last executing test programs: 3m7.294287477s ago: executing program 4 (id=3822): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) 3m7.268413808s ago: executing program 4 (id=3823): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) 3m7.242179048s ago: executing program 4 (id=3824): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x23) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x9, 0x80, &(0x7f0000000240)={0x1, 0x5, 0xfffc, 0x4360, 0x8000}, 0x8, 0x9, 0x7d, 0x0, 0x1, 0xfe, 0x0}) 3m7.159921059s ago: executing program 4 (id=3826): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0xffffffff, 0xff}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) unshare(0x2040400) socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000a40)='mnt/encrypted_dir\x00', 0x194) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r4, r4, r4) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x4004662b, &(0x7f00000006c0)=@v2={0x2, @aes256, 0x0, '\x00', @a}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x800000, &(0x7f0000006680)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a000000020000000900000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYRES64=r1], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000000)='kfree\x00', r5}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f00000001c0)={@desc={0x1, 0x0, @desc4}}) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000003e000701fcfbbb92d5dbdf250150fa5e080003"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0) ptrace(0x10, r7) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xf, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$xdp(0x2c, 0x3, 0x0) r9 = perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xd4, 0x1, 0x0, 0x0, 0x0, 0xf, 0x9211, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0, 0xa}, 0x0, 0x4, 0x0, 0x8, 0x0, 0x3}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x11, r9, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000a, 0x12, r8, 0x80000000) r10 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r10, 0x5393, &(0x7f0000000000)) 3m6.882333864s ago: executing program 4 (id=3833): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0x17}], 0x4, 0x0, 0x0, 0x8010}, 0x0) r2 = dup2(r1, r0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x19, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) r4 = inotify_init() r5 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r6 = inotify_add_watch(r4, &(0x7f0000000200)='./file0\x00', 0x400008bf) write$binfmt_elf32(r5, &(0x7f0000000040)=ANY=[@ANYRES64=r6], 0x69) close(r5) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f00000000c0)='nv\x00', 0x3) sendto$inet(r7, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sendmmsg(r2, &(0x7f0000008800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001180)}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000008480)=[{&(0x7f00000062c0)="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", 0x5dc}], 0x1}}], 0x6, 0x20004095) 3m6.404632383s ago: executing program 4 (id=3838): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1/../file0\x00', 0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x4) 3m6.404214203s ago: executing program 32 (id=3838): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) renameat2(0xffffffffffffff9c, &(0x7f0000000280)='./file1/../file0\x00', 0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x4) 3m3.576077163s ago: executing program 1 (id=3859): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x6}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3m2.651658229s ago: executing program 1 (id=3875): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) creat(&(0x7f0000000300)='./file0\x00', 0x20) 3m2.58377196s ago: executing program 1 (id=3876): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x300, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}}, 0x24}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6(0xa, 0x8000000000080001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000000000000210a004204ffffffff"], 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r1, 0xffffffffffffffff, 0x60000000}, 0xc) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") chdir(&(0x7f0000000240)='./file0\x00') r5 = open(&(0x7f00000000c0)='.\x00', 0x2, 0x194) getdents(r5, &(0x7f0000001fc0)=""/184, 0xb8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380), &(0x7f00000003c0)=r4}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) shmget(0x3, 0x1000, 0x40, &(0x7f00009ad000/0x1000)=nil) r6 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r7, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60) listen(r7, 0x0) accept4$nfc_llcp(r7, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x2020}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0xc845}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m1.412924051s ago: executing program 1 (id=3890): modify_ldt$read(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x10}}], 0x10}, 0xc0011122) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', r3}, 0x18) r5 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$eJzs3c9vG1kdAPDvOHFIdlOSBQ7LSuxGiFV3BbWTDbuNOLRFQnCqBJR7CIkTRXHiKHbaJqpQKs4ICSFAcIETFyT+ACTUPwEhVYJ7hRCogrYcOBSMxh63wdhJqtpx6nw+0uu8efPj+32uPPabmXgCOLdmIuJaRIxExPsRMZW157ISB82Srvf40Z3ltCRRr9/4exJJ1tbaV5JNX882G4+Ib34t4jtJ0mw4pLq3v7FULpd2svlibXO7WN3bv7S+ubRWWittzc/PfbRweeHDhdme9fXKV/7y4x/86qtXfveFWw8W//bed9N8J7Nlh/vRS83XJN94LVpGI2KnH8EGYCTrT/4kKyf9zwcAgKOl3/E/ERGfjYgnPxt0NgAAAEA/1K9OxtMkog4AAAAMrVzjHtgkV8juBZiMXK5QaN7D+6m4GuVKtfb51cru1krzXtnpyOdW18ul2exe4enIJ+n8XKP+fP6Dtvn5iHgjIn40NdGYLyxXyiuDPvkBAAAA50Q6zp/MNevp5J9TzfE/AAAAMGSmB50AAAAA0HfG/wAAADD8/n/8P9OcJKOnnwwAAADQa1+/fj0t9dbzr1du7u1uVG5eWilVNwqbu8uF5crOdmGtUllr/Gbf5nH7K1cq21+Mrd3bxVqpWitW9/YXNyu7W7XFxnO9F0snek40AAAA0FNvvHPvT0lEHHxpolFSY9kyY3UYbrkXWz3pVx7A6RsZdALAwLjBF84v73/guIH9+CnlAQAA9M/FTz+7/j8Rh67/X3jg+j8Muxe8/g8MEdf/4fxqu/73ixNt9LTen2SAU2WMDxx3HqDr9f/f9z4XAACgPyYbJckVsjHAZORyhULEhcZjAfLJ6nq5NBsRH4+IP07lP5bOzw06aQAAAAAAAAAAAAAAAAAAAAAAAAB4xdTrSdQBAACAoRaR+2sSEUmMR0x9brL9/MBY8q+pxjQibv38xk9uL9VqO3Np+z+etdd+mrV/MIgzGAAAAEC71ji9NY4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF56/OjOcqscan6333EffjkipjvFH43xxnQ88hHx2pMkRg9tl0TESA/iH9yNiDc7xU/StGI6y6I9fi4iJgYc//UexIfz7F56/LnW6f2Xi5nGtPP7bzQrL+vhTLfjX+7Z8W+ky/HvwjH7Hsumb93/TbFr/LsRb412Pv604o+95PH329/a3++2rP7LiIsdP3+S/4lVrG1uF6t7+5fWN5fWSmulrfn5uY8WLi98uDBbXF0vl7J/O8b44Wd++5+j+v9al/jTWf+T9v4nzZzq9c77fKdt/t/3bz/6ZKcVk4iH38/qHf7/3+wWP3vt380+B9LlF1v1g2b9sLd//Ye3j+r/Spf+jx8RP217r9tO27z/je/9uVnLn3ALAKCfqnv7G0vlcmnnVa+knTkDafSwMnM20hj2SmsUdVbyOSuVwR6XAACA3nv+pX/QmQAAAAAAAAAAAAAAAAAAAMD51fr7/9ZvOffj58QOxxtvVZLk1PsKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCU/wYAAP//VsvQDw==") r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat(r5, &(0x7f0000000280)='./file0\x00', 0x640, 0x2) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000400)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@cswp={0x58, 0x114, 0x7, {{0x6, 0xff}, &(0x7f0000000000)=0x400, 0x0, 0xe, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0xca2a}}], 0x58, 0x40014}, 0x0) write$binfmt_register(r6, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 3m0.534695096s ago: executing program 1 (id=3897): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc000000000000000000000000000000fc0200000000000000000000000000010000e9d8000100c40a00600000000000", @ANYRES32=0x0], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3m0.35133222s ago: executing program 1 (id=3904): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) 3m0.221483802s ago: executing program 33 (id=3904): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX]) 2.430698096s ago: executing program 2 (id=7170): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r2) 2.413650856s ago: executing program 2 (id=7172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, 0x0, 0x0) 1.582608451s ago: executing program 3 (id=7186): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x4) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x79af, 0x8, 0x8000, 0x400250}, &(0x7f0000000200)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x35149, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, r3, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r4, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r5, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x0, 0x0, 0x7ff}, 0x10) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x40) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYRES8=r2], 0x1, 0x2a3, &(0x7f0000000740)="$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") syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r8, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r9, 0x0}]) bpf$MAP_CREATE(0x0, 0x0, 0x48) r10 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r11}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 1.499751353s ago: executing program 2 (id=7187): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) preadv(r2, 0x0, 0x0, 0xe, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000a608000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000001080)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="99fa3a1c872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000005c0)={'syz_tun\x00', 0x0}) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='rxrpc_conn\x00'}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsm_get_self_attr(0x67, &(0x7f0000001180)={0x0, 0x0, 0xb1, 0x91, ""/145}, &(0x7f00000010c0)=0xb1, 0x0) 1.349947885s ago: executing program 3 (id=7191): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1c1002, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) 1.278528846s ago: executing program 5 (id=7194): modify_ldt$read(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x10}}], 0x10}, 0xc0011122) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', r3}, 0x18) r5 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat(r5, &(0x7f0000000280)='./file0\x00', 0x640, 0x2) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000400)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@cswp={0x58, 0x114, 0x7, {{0x6, 0xff}, &(0x7f0000000000)=0x400, 0x0, 0xe, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0xca2a}}], 0x58, 0x40014}, 0x0) write$binfmt_register(r6, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1.233132028s ago: executing program 3 (id=7195): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000500000000"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r2) 1.232737738s ago: executing program 3 (id=7196): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x400}, 0x18) socket$packet(0x11, 0x2, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendto$inet(r3, 0x0, 0x60, 0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r5, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r5) 1.225887348s ago: executing program 0 (id=7197): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, 0x0, 0x0) 1.135509919s ago: executing program 2 (id=7198): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)='-\x00\x00', 0x3}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 1.13499183s ago: executing program 3 (id=7199): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) unshare(0x42000000) syz_usb_disconnect(0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc804f9fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) 1.08875357s ago: executing program 2 (id=7210): clock_nanosleep(0xfffffff2, 0xca9a3b, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000002600181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2}, 0x18) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 1.002100761s ago: executing program 5 (id=7202): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000006c8b, 0x37}, 0x7, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 628.666098ms ago: executing program 5 (id=7204): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7, 0x3a, '*.-*', 0x3a, '', 0x3a, './file0', 0x3a, [0x46]}, 0x2c) 600.282999ms ago: executing program 5 (id=7205): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r2) 582.663999ms ago: executing program 5 (id=7206): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000040000000000000000001811", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r0}, 0x0, 0x0}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f00000002c0)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000}}, {@usrjquota}, {@acl}, {@grpjquota}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x32) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) 557.598379ms ago: executing program 6 (id=7208): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) preadv(r2, 0x0, 0x0, 0xe, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000a608000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000001080)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="99fa3a1c872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000005c0)={'syz_tun\x00', 0x0}) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='rxrpc_conn\x00'}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsm_get_self_attr(0x67, &(0x7f0000001180)={0x0, 0x0, 0xb1, 0x91, ""/145}, &(0x7f00000010c0)=0xb1, 0x0) 496.35835ms ago: executing program 5 (id=7209): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000180)=ANY=[], 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) chdir(&(0x7f0000000240)='./file0\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x2, 0x194) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000380), &(0x7f00000003c0)=r0}, 0x20) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x4, 0x0, 0x3, "e88509de7f1939e8abff005597c8ef039a5be42200", 0x13}, 0x60) listen(r2, 0x0) accept4$nfc_llcp(r2, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x2020}]}}}, @IFLA_IFNAME={0x14, 0x3, 'nicvf0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0xc845}, 0x0) fsopen(&(0x7f0000000180)='ocfs2\x00', 0x0) 329.094054ms ago: executing program 6 (id=7211): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)='-\x00\x00', 0x3}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) 325.770273ms ago: executing program 0 (id=7212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) pidfd_send_signal(0xffffffffffffffff, 0x0, 0x0, 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r4 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x79af, 0x8, 0x8000, 0x400250}, &(0x7f0000000200)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x35149, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}}, 0x0, 0xffffffffffffffff, r3, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) lsetxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x22, 0x0) io_uring_enter(r4, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0xffffff, 0x0, 0x0, 0x7ff}, 0x10) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0x40) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYRES8=r2], 0x1, 0x2a3, &(0x7f0000000740)="$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") syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(r6, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) bpf$MAP_CREATE(0x0, 0x0, 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r9}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) 293.636304ms ago: executing program 6 (id=7213): modify_ldt$read(0x0, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x10}}], 0x10}, 0xc0011122) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0x680, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file0\x00', r3}, 0x18) r5 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat(r5, &(0x7f0000000280)='./file0\x00', 0x640, 0x2) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r7, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000400)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@cswp={0x58, 0x114, 0x7, {{0x6, 0xff}, &(0x7f0000000000)=0x400, 0x0, 0xe, 0xffffffffffffffff, 0x1, 0x3, 0x4, 0xca2a}}], 0x58, 0x40014}, 0x0) write$binfmt_register(r6, &(0x7f0000000000)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0x7, 0x3a, 'M', 0x3a, 'M', 0x3a, './file2', 0x3a, [0x46]}, 0x2a) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 265.788625ms ago: executing program 3 (id=7214): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) ioprio_get$uid(0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) 231.584875ms ago: executing program 2 (id=7215): socket$key(0xf, 0x3, 0x2) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x24fc, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3}, &(0x7f0000000180)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 188.523046ms ago: executing program 6 (id=7216): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000006c8b, 0x37}, 0x7, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 168.044917ms ago: executing program 0 (id=7217): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x7, 0x3a, '*.-*', 0x3a, '', 0x3a, './file0', 0x3a, [0x46]}, 0x2c) 136.983587ms ago: executing program 0 (id=7218): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000bb00551a00000032ddc45f0ae30e9557a5fa8be0a38900000000001812000047903e8f8f71e600e0b7c0435181d0c8feb602b6b08e2d4132906c4fe01250b0c06758be35404ad1558de5ae3dd396d0fdf374a7deafcee5118f2b21e04dcb328066058fdff89bab81de71ba217463ea75c9ed698727605b5452e8a0589ed23e905978abf63c0e769d76866aa80d3bf011340efb70e3358d65da2a1fd01b65a158d874991c11ba8a9c12ee10469fd42a8e2f38a48891c3ce7e", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500002000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x10000}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r4 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x181002) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="09000000020000006d05000002"], 0x48) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) shutdown(r6, 0x0) setsockopt$sock_int(r6, 0x1, 0x7, &(0x7f0000000080)=0x59cc, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x12, 0x8, 0x8, 0x8000}, 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095", @ANYRES64, @ANYRES8=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20fe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r8, @ANYBLOB="d393ffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000010000000200000000"], 0x50) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={r10, 0x58, &(0x7f0000000300)}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="53000000100001002cbd3000000000", @ANYRES32=0x0, @ANYBLOB="8021000000800400140003006e657464657673696d3000000000"], 0x4c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900030073797a30000000000900010073797a300000000058000000060a010400000000000000000100000008000b40000000000900010073797a3000000000300004802c0001800a00010071756575650000001c000280060002400ffe009b06000140faff"], 0xcc}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) r12 = socket$nl_rdma(0x10, 0x3, 0x14) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x2c, 0x20, 0x301, 0x0, 0x25dfdbfb, {0x2, 0x20}, [@FRA_DST={0x8, 0x1, @empty}, @FRA_FLOW={0x8}]}, 0x2c}}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x18, 0x1404, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x8044) write$qrtrtun(r4, &(0x7f00000000c0)="f6f86030aa", 0x5) 78.596078ms ago: executing program 0 (id=7219): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) perf_event_open(&(0x7f0000000100)={0x3, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x200000006c8b, 0x37}, 0x7, 0x0, 0xfffffffc, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0, r3}, 0x18) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 66.982398ms ago: executing program 6 (id=7220): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000004000009"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r2) 43.451039ms ago: executing program 6 (id=7221): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r0, 0x0, 0x3ffff) sendfile(r2, r0, 0x0, 0x7ffff000) 0s ago: executing program 0 (id=7222): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) preadv(r2, 0x0, 0x0, 0xe, 0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000a608000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000001080)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x6}, [@IFLA_ADDRESS={0xa, 0x3, @random="99fa3a1c872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000005c0)={'syz_tun\x00', 0x0}) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='rxrpc_conn\x00'}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r7, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsm_get_self_attr(0x67, &(0x7f0000001180)={0x0, 0x0, 0xb1, 0x91, ""/145}, &(0x7f00000010c0)=0xb1, 0x0) kernel console output (not intermixed with test programs): bj=root:sysadm_r:sysadm_t pid=22425 comm="syz.2.6463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8749a85967 code=0x7ffc0000 [ 459.060938][ T29] audit: type=1326 audit(1753412348.074:32668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22425 comm="syz.2.6463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8749a2ab89 code=0x7ffc0000 [ 459.084508][ T29] audit: type=1326 audit(1753412348.074:32669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22425 comm="syz.2.6463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8749a85967 code=0x7ffc0000 [ 459.108151][ T29] audit: type=1326 audit(1753412348.074:32670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22425 comm="syz.2.6463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8749a2ab89 code=0x7ffc0000 [ 459.131786][ T29] audit: type=1326 audit(1753412348.074:32671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22425 comm="syz.2.6463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8749a8e9a9 code=0x7ffc0000 [ 459.155578][ T29] audit: type=1326 audit(1753412348.074:32672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22425 comm="syz.2.6463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8749a8e9a9 code=0x7ffc0000 [ 459.212726][T22433] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 459.620993][T22444] loop6: detected capacity change from 0 to 1024 [ 459.627864][T14995] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 459.639881][T22444] EXT4-fs: Ignoring removed orlov option [ 459.703078][T22444] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.760089][T22452] loop5: detected capacity change from 0 to 512 [ 459.784875][T22452] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 459.799551][T22452] atomic_op ffff88819b8ab928 conn xmit_atomic 0000000000000000 [ 459.833682][T22452] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6473: Failed to acquire dquot type 0 [ 459.845867][T22452] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 459.846219][T15241] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.890154][T14995] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 459.941284][T22472] loop3: detected capacity change from 0 to 1024 [ 459.948947][T22461] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 459.954084][T22472] EXT4-fs: Ignoring removed orlov option [ 459.995713][T22472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.051149][T21619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.136613][T22496] FAULT_INJECTION: forcing a failure. [ 460.136613][T22496] name failslab, interval 1, probability 0, space 0, times 0 [ 460.149396][T22496] CPU: 0 UID: 0 PID: 22496 Comm: syz.5.6488 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(voluntary) [ 460.149472][T22496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 460.149485][T22496] Call Trace: [ 460.149491][T22496] [ 460.149499][T22496] __dump_stack+0x1d/0x30 [ 460.149588][T22496] dump_stack_lvl+0xe8/0x140 [ 460.149619][T22496] dump_stack+0x15/0x1b [ 460.149639][T22496] should_fail_ex+0x265/0x280 [ 460.149671][T22496] should_failslab+0x8c/0xb0 [ 460.149692][T22496] kmem_cache_alloc_noprof+0x50/0x310 [ 460.149724][T22496] ? getname_flags+0x80/0x3b0 [ 460.149747][T22496] ? fput+0x8f/0xc0 [ 460.149775][T22496] getname_flags+0x80/0x3b0 [ 460.149844][T22496] __x64_sys_execve+0x42/0x70 [ 460.149873][T22496] x64_sys_call+0x13ab/0x2fb0 [ 460.149919][T22496] do_syscall_64+0xd2/0x200 [ 460.149942][T22496] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 460.149979][T22496] ? clear_bhb_loop+0x40/0x90 [ 460.150083][T22496] ? clear_bhb_loop+0x40/0x90 [ 460.150121][T22496] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.150146][T22496] RIP: 0033:0x7fabec9ce9a9 [ 460.150165][T22496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.150187][T22496] RSP: 002b:00007fabeb016038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 460.150208][T22496] RAX: ffffffffffffffda RBX: 00007fabecbf6080 RCX: 00007fabec9ce9a9 [ 460.150220][T22496] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 460.150325][T22496] RBP: 00007fabeb016090 R08: 0000000000000000 R09: 0000000000000000 [ 460.150354][T22496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.150370][T22496] R13: 0000000000000000 R14: 00007fabecbf6080 R15: 00007ffc2150b678 [ 460.150393][T22496] [ 460.337695][T22496] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 460.352531][T22498] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 460.378545][T22502] 9pnet_fd: Insufficient options for proto=fd [ 460.427273][T22505] __nla_validate_parse: 13 callbacks suppressed [ 460.427293][T22505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6492'. [ 460.678346][T22508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6493'. [ 460.780791][T22514] bridge0: port 5(batadv0) entered blocking state [ 460.787407][T22514] bridge0: port 5(batadv0) entered disabled state [ 460.794474][T22514] batadv0: entered allmulticast mode [ 460.801265][T22514] batadv0: entered promiscuous mode [ 460.809106][T22514] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6497'. [ 460.819203][T22516] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.836266][T22514] batadv0 (unregistering): left allmulticast mode [ 460.842907][T22514] batadv0 (unregistering): left promiscuous mode [ 460.849409][T22514] bridge0: port 5(batadv0) entered disabled state [ 460.893998][T22516] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.937596][T22521] binfmt_misc: register: failed to install interpreter file ./file0 [ 460.964623][T22516] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.984289][T22523] bridge0: port 4(batadv0) entered blocking state [ 460.990973][T22523] bridge0: port 4(batadv0) entered disabled state [ 461.000771][T22523] batadv0: entered allmulticast mode [ 461.009148][T22523] batadv0: entered promiscuous mode [ 461.023847][T22516] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.030693][T22525] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6501'. [ 461.040837][T22527] 9pnet_fd: Insufficient options for proto=fd [ 461.067814][T22523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6500'. [ 461.082720][T22523] batadv0 (unregistering): left allmulticast mode [ 461.089281][T22523] batadv0 (unregistering): left promiscuous mode [ 461.095787][T22523] bridge0: port 4(batadv0) entered disabled state [ 461.128538][T22531] loop3: detected capacity change from 0 to 512 [ 461.140902][T22533] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6505'. [ 461.148324][T22516] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.166456][T22516] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.178352][T22531] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.194164][T22516] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.194435][T22531] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.218784][T22516] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.244860][T21619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.287987][T22533] loop5: detected capacity change from 0 to 128 [ 461.298655][T22533] vfat: Unknown parameter 'ÿ' [ 461.326396][T22545] binfmt_misc: register: failed to install interpreter file ./file0 [ 461.348599][T22542] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 461.374050][T22553] 9pnet_fd: Insufficient options for proto=fd [ 461.392162][T22555] 9pnet_fd: Insufficient options for proto=fd [ 461.402208][T22557] 9pnet_fd: Insufficient options for proto=fd [ 461.408482][T22560] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6516'. [ 461.573397][T22560] loop3: detected capacity change from 0 to 128 [ 461.583525][T22560] vfat: Unknown parameter 'ÿ' [ 461.601808][T22577] binfmt_misc: register: failed to install interpreter file ./file0 [ 461.642599][T22581] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 461.717942][T22588] 9pnet_fd: Insufficient options for proto=fd [ 461.894373][T22597] bridge0: port 4(batadv0) entered blocking state [ 461.900959][T22597] bridge0: port 4(batadv0) entered disabled state [ 461.981591][T22597] batadv0: entered allmulticast mode [ 461.988158][T22598] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6531'. [ 462.010715][T22597] batadv0: entered promiscuous mode [ 462.017707][T22598] batadv0 (unregistering): left allmulticast mode [ 462.024230][T22598] batadv0 (unregistering): left promiscuous mode [ 462.030605][T22598] bridge0: port 4(batadv0) entered disabled state [ 462.085984][T22600] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6532'. [ 462.136131][T22602] loop6: detected capacity change from 0 to 512 [ 462.158931][T22602] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 462.197348][T22607] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.224843][T22602] atomic_op ffff88816a1ff928 conn xmit_atomic 0000000000000000 [ 462.242427][T22602] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.6533: Failed to acquire dquot type 0 [ 462.263129][T22602] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 462.297189][T22607] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.310628][T22613] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.342736][T22607] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.358536][T22615] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 462.368720][T22613] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.402392][T22618] 9pnet_fd: Insufficient options for proto=fd [ 462.409368][T22607] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.443127][T22620] SELinux: policydb version 0 does not match my version range 15-34 [ 462.453234][T22613] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.454603][T22620] SELinux: failed to load policy [ 462.498303][T22625] loop5: detected capacity change from 0 to 1024 [ 462.505162][T22625] EXT4-fs: Ignoring removed orlov option [ 462.506495][T22627] loop6: detected capacity change from 0 to 1024 [ 462.517751][T22627] EXT4-fs: Ignoring removed orlov option [ 462.524516][T22613] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.536637][T22625] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6542'. [ 462.594500][T22613] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.609744][T22634] batadv0 (unregistering): left allmulticast mode [ 462.616360][T22634] batadv0 (unregistering): left promiscuous mode [ 462.622862][T22634] bridge0: port 3(batadv0) entered disabled state [ 462.640129][T22613] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.652271][T22613] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.652319][T22639] loop3: detected capacity change from 0 to 128 [ 462.664776][T22613] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.681302][T22639] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 462.706788][T22643] loop6: detected capacity change from 0 to 128 [ 462.732609][T22643] ext4 filesystem being mounted at /532/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 462.768163][T22652] loop5: detected capacity change from 0 to 512 [ 462.789430][T22652] ext4 filesystem being mounted at /560/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 462.852383][T22666] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 462.889742][T22670] loop6: detected capacity change from 0 to 1024 [ 462.909816][T22670] EXT4-fs: Ignoring removed orlov option [ 462.921774][T22674] loop2: detected capacity change from 0 to 128 [ 462.936608][T22674] ext4 filesystem being mounted at /106/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 463.054209][T22692] loop3: detected capacity change from 0 to 512 [ 463.054799][T22696] loop5: detected capacity change from 0 to 128 [ 463.069157][T22696] ext4 filesystem being mounted at /564/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 463.079690][T22694] loop2: detected capacity change from 0 to 512 [ 463.093691][T22692] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.108327][T22694] ext4 filesystem being mounted at /108/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 463.135338][T22692] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.6565: corrupted inode contents [ 463.148629][T22692] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #18: comm syz.3.6565: mark_inode_dirty error [ 463.164366][T22692] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.6565: corrupted inode contents [ 463.177789][T22705] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.191885][T22692] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #18: comm syz.3.6565: mark_inode_dirty error [ 463.205481][T22692] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #18: comm syz.3.6565: mark inode dirty (error -117) [ 463.220522][T22692] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 463.252770][T22705] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.264254][T22709] loop5: detected capacity change from 0 to 128 [ 463.270807][T22709] vfat: Unknown parameter 'ÿ' [ 463.296050][T22712] loop5: detected capacity change from 0 to 128 [ 463.307933][T22712] ext4 filesystem being mounted at /567/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 463.332654][T22705] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.389306][T22721] loop5: detected capacity change from 0 to 512 [ 463.397632][T22721] EXT4-fs: Ignoring removed orlov option [ 463.403963][T22721] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 463.417619][T22705] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.428231][T22721] EXT4-fs (loop5): orphan cleanup on readonly fs [ 463.438371][T22721] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6578: bg 0: block 248: padding at end of block bitmap is not set [ 463.450998][T22724] FAULT_INJECTION: forcing a failure. [ 463.450998][T22724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.453436][T22721] __quota_error: 579 callbacks suppressed [ 463.453453][T22721] Quota error (device loop5): write_blk: dquota write failed [ 463.465797][T22724] CPU: 1 UID: 0 PID: 22724 Comm: syz.3.6579 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(voluntary) [ 463.465913][T22724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 463.466011][T22724] Call Trace: [ 463.466022][T22724] [ 463.466033][T22724] __dump_stack+0x1d/0x30 [ 463.466137][T22724] dump_stack_lvl+0xe8/0x140 [ 463.466164][T22724] dump_stack+0x15/0x1b [ 463.466231][T22724] should_fail_ex+0x265/0x280 [ 463.466286][T22724] should_fail+0xb/0x20 [ 463.466347][T22724] should_fail_usercopy+0x1a/0x20 [ 463.466390][T22724] _copy_from_user+0x1c/0xb0 [ 463.466417][T22724] __sys_bpf+0x178/0x790 [ 463.466464][T22724] __x64_sys_bpf+0x41/0x50 [ 463.466506][T22724] x64_sys_call+0x2478/0x2fb0 [ 463.466536][T22724] do_syscall_64+0xd2/0x200 [ 463.466560][T22724] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 463.466595][T22724] ? clear_bhb_loop+0x40/0x90 [ 463.466661][T22724] ? clear_bhb_loop+0x40/0x90 [ 463.466691][T22724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.466719][T22724] RIP: 0033:0x7f50a35de9a9 [ 463.466741][T22724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.466766][T22724] RSP: 002b:00007f50a1c47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 463.466792][T22724] RAX: ffffffffffffffda RBX: 00007f50a3805fa0 RCX: 00007f50a35de9a9 [ 463.466809][T22724] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 463.466826][T22724] RBP: 00007f50a1c47090 R08: 0000000000000000 R09: 0000000000000000 [ 463.466843][T22724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 463.466908][T22724] R13: 0000000000000000 R14: 00007f50a3805fa0 R15: 00007fffa2926108 [ 463.466933][T22724] [ 463.655437][T22721] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 463.665510][T22721] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6578: Failed to acquire dquot type 1 [ 463.677669][T22721] EXT4-fs (loop5): 1 truncate cleaned up [ 463.687729][T22721] EXT4-fs: Ignoring removed orlov option [ 463.693539][T22721] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 463.702442][T22721] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 463.734143][T22731] loop3: detected capacity change from 0 to 128 [ 463.735109][T22721] EXT4-fs error (device loop5): __ext4_remount:6736: comm syz.5.6578: Abort forced by user [ 463.743163][T22731] ext4 filesystem being mounted at /79/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 463.751370][T22721] EXT4-fs (loop5): Remounting filesystem read-only [ 463.767338][T22721] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 463.775844][T22721] ext4 filesystem being remounted at /570/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 463.888929][T22747] batadv0 (unregistering): left allmulticast mode [ 463.895650][T22747] batadv0 (unregistering): left promiscuous mode [ 463.902163][T22747] bridge0: port 6(batadv0) entered disabled state [ 464.082791][T22761] loop6: detected capacity change from 0 to 128 [ 464.109883][T22761] ext4 filesystem being mounted at /539/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 464.859490][T22766] loop3: detected capacity change from 0 to 512 [ 464.904507][T22766] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.942640][T22607] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.958374][T22607] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.975147][T22607] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.996313][T22607] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.092969][T22775] loop3: detected capacity change from 0 to 128 [ 465.097646][T22781] loop6: detected capacity change from 0 to 1024 [ 465.099572][T22775] vfat: Unknown parameter 'ÿ' [ 465.110714][T22780] loop5: detected capacity change from 0 to 1024 [ 465.117623][T22781] EXT4-fs: Ignoring removed orlov option [ 465.128555][T22780] EXT4-fs: Ignoring removed orlov option [ 465.172219][T22789] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 465.179699][T22787] loop3: detected capacity change from 0 to 1024 [ 465.192410][T22787] ext4: Unknown parameter 'func' [ 465.201159][ T29] audit: type=1326 audit(1753412354.294:33248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22786 comm="syz.3.6603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a35de9a9 code=0x7ffc0000 [ 465.225544][ T29] audit: type=1326 audit(1753412354.294:33249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22786 comm="syz.3.6603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a35de9a9 code=0x7ffc0000 [ 465.249299][ T29] audit: type=1326 audit(1753412354.294:33250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22786 comm="syz.3.6603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f50a35de9a9 code=0x7ffc0000 [ 465.273089][ T29] audit: type=1326 audit(1753412354.294:33251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22786 comm="syz.3.6603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a35de9a9 code=0x7ffc0000 [ 465.296891][ T29] audit: type=1326 audit(1753412354.294:33252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22786 comm="syz.3.6603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f50a35de9a9 code=0x7ffc0000 [ 465.320446][ T29] audit: type=1326 audit(1753412354.294:33253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22786 comm="syz.3.6603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a35de9a9 code=0x7ffc0000 [ 465.344149][ T29] audit: type=1326 audit(1753412354.294:33254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22786 comm="syz.3.6603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50a35de9a9 code=0x7ffc0000 [ 465.368016][ T29] audit: type=1326 audit(1753412354.294:33255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22786 comm="syz.3.6603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a35de9a9 code=0x7ffc0000 [ 465.510115][T22799] loop3: detected capacity change from 0 to 512 [ 465.516966][T22799] EXT4-fs: Ignoring removed orlov option [ 465.531393][T22799] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 465.554665][T22799] EXT4-fs (loop3): orphan cleanup on readonly fs [ 465.613727][T22799] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6606: bg 0: block 248: padding at end of block bitmap is not set [ 465.660138][T22809] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.681636][T22799] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.6606: Failed to acquire dquot type 1 [ 465.706993][T22799] EXT4-fs (loop3): 1 truncate cleaned up [ 465.725216][T22799] EXT4-fs: Ignoring removed orlov option [ 465.734105][T22799] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 465.748243][T22814] __nla_validate_parse: 6 callbacks suppressed [ 465.748256][T22814] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6612'. [ 465.806113][T22809] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.825665][T22799] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 465.843567][T22799] EXT4-fs error (device loop3): __ext4_remount:6736: comm syz.3.6606: Abort forced by user [ 465.857886][T22799] EXT4-fs (loop3): Remounting filesystem read-only [ 465.864475][T22799] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 465.902337][T22809] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.931170][T22799] ext4 filesystem being remounted at /88/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 465.992396][T22809] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.026264][T22821] loop5: detected capacity change from 0 to 512 [ 466.046919][T22821] EXT4-fs: Ignoring removed orlov option [ 466.061015][T22809] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.073084][T22809] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.085151][T22809] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.100594][T22809] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.136212][T22823] loop3: detected capacity change from 0 to 1024 [ 466.143556][T22823] EXT4-fs: Ignoring removed orlov option [ 466.172160][T22826] bridge0: port 6(batadv0) entered blocking state [ 466.178742][T22826] bridge0: port 6(batadv0) entered disabled state [ 466.185512][T22826] batadv0: entered allmulticast mode [ 466.191522][T22826] batadv0: entered promiscuous mode [ 466.201555][T22821] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 466.242713][T22821] EXT4-fs (loop5): orphan cleanup on readonly fs [ 466.249823][T22821] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6615: bg 0: block 248: padding at end of block bitmap is not set [ 466.267741][T22829] netlink: 'syz.6.6617': attribute type 21 has an invalid length. [ 466.268883][T22821] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6615: Failed to acquire dquot type 1 [ 466.288376][T22829] netlink: 132 bytes leftover after parsing attributes in process `syz.6.6617'. [ 466.297561][T22829] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6617'. [ 466.307282][T22821] EXT4-fs (loop5): 1 truncate cleaned up [ 466.316324][T22829] loop6: detected capacity change from 0 to 1024 [ 466.323398][T22829] EXT4-fs: Ignoring removed nobh option [ 466.335550][T22821] EXT4-fs: Ignoring removed orlov option [ 466.342266][T22821] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 466.351079][T22821] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 466.369364][T22829] x_tables: duplicate underflow at hook 4 [ 466.376174][T22821] EXT4-fs error (device loop5): __ext4_remount:6736: comm syz.5.6615: Abort forced by user [ 466.386751][T22821] EXT4-fs (loop5): Remounting filesystem read-only [ 466.393333][T22821] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 466.405400][T22821] ext4 filesystem being remounted at /581/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 466.455636][T22821] siw: device registration error -23 [ 466.529441][T22840] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6619'. [ 466.615866][T22844] 9pnet_fd: Insufficient options for proto=fd [ 466.647885][T22848] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6623'. [ 466.677087][T22850] netlink: 48 bytes leftover after parsing attributes in process `syz.5.6624'. [ 466.691126][T21888] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 466.700395][T21888] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 466.722600][T22848] loop6: detected capacity change from 0 to 128 [ 466.729310][T22848] vfat: Unknown parameter 'ÿ' [ 466.822141][T22850] loop5: detected capacity change from 0 to 128 [ 466.862648][T22850] vfat: Unknown parameter 'ÿ' [ 466.882195][T22857] bridge0: port 7(batadv6) entered blocking state [ 466.888701][T22857] bridge0: port 7(batadv6) entered disabled state [ 466.906954][T22857] batadv6: entered allmulticast mode [ 466.937878][T22857] batadv6: entered promiscuous mode [ 467.013246][T22866] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6631'. [ 467.047470][T22868] 9pnet: Could not find request transport: fd0x0000000000000003 [ 467.113953][T22875] 9pnet_fd: Insufficient options for proto=fd [ 467.145768][T22705] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.184249][T22705] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.197715][T22705] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.213004][T22705] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.225914][T22877] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 467.258625][T22879] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6636'. [ 467.268597][T22879] batadv0 (unregistering): left allmulticast mode [ 467.275385][T22879] batadv0 (unregistering): left promiscuous mode [ 467.281987][T22879] bridge0: port 6(batadv0) entered disabled state [ 467.305021][T22881] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6637'. [ 467.335527][T22883] loop5: detected capacity change from 0 to 512 [ 467.376187][T22881] loop2: detected capacity change from 0 to 128 [ 467.381034][T21888] batman_adv: batadv6: No IGMP Querier present - multicast optimizations disabled [ 467.382715][T22881] vfat: Unknown parameter 'ÿ' [ 467.391704][T21888] batman_adv: batadv6: No MLD Querier present - multicast optimizations disabled [ 467.436671][T22883] ext4 filesystem being mounted at /587/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.438826][T22885] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6639'. [ 467.462038][T22883] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.6638: corrupted inode contents [ 467.477754][T22883] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #18: comm syz.5.6638: mark_inode_dirty error [ 467.520534][T22883] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.6638: corrupted inode contents [ 467.543903][T22883] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #18: comm syz.5.6638: mark_inode_dirty error [ 467.558349][T22883] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #18: comm syz.5.6638: mark inode dirty (error -117) [ 467.572073][T22883] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 467.619836][T22900] 9pnet_fd: Insufficient options for proto=fd [ 467.623443][T22895] 9pnet: Could not find request transport: fd0x0000000000000003 [ 467.659128][T22906] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 467.887020][T22932] 9pnet: Could not find request transport: fd0x0000000000000003 [ 467.924115][T22937] 9pnet_fd: Insufficient options for proto=fd [ 468.552924][T22960] loop2: detected capacity change from 0 to 512 [ 468.587912][ T29] kauditd_printk_skb: 173 callbacks suppressed [ 468.587929][ T29] audit: type=1326 audit(1753412357.674:33425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22962 comm="syz.3.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a35de9a9 code=0x7ffc0000 [ 468.637695][ T29] audit: type=1326 audit(1753412357.714:33426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22962 comm="syz.3.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f50a35de9a9 code=0x7ffc0000 [ 468.661467][ T29] audit: type=1326 audit(1753412357.714:33427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22962 comm="syz.3.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a35de9a9 code=0x7ffc0000 [ 468.685164][ T29] audit: type=1326 audit(1753412357.714:33428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22962 comm="syz.3.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50a35de9a9 code=0x7ffc0000 [ 468.708785][ T29] audit: type=1326 audit(1753412357.714:33429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22962 comm="syz.3.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a35de9a9 code=0x7ffc0000 [ 468.732420][ T29] audit: type=1326 audit(1753412357.714:33430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22962 comm="syz.3.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f50a35dd310 code=0x7ffc0000 [ 468.756183][ T29] audit: type=1326 audit(1753412357.714:33431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22962 comm="syz.3.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f50a35e01d7 code=0x7ffc0000 [ 468.779863][ T29] audit: type=1326 audit(1753412357.714:33432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22962 comm="syz.3.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f50a35de9a9 code=0x7ffc0000 [ 468.803529][ T29] audit: type=1326 audit(1753412357.714:33433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22962 comm="syz.3.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f50a35e01d7 code=0x7ffc0000 [ 468.827178][ T29] audit: type=1326 audit(1753412357.714:33434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22962 comm="syz.3.6669" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f50a35dd60a code=0x7ffc0000 [ 468.911067][T22973] 9pnet_fd: Insufficient options for proto=fd [ 468.918449][T22972] 9pnet_fd: Insufficient options for proto=fd [ 468.996722][T22985] random: crng reseeded on system resumption [ 469.038439][T22991] binfmt_misc: register: failed to install interpreter file ./file0 [ 469.141625][T23004] 9pnet_fd: Insufficient options for proto=fd [ 469.207423][T23013] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 469.423931][T23015] chnl_net:caif_netlink_parms(): no params data found [ 469.487836][T23015] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.495069][T23015] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.503225][T23015] bridge_slave_0: entered allmulticast mode [ 469.509894][T23015] bridge_slave_0: entered promiscuous mode [ 469.542831][ T3434] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.554613][T23015] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.561788][T23015] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.569413][T23015] bridge_slave_1: entered allmulticast mode [ 469.576052][T23015] bridge_slave_1: entered promiscuous mode [ 469.583875][ T3434] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.607652][T23015] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.618325][T23015] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.639273][T23015] team0: Port device team_slave_0 added [ 469.646134][T23015] team0: Port device team_slave_1 added [ 469.668735][T23015] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.675855][T23015] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.701948][T23015] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.718935][ T3434] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.730377][T23015] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.737418][T23015] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.763528][T23015] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.796167][T23015] hsr_slave_0: entered promiscuous mode [ 469.803110][T23015] hsr_slave_1: entered promiscuous mode [ 469.809138][T23015] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 469.820514][T23015] Cannot create hsr debugfs directory [ 469.826342][T23037] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 469.838723][ T3434] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.004926][ T3434] batadv2: left allmulticast mode [ 470.010023][ T3434] batadv2: left promiscuous mode [ 470.015216][ T3434] bridge0: port 4(batadv2) entered disabled state [ 470.032852][ T3434] bridge_slave_1: left allmulticast mode [ 470.038551][ T3434] bridge_slave_1: left promiscuous mode [ 470.044240][ T3434] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.062665][ T3434] bridge_slave_0: left allmulticast mode [ 470.068403][ T3434] bridge_slave_0: left promiscuous mode [ 470.074247][ T3434] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.116233][T23048] 9pnet_fd: Insufficient options for proto=fd [ 470.146054][T23051] loop6: detected capacity change from 0 to 1024 [ 470.168179][T23051] EXT4-fs: Ignoring removed orlov option [ 470.186900][T23055] loop3: detected capacity change from 0 to 128 [ 470.223374][T23055] ext4 filesystem being mounted at /106/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 470.266566][T23065] loop3: detected capacity change from 0 to 512 [ 470.282943][T23065] ext4 filesystem being mounted at /107/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 470.296136][T23065] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.6704: corrupted inode contents [ 470.308255][T23065] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #18: comm syz.3.6704: mark_inode_dirty error [ 470.319987][T23065] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.6704: corrupted inode contents [ 470.332452][T23065] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #18: comm syz.3.6704: mark_inode_dirty error [ 470.344702][T23065] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #18: comm syz.3.6704: mark inode dirty (error -117) [ 470.344916][ T3434] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 470.362409][T23065] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 470.382310][ T3434] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 470.392541][ T3434] bond0 (unregistering): Released all slaves [ 470.450359][T23070] loop2: detected capacity change from 0 to 512 [ 470.463459][ T3434] hsr_slave_1: left promiscuous mode [ 470.466404][T23070] atomic_op ffff888130d4d528 conn xmit_atomic 0000000000000000 [ 470.477652][ T3434] veth1_macvtap: left promiscuous mode [ 470.483756][ T3434] veth0_macvtap: left promiscuous mode [ 470.489766][ T3434] veth1_vlan: left promiscuous mode [ 470.497217][T23070] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.6706: Failed to acquire dquot type 0 [ 470.518758][ T3434] veth0_vlan: left promiscuous mode [ 470.525343][T23070] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 470.715702][ T3434] team0 (unregistering): Port device team_slave_1 removed [ 470.726733][ T3434] team0 (unregistering): Port device team_slave_0 removed [ 470.768283][T23084] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 470.878903][T23091] loop2: detected capacity change from 0 to 512 [ 470.971053][T23091] ext4 filesystem being mounted at /125/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 471.018313][T23015] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 471.027306][T23015] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 471.041062][T23015] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 471.050682][T23015] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 471.275008][T23102] __nla_validate_parse: 9 callbacks suppressed [ 471.275022][T23102] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6715'. [ 471.325944][T23015] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.372456][T23015] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.403602][T23110] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6717'. [ 471.413927][T21906] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.421082][T21906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.461087][T21906] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.468186][T21906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.492367][T23015] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 471.502827][T23015] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 471.533194][ T3434] IPVS: stop unused estimator thread 0... [ 471.571664][ T3434] ------------[ cut here ]------------ [ 471.577261][ T3434] WARNING: CPU: 1 PID: 3434 at net/xfrm/xfrm_state.c:3284 xfrm_state_fini+0x17c/0x1f0 [ 471.586894][ T3434] Modules linked in: [ 471.590809][ T3434] CPU: 1 UID: 0 PID: 3434 Comm: kworker/u8:7 Not tainted 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(voluntary) [ 471.603486][ T3434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 471.610129][T23015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.613583][ T3434] Workqueue: netns cleanup_net [ 471.625375][ T3434] RIP: 0010:xfrm_state_fini+0x17c/0x1f0 [ 471.630996][ T3434] Code: 48 8d bb 70 0e 00 00 e8 b2 5f c1 fc 48 8b bb 70 0e 00 00 e8 56 c4 cd fc 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 25 50 a7 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 17 50 a7 fc 90 0f 0b 90 4c 89 f7 e8 7b [ 471.650741][ T3434] RSP: 0018:ffffc90002cbbc60 EFLAGS: 00010293 [ 471.656900][ T3434] RAX: ffffffff84b053eb RBX: ffff8881092dd000 RCX: ffff88811a138000 [ 471.664991][ T3434] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881092dde40 [ 471.671292][T23118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6719'. [ 471.673024][ T3434] RBP: ffffffff86c82460 R08: 0001ffff86848aff R09: 0000000000000000 [ 471.689835][ T3434] R10: ffffc90002cbbbe8 R11: 0001c90002cbbbe8 R12: ffffffff86c82480 [ 471.697912][ T3434] R13: ffff8881092dd028 R14: ffff8881092dde40 R15: ffff8881092dd000 [ 471.705934][ T3434] FS: 0000000000000000(0000) GS:ffff8882aef2d000(0000) knlGS:0000000000000000 [ 471.715045][ T3434] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 471.721716][ T3434] CR2: 000000110c250a2e CR3: 0000000108c02000 CR4: 00000000003506f0 [ 471.729746][ T3434] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 471.737750][ T3434] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 471.745762][ T3434] Call Trace: [ 471.749042][ T3434] [ 471.752004][ T3434] xfrm_net_exit+0x2d/0x60 [ 471.756458][ T3434] ops_undo_list+0x27b/0x410 [ 471.761088][ T3434] cleanup_net+0x2de/0x4d0 [ 471.765590][ T3434] process_scheduled_works+0x4cb/0x9d0 [ 471.771101][ T3434] worker_thread+0x582/0x770 [ 471.775753][ T3434] kthread+0x489/0x510 [ 471.779907][ T3434] ? finish_task_switch+0xad/0x2b0 [ 471.785045][ T3434] ? __pfx_worker_thread+0x10/0x10 [ 471.790264][ T3434] ? __pfx_kthread+0x10/0x10 [ 471.794909][ T3434] ret_from_fork+0xda/0x150 [ 471.799421][ T3434] ? __pfx_kthread+0x10/0x10 [ 471.804037][ T3434] ret_from_fork_asm+0x1a/0x30 [ 471.808939][ T3434] [ 471.812006][ T3434] ---[ end trace 0000000000000000 ]--- [ 471.857235][T23130] bridge0: port 4(batadv0) entered blocking state [ 471.863770][T23130] bridge0: port 4(batadv0) entered disabled state [ 471.874976][T23133] loop6: detected capacity change from 0 to 1024 [ 471.882099][T23133] EXT4-fs: Ignoring removed orlov option [ 471.888117][T23130] batadv0: entered allmulticast mode [ 471.894364][T23130] batadv0: entered promiscuous mode [ 471.906082][T23130] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6722'. [ 471.966998][T23130] batadv0 (unregistering): left allmulticast mode [ 471.973554][T23130] batadv0 (unregistering): left promiscuous mode [ 471.979990][T23130] bridge0: port 4(batadv0) entered disabled state [ 472.142926][T23150] binfmt_misc: register: failed to install interpreter file ./file0 [ 472.178446][T23154] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6728'. [ 472.205652][T23156] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 472.216980][T23015] veth0_vlan: entered promiscuous mode [ 472.229498][T23158] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6729'. [ 472.240636][T23015] veth1_vlan: entered promiscuous mode [ 472.259702][T23015] veth0_macvtap: entered promiscuous mode [ 472.273729][T23015] veth1_macvtap: entered promiscuous mode [ 472.289171][T23162] loop2: detected capacity change from 0 to 512 [ 472.289288][T23015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.312704][T23015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.321846][T23164] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6733'. [ 472.327468][T23015] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.339610][T23015] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.348432][T23015] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.357189][T23015] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.359715][T23162] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.381358][T23162] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.6732: corrupted inode contents [ 472.395569][T23162] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #18: comm syz.2.6732: mark_inode_dirty error [ 472.407280][T23162] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.6732: corrupted inode contents [ 472.419280][T23162] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #18: comm syz.2.6732: mark_inode_dirty error [ 472.437648][T23162] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #18: comm syz.2.6732: mark inode dirty (error -117) [ 472.450419][T23162] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 472.485577][T23171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6734'. [ 472.565175][T23181] bridge0: port 4(batadv0) entered blocking state [ 472.571800][T23181] bridge0: port 4(batadv0) entered disabled state [ 472.595071][T23181] batadv0: entered allmulticast mode [ 472.611746][T23181] batadv0: entered promiscuous mode [ 472.638111][T23181] loop2: detected capacity change from 0 to 512 [ 472.653020][T23181] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 472.709237][T23181] EXT4-fs (loop2): mount failed [ 472.756559][T23181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6738'. [ 472.794123][T23181] batadv0 (unregistering): left allmulticast mode [ 472.800608][T23181] batadv0 (unregistering): left promiscuous mode [ 472.807104][T23181] bridge0: port 4(batadv0) entered disabled state [ 472.891514][T23191] loop3: detected capacity change from 0 to 1024 [ 472.918701][T23191] EXT4-fs: Ignoring removed orlov option [ 473.113517][T23202] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6744'. [ 473.215666][T23202] loop3: detected capacity change from 0 to 128 [ 473.237113][T23207] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.247366][T23202] vfat: Unknown parameter 'ÿ' [ 473.312933][T23207] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.365998][T23207] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.423090][T23207] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.443261][T23212] loop5: detected capacity change from 0 to 512 [ 473.464139][T23212] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.480046][T23212] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.6748: corrupted inode contents [ 473.540219][T23207] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.558362][T23212] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #18: comm syz.5.6748: mark_inode_dirty error [ 473.571365][T23220] binfmt_misc: register: failed to install interpreter file ./file0 [ 473.592776][T23207] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.614597][T23212] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.6748: corrupted inode contents [ 473.632630][T23207] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.651462][T23224] loop3: detected capacity change from 0 to 1024 [ 473.658919][T23212] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #18: comm syz.5.6748: mark_inode_dirty error [ 473.672623][T23207] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.684458][T23212] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #18: comm syz.5.6748: mark inode dirty (error -117) [ 473.697764][T23224] EXT4-fs: Ignoring removed orlov option [ 473.707848][T23212] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 473.819294][T23233] loop3: detected capacity change from 0 to 512 [ 473.863667][T23233] atomic_op ffff88814ec1ed28 conn xmit_atomic 0000000000000000 [ 473.889391][T23233] __quota_error: 313 callbacks suppressed [ 473.889484][T23233] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 473.905942][T23233] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 473.915454][T23233] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.6755: Failed to acquire dquot type 0 [ 474.004430][T23233] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 474.062380][T23249] bridge0: port 6(batadv0) entered blocking state [ 474.068939][T23249] bridge0: port 6(batadv0) entered disabled state [ 474.079753][T23249] batadv0: entered allmulticast mode [ 474.085884][T23249] batadv0: entered promiscuous mode [ 474.109490][T23251] loop2: detected capacity change from 0 to 1024 [ 474.117103][T23249] loop6: detected capacity change from 0 to 512 [ 474.144315][T23251] EXT4-fs: Ignoring removed orlov option [ 474.151422][T23253] loop3: detected capacity change from 0 to 512 [ 474.158847][T23249] Quota error (device loop6): v2_read_file_info: Free block number 1 out of range (1, 6). [ 474.209484][T23249] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 474.260287][T23253] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 474.323056][T23249] EXT4-fs (loop6): mount failed [ 474.365152][T23253] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.6764: corrupted inode contents [ 474.387378][T23253] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #18: comm syz.3.6764: mark_inode_dirty error [ 474.410909][T23249] batadv0 (unregistering): left allmulticast mode [ 474.417438][T23249] batadv0 (unregistering): left promiscuous mode [ 474.423830][T23249] bridge0: port 6(batadv0) entered disabled state [ 474.427256][T23253] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.6764: corrupted inode contents [ 474.452681][T23253] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #18: comm syz.3.6764: mark_inode_dirty error [ 474.466894][T23253] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #18: comm syz.3.6764: mark inode dirty (error -117) [ 474.483018][T23253] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 474.645157][T23266] loop6: detected capacity change from 0 to 128 [ 474.663321][T23266] vfat: Unknown parameter 'ÿ' [ 474.839966][T23276] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 474.875528][T23280] loop2: detected capacity change from 0 to 1024 [ 474.891426][T23280] EXT4-fs: Ignoring removed orlov option [ 474.894836][T23284] loop6: detected capacity change from 0 to 512 [ 474.900232][ T29] audit: type=1326 audit(1753412363.984:33745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23277 comm="syz.5.6772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30de97e9a9 code=0x7ffc0000 [ 474.944959][ T29] audit: type=1326 audit(1753412364.014:33746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23277 comm="syz.5.6772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f30de97e9a9 code=0x7ffc0000 [ 474.968868][ T29] audit: type=1326 audit(1753412364.014:33747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23277 comm="syz.5.6772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30de97e9a9 code=0x7ffc0000 [ 474.992586][ T29] audit: type=1326 audit(1753412364.014:33748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23277 comm="syz.5.6772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30de97e9a9 code=0x7ffc0000 [ 475.054772][T23284] ext4 filesystem being mounted at /582/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.079322][T23294] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.158289][T23294] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.175418][ T29] audit: type=1326 audit(1753412364.264:33749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23301 comm="syz.0.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff51ffe9a9 code=0x7ffc0000 [ 475.199091][ T29] audit: type=1326 audit(1753412364.264:33750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23301 comm="syz.0.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff51ffe9a9 code=0x7ffc0000 [ 475.222753][ T29] audit: type=1326 audit(1753412364.264:33751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23301 comm="syz.0.6781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7eff51ffe9a9 code=0x7ffc0000 [ 475.304374][T23294] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.364061][T23294] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.441013][T23294] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.452961][T23294] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.465139][T23294] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.479121][T23294] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.507581][T23323] loop2: detected capacity change from 0 to 512 [ 475.629314][T23323] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.661237][T23323] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.6790: corrupted inode contents [ 475.673378][T23323] EXT4-fs error (device loop2): ext4_dirty_inode:6459: inode #18: comm syz.2.6790: mark_inode_dirty error [ 475.685282][T23323] EXT4-fs error (device loop2): ext4_do_update_inode:5568: inode #18: comm syz.2.6790: corrupted inode contents [ 475.706652][T23323] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2991: inode #18: comm syz.2.6790: mark_inode_dirty error [ 475.721115][T23346] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.723770][T23348] loop6: detected capacity change from 0 to 1024 [ 475.734575][T23323] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2994: inode #18: comm syz.2.6790: mark inode dirty (error -117) [ 475.738040][T23348] EXT4-fs: Ignoring removed orlov option [ 475.751642][T23323] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 475.812543][T23346] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.834365][T23356] loop2: detected capacity change from 0 to 512 [ 475.852682][T23356] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 475.887910][T23346] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.973775][T23346] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.134589][T23372] loop2: detected capacity change from 0 to 512 [ 476.154573][T23372] EXT4-fs (loop2): 1 orphan inode deleted [ 476.162547][T23372] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 476.173418][T21906] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:63: Failed to release dquot type 1 [ 476.294147][T23382] __nla_validate_parse: 11 callbacks suppressed [ 476.294166][T23382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6810'. [ 476.309416][T23382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6810'. [ 476.340414][T23372] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 476.588260][T23392] loop3: detected capacity change from 0 to 1024 [ 476.597165][T23392] EXT4-fs: Ignoring removed orlov option [ 476.630168][T23395] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6816'. [ 476.679664][T23395] loop3: detected capacity change from 0 to 128 [ 476.686358][T23395] vfat: Unknown parameter 'ÿ' [ 476.798800][T23404] bridge0: port 5(batadv0) entered blocking state [ 476.805448][T23404] bridge0: port 5(batadv0) entered disabled state [ 476.815916][T23404] batadv0: entered allmulticast mode [ 476.821963][T23404] batadv0: entered promiscuous mode [ 476.836386][T23405] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6821'. [ 476.855787][T23404] loop3: detected capacity change from 0 to 512 [ 476.877999][T23404] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 476.897574][T23404] EXT4-fs (loop3): mount failed [ 476.905113][T23404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6822'. [ 476.918923][T23404] batadv0 (unregistering): left allmulticast mode [ 476.925486][T23404] batadv0 (unregistering): left promiscuous mode [ 476.931990][T23404] bridge0: port 5(batadv0) entered disabled state [ 476.973356][T20828] EXT4-fs unmount: 86 callbacks suppressed [ 476.973375][T20828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.062715][T23418] binfmt_misc: register: failed to install interpreter file ./file0 [ 477.074800][T23420] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.162770][T23420] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.202701][T23420] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.263198][T23420] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.329383][T23420] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.358679][T23420] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.374500][T23420] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.404139][T23420] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.635157][T23439] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6833'. [ 478.098832][T23448] 9pnet_fd: Insufficient options for proto=fd [ 478.328473][T23455] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 478.337599][T23456] binfmt_misc: register: failed to install interpreter file ./file0 [ 478.374351][T23458] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 478.407522][T23460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6841'. [ 478.497242][T23467] loop3: detected capacity change from 0 to 512 [ 478.562069][T23467] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 478.665423][T23476] loop2: detected capacity change from 0 to 128 [ 478.687124][T23467] atomic_op ffff888125c02528 conn xmit_atomic 0000000000000000 [ 478.699829][T23476] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 478.721633][T23467] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.6844: Failed to acquire dquot type 0 [ 478.733497][T23467] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 478.741135][T23476] ext4 filesystem being mounted at /157/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 478.867607][T21619] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 478.927687][T21867] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.999254][T21867] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.081171][T21867] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.160100][T21867] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.201099][T23346] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.212874][T23346] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.238500][T23346] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.304201][T23346] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.376514][T21867] batadv6: left allmulticast mode [ 479.381719][T21867] batadv6: left promiscuous mode [ 479.386745][T21867] bridge0: port 7(batadv6) entered disabled state [ 479.403782][T21867] batadv4: left allmulticast mode [ 479.408869][T21867] batadv4: left promiscuous mode [ 479.413994][T21867] bridge0: port 5(batadv4) entered disabled state [ 479.441230][T21867] batadv2: left allmulticast mode [ 479.446391][T21867] batadv2: left promiscuous mode [ 479.451563][T21867] bridge0: port 4(batadv2) entered disabled state [ 479.476936][T21867] batadv1: left allmulticast mode [ 479.479385][T23497] loop5: detected capacity change from 0 to 512 [ 479.482131][T21867] batadv1: left promiscuous mode [ 479.482278][T21867] bridge0: port 3(batadv1) entered disabled state [ 479.504890][T21867] bridge_slave_1: left allmulticast mode [ 479.510632][T21867] bridge_slave_1: left promiscuous mode [ 479.516399][T21867] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.530572][T21867] bridge_slave_0: left allmulticast mode [ 479.536292][T21867] bridge_slave_0: left promiscuous mode [ 479.542148][T21867] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.554325][T23497] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 479.608783][T20828] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 479.644408][T21867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.665481][T23497] atomic_op ffff88815e88c528 conn xmit_atomic 0000000000000000 [ 479.674251][T21867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 479.693985][T23497] __quota_error: 98 callbacks suppressed [ 479.694001][T23497] Quota error (device loop5): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0 [ 479.700435][T21867] bond0 (unregistering): Released all slaves [ 479.710126][T23497] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0 [ 479.725916][T23497] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.6851: Failed to acquire dquot type 0 [ 479.729765][T21867] bond1 (unregistering): Released all slaves [ 479.746663][T21867] bond2 (unregistering): Released all slaves [ 479.756278][T23497] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 479.779229][T23507] loop2: detected capacity change from 0 to 512 [ 479.808505][T23015] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 479.820219][T23507] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 479.849708][T21867] hsr_slave_0: left promiscuous mode [ 479.860706][T21867] hsr_slave_1: left promiscuous mode [ 479.870604][T21867] veth1_macvtap: left promiscuous mode [ 479.879546][T23507] ext4 filesystem being mounted at /160/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 479.898942][T21867] veth0_macvtap: left promiscuous mode [ 479.904694][T21867] veth1_vlan: left promiscuous mode [ 479.910055][T21867] veth0_vlan: left promiscuous mode [ 479.927800][T13072] batman_adv: batadv4: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 479.956412][T20828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 479.966981][T13072] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 479.976892][T13072] batman_adv: batadv2: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 480.027774][T23521] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6857'. [ 480.125266][T21867] team0 (unregistering): Port device team_slave_1 removed [ 480.144652][T21867] team0 (unregistering): Port device team_slave_0 removed [ 480.178434][T23532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6865'. [ 480.200569][T23521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.208088][T23521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 480.220178][T23521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.227655][T23521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 480.286952][T23540] binfmt_misc: register: failed to install interpreter file ./file0 [ 480.315944][T23482] chnl_net:caif_netlink_parms(): no params data found [ 480.364724][T23482] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.371929][T23482] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.379286][T23482] bridge_slave_0: entered allmulticast mode [ 480.385686][T23482] bridge_slave_0: entered promiscuous mode [ 480.407313][T23482] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.414660][T23482] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.428146][T23482] bridge_slave_1: entered allmulticast mode [ 480.437941][T23482] bridge_slave_1: entered promiscuous mode [ 480.459733][T23482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.470731][T23482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.492743][T23482] team0: Port device team_slave_0 added [ 480.499708][T23482] team0: Port device team_slave_1 added [ 480.510152][T23555] loop3: detected capacity change from 0 to 128 [ 480.519344][T23555] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 480.531919][T23555] ext4 filesystem being mounted at /146/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 480.543244][T23482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.550220][T23482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.576306][T23482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.587760][T23482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.587962][T21619] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 480.594821][T23482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.594923][T23482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.658688][T23482] hsr_slave_0: entered promiscuous mode [ 480.664846][T23482] hsr_slave_1: entered promiscuous mode [ 480.670823][T23482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 480.678542][T23482] Cannot create hsr debugfs directory [ 480.744301][T23561] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6874'. [ 480.817648][T23571] binfmt_misc: register: failed to install interpreter file ./file0 [ 480.927332][ T29] audit: type=1326 audit(1753412370.014:33846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23576 comm="syz.2.6881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8749a8e9a9 code=0x7ffc0000 [ 480.954918][ T29] audit: type=1326 audit(1753412370.014:33847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23576 comm="syz.2.6881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8749a8e9a9 code=0x7ffc0000 [ 480.978674][ T29] audit: type=1326 audit(1753412370.014:33848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23576 comm="syz.2.6881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8749a8e9a9 code=0x7ffc0000 [ 481.002719][ T29] audit: type=1326 audit(1753412370.014:33849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23576 comm="syz.2.6881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8749a8e9a9 code=0x7ffc0000 [ 481.026626][ T29] audit: type=1326 audit(1753412370.014:33850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23576 comm="syz.2.6881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8749a8e9a9 code=0x7ffc0000 [ 481.050337][ T29] audit: type=1326 audit(1753412370.014:33851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23576 comm="syz.2.6881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f8749a8e9a9 code=0x7ffc0000 [ 481.073962][ T29] audit: type=1326 audit(1753412370.014:33852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23576 comm="syz.2.6881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8749a8e9a9 code=0x7ffc0000 [ 481.097590][ T29] audit: type=1326 audit(1753412370.014:33853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23576 comm="syz.2.6881" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8749a8e9a9 code=0x7ffc0000 [ 481.127640][T23582] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 481.137394][T21867] IPVS: stop unused estimator thread 0... [ 481.148906][T21867] ------------[ cut here ]------------ [ 481.154548][T21867] WARNING: CPU: 0 PID: 21867 at net/xfrm/xfrm_state.c:3284 xfrm_state_fini+0x17c/0x1f0 [ 481.164373][T21867] Modules linked in: [ 481.168300][T21867] CPU: 0 UID: 0 PID: 21867 Comm: kworker/u8:28 Tainted: G W 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(voluntary) [ 481.182759][T21867] Tainted: [W]=WARN [ 481.186569][T21867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 481.196941][T21867] Workqueue: netns cleanup_net [ 481.201789][T21867] RIP: 0010:xfrm_state_fini+0x17c/0x1f0 [ 481.207366][T21867] Code: 48 8d bb 70 0e 00 00 e8 b2 5f c1 fc 48 8b bb 70 0e 00 00 e8 56 c4 cd fc 5b 41 5e 41 5f 5d c3 cc cc cc cc cc e8 25 50 a7 fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 17 50 a7 fc 90 0f 0b 90 4c 89 f7 e8 7b [ 481.227162][T21867] RSP: 0018:ffffc9000159fc60 EFLAGS: 00010293 [ 481.233537][T21867] RAX: ffffffff84b053eb RBX: ffff8881092da800 RCX: ffff88811a99d140 [ 481.241632][T21867] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881092db640 [ 481.249700][T21867] RBP: ffffffff86c82460 R08: 0001ffff86848aff R09: 0000000000000000 [ 481.257965][T21867] R10: ffffc9000159fbe8 R11: 0001c9000159fbe8 R12: ffffffff86c82480 [ 481.266083][T21867] R13: ffff8881092da828 R14: ffff8881092db640 R15: ffff8881092da800 [ 481.274301][T21867] FS: 0000000000000000(0000) GS:ffff8882aee2d000(0000) knlGS:0000000000000000 [ 481.283325][T21867] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 481.290044][T21867] CR2: 0000001b3281eff8 CR3: 0000000006834000 CR4: 00000000003506f0 [ 481.298090][T21867] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 481.306201][T21867] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 481.314270][T21867] Call Trace: [ 481.317580][T21867] [ 481.320615][T21867] xfrm_net_exit+0x2d/0x60 [ 481.325125][T21867] ops_undo_list+0x27b/0x410 [ 481.329806][T21867] cleanup_net+0x2de/0x4d0 [ 481.334352][T21867] process_scheduled_works+0x4cb/0x9d0 [ 481.339938][T21867] worker_thread+0x582/0x770 [ 481.344677][T21867] kthread+0x489/0x510 [ 481.348773][T21867] ? finish_task_switch+0xad/0x2b0 [ 481.353977][T21867] ? __pfx_worker_thread+0x10/0x10 [ 481.359139][T21867] ? __pfx_kthread+0x10/0x10 [ 481.363781][T21867] ret_from_fork+0xda/0x150 [ 481.368326][T21867] ? __pfx_kthread+0x10/0x10 [ 481.371104][T23587] __nla_validate_parse: 1 callbacks suppressed [ 481.371122][T23587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6884'. [ 481.373024][T21867] ret_from_fork_asm+0x1a/0x30 [ 481.392861][T21867] [ 481.395893][T21867] ---[ end trace 0000000000000000 ]--- [ 481.485644][T23482] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 481.511849][T23482] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 481.533599][T23590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6886'. [ 481.547629][T23482] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 481.589774][T23595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6888'. [ 481.609413][T23482] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 481.711966][T23606] loop3: detected capacity change from 0 to 512 [ 481.730124][T23606] EXT4-fs: Ignoring removed orlov option [ 481.743546][T23606] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 481.755240][T23606] EXT4-fs (loop3): orphan cleanup on readonly fs [ 481.772915][T23606] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.6892: bg 0: block 248: padding at end of block bitmap is not set [ 481.789652][T23606] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.6892: Failed to acquire dquot type 1 [ 481.805809][T23611] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 481.814342][T23606] EXT4-fs (loop3): 1 truncate cleaned up [ 481.836135][T23606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 481.865243][T23482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 481.881049][T23606] EXT4-fs: Ignoring removed orlov option [ 481.885413][T23482] 8021q: adding VLAN 0 to HW filter on device team0 [ 481.886944][T23606] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 481.896804][T21891] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.909019][T21891] bridge0: port 1(bridge_slave_0) entered forwarding state [ 481.926778][T23482] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 481.937230][T23482] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 481.947972][T23606] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 481.959568][T21891] bridge0: port 2(bridge_slave_1) entered blocking state [ 481.966665][T21891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 481.991024][T23606] EXT4-fs error (device loop3): __ext4_remount:6736: comm syz.3.6892: Abort forced by user [ 482.025528][T23606] EXT4-fs (loop3): Remounting filesystem read-only [ 482.032214][T23606] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 482.041211][T23606] ext4 filesystem being remounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 482.055592][T23482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.082297][T23629] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6897'. [ 482.107184][T23606] siw: device registration error -23 [ 482.145163][T21619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.169754][T23637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6899'. [ 482.235540][T23482] veth0_vlan: entered promiscuous mode [ 482.244527][T23482] veth1_vlan: entered promiscuous mode [ 482.253268][T23651] binfmt_misc: register: failed to install interpreter file ./file0 [ 482.268829][T23482] veth0_macvtap: entered promiscuous mode [ 482.280370][T23482] veth1_macvtap: entered promiscuous mode [ 482.293118][T23482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.305168][T23482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.318798][T23482] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.327579][T23482] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.336571][T23482] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.345397][T23482] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.401761][T23664] loop2: detected capacity change from 0 to 1024 [ 482.408393][T23664] EXT4-fs: Ignoring removed orlov option [ 482.414383][T23663] 9pnet: Could not find request transport: fd0x0000000000000003 [ 482.429413][T23664] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 482.528238][T23676] bridge0: port 4(batadv0) entered blocking state [ 482.534949][T23676] bridge0: port 4(batadv0) entered disabled state [ 482.564251][T23681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6914'. [ 482.574163][T23676] batadv0: entered allmulticast mode [ 482.595679][T23676] batadv0: entered promiscuous mode [ 482.652871][T23676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6913'. [ 482.665535][T23685] binfmt_misc: register: failed to install interpreter file ./file0 [ 482.678952][T23676] batadv0 (unregistering): left allmulticast mode [ 482.685593][T23676] batadv0 (unregistering): left promiscuous mode [ 482.692035][T23676] bridge0: port 4(batadv0) entered disabled state [ 482.832057][T20828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.239429][T23709] loop2: detected capacity change from 0 to 512 [ 483.246348][T23709] EXT4-fs: Ignoring removed orlov option [ 483.257204][T23709] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 483.292641][T23709] EXT4-fs (loop2): orphan cleanup on readonly fs [ 483.299918][T23709] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.6924: bg 0: block 248: padding at end of block bitmap is not set [ 483.314767][T23709] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.6924: Failed to acquire dquot type 1 [ 483.326939][T23709] EXT4-fs (loop2): 1 truncate cleaned up [ 483.335687][T23709] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 483.349289][T23709] EXT4-fs: Ignoring removed orlov option [ 483.357262][T23709] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 483.365974][T23709] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 483.382039][T23709] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.6924: Abort forced by user [ 483.394408][T23709] EXT4-fs (loop2): Remounting filesystem read-only [ 483.401026][T23709] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 483.410722][T23709] ext4 filesystem being remounted at /176/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 483.454108][T23709] siw: device registration error -23 [ 483.533618][T20828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.536243][T23716] loop6: detected capacity change from 0 to 512 [ 483.564506][T23716] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 483.578368][T23716] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 483.599504][T23716] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #18: comm syz.6.6926: corrupted inode contents [ 483.620950][T23716] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #18: comm syz.6.6926: mark_inode_dirty error [ 483.641607][T23716] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #18: comm syz.6.6926: corrupted inode contents [ 483.655873][T23716] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2991: inode #18: comm syz.6.6926: mark_inode_dirty error [ 483.669637][T23716] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2994: inode #18: comm syz.6.6926: mark inode dirty (error -117) [ 483.684172][T23716] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 483.708247][T23482] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.806645][T23729] atomic_op ffff888138d7d928 conn xmit_atomic 0000000000000000 [ 483.814638][T23729] binfmt_misc: register: failed to install interpreter file ./file2 [ 483.857542][T23733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6933'. [ 483.889442][T23735] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6934'. [ 483.909295][T23737] binfmt_misc: register: failed to install interpreter file ./file0 [ 483.941484][T23735] loop6: detected capacity change from 0 to 128 [ 483.948014][T23735] vfat: Unknown parameter 'ÿ' [ 483.984381][T23744] bridge0: port 4(batadv0) entered blocking state [ 483.991026][T23744] bridge0: port 4(batadv0) entered disabled state [ 483.997853][T23744] batadv0: entered allmulticast mode [ 484.003894][T23744] batadv0: entered promiscuous mode [ 484.041780][T23744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6938'. [ 484.051988][T23747] loop6: detected capacity change from 0 to 128 [ 484.064441][T23747] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 484.077671][T23744] batadv0 (unregistering): left allmulticast mode [ 484.084242][T23744] batadv0 (unregistering): left promiscuous mode [ 484.090668][T23744] bridge0: port 4(batadv0) entered disabled state [ 484.091370][T23747] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 484.142542][T23482] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 484.261841][T23757] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 484.316324][T23767] binfmt_misc: register: failed to install interpreter file ./file0 [ 484.365436][T23769] loop5: detected capacity change from 0 to 512 [ 484.447291][T23769] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.467787][T23769] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 484.501479][T23776] loop6: detected capacity change from 0 to 128 [ 484.508078][T23776] vfat: Unknown parameter 'ÿ' [ 484.541540][T23769] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.6948: corrupted inode contents [ 484.554289][T23769] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #18: comm syz.5.6948: mark_inode_dirty error [ 484.638068][T23769] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.6948: corrupted inode contents [ 484.661750][T23782] bridge0: port 3(batadv1) entered blocking state [ 484.668362][T23782] bridge0: port 3(batadv1) entered disabled state [ 484.674993][T23782] batadv1: entered allmulticast mode [ 484.681601][T23769] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #18: comm syz.5.6948: mark_inode_dirty error [ 484.695732][T23769] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #18: comm syz.5.6948: mark inode dirty (error -117) [ 484.708677][T23782] batadv1: entered promiscuous mode [ 484.715823][T23769] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 484.727052][T23780] loop2: detected capacity change from 0 to 128 [ 484.743558][T23782] loop6: detected capacity change from 0 to 512 [ 484.765051][T23015] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.775480][T23780] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 484.790315][T23780] ext4 filesystem being mounted at /180/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 484.809045][T23782] __quota_error: 71 callbacks suppressed [ 484.809117][T23782] Quota error (device loop6): v2_read_file_info: Free block number 1 out of range (1, 6). [ 484.832794][T23782] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 484.848505][T20828] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 484.851555][T23782] EXT4-fs (loop6): mount failed [ 484.872738][T23788] bridge0: port 3(batadv0) entered blocking state [ 484.879355][T23788] bridge0: port 3(batadv0) entered disabled state [ 484.888010][T23788] batadv0: entered allmulticast mode [ 484.893913][T23788] batadv0: entered promiscuous mode [ 484.905553][T23782] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.913072][T23782] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.913127][T23791] loop5: detected capacity change from 0 to 512 [ 484.927022][T23782] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.934576][T23782] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.962300][T23791] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 484.978614][T23791] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 485.014258][T23791] EXT4-fs (loop5): mount failed [ 485.057794][T23788] batadv0 (unregistering): left allmulticast mode [ 485.064667][T23788] batadv0 (unregistering): left promiscuous mode [ 485.071263][T23788] bridge0: port 3(batadv0) entered disabled state [ 485.146365][T23806] binfmt_misc: register: failed to install interpreter file ./file0 [ 485.162587][T21867] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 485.171954][T21867] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 485.235463][ T29] audit: type=1326 audit(1753412374.324:33921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23809 comm="syz.3.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a35de9a9 code=0x7ffc0000 [ 485.278069][ T29] audit: type=1326 audit(1753412374.354:33922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23809 comm="syz.3.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f50a35de9a9 code=0x7ffc0000 [ 485.301826][ T29] audit: type=1326 audit(1753412374.354:33923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23809 comm="syz.3.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a35de9a9 code=0x7ffc0000 [ 485.325539][ T29] audit: type=1326 audit(1753412374.354:33924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23809 comm="syz.3.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a35de9a9 code=0x7ffc0000 [ 485.349179][ T29] audit: type=1326 audit(1753412374.354:33925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23809 comm="syz.3.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f50a35de9a9 code=0x7ffc0000 [ 485.372835][ T29] audit: type=1326 audit(1753412374.354:33926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23809 comm="syz.3.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a35de9a9 code=0x7ffc0000 [ 485.396492][ T29] audit: type=1326 audit(1753412374.354:33927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23809 comm="syz.3.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50a35de9a9 code=0x7ffc0000 [ 485.420132][ T29] audit: type=1326 audit(1753412374.354:33928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23809 comm="syz.3.6962" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f50a35dd310 code=0x7ffc0000 [ 485.486704][T23815] loop3: detected capacity change from 0 to 512 [ 485.527015][T23815] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 485.541046][T23815] ext4 filesystem being mounted at /175/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 485.554765][T23815] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.6963: corrupted inode contents [ 485.567358][T23815] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #18: comm syz.3.6963: mark_inode_dirty error [ 485.571968][T23819] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 485.579543][T23815] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.6963: corrupted inode contents [ 485.658880][T23815] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #18: comm syz.3.6963: mark_inode_dirty error [ 485.697691][T23815] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #18: comm syz.3.6963: mark inode dirty (error -117) [ 485.717949][T23815] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 485.755985][T21619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 485.858186][T23831] bridge0: port 5(batadv0) entered blocking state [ 485.864815][T23831] bridge0: port 5(batadv0) entered disabled state [ 485.871675][T23831] batadv0: entered allmulticast mode [ 485.877742][T23831] batadv0: entered promiscuous mode [ 485.903507][T23831] batadv0 (unregistering): left allmulticast mode [ 485.910067][T23831] batadv0 (unregistering): left promiscuous mode [ 485.916474][T23831] bridge0: port 5(batadv0) entered disabled state [ 486.085817][T23853] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 486.181497][T23857] loop5: detected capacity change from 0 to 128 [ 486.194417][T23857] vfat: Unknown parameter 'ÿ' [ 486.279632][T23871] bridge0: port 4(batadv0) entered blocking state [ 486.286314][T23871] bridge0: port 4(batadv0) entered disabled state [ 486.293215][T23871] batadv0: entered allmulticast mode [ 486.299259][T23871] batadv0: entered promiscuous mode [ 486.308383][T23871] batadv0 (unregistering): left allmulticast mode [ 486.314951][T23871] batadv0 (unregistering): left promiscuous mode [ 486.321435][T23871] bridge0: port 4(batadv0) entered disabled state [ 486.374876][T23877] __nla_validate_parse: 16 callbacks suppressed [ 486.374895][T23877] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6991'. [ 486.522945][T23885] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 486.537242][T23887] netlink: 48 bytes leftover after parsing attributes in process `syz.2.6996'. [ 486.601318][T23887] loop2: detected capacity change from 0 to 128 [ 486.607951][T23887] vfat: Unknown parameter 'ÿ' [ 486.709073][T23895] loop2: detected capacity change from 0 to 128 [ 486.734433][T23895] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 486.751448][T23898] loop6: detected capacity change from 0 to 1024 [ 486.759505][T23898] EXT4-fs: Ignoring removed orlov option [ 486.765565][T23895] ext4 filesystem being mounted at /195/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 486.780511][T23898] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 486.807715][T20828] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 486.857102][T23482] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.879266][T23903] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7003'. [ 486.894722][T23901] bridge0: port 4(batadv0) entered blocking state [ 486.901287][T23901] bridge0: port 4(batadv0) entered disabled state [ 486.907894][T23901] batadv0: entered allmulticast mode [ 486.914034][T23901] batadv0: entered promiscuous mode [ 486.927415][T23901] loop2: detected capacity change from 0 to 512 [ 486.982706][T23905] bridge0: port 4(batadv0) entered blocking state [ 486.989256][T23905] bridge0: port 4(batadv0) entered disabled state [ 486.997440][T23908] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7004'. [ 487.006843][T23905] batadv0: entered allmulticast mode [ 487.012745][T23905] batadv0: entered promiscuous mode [ 487.019383][T23908] batadv0 (unregistering): left allmulticast mode [ 487.025934][T23908] batadv0 (unregistering): left promiscuous mode [ 487.032397][T23908] bridge0: port 4(batadv0) entered disabled state [ 487.147587][T23913] bridge0: port 5(batadv0) entered blocking state [ 487.154366][T23913] bridge0: port 5(batadv0) entered disabled state [ 487.190686][T23913] batadv0: entered allmulticast mode [ 487.205671][T23913] batadv0: entered promiscuous mode [ 487.234515][T23913] loop3: detected capacity change from 0 to 512 [ 487.264678][T23901] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 487.281820][T23901] EXT4-fs (loop2): mount failed [ 487.293193][T23913] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 487.309504][T23913] EXT4-fs (loop3): mount failed [ 487.321920][T23901] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7002'. [ 487.332643][T23913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7007'. [ 487.353048][T23913] batadv0 (unregistering): left allmulticast mode [ 487.359506][T23913] batadv0 (unregistering): left promiscuous mode [ 487.366042][T23913] bridge0: port 5(batadv0) entered disabled state [ 487.390658][T23901] batadv0 (unregistering): left allmulticast mode [ 487.397247][T23901] batadv0 (unregistering): left promiscuous mode [ 487.403803][T23901] bridge0: port 4(batadv0) entered disabled state [ 487.411700][T21882] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 487.421185][T21882] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 487.544499][T23934] binfmt_misc: register: failed to install interpreter file ./file0 [ 487.738730][T23938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7015'. [ 487.750040][T23940] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 487.906183][T23945] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7018'. [ 487.977634][T23945] loop2: detected capacity change from 0 to 128 [ 487.984307][T23945] vfat: Unknown parameter 'ÿ' [ 488.135650][T23947] loop2: detected capacity change from 0 to 512 [ 488.151445][T23947] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 488.169365][T23947] atomic_op ffff888119d84128 conn xmit_atomic 0000000000000000 [ 488.182876][T23947] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.7019: Failed to acquire dquot type 0 [ 488.196476][T23947] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 488.250079][T20828] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 488.289097][T23954] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7023'. [ 488.367611][T23963] binfmt_misc: register: failed to install interpreter file ./file0 [ 488.420533][T23966] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7027'. [ 488.506912][T23975] loop5: detected capacity change from 0 to 512 [ 488.523676][T23971] loop6: detected capacity change from 0 to 128 [ 488.530401][T23971] vfat: Unknown parameter 'ÿ' [ 488.539764][T23975] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.555918][T23975] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 488.568898][T23975] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.7031: corrupted inode contents [ 488.584072][T23975] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #18: comm syz.5.7031: mark_inode_dirty error [ 488.598388][T23975] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.7031: corrupted inode contents [ 488.613045][T23975] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #18: comm syz.5.7031: mark_inode_dirty error [ 488.631024][T23975] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #18: comm syz.5.7031: mark inode dirty (error -117) [ 488.669601][T23975] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 488.712366][T23015] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 488.756693][T23984] loop6: detected capacity change from 0 to 1024 [ 488.782508][T23984] EXT4-fs: Ignoring removed orlov option [ 488.818006][T23984] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 488.857214][T23482] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.088262][T24003] loop6: detected capacity change from 0 to 1024 [ 489.111324][T24003] ext4: Unknown parameter 'func' [ 489.162340][T24008] bridge0: port 4(batadv0) entered blocking state [ 489.168955][T24008] bridge0: port 4(batadv0) entered disabled state [ 489.180008][T24008] batadv0: entered allmulticast mode [ 489.186204][T24008] batadv0: entered promiscuous mode [ 489.204038][T24008] batadv0 (unregistering): left allmulticast mode [ 489.210569][T24008] batadv0 (unregistering): left promiscuous mode [ 489.216976][T24008] bridge0: port 4(batadv0) entered disabled state [ 489.320165][T24011] loop2: detected capacity change from 0 to 128 [ 489.326898][T24011] vfat: Unknown parameter 'ÿ' [ 489.555372][T24022] loop2: detected capacity change from 0 to 1024 [ 489.562267][T24022] EXT4-fs: Ignoring removed orlov option [ 489.577679][T24022] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.614581][T20828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.706474][T24028] loop2: detected capacity change from 0 to 512 [ 489.715347][T24028] EXT4-fs (loop2): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 489.731330][T24028] atomic_op ffff888183fd8128 conn xmit_atomic 0000000000000000 [ 489.791390][T24028] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.7049: Failed to acquire dquot type 0 [ 489.833958][T24028] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 489.894528][T20828] EXT4-fs (loop2): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 489.917008][T24038] loop5: detected capacity change from 0 to 512 [ 489.924364][T24038] EXT4-fs: Ignoring removed orlov option [ 489.955913][T24040] loop2: detected capacity change from 0 to 512 [ 489.978562][T24038] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 489.998827][T24040] EXT4-fs: Ignoring removed orlov option [ 490.012953][T24038] EXT4-fs (loop5): orphan cleanup on readonly fs [ 490.023124][T24040] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 490.039481][T24038] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7054: bg 0: block 248: padding at end of block bitmap is not set [ 490.065766][T24040] EXT4-fs (loop2): orphan cleanup on readonly fs [ 490.078083][T24040] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7053: bg 0: block 248: padding at end of block bitmap is not set [ 490.099921][T24038] __quota_error: 252 callbacks suppressed [ 490.099940][T24038] Quota error (device loop5): write_blk: dquota write failed [ 490.113217][T24038] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 490.123241][T24038] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.7054: Failed to acquire dquot type 1 [ 490.149999][T24040] Quota error (device loop2): write_blk: dquota write failed [ 490.157499][T24040] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 490.161848][T24038] EXT4-fs (loop5): 1 truncate cleaned up [ 490.167540][T24040] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.7053: Failed to acquire dquot type 1 [ 490.194158][T24038] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 490.226897][T24038] EXT4-fs: Ignoring removed orlov option [ 490.237203][T24040] EXT4-fs (loop2): 1 truncate cleaned up [ 490.237708][T24038] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 490.278607][T24038] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 490.279178][T24040] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 490.317612][T24044] binfmt_misc: register: failed to install interpreter file ./file0 [ 490.334025][T24038] EXT4-fs error (device loop5): __ext4_remount:6736: comm syz.5.7054: Abort forced by user [ 490.356802][T24038] EXT4-fs (loop5): Remounting filesystem read-only [ 490.361581][T24047] bridge0: port 4(batadv0) entered blocking state [ 490.363459][T24038] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 490.369792][T24047] bridge0: port 4(batadv0) entered disabled state [ 490.393591][T24038] ext4 filesystem being remounted at /36/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 490.405325][T24047] batadv0: entered allmulticast mode [ 490.410935][T24040] EXT4-fs: Ignoring removed orlov option [ 490.416846][T24040] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 490.427032][T24047] batadv0: entered promiscuous mode [ 490.436254][T24040] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 490.461559][T24040] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.7053: Abort forced by user [ 490.473599][T24038] siw: device registration error -23 [ 490.480968][T24047] batadv0 (unregistering): left allmulticast mode [ 490.487524][T24047] batadv0 (unregistering): left promiscuous mode [ 490.493945][T24047] bridge0: port 4(batadv0) entered disabled state [ 490.500769][T24040] EXT4-fs (loop2): Remounting filesystem read-only [ 490.507413][T24040] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 490.518313][T24040] ext4 filesystem being remounted at /209/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 490.560284][T23015] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.581216][T24040] siw: device registration error -23 [ 490.616848][T24062] loop5: detected capacity change from 0 to 1024 [ 490.626364][T24062] EXT4-fs: Ignoring removed orlov option [ 490.635315][T24062] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.664644][T20828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.675385][T24065] atomic_op ffff8881908e7528 conn xmit_atomic 0000000000000000 [ 490.683359][T24065] binfmt_misc: register: failed to install interpreter file ./file2 [ 490.683742][T23015] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.703538][ T29] audit: type=1326 audit(1753412379.794:34175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24056 comm="syz.6.7060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88311be9a9 code=0x7ffc0000 [ 490.727252][ T29] audit: type=1326 audit(1753412379.794:34176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24056 comm="syz.6.7060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f88311be9a9 code=0x7ffc0000 [ 490.731296][T24069] loop3: detected capacity change from 0 to 128 [ 490.750881][ T29] audit: type=1326 audit(1753412379.794:34177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24056 comm="syz.6.7060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88311be9a9 code=0x7ffc0000 [ 490.780693][ T29] audit: type=1326 audit(1753412379.794:34178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24056 comm="syz.6.7060" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88311be9a9 code=0x7ffc0000 [ 490.808601][T24069] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 490.829297][T24069] ext4 filesystem being mounted at /192/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 490.882207][T21619] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 490.989705][T24090] loop2: detected capacity change from 0 to 512 [ 490.999524][T24090] EXT4-fs: Ignoring removed orlov option [ 491.008472][T24090] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 491.034775][T24090] EXT4-fs (loop2): orphan cleanup on readonly fs [ 491.051195][T24090] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7072: bg 0: block 248: padding at end of block bitmap is not set [ 491.065874][T24090] Quota error (device loop2): write_blk: dquota write failed [ 491.073389][T24090] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 491.083368][T24090] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.7072: Failed to acquire dquot type 1 [ 491.097008][T24090] EXT4-fs (loop2): 1 truncate cleaned up [ 491.105782][T24090] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 491.119854][T24090] EXT4-fs: Ignoring removed orlov option [ 491.125643][T24090] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 491.134292][T24090] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 491.152597][T24090] EXT4-fs error (device loop2): __ext4_remount:6736: comm syz.2.7072: Abort forced by user [ 491.175668][T24090] EXT4-fs (loop2): Remounting filesystem read-only [ 491.182289][T24090] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 491.226890][T24090] ext4 filesystem being remounted at /212/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 491.245514][T24090] siw: device registration error -23 [ 491.311322][T20828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.360035][T24100] loop2: detected capacity change from 0 to 1024 [ 491.377978][T24100] EXT4-fs: Ignoring removed orlov option [ 491.396028][T24100] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.430656][T24103] __nla_validate_parse: 9 callbacks suppressed [ 491.430731][T24103] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7077'. [ 491.509829][T20828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.589859][T24107] loop6: detected capacity change from 0 to 1024 [ 491.591369][T24109] loop2: detected capacity change from 0 to 128 [ 491.603324][T24107] EXT4-fs: Ignoring removed orlov option [ 491.624417][T24107] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.639437][T24109] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 491.700959][T24113] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7081'. [ 491.710146][T24109] ext4 filesystem being mounted at /215/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 491.743307][T23482] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.800175][T20828] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 491.858680][T24117] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7084'. [ 492.089555][T24129] loop2: detected capacity change from 0 to 1024 [ 492.096379][T24129] EXT4-fs: Ignoring removed orlov option [ 492.104489][T24129] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.132243][T20828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.158091][T24136] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7090'. [ 492.375157][T24148] netlink: 48 bytes leftover after parsing attributes in process `syz.2.7095'. [ 492.474145][T24148] loop2: detected capacity change from 0 to 128 [ 492.480646][T24148] vfat: Unknown parameter 'ÿ' [ 492.653301][T24152] binfmt_misc: register: failed to install interpreter file ./file0 [ 492.726719][T24156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7098'. [ 492.769341][T24159] loop2: detected capacity change from 0 to 1024 [ 492.799041][T24159] EXT4-fs: Ignoring removed orlov option [ 492.810496][T24160] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7099'. [ 492.823282][T24159] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 492.861106][T20828] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.885406][T24170] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 492.955281][T24178] binfmt_misc: register: failed to install interpreter file ./file0 [ 492.979949][T24174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7105'. [ 493.173273][T24192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7113'. [ 493.349251][T24200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7116'. [ 493.393871][T24204] loop3: detected capacity change from 0 to 128 [ 493.400488][T24204] vfat: Unknown parameter 'ÿ' [ 493.514503][T24206] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 493.550638][T24208] loop3: detected capacity change from 0 to 512 [ 493.574273][T24208] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.588839][T24208] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 493.603917][T24208] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.7119: corrupted inode contents [ 493.615983][T24208] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #18: comm syz.3.7119: mark_inode_dirty error [ 493.627553][T24208] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.7119: corrupted inode contents [ 493.639709][T24208] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #18: comm syz.3.7119: mark_inode_dirty error [ 493.651945][T24208] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #18: comm syz.3.7119: mark inode dirty (error -117) [ 493.664826][T24208] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 493.703233][T21619] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 493.763789][T24217] loop3: detected capacity change from 0 to 1024 [ 493.784787][T24217] EXT4-fs: Ignoring removed orlov option [ 493.805107][T24217] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 494.112012][T24235] loop2: detected capacity change from 0 to 128 [ 494.129289][T24235] vfat: Unknown parameter 'ÿ' [ 494.136197][T24239] loop5: detected capacity change from 0 to 512 [ 494.172575][T24239] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 494.187163][T24239] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.7131: corrupted inode contents [ 494.199675][T24239] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #18: comm syz.5.7131: mark_inode_dirty error [ 494.212547][T24239] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.7131: corrupted inode contents [ 494.224760][T24239] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #18: comm syz.5.7131: mark_inode_dirty error [ 494.240024][T24239] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #18: comm syz.5.7131: mark inode dirty (error -117) [ 494.252786][T24239] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 494.286296][T24248] loop2: detected capacity change from 0 to 128 [ 494.294674][T24248] ext4 filesystem being mounted at /235/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 494.544299][T24270] bridge0: port 4(batadv0) entered blocking state [ 494.550908][T24270] bridge0: port 4(batadv0) entered disabled state [ 494.557446][T24270] batadv0: entered allmulticast mode [ 494.563321][T24270] batadv0: entered promiscuous mode [ 494.575490][T24270] batadv0 (unregistering): left allmulticast mode [ 494.582161][T24270] batadv0 (unregistering): left promiscuous mode [ 494.588571][T24270] bridge0: port 4(batadv0) entered disabled state [ 494.646925][T24272] loop6: detected capacity change from 0 to 512 [ 494.662261][T24272] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 494.702336][T24278] loop6: detected capacity change from 0 to 512 [ 494.713594][T24278] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 494.726330][T24278] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #18: comm syz.6.7146: corrupted inode contents [ 494.744035][T24278] EXT4-fs error (device loop6): ext4_dirty_inode:6459: inode #18: comm syz.6.7146: mark_inode_dirty error [ 494.756105][T24278] EXT4-fs error (device loop6): ext4_do_update_inode:5568: inode #18: comm syz.6.7146: corrupted inode contents [ 494.768197][T24278] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2991: inode #18: comm syz.6.7146: mark_inode_dirty error [ 494.780403][T24278] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2994: inode #18: comm syz.6.7146: mark inode dirty (error -117) [ 494.793305][T24278] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 494.862510][T24290] loop6: detected capacity change from 0 to 128 [ 494.879933][T24290] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 494.955817][T24303] bridge0: port 5(batadv0) entered blocking state [ 494.962464][T24303] bridge0: port 5(batadv0) entered disabled state [ 494.968963][T24303] batadv0: entered allmulticast mode [ 494.975002][T24303] batadv0: entered promiscuous mode [ 494.985570][T24303] loop3: detected capacity change from 0 to 512 [ 495.002280][T24303] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 495.017122][T24303] EXT4-fs (loop3): mount failed [ 495.026119][T24303] batadv0 (unregistering): left allmulticast mode [ 495.032632][T24303] batadv0 (unregistering): left promiscuous mode [ 495.039212][T24303] bridge0: port 5(batadv0) entered disabled state [ 495.182393][ T29] kauditd_printk_skb: 275 callbacks suppressed [ 495.182412][ T29] audit: type=1326 audit(1753412384.274:34453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24319 comm="syz.5.7162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30de97e9a9 code=0x7ffc0000 [ 495.228321][ T29] audit: type=1326 audit(1753412384.274:34454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24319 comm="syz.5.7162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f30de97e9a9 code=0x7ffc0000 [ 495.252060][ T29] audit: type=1326 audit(1753412384.274:34455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24319 comm="syz.5.7162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30de97e9a9 code=0x7ffc0000 [ 495.259075][T24324] loop3: detected capacity change from 0 to 128 [ 495.275748][ T29] audit: type=1326 audit(1753412384.274:34456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24319 comm="syz.5.7162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30de97e9a9 code=0x7ffc0000 [ 495.275784][ T29] audit: type=1326 audit(1753412384.274:34457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24319 comm="syz.5.7162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30de97e9a9 code=0x7ffc0000 [ 495.285975][T24324] ext4 filesystem being mounted at /215/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 495.305697][ T29] audit: type=1326 audit(1753412384.274:34458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24319 comm="syz.5.7162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f30de97d310 code=0x7ffc0000 [ 495.363977][ T29] audit: type=1326 audit(1753412384.274:34459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24319 comm="syz.5.7162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f30de9801d7 code=0x7ffc0000 [ 495.387690][ T29] audit: type=1326 audit(1753412384.274:34460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24319 comm="syz.5.7162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f30de97e9a9 code=0x7ffc0000 [ 495.411230][ T29] audit: type=1326 audit(1753412384.274:34461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24319 comm="syz.5.7162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f30de9801d7 code=0x7ffc0000 [ 495.434885][ T29] audit: type=1326 audit(1753412384.274:34462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24319 comm="syz.5.7162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f30de97d60a code=0x7ffc0000 [ 495.480491][T24329] loop5: detected capacity change from 0 to 1024 [ 495.492528][T24329] ext4: Unknown parameter 'func' [ 495.508977][T24333] loop3: detected capacity change from 0 to 1024 [ 495.516184][T24333] EXT4-fs: Ignoring removed orlov option [ 495.563703][T24340] loop3: detected capacity change from 0 to 512 [ 495.585345][T24340] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 495.598024][T24340] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.7171: corrupted inode contents [ 495.613222][T24340] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #18: comm syz.3.7171: mark_inode_dirty error [ 495.625530][T24340] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #18: comm syz.3.7171: corrupted inode contents [ 495.638471][T24340] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2991: inode #18: comm syz.3.7171: mark_inode_dirty error [ 495.652210][T24340] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2994: inode #18: comm syz.3.7171: mark inode dirty (error -117) [ 495.674517][T24340] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 495.976050][T24356] loop5: detected capacity change from 0 to 512 [ 495.986685][T24356] EXT4-fs: Ignoring removed orlov option [ 495.995249][T24356] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 496.031500][T24356] EXT4-fs (loop5): orphan cleanup on readonly fs [ 496.044885][T24356] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7177: bg 0: block 248: padding at end of block bitmap is not set [ 496.059874][T24356] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.7177: Failed to acquire dquot type 1 [ 496.074484][T24356] EXT4-fs (loop5): 1 truncate cleaned up [ 496.108316][T24356] EXT4-fs: Ignoring removed orlov option [ 496.114306][T24356] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 496.122932][T24356] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 496.142956][T24356] EXT4-fs error (device loop5): __ext4_remount:6736: comm syz.5.7177: Abort forced by user [ 496.153276][T24356] EXT4-fs (loop5): Remounting filesystem read-only [ 496.159901][T24356] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 496.169958][T24356] ext4 filesystem being remounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 496.190991][T24365] loop3: detected capacity change from 0 to 1024 [ 496.197765][T24365] EXT4-fs: Ignoring removed orlov option [ 496.205839][T24356] siw: device registration error -23 [ 496.233439][T24368] loop3: detected capacity change from 0 to 512 [ 496.245073][T24368] atomic_op ffff8881177e1528 conn xmit_atomic 0000000000000000 [ 496.262843][T24368] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.7180: Failed to acquire dquot type 0 [ 496.274805][T24368] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 496.328292][T24378] loop5: detected capacity change from 0 to 512 [ 496.342700][T24378] ext4 filesystem being mounted at /63/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 496.356352][T24378] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.7185: corrupted inode contents [ 496.370182][T24378] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #18: comm syz.5.7185: mark_inode_dirty error [ 496.383822][T24378] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #18: comm syz.5.7185: corrupted inode contents [ 496.403151][T24378] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2991: inode #18: comm syz.5.7185: mark_inode_dirty error [ 496.415248][T24378] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2994: inode #18: comm syz.5.7185: mark inode dirty (error -117) [ 496.429941][T24378] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 496.494840][T24384] loop3: detected capacity change from 0 to 128 [ 496.506917][T24384] vfat: Unknown parameter 'ÿ' [ 496.527465][T24392] __nla_validate_parse: 16 callbacks suppressed [ 496.527482][T24392] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7189'. [ 496.582377][T24394] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7190'. [ 496.636057][T24399] loop3: detected capacity change from 0 to 1024 [ 496.652846][T24399] EXT4-fs: Ignoring removed orlov option [ 496.667169][T24402] binfmt_misc: register: failed to install interpreter file ./file0 [ 496.710302][T24405] loop5: detected capacity change from 0 to 512 [ 496.741504][T24405] atomic_op ffff8881509df528 conn xmit_atomic 0000000000000000 [ 496.859832][T24405] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.7194: Failed to acquire dquot type 0 [ 496.880525][T24405] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 496.939470][T24424] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.017432][T24424] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.074840][T24424] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.135090][T24424] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.206637][T24424] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.222636][T24424] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.239672][T24424] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.256057][T24424] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 497.313773][T24429] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7202'. [ 497.341517][T24435] binfmt_misc: register: failed to install interpreter file ./file0 [ 497.347576][T24433] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7203'. [ 497.389801][T24439] loop5: detected capacity change from 0 to 128 [ 497.398471][T24439] ext4 filesystem being mounted at /72/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 497.647107][T24455] netlink: 48 bytes leftover after parsing attributes in process `syz.0.7212'. [ 497.679950][T24458] loop6: detected capacity change from 0 to 512 [ 497.712796][T24458] atomic_op ffff88816a1d3928 conn xmit_atomic 0000000000000000 [ 497.731989][T24458] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.7213: Failed to acquire dquot type 0 [ 497.743929][T24458] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-5, ino=3). Please run e2fsck to fix. [ 497.803563][T24467] binfmt_misc: register: failed to install interpreter file ./file0 [ 497.846495][T24471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7218'. [ 497.874637][T24473] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7216'. [ 497.898697][T24477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7219'. [ 497.928202][T24481] loop6: detected capacity change from 0 to 1024 [ 497.934870][T24481] EXT4-fs: Ignoring removed orlov option [ 498.016484][T24481] ================================================================== [ 498.024624][T24481] BUG: KCSAN: data-race in generic_buffers_fsync_noflush / writeback_single_inode [ 498.033887][T24481] [ 498.036233][T24481] write to 0xffff88811a46ad10 of 4 bytes by task 24486 on cpu 0: [ 498.043980][T24481] writeback_single_inode+0x14a/0x3e0 [ 498.049389][T24481] sync_inode_metadata+0x5b/0x90 [ 498.054364][T24481] generic_buffers_fsync_noflush+0xd9/0x120 [ 498.060296][T24481] ext4_sync_file+0x1ab/0x690 [ 498.064999][T24481] vfs_fsync_range+0x10d/0x130 [ 498.069810][T24481] ext4_buffered_write_iter+0x34f/0x3c0 [ 498.075403][T24481] ext4_file_write_iter+0x383/0xf00 [ 498.080631][T24481] iter_file_splice_write+0x5f2/0x970 [ 498.086047][T24481] direct_splice_actor+0x156/0x2a0 [ 498.091195][T24481] splice_direct_to_actor+0x312/0x680 [ 498.096617][T24481] do_splice_direct+0xda/0x150 [ 498.101426][T24481] do_sendfile+0x380/0x650 [ 498.105875][T24481] __x64_sys_sendfile64+0x105/0x150 [ 498.111115][T24481] x64_sys_call+0xb39/0x2fb0 [ 498.115733][T24481] do_syscall_64+0xd2/0x200 [ 498.120269][T24481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.126197][T24481] [ 498.128543][T24481] read to 0xffff88811a46ad10 of 4 bytes by task 24481 on cpu 1: [ 498.136212][T24481] generic_buffers_fsync_noflush+0x80/0x120 [ 498.142149][T24481] ext4_sync_file+0x1ab/0x690 [ 498.146873][T24481] vfs_fsync_range+0x10d/0x130 [ 498.151682][T24481] ext4_buffered_write_iter+0x34f/0x3c0 [ 498.157271][T24481] ext4_file_write_iter+0x383/0xf00 [ 498.162504][T24481] iter_file_splice_write+0x5f2/0x970 [ 498.167933][T24481] direct_splice_actor+0x156/0x2a0 [ 498.173092][T24481] splice_direct_to_actor+0x312/0x680 [ 498.178502][T24481] do_splice_direct+0xda/0x150 [ 498.183309][T24481] do_sendfile+0x380/0x650 [ 498.187760][T24481] __x64_sys_sendfile64+0x105/0x150 [ 498.192981][T24481] x64_sys_call+0xb39/0x2fb0 [ 498.197600][T24481] do_syscall_64+0xd2/0x200 [ 498.202138][T24481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.208070][T24481] [ 498.210411][T24481] value changed: 0x00000038 -> 0x00000002 [ 498.216148][T24481] [ 498.218491][T24481] Reported by Kernel Concurrency Sanitizer on: [ 498.224674][T24481] CPU: 1 UID: 0 PID: 24481 Comm: syz.6.7221 Tainted: G W 6.16.0-rc7-syzkaller-00093-g94ce1ac2c9b4 #0 PREEMPT(voluntary) [ 498.238770][T24481] Tainted: [W]=WARN [ 498.242603][T24481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 498.252686][T24481] ==================================================================