697] loop6: detected capacity change from 0 to 512 [ 383.522846][T17697] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 383.535505][T17697] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 383.548817][T17697] ext4 filesystem being mounted at /253/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.562431][T17697] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #19: comm syz.6.4680: corrupted inode contents [ 383.575382][T17697] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #19: comm syz.6.4680: mark_inode_dirty error [ 383.586997][T17697] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #19: comm syz.6.4680: corrupted inode contents [ 383.599841][T17702] FAULT_INJECTION: forcing a failure. [ 383.599841][T17702] name failslab, interval 1, probability 0, space 0, times 0 [ 383.600297][T17697] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2991: inode #19: comm syz.6.4680: mark_inode_dirty error [ 383.612635][T17702] CPU: 0 UID: 0 PID: 17702 Comm: syz.5.4681 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 383.612674][T17702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 383.612692][T17702] Call Trace: [ 383.612701][T17702] [ 383.612712][T17702] __dump_stack+0x1d/0x30 [ 383.612803][T17702] dump_stack_lvl+0xe8/0x140 [ 383.612821][T17702] dump_stack+0x15/0x1b [ 383.612942][T17702] should_fail_ex+0x265/0x280 [ 383.612986][T17702] should_failslab+0x8c/0xb0 [ 383.613018][T17702] __kmalloc_cache_node_noprof+0x54/0x320 [ 383.613056][T17702] ? __get_vm_area_node+0x106/0x1d0 [ 383.613175][T17702] __get_vm_area_node+0x106/0x1d0 [ 383.613215][T17702] __vmalloc_node_range_noprof+0x273/0xe00 [ 383.613257][T17702] ? copy_process+0x399/0x1f90 [ 383.613307][T17702] ? __rcu_read_unlock+0x4f/0x70 [ 383.613366][T17702] __vmalloc_node_noprof+0x89/0xc0 [ 383.613394][T17702] ? copy_process+0x399/0x1f90 [ 383.613416][T17702] ? copy_process+0x399/0x1f90 [ 383.613501][T17702] dup_task_struct+0x449/0x6a0 [ 383.613533][T17702] ? _parse_integer+0x27/0x40 [ 383.613572][T17702] copy_process+0x399/0x1f90 [ 383.613644][T17702] ? kstrtouint+0x76/0xc0 [ 383.613732][T17702] ? kstrtouint_from_user+0x9f/0xf0 [ 383.613772][T17702] ? __rcu_read_unlock+0x4f/0x70 [ 383.613919][T17702] kernel_clone+0x16c/0x5b0 [ 383.613954][T17702] ? vfs_write+0x75e/0x8e0 [ 383.613999][T17702] __x64_sys_clone+0xe6/0x120 [ 383.614094][T17702] x64_sys_call+0x2c59/0x2fb0 [ 383.614126][T17702] do_syscall_64+0xd2/0x200 [ 383.614153][T17702] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 383.614189][T17702] ? clear_bhb_loop+0x40/0x90 [ 383.614243][T17702] ? clear_bhb_loop+0x40/0x90 [ 383.614273][T17702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.614365][T17702] RIP: 0033:0x7f8967f3e929 [ 383.614387][T17702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.614411][T17702] RSP: 002b:00007f8966585fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 383.614505][T17702] RAX: ffffffffffffffda RBX: 00007f8968166080 RCX: 00007f8967f3e929 [ 383.614523][T17702] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 383.614539][T17702] RBP: 00007f8966586090 R08: 0000000000000000 R09: 0000000000000000 [ 383.614614][T17702] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 383.614631][T17702] R13: 0000000000000000 R14: 00007f8968166080 R15: 00007fffe67b3118 [ 383.614657][T17702] [ 383.614712][T17702] syz.5.4681: vmalloc error: size 16384, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 383.657396][T17697] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2994: inode #19: comm syz.6.4680: mark inode dirty (error -117) [ 383.657907][T17702] ,cpuset=/,mems_allowed=0 [ 383.690962][T17697] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 383.692281][T17702] CPU: 0 UID: 0 PID: 17702 Comm: syz.5.4681 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 383.692316][T17702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 383.692328][T17702] Call Trace: [ 383.692335][T17702] [ 383.692342][T17702] __dump_stack+0x1d/0x30 [ 383.692398][T17702] dump_stack_lvl+0xe8/0x140 [ 383.692480][T17702] dump_stack+0x15/0x1b [ 383.692504][T17702] warn_alloc+0x12b/0x1a0 [ 383.692548][T17702] __vmalloc_node_range_noprof+0x297/0xe00 [ 383.692598][T17702] ? __rcu_read_unlock+0x4f/0x70 [ 383.692663][T17702] __vmalloc_node_noprof+0x89/0xc0 [ 383.692704][T17702] ? copy_process+0x399/0x1f90 [ 383.692740][T17702] ? copy_process+0x399/0x1f90 [ 383.692787][T17702] dup_task_struct+0x449/0x6a0 [ 383.692821][T17702] ? _parse_integer+0x27/0x40 [ 383.692859][T17702] copy_process+0x399/0x1f90 [ 383.692892][T17702] ? kstrtouint+0x76/0xc0 [ 383.692949][T17702] ? kstrtouint_from_user+0x9f/0xf0 [ 383.693037][T17702] ? __rcu_read_unlock+0x4f/0x70 [ 383.693071][T17702] kernel_clone+0x16c/0x5b0 [ 383.693171][T17702] ? vfs_write+0x75e/0x8e0 [ 383.693216][T17702] __x64_sys_clone+0xe6/0x120 [ 383.693265][T17702] x64_sys_call+0x2c59/0x2fb0 [ 383.693294][T17702] do_syscall_64+0xd2/0x200 [ 383.693359][T17702] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 383.693472][T17702] ? clear_bhb_loop+0x40/0x90 [ 383.693505][T17702] ? clear_bhb_loop+0x40/0x90 [ 383.693561][T17702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.693590][T17702] RIP: 0033:0x7f8967f3e929 [ 383.693611][T17702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 383.693637][T17702] RSP: 002b:00007f8966585fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 383.693664][T17702] RAX: ffffffffffffffda RBX: 00007f8968166080 RCX: 00007f8967f3e929 [ 383.693682][T17702] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 383.693730][T17702] RBP: 00007f8966586090 R08: 0000000000000000 R09: 0000000000000000 [ 383.693748][T17702] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 383.693765][T17702] R13: 0000000000000000 R14: 00007f8968166080 R15: 00007fffe67b3118 [ 383.693796][T17702] [ 383.693856][T17702] Mem-Info: [ 383.971763][T17709] loop9: detected capacity change from 0 to 512 [ 383.972642][T17702] active_anon:10791 inactive_anon:21 isolated_anon:0 [ 383.972642][T17702] active_file:26313 inactive_file:2677 isolated_file:0 [ 383.972642][T17702] unevictable:0 dirty:258 writeback:0 [ 383.972642][T17702] slab_reclaimable:3477 slab_unreclaimable:14797 [ 383.972642][T17702] mapped:34359 shmem:7728 pagetables:999 [ 383.972642][T17702] sec_pagetables:0 bounce:0 [ 383.972642][T17702] kernel_misc_reclaimable:0 [ 383.972642][T17702] free:1876775 free_pcp:7519 free_cma:0 [ 383.981676][T17709] EXT4-fs: Ignoring removed orlov option [ 383.982225][T17702] Node 0 active_anon:43164kB inactive_anon:84kB active_file:105252kB inactive_file:10708kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:137436kB dirty:1032kB writeback:0kB shmem:30912kB writeback_tmp:0kB kernel_stack:3712kB pagetables:3996kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 383.987167][T17709] EXT4-fs: inline encryption not supported [ 383.991706][T17702] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 383.991814][T17702] lowmem_reserve[]: 0 2882 7860 7860 [ 383.998363][T17709] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 384.000773][T17702] [ 384.000781][T17702] Node 0 DMA32 free:2947728kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2951356kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:100kB free_cma:0kB [ 384.008556][T17709] EXT4-fs (loop9): 1 truncate cleaned up [ 384.011002][T17702] lowmem_reserve[]: 0 0 4978 4978 [ 384.011036][T17702] Node 0 Normal free:4544012kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:43164kB inactive_anon:84kB active_file:105252kB inactive_file:10708kB unevictable:0kB writepending:1032kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:26420kB local_pcp:22060kB free_cma:0kB [ 384.017713][T17709] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.020029][T17702] lowmem_reserve[]: 0 0 0 0 [ 384.357505][T17702] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 384.374864][T17702] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 4*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2947728kB [ 384.390948][T17702] Node 0 Normal: 891*4kB (UME) 2954*8kB (UME) 2079*16kB (UME) 1469*32kB (UME) 947*64kB (UME) 343*128kB (UME) 140*256kB (UME) 73*512kB (UME) 27*1024kB (UME) 48*2048kB (UM) 1009*4096kB (UM) = 4544012kB [ 384.410793][T17702] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 384.420103][T17702] 36728 total pagecache pages [ 384.424813][T17702] 21 pages in swap cache [ 384.429049][T17702] Free swap = 124912kB [ 384.433302][T17702] Total swap = 124996kB [ 384.437559][T17702] 2097051 pages RAM [ 384.441382][T17702] 0 pages HighMem/MovableOnly [ 384.446140][T17702] 80812 pages reserved [ 384.554935][T16359] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 384.740617][T17549] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.755431][T17706] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 384.790973][T17549] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.914402][T17549] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.934788][T17736] lo speed is unknown, defaulting to 1000 [ 384.979004][T17549] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.001489][T17736] chnl_net:caif_netlink_parms(): no params data found [ 385.037674][T17736] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.044899][T17736] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.052138][T17736] bridge_slave_0: entered allmulticast mode [ 385.059224][T17736] bridge_slave_0: entered promiscuous mode [ 385.066476][T17736] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.073743][T17736] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.081134][T17736] bridge_slave_1: entered allmulticast mode [ 385.087711][T17736] bridge_slave_1: entered promiscuous mode [ 385.111054][T17736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.125540][T17736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.143154][T17549] bridge_slave_1: left allmulticast mode [ 385.148865][T17549] bridge_slave_1: left promiscuous mode [ 385.155132][T17549] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.163200][T17549] bridge_slave_0: left allmulticast mode [ 385.168929][T17549] bridge_slave_0: left promiscuous mode [ 385.174704][T17549] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.264627][T17752] loop5: detected capacity change from 0 to 512 [ 385.286250][T17549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.296541][T17549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.306287][T17549] bond0 (unregistering): Released all slaves [ 385.320666][T17736] team0: Port device team_slave_0 added [ 385.321722][T17752] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4697'. [ 385.329370][T17736] team0: Port device team_slave_1 added [ 385.370487][T17757] loop5: detected capacity change from 0 to 1764 [ 385.378630][T17736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.386375][T17736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.412624][T17736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.426731][T17736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.433894][T17736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 385.460668][T17736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 385.480029][T17757] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 385.489867][T17549] hsr_slave_0: left promiscuous mode [ 385.504521][T17549] hsr_slave_1: left promiscuous mode [ 385.511732][T17549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.519303][T17549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 385.542483][T17549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.550158][T17549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.567029][T17761] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4698'. [ 385.576808][T17761] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4698'. [ 385.599112][T17549] veth1_macvtap: left promiscuous mode [ 385.606102][T17549] veth0_macvtap: left promiscuous mode [ 385.611787][T17549] veth1_vlan: left promiscuous mode [ 385.617345][T17549] veth0_vlan: left promiscuous mode [ 385.966424][T17736] hsr_slave_0: entered promiscuous mode [ 386.058698][T17736] hsr_slave_1: entered promiscuous mode [ 386.082462][T17736] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 386.117484][T17736] Cannot create hsr debugfs directory [ 386.272380][T17789] loop5: detected capacity change from 0 to 2048 [ 386.285738][T17789] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.300121][T17549] IPVS: stop unused estimator thread 0... [ 386.317020][T12003] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.353665][T17799] loop5: detected capacity change from 0 to 512 [ 386.360601][T17799] journal_path: Lookup failure for './file0/../file0' [ 386.367919][T17799] EXT4-fs: error: could not find journal device path [ 386.403519][T17801] loop5: detected capacity change from 0 to 128 [ 386.411931][T17801] vfat: Unknown parameter 'À' [ 386.488780][T17807] loop9: detected capacity change from 0 to 2048 [ 386.498946][T17807] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.530593][T17736] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 386.539980][T17736] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 386.549470][T17736] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 386.559265][T17736] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 386.563353][T17811] loop5: detected capacity change from 0 to 512 [ 386.572689][T17811] EXT4-fs: Ignoring removed orlov option [ 386.579406][T17811] EXT4-fs: inline encryption not supported [ 386.585806][T17811] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 386.598971][T17811] EXT4-fs (loop5): 1 truncate cleaned up [ 386.605208][T17811] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 386.649813][T17736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.663998][T17736] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.674705][T17556] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.681892][T17556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.695572][T17553] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.702674][T17553] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.722097][T17736] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 386.732512][T17736] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 386.800940][T17736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.836902][ T782] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 386.852423][ T782] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 386.865810][ T782] EXT4-fs (loop9): This should not happen!! Data will be lost [ 386.865810][ T782] [ 386.875617][ T782] EXT4-fs (loop9): Total free blocks count 0 [ 386.881634][ T782] EXT4-fs (loop9): Free/Dirty block details [ 386.887654][ T782] EXT4-fs (loop9): free_blocks=2415919104 [ 386.888573][T17736] veth0_vlan: entered promiscuous mode [ 386.893415][ T782] EXT4-fs (loop9): dirty_blocks=8208 [ 386.893435][ T782] EXT4-fs (loop9): Block reservation details [ 386.893449][ T782] EXT4-fs (loop9): i_reserved_data_blocks=513 [ 386.904149][T17736] veth1_vlan: entered promiscuous mode [ 386.919933][ T782] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 386.937890][T17736] veth0_macvtap: entered promiscuous mode [ 386.947179][T17736] veth1_macvtap: entered promiscuous mode [ 386.978992][T17736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.997053][T17736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.007958][T17736] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.016846][T17736] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.026416][T17736] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.035378][T17736] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.142635][T17847] loop9: detected capacity change from 0 to 512 [ 387.150420][T17847] journal_path: Lookup failure for './file0/../file0' [ 387.157375][T17847] EXT4-fs: error: could not find journal device path [ 387.193779][T17857] loop9: detected capacity change from 0 to 128 [ 387.267222][T17869] syz_tun: entered allmulticast mode [ 387.290023][T17869] syz_tun: left allmulticast mode [ 387.302830][T12003] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.327690][T17867] loop9: detected capacity change from 0 to 512 [ 387.338195][T17867] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 387.356936][T17877] FAULT_INJECTION: forcing a failure. [ 387.356936][T17877] name failslab, interval 1, probability 0, space 0, times 0 [ 387.369693][T17877] CPU: 1 UID: 0 PID: 17877 Comm: syz.3.4733 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 387.369731][T17877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 387.369810][T17877] Call Trace: [ 387.369817][T17877] [ 387.369827][T17877] __dump_stack+0x1d/0x30 [ 387.369905][T17877] dump_stack_lvl+0xe8/0x140 [ 387.369930][T17877] dump_stack+0x15/0x1b [ 387.369950][T17877] should_fail_ex+0x265/0x280 [ 387.369998][T17877] should_failslab+0x8c/0xb0 [ 387.370024][T17877] __kmalloc_noprof+0xa5/0x3e0 [ 387.370053][T17877] ? unregister_netdevice_many_notify+0x4cf/0x1690 [ 387.370088][T17877] ? unlist_netdevice+0x2cc/0x320 [ 387.370198][T17877] unregister_netdevice_many_notify+0x4cf/0x1690 [ 387.370247][T17877] ? __rcu_read_unlock+0x4f/0x70 [ 387.370275][T17877] unregister_netdevice_queue+0x1f5/0x220 [ 387.370385][T17877] unregister_netdev+0xb3/0xe0 [ 387.370499][T17877] slip_close+0xe4/0x100 [ 387.370522][T17877] ? __pfx_slip_close+0x10/0x10 [ 387.370580][T17877] tty_ldisc_close+0x71/0xa0 [ 387.370614][T17877] tty_set_ldisc+0x1b9/0x380 [ 387.370646][T17877] tiocsetd+0x51/0x60 [ 387.370677][T17877] tty_ioctl+0xa7f/0xb80 [ 387.370803][T17877] ? __pfx_tty_ioctl+0x10/0x10 [ 387.370838][T17877] __se_sys_ioctl+0xcb/0x140 [ 387.370871][T17877] __x64_sys_ioctl+0x43/0x50 [ 387.370950][T17877] x64_sys_call+0x19a8/0x2fb0 [ 387.370970][T17877] do_syscall_64+0xd2/0x200 [ 387.370987][T17877] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 387.371014][T17877] ? clear_bhb_loop+0x40/0x90 [ 387.371097][T17877] ? clear_bhb_loop+0x40/0x90 [ 387.371125][T17877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.371150][T17877] RIP: 0033:0x7fdfa50be929 [ 387.371168][T17877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.371202][T17877] RSP: 002b:00007fdfa371f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 387.371220][T17877] RAX: ffffffffffffffda RBX: 00007fdfa52e5fa0 RCX: 00007fdfa50be929 [ 387.371243][T17877] RDX: 0000200000000100 RSI: 0000000000005423 RDI: 0000000000000003 [ 387.371254][T17877] RBP: 00007fdfa371f090 R08: 0000000000000000 R09: 0000000000000000 [ 387.371265][T17877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.371279][T17877] R13: 0000000000000000 R14: 00007fdfa52e5fa0 R15: 00007ffe72a12878 [ 387.371377][T17877] [ 387.624257][T17889] loop8: detected capacity change from 0 to 512 [ 387.631542][T17889] journal_path: Lookup failure for './file0/../file0' [ 387.639218][T17889] EXT4-fs: error: could not find journal device path [ 387.829276][T17905] loop8: detected capacity change from 0 to 2048 [ 387.836715][T17905] ext4: Unknown parameter 'fsuuid' [ 387.877588][ T29] kauditd_printk_skb: 466 callbacks suppressed [ 387.877608][ T29] audit: type=1326 audit(1752786791.159:43202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17856 comm="syz.9.4727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f12eb2558e7 code=0x7ffc0000 [ 387.908105][ T29] audit: type=1326 audit(1752786791.159:43203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17856 comm="syz.9.4727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f12eb1fab19 code=0x7ffc0000 [ 387.932363][ T29] audit: type=1326 audit(1752786791.159:43204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17856 comm="syz.9.4727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12eb25e929 code=0x7ffc0000 [ 388.182308][T17911] FAULT_INJECTION: forcing a failure. [ 388.182308][T17911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.196217][T17911] CPU: 1 UID: 0 PID: 17911 Comm: syz.4.4746 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 388.196254][T17911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 388.196286][T17911] Call Trace: [ 388.196295][T17911] [ 388.196304][T17911] __dump_stack+0x1d/0x30 [ 388.196396][T17911] dump_stack_lvl+0xe8/0x140 [ 388.196481][T17911] dump_stack+0x15/0x1b [ 388.196497][T17911] should_fail_ex+0x265/0x280 [ 388.196526][T17911] should_fail+0xb/0x20 [ 388.196616][T17911] should_fail_usercopy+0x1a/0x20 [ 388.196702][T17911] _copy_from_user+0x1c/0xb0 [ 388.196724][T17911] __copy_msghdr+0x244/0x300 [ 388.196774][T17911] ___sys_sendmsg+0x109/0x1d0 [ 388.196817][T17911] __x64_sys_sendmsg+0xd4/0x160 [ 388.196922][T17911] x64_sys_call+0x2999/0x2fb0 [ 388.196948][T17911] do_syscall_64+0xd2/0x200 [ 388.197040][T17911] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 388.197072][T17911] ? clear_bhb_loop+0x40/0x90 [ 388.197099][T17911] ? clear_bhb_loop+0x40/0x90 [ 388.197187][T17911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.197208][T17911] RIP: 0033:0x7f89a779e929 [ 388.197223][T17911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.197242][T17911] RSP: 002b:00007f89a5dff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.197266][T17911] RAX: ffffffffffffffda RBX: 00007f89a79c5fa0 RCX: 00007f89a779e929 [ 388.197282][T17911] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 388.197319][T17911] RBP: 00007f89a5dff090 R08: 0000000000000000 R09: 0000000000000000 [ 388.197335][T17911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.197350][T17911] R13: 0000000000000000 R14: 00007f89a79c5fa0 R15: 00007ffd482dae38 [ 388.197381][T17911] [ 388.214804][ T29] audit: type=1326 audit(1752786791.239:43205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17894 comm="syz.3.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa50be929 code=0x7ffc0000 [ 388.407662][ T29] audit: type=1326 audit(1752786791.239:43206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17894 comm="syz.3.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa50be929 code=0x7ffc0000 [ 388.431268][ T29] audit: type=1326 audit(1752786791.239:43207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17894 comm="syz.3.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdfa50be929 code=0x7ffc0000 [ 388.454714][ T29] audit: type=1326 audit(1752786791.239:43208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17894 comm="syz.3.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa50be929 code=0x7ffc0000 [ 388.478482][ T29] audit: type=1326 audit(1752786791.239:43209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17894 comm="syz.3.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa50be929 code=0x7ffc0000 [ 388.502056][ T29] audit: type=1326 audit(1752786791.239:43210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17894 comm="syz.3.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fdfa50be929 code=0x7ffc0000 [ 388.525742][ T29] audit: type=1326 audit(1752786791.239:43211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17894 comm="syz.3.4743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa50be929 code=0x7ffc0000 [ 388.575885][T17913] SELinux: failed to load policy [ 388.646185][T17917] loop3: detected capacity change from 0 to 128 [ 388.728725][T17927] netlink: 'syz.4.4749': attribute type 1 has an invalid length. [ 388.737316][T17927] netlink: 15 bytes leftover after parsing attributes in process `syz.4.4749'. [ 388.750290][T17929] loop9: detected capacity change from 0 to 512 [ 388.757834][T17929] journal_path: Lookup failure for './file0/../file0' [ 388.765385][T17929] EXT4-fs: error: could not find journal device path [ 388.879150][T17938] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.924488][T17938] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.975245][T17938] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.035474][T17938] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.119786][T17938] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.133245][T17938] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.146408][T17938] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.158381][T17938] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.546270][T17949] loop3: detected capacity change from 0 to 1024 [ 389.606754][T17949] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.664006][T17949] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.4760: missing EA_INODE flag [ 389.718742][T17949] EXT4-fs (loop3): Remounting filesystem read-only [ 389.771159][T17736] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.820249][T17960] infiniband syz!: set down [ 389.824905][T17960] infiniband syz!: added team_slave_0 [ 389.838371][T17960] RDS/IB: syz!: added [ 389.845653][T17966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4764'. [ 389.855045][T17960] smc: adding ib device syz! with port count 1 [ 389.861858][T17960] smc: ib device syz! port 1 has pnetid [ 389.866887][T17970] loop3: detected capacity change from 0 to 128 [ 389.869256][T17966] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4764'. [ 389.876764][T17970] vfat: Unknown parameter 'À' [ 389.948699][T17974] lo speed is unknown, defaulting to 1000 [ 390.112602][T17978] lo speed is unknown, defaulting to 1000 [ 390.574684][T18007] siw: device registration error -23 [ 391.354925][T18019] lo speed is unknown, defaulting to 1000 [ 391.466947][T18026] wireguard0: entered promiscuous mode [ 391.472491][T18026] wireguard0: entered allmulticast mode [ 391.485624][T18027] wireguard0: entered promiscuous mode [ 391.491230][T18027] wireguard0: entered allmulticast mode [ 392.333048][T18045] loop8: detected capacity change from 0 to 512 [ 392.342234][T18045] EXT4-fs: Ignoring removed orlov option [ 392.353764][T18045] EXT4-fs: inline encryption not supported [ 392.360038][T18045] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 392.372576][T18045] EXT4-fs (loop8): 1 truncate cleaned up [ 392.379563][T18045] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.559004][T18054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4794'. [ 392.975566][T18058] loop5: detected capacity change from 0 to 512 [ 392.982404][T18058] journal_path: Lookup failure for './file0/../file0' [ 392.989319][T18058] EXT4-fs: error: could not find journal device path [ 393.016472][T18060] loop5: detected capacity change from 0 to 512 [ 393.023520][T18060] journal_path: Lookup failure for './file0/../file0' [ 393.030342][T18060] EXT4-fs: error: could not find journal device path [ 393.062786][T18062] lo speed is unknown, defaulting to 1000 [ 393.070462][T14884] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.324123][ T29] kauditd_printk_skb: 777 callbacks suppressed [ 393.324138][ T29] audit: type=1326 audit(1752786796.599:43989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18066 comm="syz.8.4800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2e91e929 code=0x7ffc0000 [ 393.354604][ T29] audit: type=1326 audit(1752786796.599:43990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18066 comm="syz.8.4800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2e91e929 code=0x7ffc0000 [ 393.378230][ T29] audit: type=1326 audit(1752786796.599:43991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18066 comm="syz.8.4800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1d2e91e929 code=0x7ffc0000 [ 393.402329][ T29] audit: type=1326 audit(1752786796.599:43992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18066 comm="syz.8.4800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2e91e929 code=0x7ffc0000 [ 393.426711][ T29] audit: type=1326 audit(1752786796.599:43993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18066 comm="syz.8.4800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2e91e929 code=0x7ffc0000 [ 393.450415][ T29] audit: type=1326 audit(1752786796.599:43994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18066 comm="syz.8.4800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1d2e91e929 code=0x7ffc0000 [ 393.474727][ T29] audit: type=1326 audit(1752786796.599:43995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18066 comm="syz.8.4800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2e91e929 code=0x7ffc0000 [ 393.498346][ T29] audit: type=1326 audit(1752786796.599:43996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18066 comm="syz.8.4800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2e91e929 code=0x7ffc0000 [ 393.522722][ T29] audit: type=1326 audit(1752786796.599:43997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18066 comm="syz.8.4800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f1d2e91e929 code=0x7ffc0000 [ 393.546993][ T29] audit: type=1326 audit(1752786796.599:43998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18066 comm="syz.8.4800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d2e91e929 code=0x7ffc0000 [ 393.756283][T18082] loop5: detected capacity change from 0 to 2048 [ 393.785815][T18082] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 393.812945][T12003] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.379230][T18106] lo speed is unknown, defaulting to 1000 [ 394.762045][T18117] syzkaller1: entered promiscuous mode [ 394.767722][T18117] syzkaller1: entered allmulticast mode [ 395.090709][T18126] program syz.4.4819 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 395.193368][T18131] siw: device registration error -23 [ 396.353652][T18144] loop8: detected capacity change from 0 to 512 [ 396.394825][T18144] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 396.422205][T18144] EXT4-fs (loop8): 1 truncate cleaned up [ 396.434971][T18144] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 396.540883][T14884] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.712462][T18167] lo speed is unknown, defaulting to 1000 [ 396.977025][T18175] loop8: detected capacity change from 0 to 512 [ 396.992270][T18175] journal_path: Lookup failure for './file0/../file0' [ 396.999146][T18175] EXT4-fs: error: could not find journal device path [ 397.152769][T18183] loop3: detected capacity change from 0 to 2048 [ 397.170889][T18183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.214309][T17736] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.248580][T18190] netlink: 'syz.3.4840': attribute type 10 has an invalid length. [ 397.256488][T18190] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4840'. [ 397.265715][T18190] dummy0: entered promiscuous mode [ 397.267266][T18192] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4841'. [ 397.311255][T18198] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4844'. [ 397.361823][T18200] lo speed is unknown, defaulting to 1000 [ 397.538392][T18198] team0 (unregistering): Port device team_slave_0 removed [ 397.581076][T18198] team0 (unregistering): Port device team_slave_1 removed [ 398.368415][ T29] kauditd_printk_skb: 362 callbacks suppressed [ 398.368434][ T29] audit: type=1326 audit(1752786801.649:44361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18211 comm="syz.5.4848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8967f3e929 code=0x7ffc0000 [ 398.399141][ T29] audit: type=1326 audit(1752786801.649:44362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18211 comm="syz.5.4848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8967f3e929 code=0x7ffc0000 [ 398.422809][ T29] audit: type=1326 audit(1752786801.649:44363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18211 comm="syz.5.4848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8967f3e929 code=0x7ffc0000 [ 398.446984][ T29] audit: type=1326 audit(1752786801.649:44364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18211 comm="syz.5.4848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8967f3e929 code=0x7ffc0000 [ 398.471250][ T29] audit: type=1326 audit(1752786801.649:44365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18211 comm="syz.5.4848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8967f3e929 code=0x7ffc0000 [ 398.495473][ T29] audit: type=1326 audit(1752786801.649:44366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18211 comm="syz.5.4848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f8967f3e929 code=0x7ffc0000 [ 398.519144][ T29] audit: type=1326 audit(1752786801.649:44367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18211 comm="syz.5.4848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8967f3e929 code=0x7ffc0000 [ 398.543420][ T29] audit: type=1326 audit(1752786801.649:44368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18211 comm="syz.5.4848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8967f3e929 code=0x7ffc0000 [ 398.567156][ T29] audit: type=1326 audit(1752786801.649:44369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18211 comm="syz.5.4848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8967f3e929 code=0x7ffc0000 [ 398.591448][ T29] audit: type=1326 audit(1752786801.649:44370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18211 comm="syz.5.4848" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8967f3e929 code=0x7ffc0000 [ 398.896268][T18221] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4850'. [ 398.940021][T18223] loop3: detected capacity change from 0 to 128 [ 398.961586][T18223] vfat: Unknown parameter 'À' [ 399.008896][T18225] netlink: 'syz.3.4852': attribute type 10 has an invalid length. [ 399.016815][T18225] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4852'. [ 399.955432][T18252] loop3: detected capacity change from 0 to 128 [ 399.977830][T18252] vfat: Unknown parameter 'À' [ 400.184512][T18262] loop9: detected capacity change from 0 to 512 [ 400.191088][T18262] EXT4-fs: Ignoring removed orlov option [ 400.200740][T18262] EXT4-fs: inline encryption not supported [ 400.216633][T18262] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 400.272023][T18262] EXT4-fs (loop9): 1 truncate cleaned up [ 400.300544][T18262] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.357645][T18277] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4872'. [ 400.369635][T18277] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4872'. [ 400.451109][T18280] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.484420][T18280] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.553245][T18280] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.667896][T18280] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.758357][T18280] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.795211][T18280] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.843496][T18280] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.903057][T16359] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.934395][T18280] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.092606][T18305] netlink: 'syz.5.4883': attribute type 10 has an invalid length. [ 401.100550][T18305] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4883'. [ 401.100839][T18302] loop9: detected capacity change from 0 to 2048 [ 401.120205][T18302] EXT4-fs: Ignoring removed mblk_io_submit option [ 401.131070][T18308] loop3: detected capacity change from 0 to 128 [ 401.146867][T18302] EXT4-fs (loop9): can't mount with data=, fs mounted w/o journal [ 401.165585][T18313] siw: device registration error -23 [ 401.176439][T18313] loop5: detected capacity change from 0 to 512 [ 401.183723][T18313] EXT4-fs: Ignoring removed orlov option [ 401.189447][T18313] EXT4-fs: Ignoring removed nomblk_io_submit option [ 401.196972][T18313] ext4: Unknown parameter 'fsname' [ 401.342294][T18314] loop3: detected capacity change from 0 to 512 [ 401.352952][T18314] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 401.405779][T18331] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.475824][T18331] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.514674][T18331] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.596660][T18331] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.620861][T18342] netlink: 'syz.9.4896': attribute type 10 has an invalid length. [ 401.628747][T18342] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4896'. [ 401.640288][T18342] dummy0: entered promiscuous mode [ 402.328005][T18355] smc: net device bond0 applied user defined pnetid SYZ2 [ 402.417627][T18367] loop3: detected capacity change from 0 to 128 [ 402.425461][T18367] vfat: Unknown parameter 'À' [ 402.483290][T18371] program syz.3.4908 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 402.495660][T18373] netlink: 'syz.8.4909': attribute type 10 has an invalid length. [ 402.503700][T18373] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4909'. [ 402.571069][T18379] loop9: detected capacity change from 0 to 128 [ 402.658940][T18386] loop8: detected capacity change from 0 to 512 [ 402.683300][T18386] EXT4-fs: Ignoring removed orlov option [ 402.689106][T18386] EXT4-fs: inline encryption not supported [ 402.699270][T18386] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 402.714314][T18384] loop9: detected capacity change from 0 to 512 [ 402.720859][T18384] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 402.731032][T18386] EXT4-fs (loop8): 1 truncate cleaned up [ 402.739417][T18386] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.377129][ T29] kauditd_printk_skb: 1303 callbacks suppressed [ 403.377147][ T29] audit: type=1326 audit(1752786806.659:45674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18378 comm="syz.9.4912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f12eb2558e7 code=0x7ffc0000 [ 403.412785][ T29] audit: type=1326 audit(1752786806.659:45675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18378 comm="syz.9.4912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f12eb1fab19 code=0x7ffc0000 [ 403.437233][ T29] audit: type=1326 audit(1752786806.659:45676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18378 comm="syz.9.4912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12eb25e929 code=0x7ffc0000 [ 403.460892][ T29] audit: type=1326 audit(1752786806.669:45677): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18378 comm="syz.9.4912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f12eb2558e7 code=0x7ffc0000 [ 403.468093][T18393] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4915'. [ 403.485242][ T29] audit: type=1326 audit(1752786806.669:45678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18378 comm="syz.9.4912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f12eb1fab19 code=0x7ffc0000 [ 403.517763][ T29] audit: type=1326 audit(1752786806.669:45679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18378 comm="syz.9.4912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12eb25e929 code=0x7ffc0000 [ 403.541773][ T29] audit: type=1326 audit(1752786806.679:45680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18378 comm="syz.9.4912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f12eb2558e7 code=0x7ffc0000 [ 403.566038][ T29] audit: type=1326 audit(1752786806.679:45681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18378 comm="syz.9.4912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f12eb1fab19 code=0x7ffc0000 [ 403.590104][ T29] audit: type=1326 audit(1752786806.679:45682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18378 comm="syz.9.4912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12eb25e929 code=0x7ffc0000 [ 403.614678][ T29] audit: type=1326 audit(1752786806.689:45683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18378 comm="syz.9.4912" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f12eb2558e7 code=0x7ffc0000 [ 403.641666][T14884] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.728184][T18409] netlink: 'syz.9.4921': attribute type 10 has an invalid length. [ 403.736203][T18409] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4921'. [ 403.772791][T18412] program syz.9.4922 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 403.831172][T18416] loop3: detected capacity change from 0 to 2048 [ 403.846501][T18416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.931399][T18424] syz!: rxe_newlink: already configured on team_slave_0 [ 403.942136][T18424] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4927'. [ 404.089966][T17549] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 404.105637][T17549] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 404.118297][T17549] EXT4-fs (loop3): This should not happen!! Data will be lost [ 404.118297][T17549] [ 404.128075][T17549] EXT4-fs (loop3): Total free blocks count 0 [ 404.134114][T17549] EXT4-fs (loop3): Free/Dirty block details [ 404.140101][T17549] EXT4-fs (loop3): free_blocks=2415919104 [ 404.145840][T17549] EXT4-fs (loop3): dirty_blocks=8208 [ 404.151205][T17549] EXT4-fs (loop3): Block reservation details [ 404.157203][T17549] EXT4-fs (loop3): i_reserved_data_blocks=513 [ 404.175041][T17555] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 404.263137][T18435] loop3: detected capacity change from 0 to 1024 [ 404.274771][T18435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 404.297569][T17736] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.508466][T18441] siw: device registration error -23 [ 404.539889][T18445] netlink: 'syz.9.4934': attribute type 10 has an invalid length. [ 404.547821][T18445] netlink: 40 bytes leftover after parsing attributes in process `syz.9.4934'. [ 404.821119][T18454] program syz.9.4937 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 404.876660][T18458] loop9: detected capacity change from 0 to 128 [ 404.880340][T18457] syzkaller1: entered promiscuous mode [ 404.884530][T18458] vfat: Unknown parameter 'À' [ 404.888475][T18457] syzkaller1: entered allmulticast mode [ 404.930375][T18460] loop9: detected capacity change from 0 to 2048 [ 404.955155][T18460] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.097749][T18331] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.111492][T18331] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.124261][T18331] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.136368][T18331] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.167169][T18468] loop5: detected capacity change from 0 to 512 [ 405.174388][T18468] journal_path: Lookup failure for './file0/../file0' [ 405.181210][T18468] EXT4-fs: error: could not find journal device path [ 405.678724][T17553] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 405.695799][T17553] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 405.708332][T17553] EXT4-fs (loop9): This should not happen!! Data will be lost [ 405.708332][T17553] [ 405.718137][T17553] EXT4-fs (loop9): Total free blocks count 0 [ 405.724971][T17553] EXT4-fs (loop9): Free/Dirty block details [ 405.730888][T17553] EXT4-fs (loop9): free_blocks=2415919104 [ 405.736680][T17553] EXT4-fs (loop9): dirty_blocks=8208 [ 405.741986][T17553] EXT4-fs (loop9): Block reservation details [ 405.748082][T17553] EXT4-fs (loop9): i_reserved_data_blocks=513 [ 405.767951][T17553] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 405.924294][T18493] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4952'. [ 405.935092][T18493] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4952'. [ 406.358054][T18513] netlink: 52 bytes leftover after parsing attributes in process `(™@':'. [ 406.750869][T18520] loop5: detected capacity change from 0 to 2048 [ 406.764596][T18520] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.009987][ T782] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 407.026305][ T782] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 407.038897][ T782] EXT4-fs (loop5): This should not happen!! Data will be lost [ 407.038897][ T782] [ 407.048662][ T782] EXT4-fs (loop5): Total free blocks count 0 [ 407.054834][ T782] EXT4-fs (loop5): Free/Dirty block details [ 407.060773][ T782] EXT4-fs (loop5): free_blocks=2415919104 [ 407.066566][ T782] EXT4-fs (loop5): dirty_blocks=8208 [ 407.071855][ T782] EXT4-fs (loop5): Block reservation details [ 407.077849][ T782] EXT4-fs (loop5): i_reserved_data_blocks=513 [ 407.095920][ T782] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 407.437008][T18543] lo speed is unknown, defaulting to 1000 [ 408.583264][ T29] kauditd_printk_skb: 159 callbacks suppressed [ 408.583284][ T29] audit: type=1326 audit(1752787067.854:45843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18570 comm="syz.5.4979" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f8967f358e7 code=0x0 [ 408.631982][ T29] audit: type=1326 audit(1752787067.914:45844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18575 comm="syz.9.4981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f12eb2558e7 code=0x7ffc0000 [ 408.636741][T18576] siw: device registration error -23 [ 408.656482][ T29] audit: type=1326 audit(1752787067.914:45845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18575 comm="syz.9.4981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f12eb1fab19 code=0x7ffc0000 [ 408.685292][ T29] audit: type=1326 audit(1752787067.914:45846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18575 comm="syz.9.4981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f12eb2558e7 code=0x7ffc0000 [ 408.687770][T18577] loop5: detected capacity change from 0 to 512 [ 408.708903][ T29] audit: type=1326 audit(1752787067.914:45847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18575 comm="syz.9.4981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f12eb1fab19 code=0x7ffc0000 [ 408.708946][ T29] audit: type=1326 audit(1752787067.914:45848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18575 comm="syz.9.4981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12eb25e929 code=0x7ffc0000 [ 408.744580][T18577] EXT4-fs: Ignoring removed orlov option [ 408.763944][ T29] audit: type=1326 audit(1752787067.914:45849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18575 comm="syz.9.4981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f12eb25e929 code=0x7ffc0000 [ 408.792792][ T29] audit: type=1326 audit(1752787067.914:45850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18575 comm="syz.9.4981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f12eb25e929 code=0x7ffc0000 [ 408.804274][T18577] EXT4-fs: inline encryption not supported [ 408.817246][ T29] audit: type=1326 audit(1752787067.914:45851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18575 comm="syz.9.4981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f12eb2558e7 code=0x7ffc0000 [ 408.824932][T18577] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 408.847039][ T29] audit: type=1326 audit(1752787067.914:45852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18575 comm="syz.9.4981" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f12eb1fab19 code=0x7ffc0000 [ 408.864510][T18580] loop9: detected capacity change from 0 to 128 [ 408.883229][T18577] EXT4-fs (loop5): 1 truncate cleaned up [ 408.886739][T18580] vfat: Unknown parameter 'À' [ 408.892158][T18577] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 408.926728][T18582] loop8: detected capacity change from 0 to 512 [ 408.934889][T18582] journal_path: Lookup failure for './file0/../file0' [ 408.941727][T18582] EXT4-fs: error: could not find journal device path [ 408.986703][T18590] FAULT_INJECTION: forcing a failure. [ 408.986703][T18590] name failslab, interval 1, probability 0, space 0, times 0 [ 408.999393][T18590] CPU: 0 UID: 0 PID: 18590 Comm: syz.8.4987 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 408.999448][T18590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 408.999463][T18590] Call Trace: [ 408.999522][T18590] [ 408.999530][T18590] __dump_stack+0x1d/0x30 [ 408.999554][T18590] dump_stack_lvl+0xe8/0x140 [ 408.999577][T18590] dump_stack+0x15/0x1b [ 408.999611][T18590] should_fail_ex+0x265/0x280 [ 408.999645][T18590] ? resv_map_alloc+0x32/0x190 [ 408.999694][T18590] should_failslab+0x8c/0xb0 [ 408.999725][T18590] __kmalloc_cache_noprof+0x4c/0x320 [ 408.999755][T18590] ? vfs_write+0x75e/0x8e0 [ 408.999792][T18590] resv_map_alloc+0x32/0x190 [ 408.999867][T18590] hugetlbfs_get_inode+0x67/0x370 [ 408.999927][T18590] hugetlb_file_setup+0x192/0x3d0 [ 408.999959][T18590] ksys_mmap_pgoff+0x157/0x310 [ 408.999997][T18590] x64_sys_call+0x1602/0x2fb0 [ 409.000024][T18590] do_syscall_64+0xd2/0x200 [ 409.000088][T18590] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 409.000120][T18590] ? clear_bhb_loop+0x40/0x90 [ 409.000203][T18590] ? clear_bhb_loop+0x40/0x90 [ 409.000231][T18590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.000255][T18590] RIP: 0033:0x7f1d2e91e929 [ 409.000275][T18590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.000317][T18590] RSP: 002b:00007f1d2cf87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 409.000341][T18590] RAX: ffffffffffffffda RBX: 00007f1d2eb45fa0 RCX: 00007f1d2e91e929 [ 409.000377][T18590] RDX: 0000000000000002 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 409.000393][T18590] RBP: 00007f1d2cf87090 R08: ffffffffffffffff R09: 00000000fffff000 [ 409.000405][T18590] R10: 000000000004c831 R11: 0000000000000246 R12: 0000000000000001 [ 409.000417][T18590] R13: 0000000000000000 R14: 00007f1d2eb45fa0 R15: 00007ffeef47dcc8 [ 409.000496][T18590] [ 409.284179][T18618] lo speed is unknown, defaulting to 1000 [ 409.410192][T12003] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 409.442727][T18625] loop5: detected capacity change from 0 to 128 [ 409.450072][T18625] vfat: Unknown parameter 'À' [ 409.504633][T18628] program syz.5.4995 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 410.047766][T18634] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4998'. [ 410.186678][T18639] loop5: detected capacity change from 0 to 2048 [ 410.229046][T18639] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.230470][T18640] lo speed is unknown, defaulting to 1000 [ 410.285774][T18642] siw: device registration error -23 [ 410.333511][T18642] loop8: detected capacity change from 0 to 512 [ 410.341222][T18642] EXT4-fs: Ignoring removed orlov option [ 410.347114][T18642] EXT4-fs: Ignoring removed nomblk_io_submit option [ 410.353971][T18642] ext4: Unknown parameter 'fsname' [ 410.414341][T18639] lo speed is unknown, defaulting to 1000 [ 410.426300][T18653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5003'. [ 410.466147][T18653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5003'. [ 410.490518][T18662] loop8: detected capacity change from 0 to 128 [ 410.498324][T18662] vfat: Unknown parameter 'À' [ 410.570883][T18673] loop9: detected capacity change from 0 to 512 [ 410.577690][T18673] ext4: Unknown parameter 'fowner>00000000000000000000' [ 410.604139][T18673] loop9: detected capacity change from 0 to 736 [ 410.628791][T18677] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.667477][T18678] loop8: detected capacity change from 0 to 512 [ 410.675567][T18678] EXT4-fs: Ignoring removed orlov option [ 410.681418][T18678] EXT4-fs: inline encryption not supported [ 410.688945][T18678] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 410.702380][T18677] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.707188][T18678] EXT4-fs (loop8): 1 truncate cleaned up [ 410.718875][T18678] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.796193][T18677] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.837256][T18677] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.858260][T18684] loop9: detected capacity change from 0 to 2048 [ 410.867644][T18684] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.893658][T18677] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.894600][T16359] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.905723][T18677] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.922653][T18677] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.935083][T18677] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.945146][T18688] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.008350][T18688] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.041562][T12003] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.108755][T18688] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.121800][T18702] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5019'. [ 411.131080][T18702] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5019'. [ 411.196672][T18705] siw: device registration error -23 [ 411.275475][T18709] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5022'. [ 411.293864][T18707] siw: device registration error -23 [ 411.305160][T18709] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5022'. [ 411.319160][T18707] loop5: detected capacity change from 0 to 512 [ 411.326725][T18707] EXT4-fs: Ignoring removed orlov option [ 411.333188][T18707] EXT4-fs: Ignoring removed nomblk_io_submit option [ 411.340383][T18707] ext4: Unknown parameter 'fsname' [ 411.396914][T18711] FAULT_INJECTION: forcing a failure. [ 411.396914][T18711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.410862][T18711] CPU: 1 UID: 0 PID: 18711 Comm: syz.4.5023 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 411.410896][T18711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 411.410913][T18711] Call Trace: [ 411.410921][T18711] [ 411.410984][T18711] __dump_stack+0x1d/0x30 [ 411.411004][T18711] dump_stack_lvl+0xe8/0x140 [ 411.411023][T18711] dump_stack+0x15/0x1b [ 411.411109][T18711] should_fail_ex+0x265/0x280 [ 411.411148][T18711] should_fail+0xb/0x20 [ 411.411184][T18711] should_fail_usercopy+0x1a/0x20 [ 411.411218][T18711] strncpy_from_user+0x25/0x230 [ 411.411293][T18711] ? kmem_cache_alloc_noprof+0x186/0x310 [ 411.411338][T18711] ? getname_flags+0x80/0x3b0 [ 411.411438][T18711] getname_flags+0xae/0x3b0 [ 411.411473][T18711] getname_uflags+0x21/0x30 [ 411.411498][T18711] io_statx_prep+0x112/0x180 [ 411.411525][T18711] io_submit_sqes+0x5e2/0xfd0 [ 411.411569][T18711] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 411.411612][T18711] ? 0xffffffff81000000 [ 411.411633][T18711] ? __rcu_read_unlock+0x4f/0x70 [ 411.411660][T18711] ? get_pid_task+0x96/0xd0 [ 411.411685][T18711] ? proc_fail_nth_write+0x12d/0x160 [ 411.411725][T18711] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 411.411781][T18711] ? vfs_write+0x75e/0x8e0 [ 411.411813][T18711] ? __rcu_read_unlock+0x4f/0x70 [ 411.411833][T18711] ? __fget_files+0x184/0x1c0 [ 411.411852][T18711] ? fput+0x8f/0xc0 [ 411.411934][T18711] __x64_sys_io_uring_enter+0x78/0x90 [ 411.411965][T18711] x64_sys_call+0x28c8/0x2fb0 [ 411.411985][T18711] do_syscall_64+0xd2/0x200 [ 411.412002][T18711] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 411.412037][T18711] ? clear_bhb_loop+0x40/0x90 [ 411.412064][T18711] ? clear_bhb_loop+0x40/0x90 [ 411.412092][T18711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.412113][T18711] RIP: 0033:0x7f89a779e929 [ 411.412143][T18711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.412161][T18711] RSP: 002b:00007f89a5dff038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 411.412189][T18711] RAX: ffffffffffffffda RBX: 00007f89a79c5fa0 RCX: 00007f89a779e929 [ 411.412206][T18711] RDX: 000000000000e176 RSI: 0000000000001c3a RDI: 0000000000000003 [ 411.412222][T18711] RBP: 00007f89a5dff090 R08: 0000000000000000 R09: 0000000000000000 [ 411.412236][T18711] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000001 [ 411.412247][T18711] R13: 0000000000000000 R14: 00007f89a79c5fa0 R15: 00007ffd482dae38 [ 411.412297][T18711] [ 411.694468][T14884] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.706722][T18688] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.770630][T18688] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.785069][T18688] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.809364][T18688] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.862108][T18688] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.959425][T18728] loop8: detected capacity change from 0 to 128 [ 411.976060][T18728] vfat: Unknown parameter 'À' [ 412.019043][T18734] netlink: 'syz.9.5032': attribute type 10 has an invalid length. [ 412.027071][T18734] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5032'. [ 412.231557][T18740] siw: device registration error -23 [ 412.276388][T18742] siw: device registration error -23 [ 412.921118][T18745] vlan2: entered allmulticast mode [ 412.935933][T18742] loop9: detected capacity change from 0 to 512 [ 412.942732][T18745] dummy0: entered allmulticast mode [ 412.971062][T18742] EXT4-fs: Ignoring removed orlov option [ 412.994203][T18749] netlink: 'syz.5.5035': attribute type 21 has an invalid length. [ 413.097051][T18742] EXT4-fs: Ignoring removed nomblk_io_submit option [ 413.107157][T18751] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5035'. [ 413.118787][T18742] ext4: Unknown parameter 'fsname' [ 413.128484][T18749] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5035'. [ 413.171048][T18752] FAULT_INJECTION: forcing a failure. [ 413.171048][T18752] name failslab, interval 1, probability 0, space 0, times 0 [ 413.186102][T18752] CPU: 0 UID: 0 PID: 18752 Comm: syz.3.5037 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 413.186133][T18752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 413.186145][T18752] Call Trace: [ 413.186151][T18752] [ 413.186206][T18752] __dump_stack+0x1d/0x30 [ 413.186226][T18752] dump_stack_lvl+0xe8/0x140 [ 413.186300][T18752] dump_stack+0x15/0x1b [ 413.186322][T18752] should_fail_ex+0x265/0x280 [ 413.186351][T18752] should_failslab+0x8c/0xb0 [ 413.186373][T18752] kmem_cache_alloc_noprof+0x50/0x310 [ 413.186414][T18752] ? audit_log_start+0x365/0x6c0 [ 413.186451][T18752] ? audit_log_start+0x129/0x6c0 [ 413.186552][T18752] audit_log_start+0x365/0x6c0 [ 413.186595][T18752] audit_log+0x5e/0xd0 [ 413.186639][T18752] sel_write_enforce+0x260/0x2d0 [ 413.186695][T18752] vfs_writev+0x406/0x8b0 [ 413.186752][T18752] ? __pfx_sel_write_enforce+0x10/0x10 [ 413.186793][T18752] ? mutex_lock+0xd/0x30 [ 413.186860][T18752] do_writev+0xe7/0x210 [ 413.186888][T18752] __x64_sys_writev+0x45/0x50 [ 413.186965][T18752] x64_sys_call+0x2006/0x2fb0 [ 413.186986][T18752] do_syscall_64+0xd2/0x200 [ 413.187002][T18752] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 413.187088][T18752] ? clear_bhb_loop+0x40/0x90 [ 413.187108][T18752] ? clear_bhb_loop+0x40/0x90 [ 413.187129][T18752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.187148][T18752] RIP: 0033:0x7fdfa50be929 [ 413.187166][T18752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.187273][T18752] RSP: 002b:00007fdfa371f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 413.187295][T18752] RAX: ffffffffffffffda RBX: 00007fdfa52e5fa0 RCX: 00007fdfa50be929 [ 413.187317][T18752] RDX: 0000000000000002 RSI: 0000200000000040 RDI: 0000000000000007 [ 413.187329][T18752] RBP: 00007fdfa371f090 R08: 0000000000000000 R09: 0000000000000000 [ 413.187340][T18752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 413.187352][T18752] R13: 0000000000000000 R14: 00007fdfa52e5fa0 R15: 00007ffe72a12878 [ 413.187370][T18752] [ 413.428030][T18758] loop8: detected capacity change from 0 to 512 [ 413.435356][T18758] journal_path: Lookup failure for './file0/../file0' [ 413.442167][T18758] EXT4-fs: error: could not find journal device path [ 413.498130][T18752] pim6reg: entered allmulticast mode [ 413.506196][T18752] pim6reg: left allmulticast mode [ 413.601838][ T29] kauditd_printk_skb: 357 callbacks suppressed [ 413.601857][ T29] audit: type=1400 audit(1752787072.884:46208): avc: denied { write } for pid=18778 comm="syz.5.5049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 413.723404][ T29] audit: type=1400 audit(1752787073.004:46209): avc: denied { create } for pid=18785 comm="syz.5.5053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 413.784181][ T29] audit: type=1400 audit(1752787073.024:46210): avc: denied { bind } for pid=18785 comm="syz.5.5053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 413.842412][ T29] audit: type=1400 audit(1752787073.094:46211): avc: denied { write } for pid=18785 comm="syz.5.5053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 413.863083][ T29] audit: type=1400 audit(1752787073.104:46212): avc: denied { read } for pid=18785 comm="syz.5.5053" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 413.998874][ T29] audit: type=1400 audit(1752787073.164:46213): avc: denied { node_bind } for pid=18785 comm="syz.5.5053" saddr=224.0.0.2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 414.020419][ T29] audit: type=1404 audit(1752787073.204:46214): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 414.035677][ T29] audit: type=1404 audit(1752787073.214:46215): enforcing=0 old_enforcing=1 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 414.050777][ T29] audit: type=1400 audit(1752787073.224:46216): avc: denied { read } for pid=18785 comm="syz.5.5053" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 414.073982][ T29] audit: type=1400 audit(1752787073.224:46217): avc: denied { open } for pid=18785 comm="syz.5.5053" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 414.122730][T18786] pim6reg: entered allmulticast mode [ 414.139896][T18793] pim6reg: left allmulticast mode [ 414.172785][T18792] loop9: detected capacity change from 0 to 2048 [ 414.185585][T18792] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 414.213221][T18792] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.246468][T18801] loop3: detected capacity change from 0 to 128 [ 414.253415][T18801] vfat: Unknown parameter 'À' [ 414.260587][T18803] loop5: detected capacity change from 0 to 512 [ 414.268798][T18803] journal_path: Lookup failure for './file0/../file0' [ 414.275820][T18803] EXT4-fs: error: could not find journal device path [ 414.365966][T18819] loop8: detected capacity change from 0 to 128 [ 414.373504][T18820] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18820 comm=syz.5.5061 [ 414.392522][T18820] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.401157][T18820] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.409660][T18820] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.418041][T18820] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.426523][T18820] vxlan0: entered promiscuous mode [ 414.456198][T18827] loop3: detected capacity change from 0 to 512 [ 414.480691][T18827] EXT4-fs: Ignoring removed orlov option [ 414.512994][T18827] EXT4-fs: inline encryption not supported [ 414.519137][T18826] loop8: detected capacity change from 0 to 512 [ 414.525955][T18826] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 414.536291][T18827] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 414.548786][T18827] EXT4-fs (loop3): 1 truncate cleaned up [ 414.556043][T18827] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 415.180932][T17736] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.338908][T18845] loop3: detected capacity change from 0 to 2048 [ 416.012402][T18848] lo speed is unknown, defaulting to 1000 [ 416.156361][T18845] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 416.191257][T17736] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.297441][T18861] loop3: detected capacity change from 0 to 1024 [ 416.312785][T18861] EXT4-fs: Ignoring removed orlov option [ 416.343850][T18861] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 416.369464][T18871] FAULT_INJECTION: forcing a failure. [ 416.369464][T18871] name failslab, interval 1, probability 0, space 0, times 0 [ 416.374513][T18863] SELinux: syz.9.5080 (18863) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 416.382968][T18871] CPU: 1 UID: 0 PID: 18871 Comm: syz.5.5083 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 416.383008][T18871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 416.383042][T18871] Call Trace: [ 416.383051][T18871] [ 416.383062][T18871] __dump_stack+0x1d/0x30 [ 416.383091][T18871] dump_stack_lvl+0xe8/0x140 [ 416.383117][T18871] dump_stack+0x15/0x1b [ 416.383138][T18871] should_fail_ex+0x265/0x280 [ 416.383209][T18871] should_failslab+0x8c/0xb0 [ 416.383238][T18871] kmem_cache_alloc_noprof+0x50/0x310 [ 416.383302][T18871] ? alloc_empty_file+0x76/0x200 [ 416.383332][T18871] ? mntput+0x4b/0x80 [ 416.383375][T18871] alloc_empty_file+0x76/0x200 [ 416.383407][T18871] path_openat+0x68/0x2170 [ 416.383450][T18871] ? _parse_integer_limit+0x170/0x190 [ 416.383532][T18871] ? kstrtoull+0x111/0x140 [ 416.383576][T18871] ? kstrtouint+0x76/0xc0 [ 416.383615][T18871] do_filp_open+0x109/0x230 [ 416.383706][T18871] do_sys_openat2+0xa6/0x110 [ 416.383772][T18871] __x64_sys_openat+0xf2/0x120 [ 416.383828][T18871] x64_sys_call+0x1af/0x2fb0 [ 416.383889][T18871] do_syscall_64+0xd2/0x200 [ 416.383914][T18871] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 416.383951][T18871] ? clear_bhb_loop+0x40/0x90 [ 416.383979][T18871] ? clear_bhb_loop+0x40/0x90 [ 416.384089][T18871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.384119][T18871] RIP: 0033:0x7f8967f3e929 [ 416.384140][T18871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.384166][T18871] RSP: 002b:00007f89665a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 416.384190][T18871] RAX: ffffffffffffffda RBX: 00007f8968165fa0 RCX: 00007f8967f3e929 [ 416.384208][T18871] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 416.384252][T18871] RBP: 00007f89665a7090 R08: 0000000000000000 R09: 0000000000000000 [ 416.384270][T18871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.384287][T18871] R13: 0000000000000000 R14: 00007f8968165fa0 R15: 00007fffe67b3118 [ 416.384314][T18871] [ 416.387523][T18872] __nla_validate_parse: 6 callbacks suppressed [ 416.387536][T18872] netlink: 7 bytes leftover after parsing attributes in process `syz.8.5081'. [ 416.406937][T18863] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5080'. [ 416.445539][T18874] FAULT_INJECTION: forcing a failure. [ 416.445539][T18874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.646514][T18874] CPU: 1 UID: 0 PID: 18874 Comm: syz.5.5084 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 416.646540][T18874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 416.646551][T18874] Call Trace: [ 416.646558][T18874] [ 416.646565][T18874] __dump_stack+0x1d/0x30 [ 416.646584][T18874] dump_stack_lvl+0xe8/0x140 [ 416.646618][T18874] dump_stack+0x15/0x1b [ 416.646632][T18874] should_fail_ex+0x265/0x280 [ 416.646666][T18874] should_fail+0xb/0x20 [ 416.646720][T18874] should_fail_usercopy+0x1a/0x20 [ 416.646748][T18874] _copy_from_user+0x1c/0xb0 [ 416.646766][T18874] bpf_test_init+0xdf/0x160 [ 416.646823][T18874] bpf_prog_test_run_xdp+0x274/0x910 [ 416.646850][T18874] ? kstrtouint+0x76/0xc0 [ 416.646873][T18874] ? __rcu_read_unlock+0x4f/0x70 [ 416.646955][T18874] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 416.646983][T18874] bpf_prog_test_run+0x22a/0x390 [ 416.647015][T18874] __sys_bpf+0x3dc/0x790 [ 416.647072][T18874] __x64_sys_bpf+0x41/0x50 [ 416.647150][T18874] x64_sys_call+0x2478/0x2fb0 [ 416.647169][T18874] do_syscall_64+0xd2/0x200 [ 416.647185][T18874] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 416.647264][T18874] ? clear_bhb_loop+0x40/0x90 [ 416.647339][T18874] ? clear_bhb_loop+0x40/0x90 [ 416.647368][T18874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.647390][T18874] RIP: 0033:0x7f8967f3e929 [ 416.647404][T18874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.647420][T18874] RSP: 002b:00007f89665a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 416.647451][T18874] RAX: ffffffffffffffda RBX: 00007f8968165fa0 RCX: 00007f8967f3e929 [ 416.647463][T18874] RDX: 0000000000000050 RSI: 0000200000000340 RDI: 000000000000000a [ 416.647474][T18874] RBP: 00007f89665a7090 R08: 0000000000000000 R09: 0000000000000000 [ 416.647489][T18874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.647503][T18874] R13: 0000000000000000 R14: 00007f8968165fa0 R15: 00007fffe67b3118 [ 416.647523][T18874] [ 416.647710][T18872] netlink: 7 bytes leftover after parsing attributes in process `syz.8.5081'. [ 416.700202][T18878] loop9: detected capacity change from 0 to 128 [ 416.873875][T18878] vfat: Unknown parameter 'À' [ 416.926023][T17736] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.125833][T18899] loop3: detected capacity change from 0 to 2048 [ 418.172259][T18895] lo speed is unknown, defaulting to 1000 [ 418.274455][T18899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.319881][T18913] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 418.328898][T18913] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5096'. [ 418.370149][T18913] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5096'. [ 418.425543][T17736] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.510624][T18920] siw: device registration error -23 [ 418.605334][ T29] kauditd_printk_skb: 582 callbacks suppressed [ 418.605352][ T29] audit: type=1326 audit(1752787077.884:46800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18919 comm="syz.3.5098" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fdfa50c06f4 code=0x7ffc0000 [ 418.636051][ T29] audit: type=1400 audit(1752787077.894:46801): avc: denied { read } for pid=18919 comm="syz.3.5098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 418.820543][ T29] audit: type=1326 audit(1752787077.944:46802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18896 comm="syz.4.5092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f89a77958e7 code=0x7ffc0000 [ 418.844788][ T29] audit: type=1326 audit(1752787077.944:46803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18896 comm="syz.4.5092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f89a773ab19 code=0x7ffc0000 [ 418.868462][ T29] audit: type=1326 audit(1752787077.944:46804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18896 comm="syz.4.5092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a779e929 code=0x7ffc0000 [ 418.893134][ T29] audit: type=1326 audit(1752787077.944:46805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18896 comm="syz.4.5092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f89a77958e7 code=0x7ffc0000 [ 418.917136][ T29] audit: type=1326 audit(1752787077.944:46806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18896 comm="syz.4.5092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f89a773ab19 code=0x7ffc0000 [ 418.941243][ T29] audit: type=1326 audit(1752787077.944:46807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18896 comm="syz.4.5092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89a779e929 code=0x7ffc0000 [ 418.965643][ T29] audit: type=1400 audit(1752787077.954:46808): avc: denied { map } for pid=18924 comm="syz.9.5100" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=59006 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 418.990058][ T29] audit: type=1400 audit(1752787077.954:46809): avc: denied { read write } for pid=18924 comm="syz.9.5100" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=59006 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 419.032961][T18925] lo speed is unknown, defaulting to 1000 [ 419.459210][T18946] loop9: detected capacity change from 0 to 512 [ 419.472595][T18948] xt_recent: hitcount (16777216) is larger than allowed maximum (65535) [ 419.518063][T18946] EXT4-fs: Ignoring removed orlov option [ 419.536056][T18951] hub 2-0:1.0: USB hub found [ 419.551214][T18946] EXT4-fs: Ignoring removed nomblk_io_submit option [ 419.571169][T18951] hub 2-0:1.0: 8 ports detected [ 419.591497][T18946] ext4: Unknown parameter 'fsname' [ 419.766046][T18955] loop8: detected capacity change from 0 to 2048 [ 419.786114][T18955] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 419.801646][T18961] loop9: detected capacity change from 0 to 128 [ 419.813411][T14884] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.836823][T18965] loop5: detected capacity change from 0 to 512 [ 419.846762][T18965] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 419.867187][T18969] netlink: 28 bytes leftover after parsing attributes in process `syz.9.5114'. [ 419.957251][T18974] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5113'. [ 419.984553][T18974] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5113'. [ 420.241635][T18982] lo speed is unknown, defaulting to 1000 [ 420.496563][T18990] loop9: detected capacity change from 0 to 1764 [ 420.527648][T18990] ISOFS: Bad logical zone size 2051 [ 420.645720][T18995] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18995 comm=syz.9.5120 [ 420.717747][T18997] loop5: detected capacity change from 0 to 512 [ 420.729388][T18997] journal_path: Lookup failure for './file0/../file0' [ 420.736325][T18997] EXT4-fs: error: could not find journal device path [ 420.750038][T19000] loop8: detected capacity change from 0 to 2048 [ 420.767249][T19000] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.820480][T14884] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.864852][T19016] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5130'. [ 421.032011][T19025] loop8: detected capacity change from 0 to 512 [ 421.038811][T19025] ext4: Unknown parameter 'fowner>00000000000000000000' [ 421.071023][T19025] loop8: detected capacity change from 0 to 736 [ 421.099973][T19028] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5134'. [ 421.133538][T19030] xt_TPROXY: Can be used only with -p tcp or -p udp [ 421.148252][T19032] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 421.411500][T19053] siw: device registration error -23 [ 422.104946][T19057] lo speed is unknown, defaulting to 1000 [ 422.398873][T19062] loop3: detected capacity change from 0 to 2048 [ 422.409163][T19061] loop8: detected capacity change from 0 to 512 [ 422.431328][T19061] ext4: Unknown parameter 'fowner>00000000000000000000' [ 422.459504][T19062] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 422.491747][T19061] loop8: detected capacity change from 0 to 736 [ 422.539802][T19073] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 422.577379][T19073] __nla_validate_parse: 3 callbacks suppressed [ 422.577398][T19073] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5151'. [ 422.593764][T19073] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5151'. [ 422.662036][T19080] lo speed is unknown, defaulting to 1000 [ 422.696933][T19081] siw: device registration error -23 [ 423.106499][T19094] siw: device registration error -23 [ 423.227735][ T782] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 423.315516][ T782] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2048 with error 28 [ 423.328121][ T782] EXT4-fs (loop3): This should not happen!! Data will be lost [ 423.328121][ T782] [ 423.337944][ T782] EXT4-fs (loop3): Total free blocks count 0 [ 423.344039][ T782] EXT4-fs (loop3): Free/Dirty block details [ 423.350013][ T782] EXT4-fs (loop3): free_blocks=2415919104 [ 423.356830][ T782] EXT4-fs (loop3): dirty_blocks=8208 [ 423.362204][ T782] EXT4-fs (loop3): Block reservation details [ 423.368277][ T782] EXT4-fs (loop3): i_reserved_data_blocks=513 [ 423.524009][ T782] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 2048 with error 28 [ 423.730772][T19098] lo speed is unknown, defaulting to 1000 [ 423.962947][ T29] kauditd_printk_skb: 634 callbacks suppressed [ 423.962965][ T29] audit: type=1400 audit(1752787083.244:47444): avc: denied { bind } for pid=19100 comm="syz.8.5161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 423.989847][ T29] audit: type=1400 audit(1752787083.244:47445): avc: denied { setopt } for pid=19100 comm="syz.8.5161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 424.054929][T19101] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.095162][ T29] audit: type=1400 audit(1752787083.384:47446): avc: denied { ioctl } for pid=19100 comm="syz.8.5161" path="socket:[59904]" dev="sockfs" ino=59904 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 424.202553][T19101] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.245197][T19110] lo speed is unknown, defaulting to 1000 [ 424.278283][ T29] audit: type=1400 audit(1752787083.564:47447): avc: denied { create } for pid=19109 comm="syz.9.5163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 424.306320][ T29] audit: type=1400 audit(1752787083.564:47448): avc: denied { ioctl } for pid=19109 comm="syz.9.5163" path="socket:[59950]" dev="sockfs" ino=59950 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 424.334890][T19101] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.395647][ T29] audit: type=1400 audit(1752787083.684:47449): avc: denied { create } for pid=19120 comm="syz.4.5168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 424.436314][T19101] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.499415][T19101] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.526931][ T29] audit: type=1326 audit(1752787083.814:47450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19118 comm="syz.3.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa50be929 code=0x7ffc0000 [ 424.534911][T19101] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.582744][T19101] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.589554][ T29] audit: type=1326 audit(1752787083.834:47451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19118 comm="syz.3.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa50be929 code=0x7ffc0000 [ 424.615199][ T29] audit: type=1326 audit(1752787083.834:47452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19118 comm="syz.3.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdfa50be929 code=0x7ffc0000 [ 424.637498][T19101] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.638763][ T29] audit: type=1326 audit(1752787083.834:47453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19118 comm="syz.3.5167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa50be929 code=0x7ffc0000 [ 424.769503][T19133] netlink: 'syz.8.5171': attribute type 10 has an invalid length. [ 424.777426][T19133] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5171'. [ 425.277833][T19163] loop8: detected capacity change from 0 to 512 [ 425.302555][T19163] ext4: Unknown parameter 'fowner>00000000000000000000' [ 425.380382][T19171] netlink: 'syz.9.5186': attribute type 10 has an invalid length. [ 425.389009][T19171] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5186'. [ 425.477445][T19180] loop8: detected capacity change from 0 to 512 [ 425.484510][T19180] EXT4-fs: Ignoring removed orlov option [ 425.490500][T19180] EXT4-fs: Ignoring removed nomblk_io_submit option [ 425.505443][T19183] loop9: detected capacity change from 0 to 512 [ 425.533997][T19180] ext4: Unknown parameter 'fsname' [ 425.566493][T19183] loop9: detected capacity change from 0 to 256 [ 425.578916][T19183] FAT-fs (loop9): bogus number of FAT sectors [ 425.585199][T19183] FAT-fs (loop9): Can't find a valid FAT filesystem [ 425.600616][T19186] loop3: detected capacity change from 0 to 1024 [ 425.608305][T19188] loop8: detected capacity change from 0 to 128 [ 425.625102][T19186] EXT4-fs: Ignoring removed orlov option [ 425.647964][T19188] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 425.661122][T19186] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 425.663976][T19188] ext4 filesystem being mounted at /293/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 425.689953][T19184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5192'. [ 425.700171][T19196] FAULT_INJECTION: forcing a failure. [ 425.700171][T19196] name failslab, interval 1, probability 0, space 0, times 0 [ 425.712808][T19196] CPU: 1 UID: 0 PID: 19196 Comm: syz.9.5195 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 425.712837][T19196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 425.712850][T19196] Call Trace: [ 425.712857][T19196] [ 425.712865][T19196] __dump_stack+0x1d/0x30 [ 425.712888][T19196] dump_stack_lvl+0xe8/0x140 [ 425.712966][T19196] dump_stack+0x15/0x1b [ 425.712983][T19196] should_fail_ex+0x265/0x280 [ 425.713013][T19196] should_failslab+0x8c/0xb0 [ 425.713035][T19196] kmem_cache_alloc_noprof+0x50/0x310 [ 425.713067][T19196] ? __send_signal_locked+0x154/0x760 [ 425.713096][T19196] __send_signal_locked+0x154/0x760 [ 425.713129][T19196] send_signal_locked+0x34e/0x3c0 [ 425.713155][T19196] ? ptrace_attach+0x2bb/0x4f0 [ 425.713196][T19196] ptrace_attach+0x38b/0x4f0 [ 425.713219][T19196] __se_sys_ptrace+0x146/0x2b0 [ 425.713243][T19196] __x64_sys_ptrace+0x55/0x70 [ 425.713264][T19196] x64_sys_call+0x1d6a/0x2fb0 [ 425.713349][T19196] do_syscall_64+0xd2/0x200 [ 425.713366][T19196] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 425.713407][T19196] ? clear_bhb_loop+0x40/0x90 [ 425.713432][T19196] ? clear_bhb_loop+0x40/0x90 [ 425.713482][T19196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.713502][T19196] RIP: 0033:0x7f12eb25e929 [ 425.713517][T19196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.713536][T19196] RSP: 002b:00007f12e989e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 425.713554][T19196] RAX: ffffffffffffffda RBX: 00007f12eb486080 RCX: 00007f12eb25e929 [ 425.713567][T19196] RDX: 0000000000000000 RSI: 00000000000001c9 RDI: 0000000000000010 [ 425.713579][T19196] RBP: 00007f12e989e090 R08: 0000000000000000 R09: 0000000000000000 [ 425.713633][T19196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.713646][T19196] R13: 0000000000000001 R14: 00007f12eb486080 R15: 00007ffee4f44eb8 [ 425.713664][T19196] [ 425.953986][T17736] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 425.977794][T19201] netlink: 'syz.4.5198': attribute type 10 has an invalid length. [ 425.985803][T19201] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5198'. [ 425.998624][T19201] batman_adv: batadv0: Adding interface: macvlan0 [ 426.005179][T19201] batman_adv: batadv0: The MTU of interface macvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.031252][T19201] batman_adv: batadv0: Interface activated: macvlan0 [ 426.045477][T19205] loop3: detected capacity change from 0 to 512 [ 426.052206][T19205] ext4: Unknown parameter 'fowner>00000000000000000000' [ 426.080256][T19205] loop3: detected capacity change from 0 to 736 [ 426.103070][T19210] netlink: 'syz.4.5200': attribute type 10 has an invalid length. [ 426.110995][T19210] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5200'. [ 426.433742][T14884] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 426.489536][T19230] FAULT_INJECTION: forcing a failure. [ 426.489536][T19230] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 426.502967][T19230] CPU: 0 UID: 0 PID: 19230 Comm: syz.9.5208 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 426.503075][T19230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 426.503090][T19230] Call Trace: [ 426.503099][T19230] [ 426.503108][T19230] __dump_stack+0x1d/0x30 [ 426.503139][T19230] dump_stack_lvl+0xe8/0x140 [ 426.503161][T19230] dump_stack+0x15/0x1b [ 426.503180][T19230] should_fail_ex+0x265/0x280 [ 426.503217][T19230] should_fail_alloc_page+0xf2/0x100 [ 426.503253][T19230] __alloc_frozen_pages_noprof+0xff/0x360 [ 426.503294][T19230] alloc_pages_mpol+0xb3/0x250 [ 426.503407][T19230] alloc_pages_noprof+0x90/0x130 [ 426.503445][T19230] get_free_pages_noprof+0xc/0x40 [ 426.503500][T19230] vcs_read+0x43/0xa10 [ 426.503530][T19230] ? iov_iter_iovec_advance+0x175/0x1a0 [ 426.503574][T19230] ? __pfx_vcs_read+0x10/0x10 [ 426.503663][T19230] vfs_readv+0x3fb/0x690 [ 426.503690][T19230] ? __pfx_vcs_read+0x10/0x10 [ 426.503733][T19230] do_readv+0xe7/0x210 [ 426.503807][T19230] __x64_sys_readv+0x45/0x50 [ 426.503827][T19230] x64_sys_call+0x29af/0x2fb0 [ 426.503853][T19230] do_syscall_64+0xd2/0x200 [ 426.503876][T19230] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 426.503946][T19230] ? clear_bhb_loop+0x40/0x90 [ 426.504016][T19230] ? clear_bhb_loop+0x40/0x90 [ 426.504043][T19230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.504115][T19230] RIP: 0033:0x7f12eb25e929 [ 426.504136][T19230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.504229][T19230] RSP: 002b:00007f12e98bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 426.504248][T19230] RAX: ffffffffffffffda RBX: 00007f12eb485fa0 RCX: 00007f12eb25e929 [ 426.504260][T19230] RDX: 0000000000000002 RSI: 00002000000033c0 RDI: 0000000000000003 [ 426.504272][T19230] RBP: 00007f12e98bf090 R08: 0000000000000000 R09: 0000000000000000 [ 426.504287][T19230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 426.504299][T19230] R13: 0000000000000000 R14: 00007f12eb485fa0 R15: 00007ffee4f44eb8 [ 426.504317][T19230] [ 426.739996][T19233] loop9: detected capacity change from 0 to 1024 [ 426.755102][T19233] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 426.767741][T19233] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 426.784369][T19233] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 426.800313][T19233] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 43 with error 28 [ 426.813424][T19233] EXT4-fs (loop9): This should not happen!! Data will be lost [ 426.813424][T19233] [ 426.823188][T19233] EXT4-fs (loop9): Total free blocks count 0 [ 426.829203][T19233] EXT4-fs (loop9): Free/Dirty block details [ 426.835200][T19233] EXT4-fs (loop9): free_blocks=4293918720 [ 426.840985][T19233] EXT4-fs (loop9): dirty_blocks=48 [ 426.846836][T19233] EXT4-fs (loop9): Block reservation details [ 426.852930][T19233] EXT4-fs (loop9): i_reserved_data_blocks=3 [ 426.859134][T19237] Direct I/O collision with buffered writes! File: /file1 Comm: syz.9.5209 [ 426.879130][T16359] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 426.899262][T19239] loop9: detected capacity change from 0 to 128 [ 427.042650][T19242] loop9: detected capacity change from 0 to 512 [ 427.063964][T19242] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 427.105856][T19253] loop5: detected capacity change from 0 to 2048 [ 427.189510][T19253] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 427.219114][T12003] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 427.263627][T19268] lo speed is unknown, defaulting to 1000 [ 427.271568][T19270] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5222'. [ 427.282344][T19270] netlink: 7 bytes leftover after parsing attributes in process `syz.4.5222'. [ 427.369515][T19271] lo speed is unknown, defaulting to 1000 [ 427.865012][T19286] netlink: 'syz.8.5228': attribute type 10 has an invalid length. [ 427.873122][T19286] netlink: 40 bytes leftover after parsing attributes in process `syz.8.5228'. [ 427.926972][T19289] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.010548][T19298] loop9: detected capacity change from 0 to 2048 [ 428.032154][T19289] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.043348][T19298] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.072705][T16359] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 428.095247][T19289] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.204620][T19289] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.300532][T19312] siw: device registration error -23 [ 429.000122][ T29] kauditd_printk_skb: 1064 callbacks suppressed [ 429.006649][ T29] audit: type=1326 audit(1752787088.284:48518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19320 comm="syz.4.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f89a77958e7 code=0x7ffc0000 [ 429.030218][ T29] audit: type=1326 audit(1752787088.284:48519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19320 comm="syz.4.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f89a773ab19 code=0x7ffc0000 [ 429.053842][ T29] audit: type=1326 audit(1752787088.284:48520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19320 comm="syz.4.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f89a779e929 code=0x7ffc0000 [ 429.083033][ T29] audit: type=1326 audit(1752787088.364:48521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19320 comm="syz.4.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f89a77958e7 code=0x7ffc0000 [ 429.107416][ T29] audit: type=1326 audit(1752787088.364:48522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19320 comm="syz.4.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f89a773ab19 code=0x7ffc0000 [ 429.131094][ T29] audit: type=1326 audit(1752787088.364:48523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19320 comm="syz.4.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f89a779e929 code=0x7ffc0000 [ 429.157699][ T29] audit: type=1326 audit(1752787088.444:48524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19320 comm="syz.4.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f89a77958e7 code=0x7ffc0000 [ 429.181361][ T29] audit: type=1326 audit(1752787088.444:48525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19320 comm="syz.4.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f89a773ab19 code=0x7ffc0000 [ 429.205602][ T29] audit: type=1326 audit(1752787088.444:48526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19320 comm="syz.4.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f89a779e929 code=0x7ffc0000 [ 429.229083][ T29] audit: type=1326 audit(1752787088.444:48527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19320 comm="syz.4.5238" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f89a77958e7 code=0x7ffc0000 [ 429.715571][T19334] IPVS: Error connecting to the multicast addr [ 430.303753][T19353] netlink: 'syz.9.5250': attribute type 10 has an invalid length. [ 430.311663][T19353] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5250'. [ 430.329997][T19289] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.357113][T19289] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.397898][T19289] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.425378][T19289] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 430.481174][T19358] loop8: detected capacity change from 0 to 512 [ 430.504134][T19358] EXT4-fs: Ignoring removed bh option [ 430.519236][T19358] EXT4-fs: Ignoring removed bh option [ 430.532789][T19358] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 430.568426][T19358] EXT4-fs (loop8): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 430.589103][T19358] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 430.607038][T19358] EXT4-fs (loop8): orphan cleanup on readonly fs [ 430.719187][T19369] xt_CT: You must specify a L4 protocol and not use inversions on it [ 430.728419][T19358] EXT4-fs warning (device loop8): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 430.760132][T19358] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 430.839316][T19372] lo speed is unknown, defaulting to 1000 [ 430.981093][T19376] loop5: detected capacity change from 0 to 128 [ 431.023989][T19358] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.5252: Invalid block bitmap block 0 in block_group 0 [ 431.162472][T19376] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 431.255109][T19358] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 431.269824][T19358] EXT4-fs (loop8): 1 orphan inode deleted [ 431.283334][T19358] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 431.362514][T19383] netlink: 'syz.5.5261': attribute type 10 has an invalid length. [ 431.363852][T19358] EXT4-fs error (device loop8): ext4_lookup:1791: inode #2: comm syz.8.5252: deleted inode referenced: 12 [ 431.370416][T19383] netlink: 40 bytes leftover after parsing attributes in process `syz.5.5261'. [ 431.443832][T14884] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.527542][T19391] loop5: detected capacity change from 0 to 2048 [ 431.552327][T19389] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.583271][T19391] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 431.597233][T19389] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.641048][T12003] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.925784][T19389] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.016694][T19389] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.077072][T19412] netlink: 7 bytes leftover after parsing attributes in process `syz.5.5270'. [ 432.109376][T19412] netlink: 7 bytes leftover after parsing attributes in process `syz.5.5270'. [ 432.246162][T19418] loop3: detected capacity change from 0 to 512 [ 432.261645][T19418] ext4: Unknown parameter 'fowner>00000000000000000000' [ 432.314568][T19425] netlink: 'syz.4.5275': attribute type 10 has an invalid length. [ 432.322549][T19425] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5275'. [ 432.361656][T19426] loop3: detected capacity change from 0 to 736 [ 432.455910][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.464491][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.472275][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.480233][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.488098][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.496607][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.504478][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.505339][T19429] UHID_CREATE from different security context by process 1328 (syz.4.5276), this is not allowed. [ 432.512290][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.531432][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.539240][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.547033][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.555541][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.563407][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.571176][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.578969][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.587503][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.595299][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.603098][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.610884][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.619254][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.627046][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.630850][T19431] lo speed is unknown, defaulting to 1000 [ 432.634828][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.649089][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.656994][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.664777][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.672545][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.681009][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.688902][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.696710][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.705139][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.713016][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.720842][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.728639][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.737073][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.744876][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.752797][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.760675][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.769150][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.777008][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.784800][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.792622][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.801054][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.808846][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.816730][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.825214][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.833098][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.841313][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.849247][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.857783][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.865781][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.873598][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.881397][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.890074][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.897872][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.905686][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.914221][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.922021][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.929856][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.937694][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.946208][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.954061][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.961918][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.969731][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.978269][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.986061][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 432.993925][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 433.001694][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 433.010376][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 433.018218][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 433.026058][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 433.034469][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 433.042310][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 433.050125][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 433.057954][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 433.066418][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 433.074252][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 433.082235][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 433.090360][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 433.098892][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 433.106768][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 433.114608][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 433.122457][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 433.130940][ T23] hid-generic 0000:0003:10000000.0007: unknown main item tag 0x0 [ 433.139360][ T23] hid-generic 0000:0003:10000000.0007: hidraw0: HID v0.00 Device [syz0] on syz0 [ 433.235866][T19445] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 433.246215][T19447] loop5: detected capacity change from 0 to 2048 [ 433.267571][T19447] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.321700][T12003] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.362327][T19456] netlink: 'syz.9.5287': attribute type 10 has an invalid length. [ 433.370371][T19456] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5287'. [ 433.604028][T19467] lo speed is unknown, defaulting to 1000 [ 434.046260][T19480] loop9: detected capacity change from 0 to 512 [ 434.052649][T13927] IPVS: starting estimator thread 0... [ 434.088097][T19480] EXT4-fs (loop9): orphan cleanup on readonly fs [ 434.097196][T19480] __quota_error: 159 callbacks suppressed [ 434.097209][T19480] Quota error (device loop9): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 434.113487][T19480] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 434.122908][T19480] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.5293: Failed to acquire dquot type 1 [ 434.174343][T19481] IPVS: using max 2352 ests per chain, 117600 per kthread [ 434.222224][T19476] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 434.246733][T19480] EXT4-fs (loop9): 1 truncate cleaned up [ 434.267014][T19480] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 434.582576][T19486] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 434.592382][ T29] audit: type=1400 audit(1752787093.874:48687): avc: denied { relabelto } for pid=19478 comm="syz.5.5294" name="473" dev="tmpfs" ino=2589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 434.618957][ T29] audit: type=1400 audit(1752787093.874:48688): avc: denied { associate } for pid=19478 comm="syz.5.5294" name="473" dev="tmpfs" ino=2589 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 434.688647][T19485] lo speed is unknown, defaulting to 1000 [ 434.708622][ T29] audit: type=1400 audit(1752787093.984:48689): avc: denied { unmount } for pid=16359 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 434.729696][T16359] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.772596][ T29] audit: type=1400 audit(1752787094.004:48690): avc: denied { map_create } for pid=19487 comm="syz.3.5296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 434.792007][ T29] audit: type=1400 audit(1752787094.004:48691): avc: denied { create } for pid=19487 comm="syz.3.5296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 434.812074][ T29] audit: type=1400 audit(1752787094.004:48692): avc: denied { prog_load } for pid=19487 comm="syz.3.5296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 434.831391][ T29] audit: type=1400 audit(1752787094.004:48693): avc: denied { bpf } for pid=19487 comm="syz.3.5296" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 434.852157][ T29] audit: type=1400 audit(1752787094.004:48694): avc: denied { perfmon } for pid=19487 comm="syz.3.5296" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 434.895947][T19491] loop9: detected capacity change from 0 to 2048 [ 434.916988][T19389] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.960768][T19491] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.003131][T19497] dummy0: left promiscuous mode [ 435.023199][T16359] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.048950][T19497] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 435.079556][T19389] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.110328][T19500] loop5: detected capacity change from 0 to 512 [ 435.112497][T19389] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.117207][T19500] EXT4-fs: Ignoring removed orlov option [ 435.133834][T19500] EXT4-fs: inline encryption not supported [ 435.142209][T19500] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 435.157866][T19389] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.171374][T19502] lo speed is unknown, defaulting to 1000 [ 435.196653][T19500] EXT4-fs (loop5): 1 truncate cleaned up [ 435.210596][T19500] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.261985][T12003] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.300729][T19506] loop8: detected capacity change from 0 to 1024 [ 435.308023][T19506] EXT4-fs: Ignoring removed i_version option [ 435.320361][T19506] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 435.417843][T19506] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.5302: Invalid block bitmap block 0 in block_group 0 [ 435.434102][T19506] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.5302: Failed to acquire dquot type 0 [ 435.464036][T19506] EXT4-fs error (device loop8): ext4_free_blocks:6587: comm syz.8.5302: Freeing blocks not in datazone - block = 0, count = 4096 [ 435.479379][T19506] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.5302: Invalid inode bitmap blk 0 in block_group 0 [ 435.492574][T19506] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 435.492739][T17553] ================================================================== [ 435.503503][T19506] EXT4-fs (loop8): 1 orphan inode deleted [ 435.509210][T17553] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 435.516917][T19506] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.521500][T17553] [ 435.521510][T17553] write to 0xffffffff8688d388 of 8 bytes by task 19506 on cpu 1: [ 435.544033][T17553] data_alloc+0x27d/0x2b0 [ 435.548405][T17553] prb_reserve+0x808/0xaf0 [ 435.552852][T17553] vprintk_store+0x56d/0x860 [ 435.557464][T17553] vprintk_emit+0x178/0x650 [ 435.561988][T17553] vprintk_default+0x26/0x30 [ 435.566651][T17553] vprintk+0x1d/0x30 [ 435.570568][T17553] _printk+0x79/0xa0 [ 435.574494][T17553] __ext4_std_error+0x346/0x370 [ 435.579362][T17553] ext4_free_inode+0x79e/0x870 [ 435.584143][T17553] ext4_evict_inode+0xaff/0xd80 [ 435.589043][T17553] evict+0x2e0/0x550 [ 435.592956][T17553] iput+0x447/0x5b0 [ 435.596785][T17553] ext4_process_orphan+0x1a9/0x1c0 [ 435.601927][T17553] ext4_orphan_cleanup+0x6a8/0xa00 [ 435.607061][T17553] ext4_fill_super+0x3171/0x34e0 [ 435.612012][T17553] get_tree_bdev_flags+0x28e/0x300 [ 435.617152][T17553] get_tree_bdev+0x1f/0x30 [ 435.621590][T17553] ext4_get_tree+0x1c/0x30 [ 435.626038][T17553] vfs_get_tree+0x57/0x1d0 [ 435.630491][T17553] do_new_mount+0x207/0x680 [ 435.635029][T17553] path_mount+0x4a4/0xb20 [ 435.639382][T17553] __se_sys_mount+0x28f/0x2e0 [ 435.644108][T17553] __x64_sys_mount+0x67/0x80 [ 435.648723][T17553] x64_sys_call+0xd36/0x2fb0 [ 435.653334][T17553] do_syscall_64+0xd2/0x200 [ 435.657866][T17553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.663774][T17553] [ 435.666107][T17553] read to 0xffffffff8688d388 of 8 bytes by task 17553 on cpu 0: [ 435.673762][T17553] prb_reserve+0x221/0xaf0 [ 435.678216][T17553] vprintk_store+0x56d/0x860 [ 435.682827][T17553] vprintk_emit+0x178/0x650 [ 435.687345][T17553] vprintk_default+0x26/0x30 [ 435.691949][T17553] vprintk+0x1d/0x30 [ 435.695864][T17553] _printk+0x79/0xa0 [ 435.699783][T17553] __ext4_error+0x248/0x320 [ 435.704343][T17553] ext4_release_dquot+0x2e7/0x460 [ 435.709385][T17553] quota_release_workfn+0x253/0x530 [ 435.714598][T17553] process_scheduled_works+0x4cb/0x9d0 [ 435.720081][T17553] worker_thread+0x582/0x770 [ 435.724694][T17553] kthread+0x489/0x510 [ 435.728778][T17553] ret_from_fork+0xda/0x150 [ 435.733296][T17553] ret_from_fork_asm+0x1a/0x30 [ 435.738081][T17553] [ 435.740411][T17553] value changed: 0x0000000000038e28 -> 0x00000000000e6440 [ 435.747525][T17553] [ 435.749854][T17553] Reported by Kernel Concurrency Sanitizer on: [ 435.756017][T17553] CPU: 0 UID: 0 PID: 17553 Comm: kworker/u8:26 Not tainted 6.16.0-rc6-syzkaller-00037-ge2291551827f #0 PREEMPT(voluntary) [ 435.768792][T17553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 435.778863][T17553] Workqueue: events_unbound quota_release_workfn [ 435.785214][T17553] ================================================================== [ 435.492572][T17553] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:26: Failed to release dquot type 0 [ 436.081111][T14884] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.091240][T17553] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:26: Failed to release dquot type 0