last executing test programs: 5m0.712841257s ago: executing program 1 (id=1127): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f00000000c0)={0x2, 0x7, 0x8203, 0x8, 0x5, 0xefeb, 0x7, 0x8, r3}, &(0x7f0000000100)=0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f0000000280)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x1, 0x4fa, &(0x7f0000000dc0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0x1, 0x8000c61) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r8 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000005c0)="58020000140091d427323b4725458db45602117fffefd7ff81000e224e227f0000017b00090080007f000001e809000000ff0000f03ac7", 0x37}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r8, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r7]) setxattr$incfs_id(&(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000440), 0x0, 0x0, 0x2) r9 = getpid() syz_pidfd_open(r9, 0x0) capget(&(0x7f0000000080)={0x20071026, r9}, &(0x7f00000003c0)={0x5, 0x81, 0x7, 0x5, 0xf1, 0x2}) sendfile(r5, r5, 0x0, 0xfffe80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 4m59.826872849s ago: executing program 1 (id=1139): openat$ptmx(0xffffffffffffff9c, 0x0, 0x161281, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000ecff0000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x880) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) sendmmsg$inet_sctp(r1, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000002002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) 4m58.927017811s ago: executing program 1 (id=1146): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x6, 0x8, 0x8, 0x40, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='timer_start\x00', r5}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r3}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) r7 = io_uring_setup(0x2ad5, &(0x7f00000001c0)) chdir(&(0x7f0000000480)='./cgroup\x00') unshare(0x28020480) unshare(0x2e020680) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0xe6, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7102d000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) getcwd(&(0x7f0000000040)=""/91, 0x5b) close(r7) ioctl$TCSETSW2(r6, 0x5425, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32, @ANYBLOB="0c0002"], 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r9, &(0x7f0000000900)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000008c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="50010000", @ANYRES16=0x0, @ANYBLOB="000327bd7000fcdbdf251300000030000180080003000600000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f626f6e6400000008000100", @ANYRES32=0x0, @ANYBLOB="28000180140002007767310000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="080003000200000070000180140002006272696467653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000080003000300000008000100ecc2f2346c38dc589e9cdb44af85f10e1af8e77324a5a41a", @ANYRES32=0x0, @ANYBLOB="1400020069703667726574617030000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="140002006272696467655f736c6176655f31000044000180140002006c6f00000000000000000000000000001400020076657468300000000000000000000000080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="08000300000000003000018008000100", @ANYRES32=0x0, @ANYBLOB="080003000300000014000200687372300000000000000000000000000800030002000000"], 0x150}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c880) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x1) ioctl$SNDRV_TIMER_IOCTL_GINFO(r10, 0xc0f85403, &(0x7f00000019c0)={{0x1, 0x0, 0x5, 0x0, 0x8}, 0x2, 0x85, 'id0\x00', 'timer1\x00', 0x0, 0x0, 0xb9, 0x10001, 0xff}) 4m58.030995374s ago: executing program 1 (id=1157): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa00000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') r3 = open_tree(r2, &(0x7f0000000080)='\x00', 0x81901) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x444, &(0x7f0000000ac0)=ANY=[@ANYBLOB="75746638006d61703d6f983c756661703d6e6f726d616c2c6909000000f2ff00003dda5de4d586f0df206d65656b416d6f64653d3078303030303010303071303030303030302c73657373696f6e3d307830faffffff30303030303030f4e4b4f82c6d61736b3d4d4159574b50be30c8486470722677b93165cfe6f62127553b2017754598752d977369672c7063723d303030303030303030303030303030303030332c64566e745f6d6561737572652c00000000000000006bbf4d6406b59dbc529c00000000000000fada265ab14119997600a2299d2c35a2efc1bf037787a0d801f26d335ef2ba9ac2423a358ccbb776b21e1d3b", @ANYRESDEC=0x0, @ANYRES8], 0xfe, 0x68f, &(0x7f0000000c00)="$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") r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='task_newtask\x00', r5}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000030601010000000000000000000000000500010007"], 0x1c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r7) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f0000000640)={0xa4, r8, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x66, 0x2a, [@preq={0x82, 0x4c, {{0x0, 0x1, 0x0, 0x0, 0x1}, 0x9, 0x0, 0x5, @device_a, 0x130, @value=@broadcast, 0x6, 0x800, 0x4, [{{0x1}, @device_b, 0x1}, {{0x1}, @broadcast, 0x9f}, {{0x1}, @broadcast, 0x7ff}, {{0x1}, @device_b, 0x4}]}}, @link_id={0x65, 0x12, {@random="0d1051f1b423", @device_b, @broadcast}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="09828ba09282"}, @NL80211_ATTR_SSID={0x4}]}, 0xa4}, 0x1, 0x0, 0x0, 0x1}, 0x40811) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x4c, r8, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x3ff, 0x1c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x6a}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x48}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x4000001) sendmsg$NL80211_CMD_SET_CHANNEL(r3, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, 0x0, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x4000) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000d5c15cc8bfa2001600000000070200009d5210baf8ffffffb70300002b000000b704001aa77a32c6137cea1763549dde2b308d00720000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r11}, 0x10) r12 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0) faccessat(r12, &(0x7f0000000000)='./file0\x00', 0x5) mount_setattr(r3, &(0x7f0000001d80)='.\x00', 0x8000, &(0x7f0000001dc0)={0x1, 0x70, 0x20000}, 0x20) 4m57.628643617s ago: executing program 1 (id=1162): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0) 4m57.326658265s ago: executing program 1 (id=1168): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e308002", 0x1001, r2) r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) preadv(r5, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/257, 0x101}], 0x1, 0x8000, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x9, 0x8c1, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001ec0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x715a9d1e7a68469f, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x6c}}, 0x0) syz_read_part_table(0x104e, &(0x7f0000001080)="$eJzsz72pQkEUhdE9790/OzCzFUMbsBybsAhBW7MDkyNXEcVcRFgr+tjDBCd8118uNVW1nJfJYV42SRZzVEsqfZv7/zYO7f17jcfxXrvuZa1kWmeVdMk+Y+r51mcaHr09ffQ2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgR1wAAAP//nCQPXw==") bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b40)={{r7}, &(0x7f0000000ac0), 0x0}, 0x20) syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x800) 4m57.326382535s ago: executing program 32 (id=1168): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = add_key$keyring(&(0x7f0000000080), &(0x7f0000001100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000300)="300e308002", 0x1001, r2) r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) preadv(r5, &(0x7f0000000400)=[{&(0x7f00000005c0)=""/257, 0x101}], 0x1, 0x8000, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x9, 0x8c1, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r8}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001ec0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x715a9d1e7a68469f, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x6c}}, 0x0) syz_read_part_table(0x104e, &(0x7f0000001080)="$eJzsz72pQkEUhdE9790/OzCzFUMbsBybsAhBW7MDkyNXEcVcRFgr+tjDBCd8118uNVW1nJfJYV42SRZzVEsqfZv7/zYO7f17jcfxXrvuZa1kWmeVdMk+Y+r51mcaHr09ffQ2AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPgR1wAAAP//nCQPXw==") bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000b40)={{r7}, &(0x7f0000000ac0), 0x0}, 0x20) syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x800) 4.28903639s ago: executing program 5 (id=4306): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) sendmsg$SMC_PNETID_DEL(r1, 0x0, 0x0) 4.288739629s ago: executing program 5 (id=4307): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01070000000000000000200000"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 4.228442123s ago: executing program 5 (id=4310): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = socket$kcm(0x2, 0x1, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r5}, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x4a, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r4, r3}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x21, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x130, 0x12, 0x60a, 0x600, 0x202, 0x238, 0x2e8, 0x2e8, 0x238, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [0x4000000], [], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0xf9}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) 3.367706313s ago: executing program 5 (id=4318): r0 = socket$inet6(0xa, 0x80002, 0x88) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x204018, &(0x7f0000000140)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x563, &(0x7f0000000f80)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d3000000000000008000140"], 0xd4}}, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000030c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=r1, @ANYRESHEX=r3], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000840)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000240)="ad", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @private2, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1}}], 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) bind$inet6(r0, 0x0, 0x0) mmap(&(0x7f000021a000/0x3000)=nil, 0x3000, 0x2, 0x31, 0xffffffffffffffff, 0xe9683000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000100)) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYRES8=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x85, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r8}, 0x10) chown(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000d40)=[{r0, 0x0, 0x300}], 0x25, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) 2.990484555s ago: executing program 5 (id=4322): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) getuid() sendmmsg$unix(0xffffffffffffffff, &(0x7f00000055c0)=[{{0x0, 0x0, &(0x7f0000000640), 0x0, &(0x7f0000002340)=[@rights={{0x1c, 0x1, 0x1, [r2, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r2, r2, 0xffffffffffffffff, r0, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [r0, r2]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x120, 0x40841}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2000c040) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r3, &(0x7f0000002f40)=""/4084, 0xff4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000011000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000008100)=[{{&(0x7f0000000240)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="863618000000000000000100000001000000", @ANYRES32, @ANYRES32], 0x18, 0x40048c1}}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="6a7ce4543e0000000000000e000000e20f8c35df5000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000780)=ANY=[@ANYRESDEC=r6, @ANYRES32=r6, @ANYRES64], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r7}, 0x10) 2.771022688s ago: executing program 5 (id=4328): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000000)={[{@jqfmt_vfsv0}, {@errors_remount}]}, 0x1, 0x784, &(0x7f00000007c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000400)={{0x1, 0x0, 0xfffffffe}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000003800)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x5c, 0x160, 0xd0, 0x3e0, 0x1e0, 0x228, 0x25a, 0x1e0, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x1fe], 'veth0_to_batadv\x00', 'batadv_slave_0\x00', {}, {0xff}}, 0x5002, 0xa8, 0xd0, 0x52020000, {0x0, 0x6802000000000000}}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@dev, @mcast1, [], [], 'virt_wifi0\x00', 'lo\x00', {}, {}, 0x89}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYRES8=r7], 0x0) 1.414101748s ago: executing program 0 (id=4346): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = memfd_secret(0x80000) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000200)={0x1ff, 0x8}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r4, 0x0, &(0x7f00000005c0)=""/155}, 0x20) gettid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) io_setup(0x200, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1.246749127s ago: executing program 3 (id=4350): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xffffffffffffffff}, 0x13) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open$dir(&(0x7f0000000080)='./file0\x00', 0xa440, 0x82) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x1000040, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r2}}) 1.244107887s ago: executing program 4 (id=4351): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001540)=@newtfilter={0x44a8, 0x2c, 0x100, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x9}, {0x0, 0x1}, {0x1c, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x9}}, @TCA_RATE={0x6, 0x5, {0x4, 0x2}}, @filter_kind_options=@f_bpf={{0x8}, {0x32c, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x3}, {0x1c, 0x5, [{0x0, 0x2, 0xfc, 0x2}, {0x40, 0x5, 0x5, 0x5}, {0x2, 0x2, 0x81, 0x7fff}]}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x6}, @TCA_BPF_FLAGS_GEN={0x8}, @TCA_BPF_ACT={0x2ec, 0x1, [@m_tunnel_key={0x118, 0xd, 0x0, 0x0, {{0xf}, {0x70, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @private=0xa010100}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @rand_addr=' \x01\x00'}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x2c}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast2}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @empty}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}]}, {0x7c, 0x6, "c3404c3919a961208de2b2aa7182d51ab10f0a0f28b544064847560a15813cd87e836ec81648fbdb3da7ba11e449c219b8175142500f4c51fba612aade4a7712f13c0ec14ef1ac8c480a524901b309dec9ac9c1379aacacae79d3f2b8654b7fd998ce32afe2cd7d13d9f6f3f0430058d696a22c9900356f8"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_tunnel_key={0xe4, 0x5, 0x0, 0x0, {{0xf}, {0x78, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_NO_CSUM={0x5, 0xa, 0x1}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x2}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @empty}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @empty}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x4, 0x80000001, 0x7, 0x8001, 0xfffffffc}, 0x1}}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x82e}]}, {0x3f, 0x6, "95022f9388b32a0a77d46e8cbe182b1016e7b97fe2edea553a8db038db645291fdfb3c007e9716b699314bcd8e2f66ef228de40e32dbb8b5c6313b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbmod={0xec, 0x6, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @random="4d6c6a369d03"}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7, 0x7, 0x7, 0x5, 0x8}, 0x8}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}]}, {0x84, 0x6, "dd666f90365233bdc92a376c976b012f322f5449584dc13488ac363168577618aea9867c035b4ed20188b908d4d8355c2a673555279335ea574c4fce374aa261414b0a3dc5780945763711f1f87264dc428dd6ec92a56749f757ab5022e50f7e0037db0162b15a56ba0f32a760066199e1a800b7a71e83e279a5cd9668fdb28f"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x4130, 0x2, [@TCA_MATCHALL_ACT={0x23c, 0x2, [@m_vlan={0x128, 0x7, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffffe, 0x0, 0x10000004, 0x7, 0x9}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xe0}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x6a6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xfba}]}, {0xa6, 0x6, "d62740adeb27a1a4ec37d315d421b73543d391f7042be49b7ecde618f38b118d65b5862aafe788a097301f0d3de7c38f4497996f11db80164fa0402bfd540fec5b325f4ffeca4ea12d159b027bcdef222c2283af0b8dd12aadab4db09030457a8d4a3f60980f8a1c9dea3f12cfe35be8fac3c0f39e76bdbda466317a1f323577b2e3917962b78105b8c05daf6ac070a855eb5beba1a748e5e0474d91d0400bcd05d7"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_ct={0x110, 0x1e, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_CT_LABELS={0x14, 0x7, "28fe4b2b772d28fb87419b5df9da39e5"}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @multicast2}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e24}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, {0xbb, 0x6, "4ba8a94c6dab0e65b9e90105e110c698d0f2811d9b08b9e77812c00d2e9b203c6f1617d89de45aa49987b747b8f8b743abfd95685f8dad22005208aa01eed15fa534247754b6b89a63d921f9e5f5f011d17b4fb853c348a60f479c0d965ca3ee127032d48d68283c95ce680dc74c41f91f6a11791594eccf1cc6b4ad19c7bf494b687160fd09dece1a4c157b4945ff217b3ad7e90c6bafc086e3ea440a35b690d3d4498ddd459b3c2ff6287a482b4a22dc9d14530e25b6"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xf}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xfff2, 0xfff3}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0x8}}, @TCA_MATCHALL_ACT={0x3ed8, 0x2, [@m_mirred={0xb4, 0x16, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7f, 0x1, 0x8, 0x4, 0x6}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xa, 0x8, 0x0, 0x9, 0x5}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x4, 0x5, 0x9, 0x9}, 0x3}}]}, {0x28, 0x6, "d6ac8b2051d71dd3b2c430dfa9ab2d7486863ce766e4f21afd1b73829bd8a6363c46d06e"}, {0xc}, {0xc, 0x8, {0x1, 0x3d33391947f48d74}}}}, @m_bpf={0x128, 0xf, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}]}, {0xef, 0x6, "9fd839ca0ffdfc2f266db584c8b8976aa69621824fd17e9b3db23e7d3d5ea44679cf544f370804a7fe904d139a733aa4768fde53adecac965bb538ca7147e1996a5c45c81427ee40f56350a5b0a38fb6111fb1bd5629e8c7ac715c366845b41214d167f0c47f69617bfd3044aa1156632ec290aa4d440f53d3b1a912382fa2bd1f6417b63fb77901d6f3044df80ea6275d9823ac84de1d59771c8ddc32aa925596e6bac11d253c1d3429f9ad5de7f7801fc58edb9665c69dd45492008db4dd7380dd1e1ace7bffd09e6359a32783ed883172b8a91556b56c0bf3cd47c4da90712fae520c46a2843e23c7db"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_pedit={0x2c68, 0xe, 0x0, 0x0, {{0xa}, {0x2c30, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xec8, 0x4, {{{0x5, 0xf5c4, 0x10000000, 0x800, 0x2}, 0x81, 0x81, [{0x1, 0x1, 0x8, 0x4, 0x5, 0x2}, {0x3, 0x0, 0xb, 0x2, 0xffffff97, 0x5}, {0x92, 0x483c2a68, 0x7, 0x2, 0x3, 0x1}, {0xe3, 0x20000, 0xffff, 0x5, 0x9, 0x100}, {0xfffffff8, 0x8, 0x40, 0xc4, 0x703, 0x2}, {0x9, 0x0, 0x536, 0x8, 0x3}, {0xdd95, 0xd155, 0x8, 0x6, 0x80000000, 0x7}]}, [{0xc, 0xff, 0x2, 0xdd7, 0x1, 0x2789b1fa}, {0x2, 0x6, 0x6, 0xd, 0x6, 0xee}, {0x4, 0x8, 0xc9c6, 0x4, 0xf1, 0x3}, {0x4, 0x0, 0x4, 0x0, 0xfff, 0x1}, {0x401, 0x6, 0x3, 0xffffffba, 0xe78, 0x4}, {0x2, 0x8, 0x1, 0x7, 0x2, 0x8}, {0x1, 0x0, 0x6, 0x75b, 0x401}, {0x1, 0x7, 0x5, 0x0, 0x2, 0xffffffff}, {0x7ff, 0x8cd, 0x380, 0x7177, 0x56, 0xe1e}, {0x6, 0x0, 0x5dd, 0x5, 0x6, 0x9}, {0x8, 0x3, 0x2, 0x5, 0x1, 0xf}, {0x4cd, 0x6, 0x8, 0xf, 0x7, 0x7}, {0x1, 0xffff, 0x101, 0x5, 0x2, 0xa5}, {0x9, 0x3, 0x5, 0x1, 0x1ff, 0x6}, {0x2, 0x4a163496, 0xe3f, 0x1, 0x1, 0x7}, {0x7, 0xff, 0x80, 0x6, 0x8, 0x1}, {0x1, 0x3, 0xb, 0x3, 0x9, 0x6}, {0x3, 0xfffffff8, 0x100, 0x7fff, 0x6, 0x7fffffff}, {0x44, 0x0, 0x8, 0x1, 0x400, 0x1a05d587}, {0xf347, 0x6c, 0x2, 0xef, 0xfffffffc, 0x7}, {0x8, 0xa, 0x7, 0x1, 0x6, 0x8}, {0x0, 0x7fff, 0x240, 0x1, 0x80, 0x8}, {0x10e, 0x4, 0x1ff, 0x1, 0x40, 0x7cb}, {0x101, 0x81, 0xd42, 0xfffffffd, 0xaa0e, 0x3}, {0x6, 0x401, 0xfffffbff, 0x9, 0x0, 0x6}, {0x400, 0x7, 0x6, 0x7, 0x8, 0x4}, {0x8, 0x80000001, 0xd, 0x1, 0x1000, 0x1}, {0x4, 0x7, 0x80, 0x0, 0x6, 0x586}, {0x7, 0x9, 0xfffffffc, 0x0, 0x5, 0x972d}, {0x4, 0x7, 0x0, 0x306, 0xd79d, 0x2a}, {0x8, 0x8, 0xb5, 0x0, 0x5c8a219a, 0x1}, {0x6, 0x8001, 0x80, 0x8, 0x2, 0x5}, {0x4, 0x80000000, 0x9, 0x1, 0xb, 0x400}, {0x932, 0x400, 0x400, 0x4, 0x400, 0x4}, {0x200, 0x9, 0x4, 0x6, 0x10000, 0x2}, {0x1939, 0x8, 0xff, 0x4, 0xfff, 0x328}, {0xf323, 0x30, 0x4, 0x80, 0x4, 0xfffffff1}, {0x10001, 0x9, 0x8, 0x4, 0x1, 0x4c44}, {0x9, 0x8, 0x8, 0x81, 0x6, 0x1}, {0x0, 0x1, 0x80000000, 0x200, 0x0, 0x8}, {0x6a8, 0x6, 0x8, 0xdb7, 0x7fff, 0x7a05}, {0x6, 0x9, 0x5, 0xfff, 0x80, 0x8}, {0xfffff001, 0x31, 0x5, 0x2, 0x55, 0x7ff}, {0x9, 0xffff, 0xc61d, 0x9, 0x3, 0x2c74c838}, {0x10001, 0x309, 0xf, 0x3, 0x6, 0x81}, {0x40, 0x7fffffff, 0xc, 0x5, 0x2, 0x5}, {0x7ff, 0x101, 0x6, 0x0, 0x10, 0xb}, {0x0, 0x10, 0x5, 0x8306, 0x1, 0x200}, {0x9, 0x5, 0x0, 0x6887, 0xffff, 0x9}, {0x2, 0x1, 0x10000, 0x1, 0x0, 0xe4}, {0x0, 0x800, 0x200, 0xff, 0x7, 0x3}, {0x860, 0x10001, 0x2, 0xff, 0xcb, 0x2}, {0x5, 0x9, 0x3, 0x29a8, 0xcd, 0x4}, {0x7, 0x1, 0x6, 0x5, 0x400, 0x6}, {0x0, 0x2, 0x0, 0x5, 0x9, 0xa6}, {0x47a4, 0x5, 0x7f0e, 0x8, 0x0, 0x6}, {0x800080, 0xa, 0x0, 0x6, 0x9, 0x7}, {0x9, 0xd, 0x100, 0xfff, 0x3, 0x9}, {0x1, 0x1, 0xf, 0x2, 0x0, 0x17005d99}, {0x5, 0x1, 0x2, 0x4ac, 0x10, 0x4}, {0x5, 0x7, 0xa9, 0x8f, 0x2, 0x5b0d}, {0xffff, 0x4, 0xffff, 0x401, 0xa}, {0xfffffff9, 0x80000000, 0x2, 0x10000, 0xb6, 0x800}, {0x81, 0xc5e000, 0xffffffff, 0x20000, 0x3, 0x3}, {0xfff, 0x5, 0x8, 0x7f, 0x8000}, {0x0, 0x1, 0x4, 0x2, 0x0, 0xb}, {0x10, 0x401, 0x6, 0x9, 0xffce}, {0x6, 0x7, 0x0, 0x5, 0x8a05, 0x1ff}, {0x5, 0xff, 0xfff, 0xfc, 0x9, 0xe80}, {0x10000, 0x3, 0x7, 0x6, 0x5, 0x6}, {0x7a, 0xfffffc01, 0x2, 0x0, 0x7fffffff, 0x6}, {0x9, 0x0, 0x54a, 0x10, 0x4, 0x4}, {0x80000001, 0x8, 0x0, 0x3, 0x8001, 0x4}, {0x0, 0x2, 0x2, 0x101, 0x40, 0x4}, {0x1000, 0x0, 0x94, 0x0, 0xffff, 0x40}, {0x7, 0x7ff, 0x5, 0x3ff, 0x2, 0x4}, {0x7, 0xbdb, 0xbf5, 0x101, 0x9, 0x9}, {0xfff, 0x9, 0x66, 0x3, 0x3}, {0x2be5, 0x100, 0x2, 0x6, 0x1000, 0x10}, {0xffff, 0x3, 0x1, 0x7, 0x0, 0x4}, {0x4, 0x3, 0x5, 0xde, 0x0, 0xc}, {0x9, 0x10001, 0x10001, 0x7, 0x1, 0x8}, {0x51, 0x6, 0x0, 0x3, 0x7, 0x100}, {0x86, 0x0, 0x0, 0x9, 0x6, 0x37d}, {0x4, 0x92a, 0x7, 0x7, 0xbc58, 0x4e}, {0x40, 0xfffffff5, 0x7, 0xa4a, 0xfffffffa, 0xc}, {0x8, 0x0, 0x6, 0xfffffff6, 0xffff, 0x6}, {0x400, 0x100, 0x7, 0x3, 0x7, 0x100}, {0x7ff, 0x9, 0x5, 0x8, 0x5, 0x8}, {0x6b3, 0x7fff, 0x7fff, 0x8001, 0x7, 0x5}, {0xd44, 0x2, 0x6, 0x6dc, 0x3, 0x4}, {0x3, 0x8, 0xa, 0x7ff, 0xfffffff8, 0x1}, {0xbd, 0x10000, 0xe, 0x3, 0x9, 0x400}, {0x3, 0x80, 0x8aca, 0x8, 0x5}, {0xfffffffc, 0x2dee, 0x5, 0x4, 0x5f, 0x6}, {0x10001, 0xa77a, 0x3, 0x1, 0x6, 0xfb}, {0x7, 0x8, 0x7ff, 0x0, 0xfffffffc, 0xfffffff8}, {0xfff, 0x3, 0x1, 0x40, 0x4}, {0x2, 0xc08, 0xf6e6, 0x200, 0x6, 0x4}, {0x7, 0x9, 0xd, 0x9, 0x2, 0xbd0}, {0x4, 0x56, 0x1, 0x9, 0x7, 0x3}, {0x3, 0x7, 0x2, 0xb, 0x7, 0x200}, {0x4, 0x80, 0x1, 0x9, 0x1, 0x6}, {0x4, 0x200, 0x3ff, 0x6, 0x80, 0x7}, {0x8, 0x96e, 0x2df9, 0x800, 0x35, 0x2}, {0x4000, 0x8000, 0xa, 0x81, 0xca, 0x2}, {0x2, 0xa, 0x7, 0x3789, 0xbc71, 0xe}, {0xfffffffd, 0x7, 0x7, 0x6, 0x7ff, 0x9}, {0xfffffc01, 0x3, 0xfffff676, 0x5, 0x80000000, 0x8}, {0x7fffffff, 0x79, 0xb, 0x5, 0x5, 0x3}, {0x2, 0x0, 0x4773, 0x4ef, 0x1, 0x4}, {0x4, 0x6, 0x6, 0x80000001, 0xfffffffa, 0x400}, {0x1, 0x2, 0x4, 0xffff, 0x4, 0xfffffffd}, {0x4, 0x2, 0x80, 0x6, 0x1ff, 0x4}, {0x4, 0x8, 0x8, 0x9, 0x3c6, 0x80000001}, {0x10, 0x4, 0x3, 0x6, 0x0, 0x53}, {0x8, 0xa9, 0xffff, 0x1, 0x5, 0x4}, {0x100, 0xf, 0x6, 0x6, 0x3ff}, {0x38000000, 0x101, 0x3, 0x8, 0xac, 0xfffffffa}, {0x7, 0xa7, 0x4, 0x0, 0x10000, 0x6}, {0xb6, 0x9, 0x0, 0x4, 0x1, 0x6}, {0x4, 0x8000, 0xf5, 0xf3262f3, 0x6, 0x8}, {0x6, 0xff, 0x0, 0x9, 0x39, 0x1}, {0x4, 0x7ad6, 0x2, 0x8, 0x4, 0x2}, {0x2, 0x10000, 0x2, 0x800, 0xfff, 0x4}, {0x101, 0x11a, 0x8237, 0x30bd, 0xfea, 0x2}, {0x9, 0x2, 0x0, 0x0, 0xc, 0x4}, {0x7ff, 0x9, 0x8, 0xfffffff9, 0x5, 0x2}], [{0x4, 0x1}, {0x2, 0x1}, {0x4}, {0x2}, {0x7}, {0x5, 0x1}, {0x0, 0x1}, {0x6}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x2}, {0x4}, {}, {0x5}, {0x4}, {0x0, 0x1}, {0x2}, {}, {0x1, 0x1}, {0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x1}, {0x4}, {0x5}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {0x3}, {0x3}, {0x4}, {0x3}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x1, 0x1}, {0x5, 0x1}, {0x4}, {0x3}, {0x2}, {0x2}, {0x2, 0x1}, {}, {0x2, 0x1}, {0x1}, {0x4}, {0x3}, {0x0, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x3, 0x1}, {0x6}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0xd56e9274247f7652, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {0x2, 0x1}, {0x5, 0x1}, {}, {}, {}, {0x4, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x2}, {0x4, 0x89b5bf5295857828}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x40, 0x8346, 0x10000000, 0x1000, 0x3}, 0x1d, 0x81, [{0x2, 0x3863, 0x5, 0x3edc, 0x5, 0x7}]}, [{0x10, 0x100, 0xfffffc35, 0x2, 0x5bca044c, 0x5}, {0x7ff, 0x5, 0x3, 0xc, 0x8927, 0x3}, {0x5, 0x6, 0x8f, 0x3, 0x4ce, 0x1}, {0x0, 0x6, 0xfffffff1, 0x4, 0x5e02, 0x7}, {0x100, 0x3, 0x5, 0xfffffffe, 0x799b, 0x8000}, {0x0, 0x0, 0x5, 0x200, 0xfffffff7, 0x2}, {0x5, 0xa3, 0x115, 0x9, 0x3, 0x7}, {0x9, 0x26, 0x2, 0x7, 0x0, 0x55d9}, {0x3, 0x74, 0x7, 0x2, 0x101, 0xff}, {0x40, 0x0, 0x648c, 0x6, 0x40, 0x9}, {0x943, 0x0, 0x4, 0x1, 0x9, 0x1000}, {0x1, 0x0, 0x4, 0x5, 0x6, 0x4ed}, {0x9, 0x5, 0x5, 0x1, 0x3}, {0xbbb, 0xcd0, 0x5, 0x6, 0x4, 0x1}, {0x2, 0xffffffff, 0x10000000, 0x1, 0x60, 0xf}, {0x232d, 0x8, 0x4, 0x1, 0x0, 0x4}, {0xf, 0xfffffffa, 0xffff, 0x7, 0x8d4, 0x1000}, {0x4ff4, 0x9, 0x0, 0x4ce, 0x2000000, 0xd72}, {0x3, 0x5, 0xe2a2, 0xd64e, 0x7, 0x81}, {0x4, 0x8113, 0x6, 0x10000, 0x8, 0x8}, {0x7, 0x3, 0x5, 0x7fff, 0xfffffff9, 0x1}, {0x7, 0x8, 0x7, 0x2, 0xffffffff, 0x4}, {0x4, 0x9abc, 0x2, 0xe893897b, 0x2, 0x4}, {0x0, 0xd, 0x1, 0x694, 0x9, 0x2}, {0x800, 0x3, 0x541, 0x4, 0x943}, {0x9, 0x5, 0x7fffffff, 0x1, 0x1, 0x7}, {0x80, 0xa, 0x10, 0x7, 0x1, 0xc}, {0x9, 0x1, 0xc3, 0x3, 0x0, 0x3}, {0x9, 0x6, 0x2, 0x8, 0x3, 0x2}, {0xfffff8b8, 0x81, 0x9, 0xa, 0x5, 0x8000}, {0x8, 0x1ff, 0x3, 0x9, 0x8, 0xea5b}, {0x1, 0x8, 0x6, 0x10, 0x1, 0x9}, {0x80, 0x9, 0x6, 0x8001, 0x5}, {0xcd, 0x83, 0xab9, 0x5, 0x0, 0x3}, {0xffffffff, 0x1, 0x2, 0x3, 0x9, 0x6}, {0x8, 0xaa4, 0x10, 0x85d, 0x30, 0xee0}, {0xf0, 0x2, 0x3, 0xfffffffa, 0x4, 0x8}, {0x101, 0x1, 0x7, 0xfffffffc, 0x34, 0x7}, {0x2, 0xb6, 0x9, 0x9, 0x0, 0x7}, {0x9, 0x2, 0x3dd, 0x2, 0x712, 0x8000}, {0x9479, 0xffff8d84, 0xf37b, 0xffffffff, 0x171e, 0x1c1}, {0x9, 0x7f, 0x703, 0x7}, {0x1, 0x100, 0x78, 0x5, 0x0, 0x3a9}, {0x9, 0x0, 0x647d, 0x1000, 0x1000, 0x800}, {0x40, 0x6, 0x45, 0x8, 0x9, 0x2}, {0x7f, 0x9, 0xd8, 0x9, 0x8, 0x4}, {0x7, 0x5, 0x3, 0x0, 0x7fff, 0x9}, {0x1, 0x100, 0xd, 0x74, 0x3, 0xfffffffb}, {0x81, 0x7, 0x1, 0x7, 0x4, 0x10}, {0x1, 0x2, 0x3, 0x30d, 0x6, 0x6ea03d76}, {0x1ff, 0x400, 0x234, 0x8001, 0x2, 0x7fff}, {0xfffffffd, 0x7, 0x6, 0x5, 0x6, 0x65e3}, {0xff, 0x8, 0x7, 0x81, 0x7, 0x9}, {0x4, 0x8, 0x4dbc, 0x5, 0xfffffffc, 0x800}, {0x100, 0x7ff, 0x5, 0x7fffffff, 0x900, 0xfffffff8}, {0x8, 0xac3f, 0x2, 0x9, 0xfffffffd, 0x8000000}, {0x8, 0x41a, 0x5, 0x8, 0x7, 0x7ff}, {0x1f, 0xfffffffb, 0xf, 0x9, 0x70b0, 0x3ff}, {0x2, 0x9, 0x2, 0x0, 0x0, 0x81}, {0x0, 0x6, 0x4, 0x3, 0xfff, 0x3}, {0x0, 0x6, 0x9, 0x80000000, 0x1afd, 0x10000}, {0xdd, 0x6, 0x6, 0x0, 0x5, 0x2}, {0xc54, 0x5, 0x10a6, 0xf6, 0x8000, 0xb}, {0xffff, 0x2f57, 0x3, 0x77db6c25, 0x39, 0x6000}, {0x5, 0x1, 0xfffff801, 0x1, 0x0, 0x1}, {0x4044c425, 0x4c3d, 0x3c, 0x80, 0x40, 0x1}, {0x4, 0x8, 0xbda, 0xe, 0x31a0, 0x9}, {0x1, 0x3, 0xfffffff6, 0x1, 0x8, 0x4}, {0x81, 0x5, 0x6, 0x2, 0xf, 0xd}, {0x8, 0xffff, 0x660, 0x7ff, 0xfffff41b, 0x9}, {0x81, 0x4, 0x6, 0x7f, 0x61da, 0x7}, {0x5, 0x9c4, 0xffff, 0xcb3, 0x7, 0x6}, {0x7, 0x4, 0x0, 0x3, 0x9, 0xfff}, {0x2, 0x81, 0xf, 0x9, 0x3, 0x2}, {0x1, 0x6, 0x8, 0x7fffffff, 0xfffff800, 0x3}, {0x8001, 0x5, 0x5, 0x3, 0x96, 0x28}, {0x4, 0xffff12b0, 0x4, 0x192, 0x8, 0x7}, {0x100, 0x2, 0x9, 0x9, 0x1c, 0x1ff}, {0x6, 0x8001, 0x300000, 0x7, 0x80, 0x5}, {0x1, 0x40, 0x400, 0xabb, 0x6}, {0x3, 0x5, 0x7, 0xc153578e, 0x3, 0x80}, {0x2, 0x5a, 0x0, 0x8, 0x81, 0x287}, {0x80000000, 0x0, 0x9, 0x6, 0x4, 0x100}, {0x400, 0x4d5, 0x5, 0x401, 0x7f, 0x1}, {0x7, 0xb, 0x3, 0x400, 0x5, 0x101}, {0x7f, 0xb007, 0xfffffff7, 0xebaa, 0x101, 0x6}, {0xfffffff7, 0xfffffffe, 0x8, 0x8, 0x200, 0x6}, {0x3, 0x81, 0x7668c2a6, 0x5, 0x82, 0x4}, {0xffff, 0x0, 0x1, 0x1, 0x3, 0x3}, {0x3, 0x4, 0x7, 0x10000, 0x2f, 0x6}, {0x27, 0x401, 0x6d1, 0x1, 0x4, 0xad8}, {0xffff9b73, 0x8, 0x3, 0x2, 0x7f, 0x7ff}, {0x10000, 0x52e8, 0x86, 0x7fffffff, 0x0, 0x5}, {0x7ff, 0x6, 0x9, 0x81, 0x1, 0x1}, {0x7, 0x1, 0x0, 0x0, 0xff, 0xc}, {0xd0b, 0x4, 0x5, 0x9d, 0x400, 0x9}, {0x3, 0xc66, 0x7, 0x3, 0x2, 0x2}, {0x1, 0x69f, 0x268, 0xd, 0x9, 0x2}, {0x2, 0x400, 0x80f, 0xc8, 0xb, 0x2}, {0x7, 0x4, 0xf, 0x7, 0x5, 0x241}, {0x9, 0xffffffff, 0x4, 0xd, 0x5, 0x2}, {0x100, 0x1, 0x4, 0x6fb, 0x4, 0xd7}, {0xffff8001, 0xaec, 0x7, 0x0, 0x6, 0x6}, {0x8, 0xffff, 0xfff, 0x4, 0x6, 0x10}, {0x8f, 0x5, 0xc, 0x8, 0x22fa1938, 0x5}, {0x6, 0x5e63, 0x0, 0xfbe, 0x7, 0x401}, {0x9, 0x1, 0x0, 0x1, 0x8, 0x6}, {0x3, 0x7, 0x3, 0xd, 0x401, 0x1}, {0x1f, 0x200, 0xa6, 0x9, 0x61000, 0x6}, {0x9, 0x5, 0x6, 0x9, 0xad, 0x10001}, {0x1, 0xfffffffa, 0x9c, 0x8000, 0xfffffff8, 0x6}, {0x1, 0x7, 0x9, 0x1, 0xf60a}, {0x800, 0x4, 0xc0, 0x8, 0x8, 0xb}, {0x8, 0x5, 0x6, 0x0, 0x3, 0xb77}, {0x90b, 0xa, 0xb4d8, 0x800, 0x7f, 0x3}, {0x17, 0xc1, 0x3, 0x3, 0x80, 0x9}, {0x5, 0x7, 0xfff, 0x401, 0x0, 0x8}, {0x8, 0x2, 0x6, 0x8, 0x4, 0x10001}, {0x400, 0x9, 0x0, 0x5, 0xf7800000, 0x366}, {0xfff, 0x1ff, 0x6, 0x200, 0xfffffff9, 0x1}, {0x6, 0xc5, 0xce, 0x0, 0x8, 0x1}, {0x4, 0x7, 0x2, 0x80000001, 0x5, 0x52e1}, {0x1, 0xba2, 0xfffffffa, 0xd, 0xec, 0x5}, {0x5, 0x4, 0xd, 0x9, 0x4, 0x3}, {0x8ba, 0x1, 0x7, 0x6, 0x8, 0x6}, {0x2103, 0x7fff, 0x5, 0x0, 0x9, 0x2}, {0x1, 0x40, 0x1, 0x2, 0x1, 0x7}, {0x9, 0x3, 0x800, 0x4, 0x81, 0x5b}], [{0x1, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {0x3}, {0x5}, {0x4, 0x2445baca2eeeb58a}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x3, 0x1}, {0x3, 0x5e4c7a2392167a52}, {0x3}, {}, {0x3, 0x1}, {0x1, 0x1}, {}, {}, {0x2}, {0x3248226eb86ed62b, 0xb082ecde7f26d6b0}, {0x1, 0x1}, {0x3, 0x1}, {0x4}, {0x4}, {0x5}, {0x5}, {0x1}, {0x2}, {0x5}, {0x0, 0x1}, {0x2}, {0x2, 0x1}, {0x4}, {}, {0x3}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x6, 0x1}, {0x3}, {0x5}, {0xae674a5fb63944be, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x5, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {0xa}, {0x4, 0x1}, {0x7}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x3326b925ee68a80c}, {0x0, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x3}, {0x5}, {0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {}, {0x4}, {0x2}, {0x2, 0x1}, {0x3}, {}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x3, 0x1}, {0x5}, {0xa5be72ca25f374ee, 0x1}, {0x0, 0x1}, {0x1, 0x1}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x48, 0x5, 0x0, 0x1, [{0x44, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_KEYS_EX={0xac, 0x5, 0x0, 0x1, [{0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}, @TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x99e, 0x80000000, 0x4, 0x5, 0x3}, 0x45, 0x3, [{0x2, 0x0, 0xe66, 0x8, 0x7fffffff, 0xb}]}, [{0x0, 0x0, 0x5, 0x9ad, 0x2, 0x1}, {0xa, 0x35, 0xf1d, 0x7, 0x5, 0x80000000}, {0x1, 0x8000, 0x8, 0x2400000, 0xfe8, 0x2}, {0x5, 0xfffffeff, 0x3597, 0xfffffff2, 0x12e, 0x1ff}, {0x4, 0x7, 0x5, 0x95de, 0xffffffff, 0x9}, {0x2, 0x6, 0x7, 0xffff, 0x4, 0x80000001}, {0x4, 0xb, 0x6f20, 0x2, 0x6, 0x3a}, {0x47f, 0x2, 0x1, 0x3, 0x1}, {0x3, 0x2, 0xfb, 0x6d5, 0x80000001, 0x6}, {0x1, 0x5, 0x2175, 0x58d, 0x8, 0x7e}, {0x7, 0x1, 0x2, 0x42, 0xffffffff, 0xde}, {0xfa3e, 0xdf, 0x7, 0x400, 0x8, 0x800}, {0x81, 0x9, 0x2, 0x4, 0x4, 0x1}, {0x4, 0x0, 0xe0, 0x3, 0x7, 0x2}, {0x57aa, 0x6c8e3fa1, 0x1, 0x3, 0xfffff801, 0xc00000}, {0x85f9, 0x0, 0x5, 0x8, 0x8, 0x3}, {0x6, 0xfffffff9, 0x7, 0x800, 0x4d64, 0x4}, {0x7, 0x1, 0x9, 0x4, 0x5, 0x800}, {0xffff906a, 0x3, 0xa, 0x0, 0x7, 0xeda}, {0x7fffffff, 0xb, 0x2, 0x7fffffff, 0x9, 0x10}, {0x80, 0x4, 0x70, 0x7, 0x5, 0x2}, {0x6, 0x6, 0xd, 0x8, 0x0, 0x7}, {0xd, 0x1, 0x5, 0xb8c6, 0x8, 0x3af607f7}, {0x0, 0x4800000, 0x1, 0x1, 0x4, 0x9}, {0x8, 0x9, 0x7fff, 0x48, 0x8, 0x4}, {0x6, 0x6, 0x5, 0x8, 0x2, 0x8}, {0xf, 0x4972, 0x0, 0x6, 0x8, 0x2}, {0x100, 0x0, 0xfffffff8, 0xca, 0x7, 0x5}, {0x7fff, 0x978, 0x0, 0x2, 0x1, 0x1}, {0x5, 0x8dd3, 0x24, 0x3, 0x2, 0x8}, {0x3f4, 0x1, 0x8001, 0xb, 0x7, 0xe29}, {0x1cc, 0xc, 0x1, 0x8, 0xfa, 0xfff}, {0x1, 0x2, 0x9, 0x8000, 0x0, 0x4}, {0x7, 0x0, 0x3, 0x8001, 0x5, 0x8}, {0x80000000, 0x5, 0x1000, 0x4, 0x0, 0x10000}, {0xa1d9, 0x0, 0x3, 0xfff, 0xc4b5, 0x7}, {0x4, 0x200, 0x8, 0x8, 0x7, 0x9}, {0x8000, 0x8, 0xfffffffb, 0xe, 0x3, 0x4}, {0xd, 0x7, 0x9, 0x1, 0x2, 0xd}, {0x1000, 0xfffffff3, 0x0, 0x6, 0x9, 0x66b}, {0x6, 0x8, 0x3, 0x2, 0x5, 0xfffffff0}, {0x14, 0x6, 0x81, 0x8, 0x7f, 0x8001}, {0xa1f0, 0xce, 0x3, 0x5, 0xc2d, 0x147}, {0x1, 0xffff, 0x5, 0x8, 0x6791, 0x9}, {0x5, 0x0, 0x318f0e06, 0xfffffffd, 0x1, 0x8}, {0xff, 0x4, 0x6, 0x1, 0x40, 0x6}, {0xfff, 0x80000000, 0x1, 0x5, 0x1, 0x3}, {0x9, 0x3, 0x1, 0x800, 0x0, 0x8}, {0x6, 0x10000, 0xffff6a3e, 0x0, 0x1, 0x6}, {0x8848, 0x2, 0x9, 0x6, 0x6497, 0x4aa9989d}, {0x3, 0xf56, 0x7, 0x1ff, 0x94c, 0x9}, {0x9, 0x8, 0x1, 0x10, 0x3, 0x1d8}, {0x3, 0x8, 0x5, 0x9, 0xffffffff, 0x4}, {0x5, 0x8, 0xa3, 0x8, 0x8}, {0x8, 0x8, 0x7, 0x7, 0xa9f0}, {0x1000, 0x1, 0x2, 0x80000000, 0x0, 0x7}, {0xe, 0x0, 0x10c, 0x3, 0xffff694c, 0x9}, {0x8, 0x9, 0x2, 0x3, 0x2, 0xffffaa66}, {0x4, 0xc, 0xfffffff7, 0x0, 0x8, 0x6}, {0x7, 0xffffffff, 0x7, 0x5, 0x6, 0x10}, {0x1ff, 0x7fffffff, 0xfffffff8, 0x3, 0x3, 0xfffffffe}, {0x5, 0x9a, 0x1, 0x45, 0xff, 0xfffffffb}, {0x1, 0x3, 0xb43c, 0x3, 0x7f, 0x1}, {0x4, 0x8, 0x3, 0x6, 0x1, 0xfff}, {0x2, 0x7, 0xb, 0x3, 0x7, 0xfffffff8}, {0x28, 0xffffffc0, 0x8, 0x8, 0x7, 0x2}, {0x9, 0x5, 0x5, 0xcf7, 0x7, 0x7ff}, {0xd, 0x4, 0x9, 0x6, 0x2, 0x6}, {0x8, 0x0, 0x6, 0x5, 0xffff, 0x2e}, {0x6, 0x1, 0xe0, 0x5, 0x0, 0xfc}, {0xb8b6, 0x40, 0x663, 0xa2, 0x0, 0xb838}, {0x62, 0x4, 0x6, 0xcc, 0x1, 0xa}, {0x7f, 0xfa1a, 0xffffff00, 0xff, 0x0, 0x4}, {0x7, 0x2, 0x0, 0x96f7, 0x5d5, 0x7}, {0xc, 0x2, 0x40, 0x9, 0x1, 0x7}, {0x7, 0x5, 0xeb, 0x400, 0xff, 0x10001}, {0xfffff801, 0x7, 0x4, 0x7, 0x7, 0x7}, {0x1, 0xe9f2, 0x0, 0x3, 0x1a0, 0x2}, {0x0, 0xfffffff7, 0x7, 0xfffffffd, 0x7, 0x3}, {0x6, 0x3, 0x7, 0x0, 0x7, 0x98}, {0x1, 0x8, 0xfffff0fa, 0x9, 0xd, 0x1}, {0x6, 0x9, 0x0, 0x9, 0x9, 0x8}, {0x7, 0xffffff80, 0x6, 0x3, 0x0, 0xa8}, {0xafd, 0x1, 0x3735, 0x7ff, 0x200, 0x6}, {0x7, 0x2, 0x4, 0xd, 0x80, 0x7fffffff}, {0x6, 0x1, 0x5, 0x0, 0x7f, 0xfffffff9}, {0x7, 0x824, 0x7, 0x5, 0xfffffffe, 0x80008}, {0x9, 0xfffffff7, 0xffff0001, 0x200, 0x3, 0x6}, {0x1, 0x4, 0x2, 0x93, 0x800, 0x5}, {0x0, 0x1, 0x10000, 0x8, 0x44c, 0x6}, {0xffffffff, 0x8, 0x2, 0x2, 0x7c7c, 0xa}, {0x7ff, 0x6, 0x0, 0xffffffff, 0x5de, 0x8}, {0x6, 0x400000, 0x3, 0x100, 0x0, 0x3}, {0x0, 0x80, 0xffffffff, 0x0, 0x4, 0x4}, {0x8001, 0x101, 0xa, 0x6, 0x2, 0x1c3}, {0x8, 0x50b, 0x3, 0x0, 0x7f, 0x1}, {0xece, 0x9, 0x3, 0x2, 0x806, 0xa529}, {0x7, 0x345, 0x111f, 0x2, 0x0, 0x8}, {0x0, 0xfffffffa, 0x9, 0x0, 0x2, 0x2}, {0x6, 0x80, 0xfc000000, 0x3, 0x10000, 0x1}, {0x5, 0x8, 0xfffffffa, 0x8, 0x2, 0x4}, {0xffffffff, 0x9, 0x0, 0xfffffffc, 0x8, 0x4}, {0x9, 0x3, 0x9, 0x7, 0x10001, 0x4}, {0x27, 0x7, 0xbdc6, 0x1, 0x8}, {0xbd6, 0xa, 0x5, 0x10000, 0x110, 0x40}, {0x1, 0xffff, 0x0, 0x10, 0xd25, 0x7ff}, {0xffffbd08, 0xffffff02, 0xfffffffe, 0xe52, 0x8, 0x3}, {0x63fa7323, 0x3, 0x4, 0x5, 0x4, 0xfffffff9}, {0x1, 0x9, 0x4, 0xff, 0x0, 0x9a}, {0xd79, 0x5b6, 0x1, 0x4, 0x1, 0x58}, {0x9, 0x2, 0x7, 0x1, 0xf4d, 0x6}, {0xfffffff9, 0x4fc7, 0x9, 0xc, 0x26, 0x7ff}, {0xf, 0x2, 0x7, 0xa, 0x4, 0x80000001}, {0x7, 0x3f, 0x7, 0x3, 0xe, 0x9}, {0x2, 0xf, 0x6, 0x5, 0x10, 0x8}, {0x4, 0x2, 0xd3f1, 0x1, 0x950, 0xaa}, {0x5, 0x0, 0x6, 0xffff, 0x3ff, 0xfaea}, {0x8, 0x6, 0x4d4, 0x8001, 0xfffffffa, 0x5}, {0x6, 0x7, 0x4000000, 0x220000, 0x3, 0x7}, {0x1, 0x4, 0xb, 0x8, 0x8, 0x40}, {0x7, 0x3, 0x10001, 0x3, 0x10000, 0x9}, {0x8, 0x12, 0xc6, 0x2, 0xfff, 0x1feb233d}, {0x24, 0x8001, 0x4, 0x7, 0x8d5b, 0x5}, {0x1, 0x2, 0xfffff983, 0x1, 0xff, 0x7}, {0x5, 0x6, 0x2, 0xa51, 0x2, 0x10000}, {0x7fff, 0x3, 0x7, 0x20000000, 0xf1af, 0x100}, {0x0, 0x3, 0x8, 0x0, 0x9, 0x7}, {0x70000000, 0x3, 0x2, 0x9, 0x5, 0xfffff4b3}], [{0x0, 0x1}, {0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x7}, {0x3, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x1}, {0x0, 0x1}, {0x4}, {0x5}, {0x4}, {0x2, 0x1}, {0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x6}, {0x2}, {0x7}, {}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x3}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4}, {0x20b13b0361b3e953}, {}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x4}, {0x3}, {0x1, 0x1}, {0x1}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5}, {0x1}, {}, {0x1}, {}, {0x0, 0x1}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {}, {0x3, 0x1}, {0x2}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0xb4976881973670b8}, {0x1}, {0x5, 0x1}, {0x5}, {}, {0x5, 0x1}, {0xaffb665ba4feb0b5, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x0, 0x1}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x3}, {}, {0x3}, {0x5}, {0x5}, {}, {0x2}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x5, 0x1}], 0x1}}]}, {0xf, 0x6, "8467181c995eaa47b2b902"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x6c5d1f7ca3fcdf0f, 0x2}}}}, @m_ife={0xc4, 0xa, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x9}, @TCA_IFE_DMAC={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, @TCA_IFE_SMAC={0xa, 0x4, @broadcast}]}, {0x79, 0x6, "0a0085bb15875ab683727c8bf9914dc70acad7a44c6645b9494658c746f8195c49f1669c1b1ec1be8e5a8216f42fdec451fe03c5d627121c9eb86cdfec161a09f5919392a4d37937c60d128b6f5276cdb88dfb614bece07c1b5a8dba8738b1c32af2da8db199333eedcbd89e31938acd33ea1d1091"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_police={0xd70, 0x18, 0x0, 0x0, {{0xb}, {0xc64, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x75, 0x101, 0x2, 0x3, 0x8, 0x8, 0x0, 0x7ff, 0x7, 0x2, 0x7fff, 0x57, 0x1, 0x2, 0x6, 0x34, 0xc, 0x5, 0x3, 0x8, 0x1, 0x0, 0x6, 0xc5ae, 0xfffffff2, 0x7, 0x80000001, 0x3, 0x8317, 0x7ce, 0x5, 0x1, 0x8000, 0x80000000, 0x8, 0x9a7, 0x1000, 0x1ff, 0xb4f, 0x5, 0x3, 0x0, 0xc00, 0x8, 0x5, 0x4, 0xc161, 0x0, 0x6, 0x1, 0x1, 0x5, 0x9, 0x1, 0x7, 0x5, 0x7284e1fd, 0x0, 0x5, 0xfffffff8, 0x7ff, 0xc, 0xab97, 0x3, 0x5, 0x5, 0x5, 0x0, 0xffff12c1, 0x3, 0x0, 0x7, 0x7fff, 0x4, 0x7, 0xffffffff, 0x8, 0x3, 0x5, 0x9, 0xd1c8, 0xab, 0x80, 0x8, 0xfff, 0x5, 0x5, 0x7, 0x800, 0x9, 0x1, 0x242, 0xa, 0x368e623d, 0x4, 0x3, 0xffffffc0, 0x7, 0x3ff, 0x4, 0x52, 0x2, 0x4, 0x108000, 0xa, 0x9, 0xf, 0x1008, 0xd06, 0x30e0, 0xed, 0x6854, 0x3600000, 0x5, 0x36990000, 0x81, 0x6de, 0x40, 0x4, 0x5, 0x1, 0xd8, 0x5, 0x2, 0x0, 0xfc7, 0x80000000, 0x4, 0xfffffffb, 0x2cbf, 0x8, 0x7ff, 0x62c, 0xd, 0x6, 0x7, 0x960, 0x1430, 0xa93f, 0x6, 0x910, 0x50000, 0x8, 0x4, 0x800, 0x3, 0x2, 0x148, 0x0, 0x2, 0x9, 0xb, 0x8, 0x3, 0x8, 0x40, 0x39, 0x401, 0x0, 0x2, 0x0, 0x0, 0x10000, 0x6, 0x800, 0x15780, 0xfffffff7, 0x7f, 0xe512, 0x8001, 0xcf600000, 0x8, 0x1, 0x3, 0x1, 0x5, 0x1, 0x8, 0x8, 0x4, 0xb15, 0x5, 0x8, 0x411, 0x7, 0x4, 0xffff, 0x6, 0x3b, 0x1, 0x1000, 0x17a4, 0x4, 0x80000001, 0x10000, 0x1, 0x4, 0x7, 0x4, 0xffffffff, 0x7, 0x1ba, 0x7, 0x1cf5780f, 0x4, 0x7f, 0x9139, 0x8, 0x8, 0x4, 0x3, 0x3, 0x10000, 0xa, 0x1, 0x9, 0x5, 0x4000000, 0x10001, 0x5eb, 0x1, 0x7, 0x40, 0x1, 0x4, 0x6, 0x1ff, 0xfff, 0x1, 0xffff, 0x80000001, 0x9, 0x99, 0x6, 0x0, 0xfffffff7, 0x4, 0x3, 0x3088, 0x0, 0xfffffffb, 0x33, 0x1, 0x6, 0x2, 0x6, 0x8001, 0x2, 0xc5, 0x8, 0x144, 0x6, 0x8, 0x8, 0x3, 0xfffffffd]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7fffffff, 0x1, 0x7fffffff, 0x80, 0x2, 0x5, 0x401, 0xb71, 0x10, 0xe36, 0x80000000, 0x0, 0x5, 0x28, 0xc, 0x8, 0x5, 0x9, 0x3ff, 0x6, 0x1000, 0x2, 0x0, 0x80000001, 0x81, 0x9, 0x9, 0x33dd, 0x4, 0x8, 0x0, 0xb, 0x7fff, 0x8, 0x7f, 0x0, 0x2, 0x6, 0x2, 0x7fff, 0xd, 0x7, 0x5, 0x3, 0x401, 0x8, 0x180000, 0x1ff, 0x6, 0x9, 0x6, 0x1, 0x80000001, 0xe, 0x5, 0x800, 0x0, 0xffffff8b, 0xc355, 0x2, 0xff, 0x8000, 0x5, 0x7, 0xa, 0x7, 0x6a, 0x2, 0x4, 0x7, 0x4, 0x2, 0x4, 0x9, 0xff, 0xa00, 0x7, 0xff, 0x0, 0xb, 0x4, 0x6, 0x1000, 0x3, 0x401, 0xfffffffe, 0x2b8, 0x3, 0x4, 0x200, 0x6, 0x0, 0x7, 0xc, 0x3, 0x127, 0x5, 0x9, 0x4, 0x5, 0x7b3, 0x6, 0x7e1, 0x4, 0x2, 0x4, 0x9, 0x2, 0x49, 0x6, 0x6, 0x10, 0x6, 0x3, 0x499, 0x5, 0x4c7b, 0x7, 0x1, 0xffff, 0xb12f, 0x59, 0x5, 0x1, 0x5, 0x1, 0x0, 0x4, 0x200, 0x5, 0x7, 0x2, 0x8000, 0x4, 0x9, 0x7, 0x0, 0x2, 0x3, 0x2, 0x4, 0x40000000, 0x8000, 0x100, 0x4, 0x5, 0xe93b, 0xf, 0x8, 0x9, 0x8, 0x6b0fb378, 0x3, 0x40, 0x4, 0x0, 0x9, 0x401, 0x9, 0x2, 0x6, 0x9, 0x0, 0x0, 0x1, 0x3, 0x9, 0x2, 0x2, 0x91, 0x2, 0x6, 0x4, 0x7fff, 0x10, 0x0, 0x0, 0x49, 0x88a, 0x2, 0x2, 0xdc, 0x3, 0x8, 0xff, 0x81, 0x2, 0x3, 0x9, 0x22, 0x5, 0x2, 0x0, 0x8, 0xfffffffa, 0xffffffff, 0x2, 0x4, 0x8001, 0x4ffe, 0x10001, 0x8, 0xf2c, 0xfffffffe, 0x2c, 0x81, 0x6, 0x1, 0x6, 0x1, 0x100, 0x7fff, 0x3, 0x8, 0x5, 0x3, 0x5, 0x1000, 0x80000000, 0x0, 0xf4, 0xf, 0x2, 0xffff, 0x5, 0x0, 0x8, 0xfffffc4e, 0x1, 0x7, 0x27800000, 0xb204, 0x0, 0x1, 0xfff, 0x8, 0xfffffff8, 0x3, 0x3, 0x7, 0x3, 0x9, 0x7, 0x4, 0xf1, 0x2, 0x6, 0x80000000, 0x6, 0xffff, 0xd4a, 0x8, 0x7ff, 0x3, 0x4, 0x4]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x366, 0x4, 0x200, 0x3, 0x5, 0xa13a, 0x9, 0xffffffff, 0x2, 0x7, 0x918, 0x8e, 0x0, 0xffffffed, 0x2, 0xc, 0x9, 0xffffffff, 0x4, 0x7, 0x5, 0x101, 0x9, 0x80, 0x6, 0x3, 0x80000001, 0x4, 0x11ce, 0x2, 0x3, 0x4, 0x9, 0x9941, 0xba8, 0x7, 0x6, 0xeab, 0x6, 0x8, 0xc, 0xe, 0x5, 0x8, 0x10000, 0x1e47ae39, 0x2, 0xffff8001, 0x5, 0xb0, 0xfffffffb, 0x1, 0x527, 0x4, 0x4, 0x1, 0xcc, 0x2, 0x0, 0x2, 0x6, 0x800, 0x0, 0x3a2, 0x401, 0x2, 0xa7, 0x8422, 0x0, 0x3, 0x7, 0x3, 0x7, 0x1, 0xc, 0x0, 0xf, 0x43, 0x8, 0x401, 0x3, 0xff, 0xb, 0x101, 0x8, 0xa2, 0x5, 0x4, 0x4, 0x2, 0x6, 0x40, 0x472, 0x3, 0x8, 0x0, 0x0, 0x800, 0xa, 0x0, 0x6, 0x3, 0x10, 0x2, 0x4, 0x3dd, 0x6, 0x80000001, 0x3, 0x9, 0x2, 0x4, 0x6bd0, 0x1, 0x10, 0x3, 0x7, 0x3, 0x1, 0x5, 0x10000, 0x6, 0x8, 0x80, 0xfffffff7, 0x9, 0x1, 0x4, 0xc4f, 0x2, 0xffffff98, 0x0, 0x1, 0x4, 0x5, 0x0, 0x7, 0x8001, 0x4262, 0xb25, 0x4, 0x2, 0x3, 0x46bd, 0x3, 0x2, 0x4, 0xa9d6, 0xe, 0x0, 0x7fffffff, 0x200, 0xf, 0x6b, 0x8, 0x7f, 0xffffffff, 0xffffffff, 0x4, 0xffffff6f, 0x3, 0x80000000, 0x9, 0xcbd4, 0x7, 0x3, 0x7f4, 0xfffffffb, 0x6, 0x48b7, 0x9, 0x6, 0x2, 0x80000001, 0x8, 0x3, 0x5, 0x5, 0x101, 0xfffffff9, 0x0, 0x0, 0x8, 0xc, 0x15, 0x5, 0x8b5, 0x3, 0x79, 0x0, 0x7, 0x0, 0x6, 0x9, 0x9, 0x8, 0xac, 0x1, 0x6, 0x7, 0x7, 0x100, 0xfffffff9, 0xa9ed, 0x2, 0x0, 0x9, 0x3, 0x5, 0x3ff, 0x7, 0x0, 0x5, 0x4, 0x9, 0xfff, 0x7, 0x2ea, 0xfffffffe, 0xfffffffb, 0x2, 0x5, 0x4, 0x7, 0x9, 0x2, 0x8, 0x3ff, 0x5b, 0x4, 0x1, 0xf3, 0xfffffffc, 0x8, 0x7, 0xdda31e1, 0x0, 0x800, 0x2, 0x1, 0x400, 0x3, 0x2, 0x3, 0x0, 0x34e, 0x0, 0x3960654a, 0x7, 0x1, 0x3, 0x6, 0x2, 0x9, 0x72, 0x138]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_TBF={0x3c, 0x1, {0x30b4cb4b, 0x1, 0x2a, 0x80000000, 0xffffffff, {0x2, 0x2, 0x8, 0xc, 0xff, 0xd}, {0x7, 0x0, 0x3, 0x3, 0x2, 0x4}, 0x200, 0x8, 0x7fff}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}]]}, {0xe1, 0x6, "42537f5fc9a8572e880a2f69e71e2ac959aad99416117f5306cc4d80e292679b572a25b6c689695837ec99038963b5e434f1df3d1c2a21d2c83ee7d2a0af62f71e3bf4e601f42431eab030b5c9b5e075a64f5ae9d06bd8f45a8adb2df5e3f52beb91dc80b140c5a63b02ff09b4cd18f888900c278fc4f97a12f6bc22d17ebefdb98e840ee4323781e5a9eddc9f38cfa33216a099e1dbe258055e7e0e3fd3d913ecd2b450f27bb792e8e40231b9ed99b1aa9c9c265f131f74620c294bb819dfea25e53d76e2d6af112cd026f2c075d31072f1e29447d278b4996f0d68e7"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_mpls={0x12c, 0x19, 0x0, 0x0, {{0x9}, {0x50, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x80f3}, @TCA_MPLS_LABEL={0x8, 0x5, 0x244c3}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x5, 0xfffffffd, 0x0, 0x5, 0x3}, 0x2}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xa9309}, @TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_TTL={0x5, 0x7, 0x9}]}, {0xb2, 0x6, "8572cc5cb4a259c9b1cc490f258a94de498f13604a5cb8d9a8c1dafe52da82e61db9c6883879432d609f7f02458d867473888920da23c58d54321c6f26f44466257542f70c4c8005aacf540723939d2256861b871162e4150e2e2350fd0ae0a740d0ad14f4926c879a0db957b24334ef76424ef638bb42bcea3dc899a8fff11b45f20ce2165a883e3a3ed1238565c0b3769202cc535bee25e18f74108bd9b904ef1824376f165deff7fa924b6074"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_ctinfo={0x130, 0xd, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_ZONE={0x6}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x1ff}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x3d7bb47a, 0xffffffffffffffff, 0xff, 0x2}}]}, {0xd1, 0x6, "3d345774450fff59c841bf020834919245d747340dc24baea97e6465d409e150c0c8ebc888737d3c5638d3ac56997cc1e168a1063a224847c1b50a050f89b8b4863fa478461032265356b594fbb5a710ff32550f3e264f0f80ed077f3e3beaff340f442c19f2a7fc3c8fe966de59119cdbb81d62fd4491aa25c201806d7cb020a8d3979191da695277a063cedf0775d74689407229115800c4deffc51702ab03f7e5c85b08c525e44d90f6b876cdcde8f85a3ced7e35966795a371fd75b5c0daf13fc0c4ee59d614a171107d68"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x44a8}}, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 1.243382188s ago: executing program 3 (id=4352): bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000001000000000000000000018110000", @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) r1 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000280)="d2", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000380)='asymmetric\x00', &(0x7f0000000500)=@keyring={'key_or_keyring:', r2}) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r1}) timerfd_settime(0xffffffffffffffff, 0x6, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000001000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = openat$selinux_enforce(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv(r4, &(0x7f0000000580)=[{&(0x7f00000002c0)=""/8, 0x8}, {0x0}], 0x2, 0x8, 0xffffff10) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x6) unshare(0x44040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x8031, 0xffffffffffffffff, 0xc6ed4000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000005c0)={0xc4, 0x453, 0x800, 0x70bd28, 0x25dfdbff, "d348c76c755135c15c912dc518b674c1085f9736aca79f5d5606000000bf8e7d7c2507641480f6e572ffd9c6fab86ca1806f953dfa964ed5eb81c916a3cb05beef725548ffb4ab4d0000000000000015a5aa72c0577bb0d2053640330a3dddd3206d119678b62610ba40679f5227d2ea59d568c8b90994f7ab78250732930e2b21a2ccc6f81dedefa6819029308adbb60624770d3381d3c53c989d7632c2a2efa7d5398d80a3bcc857c884d90f19f91ba50eb5ce", ["", "", "", "", "", ""]}, 0xc4}, 0x1, 0x0, 0x0, 0x800}, 0x10004805) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x47, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r6}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') setpriority(0x2, 0x0, 0xffffffffffffffcc) r7 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 998.422672ms ago: executing program 3 (id=4356): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r2 = socket$inet6(0xa, 0x80003, 0xff) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) lsm_get_self_attr(0x65, 0x0, &(0x7f0000000340), 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$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") rename(0x0, 0x0) fstat(r7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x7}, 0x120, 0x5dd8, 0x1000003, 0x0, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r8, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) sendmsg$SMC_PNETID_DEL(r9, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000051411002700000000dbdf25080001e500020000000800030001000000"], 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x4004) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) 922.167736ms ago: executing program 3 (id=4358): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) 858.12271ms ago: executing program 3 (id=4359): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x2, 0x7, 0x8203, 0x8, 0x5, 0xefeb, 0x7, 0x8, r4}, &(0x7f0000000100)=0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f0000000280)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x1, 0x4fa, &(0x7f0000000dc0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x8000c61) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r9 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000005c0)="58020000140091d427323b4725458db45602117fffefd7ff81000e224e227f0000017b00090080007f000001e809000000ff0000f03ac7", 0x37}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r8]) setxattr$incfs_id(&(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000440), 0x0, 0x0, 0x2) r10 = getpid() syz_pidfd_open(r10, 0x0) capget(&(0x7f0000000080)={0x20071026, r10}, &(0x7f00000003c0)={0x5, 0x81, 0x7, 0x5, 0xf1, 0x2}) sendfile(r6, r6, 0x0, 0xfffe80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 648.298952ms ago: executing program 2 (id=4366): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYRES64=r2], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x10) sysfs$1(0x1, 0x0) 602.204605ms ago: executing program 2 (id=4367): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040200000100000022bf000000000100", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000380), 0xffffd6c0}, 0x38) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=ANY=[@ANYBLOB="000a0000000000000730000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000200000470207200000000006004dee000000000000000000000000000000000104"], 0x60) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001800ef0100000000000000000a00000000000000000000001400050000000000000000000000000000000002ed74108da6d73c4b7a20d8417d2ded4419288fec65b008d5b6193f32be"], 0x30}, 0x1, 0x11}, 0x0) 552.731658ms ago: executing program 0 (id=4368): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r2 = socket$inet6(0xa, 0x80003, 0xff) r3 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) lsm_get_self_attr(0x65, 0x0, &(0x7f0000000340), 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$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") rename(0x0, 0x0) fstat(r7, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x7}, 0x120, 0x5dd8, 0x1000003, 0x0, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r8, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) sendmsg$SMC_PNETID_DEL(r9, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r6, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000051411002700000000dbdf25080001e500020000000800030001000000"], 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x4004) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) 542.218318ms ago: executing program 2 (id=4369): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01070000000000000000200000"], 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) 519.66437ms ago: executing program 2 (id=4370): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000840)='f2fs_truncate_partial_nodes\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_io_uring_setup(0x53a3, &(0x7f00000005c0)={0x0, 0xc789, 0x10, 0x1, 0x390}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000340)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x1d69, 0x0, 0x0, 0x0, 0x0) r5 = inotify_init() inotify_add_watch(r5, 0x0, 0x8c7) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@resgid={'resgid', 0x3d, 0xee00}}, {@noload}, {@grpjquota}, {@grpjquota}, {@noinit_itable}, {@noquota}, {@usrquota}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000740)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 495.653271ms ago: executing program 0 (id=4371): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) utimensat(0xffffffffffffff9c, &(0x7f00000003c0)='.\x00', &(0x7f00000002c0)={{0x0, 0x3fffffff}}, 0x0) io_setup(0x4, &(0x7f0000000180)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r1) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x1320, 0xffffffff, 0x3, 0x5, 0x4, 0x1088f109, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'veth0_virt_wifi\x00'}}, 0x1e) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'ip6tnl0\x00'}}, 0x1e) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 390.366747ms ago: executing program 2 (id=4372): prctl$PR_SET_NAME(0xf, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x8, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, 0x0, &(0x7f0000000440)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) read(r4, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) fcntl$F_GET_FILE_RW_HINT(r5, 0x40d, &(0x7f0000000040)) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x3d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x62000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f0000001900)=""/4108, &(0x7f00000000c0), &(0x7f0000000440), 0x2, r6}, 0x38) 372.871478ms ago: executing program 4 (id=4373): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) close(0xffffffffffffffff) quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kfree\x00', r2, 0x0, 0xbed}, 0x18) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) sendto$inet6(r3, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) 351.51004ms ago: executing program 0 (id=4374): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = dup(r1) ioctl$PTP_EXTTS_REQUEST2(r2, 0x40103d0b, &(0x7f0000000000)={0x3}) 344.70247ms ago: executing program 4 (id=4375): r0 = socket(0xa, 0x3, 0x3a) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x19) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@bridge_delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0xa}, [@NDA_DST_IPV6={0xd, 0x1, @mcast1}]}, 0x30}}, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) ioctl$TCFLSH(r1, 0x40085500, 0x1000000000000001) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}, 0x0, {[0xffffffff, 0x0, 0x0, 0x7]}}, 0x5c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010100, @empty=0xe0000001}, {0x0, 0x17c1, 0x8}}}}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, 0x9, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x13e8}, @IPSET_ATTR_SKBPRIO={0x8, 0x1c, 0x1, 0x0, 0xff75}]}, @IPSET_ATTR_ADT={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x3}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x80000000}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000081}, 0x24000040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_uring_enter(r3, 0x5c63, 0xc030, 0x20, &(0x7f0000000080)={[0xdef]}, 0x8) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x40f00, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r5 = socket$can_raw(0x1d, 0x3, 0x1) close(r5) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0xffffffffffffffff}, 0x13) r8 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$pokeuser(0x6, r8, 0x358, 0xffff888237d2e180) listxattr(&(0x7f0000000a00)='./file1\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r7, 0xb) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) 278.745954ms ago: executing program 0 (id=4376): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000ecff0000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"}) r3 = syz_open_pts(r0, 0x0) dup3(r3, r0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='limits\x00') r4 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x880) bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[@ANYBLOB="1e000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000300)='4', 0x1}], 0x1) 258.616655ms ago: executing program 2 (id=4377): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000000c0)={0x2, 0x7, 0x8203, 0x8, 0x5, 0xefeb, 0x7, 0x8, r4}, &(0x7f0000000100)=0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r1}, 0x18) syz_mount_image$ext4(&(0x7f0000000d80)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x21881e, &(0x7f0000000280)={[{@mb_optimize_scan}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@stripe={'stripe', 0x3d, 0x9}}]}, 0x1, 0x4fa, &(0x7f0000000dc0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x8000c61) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r9 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f00000005c0)="58020000140091d427323b4725458db45602117fffefd7ff81000e224e227f0000017b00090080007f000001e809000000ff0000f03ac7", 0x37}], 0x1) ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r8]) setxattr$incfs_id(&(0x7f0000000200)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000440), 0x0, 0x0, 0x2) r10 = getpid() syz_pidfd_open(r10, 0x0) capget(&(0x7f0000000080)={0x20071026, r10}, &(0x7f00000003c0)={0x5, 0x81, 0x7, 0x5, 0xf1, 0x2}) sendfile(r6, r6, 0x0, 0xfffe80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 204.048798ms ago: executing program 4 (id=4378): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000700000045000000a000020095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x4c) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 147.070702ms ago: executing program 4 (id=4379): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02000000040200000100000022bf000000000100", @ANYRES32, @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000380), 0xffffd6c0}, 0x38) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000b40)=ANY=[@ANYBLOB="000a0000000000000730000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000200000470207200000000006004dee000000000000000000000000000000000104"], 0x60) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="300000001800ef0100000000000000000a00000000000000000000001400050000000000000000000000000000000002ed74108da6d73c4b7a20d8417d2ded4419288fec65b008d5b6193f32be"], 0x30}, 0x1, 0x11}, 0x0) 56.455177ms ago: executing program 4 (id=4380): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x800000000003}, 0x1320, 0xffffffff, 0x3, 0x5, 0x0, 0x1, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = io_uring_setup(0x3454, &(0x7f0000000080)={0x0, 0x8e8c, 0x18, 0x2}) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000300)={0x152624ab, 0x3, 0x6, 0x1ff, 0x7, 0x8001}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 24.929729ms ago: executing program 0 (id=4381): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) socket$inet6(0xa, 0x80003, 0xff) r2 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) lsm_get_self_attr(0x65, 0x0, &(0x7f0000000340), 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) r6 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c757466383d302c757365667265652c646973636172642c757466383d312c756e695f786c6174653d302c73686f72746e616d653d77696e39352c756e695f786c6174653d302c756e695f786c6174653d302c0008442895b66131b4e4d54b2ba6ae54dabaa5206d4a2a060b5ccc774b3ec4c81a1a9852327ff871d16d0d9344e764c68194b9d9d0be76c595bac1fc5a0a8256a7b77e071e9bdd6100f9aeb8576d329be6e4bb168f1434000000", @ANYRESHEX=0x0], 0xfd, 0x296, &(0x7f0000001080)="$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") rename(0x0, 0x0) fstat(r6, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0, 0x7}, 0x120, 0x5dd8, 0x1000003, 0x0, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$SMC_PNETID_ADD(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r7, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x40}}, 0x0) sendmsg$SMC_PNETID_DEL(r8, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000200)=ANY=[@ANYBLOB="20000000051411002700000000dbdf25080001e500020000000800030001000000"], 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x4004) connect$unix(r0, &(0x7f0000000540)=@abs={0x0, 0x0, 0x4e23}, 0x6e) 0s ago: executing program 3 (id=4382): r0 = socket$inet6(0xa, 0x80002, 0x88) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x204018, &(0x7f0000000140)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x563, &(0x7f0000000f80)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000004c000000050a01020000100000000000010020000c00024000000000000000010900010073797a310000000020000480140003006e657464657673696d3000000000000008000140"], 0xd4}}, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000030c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=r1, @ANYRESHEX=r3], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000840)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c, &(0x7f0000001900)=[{&(0x7f0000000240)="ad", 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x1, @private2, 0x1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000800)=',', 0x1}], 0x1}}], 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8447000b4e230f00000000a2bc5603ca00000f7f89004e00200000000101ff05c00e03000200000000000100000000005839c97b910000", 0x48}], 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) bind$inet6(r0, 0x0, 0x0) mmap(&(0x7f000021a000/0x3000)=nil, 0x3000, 0x2, 0x31, 0xffffffffffffffff, 0xe9683000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000100)) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SET_NAME(0xf, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYRES8=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x85, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r8}, 0x10) chown(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) ppoll(&(0x7f0000000d40)=[{r0, 0x0, 0x300}], 0x25, &(0x7f0000000300)={0x0, 0x3938700}, 0x0, 0x0) kernel console output (not intermixed with test programs): change from 0 to 2048 [ 409.226248][T16658] FAT-fs (loop5): error, clusters badly computed (2 != 1) [ 409.250831][T16658] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=16658 comm=syz.5.3861 [ 409.277737][T16662] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 409.290266][T16663] loop4: detected capacity change from 0 to 8192 [ 409.397849][T16663] loop4: p1 p2 [ 409.406587][T16663] loop4: p2 start 65535 is beyond EOD, truncated [ 409.556374][T16674] xt_CT: No such helper "snmp" [ 409.571640][T16674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.580183][T16674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.645115][T16480] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 409.662996][T16480] EXT4-fs (loop2): Remounting filesystem read-only [ 409.729228][T16678] bridge_slave_0: left allmulticast mode [ 409.734943][T16678] bridge_slave_0: left promiscuous mode [ 409.740795][T16678] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.760783][T16678] bridge_slave_1: left allmulticast mode [ 409.766622][T16678] bridge_slave_1: left promiscuous mode [ 409.772439][T16678] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.790043][T16678] bond0: (slave bond_slave_0): Releasing backup interface [ 409.811088][T16681] loop3: detected capacity change from 0 to 512 [ 409.822893][T16682] loop5: detected capacity change from 0 to 512 [ 409.852601][T16681] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 409.863273][T16681] EXT4-fs (loop3): orphan cleanup on readonly fs [ 409.870705][T16681] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3869: bg 0: block 248: padding at end of block bitmap is not set [ 409.887706][T16681] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.3869: Failed to acquire dquot type 1 [ 409.899696][T16681] EXT4-fs (loop3): 1 truncate cleaned up [ 409.908828][T16681] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 409.927648][T16681] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 409.950713][T16681] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 409.960593][T16678] bond0: (slave bond_slave_1): Releasing backup interface [ 409.970636][T16682] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 409.998915][T16678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.006401][T16678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.016120][T16681] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 410.028544][T16678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.036074][T16678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.078573][T16682] lo speed is unknown, defaulting to 1000 [ 410.092667][T14549] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.209722][T16692] netlink: 'syz.4.3871': attribute type 3 has an invalid length. [ 410.219288][T16688] netlink: 180900 bytes leftover after parsing attributes in process `wg1'. [ 410.228400][T16688] net_ratelimit: 28 callbacks suppressed [ 410.228415][T16688] netlink: zone id is out of range [ 410.239305][T16688] netlink: zone id is out of range [ 410.240635][T16688] netlink: zone id is out of range [ 410.251850][T16688] netlink: zone id is out of range [ 410.258562][T16688] netlink: zone id is out of range [ 410.266413][T16688] netlink: zone id is out of range [ 410.275046][T16694] loop4: detected capacity change from 0 to 512 [ 410.281708][T16694] EXT4-fs: Ignoring removed nobh option [ 410.287783][T16688] netlink: zone id is out of range [ 410.292973][T16688] netlink: zone id is out of range [ 410.298540][T16688] netlink: zone id is out of range [ 410.298892][ T6918] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.307411][T16688] netlink: set zone limit has 8 unknown bytes [ 410.349066][T16694] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #3: comm syz.4.3872: corrupted inode contents [ 410.370600][T16700] loop3: detected capacity change from 0 to 164 [ 410.372864][T16694] EXT4-fs (loop4): Remounting filesystem read-only [ 410.387035][T16694] EXT4-fs (loop4): 1 truncate cleaned up [ 410.393198][T16694] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 410.406405][T16694] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 410.413533][T16694] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.423804][T16700] ISOFS: unable to read i-node block [ 410.429168][T16700] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 410.656272][T16718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.664816][T16718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.788759][T14178] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.841601][ T3376] kernel write not supported for file bpf-prog (pid: 3376 comm: kworker/0:4) [ 410.889835][T16733] program syz.2.3886 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 411.002776][T16741] loop4: detected capacity change from 0 to 512 [ 411.027390][T16741] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 411.042599][T16741] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.3891: corrupted inode contents [ 411.054751][T16741] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #2: comm syz.4.3891: mark_inode_dirty error [ 411.066385][T16741] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.3891: corrupted inode contents [ 411.078946][T16741] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.3891: mark_inode_dirty error [ 411.101857][T12073] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.236426][T16749] lo speed is unknown, defaulting to 1000 [ 411.338890][T16749] netlink: 'syz.4.3892': attribute type 13 has an invalid length. [ 411.363430][T16749] SET target dimension over the limit! [ 411.434411][T16753] netlink: 180900 bytes leftover after parsing attributes in process `wg1'. [ 411.481329][ T3526] kernel write not supported for file bpf-prog (pid: 3526 comm: kworker/1:7) [ 411.514483][T16761] loop3: detected capacity change from 0 to 2048 [ 411.529502][T16761] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 411.554824][T16764] loop5: detected capacity change from 0 to 512 [ 411.564454][T16764] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 411.582846][T16764] EXT4-fs (loop5): orphan cleanup on readonly fs [ 411.591002][T16764] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.3898: bg 0: block 248: padding at end of block bitmap is not set [ 411.609751][T16480] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 411.626754][T16764] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.3898: Failed to acquire dquot type 1 [ 411.639141][T16764] EXT4-fs (loop5): 1 truncate cleaned up [ 411.640241][T16480] EXT4-fs (loop0): Remounting filesystem read-only [ 411.660670][T16764] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 411.676786][T16764] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 411.685628][T16764] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 411.772980][T16771] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.781483][T16771] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.910384][T16764] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 412.090390][ T6918] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.254216][T16787] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3904'. [ 412.469063][T12434] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 412.549213][T16790] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3906'. [ 412.583464][T16790] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3906'. [ 412.792800][T16795] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.3907'. [ 412.927322][T16801] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3909'. [ 412.945272][T16801] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3909'. [ 413.027341][T16803] loop4: detected capacity change from 0 to 512 [ 413.106866][T16803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 413.145222][T16803] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.3910: corrupted inode contents [ 413.173860][T16803] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #2: comm syz.4.3910: mark_inode_dirty error [ 413.218906][T16803] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.3910: corrupted inode contents [ 413.250097][T16803] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.3910: mark_inode_dirty error [ 413.326660][ T29] kauditd_printk_skb: 569 callbacks suppressed [ 413.326677][ T29] audit: type=1400 audit(413.368:24866): avc: denied { create } for pid=16802 comm="syz.4.3910" name="cpu.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 413.392450][T12073] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 413.422814][ T29] audit: type=1400 audit(413.398:24867): avc: denied { read append open } for pid=16802 comm="syz.4.3910" path="/296/bus/cpu.stat" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 413.446410][ T29] audit: type=1400 audit(413.398:24868): avc: denied { ioctl } for pid=16802 comm="syz.4.3910" path="/296/bus/cpu.stat" dev="loop4" ino=18 ioctlcmd=0x583b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 413.470868][ T29] audit: type=1400 audit(413.418:24869): avc: denied { create } for pid=16812 comm="syz.0.3913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 413.490298][ T29] audit: type=1400 audit(413.418:24870): avc: denied { getopt } for pid=16812 comm="syz.0.3913" lport=51 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 413.510229][ T29] audit: type=1400 audit(413.438:24871): avc: denied { setopt } for pid=16812 comm="syz.0.3913" lport=51 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 413.578610][ T29] audit: type=1400 audit(413.588:24872): avc: denied { write } for pid=16814 comm="syz.0.3915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 413.597603][ T29] audit: type=1400 audit(413.588:24873): avc: denied { create } for pid=16814 comm="syz.0.3915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 413.616592][ T29] audit: type=1400 audit(413.598:24874): avc: denied { bind } for pid=16814 comm="syz.0.3915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 413.803642][T16817] loop0: detected capacity change from 0 to 2048 [ 413.827080][T16817] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.889665][ T29] audit: type=1400 audit(413.888:24875): avc: denied { execmem } for pid=16816 comm="syz.0.3916" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 413.954206][T16823] loop2: detected capacity change from 0 to 512 [ 413.966310][T16821] lo speed is unknown, defaulting to 1000 [ 413.974058][T16823] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 413.996484][T16823] EXT4-fs (loop2): orphan cleanup on readonly fs [ 414.008611][T16823] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3918: bg 0: block 248: padding at end of block bitmap is not set [ 414.052398][T16823] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.3918: Failed to acquire dquot type 1 [ 414.067457][T16823] EXT4-fs (loop2): 1 truncate cleaned up [ 414.075609][T16823] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 414.123604][T16833] program syz.4.3919 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 414.134518][T16823] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 414.143347][T16823] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 414.157756][T16831] xt_CT: No such helper "snmp" [ 414.185664][T16834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.194226][T16834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.207568][T16821] siw: device registration error -23 [ 414.217614][T16823] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 414.280850][T14178] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.428628][T16844] lo speed is unknown, defaulting to 1000 [ 414.555637][T16849] loop2: detected capacity change from 0 to 512 [ 414.563178][T14549] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.589026][T16849] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 414.623571][T16844] siw: device registration error -23 [ 414.760805][T16849] program syz.2.3924 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 415.003863][T16862] netlink: 'syz.5.3929': attribute type 3 has an invalid length. [ 415.058560][T16864] loop3: detected capacity change from 0 to 512 [ 415.069928][T16864] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 415.101112][T16867] loop5: detected capacity change from 0 to 512 [ 415.120655][T16869] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3927'. [ 415.149148][T16864] EXT4-fs (loop3): orphan cleanup on readonly fs [ 415.171053][T16864] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.3930: bg 0: block 248: padding at end of block bitmap is not set [ 415.211401][T16864] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.3930: Failed to acquire dquot type 1 [ 415.227813][T16864] EXT4-fs (loop3): 1 truncate cleaned up [ 415.244519][T16864] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 415.281518][T16867] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.3931: corrupted inode contents [ 415.310261][T16864] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 415.319217][T16864] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 415.332313][T16867] EXT4-fs error (device loop5): ext4_dirty_inode:6042: inode #2: comm syz.5.3931: mark_inode_dirty error [ 415.344462][T16867] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.3931: corrupted inode contents [ 415.357580][T16864] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 415.368966][T16480] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 415.387671][T16867] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.3931: mark_inode_dirty error [ 415.389450][T16480] EXT4-fs (loop0): Remounting filesystem read-only [ 415.570050][T16876] loop3: detected capacity change from 0 to 512 [ 415.583643][T16874] loop2: detected capacity change from 0 to 512 [ 415.603183][T16876] EXT4-fs: Ignoring removed nobh option [ 415.762102][T16874] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 415.800746][T16883] IPv6: NLM_F_REPLACE set, but no existing node found! [ 415.863551][T16874] EXT4-fs (loop2): orphan cleanup on readonly fs [ 415.873039][T16876] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #3: comm syz.3.3933: corrupted inode contents [ 415.892438][T16874] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3932: bg 0: block 248: padding at end of block bitmap is not set [ 415.916464][T16876] EXT4-fs (loop3): Remounting filesystem read-only [ 415.930036][T16876] EXT4-fs (loop3): 1 truncate cleaned up [ 415.937701][T16874] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.3932: Failed to acquire dquot type 1 [ 415.954831][T16876] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 415.978963][T16874] EXT4-fs (loop2): 1 truncate cleaned up [ 415.990562][T16885] netlink: 180900 bytes leftover after parsing attributes in process `wg1'. [ 416.002127][T16885] net_ratelimit: 21 callbacks suppressed [ 416.002141][T16885] netlink: zone id is out of range [ 416.013632][T16885] netlink: zone id is out of range [ 416.023065][T16874] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 416.032106][T16874] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 416.043970][T16885] netlink: zone id is out of range [ 416.049491][T16874] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 416.061581][T16885] netlink: zone id is out of range [ 416.069887][T16885] netlink: zone id is out of range [ 416.082274][T16885] netlink: zone id is out of range [ 416.092565][T16885] netlink: zone id is out of range [ 416.101374][T16885] netlink: zone id is out of range [ 416.106622][T16885] netlink: zone id is out of range [ 416.116531][T16885] netlink: set zone limit has 8 unknown bytes [ 416.241913][T16893] program syz.5.3938 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 416.933155][T16909] loop3: detected capacity change from 0 to 512 [ 416.961753][T16909] program syz.3.3942 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 416.998652][T16913] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3944'. [ 417.041788][T16913] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3944'. [ 417.111987][T16917] IPv6: NLM_F_REPLACE set, but no existing node found! [ 417.241168][T16923] netlink: 180900 bytes leftover after parsing attributes in process `wg1'. [ 417.314206][T16928] 9pnet_fd: Insufficient options for proto=fd [ 417.370472][T16929] lo speed is unknown, defaulting to 1000 [ 417.423015][T16926] netlink: 'syz.5.3946': attribute type 13 has an invalid length. [ 417.481480][T16932] loop2: detected capacity change from 0 to 512 [ 417.492247][T16930] SET target dimension over the limit! [ 417.509708][T16932] EXT4-fs: Ignoring removed nobh option [ 417.552188][T16932] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #3: comm syz.2.3950: corrupted inode contents [ 417.609974][T16932] EXT4-fs (loop2): Remounting filesystem read-only [ 417.627800][T16932] EXT4-fs (loop2): 1 truncate cleaned up [ 417.650361][T16932] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 417.856643][T16951] program syz.3.3956 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 418.016882][T16957] loop2: detected capacity change from 0 to 512 [ 418.052105][T16957] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 418.084058][T16957] EXT4-fs (loop2): orphan cleanup on readonly fs [ 418.096812][T16957] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3958: bg 0: block 248: padding at end of block bitmap is not set [ 418.128143][T16966] loop0: detected capacity change from 0 to 512 [ 418.139235][T16962] 9pnet_fd: Insufficient options for proto=fd [ 418.150422][T16957] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.3958: Failed to acquire dquot type 1 [ 418.163307][T16957] EXT4-fs (loop2): 1 truncate cleaned up [ 418.172816][T16957] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 418.182345][T16957] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 418.185663][T16966] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #2: comm syz.0.3961: corrupted inode contents [ 418.258383][T16972] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3962'. [ 418.306584][T16973] lo speed is unknown, defaulting to 1000 [ 418.368250][T16974] SET target dimension over the limit! [ 418.394582][T16957] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 418.428556][T16966] EXT4-fs error (device loop0): ext4_dirty_inode:6042: inode #2: comm syz.0.3961: mark_inode_dirty error [ 418.526321][ T29] kauditd_printk_skb: 438 callbacks suppressed [ 418.526336][ T29] audit: type=1326 audit(418.568:25302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16956 comm="syz.2.3958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2ade4aba10 code=0x7ffc0000 [ 418.571870][T16966] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #2: comm syz.0.3961: corrupted inode contents [ 418.688397][T16966] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.3961: mark_inode_dirty error [ 418.741411][ T29] audit: type=1326 audit(418.598:25303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16956 comm="syz.2.3958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f2ade4abdf7 code=0x7ffc0000 [ 418.765669][ T29] audit: type=1326 audit(418.598:25304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16956 comm="syz.2.3958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ade4ad0a9 code=0x7ffc0000 [ 418.788791][ T29] audit: type=1326 audit(418.598:25305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16956 comm="syz.2.3958" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ade4ad0a9 code=0x7ffc0000 [ 418.814341][ T29] audit: type=1400 audit(418.628:25306): avc: denied { write } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 418.837140][ T29] audit: type=1400 audit(418.628:25307): avc: denied { remove_name } for pid=2981 comm="syslogd" name="messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 418.859673][ T29] audit: type=1400 audit(418.628:25308): avc: denied { rename } for pid=2981 comm="syslogd" name="messages" dev="tmpfs" ino=12 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 418.885003][ T29] audit: type=1400 audit(418.628:25309): avc: denied { add_name } for pid=2981 comm="syslogd" name="messages.0" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 418.908181][ T29] audit: type=1400 audit(418.628:25310): avc: denied { unlink } for pid=2981 comm="syslogd" name="messages.0" dev="tmpfs" ino=11 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 418.930923][ T29] audit: type=1400 audit(418.628:25311): avc: denied { create } for pid=2981 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 419.228206][T16987] IPv6: NLM_F_REPLACE set, but no existing node found! [ 419.308659][T16993] lo speed is unknown, defaulting to 1000 [ 419.433101][T17000] loop2: detected capacity change from 0 to 512 [ 419.488863][T17000] program syz.2.3966 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 419.525769][T17005] loop4: detected capacity change from 0 to 2048 [ 419.767297][T16993] siw: device registration error -23 [ 419.928679][T17017] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.937870][T17017] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.968296][T17014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.996667][T17012] xt_CT: No such helper "snmp" [ 420.098428][T17011] lo speed is unknown, defaulting to 1000 [ 420.111336][T17014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.421142][T17011] siw: device registration error -23 [ 420.501999][T17028] loop2: detected capacity change from 0 to 512 [ 420.519482][T17028] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 420.554367][T17028] EXT4-fs (loop2): orphan cleanup on readonly fs [ 420.562462][T17028] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.3978: bg 0: block 248: padding at end of block bitmap is not set [ 420.581153][T17028] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.3978: Failed to acquire dquot type 1 [ 420.598256][T17037] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3981'. [ 420.603300][T17034] lo speed is unknown, defaulting to 1000 [ 420.607985][T17037] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3981'. [ 420.625875][T17028] EXT4-fs (loop2): 1 truncate cleaned up [ 420.632485][T17032] SET target dimension over the limit! [ 420.645030][T17028] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 420.660865][T17028] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 420.693528][T17028] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 420.851131][T17068] IPv6: NLM_F_REPLACE set, but no existing node found! [ 420.935553][T17077] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3989'. [ 420.961204][T17077] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3989'. [ 421.028482][T17089] loop3: detected capacity change from 0 to 512 [ 421.052963][T17089] program syz.3.3988 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 421.056002][T17094] loop5: detected capacity change from 0 to 512 [ 421.097242][T17094] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.3991: corrupted inode contents [ 421.111352][T17094] EXT4-fs error (device loop5): ext4_dirty_inode:6042: inode #2: comm syz.5.3991: mark_inode_dirty error [ 421.145523][T17094] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.3991: corrupted inode contents [ 421.209936][T17104] SET target dimension over the limit! [ 421.211381][T17094] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.3991: mark_inode_dirty error [ 421.219218][T17101] netlink: 'syz.0.3993': attribute type 13 has an invalid length. [ 421.237822][T17102] lo speed is unknown, defaulting to 1000 [ 421.255744][T17101] net_ratelimit: 9 callbacks suppressed [ 421.255757][T17101] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 421.277513][T17103] lo speed is unknown, defaulting to 1000 [ 421.283552][T17003] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 421.327915][T17003] EXT4-fs (loop4): Remounting filesystem read-only [ 421.350111][T17101] SET target dimension over the limit! [ 421.739292][T17121] IPv6: NLM_F_REPLACE set, but no existing node found! [ 421.756927][T17123] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4000'. [ 421.766187][T17123] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4000'. [ 421.887455][T17129] loop3: detected capacity change from 0 to 512 [ 421.894918][T17129] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 421.914517][T17129] EXT4-fs (loop3): orphan cleanup on readonly fs [ 421.922314][T17129] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4003: bg 0: block 248: padding at end of block bitmap is not set [ 421.930844][T17131] netlink: 'syz.0.4004': attribute type 3 has an invalid length. [ 421.945931][T17129] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.4003: Failed to acquire dquot type 1 [ 421.965346][T17134] FAULT_INJECTION: forcing a failure. [ 421.965346][T17134] name failslab, interval 1, probability 0, space 0, times 0 [ 421.978836][T17134] CPU: 0 UID: 0 PID: 17134 Comm: syz.5.4005 Not tainted 6.14.0-rc3-syzkaller-00096-ge9a8cac0bf89 #0 [ 421.978868][T17134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 421.978881][T17134] Call Trace: [ 421.978888][T17134] [ 421.978896][T17134] dump_stack_lvl+0xf2/0x150 [ 421.978924][T17134] dump_stack+0x15/0x1a [ 421.978945][T17134] should_fail_ex+0x24a/0x260 [ 421.979059][T17134] should_failslab+0x8f/0xb0 [ 421.979098][T17134] kmem_cache_alloc_noprof+0x52/0x320 [ 421.979156][T17134] ? audit_log_start+0x34c/0x6b0 [ 421.979271][T17129] EXT4-fs (loop3): 1 truncate cleaned up [ 421.979269][T17134] audit_log_start+0x34c/0x6b0 [ 421.979314][T17134] audit_seccomp+0x4b/0x130 [ 421.979367][T17134] __seccomp_filter+0x6fa/0x1180 [ 421.979411][T17134] __secure_computing+0x9f/0x1c0 [ 421.979443][T17134] syscall_trace_enter+0xd1/0x1f0 [ 421.979476][T17134] do_syscall_64+0xaa/0x1c0 [ 421.979550][T17134] ? clear_bhb_loop+0x55/0xb0 [ 421.979584][T17134] ? clear_bhb_loop+0x55/0xb0 [ 421.979619][T17134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.979727][T17134] RIP: 0033:0x7f5fbd70babc [ 421.979747][T17134] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 421.979770][T17134] RSP: 002b:00007f5fbbd71030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 421.979794][T17134] RAX: ffffffffffffffda RBX: 00007f5fbd925fa0 RCX: 00007f5fbd70babc [ 421.979890][T17134] RDX: 000000000000000f RSI: 00007f5fbbd710a0 RDI: 0000000000000005 [ 421.979905][T17134] RBP: 00007f5fbbd71090 R08: 0000000000000000 R09: 0000000000000002 [ 421.979920][T17134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.979935][T17134] R13: 0000000000000000 R14: 00007f5fbd925fa0 R15: 00007ffd2e140e88 [ 421.979959][T17134] [ 422.053083][T17138] loop0: detected capacity change from 0 to 164 [ 422.098438][T17140] loop5: detected capacity change from 0 to 2048 [ 422.133050][T17129] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 422.146508][T17138] ISOFS: unable to read i-node block [ 422.192020][T17138] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 422.207249][T17129] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 422.247253][T17129] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 422.316494][ T3526] kernel write not supported for file bpf-prog (pid: 3526 comm: kworker/1:7) [ 422.407324][T17140] xt_CT: No such helper "snmp" [ 422.421716][T17140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.430379][T17140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.451751][T17154] lo speed is unknown, defaulting to 1000 [ 422.491953][T17158] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4013'. [ 422.496945][T17159] netlink: 'syz.3.4009': attribute type 13 has an invalid length. [ 422.547961][T17149] SET target dimension over the limit! [ 422.577687][T17158] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4013'. [ 422.737283][T17159] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 422.779561][T17166] netlink: 'syz.2.4016': attribute type 3 has an invalid length. [ 422.990115][T17176] loop3: detected capacity change from 0 to 512 [ 422.996582][T17177] loop2: detected capacity change from 0 to 512 [ 423.004100][T17177] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 423.023404][T17176] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 423.026974][T17177] EXT4-fs (loop2): orphan cleanup on readonly fs [ 423.051687][T17177] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4018: bg 0: block 248: padding at end of block bitmap is not set [ 423.087991][T17176] EXT4-fs (loop3): orphan cleanup on readonly fs [ 423.094938][T17176] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4019: bg 0: block 248: padding at end of block bitmap is not set [ 423.111188][T17177] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.4018: Failed to acquire dquot type 1 [ 423.122870][T17176] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.4019: Failed to acquire dquot type 1 [ 423.139169][T17177] EXT4-fs (loop2): 1 truncate cleaned up [ 423.145039][T17176] EXT4-fs (loop3): 1 truncate cleaned up [ 423.178974][T17176] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 423.189488][T17176] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 423.208765][T17176] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 423.221659][T17185] loop4: detected capacity change from 0 to 164 [ 423.239779][T17185] ISOFS: unable to read i-node block [ 423.245135][T17185] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 423.279612][T17187] loop0: detected capacity change from 0 to 512 [ 423.298348][T17187] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 423.306600][T17174] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 423.308635][T17187] EXT4-fs (loop0): orphan cleanup on readonly fs [ 423.321669][T17174] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 423.322246][T17187] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4022: bg 0: block 248: padding at end of block bitmap is not set [ 423.335794][T17174] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 423.347212][T17187] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.4022: Failed to acquire dquot type 1 [ 423.368624][T17187] EXT4-fs (loop0): 1 truncate cleaned up [ 423.422862][T17193] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4023'. [ 423.442685][T17187] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 423.535551][T17187] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 423.670496][T17187] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 423.752160][ T29] kauditd_printk_skb: 787 callbacks suppressed [ 423.752175][ T29] audit: type=1326 audit(423.788:26084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17186 comm="syz.0.4022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8f9bd0ba10 code=0x7ffc0000 [ 423.892847][ T29] audit: type=1400 audit(423.818:26085): avc: denied { append } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=13 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 423.916029][ T29] audit: type=1326 audit(423.828:26086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17186 comm="syz.0.4022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f8f9bd0bdf7 code=0x7ffc0000 [ 423.938925][ T29] audit: type=1326 audit(423.828:26087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17186 comm="syz.0.4022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9bd0d0a9 code=0x7ffc0000 [ 423.962650][ T29] audit: type=1326 audit(423.828:26088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17186 comm="syz.0.4022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9bd0d0a9 code=0x7ffc0000 [ 423.986707][ T29] audit: type=1400 audit(423.838:26089): avc: denied { unmount } for pid=6918 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 424.229348][ T29] audit: type=1400 audit(424.068:26090): avc: denied { read } for pid=2981 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 424.251670][ T29] audit: type=1400 audit(424.078:26091): avc: denied { search } for pid=2981 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 424.272799][ T29] audit: type=1400 audit(424.078:26092): avc: denied { open } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=13 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 424.295576][ T29] audit: type=1400 audit(424.078:26093): avc: denied { getattr } for pid=2981 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=13 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 424.424512][T17207] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4027'. [ 424.437768][T17205] lo speed is unknown, defaulting to 1000 [ 424.452245][T17207] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4027'. [ 424.542090][T17200] netlink: 'syz.4.4028': attribute type 13 has an invalid length. [ 424.578876][T17213] netlink: 180900 bytes leftover after parsing attributes in process `syz.2.4025'. [ 424.655656][T17211] SET target dimension over the limit! [ 424.681778][T17213] netlink: zone id is out of range [ 424.686995][T17213] netlink: zone id is out of range [ 424.768569][T17217] netlink: 'syz.0.4029': attribute type 3 has an invalid length. [ 424.778909][T17213] netlink: zone id is out of range [ 424.789175][T17200] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 424.826602][T17213] netlink: zone id is out of range [ 424.878827][T17213] netlink: zone id is out of range [ 424.910049][T17221] loop3: detected capacity change from 0 to 512 [ 424.921644][T17213] netlink: zone id is out of range [ 424.946463][T17213] netlink: zone id is out of range [ 424.955819][T17221] EXT4-fs: Ignoring removed nobh option [ 425.047650][T17221] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #3: comm syz.3.4031: corrupted inode contents [ 425.062402][T17224] netlink: 180900 bytes leftover after parsing attributes in process `wg1'. [ 425.146594][T17219] lo speed is unknown, defaulting to 1000 [ 425.168951][T17221] EXT4-fs (loop3): Remounting filesystem read-only [ 425.178198][T17221] EXT4-fs (loop3): 1 truncate cleaned up [ 425.187056][T17221] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 425.197681][T17235] loop4: detected capacity change from 0 to 512 [ 425.204146][T17239] loop2: detected capacity change from 0 to 512 [ 425.220517][ T24] kernel write not supported for file bpf-prog (pid: 24 comm: kworker/1:0) [ 425.242032][T17219] siw: device registration error -23 [ 425.278900][T17235] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.4034: corrupted inode contents [ 425.313131][T17243] loop0: detected capacity change from 0 to 512 [ 425.323608][T17243] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 425.332281][T17235] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #2: comm syz.4.4034: mark_inode_dirty error [ 425.358228][T17239] program syz.2.4033 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 425.359043][T17235] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.4034: corrupted inode contents [ 425.384213][T17235] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.4034: mark_inode_dirty error [ 425.414873][T17243] EXT4-fs (loop0): orphan cleanup on readonly fs [ 425.422140][T17243] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4036: bg 0: block 248: padding at end of block bitmap is not set [ 425.451176][T17243] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.4036: Failed to acquire dquot type 1 [ 425.468979][ T3526] kernel write not supported for file bpf-prog (pid: 3526 comm: kworker/1:7) [ 425.478941][T17243] EXT4-fs (loop0): 1 truncate cleaned up [ 425.519376][T17260] lo speed is unknown, defaulting to 1000 [ 425.522672][T17243] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 425.542272][T17258] loop5: detected capacity change from 0 to 512 [ 425.566462][T17258] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 425.580506][T17243] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 425.600890][T17258] EXT4-fs (loop5): orphan cleanup on readonly fs [ 425.609075][T17258] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4042: bg 0: block 248: padding at end of block bitmap is not set [ 425.624885][T17258] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.4042: Failed to acquire dquot type 1 [ 425.638148][T17262] netlink: 180900 bytes leftover after parsing attributes in process `wg1'. [ 425.645205][T17243] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 425.675418][T17258] EXT4-fs (loop5): 1 truncate cleaned up [ 425.687423][T17258] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 425.697022][T17258] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 425.717905][T17258] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 425.758804][T17273] loop0: detected capacity change from 0 to 164 [ 425.772608][T17271] lo speed is unknown, defaulting to 1000 [ 425.786768][T17273] ISOFS: unable to read i-node block [ 425.792130][T17273] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 425.812439][T17268] netlink: 'syz.4.4045': attribute type 13 has an invalid length. [ 425.840820][T17260] siw: device registration error -23 [ 425.856780][T17276] loop5: detected capacity change from 0 to 2048 [ 425.868935][T17274] SET target dimension over the limit! [ 426.136527][T17276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.145088][T17276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.434620][ T3526] kernel write not supported for file bpf-prog (pid: 3526 comm: kworker/1:7) [ 426.479422][T17304] loop2: detected capacity change from 0 to 512 [ 426.492830][T17299] net_ratelimit: 21 callbacks suppressed [ 426.492850][T17299] netlink: zone id is out of range [ 426.500168][T17304] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 426.503788][T17299] netlink: zone id is out of range [ 426.519450][T17304] EXT4-fs (loop2): orphan cleanup on readonly fs [ 426.522614][T17307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.529095][T17299] netlink: zone id is out of range [ 426.535497][T17307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.541540][T17304] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4057: bg 0: block 248: padding at end of block bitmap is not set [ 426.563371][T17299] netlink: zone id is out of range [ 426.569695][T17299] netlink: zone id is out of range [ 426.569843][T17304] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.4057: Failed to acquire dquot type 1 [ 426.575041][T17299] netlink: zone id is out of range [ 426.591444][T17299] netlink: zone id is out of range [ 426.592057][T17304] EXT4-fs (loop2): 1 truncate cleaned up [ 426.596724][T17299] netlink: zone id is out of range [ 426.600213][T17299] netlink: set zone limit has 8 unknown bytes [ 426.609554][T17304] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 426.624113][T17304] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 426.642900][T17304] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 426.642959][T17310] loop4: detected capacity change from 0 to 164 [ 426.663512][T17310] ISOFS: unable to read i-node block [ 426.668873][T17310] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 426.716712][T17313] loop2: detected capacity change from 0 to 512 [ 426.759821][T17313] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.4060: corrupted inode contents [ 426.772819][T17313] EXT4-fs error (device loop2): ext4_dirty_inode:6042: inode #2: comm syz.2.4060: mark_inode_dirty error [ 426.785740][T17313] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.4060: corrupted inode contents [ 426.798249][T17313] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.4060: mark_inode_dirty error [ 426.836693][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.844169][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.852319][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.859940][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.867411][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.874817][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.882262][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.882474][T17317] loop4: detected capacity change from 0 to 512 [ 426.890625][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.898184][T17317] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 426.903582][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.916641][T17317] EXT4-fs (loop4): 1 truncate cleaned up [ 426.921655][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.934037][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.941475][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.949708][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.957144][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.964547][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.971974][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.980104][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.987524][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 426.994942][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 427.002457][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 427.010573][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 427.018150][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 427.025604][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 427.033053][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 427.041030][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 427.048571][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 427.056005][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 427.063411][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 427.071422][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 427.078861][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 427.086367][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 427.093807][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 427.101796][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 427.109265][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 427.116704][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 427.124115][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 427.132220][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 427.139707][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 427.147456][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 427.154867][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 427.162940][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 427.170385][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 427.177816][ T3376] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 427.188354][ T3376] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz0] on syz1 [ 427.350844][T17330] lo speed is unknown, defaulting to 1000 [ 427.375750][T17323] netlink: 'syz.4.4063': attribute type 13 has an invalid length. [ 427.388534][ T3376] kernel write not supported for file bpf-prog (pid: 3376 comm: kworker/0:4) [ 427.495924][T17334] SET target dimension over the limit! [ 427.505685][T17345] __nla_validate_parse: 1 callbacks suppressed [ 427.505703][T17345] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4071'. [ 427.522737][T17323] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 427.559106][T17346] loop2: detected capacity change from 0 to 512 [ 427.567290][T17337] netlink: 180900 bytes leftover after parsing attributes in process `wg1'. [ 427.610716][T17345] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4071'. [ 427.776093][T17354] lo speed is unknown, defaulting to 1000 [ 427.784124][T17357] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4072'. [ 427.836660][T17356] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4075'. [ 427.860717][T17359] loop2: detected capacity change from 0 to 2048 [ 428.052238][T17365] lo speed is unknown, defaulting to 1000 [ 428.081461][T17368] SET target dimension over the limit! [ 428.228786][T17354] siw: device registration error -23 [ 428.365522][T17377] loop3: detected capacity change from 0 to 512 [ 428.493848][T17381] loop0: detected capacity change from 0 to 512 [ 428.543860][T17377] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.4081: corrupted inode contents [ 428.721782][T17377] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #2: comm syz.3.4081: mark_inode_dirty error [ 428.998562][T17377] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.4081: corrupted inode contents [ 429.011288][T17377] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.4081: mark_inode_dirty error [ 429.161272][T17389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.170500][T17389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.286261][ T29] kauditd_printk_skb: 574 callbacks suppressed [ 429.286280][ T29] audit: type=1400 audit(429.328:26660): avc: denied { write } for pid=17390 comm="syz.5.4086" name="hwrng" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 429.387817][T17393] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4087'. [ 429.399497][T17393] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4087'. [ 429.543818][T17394] loop5: detected capacity change from 0 to 1024 [ 429.551721][T17394] EXT4-fs: Ignoring removed orlov option [ 429.562230][T17394] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 429.579919][ T29] audit: type=1400 audit(429.618:26661): avc: denied { write } for pid=17392 comm="syz.5.4087" name="001" dev="devtmpfs" ino=150 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 429.594122][ T7571] kernel write not supported for file bpf-prog (pid: 7571 comm: kworker/0:5) [ 429.623490][T17394] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 429.631021][T17394] vhci_hcd: default hub control req: 6011 v8001 i0001 l0 [ 429.640713][ T29] audit: type=1400 audit(429.678:26662): avc: denied { map } for pid=17392 comm="syz.5.4087" path="/554/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 429.663497][ T29] audit: type=1400 audit(429.678:26663): avc: denied { execute } for pid=17392 comm="syz.5.4087" path="/554/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 429.690338][ T29] audit: type=1326 audit(429.708:26664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17401 comm="syz.3.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254eabd0a9 code=0x7ffc0000 [ 429.713449][ T29] audit: type=1326 audit(429.708:26665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17401 comm="syz.3.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254eabd0a9 code=0x7ffc0000 [ 429.736470][ T29] audit: type=1326 audit(429.708:26666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17401 comm="syz.3.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f254eabd0a9 code=0x7ffc0000 [ 429.759568][ T29] audit: type=1326 audit(429.708:26667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17401 comm="syz.3.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254eabd0a9 code=0x7ffc0000 [ 429.782663][ T29] audit: type=1326 audit(429.708:26668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17401 comm="syz.3.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f254eabd0a9 code=0x7ffc0000 [ 429.805669][ T29] audit: type=1326 audit(429.708:26669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17401 comm="syz.3.4085" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f254eabd0a9 code=0x7ffc0000 [ 429.840382][T17400] netlink: 180900 bytes leftover after parsing attributes in process `wg1'. [ 429.872492][T17407] loop4: detected capacity change from 0 to 512 [ 429.882418][T17407] EXT4-fs error (device loop4): ext4_get_journal_inode:5798: comm syz.4.4089: inode #1: comm syz.4.4089: iget: illegal inode # [ 429.900167][T17407] EXT4-fs (loop4): Remounting filesystem read-only [ 429.907470][T17407] EXT4-fs (loop4): no journal found [ 429.912691][T17407] EXT4-fs (loop4): can't get journal size [ 429.919201][T17407] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 429.929093][T17407] EXT4-fs (loop4): failed to initialize system zone (-22) [ 429.951154][T17407] EXT4-fs (loop4): mount failed [ 429.974699][T17407] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4089'. [ 429.984862][T17413] loop0: detected capacity change from 0 to 512 [ 429.996610][T17413] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 430.011717][T17413] EXT4-fs (loop0): orphan cleanup on readonly fs [ 430.020086][T17413] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4091: bg 0: block 248: padding at end of block bitmap is not set [ 430.040864][T17413] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.4091: Failed to acquire dquot type 1 [ 430.053429][T17413] EXT4-fs (loop0): 1 truncate cleaned up [ 430.061634][T17413] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 430.070402][T17413] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 430.105714][T17414] FAULT_INJECTION: forcing a failure. [ 430.105714][T17414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.118895][T17414] CPU: 0 UID: 0 PID: 17414 Comm: syz.3.4092 Not tainted 6.14.0-rc3-syzkaller-00096-ge9a8cac0bf89 #0 [ 430.118922][T17414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 430.118937][T17414] Call Trace: [ 430.118949][T17414] [ 430.118956][T17414] dump_stack_lvl+0xf2/0x150 [ 430.118984][T17414] dump_stack+0x15/0x1a [ 430.119004][T17414] should_fail_ex+0x24a/0x260 [ 430.119103][T17414] should_fail+0xb/0x10 [ 430.119185][T17414] should_fail_usercopy+0x1a/0x20 [ 430.119222][T17414] _copy_from_user+0x1c/0xa0 [ 430.119262][T17414] do_ip6t_set_ctl+0x42c/0x8c0 [ 430.119383][T17414] ? kstrtouint+0x77/0xc0 [ 430.119413][T17414] nf_setsockopt+0x195/0x1b0 [ 430.119452][T17414] ipv6_setsockopt+0x10f/0x130 [ 430.119485][T17414] tcp_setsockopt+0x93/0xb0 [ 430.119592][T17414] sock_common_setsockopt+0x64/0x80 [ 430.119623][T17414] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 430.119707][T17414] __sys_setsockopt+0x187/0x200 [ 430.119730][T17414] __x64_sys_setsockopt+0x66/0x80 [ 430.119755][T17414] x64_sys_call+0x282e/0x2dc0 [ 430.119788][T17414] do_syscall_64+0xc9/0x1c0 [ 430.119848][T17414] ? clear_bhb_loop+0x55/0xb0 [ 430.119878][T17414] ? clear_bhb_loop+0x55/0xb0 [ 430.119909][T17414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.119937][T17414] RIP: 0033:0x7f254eabd0a9 [ 430.119961][T17414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.120063][T17414] RSP: 002b:00007f254d127038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 430.120084][T17414] RAX: ffffffffffffffda RBX: 00007f254ecd5fa0 RCX: 00007f254eabd0a9 [ 430.120097][T17414] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 430.120108][T17414] RBP: 00007f254d127090 R08: 0000000000000450 R09: 0000000000000000 [ 430.120120][T17414] R10: 0000400000000980 R11: 0000000000000246 R12: 0000000000000001 [ 430.120132][T17414] R13: 0000000000000000 R14: 00007f254ecd5fa0 R15: 00007ffde3a7c6d8 [ 430.120150][T17414] [ 430.120490][T17413] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 430.347462][T17431] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4096'. [ 430.505704][T17425] loop4: detected capacity change from 0 to 512 [ 430.660841][T17438] loop0: detected capacity change from 0 to 512 [ 430.733577][T17438] program syz.0.4099 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 430.975711][T17443] loop5: detected capacity change from 0 to 512 [ 431.054191][T17443] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.4103: corrupted inode contents [ 431.073056][T17443] EXT4-fs error (device loop5): ext4_dirty_inode:6042: inode #2: comm syz.5.4103: mark_inode_dirty error [ 431.089034][T17443] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.4103: corrupted inode contents [ 431.104061][T17443] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.4103: mark_inode_dirty error [ 431.730417][T17474] loop4: detected capacity change from 0 to 164 [ 431.762677][T17475] loop2: detected capacity change from 0 to 512 [ 431.774730][T17471] loop0: detected capacity change from 0 to 512 [ 431.808071][T17474] ISOFS: unable to read i-node block [ 431.813505][T17474] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 431.843086][T17471] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 431.876459][T17471] EXT4-fs (loop0): orphan cleanup on readonly fs [ 431.910092][T17471] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4111: bg 0: block 248: padding at end of block bitmap is not set [ 431.979764][T17471] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.4111: Failed to acquire dquot type 1 [ 432.003948][T17479] loop2: detected capacity change from 0 to 512 [ 432.043879][T17471] EXT4-fs (loop0): 1 truncate cleaned up [ 432.080408][T17479] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.4114: corrupted inode contents [ 432.097422][T17471] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 432.119423][T17471] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 432.122221][T17484] lo speed is unknown, defaulting to 1000 [ 432.131123][T17479] EXT4-fs error (device loop2): ext4_dirty_inode:6042: inode #2: comm syz.2.4114: mark_inode_dirty error [ 432.175055][T17479] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.4114: corrupted inode contents [ 432.181187][T17471] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 432.201255][T17481] SET target dimension over the limit! [ 432.208645][T17479] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.4114: mark_inode_dirty error [ 432.302961][T17492] loop4: detected capacity change from 0 to 512 [ 432.359726][T17492] program syz.4.4117 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 432.414632][T17501] loop5: detected capacity change from 0 to 512 [ 432.421545][T17501] EXT4-fs: Ignoring removed nobh option [ 432.430354][T17506] loop2: detected capacity change from 0 to 164 [ 432.463786][T17501] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #3: comm syz.5.4120: corrupted inode contents [ 432.477757][T17506] ISOFS: unable to read i-node block [ 432.483393][T17506] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 432.517167][T17515] loop3: detected capacity change from 0 to 164 [ 432.527425][T17501] EXT4-fs (loop5): Remounting filesystem read-only [ 432.543892][T17501] EXT4-fs (loop5): 1 truncate cleaned up [ 432.550030][T17515] ISOFS: unable to read i-node block [ 432.555412][T17515] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 432.557189][T17501] SELinux: (dev loop5, type ext4) getxattr errno 5 [ 432.675887][T17520] lo speed is unknown, defaulting to 1000 [ 432.723283][T17521] lo speed is unknown, defaulting to 1000 [ 432.753923][T17525] SET target dimension over the limit! [ 432.817928][T17527] __nla_validate_parse: 1 callbacks suppressed [ 432.818020][T17527] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4128'. [ 432.869134][T17520] siw: device registration error -23 [ 433.106925][T17532] loop0: detected capacity change from 0 to 164 [ 433.179199][T17532] ISOFS: unable to read i-node block [ 433.184573][T17532] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 433.211425][T17533] loop2: detected capacity change from 0 to 512 [ 433.267825][T17533] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 433.339523][T17533] EXT4-fs (loop2): orphan cleanup on readonly fs [ 433.355107][T17533] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4130: bg 0: block 248: padding at end of block bitmap is not set [ 433.381855][T17533] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.4130: Failed to acquire dquot type 1 [ 433.421415][T17533] EXT4-fs (loop2): 1 truncate cleaned up [ 433.429960][T17533] EXT4-fs mount: 82 callbacks suppressed [ 433.429975][T17533] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 433.454701][T17533] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 433.478232][T17533] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 433.589093][T12073] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.605961][T17533] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 433.647898][T17538] loop0: detected capacity change from 0 to 512 [ 433.711229][T17538] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 433.748658][T14178] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.802495][T17538] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #2: comm syz.0.4132: corrupted inode contents [ 433.880207][T17538] EXT4-fs error (device loop0): ext4_dirty_inode:6042: inode #2: comm syz.0.4132: mark_inode_dirty error [ 433.937777][T17538] EXT4-fs error (device loop0): ext4_do_update_inode:5154: inode #2: comm syz.0.4132: corrupted inode contents [ 434.013790][T17538] EXT4-fs error (device loop0): __ext4_ext_dirty:207: inode #2: comm syz.0.4132: mark_inode_dirty error [ 434.119039][T17558] netlink: 180900 bytes leftover after parsing attributes in process `syz.4.4136'. [ 434.140523][T12434] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.146053][T17558] net_ratelimit: 30 callbacks suppressed [ 434.146074][T17558] netlink: zone id is out of range [ 434.162198][T17558] netlink: zone id is out of range [ 434.255294][T17558] netlink: zone id is out of range [ 434.274068][T17567] loop2: detected capacity change from 0 to 164 [ 434.285248][T17558] netlink: zone id is out of range [ 434.290508][T17558] netlink: zone id is out of range [ 434.307325][T17567] ISOFS: unable to read i-node block [ 434.312792][T17567] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 434.343319][ T29] kauditd_printk_skb: 653 callbacks suppressed [ 434.343333][ T29] audit: type=1326 audit(434.378:27315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17566 comm="syz.2.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ade4ad0a9 code=0x7ffc0000 [ 434.405186][T17558] netlink: zone id is out of range [ 434.423553][ T29] audit: type=1326 audit(434.408:27316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17566 comm="syz.2.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ade4ad0a9 code=0x7ffc0000 [ 434.446629][T17558] netlink: zone id is out of range [ 434.446627][ T29] audit: type=1326 audit(434.418:27317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17566 comm="syz.2.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ade4ad0a9 code=0x7ffc0000 [ 434.451937][T17558] netlink: zone id is out of range [ 434.474834][ T29] audit: type=1326 audit(434.418:27318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17566 comm="syz.2.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ade4ad0a9 code=0x7ffc0000 [ 434.474885][ T29] audit: type=1326 audit(434.418:27319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17566 comm="syz.2.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ade4ad0a9 code=0x7ffc0000 [ 434.474917][ T29] audit: type=1326 audit(434.418:27320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17566 comm="syz.2.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ade4ad0a9 code=0x7ffc0000 [ 434.475059][ T29] audit: type=1326 audit(434.418:27321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17566 comm="syz.2.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ade4ad0a9 code=0x7ffc0000 [ 434.475087][ T29] audit: type=1326 audit(434.418:27322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17566 comm="syz.2.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2ade4ad0a9 code=0x7ffc0000 [ 434.475132][ T29] audit: type=1326 audit(434.418:27323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17566 comm="syz.2.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ade4ad0a9 code=0x7ffc0000 [ 434.475159][ T29] audit: type=1326 audit(434.418:27324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17566 comm="syz.2.4141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f2ade4ad0a9 code=0x7ffc0000 [ 434.516062][T17571] loop5: detected capacity change from 0 to 512 [ 434.546441][T17558] netlink: zone id is out of range [ 434.659218][T17571] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 434.668720][T17571] EXT4-fs (loop5): orphan cleanup on readonly fs [ 434.678929][T17571] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4143: bg 0: block 248: padding at end of block bitmap is not set [ 434.680401][T17558] netlink: set zone limit has 8 unknown bytes [ 434.710312][T17573] loop0: detected capacity change from 0 to 512 [ 434.718896][T17571] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.4143: Failed to acquire dquot type 1 [ 434.731844][T17571] EXT4-fs (loop5): 1 truncate cleaned up [ 434.739324][T17571] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 434.773995][T17573] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.801141][T17571] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 434.834123][T17573] program syz.0.4142 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 434.834191][T17571] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 434.856066][T17571] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 434.954502][ T6918] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.968744][T17594] loop3: detected capacity change from 0 to 512 [ 435.020279][T17594] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.071373][T17594] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.4151: corrupted inode contents [ 435.093390][T17594] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #2: comm syz.3.4151: mark_inode_dirty error [ 435.104974][T17594] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.4151: corrupted inode contents [ 435.117295][T17594] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.4151: mark_inode_dirty error [ 435.147272][T17603] loop2: detected capacity change from 0 to 2048 [ 435.167223][T14549] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.170346][T17603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 435.230951][T17607] loop5: detected capacity change from 0 to 512 [ 435.276099][T17609] loop3: detected capacity change from 0 to 164 [ 435.287963][T17609] ISOFS: unable to read i-node block [ 435.293301][T17609] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 435.295426][T12434] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.314912][T17607] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.377328][ T6918] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.393547][T17613] netlink: 180900 bytes leftover after parsing attributes in process `wg1'. [ 435.426319][T17616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.434818][T17616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.760067][T17621] loop3: detected capacity change from 0 to 512 [ 435.777833][T17621] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 435.806193][T17621] EXT4-fs (loop3): orphan cleanup on readonly fs [ 435.817729][T17630] program syz.4.4161 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 435.822817][T17621] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4160: bg 0: block 248: padding at end of block bitmap is not set [ 435.844370][T17621] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.4160: Failed to acquire dquot type 1 [ 435.857197][T17621] EXT4-fs (loop3): 1 truncate cleaned up [ 435.866153][T17621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 435.891880][T17621] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 435.909391][T17621] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 435.936910][T17621] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 435.961322][T14549] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.073901][T17640] loop5: detected capacity change from 0 to 2048 [ 436.168254][T17640] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 436.284347][T17650] loop3: detected capacity change from 0 to 512 [ 436.312283][T17652] loop0: detected capacity change from 0 to 512 [ 436.327435][T17652] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.350094][T17650] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.369656][T17650] program syz.3.4167 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 436.390021][T12434] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.414323][T17658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.423659][T17658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.475605][T17659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.484055][T17659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.687221][T17661] 9pnet_fd: Insufficient options for proto=fd [ 437.075985][T14549] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.259791][T17679] FAULT_INJECTION: forcing a failure. [ 437.259791][T17679] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 437.273175][T17679] CPU: 0 UID: 0 PID: 17679 Comm: syz.0.4175 Not tainted 6.14.0-rc3-syzkaller-00096-ge9a8cac0bf89 #0 [ 437.273207][T17679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 437.273218][T17679] Call Trace: [ 437.273225][T17679] [ 437.273233][T17679] dump_stack_lvl+0xf2/0x150 [ 437.273258][T17679] dump_stack+0x15/0x1a [ 437.273278][T17679] should_fail_ex+0x24a/0x260 [ 437.273373][T17679] should_fail_alloc_page+0xfd/0x110 [ 437.273458][T17679] __alloc_frozen_pages_noprof+0x109/0x340 [ 437.273485][T17679] alloc_pages_mpol+0xb4/0x260 [ 437.273523][T17679] folio_alloc_mpol_noprof+0x36/0x80 [ 437.273560][T17679] __read_swap_cache_async+0x152/0x480 [ 437.273597][T17679] swap_cluster_readahead+0x279/0x3f0 [ 437.273625][T17679] swapin_readahead+0xe4/0x6f0 [ 437.273650][T17679] ? swap_cache_get_folio+0x77/0x210 [ 437.273710][T17679] do_swap_page+0x31b/0x2550 [ 437.273737][T17679] ? mntput+0x49/0x70 [ 437.273758][T17679] ? path_openat+0x1a78/0x1fc0 [ 437.273782][T17679] ? __rcu_read_lock+0x36/0x50 [ 437.273839][T17679] ? __pfx_default_wake_function+0x10/0x10 [ 437.273879][T17679] handle_mm_fault+0x8e4/0x2ac0 [ 437.273917][T17679] exc_page_fault+0x296/0x650 [ 437.273941][T17679] asm_exc_page_fault+0x26/0x30 [ 437.273964][T17679] RIP: 0010:__get_user_8+0x18/0x30 [ 437.274017][T17679] Code: 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <48> 8b 10 31 c0 0f 01 ca c3 cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 [ 437.274041][T17679] RSP: 0018:ffffc900062e7ed0 EFLAGS: 00050287 [ 437.274054][T17679] RAX: 0000400000000100 RBX: ffffc900062e7f58 RCX: ffffffff81c5951b [ 437.274065][T17679] RDX: 00007ffffffff000 RSI: 0000000000000000 RDI: ffffc900062e7f90 [ 437.274075][T17679] RBP: 0000400000000100 R08: 0001c900062e7f97 R09: 0000000000000000 [ 437.274086][T17679] R10: 0001ffffffffffff R11: 0000000000000000 R12: 0000000000000000 [ 437.274096][T17679] R13: 0000000000000000 R14: ffffc900062e7f58 R15: 000000000000000b [ 437.274110][T17679] ? __x64_sys_msgsnd+0x4b/0xc0 [ 437.274169][T17679] __x64_sys_msgsnd+0x57/0xc0 [ 437.274256][T17679] x64_sys_call+0x2752/0x2dc0 [ 437.274292][T17679] do_syscall_64+0xc9/0x1c0 [ 437.274319][T17679] ? clear_bhb_loop+0x55/0xb0 [ 437.274342][T17679] ? clear_bhb_loop+0x55/0xb0 [ 437.274366][T17679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.274489][T17679] RIP: 0033:0x7f8f9bd0d0a9 [ 437.274502][T17679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.274572][T17679] RSP: 002b:00007f8f9a356038 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 437.274594][T17679] RAX: ffffffffffffffda RBX: 00007f8f9bf26080 RCX: 00007f8f9bd0d0a9 [ 437.274609][T17679] RDX: 000000000000000b RSI: 0000400000000100 RDI: 0000000000000000 [ 437.274624][T17679] RBP: 00007f8f9a356090 R08: 0000000000000000 R09: 0000000000000000 [ 437.274634][T17679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.274645][T17679] R13: 0000000000000001 R14: 00007f8f9bf26080 R15: 00007ffd22be50c8 [ 437.274701][T17679] [ 437.653639][T17685] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4178'. [ 437.687916][T17689] loop0: detected capacity change from 0 to 512 [ 437.696008][T17688] loop4: detected capacity change from 0 to 512 [ 437.703019][T17688] EXT4-fs: Ignoring removed nobh option [ 437.710833][T17689] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.731741][T17688] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #3: comm syz.4.4180: corrupted inode contents [ 437.744132][T17688] EXT4-fs (loop4): Remounting filesystem read-only [ 437.751229][T17688] EXT4-fs (loop4): 1 truncate cleaned up [ 437.757366][T17688] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.769997][T17688] SELinux: (dev loop4, type ext4) getxattr errno 5 [ 437.777329][T12434] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.777570][T17688] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.814021][T17694] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4181'. [ 437.844578][T17696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.853333][T17696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.992451][T17698] netlink: 180900 bytes leftover after parsing attributes in process `wg1'. [ 438.053090][T17704] netlink: 180900 bytes leftover after parsing attributes in process `wg1'. [ 438.192612][T14178] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.295167][T17722] loop3: detected capacity change from 0 to 512 [ 438.313302][T17722] EXT4-fs: Ignoring removed nobh option [ 438.319852][T17541] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 438.335867][T17541] EXT4-fs (loop5): Remounting filesystem read-only [ 438.355825][T17722] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #3: comm syz.3.4192: corrupted inode contents [ 438.367996][T17722] EXT4-fs (loop3): Remounting filesystem read-only [ 438.386675][T17722] EXT4-fs (loop3): 1 truncate cleaned up [ 438.398885][T17722] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.412965][T17722] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 438.420435][T17722] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.476623][T17731] lo speed is unknown, defaulting to 1000 [ 438.526795][T17734] loop3: detected capacity change from 0 to 512 [ 438.534568][T17728] netlink: 'syz.4.4193': attribute type 13 has an invalid length. [ 438.572723][T17734] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.589935][T17733] SET target dimension over the limit! [ 438.607527][T17730] tipc: Started in network mode [ 438.612473][T17730] tipc: Node identity 5a60c86f6e3a, cluster identity 4711 [ 438.619810][T17730] tipc: Enabled bearer , priority 0 [ 438.677908][T17734] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.4195: corrupted inode contents [ 438.708921][T17734] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #2: comm syz.3.4195: mark_inode_dirty error [ 438.720548][T17729] tipc: Resetting bearer [ 438.721104][T17734] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.4195: corrupted inode contents [ 438.741284][T17734] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.4195: mark_inode_dirty error [ 438.745908][T17729] tipc: Disabling bearer [ 438.781792][T14549] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.792472][T17740] netlink: 180900 bytes leftover after parsing attributes in process `wg1'. [ 438.851285][T17744] IPv6: NLM_F_REPLACE set, but no existing node found! [ 438.912506][T17748] bond1: entered promiscuous mode [ 438.917769][T17748] bond1: entered allmulticast mode [ 438.923198][T17748] 8021q: adding VLAN 0 to HW filter on device bond1 [ 438.934940][T17748] bond1 (unregistering): Released all slaves [ 438.952150][T17751] FAULT_INJECTION: forcing a failure. [ 438.952150][T17751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 438.965931][T17751] CPU: 0 UID: 0 PID: 17751 Comm: syz.0.4200 Not tainted 6.14.0-rc3-syzkaller-00096-ge9a8cac0bf89 #0 [ 438.966031][T17751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 438.966047][T17751] Call Trace: [ 438.966056][T17751] [ 438.966066][T17751] dump_stack_lvl+0xf2/0x150 [ 438.966103][T17751] dump_stack+0x15/0x1a [ 438.966203][T17751] should_fail_ex+0x24a/0x260 [ 438.966235][T17751] should_fail+0xb/0x10 [ 438.966267][T17751] should_fail_usercopy+0x1a/0x20 [ 438.966332][T17751] strncpy_from_user+0x25/0x210 [ 438.966361][T17751] ? __kmalloc_cache_noprof+0x186/0x320 [ 438.966388][T17751] getname_flags+0x21b/0x3b0 [ 438.966423][T17751] getname+0x17/0x20 [ 438.966547][T17751] __se_sys_acct+0x3e/0x4a0 [ 438.966644][T17751] __x64_sys_acct+0x1f/0x30 [ 438.966672][T17751] x64_sys_call+0x273e/0x2dc0 [ 438.966701][T17751] do_syscall_64+0xc9/0x1c0 [ 438.966737][T17751] ? clear_bhb_loop+0x55/0xb0 [ 438.966801][T17751] ? clear_bhb_loop+0x55/0xb0 [ 438.966832][T17751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.966866][T17751] RIP: 0033:0x7f8f9bd0d0a9 [ 438.966884][T17751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 438.966977][T17751] RSP: 002b:00007f8f9a377038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 438.966998][T17751] RAX: ffffffffffffffda RBX: 00007f8f9bf25fa0 RCX: 00007f8f9bd0d0a9 [ 438.967010][T17751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000400000002180 [ 438.967022][T17751] RBP: 00007f8f9a377090 R08: 0000000000000000 R09: 0000000000000000 [ 438.967035][T17751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 438.967050][T17751] R13: 0000000000000000 R14: 00007f8f9bf25fa0 R15: 00007ffd22be50c8 [ 438.967138][T17751] [ 439.187800][T17756] 9pnet_fd: Insufficient options for proto=fd [ 439.202450][ T6918] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.206797][T17753] lo speed is unknown, defaulting to 1000 [ 439.273536][T17763] loop5: detected capacity change from 0 to 2048 [ 439.293334][T17765] loop0: detected capacity change from 0 to 512 [ 439.304459][T17765] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 439.314661][T17765] EXT4-fs (loop0): orphan cleanup on readonly fs [ 439.321968][T17765] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.4205: bg 0: block 248: padding at end of block bitmap is not set [ 439.337329][T17765] EXT4-fs error (device loop0): ext4_acquire_dquot:6927: comm syz.0.4205: Failed to acquire dquot type 1 [ 439.352339][T17765] EXT4-fs (loop0): 1 truncate cleaned up [ 439.360786][T17763] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.376092][T17765] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 439.410184][T17765] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 439.437827][ T29] kauditd_printk_skb: 529 callbacks suppressed [ 439.437847][ T29] audit: type=1400 audit(439.428:27844): avc: denied { execmem } for pid=17762 comm="syz.5.4203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 439.462895][ T29] audit: type=1326 audit(439.448:27845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17764 comm="syz.0.4205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8f9bd0ba10 code=0x7ffc0000 [ 439.486551][ T29] audit: type=1326 audit(439.448:27846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17764 comm="syz.0.4205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f8f9bd0bdf7 code=0x7ffc0000 [ 439.509494][ T29] audit: type=1326 audit(439.448:27847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17764 comm="syz.0.4205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8f9bd0ba10 code=0x7ffc0000 [ 439.533175][ T29] audit: type=1326 audit(439.448:27848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17764 comm="syz.0.4205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9bd0d0a9 code=0x7ffc0000 [ 439.556929][ T29] audit: type=1326 audit(439.448:27849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17764 comm="syz.0.4205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f9bd0d0a9 code=0x7ffc0000 [ 439.579946][ T29] audit: type=1326 audit(439.448:27850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17764 comm="syz.0.4205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8f9bd0b917 code=0x7ffc0000 [ 439.603653][ T29] audit: type=1326 audit(439.448:27851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17764 comm="syz.0.4205" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8f9bd0e84a code=0x7ffc0000 [ 439.627382][ T29] audit: type=1400 audit(439.448:27852): avc: denied { remount } for pid=17764 comm="syz.0.4205" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 439.648057][T17773] loop4: detected capacity change from 0 to 164 [ 439.657862][T17773] ISOFS: unable to read i-node block [ 439.663267][T17773] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 439.682159][T17765] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 439.692548][ T29] audit: type=1326 audit(439.588:27853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17752 comm="syz.3.4201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f254eabd0a9 code=0x7ffc0000 [ 439.711812][T17753] siw: device registration error -23 [ 439.717136][T17765] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 439.796979][T17776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.805573][T17776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.837499][T17770] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 439.908745][T17778] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4207'. [ 439.969384][T17770] EXT4-fs (loop5): Remounting filesystem read-only [ 440.060606][T17781] loop4: detected capacity change from 0 to 512 [ 440.171400][T17783] lo speed is unknown, defaulting to 1000 [ 440.199244][T17781] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.222836][T12434] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.277685][T17781] program syz.4.4208 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 440.365086][T17793] IPv6: NLM_F_REPLACE set, but no existing node found! [ 440.459811][T17783] siw: device registration error -23 [ 440.635903][T17808] loop3: detected capacity change from 0 to 164 [ 440.644542][T17808] ISOFS: unable to read i-node block [ 440.650643][T17808] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 440.707344][T17812] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4220'. [ 440.767311][T17814] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4221'. [ 440.810998][T12073] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.837045][T17816] IPv6: NLM_F_REPLACE set, but no existing node found! [ 440.846467][T17818] loop0: detected capacity change from 0 to 2048 [ 440.869871][T17818] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 440.938798][T17828] loop4: detected capacity change from 0 to 512 [ 440.969731][T17828] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.986396][T17828] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.4227: corrupted inode contents [ 440.999672][T17828] EXT4-fs error (device loop4): ext4_dirty_inode:6042: inode #2: comm syz.4.4227: mark_inode_dirty error [ 441.011308][T17828] EXT4-fs error (device loop4): ext4_do_update_inode:5154: inode #2: comm syz.4.4227: corrupted inode contents [ 441.023437][T17828] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #2: comm syz.4.4227: mark_inode_dirty error [ 441.048349][T12073] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.074867][T17834] netlink: 312 bytes leftover after parsing attributes in process `syz.4.4228'. [ 441.101824][T17834] loop4: detected capacity change from 0 to 1024 [ 441.127109][T17834] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 441.173076][T17841] FAULT_INJECTION: forcing a failure. [ 441.173076][T17841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.186986][T17841] CPU: 0 UID: 0 PID: 17841 Comm: syz.2.4230 Not tainted 6.14.0-rc3-syzkaller-00096-ge9a8cac0bf89 #0 [ 441.187018][T17841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 441.187034][T17841] Call Trace: [ 441.187042][T17841] [ 441.187051][T17841] dump_stack_lvl+0xf2/0x150 [ 441.187091][T17841] dump_stack+0x15/0x1a [ 441.187117][T17841] should_fail_ex+0x24a/0x260 [ 441.187150][T17841] should_fail+0xb/0x10 [ 441.187182][T17841] should_fail_usercopy+0x1a/0x20 [ 441.187263][T17841] _copy_from_user+0x1c/0xa0 [ 441.187297][T17841] __se_sys_mount+0x115/0x2d0 [ 441.187335][T17841] ? __bpf_trace_sys_enter+0x10/0x30 [ 441.187367][T17841] __x64_sys_mount+0x67/0x80 [ 441.187422][T17841] x64_sys_call+0x2c84/0x2dc0 [ 441.187454][T17841] do_syscall_64+0xc9/0x1c0 [ 441.187556][T17841] ? clear_bhb_loop+0x55/0xb0 [ 441.187591][T17841] ? clear_bhb_loop+0x55/0xb0 [ 441.187636][T17841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.187857][T17841] RIP: 0033:0x7f2ade4ad0a9 [ 441.187877][T17841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.187900][T17841] RSP: 002b:00007f2adcb17038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 441.187922][T17841] RAX: ffffffffffffffda RBX: 00007f2ade6c5fa0 RCX: 00007f2ade4ad0a9 [ 441.187938][T17841] RDX: 0000400000000180 RSI: 0000400000000000 RDI: 0000000000000000 [ 441.187951][T17841] RBP: 00007f2adcb17090 R08: 0000400000000080 R09: 0000000000000000 [ 441.187963][T17841] R10: 0000000002004000 R11: 0000000000000246 R12: 0000000000000001 [ 441.188028][T17841] R13: 0000000000000000 R14: 00007f2ade6c5fa0 R15: 00007ffc6265a218 [ 441.188094][T17841] [ 441.345958][T17841] 9pnet_fd: Insufficient options for proto=fd [ 441.371243][T17842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.386395][T17842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.405085][T17836] xt_CT: No such helper "snmp" [ 441.421051][T17834] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4228'. [ 441.438305][T17834] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.4228'. [ 441.475951][T17834] vhci_hcd: invalid port number 0 [ 441.541086][T12073] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.597010][T17852] lo speed is unknown, defaulting to 1000 [ 441.626502][T17853] program syz.4.4233 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 441.638594][T17855] SET target dimension over the limit! [ 441.869247][T17862] FAULT_INJECTION: forcing a failure. [ 441.869247][T17862] name failslab, interval 1, probability 0, space 0, times 0 [ 441.882667][T17862] CPU: 0 UID: 0 PID: 17862 Comm: syz.3.4235 Not tainted 6.14.0-rc3-syzkaller-00096-ge9a8cac0bf89 #0 [ 441.882694][T17862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 441.882710][T17862] Call Trace: [ 441.882718][T17862] [ 441.882728][T17862] dump_stack_lvl+0xf2/0x150 [ 441.882763][T17862] dump_stack+0x15/0x1a [ 441.882824][T17862] should_fail_ex+0x24a/0x260 [ 441.882861][T17862] should_failslab+0x8f/0xb0 [ 441.882902][T17862] kmem_cache_alloc_noprof+0x52/0x320 [ 441.882948][T17862] ? security_inode_alloc+0x37/0x100 [ 441.882977][T17862] security_inode_alloc+0x37/0x100 [ 441.883002][T17862] inode_init_always_gfp+0x4a2/0x4f0 [ 441.883035][T17862] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 441.883132][T17862] alloc_inode+0x82/0x160 [ 441.883164][T17862] new_inode+0x1e/0x100 [ 441.883210][T17862] shmem_get_inode+0x24e/0x730 [ 441.883296][T17862] __shmem_file_setup+0x127/0x1f0 [ 441.883385][T17862] shmem_file_setup+0x3b/0x50 [ 441.883426][T17862] __se_sys_memfd_create+0x2e1/0x5a0 [ 441.883459][T17862] __x64_sys_memfd_create+0x31/0x40 [ 441.883563][T17862] x64_sys_call+0x2d4c/0x2dc0 [ 441.883596][T17862] do_syscall_64+0xc9/0x1c0 [ 441.883631][T17862] ? clear_bhb_loop+0x55/0xb0 [ 441.883665][T17862] ? clear_bhb_loop+0x55/0xb0 [ 441.883722][T17862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.883755][T17862] RIP: 0033:0x7f254eabd0a9 [ 441.883773][T17862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.883793][T17862] RSP: 002b:00007f254d105e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 441.883814][T17862] RAX: ffffffffffffffda RBX: 00000000000002b2 RCX: 00007f254eabd0a9 [ 441.883828][T17862] RDX: 00007f254d105ef0 RSI: 0000000000000000 RDI: 00007f254eb3ec51 [ 441.883879][T17862] RBP: 00004000000006c0 R08: 00007f254d105bb7 R09: 00007f254d105e40 [ 441.883892][T17862] R10: 000000000000000a R11: 0000000000000202 R12: 0000400000000980 [ 441.883903][T17862] R13: 00007f254d105ef0 R14: 00007f254d105eb0 R15: 00004000000009c0 [ 441.883921][T17862] [ 442.119370][T17864] IPv6: NLM_F_REPLACE set, but no existing node found! [ 442.172241][T17868] loop2: detected capacity change from 0 to 512 [ 442.188585][T17868] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.203554][T17868] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.4238: corrupted inode contents [ 442.215708][T17868] EXT4-fs error (device loop2): ext4_dirty_inode:6042: inode #2: comm syz.2.4238: mark_inode_dirty error [ 442.227299][T17868] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.4238: corrupted inode contents [ 442.239382][T17868] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.4238: mark_inode_dirty error [ 442.266266][T14178] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.294557][ T6918] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.331082][T17872] 9pnet: Could not find request transport: 0xffffffffffffffff [ 442.554247][T17886] loop2: detected capacity change from 0 to 512 [ 442.580345][T17886] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 442.605289][T17886] EXT4-fs (loop2): orphan cleanup on readonly fs [ 442.612642][T17886] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4244: bg 0: block 248: padding at end of block bitmap is not set [ 442.627663][T17886] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.4244: Failed to acquire dquot type 1 [ 442.642104][T17886] EXT4-fs (loop2): 1 truncate cleaned up [ 442.650374][T17886] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 442.683404][T17886] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 442.692187][T17886] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 442.706065][T17886] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 442.734543][T14178] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.842609][T17901] loop2: detected capacity change from 0 to 512 [ 442.857160][T17901] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.872628][T17901] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.4249: corrupted inode contents [ 442.884915][T17904] loop4: detected capacity change from 0 to 512 [ 442.886362][T17901] EXT4-fs error (device loop2): ext4_dirty_inode:6042: inode #2: comm syz.2.4249: mark_inode_dirty error [ 442.904433][T17901] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #2: comm syz.2.4249: corrupted inode contents [ 442.916611][T17901] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #2: comm syz.2.4249: mark_inode_dirty error [ 442.927693][T17904] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.943224][T17904] program syz.4.4248 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 442.959629][T14178] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.119794][T17911] netlink: 180900 bytes leftover after parsing attributes in process `wg1'. [ 443.128574][T17911] net_ratelimit: 44 callbacks suppressed [ 443.128646][T17911] netlink: zone id is out of range [ 443.139498][T17911] netlink: zone id is out of range [ 443.144797][T17911] netlink: zone id is out of range [ 443.150273][T17911] netlink: zone id is out of range [ 443.155428][T17911] netlink: zone id is out of range [ 443.160631][T17911] netlink: zone id is out of range [ 443.165836][T17911] netlink: zone id is out of range [ 443.171089][T17911] netlink: zone id is out of range [ 443.176272][T17911] netlink: zone id is out of range [ 443.181454][T17911] netlink: zone id is out of range [ 443.274195][T17918] program syz.5.4252 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 443.568943][T17925] netlink: 312 bytes leftover after parsing attributes in process `syz.3.4255'. [ 443.583418][T17925] loop3: detected capacity change from 0 to 1024 [ 443.597511][T17925] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.698546][T12073] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.762503][T17930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4256'. [ 443.774654][T17925] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4255'. [ 443.813176][T17932] FAULT_INJECTION: forcing a failure. [ 443.813176][T17932] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.826336][T17932] CPU: 1 UID: 0 PID: 17932 Comm: syz.4.4257 Not tainted 6.14.0-rc3-syzkaller-00096-ge9a8cac0bf89 #0 [ 443.826364][T17932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 443.826376][T17932] Call Trace: [ 443.826384][T17932] [ 443.826398][T17932] dump_stack_lvl+0xf2/0x150 [ 443.826427][T17932] dump_stack+0x15/0x1a [ 443.826449][T17932] should_fail_ex+0x24a/0x260 [ 443.826524][T17932] should_fail+0xb/0x10 [ 443.826550][T17932] should_fail_usercopy+0x1a/0x20 [ 443.826598][T17932] _copy_from_user+0x1c/0xa0 [ 443.826709][T17932] __se_sys_mount+0x115/0x2d0 [ 443.826810][T17932] ? fput+0x1c4/0x200 [ 443.826841][T17932] ? ksys_write+0x176/0x1b0 [ 443.826874][T17932] __x64_sys_mount+0x67/0x80 [ 443.826912][T17932] x64_sys_call+0x2c84/0x2dc0 [ 443.826938][T17932] do_syscall_64+0xc9/0x1c0 [ 443.827050][T17932] ? clear_bhb_loop+0x55/0xb0 [ 443.827080][T17932] ? clear_bhb_loop+0x55/0xb0 [ 443.827109][T17932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.827138][T17932] RIP: 0033:0x7fae70ecd0a9 [ 443.827157][T17932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.827186][T17932] RSP: 002b:00007fae6f537038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 443.827209][T17932] RAX: ffffffffffffffda RBX: 00007fae710e5fa0 RCX: 00007fae70ecd0a9 [ 443.827277][T17932] RDX: 0000400000000100 RSI: 0000400000000500 RDI: 0000000000000000 [ 443.827290][T17932] RBP: 00007fae6f537090 R08: 0000400000000a40 R09: 0000000000000000 [ 443.827302][T17932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.827313][T17932] R13: 0000000000000000 R14: 00007fae710e5fa0 R15: 00007ffec95368d8 [ 443.827378][T17932] [ 443.827997][T17932] 9pnet_fd: Insufficient options for proto=fd [ 443.855793][T17925] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.4255'. [ 444.007231][T17928] vhci_hcd: invalid port number 0 [ 444.083235][T12434] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.141970][T17939] loop5: detected capacity change from 0 to 512 [ 444.200540][T17939] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.252216][T17939] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.4260: corrupted inode contents [ 444.274530][T17939] EXT4-fs error (device loop5): ext4_dirty_inode:6042: inode #2: comm syz.5.4260: mark_inode_dirty error [ 444.298452][T17939] EXT4-fs error (device loop5): ext4_do_update_inode:5154: inode #2: comm syz.5.4260: corrupted inode contents [ 444.311565][T14549] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.330927][T17939] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.4260: mark_inode_dirty error [ 444.407291][ T6918] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.499209][T17953] lo speed is unknown, defaulting to 1000 [ 444.526252][ T29] kauditd_printk_skb: 588 callbacks suppressed [ 444.526268][ T29] audit: type=1326 audit(444.568:28440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17958 comm="syz.2.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ade4ad0a9 code=0x7ffc0000 [ 444.568114][T17950] netlink: 'syz.3.4264': attribute type 13 has an invalid length. [ 444.596111][T17962] netlink: 'syz.5.4267': attribute type 3 has an invalid length. [ 444.619325][T17956] SET target dimension over the limit! [ 444.632276][T17959] loop2: detected capacity change from 0 to 512 [ 444.653397][T17959] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 444.673075][ T29] audit: type=1326 audit(444.598:28441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17958 comm="syz.2.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ade4ad0a9 code=0x7ffc0000 [ 444.690519][T17962] loop5: detected capacity change from 0 to 2048 [ 444.696850][ T29] audit: type=1326 audit(444.598:28442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17958 comm="syz.2.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ade4ad0a9 code=0x7ffc0000 [ 444.726214][ T29] audit: type=1326 audit(444.598:28443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17958 comm="syz.2.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ade4ad0a9 code=0x7ffc0000 [ 444.749326][ T29] audit: type=1326 audit(444.598:28444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17958 comm="syz.2.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ade4ad0a9 code=0x7ffc0000 [ 444.773429][ T29] audit: type=1326 audit(444.598:28445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17958 comm="syz.2.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ade4ad0a9 code=0x7ffc0000 [ 444.797674][ T29] audit: type=1326 audit(444.598:28446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17958 comm="syz.2.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ade4ad0a9 code=0x7ffc0000 [ 444.820928][ T29] audit: type=1326 audit(444.598:28447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17958 comm="syz.2.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ade4ad0a9 code=0x7ffc0000 [ 444.845038][ T29] audit: type=1326 audit(444.598:28448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17958 comm="syz.2.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ade4ad0a9 code=0x7ffc0000 [ 444.868133][ T29] audit: type=1326 audit(444.598:28449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17958 comm="syz.2.4259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ade4ad0a9 code=0x7ffc0000 [ 444.922961][T17959] EXT4-fs (loop2): orphan cleanup on readonly fs [ 444.936281][T17959] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4259: bg 0: block 248: padding at end of block bitmap is not set [ 445.003626][T17962] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.065905][T17973] IPv6: NLM_F_REPLACE set, but no existing node found! [ 445.083607][T17959] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.4259: Failed to acquire dquot type 1 [ 445.119310][T17959] EXT4-fs (loop2): 1 truncate cleaned up [ 445.126449][T17959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 445.142338][T17959] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 445.151402][T17959] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 445.178438][T17959] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 445.209733][T17978] loop3: detected capacity change from 0 to 1024 [ 445.234849][T17978] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 445.250325][T17978] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 445.255833][T14178] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.258530][T17978] EXT4-fs (loop3): orphan cleanup on readonly fs [ 445.287262][T17978] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5838: Corrupt filesystem [ 445.293650][T17983] loop4: detected capacity change from 0 to 2048 [ 445.303357][T17978] EXT4-fs (loop3): Remounting filesystem read-only [ 445.311428][T17988] netlink: 'syz.2.4273': attribute type 3 has an invalid length. [ 445.323554][T17978] EXT4-fs (loop3): 1 orphan inode deleted [ 445.329321][T17988] loop2: detected capacity change from 0 to 2048 [ 445.339874][ T6918] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.350380][T17978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 445.366234][T17978] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 445.373384][T17978] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.373835][T17983] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 445.410273][T17988] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 445.551326][T18003] loop5: detected capacity change from 0 to 512 [ 445.563481][T18003] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 445.584779][T14178] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.596179][T18003] EXT4-fs (loop5): orphan cleanup on readonly fs [ 445.603306][T18003] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.4278: bg 0: block 248: padding at end of block bitmap is not set [ 445.621336][T18003] EXT4-fs error (device loop5): ext4_acquire_dquot:6927: comm syz.5.4278: Failed to acquire dquot type 1 [ 445.637260][T18003] EXT4-fs (loop5): 1 truncate cleaned up [ 445.661802][T18003] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 445.687484][T18010] lo speed is unknown, defaulting to 1000 [ 445.693511][T18003] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 445.728896][T18003] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 445.754129][T18012] xt_CT: No such helper "snmp" [ 445.763737][T18008] netlink: 180900 bytes leftover after parsing attributes in process `wg1'. [ 445.775921][T18012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.785099][T18012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.885826][T18019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.895539][T18019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.984240][T18010] siw: device registration error -23 [ 446.217391][T18027] IPv6: NLM_F_CREATE should be specified when creating new route [ 446.283468][T18029] netlink: 'syz.0.4285': attribute type 3 has an invalid length. [ 446.310730][T18029] loop0: detected capacity change from 0 to 2048 [ 446.577859][T18043] loop3: detected capacity change from 0 to 128 [ 446.613448][T18043] smc: net device bond0 applied user defined pnetid SYZ0 [ 446.704412][T18048] loop3: detected capacity change from 0 to 164 [ 446.729079][T18050] loop2: detected capacity change from 0 to 512 [ 446.739253][T18046] lo speed is unknown, defaulting to 1000 [ 446.750128][T18048] ISOFS: unable to read i-node block [ 446.755512][T18048] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 446.766221][T18050] EXT4-fs: Ignoring removed nobh option [ 446.796996][T18050] EXT4-fs error (device loop2): ext4_do_update_inode:5154: inode #3: comm syz.2.4293: corrupted inode contents [ 446.823377][T18050] EXT4-fs (loop2): Remounting filesystem read-only [ 446.837855][T18050] EXT4-fs (loop2): 1 truncate cleaned up [ 446.864078][T18050] SELinux: (dev loop2, type ext4) getxattr errno 5 [ 447.092903][T18057] loop3: detected capacity change from 0 to 512 [ 447.119093][T18057] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 447.133958][T18063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4297'. [ 447.144719][T18060] netlink: 180900 bytes leftover after parsing attributes in process `wg1'. [ 447.161840][T18046] siw: device registration error -23 [ 447.167912][T18057] EXT4-fs (loop3): orphan cleanup on readonly fs [ 447.182188][T18057] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.4295: bg 0: block 248: padding at end of block bitmap is not set [ 447.207727][T18067] lo speed is unknown, defaulting to 1000 [ 447.214315][T18057] EXT4-fs error (device loop3): ext4_acquire_dquot:6927: comm syz.3.4295: Failed to acquire dquot type 1 [ 447.241097][T18057] EXT4-fs (loop3): 1 truncate cleaned up [ 447.261547][T18069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.262067][T18057] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 447.281711][T18069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.292992][T18057] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended [ 447.323755][T18057] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 447.334566][T18073] netlink: 'syz.2.4300': attribute type 3 has an invalid length. [ 447.350331][T18067] siw: device registration error -23 [ 447.366650][T18073] loop2: detected capacity change from 0 to 2048 [ 447.470086][T18081] loop3: detected capacity change from 0 to 512 [ 447.477083][T18081] EXT4-fs: Ignoring removed nobh option [ 447.488428][T18081] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #3: comm syz.3.4302: corrupted inode contents [ 447.500488][T18081] EXT4-fs (loop3): Remounting filesystem read-only [ 447.507574][T18081] EXT4-fs (loop3): 1 truncate cleaned up [ 447.555500][T18081] SELinux: (dev loop3, type ext4) getxattr errno 5 [ 447.659951][T18093] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4307'. [ 447.677561][T18094] 9pnet_fd: Insufficient options for proto=fd [ 447.811135][T18106] lo speed is unknown, defaulting to 1000 [ 447.885100][T18108] lo speed is unknown, defaulting to 1000 [ 447.897872][T18112] loop3: detected capacity change from 0 to 2048 [ 447.937726][T18116] netlink: 'syz.5.4310': attribute type 13 has an invalid length. [ 447.998242][T18121] SET target dimension over the limit! [ 448.078160][T18120] lo speed is unknown, defaulting to 1000 [ 448.215689][T18112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.224227][T18112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.599599][T18129] FAULT_INJECTION: forcing a failure. [ 448.599599][T18129] name failslab, interval 1, probability 0, space 0, times 0 [ 448.609860][T18130] loop5: detected capacity change from 0 to 164 [ 448.612431][T18129] CPU: 1 UID: 0 PID: 18129 Comm: syz.4.4317 Not tainted 6.14.0-rc3-syzkaller-00096-ge9a8cac0bf89 #0 [ 448.612468][T18129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 448.612486][T18129] Call Trace: [ 448.612495][T18129] [ 448.612527][T18129] dump_stack_lvl+0xf2/0x150 [ 448.612564][T18129] dump_stack+0x15/0x1a [ 448.612592][T18129] should_fail_ex+0x24a/0x260 [ 448.612667][T18129] should_failslab+0x8f/0xb0 [ 448.612705][T18129] kmem_cache_alloc_noprof+0x52/0x320 [ 448.612733][T18129] ? skb_clone+0x154/0x1f0 [ 448.612784][T18129] skb_clone+0x154/0x1f0 [ 448.612815][T18129] __netlink_deliver_tap+0x2bd/0x4f0 [ 448.612862][T18129] netlink_unicast+0x64a/0x670 [ 448.612899][T18129] netlink_sendmsg+0x5cc/0x6e0 [ 448.613006][T18129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 448.613045][T18129] __sock_sendmsg+0x140/0x180 [ 448.613085][T18129] ____sys_sendmsg+0x326/0x4b0 [ 448.613119][T18129] __sys_sendmsg+0x19d/0x230 [ 448.613195][T18129] __x64_sys_sendmsg+0x46/0x50 [ 448.613226][T18129] x64_sys_call+0x2734/0x2dc0 [ 448.613288][T18129] do_syscall_64+0xc9/0x1c0 [ 448.613368][T18129] ? clear_bhb_loop+0x55/0xb0 [ 448.613401][T18129] ? clear_bhb_loop+0x55/0xb0 [ 448.613436][T18129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.613527][T18129] RIP: 0033:0x7fae70ecd0a9 [ 448.613546][T18129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 448.613624][T18129] RSP: 002b:00007fae6f537038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 448.613648][T18129] RAX: ffffffffffffffda RBX: 00007fae710e5fa0 RCX: 00007fae70ecd0a9 [ 448.613664][T18129] RDX: 0000000000040000 RSI: 00004000000000c0 RDI: 0000000000000003 [ 448.613679][T18129] RBP: 00007fae6f537090 R08: 0000000000000000 R09: 0000000000000000 [ 448.613695][T18129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 448.613711][T18129] R13: 0000000000000000 R14: 00007fae710e5fa0 R15: 00007ffec95368d8 [ 448.613770][T18129] [ 448.826200][T18106] siw: device registration error -23 [ 448.826981][T18120] siw: device registration error -23 [ 448.845884][T18130] ISOFS: unable to read i-node block [ 448.851294][T18130] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 448.977785][T18135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4320'. [ 449.045157][T18142] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4324'. [ 449.084292][T18140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.093666][T18140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.105128][T18145] loop3: detected capacity change from 0 to 2048 [ 449.183962][T18153] loop5: detected capacity change from 0 to 2048 [ 449.279859][T18161] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4329'. [ 449.295206][T18160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4327'. [ 449.468755][T18163] xt_CT: No such helper "snmp" [ 449.486709][T18163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.496367][T18163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.544341][ T29] kauditd_printk_skb: 829 callbacks suppressed [ 449.544358][ T29] audit: type=1326 audit(449.578:29265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18144 comm="syz.3.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f254eab4067 code=0x7ffc0000 [ 449.573724][ T29] audit: type=1326 audit(449.588:29266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18144 comm="syz.3.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f254ea59299 code=0x7ffc0000 [ 449.596733][ T29] audit: type=1326 audit(449.588:29267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18144 comm="syz.3.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f254eabd0a9 code=0x7ffc0000 [ 449.619708][ T29] audit: type=1326 audit(449.618:29268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18144 comm="syz.3.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f254eab4067 code=0x7ffc0000 [ 449.642650][ T29] audit: type=1326 audit(449.618:29269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18144 comm="syz.3.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f254ea59299 code=0x7ffc0000 [ 449.704238][ T29] audit: type=1326 audit(449.618:29270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18144 comm="syz.3.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f254eabd0a9 code=0x7ffc0000 [ 449.728034][ T29] audit: type=1326 audit(449.618:29271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18144 comm="syz.3.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f254eab4067 code=0x7ffc0000 [ 449.751026][ T29] audit: type=1326 audit(449.618:29272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18144 comm="syz.3.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f254ea59299 code=0x7ffc0000 [ 449.774011][ T29] audit: type=1326 audit(449.618:29273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18144 comm="syz.3.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f254eabd0a9 code=0x7ffc0000 [ 449.796953][ T29] audit: type=1326 audit(449.618:29274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18144 comm="syz.3.4325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f254eab4067 code=0x7ffc0000 [ 449.823329][T18167] loop4: detected capacity change from 0 to 512 [ 449.855503][T18167] program syz.4.4330 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 450.023966][T18175] loop3: detected capacity change from 0 to 164 [ 450.031191][T18175] ISOFS: unable to read i-node block [ 450.037394][T18175] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 450.092339][T18179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4334'. [ 450.154321][T18184] lo speed is unknown, defaulting to 1000 [ 450.204808][T18188] SET target dimension over the limit! [ 450.250586][T18191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4339'. [ 450.266547][T18193] loop3: detected capacity change from 0 to 512 [ 450.283389][T18193] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.4340: corrupted inode contents [ 450.303447][T18193] EXT4-fs error (device loop3): ext4_dirty_inode:6042: inode #2: comm syz.3.4340: mark_inode_dirty error [ 450.315521][T18193] EXT4-fs error (device loop3): ext4_do_update_inode:5154: inode #2: comm syz.3.4340: corrupted inode contents [ 450.331618][T18193] EXT4-fs error (device loop3): __ext4_ext_dirty:207: inode #2: comm syz.3.4340: mark_inode_dirty error [ 450.437764][T18203] loop2: detected capacity change from 0 to 512 [ 450.451887][T18204] lo speed is unknown, defaulting to 1000 [ 450.459316][T18203] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 450.474714][T18203] EXT4-fs (loop2): orphan cleanup on readonly fs [ 450.482551][T18208] SET target dimension over the limit! [ 450.483783][T18203] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4344: bg 0: block 248: padding at end of block bitmap is not set [ 450.508285][T18203] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.4344: Failed to acquire dquot type 1 [ 450.545465][T18203] EXT4-fs (loop2): 1 truncate cleaned up [ 450.576797][T18213] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4347'. [ 450.599206][T18216] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4346'. [ 450.619176][T18203] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 450.627917][T18203] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 450.657187][ T3374] kernel write not supported for file bpf-prog (pid: 3374 comm: kworker/1:4) [ 450.661282][T18203] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 450.730099][T18223] lo speed is unknown, defaulting to 1000 [ 450.759156][T18227] netlink: 180900 bytes leftover after parsing attributes in process `wg1'. [ 450.768096][T18227] net_ratelimit: 24 callbacks suppressed [ 450.768109][T18227] netlink: zone id is out of range [ 450.778952][T18227] netlink: zone id is out of range [ 450.784426][T18227] netlink: zone id is out of range [ 450.789935][T18227] netlink: zone id is out of range [ 450.795360][T18227] netlink: zone id is out of range [ 450.800831][T18227] netlink: zone id is out of range [ 450.806296][T18227] netlink: zone id is out of range [ 450.811499][T18227] netlink: zone id is out of range [ 450.816792][T18227] netlink: zone id is out of range [ 450.825150][T18227] netlink: set zone limit has 8 unknown bytes [ 450.890183][T18223] siw: device registration error -23 [ 450.949577][T18236] loop3: detected capacity change from 0 to 128 [ 450.974720][T18236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4356'. [ 451.047440][T18241] lo speed is unknown, defaulting to 1000 [ 451.093635][T18238] SET target dimension over the limit! [ 451.146522][T18249] loop3: detected capacity change from 0 to 512 [ 451.180698][T18249] program syz.3.4359 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 451.210857][ T24] kernel write not supported for file bpf-prog (pid: 24 comm: kworker/1:0) [ 451.363910][T18265] IPv6: NLM_F_REPLACE set, but no existing node found! [ 451.396048][T18267] loop0: detected capacity change from 0 to 128 [ 451.435210][T18271] loop2: detected capacity change from 0 to 512 [ 451.444220][T18271] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 451.461390][T18271] EXT4-fs (loop2): orphan cleanup on readonly fs [ 451.468666][T18271] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.4370: bg 0: block 248: padding at end of block bitmap is not set [ 451.484049][T18271] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.4370: Failed to acquire dquot type 1 [ 451.496801][T18271] EXT4-fs (loop2): 1 truncate cleaned up [ 451.504675][T18271] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 451.513303][T18271] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 451.525294][T18271] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback. [ 451.753063][T18290] loop2: detected capacity change from 0 to 512 [ 451.796210][T18290] program syz.2.4377 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 451.856889][T18296] IPv6: NLM_F_REPLACE set, but no existing node found! [ 451.952155][T18302] loop3: detected capacity change from 0 to 164 [ 451.960702][T18302] ================================================================== [ 451.968920][T18302] BUG: KCSAN: data-race in __filemap_add_folio / filemap_write_and_wait_range [ 451.977992][T18302] [ 451.980332][T18302] read-write to 0xffff888100631830 of 8 bytes by task 3290 on cpu 1: [ 451.988422][T18302] __filemap_add_folio+0x430/0x6f0 [ 451.993568][T18302] filemap_add_folio+0x9c/0x1b0 [ 451.998443][T18302] page_cache_ra_unbounded+0x1c1/0x350 [ 452.003929][T18302] page_cache_sync_ra+0x252/0x680 [ 452.009066][T18302] filemap_get_pages+0x2ca/0x11a0 [ 452.014095][T18302] filemap_read+0x230/0x8c0 [ 452.018622][T18302] blkdev_read_iter+0x228/0x2d0 [ 452.023501][T18302] vfs_read+0x5cc/0x6f0 [ 452.027724][T18302] ksys_read+0xe8/0x1b0 [ 452.031898][T18302] __x64_sys_read+0x42/0x50 [ 452.036419][T18302] x64_sys_call+0x2874/0x2dc0 [ 452.041114][T18302] do_syscall_64+0xc9/0x1c0 [ 452.045743][T18302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.051724][T18302] [ 452.054057][T18302] read to 0xffff888100631830 of 8 bytes by task 18302 on cpu 0: [ 452.061689][T18302] filemap_write_and_wait_range+0x59/0x360 [ 452.067523][T18302] set_blocksize+0x1d3/0x270 [ 452.072125][T18302] sb_set_blocksize+0x2c/0xb0 [ 452.076813][T18302] isofs_fill_super+0x9c2/0x12b0 [ 452.081771][T18302] get_tree_bdev_flags+0x29f/0x310 [ 452.086899][T18302] get_tree_bdev+0x1f/0x30 [ 452.091331][T18302] isofs_get_tree+0x1c/0x30 [ 452.095849][T18302] vfs_get_tree+0x56/0x1e0 [ 452.100307][T18302] do_new_mount+0x227/0x690 [ 452.104835][T18302] path_mount+0x49b/0xb30 [ 452.109186][T18302] __se_sys_mount+0x27f/0x2d0 [ 452.113883][T18302] __x64_sys_mount+0x67/0x80 [ 452.118491][T18302] x64_sys_call+0x2c84/0x2dc0 [ 452.123187][T18302] do_syscall_64+0xc9/0x1c0 [ 452.127793][T18302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.133698][T18302] [ 452.136019][T18302] value changed: 0x0000000000000001 -> 0x0000000000000002 [ 452.143124][T18302] [ 452.145448][T18302] Reported by Kernel Concurrency Sanitizer on: [ 452.151597][T18302] CPU: 0 UID: 0 PID: 18302 Comm: syz.3.4382 Not tainted 6.14.0-rc3-syzkaller-00096-ge9a8cac0bf89 #0 [ 452.162366][T18302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 452.172431][T18302] ================================================================== [ 452.181235][T18300] loop0: detected capacity change from 0 to 128 [ 452.206346][T18302] ISOFS: unable to read i-node block [ 452.211722][T18302] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.