last executing test programs: 23m25.566248813s ago: executing program 32 (id=1345): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000000), 0x0}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r5}, 0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r6, @ANYRESOCT], 0xb4}}, 0x0) 20m7.261740851s ago: executing program 33 (id=2824): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000480)=@abs={0x0, 0x0, 0x8004e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r3}, 0x10) clock_gettime(0x0, 0x0) clock_gettime(0x0, &(0x7f0000000240)) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='map_files\x00') 8m56.643642517s ago: executing program 34 (id=6370): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) syz_clone3(&(0x7f0000000740)={0x101000, &(0x7f0000000100), &(0x7f0000000300), &(0x7f0000000400), {0xb}, &(0x7f0000000540)=""/114, 0x72, &(0x7f0000000680)=""/185, &(0x7f0000000480)=[r0, r0, r0, r0, r0, r0], 0x6}, 0x58) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$BTRFS_IOC_LOGICAL_INO(r4, 0xc0389424, &(0x7f0000000800)={0xa84, 0x20, '\x00', 0x1, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x46e, &(0x7f0000000400)="$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") open(&(0x7f0000000040)='./file0\x00', 0x0, 0x120) 7m22.913872726s ago: executing program 35 (id=6736): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r2}, 0x18) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) socket$netlink(0x10, 0x3, 0x2) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x200000, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) 5m28.033024217s ago: executing program 6 (id=8143): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4b, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x1400, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) 5m26.320910479s ago: executing program 6 (id=8152): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc1d}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) write$UHID_INPUT(r5, &(0x7f0000002080)={0xf, {"a2e3ad21e08eeb661b5e190987f70e06d038e7ff7fc6e5539b0d650e8b089b3f313b6d090890e0878f0e1ac6e7049b3146959b649a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b3831070d07440936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0da42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}]}]}]}}]}, 0x54}}, 0x0) 5m26.28374263s ago: executing program 6 (id=8153): socket$packet(0x11, 0x3, 0x300) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1100000000f336, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="30000000100001000000000000d23eeb9db03def69b651b69d9534d75fcdec482a4ffdeb55c0cf954b21c2d743d2537df3f2050dd4110d2cc41fef23281f2a70f4848c6cf0b177e0b83ced710c442911695522647f4e49bd7c6d3698531ec985f268c70b2b87c1debbcac7f02b9bcfa8562c4fea109ed2b9ff15e5f54f0996309351aac5814c4eecbc6fcf4fe719368f0e123f07c9078cabf4bdbc5a3c1ce693e6a293bdbd6e5e56207e02651186df754b267a5abb1760d4b5a9eaedb97efb8c8f957aae73a11a005f7f731d6a7d4740dba403c4f6ac8c49", @ANYRES32=0x0, @ANYBLOB='\x00'/24], 0x30}}, 0x0) sendto(r0, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRESOCT, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r2) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70c5db8d, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x0, 0x401, 0x20001, 0x800, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xfffffffdffffffff, 0xffffffffffffffff, 0x1) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105500, 0x0) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x24048000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) ioctl$FIDEDUPERANGE(r6, 0xc0189436, 0x0) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010006000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0xc4) 5m25.945327667s ago: executing program 6 (id=8158): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000140), 0x2, 0xbca, &(0x7f0000000600)="$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") fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) r1 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x380000f, 0x11, r1, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x20000000, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_io_uring_setup(0x1f87, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_read_part_table(0x618, &(0x7f0000002200)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x8c) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r3 = open(&(0x7f0000000080)='./bus\x00', 0x147842, 0x49) preadv2(r3, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x1, 0x2200, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000d40)={0x0, 0x7000000, &(0x7f00000023c0)=[{&(0x7f0000000b40)='?', 0x1}, {0x0, 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x20001) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r5, &(0x7f0000000100)=""/154, 0x9a) socket$can_j1939(0x1d, 0x2, 0x7) getpeername$netlink(r5, &(0x7f0000000000), &(0x7f0000000040)=0xc) 5m25.74294558s ago: executing program 6 (id=8160): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r1 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r1, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0xc, r1, 0x88, 0x0, 0x4, 0xfffffffffdfff7ff}) 5m25.085231193s ago: executing program 6 (id=8172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") 5m25.062265693s ago: executing program 36 (id=8172): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000540)={[{@resuid}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$eJzs3M2PU1UbAPDn3k6HlxdwRsQPPtRRNE78mGEAlYULNZq4wMREF7qczAwEKYxhxkQIUTAGV8aYuDcu/Rdc6cYYVyZudW9IiGEDuKq57b1MW9rCdFqq098vuXDOvedyztNzT3vuPS0BjKyp7I8kYntE/B4RE/Vsc4Gp+l/Xr55fuHH1/EIS1erbfyW1cteunl8oihbnbcsz02lE+lkSe9vUu3L23Mn5SmXpTJ6fXT31wezK2XPPnTg1f3zp+NLpg0eOHD409+ILB5/vS5xZm67t+Xh53+433vvqzaNfNMXfEkefTHU7+GS12ufqhmtHQzoZG2JDWJdSRGTdVa6N/4koxVrnTcTrnw61ccBAVavV6rbOhy9UgU0siea8IQ+jovigz+5/i611EvDy4KYfQ3fllfoNUBb39XyrHxmLNC9Tbrm/7aepiHj3wt/fZFsM5jkEAECTH7L5z7Pt5n9pPNBQ7p58bWgyIu6NiJ0RcV9E7IqI+yNqZR+MiIfWWX/rIsmt85/0ck+B3aFs/vdSvrbVPP8rZn8xWcpzO2rxl5NjJypLB/LXZDrKW7L8XJc6fnztty87HWuc/2VbVn8xF8zbcXlsS/M5i/Or8xuJudGVixF7xtrFn9xcCUgiYndE7OmxjhNPf7ev07Hbx99FH9aZqt9GPFXv/wvREn8h6b4+Ofu/qCwdmC2uilv98uultzrVv6H4+yDr//+3vf5vxj+ZNK7Xrqy/jkt/fN7xnqbX6388eaeWHs/3fTS/unpmLmI8OVpvdOP+g2vnFvmifBb/9P72439nrL0SeyMiu4gfjohHIuLRvO2PRcTjEbG/S/w/v/rE+73HP1hZ/Ivr6v+1xHi07mmfKJ386fumSidvif9G9/4/XEtN53vu5P3vTtrV29UMAAAA/z1pRGyPJJ25mU7TmZn69+V3RaSV5ZXVZ44tf3h6sf4bgckop8WTromG56Fz+W19PX8xIupfLSiOH8qfG39d2lrLzywsVxaHHTyMuG0dxn/mz9KwWwcMnN9rwegy/mF0Gf8wuox/GF1txv/WYbQDuPvaff5/MoR2AHdfy/i37AcjxP0/jK6O438z/88/QI3PfxhJK1vj9j+S75oo/qUeT9+0iSj/K5qx8UQ1adu5kQ67YRKDTAz3fQkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBf/gkAAP//qmHgTw==") 5m13.68340834s ago: executing program 5 (id=8378): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000016c0), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'gre0\x00', 0x0}) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x3c0, 0x43) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendfile(r3, r2, 0x0, 0x80004700) 5m13.551513023s ago: executing program 5 (id=8381): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a312200000008000540000000020900020073797a310000000008000a40fffffffc480000000c0a"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 5m13.468147524s ago: executing program 5 (id=8383): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x4b, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x1400, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) 5m12.302993827s ago: executing program 5 (id=8408): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000140), 0x2, 0xbca, &(0x7f0000000600)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x4002011, r0, 0x3000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) (fail_nth: 4) 5m12.10895214s ago: executing program 5 (id=8411): bpf$MAP_CREATE(0x0, 0x0, 0x48) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8000008000000b, 0xb76e}, 0x0, 0x0, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x17, 0x40, 0x6, 0x0, 0x0, 0x10609, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x108bcf, 0x7ff, 0xffff, 0x8, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r1, 0x0) r5 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x5884, 0x8, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000000)=ANY=[@ANYRES32=r2, @ANYRES8=r1, @ANYRESDEC=r0], 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000600)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) unshare(0x20000400) r8 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r8, 0x29, 0x7, 0x0, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5m9.948726512s ago: executing program 5 (id=8425): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r2, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r2, 0x88, 0x0, 0x4, 0xfffffffffdfff7ff}) 5m9.914603102s ago: executing program 37 (id=8425): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") r2 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) fallocate(r2, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0xc, r2, 0x88, 0x0, 0x4, 0xfffffffffdfff7ff}) 3m8.878342721s ago: executing program 0 (id=10554): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r1, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x10140, 0x0) 3m8.878027421s ago: executing program 0 (id=10555): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r0, 0x0, 0x0) 3m8.506046518s ago: executing program 0 (id=10562): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x2}, 0x8) close(r1) syz_usb_connect(0x0, 0x57, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) 3m6.053897125s ago: executing program 2 (id=10632): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000180)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x60}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r2, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0}, 0x80000000}], 0x1, 0x10140, 0x0) 3m6.022407265s ago: executing program 2 (id=10633): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000200)={0x0, 0xb007}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) socket$inet(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r3}, 0x14) 3m6.021610325s ago: executing program 2 (id=10634): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="fde1479eebc315c0e04920a1b0f85ac31edd340ad215b3f4b3de8ef246f41f1af2960011a19ee2d06951fd51b5fbf1ef921db0b8e4958ff77fa9c2a552a38219acce", 0x42}, {&(0x7f00000000c0)="5b58a5c73f9ea2ab3874ed1b423a3e4336a65797e9deb219dae4cc9c4321c361c8b9e8db2c4721527813ee719ba411991627b1fa3d0476f9d8c1225d7a39ab6d5da489b7402430e3b27718743bc2c79ba39f633b90ccf2b8e3ce9fad064b9ac126f1106288567b0e7e0d271a398a066c1a1182d151de0dc9d71f63", 0x7b}, {&(0x7f0000000200)="0b94eb87744aff591aa80ace49c2fae27642a0d2822dd34004c94d42ec632c3c5fe9c5f0090559b30923b24f60e369a5937b07372268d873c5671484507802205e37bedaf714d4e001383100348884a32ae99543d71c11ffeab0792068136d407c68fae532930b589a310c3d7caebdce11fc6355aef21ca3a8d79632ab8a2e007f2eaf3db7877845ac6ae8c2054f1ece118cfc66fa76ba46ec65c65574f90067f1cb15467dcca5a1c7e6119220e21857ff6b1eb48e820133f49fa06e41a8", 0xbe}, {&(0x7f00000002c0)}], 0x4, 0x0, 0x0, 0x4a0f0000}, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000380), r1) socket$can_raw(0x1d, 0x3, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0xa, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {0x0, 0xfff1}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0xa000, {0x0, 0x0, 0x0, r9, {0xe, 0x7}, {0x8, 0xfff1}, {0x7, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_KEY_ID={0x8, 0x1a, 0xfffffffb}, @TCA_FLOWER_CLASSID={0x8, 0x1, {0xd, 0x3}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000090}, 0x40800) r10 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r10, @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) setresgid(0xee01, 0x0, 0x0) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/59, 0x328000, 0x800, 0x11c, 0x3}, 0x20) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r12, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) write$P9_RSTATu(r10, &(0x7f0000000a00)=ANY=[@ANYBLOB="5d0000007d000000004300080000000000040300000004000000000000000000000209000000060000000e00000000000000000005005b3a7d2f280100000a00275d5b5de0212b10252605004950565300916590eb6abc680506f503cbe4ecc822df48df65cc1d93673765bbb084787bd587b174576e82b82931cba0bf822733aff0a189d79ae70f05eeeb143da6e9e1f33721a160f2142e24a934aab7502852b698797e166cd0fcf3c9f16b14fcfd97008b6df0f0ed5fb7963552a1674e4538bdd15924fa38dd52eb4b4bc8d28301c4459bf1", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=r11], 0x5d) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0xe, r14, 0x32}, 0x10) inotify_init() bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000880)=ANY=[@ANYRES32=r10, @ANYRESDEC=0x0, @ANYRESOCT=r10, @ANYRESOCT=0x0, @ANYRES64=r0, @ANYRESOCT=r12, @ANYRESDEC=r12, @ANYRESOCT=r13, @ANYRES8, @ANYRES16=r14], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r10, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 3m5.949674467s ago: executing program 0 (id=10635): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) syz_clone(0x50a60080, 0x0, 0x0, 0x0, 0x0, 0x0) 3m5.879341278s ago: executing program 2 (id=10636): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = pidfd_getfd(r1, r1, 0x0) setns(r2, 0x66020000) syz_clone(0x50a60080, 0x0, 0x0, 0x0, 0x0, 0x0) (fail_nth: 1) 3m5.878987618s ago: executing program 2 (id=10637): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x1, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) rt_sigpending(&(0x7f0000000000), 0x8) 3m5.856871049s ago: executing program 2 (id=10640): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xbfb}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) 3m5.836909839s ago: executing program 0 (id=10641): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, 0x0, 0x0) perf_event_open(&(0x7f0000000400)={0x8, 0x80, 0x0, 0x94, 0x10, 0x0, 0x82, 0xf2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xb}, 0x1}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x14, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x6, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1e, 0x12, r2, 0x0) 3m5.825270609s ago: executing program 38 (id=10640): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xbfb}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000080)=r2}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) 3m5.77402995s ago: executing program 0 (id=10644): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) setrlimit(0x9, &(0x7f0000000000)) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 3m5.77377484s ago: executing program 39 (id=10644): gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0xee31b000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x18) setrlimit(0x9, &(0x7f0000000000)) close(r0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0xc000}, 0x10) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 15.729812951s ago: executing program 1 (id=13491): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffd92, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000009c0)=0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000a00)={'\x00', 0x0, 0xc, 0x7, 0x4, 0x0, r3}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x84, &(0x7f0000000240)={&(0x7f00000006c0)=@delchain={0x8c, 0x64, 0xf31, 0xfffffffb, 0x400, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x5c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x58, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x54, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0xd}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x7}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x5, 0x2, 0x1000}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x2}]}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4008051}, 0x4000) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@const={0x1, 0x0, 0x0, 0xa, 0x2}]}, {0x0, [0x2e, 0x0, 0x61, 0x30, 0x0]}}, &(0x7f0000000380)=""/189, 0x2b, 0xbd, 0x0, 0xfffffff9}, 0x28) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r1, 0xe0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000540)=[0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xf8, &(0x7f0000000640)=[{}], 0x8, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x29, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r9 = syz_open_dev$mouse(&(0x7f0000000880), 0x9, 0x88900) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x1a, &(0x7f0000000280)=@raw=[@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @map_idx={0x18, 0x6, 0x5, 0x0, 0x9}, @ldst={0x3, 0x2, 0x4, 0x2, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffc}], &(0x7f0000000040)='syzkaller\x00', 0xffffffff, 0x36, &(0x7f0000000080)=""/54, 0x41000, 0x85, '\x00', r6, @fallback=0x20, r7, 0x8, &(0x7f0000000200)={0x1, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x6, 0xfffffffa, 0x8}, 0x10, r8, r9, 0x0, 0x0, &(0x7f00000008c0), 0x10, 0xc6e}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x2f, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r10}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f0000000680)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt\x00\b\x00\x00\x00\x00\x00\x00uni_xlate=1,showexec,flush,shortname=win95,nonumtail=0,rodir,utf8=0,shortname=mixed,umask=00000000006,\x00'/153], 0x1, 0x26c, &(0x7f0000000340)="$eJzs3U9rU1kYB+A3bTpJC0OyGCgzDMwdZjOr0HaYfcrQgWECipKFriw2RWlqoYWCLtruit9Bv4Iu3QouxK1fQASpghvrqgshEm//JDWJjZpG7PNs+nLu++Ock17upYueXPl1eWlhZW1xd3cn8vlMZMtRjr1MFGMkRiO1FQDA92Sv0Yg3jdSw1wIAnA7vfwA4e3q9/zNbh2PnT39lAMCgfNHf/yMDWRIAMGAXL13+f7ZSmbuQJPmI5e316no1/Zlen12M61GPWkxFId5FNA6l9b//VeamkqaXxcgvb46k+c316mh7fjoKUeycn05SUW3mDvJjMbGffzYRtZiJQvzUOT/TMf9D/PlHy/ylKMTTq7ES9ViIZjbN5yJiYzpJ/jlXOZbPfegDAAAAAAAAAAAAAAAAAAAAAIBBKCWHiu3n36Tn95RK3a6n+dbzgcZ7nQ/U2Dx2vk42fskOd+8AAAAAAAAAAAAAAAAAAADwrVi7eWtpvl6vrfYqbjy592gnlwY+2dy7yOzP219qu2fP+Ml2caz48fcXdzpdykWu38/n84qxiGgdSfanfPjbACf9WsXjnWs//7U2+Xe3nsi2jtxubrWtp8uNlB3UB/66ENG1J9/3Ddla3D8oym8/6jm4lWqr48P+xU3eLc8/2Hj+6qSpHg+NxuggHkUAAAAAAAAAAAAAAAAAAHDmHf3T77BXAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDc/T9//0WuWgbyXdt3hr2HgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4H0AAAD//7qXlSU=") mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r11, 0x40107447, &(0x7f00000000c0)={0x1, &(0x7f0000000300)=[{0x50, 0xff, 0x0, 0x6}]}) write$ppp(r11, &(0x7f0000000380), 0x0) io_uring_setup(0x105f, 0x0) r12 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) 15.149220713s ago: executing program 1 (id=13494): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$eJzs3c9vG1kdAPDvOHFIdlOSBQ7LSuxGiFV3BbWTDbuNOLRFQnCqBJR7CIkTRXHiKHbaJqpQKs4ICSFAcIETFyT+ACTUPwEhVYJ7hRCogrYcOBSMxh63wdhJqtpx6nw+0uu8efPj+32uPPabmXgCOLdmIuJaRIxExPsRMZW157ISB82Srvf40Z3ltCRRr9/4exJJ1tbaV5JNX882G4+Ib34t4jtJ0mw4pLq3v7FULpd2svlibXO7WN3bv7S+ubRWWittzc/PfbRweeHDhdme9fXKV/7y4x/86qtXfveFWw8W//bed9N8J7Nlh/vRS83XJN94LVpGI2KnH8EGYCTrT/4kKyf9zwcAgKOl3/E/ERGfjYgnPxt0NgAAAEA/1K9OxtMkog4AAAAMrVzjHtgkV8juBZiMXK5QaN7D+6m4GuVKtfb51cru1krzXtnpyOdW18ul2exe4enIJ+n8XKP+fP6Dtvn5iHgjIn40NdGYLyxXyiuDPvkBAAAA50Q6zp/MNevp5J9TzfE/AAAAMGSmB50AAAAA0HfG/wAAADD8/n/8P9OcJKOnnwwAAADQa1+/fj0t9dbzr1du7u1uVG5eWilVNwqbu8uF5crOdmGtUllr/Gbf5nH7K1cq21+Mrd3bxVqpWitW9/YXNyu7W7XFxnO9F0snek40AAAA0FNvvHPvT0lEHHxpolFSY9kyY3UYbrkXWz3pVx7A6RsZdALAwLjBF84v73/guIH9+CnlAQAA9M/FTz+7/j8Rh67/X3jg+j8Muxe8/g8MEdf/4fxqu/73ixNt9LTen2SAU2WMDxx3HqDr9f/f9z4XAACgPyYbJckVsjHAZORyhULEhcZjAfLJ6nq5NBsRH4+IP07lP5bOzw06aQAAAAAAAAAAAAAAAAAAAAAAAAB4xdTrSdQBAACAoRaR+2sSEUmMR0x9brL9/MBY8q+pxjQibv38xk9uL9VqO3Np+z+etdd+mrV/MIgzGAAAAEC71ji9NY4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF56/OjOcqscan6333EffjkipjvFH43xxnQ88hHx2pMkRg9tl0TESA/iH9yNiDc7xU/StGI6y6I9fi4iJgYc//UexIfz7F56/LnW6f2Xi5nGtPP7bzQrL+vhTLfjX+7Z8W+ky/HvwjH7Hsumb93/TbFr/LsRb412Pv604o+95PH329/a3++2rP7LiIsdP3+S/4lVrG1uF6t7+5fWN5fWSmulrfn5uY8WLi98uDBbXF0vl7J/O8b44Wd++5+j+v9al/jTWf+T9v4nzZzq9c77fKdt/t/3bz/6ZKcVk4iH38/qHf7/3+wWP3vt380+B9LlF1v1g2b9sLd//Ye3j+r/Spf+jx8RP217r9tO27z/je/9uVnLn3ALAKCfqnv7G0vlcmnnVa+knTkDafSwMnM20hj2SmsUdVbyOSuVwR6XAACA3nv+pX/QmQAAAAAAAAAAAAAAAAAAAMD51fr7/9ZvOffj58QOxxtvVZLk1PsKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCU/wYAAP//VsvQDw==") syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) r0 = syz_open_procfs(0x0, 0x0) getdents64(r0, &(0x7f0000002080)=""/170, 0xaa) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') umount2(&(0x7f00000002c0)='./file0\x00', 0x2) socket$rds(0x15, 0x5, 0x0) unshare(0x6020400) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0xb, 0xfffffffe, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x5, 0x762, 0xffffffff, 0x0, 0xe, 0x2b12, 0xff, 0x6, 0x1c00, 0xb, 0x40, 0xbed4, 0x4, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x384, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x5, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x8, 0x80000000, 0xfdffffff, 0x0, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20009, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x6, 0x4, 0x9, 0x400, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 14.974875446s ago: executing program 1 (id=13497): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x63, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x90, &(0x7f0000000180)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000001c0), &(0x7f0000000300), 0x8, 0x61, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x800, 0x20) getdents64(r3, 0xfffffffffffffffe, 0x29) bind$802154_dgram(r3, &(0x7f00000007c0)={0x24, @none={0x0, 0xffff}}, 0x14) r4 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYRESOCT=r4], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x100800004, 0x30118, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffcb7, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x110000, 0x0, 0x0, 0x8, 0x20004, 0xeffc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) close(r6) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 14.501741315s ago: executing program 1 (id=13502): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000e00)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@nodelalloc}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@grpquota}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0xa20, 0x8000c64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioprio_set$pid(0x2, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) lseek(r3, 0x3, 0x1) pread64(r3, &(0x7f0000001a80)=""/105, 0x69, 0x27) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r6 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r6, r6, 0x21) 14.23466691s ago: executing program 1 (id=13505): syz_open_dev$evdev(0x0, 0x2, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) (async) getsockname(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) sendto$inet(r0, &(0x7f0000000200)='%', 0x1, 0x4000054, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000600)={{{@in=@multicast2, @in6=@private1}}, {{@in=@broadcast}, 0x0, @in=@loopback}}, &(0x7f00000001c0)=0xe8) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) (async) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfe, 0x0, 0x7ffc9ffe}]}) (async, rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) dup(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0xffffffffffff8001}, 0x18) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x1800, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0x6}, {0xf}, {0xe, 0xd}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x40080}, 0x4000c00) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000280), &(0x7f00000002c0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) (async, rerun: 64) capget(&(0x7f0000000040)={0x20080522}, 0x0) (async, rerun: 64) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x7fffffff}) 14.083251353s ago: executing program 1 (id=13508): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000) 14.061607973s ago: executing program 40 (id=13508): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x5, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="d8000000180081054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00fff00401a80008000800104004080000055c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe144ecc447c65e206d25b4084121d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300fc0d15", 0xd8}], 0x1}, 0x4000000) 3.655046821s ago: executing program 9 (id=13661): syz_usb_connect$cdc_ncm(0x0, 0x8f, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newaddr={0x64, 0x14, 0x9535393fea6295b5, 0x70bd27, 0x25dfdbff, {0xa, 0x17, 0x0, 0xff, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFA_FLAGS={0x8, 0x8, 0x288}, @IFA_RT_PRIORITY={0x8, 0x9, 0x5}, @IFA_CACHEINFO={0x14, 0x6, {0x7f, 0x94a, 0x8001, 0x6}}]}, 0x64}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000004c0), 0x1, 0x0) write$binfmt_register(r2, &(0x7f0000000500)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x6, 0x3a, '[p!!]-+', 0x3a, '\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3a, './file0'}, 0x3c) 3.204048439s ago: executing program 4 (id=13666): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x55, 0x55, 0x4, [@restrict={0x7, 0x0, 0x0, 0xb, 0x3}, @datasec={0xd, 0x1, 0x0, 0xf, 0x1, [{0x1, 0xffc0, 0x6}], 'G'}, @var={0x1, 0x0, 0x0, 0xe, 0x5}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x2}]}]}, {0x0, [0x30, 0x61]}}, &(0x7f0000000480)=""/167, 0x74, 0xa7, 0x0, 0x7}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc8, '\x00', 0x0, @fallback=0x7, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x100003c}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x69, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="e800000002010101000000000000000002000008080003"], 0xe8}, 0x1, 0x0, 0x0, 0x2000c050}, 0x40000c0) 2.979266524s ago: executing program 9 (id=13671): mkdir(&(0x7f0000000200)='./file0\x00', 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='9p_protocol_dump\x00', r1}, 0x18) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) 2.714761739s ago: executing program 9 (id=13674): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18010000bc0000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, 0x2}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff53000000800395032303030"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) lstat(&(0x7f0000000440)='./file0\x00', 0x0) 2.668312269s ago: executing program 4 (id=13677): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000500), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffe0}]}, &(0x7f0000000100)='GPL\x00', 0x4, 0xd2, &(0x7f00000002c0)=""/210}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00}, 0x94) syz_mount_image$vfat(&(0x7f0000001800), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b2620df1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc561a62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x4, 0x26d, &(0x7f00000005c0)="$eJzs281OE18Yx/EfL/8/CMJUURSM8YludDOBegUNgcTYRIPU+JKYDDLVpkNLOg2mxgg7t14HcenOxHgDbLwCF+7YuGRhHMNMLS2UqAuZaL+fzXnI4deck+dMcxadnXuvV8vF0C16dfX3mQalTe1KGfVrQIm+5tgf1/+r3aauTeQ/Xbxz/8HNXD4/v2i2kFu6njWz8Uvvn714c/lDffTu2/F3Q9rOPNr5kv28Pbk9tfNt6WkptFJolWrdPFuuVuvecuDbSiksu2a3A98LfStVQr/WMV8MqmtrDfMqK2MjazU/DM2rNKzsN6xetXqtYd4Tr1Qx13VtbET4mcLW4qKXS3sV+LNqtZw3J2n60ExhK5UFAQCAVHH/72Xc/3vB3v3/YfP57cT9HwAAAAAAAAAAAAAAAAAAAACAv8FuFDlRFDk/xv+k+A2fqPn3CUkjkkYlnZQ0JmlckiMpI+mUpNOSJiSdkXRW0qSkc5LOS5pq+6y094rDjur/AP3vCTz/vY3+97a2F3eHpdVX64X1QjIm87miSgrka0aOvsa9bErqhRv5+RmLZXRhdaOZ31gvDHTmZ+XsHZhu+dkkb535ofjctfJZOXsHrFs+2zU/rKtX2vKuHH18rKoCrcRncj//ctZs7lb+QH46/r9/nWstXfvnukfNJ/lfOB/RTNf+DGp6MN29Qwobz8teEPg1CgoKilaR9jcTjsN+09NeCQAAAAAAAAAAAAAAAADgdxzHzwnT3iMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAd9DwAA//+TC2AL") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8201) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000004c0)=0x1000000, 0x4) 2.660824329s ago: executing program 9 (id=13678): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000e00)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@nodelalloc}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@grpquota}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0xa20, 0x8000c64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioprio_set$pid(0x2, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) lseek(r3, 0x3, 0x1) pread64(r3, &(0x7f0000001a80)=""/105, 0x69, 0x27) r4 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r6 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r6, r6, 0x21) 2.290751187s ago: executing program 9 (id=13680): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x1c2) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x3a) 2.036196381s ago: executing program 4 (id=13681): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x9) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) getgroups(0x2, &(0x7f0000000280)=[0xee00, 0xee01]) r8 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(r9, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r10, r10, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x800000, &(0x7f0000000380)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r7}}, {@cache_fscache}]}}) 2.023681522s ago: executing program 3 (id=13682): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r5) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x8080) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {0xffe6, 0xb}, {0xffe0, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x8, 0x1, 0x406, 0xfffffffe, 0xffffffff, 0x23}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r5, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (fail_nth: 4) 1.885984164s ago: executing program 9 (id=13683): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x800) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a320000000014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(r2) 1.885613365s ago: executing program 41 (id=13683): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x800) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000002000000a70000000060a0b0400000000000000000200000044000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c61737400000000100001800a00010072656469720000000900010073797a30000000000900020073797a320000000014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x4000}, 0x0) close(r2) 1.59159434s ago: executing program 7 (id=13685): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000d5030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_clone3(0x0, 0x0) tgkill(r1, r1, 0x21) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, r2, 0x0, 0xf}, 0x18) ioprio_set$pid(0x2, 0x0, 0x0) 1.492840632s ago: executing program 7 (id=13686): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x0, 0x2b}, 0x0, @in=@empty, 0x0, 0x3}}, 0xe8) r2 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x4040) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002080)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20, 0x11}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffffffffffb}}}, 0xb8}}, 0x20004800) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3ff}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='timer_start\x00', r5}, 0x18) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000180)) socket$packet(0x11, 0xa, 0x300) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.09111766s ago: executing program 8 (id=13687): syz_socket_connect_nvme_tcp() (async) socket$l2tp(0x2, 0x2, 0x73) (async, rerun: 32) r0 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) (async) bind$unix(r0, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async, rerun: 64) listen(r0, 0x0) (rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) (async, rerun: 32) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) (rerun: 32) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r3, 0x0, 0x100000000}, 0x18) (async) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000004880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000048c0)=0x14) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000600)="3d4ed8cd24f12f9dcb661893230983eab2cdd52020cad7f9dc8178661ad48c50579a24748d8bd94c", 0x28}], 0x1, &(0x7f0000000a40)=[@dstopts={{0x28, 0x29, 0x37, {0x2f, 0x1, '\x00', [@padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x4}, @jumbo={0xc2, 0x4, 0x3}]}}}, @dstopts={{0x28, 0x29, 0x37, {0x33, 0x1, '\x00', [@pad1, @ra={0x5, 0x2, 0x6}, @enc_lim={0x4, 0x1, 0x3}, @enc_lim={0x4, 0x1, 0xe}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x1}}, @hopopts={{0x188, 0x29, 0x36, {0x84, 0x2d, '\x00', [@generic={0x6, 0xb1, "d828c746bb7db919316b5066134872eec73a0776d6073db7da0c0c21cf9dbdba2f4a7206008c4c58b25d3e9613a2736acd81a2d242f61e742f364b871721d10d4b0b3ec04e1243098d7e859accb12db55b72e8ab0527a8723680d54312c5112ce9e8f5d7b180915ae2cf26f345414c2817100b3ade2732db0bfcc4ecdb1f2d96703ecf0cc0f65a4f4cc5fc36ac0c901a93ae85e9b5fbebb54beb5e6c44be16524ecc22e984d1d842d11218122a7d620ced"}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @enc_lim, @calipso={0x7, 0x38, {0x0, 0xc, 0x4, 0x2, [0xfffffffffffffff7, 0x6, 0x375, 0x35c5, 0x1d1c2224, 0x8000]}}, @generic={0x4, 0x65, "08c7d3777e3721829aa5754febbba1e9e892453755f13446e479af6cea1c8242acfa3caa027363245b621ff1b328d880e7a4f9928193848a6f7f5b1215e5325a0d35fc516ffea1c19b0c010a805766629a06a4b41d23966b2b597fbee1e36ffbf3026ba286"}]}}}], 0x1f0}}, {{&(0x7f0000000680)={0xa, 0x4e23, 0x3, @empty}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000700)="4e692ecd1b7bc0eb659fcb890a8a2e645722e8221eda98bc7397dd2cd6e7c90687c4103a66bbd5fa7d01fb982b110d79ad743098da4b185befb3e372ec30e9b6dbe2c08445bd145c25625c4c07cba3035883504cf61dfbb051d5488267dde21db58b84790aa1cfa9f454ed1f2b54cae0ebadc67ea925bd6b8ec30e516765292f9385b577dd14e0dec073", 0x8a}, {&(0x7f00000007c0)="d755b4de6fe1a703cf8ebba70e330029385c62b518dbabcd023524103bd9d6bf8095561d0779d63580cfe45e332d296cfcd71040e6640d7119eb86fce91a41bc9451dd94523bcd5ecb521d439b98b16dfff2183bc3cdeb6f9bdcaf9c97a9e5d22a565ec32e0ae1798d452fff9cd426cf6c336287eb839c4226e76912fd1eb277cebd1f58d00c0010119a351b9cea53a12c5c3caf6261a971301da24af21c77f887147e62f9adbb3f8d644730fdd73eaaf1233a62966a07", 0xb7}, {&(0x7f0000001880)="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", 0x1000}, {&(0x7f0000000880)="a2723692", 0x4}, {&(0x7f0000000c40)="62cc43d1bcc947fef8b3a129a8a357b05c3f52d0163535edb3876eb6a5cf1d4eddd9d04b69284505541a51b41f1a60a0ac9b4a9277c186e611ed4aaf5e0694125c62237229eaf2fbff3b2046b541b6df3e75ba11fad5727749b4e03d6a04bac07d9bc9255381865cd2df52bb0153f47a5276ca17abeee2fad589c7f821588e1a4e66f053c2f7c1e31b52c9639bef43a05e1949b2977a06c6888e01cbe0cc1a3835c973a1658ded23c4604cfb330d3fd1", 0xb0}, {&(0x7f0000000900)="300addef5507988b5c3de193ca0ed14a1ddb", 0x12}, {&(0x7f0000002880)="d6763129ad95d8418350cebb3139cb33bea4f04fb1754b67e879744824ea545ff6e00ff2cbcaca53f1d999aab096aefc739f1473da14ca8e706e062fea7c51c2008657f1e514b208858ddf071744c45bb7aa24cea871fb89636fd006c39274393fd8dee4c9f5e7c0c85b4c20adef773553ef20aac8a830460366f3efaeffdb69f4d54cd248fb8f0f0d3389bc1da0865b8d87f84a98ec069ac028dcf3ef546e3cb689fd8932575a28d0b3599ec3519facaad8164f7ae18a28db3d63bf0d8aa1e7331f22e29b207a8e60d2156271e5c4546907ded3501494bf5edfb366b48b2c62e72b3ea86dfa3df3ec525f38e4f7c7a2a9719493da257d535d922ed014167f0425cb510ad8dd25aa05ed4cce8bdd9c55b613fee9f02ea6b1ab8b2ee425dab133096bfa3de135bb3e1cb3c7be8d5044cd57a6768e2cff72d1d0c4d53ffb0b693733d174c4403e494b7dd2ab5d6c6ee9dbbc882dd8192a726c81d301b085475b6684891ef7dbe760c78bce51108a1789e1f698e97ac810a6b779698cf365e3df2c3bdf614f232fdaa16281bef3a3b822df0b670bdeff6aabf1dc50044686659f7e0e2eb1a0edf09c62da13f8f229244221c42540a2594fa53701a1ffc2c70857f3c7fc8d3569db8237c326cfda809470b3d57dce80e83033d7f083443e4d64e0c38f8a4e931407f3d23519f0ad3c26037517c868a8ad28babb8fb577b3b96a549a82fc2d95e7ce9fcfca28aad9bff711548eecc3736267f87310f5410ec54cc0b8a77f7699d833ce05cbf43ec55f2ba03ac20a37da09fc6df10890552d4c7b74092ea3a2a99c6cd0d9dde2f4e01ceb6170cfbf2eb1a6d409571dc8ef873761b6bf51edb2db6ef26cf6bc508e33ea517b1a0b74d8cf6c274f4841001775fbde7780c1068ab5449263979012133c8914df53cc4f533b64eebd4a0f69b0a970f47b22656358f1f2b272317fbb581c8a4bc1562833fd5912e97900d2aa1abb849d5e82f9a3090997410f6e934ec2acb13e3eaae3e8a756de9a21859eb7157dda5cfd6488214f177c783f410a7a4062ded3bf6e4b87d5e67f1aa2b4fb110ce002aa63baff14519a0008508b6ee8543b045817fe72984ba77772f67a0c2de7b86460df4474b0cf5f93ddf558462658b3f489a02abf8652c7ad6df32de47e5bf2518c8d886501b3a5d447f0594467c83a25141d1e7ac2377ccf19c02d6c0cb309f79cf0863c21c9078fcb7f0e456a967b64d3b66dd250d7a30914a31882ea35b30d9b85858505b1ba0427656bfc08bea4c640acce263895b7b4b764335b66510f48f24b13254014937aad393b1dbac61d1759d037ab933b721c651ef404816cde64e6b245e0472ad94172b104cf24bba4d30e7e551ae21dd21a3ef888d71f412890916b798a4438ca85b83b84065cabb936fc3c09cb94004f81286a1c920fc0c6c87e52cd9dfc28c3d61c7d7cc8f304350544cc28e03fb7aaeaa540522c6dab1b435b4cdffb00ceb483f9a9baa0db08684cd414b4c24331b88fc7b5e5dc8a64a517d44d30b50d1966cea1402847d52c98195502a551ceaa61cd8f027f0fbc1a81a579aea01aa7581e4a6fe98a5617e5720008f07e7300942c6e873f8f0387785bc8258c5eec48eaafd7d8196f0dc0b094deaed5488fbcdfbab672196efb52360b1f3a49db72c8e231248490421650466efaa9631bd253f2ba68830556030d41fd7ece1922245d6fa964895cda4492b4562fe000bdbab816960190bbf205e69ab6834b8e405ba59762647ed5899beb5cca3c6fe437c9dd809cb843034aedb7061baeb11ea26d2386f201f459ead8ea2c4b1189d57b019b563bac501d5027e2af89d363c6c5cbe9494eebf914d3a0ee1a5c5982062fc7a356ac4ea47f4772b659e2c44a389dd5125bad30cf08c0601ced4378d64398b78af4998170563b3954b52e427d0f01b9a269aa691e1a706864f71fdabc782138654fd09141eaf6b73dcf4ad3df4d652e425f270a64e086b65b3a6de5684f4be43f10981dca06feed68b301216c373b494361b402a7cc5dd5c48c5b203d58c39eaa45b14ae4b2fd4ec9593d0aea2fa03c9c5b8186e7914ac09988a5d1343beb72fb0178be08a1dec47945c2f1b56585c36b721bbe67fcb8fbc48a60f62f1ab578f05c4c19c9b131f0edfba4bd88830977dd71fa4af27e2004b3d51d757ee8c936a996a3581fe95e6b44c99131c4cfb5c22b7497ad5d55ec74e286839851b8e1a8e9bc638ce482ecf3e116aaeec5fb9073006ddb648a2885a41d6f90de00540432d561ddd59aeb9acf20e3b5c1cba4e095e04dcbb6ffed1e2e3e8aba720ea6ef41704d5350a97046de137f3b7b269c7321071ad2c93bfb8ad2c0a61b1ee7940fa95ffaeeeebf4abd101b01524232990559fea5de395df24dd31901cd5723118809f3a42f430426dc19f04631d4cfdd736bf6c98f20346e0814343c5a46fb68a3a0d0c9ca09c67794d239f550ca5d9328345dabd851d777af9f740e2471c7fdf542a326298ed7d5f80a32cfaa9b3f0a8d7e5a2280d0aa0bc882365bf64d21a3565d6a98d97d4f48822d45b153eb8ea10d27a552fa2cb4fa2ef0209af9713181896dd9c1762869505ad30e9909ce27921486404b20e1626e1ed74fac521ad3fcc56df49d261e67d4163daa381e41fda3c128b8c863d12f84c385fc6cf53e9646a57beb1bfa1bd4501401dec75d1e39d472d98abf394d647d1134f970d9bd8156641777b3697748836e412ca26a6656856922040d2bbdf77faadafe5e7a2985cb518f4e97274f90982ca18948434b6724cb2a739e0d4d5d748f40100f20ee4df016d8bbc75ad00a2a2646e37e0f39946197e5fff8d42eea4c2df00ca6dab91aa9776744f5c9a257d6641852762f90a8024739a45728d05b34aabc968df0e7f303a937c30c6c6482a75992db7466e07dc2e0f3b9ec1ec10f9a091cb5eb8288277a1409281d1102ce92bea836e38caed7b745f4e0f580dd24214c1e5d6f8f39e9dc0a05e38c64ea93945e0bd2f46ada9edc74a2dfeee7189d88d8c912c8ae9c2ac6d96abe5b2083bb8df0074e8d9db90e4c08d1f082c95870c1c4f7886160afd71a7d5b95ee4c1ed05071f24ba45e9eb912ca64845318f3a0ce288bb1bc806bba5ab73f84e2e3c5a9914fcbbeb32045cd656031dd1a4e273cafc76a2c44ba52f156663c78c6eeb7bea453a3c04c8a478ac1121ef38e9095cc95fce6ecff9cf7cda40af6e0ede79378a85d49f25ee90d522002750d232f2695a4a97e1920cd53a1300c3bddd49b2cf7374e9b02c762bfc5676fa000532ca1d38bbc8dce35bb62492062b0bc83f5e538a46d431106b6df1b4faf71b5006ee9797d3133b65a5453abcdfae81b0a8357b21c2c7eee080acf44765b6527645c0ff55b169467c9428c7ef43ade3bb86c37611fb51e7b66b43c3d38ee7ebdb888d57de97e11a247fecf3b97b9e19366ab32a8cb94d39091308741eba1bda7b6d0af8cee28c19f9ebe329b7e80be01ab7180c7b60cd2c4cffd7e0e7b827008e7b3124a6d164c37b3f2b78b73e14b4cd835237751b0a6328962f4276330f1fbb1135235cfd84c139a090c9deed889d15c05d9183ad729885765f37d37c60f040babde1323825ba76c876ed8a3b0510d3473bfbfc14632c65c6b34786c5b7fd9eb21f9a187785faa23b6afafdc3f2b675a2437ccf9d2a00bde6f4fc3e10661a990b2e031669479eaebbfd18893b6f3667ea3c6bfde9584aae6eafc56f2069e4043dbde8c5dd9c30cdef0fed3edad1f7194c9dfb74fedf209cea9bf4e5ee8f3ca5a797bd26b3c6b0afdeedbb65241169ccebb56683c91b5f42ef5d686808b9ad61343cf54f5e9f2431fcb19644cf184490ca06443eaf9fab509795d0e0f215face8c30f08a0801e9b726c2845e7e641cb296b6fa03b7564d9d56d00039345d1ce1630a6e43b48380792393a0fa4bfc6e048d0e3a2a6c224f07238c21f67525cdcea4fa6a741c688e509c21f4d34774af1e7d1556f63ee400fc8b155d338d58d6b5c5bb06f872c727781af5c8bdea8d446c7a3e09df52a39ab356b4070c1fa33b9f7f0f1ccc9e0be9fa8d63df3ced7e74f90242b888eaf87d8d3f912f18b08c41795a5386a685caea5773a8c2d632de372db70d316daf8dc8b6f9db565438dad739e359c6a73dcbc28c430f3e0b00fa477c03fb21f3fae4d71c1dc0a2b65c3f7160bb734d49970480f4882a1a38069a7a55a6af6ec8173d7fa4def0f8fc0b118e8a61b96bf5a7f61c4f795f75249ee5c181820252fbdbffb854faeaa613366a3f954fee9581f4c17abd8a4a997bd75d8387948d971790fd8ca381a7b26b061667db0f75cd2ca6761c2afa4d4409f2654084e6a175cb4148a58e388d19bd0a48032a5fa1cc286b026f401803dc9b5842165a17fd2011f2d5efcda75d7c0bcd0a486591ad8af76413dd3b442092f494bcc8fbfd1092ca4f26915049b5375b9dddbf3fb6e384f0bea57f36041d1b6a1dc16f88a5564f9b19b220b10acb2f989e206cf94d5125a8e3aa3ff411e4d92a56ef40897d501963d13e89b9714f3d4e712b8352aa17119b4b999393192659de2592975bad17612691e1a2ffa45d993a91fa9ea8039f753c54480b6ea4bc3fd3cdf23acb285d2e5ad4c892f6eb7e4563a3db9b79294f2906b29caf8732b65fca2490272b5ab6725e9d44146a1ae2b2923584ceb7c499dce5a6b52f895517ec71735ab721e143a47cbc51d6b3b0cb3e361fed23dcc5e72b7dcd2affdc40bcdb8811270a99d149a5737ea89fb620283d10e8653379647640e495835f13514857b8083b0ec563dbd7f719a32b00c77617182a628b6df65794af22cd773d824e987ed04cfc3c550de9c3d4cf920a5b5150a8b2f4872543ac4ec252313a4bb6d3791a25d29ce7274720784c7e5d86b818f0f8dd828ecf889a2ca76fbb39071d507c1acce61495a562affc93b916d324483f0a5a671bf1bf23bdf6f18c3926987733cc18d92855b534fd24ba1cfef54a0b1068aea52c1e14ff046c26a754e5f61979466dfb57af644b3323fb89b8bd57d56cbbf9a600d29e97f009631e489c84251ac92cbfda65672351f423265a0e8a5e13e792f1e518eb4d495c62c891401325ffdd2be17eb5df18d3077d757ffac6e6c001f240bc4a8866cbaa44f96629f0b9a4146e6bfcc806fb9dd1e22226d0bb03a36dde60060e3b20f88e6d35ce254e0b70097d6ae7720f6c22d5e7d84bafba9bfba2c6d3674bde212644c6441faa0e27fca8ead95e9f2273ce4198420ed1a922ef46146e383e84b24e849c29b9a1b74b0d95b5968e7bd02b546bcdf11b72bc54ac19f88c25cb893a536ea202ef2ae03fa25cdbc9efc157febed7b9223d43e1b80fc1fc85c265a6dadde0ceea1100ea23256757ff2ea96e3e52d59aa050c6253367ea61f14df1b675e67ebd8f2cd1d3a1b3925e9101adfa0fce81fb060decfa1d6fbcb3cb57de04dc5fa63c2e950ecaba21e1e9ddbd0d7609a82e2505cf7cbe589993a8b75a97f5082f85941d0cb2a116b0f492297c0700fac568ee5953710ca34be9993d23b151e3d1348701bb8be8a78516b88591f751ef9db4d043e97ef08c419ff6a137ad593ae9e000d7a49c6c86240cc9d17d48957394a4fd65fa3fd24b38d51e1e52b305635863c4e7555019f0eae77113339c0a5ca96827b72a7117ce5327f830f474d364ca8729452eadb154c38c66e4b87ad972fe382e341d3a8c40e8654152ef336da6c10118e36de4176ac22594896cf9bcc7532a6f1c70d929db1c02f9d", 0x1000}, {&(0x7f0000000d00)="39ae5c290c3b77e26a15e34d08686f36466727a27d462411a02bc1df96a92b0c1b806c00e343c96642de97885dc111d12f1f109c33b13df19db22d08715ebd1fc7a65cec579ebc596379ef78ef056cee3382c1b1f5cca64981dd2aaaaa30c0aaef104387736f5e7a6276c789963a29ad4b3d8046", 0x74}], 0x8, &(0x7f0000000e00)=[@hopopts={{0x20, 0x29, 0x36, {0x2c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x4}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3ff}}, @rthdrdstopts={{0x28, 0x29, 0x37, {0x88, 0x1, '\x00', [@ra={0x5, 0x2, 0x400}, @ra={0x5, 0x2, 0x5}, @padn={0x1, 0x1, [0x0]}]}}}], 0x60}}, {{&(0x7f0000000940)={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x3e}, 0x3cf0e291}, 0x1c, &(0x7f0000001180)=[{&(0x7f0000000e80)="5dc787c97d7d092dfb303d0f63ab26f74e4e939acf79a5fce3086abffb7c47c3dee1b6278f9d33e9fe201a73be8595317b50716f6a0e693ccb7f1abfb5bef4418ce28143760c19978529ed2a7f6a3b3bc4673c2d2cb56c10652102db7c5248d16ff4280cc6f87d7e93beabf808fcfe24b781e5e63ffd60e4841b7e7f0e2cfe3e44bfdf24f427acfb5bf5a105f50007f263000f90e2200e8dcf21d44c9a6d9aa3c2e9e064ba0213bac40f61a7d830f3e8513e00505d42043f141a767346a1422ffffdafffbee78e5c5ab1486ecc961064cfe42453e740224dbfd5c1ee5b1d", 0xde}, {&(0x7f0000000f80)="3738234312a3fc99d2d0074ca1c32f1d49cae355ff8d474cc485d8fd7cc5c3167b0b7e", 0x23}, {&(0x7f0000000fc0)="ee97e836e6ac7bb6a8764ccf4ce37ce71da7d0c3ecae63b9a1411516f6db9b16bdd06d60a30a4b52a767db0569b5e17e18142f7750f9fad40a877def7f1ee21f9c768c25e556373a66e99e5e6776f69029dfd3603ad2f2ff8e25a07c8965f223b79812b832bfff3589a517b936931a0dab71c998", 0x74}, {&(0x7f0000001040)="8b3403f8f892099846f6b31fe8f3b1b51ec64bd65d91e423c4", 0x19}, {&(0x7f0000001080)="2e4f611f0d4369466b24732f2977fc05673c743debe0c7d48a0c259999bce5d12ae213d91336b2b881dee7e5a0c550e64a9683e2d4f36df09a612dc658ed1a7a79eecbb9edae2029489e435f2f28baad0844b00c1333ed6db9154dedbcd3bd43c1e04ad414338d98ab41abdf96c770fa10c258442ad6c7741ad5700eca4ed66b32eaa6b453cee7409bd5e3bb933d8e1432871124bbc6c8f949de774073787d2b637382a4318aa615736b632af12d7faf18aaa4a159908c8db8c56bb35a92b4625d5297c016982d7167dbe480238b59", 0xcf}], 0x5, &(0x7f0000001200)=[@dstopts_2292={{0x1c0, 0x29, 0x4, {0x1d, 0x34, '\x00', [@ra={0x5, 0x2, 0x3}, @generic={0x2, 0x6b, "5b3e49d3c6030bcc8c3d579c9e4b0785756863a073d51176cedf9eb2a5f7aaa8cd1ad49dfdbb4942d4faadba9d5ad1aba57397dadf408e98fee1e48ebc0e5ad5f0e05004a2182c7b90c932de11fdcab8979fc0dc48ca24e1cf6558c2822118b34c148e88d9c2b4e2bb7f6e"}, @enc_lim={0x4, 0x1, 0x7}, @generic={0x8, 0xff, "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"}, @pad1, @jumbo={0xc2, 0x4, 0x9}, @jumbo={0xc2, 0x4, 0x3ad91b08}, @pad1, @pad1, @calipso={0x7, 0x18, {0x0, 0x4, 0x0, 0x6, [0xe, 0x2]}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x4d62}}], 0x1d8}}, {{&(0x7f0000001400)={0xa, 0x4e24, 0x9, @loopback, 0x4}, 0x1c, &(0x7f0000001740)=[{&(0x7f0000003880)="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", 0x1000}, {&(0x7f0000001440)="464f614be40f06355ee47d2f64fce11d0b82ae50e9e769922c0abd57ce6ff99fe3c656409f7d4b5a023401a4b67ffdaead3d51aaf4b95a3f82ec12eeb0772a869fd974bec1095c53", 0x48}, {&(0x7f00000014c0)="9001cf7eda034020e5b4e843a0fa833268ca8260583cbbb1ad4f833c81defb209853439652787483a2eb23c0ba9d5fdee1215b8456828aabb48d5760a84a1128cb6f219a3b19927d171761c49aa045dc743fa0f2452c8291d4f3093bfd0f17d32946cb33546eb7d3cb99f8988000167939d3ebcb2689dccab65e71cde96f80122ff2b0bb0aa7fc80d9c94406244dd287bee8e9d08999ee94198a671806d4317677bf2f191b889a42262bf05fff2ccc243ac8d112282f941013c2dc52e6f1524a52f6efcd546d74360a9e7cb5dff09aec86d6961a944ca459b10b2152c65b8fabbb31fcd9b70c168db53ed876307e", 0xee}, {&(0x7f00000015c0)="3dae0e4b827e6a0ccb95932e1817d47d72cba576c8c29bf274f1f94ed23cc8d0a0a0a54e95beb724c5197244ec108936a573e73b784b91776533929117355cc2c144dc5d6395e70d47e1efda76ab50ed1ae551b796105fe177c147ebb89aa3bd3b6c8c19bbe1c8f982d7fdf990f828275d9aa0b9cb1665598925094125ed4acf62b796d4ad4e683dbf1feb5cb435f478542e290ce01a625e7c69b1bd536e9331a6c42b692e4ee346b11f0afd2fe35af699ecb599accede97c4", 0xb9}, {&(0x7f0000001680)="c99e6043ee238ea8249e4ba325aa740b9b619d25b48964451d05a35ce6815a2de5c6a79b6eb23a54deafb055b7969fa224d7c0a55626a38c3a7669b63c55be56687cfe776af480e2d53d578f6650aba772fb1b6d65cf4565b4869ed96003d5184f655ccdc50114ecc5290d7f017a2757334f6c2ccc82bdb0d0440fa00c2eab9f4ea96858a69f12ca01ce8b30f5b08e94c618da1341be", 0x96}], 0x5, &(0x7f0000004900)=[@dstopts={{0xa8, 0x29, 0x37, {0xc, 0x11, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @calipso={0x7, 0x50, {0x3, 0x12, 0x2, 0x407a, [0x2, 0x4, 0x6, 0x85a, 0x9, 0x3, 0x7, 0x5, 0x5]}}, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}, @generic={0xde, 0x12, "fbcf7b390353400045fbac66fba775b9aa42"}, @ra, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x6}]}}}, @rthdr={{0x58, 0x29, 0x39, {0x3a, 0x8, 0x2, 0x6, 0x0, [@remote, @private0, @private0, @ipv4={'\x00', '\xff\xff', @multicast1}]}}}, @dstopts_2292={{0x90, 0x29, 0x4, {0x62, 0xf, '\x00', [@pad1, @calipso={0x7, 0x28, {0x3, 0x8, 0x7, 0xb51, [0x5, 0x6, 0x3b, 0x100000000]}}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @pad1, @calipso={0x7, 0x30, {0x2, 0xa, 0x4, 0x881e, [0x80, 0xc42b, 0x1000, 0x2, 0x10001]}}, @ra={0x5, 0x2, 0x300}]}}}, @dstopts={{0x28, 0x29, 0x37, {0x88, 0x1, '\x00', [@ra={0x5, 0x2, 0x7}, @pad1, @ra={0x5, 0x2, 0x100}]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x88, 0x8, 0x2, 0x9, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}]}}}, @hopopts={{0x170, 0x29, 0x36, {0x33, 0x2a, '\x00', [@enc_lim={0x4, 0x1, 0x7}, @enc_lim={0x4, 0x1, 0x6}, @generic={0x64, 0xf6, "6d45b1fdc9ca957339756fe05abb27c3a5e8d2a46f49a26b33b5343745fef882972cf7aa4100a5f86c2b5fa5f7254cc8352903871adeaa168df09f398c90078446386b8070be38412a9d5e7793eb3134a53998a3baead0cfa22f9544c15c0c596654d1c6ec2531e923e2e1352c33a7c7ba892df3d1eb3911bbea6da2bd15799e2180e310e1cf8e12362705f8e734311151eb439b597fefb2c52d6866735180bee1336f81b55e832c71d08ed5622b5d381eea1bb4135308375838e807b5befca7de230f467220a0e569cb0ee1f6805dc1acffbe3a3b5536c3d3434d03e2d8215eb20cbb42f3580e715fa0a6795cfb3bb336eada77041d"}, @enc_lim={0x4, 0x1, 0x7}, @calipso={0x7, 0x28, {0x0, 0x8, 0x5, 0x9, [0xf3, 0x69, 0xe, 0x80]}}, @enc_lim, @calipso={0x7, 0x20, {0x2, 0x6, 0x8, 0x80, [0xc6, 0x2, 0x0]}}, @enc_lim={0x4, 0x1, 0x8}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@private1, r4}}}, @dstopts={{0x20, 0x29, 0x37, {0x84, 0x0, '\x00', [@ra={0x5, 0x2, 0x7}, @enc_lim]}}}], 0x3c8}}], 0x4, 0x4081) (async) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18) umount2(&(0x7f0000000580)='./file0\x00', 0x3) (async) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/bnep\x00') ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000000c0)) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000015204f089b96478db1d8a5f756509e977fb1a030000000002000100000000000000020d1600003f030006000000000002004e21000000800000000000000000030005003200000002"], 0x70}, 0x1, 0x7}, 0x0) (async) r7 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r7, &(0x7f00000005c0)={&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000200)=""/186, 0xba}, {&(0x7f0000000380)=""/226, 0xe2}, {&(0x7f00000002c0)=""/97, 0x61}, {&(0x7f0000000000)=""/23, 0x17}, {&(0x7f0000000480)=""/95, 0x5f}], 0x5, &(0x7f0000000580)=""/57, 0x39}, 0x2001) 1.06208529s ago: executing program 7 (id=13688): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x55, 0x55, 0x4, [@restrict={0x7, 0x0, 0x0, 0xb, 0x3}, @datasec={0xd, 0x1, 0x0, 0xf, 0x1, [{0x1, 0xffc0, 0x6}], 'G'}, @var={0x1, 0x0, 0x0, 0xe, 0x5}, @type_tag={0xd, 0x0, 0x0, 0x12, 0x3}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x2}]}]}, {0x0, [0x30, 0x61]}}, &(0x7f0000000480)=""/167, 0x74, 0xa7, 0x0, 0x7}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc8, '\x00', 0x0, @fallback=0x7, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x100003c}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x69, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="e800000002010101000000000000000002000008080003"], 0xe8}, 0x1, 0x0, 0x0, 0x2000c050}, 0x40000c0) 974.340701ms ago: executing program 7 (id=13689): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x1, @buffer={0x300, 0x49, &(0x7f0000000440)=""/73}, &(0x7f0000000380)="259374c96ee3", 0x0, 0xffffffff, 0x30, 0x0, 0x0}) 941.524312ms ago: executing program 7 (id=13690): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000e00)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@nodelalloc}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@grpquota}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0xa20, 0x8000c64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioprio_set$pid(0x2, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) lseek(r3, 0x3, 0x1) pread64(r3, &(0x7f0000001a80)=""/105, 0x69, 0x27) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r6 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r6, r6, 0x21) 822.069865ms ago: executing program 8 (id=13691): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) pipe2$9p(&(0x7f0000000000), 0x0) lstat(&(0x7f0000000440)='./file0\x00', 0x0) 821.567435ms ago: executing program 3 (id=13692): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xa00, 0x1c2) r3 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x3a) 811.923744ms ago: executing program 8 (id=13693): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x3434d49ab8a3e57, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x108}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x6, 0x0, 0x57e}]}, 0x10) write$binfmt_aout(r3, &(0x7f0000000000)=ANY=[], 0x9ffc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r5, 0x0, &(0x7f0000001700)=""/53}, 0x20) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r7}, 0x18) r8 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x8844) bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r9}, 0x10) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), 0x0, 0x0, 0x0) 788.003695ms ago: executing program 3 (id=13694): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000e00)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@nodelalloc}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@grpquota}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0xa20, 0x8000c64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioprio_set$pid(0x2, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) lseek(r3, 0x3, 0x1) pread64(r3, &(0x7f0000001a80)=""/105, 0x69, 0x27) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r6, r6, 0x21) 689.184277ms ago: executing program 8 (id=13695): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000940)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 511.85486ms ago: executing program 4 (id=13696): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) close(0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@bloom_filter={0x1e, 0x3, 0xc, 0x7, 0x118, 0xffffffffffffffff, 0xfff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x3, 0x1}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="00400213cc400000b7fc0000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000400)={{0x1, 0x1, 0x18, r1, {0x1}}, './file2\x00'}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r5}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000580)={0xffffffffffffffff}) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x62442, 0x0) r8 = dup(r7) ioctl$PTP_PEROUT_REQUEST2(r8, 0x40383d0c, &(0x7f00000000c0)={{0x10001, 0x5}, {0x8, 0xfd3}, 0x9, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1b, 0x2, &(0x7f0000000040)=@raw=[@alu={0x7, 0x0, 0x7, 0x7, 0x6, 0x4, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x28, &(0x7f0000000180)=""/40, 0x41100, 0x6e, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x3, 0x3}, 0x8, 0x10, &(0x7f00000003c0)={0x3, 0x6, 0x100, 0x9}, 0x10, 0x0, r0, 0x0, &(0x7f0000000b40)=[r2, r3, 0xffffffffffffffff, r4, r5, 0xffffffffffffffff, r6, r8], 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000a40)={@map, r0, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@cgroup=r0, 0xffffffffffffffff, 0x2f, 0x20, 0x4}, 0x20) r9 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r10}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) creat(&(0x7f0000000600)='./file2\x00', 0x21) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@nolazytime}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noquota}, {@noinit_itable}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x3, 0x473, &(0x7f0000000640)="$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") 402.866302ms ago: executing program 7 (id=13697): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x19c0000, &(0x7f0000000180), 0xfe, 0x455, &(0x7f0000000fc0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x26, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r3}, 0x10) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r0, &(0x7f0000007700), 0x318, 0xfc0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='mm_page_free\x00', r4, 0x0, 0x20006}, 0x18) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4c094, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c000000070a01010000020000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r6, &(0x7f0000000600)=ANY=[@ANYBLOB="08000800070303000200140000004510801600000000082f9078ac1e0001ffffffff810088a8", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0xfdef) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x8, 0x0, 0x7ffc0002}]}) migrate_pages(0x0, 0x7, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f80)="$eJzs3c9rJFkdAPBvdbpjMpPZZNWDLriu7kJm0OlONu5u8LCOIHpaUNf7GJNOCOmkQ7qzOwmLm8E/QBBRwZNevAj+AYIsePG4CAt6VlQU0VkFPejUUt3VmZlMd6cz0/kxyecDlXqvXlV93+tQ1fW6HlUBXFjPRcSNiLibpum1iJjMlxfyKfbaU7be+3feWsymJNL09X8kkeTLOvtK8vnlfLOxiPj6VyK+lTwct7Gzu7ZQq1W38nylub5ZaezsXl9dX1iprlQ35uZmX55/Zf6l+ZmhtPNKRLz6pb/84Ls/+/Krv/rsm3+8+ber386qNZGX39+OIyr2K2w3vXTj4AZbjxjsLMraU+pkxrutMfLQktvHXCcAALrLrvE/HBGfjohrMRkj/S9nAQAAgCdQ+oWJ+F8SkXY32mM5AAAA8AQptMbAFqOcjwWYiEKhXG6P4f1oXCrU6o3mZ5br2xtL7bGyU1EqLK/WqjP5WOGpKCVZfraVvpd/8UB+LiKejojvT4638uXFem3ptH/8AAAAgAvicqvPnxQ6/f9/T7b7/wAAAMA5M3WEdf9zjPUAAAAAjs9R+v8AAADAk0n/HwAAAM61r772WjalnfdfL72xs71Wf+P6UrWxVl7fXiwv1rc2yyv1+krrmX3rh+2vVq9vfi42tm9VmtVGs9LY2b25Xt/eaN5cbb0OHAAAADgFT3/ynd8nEbH3+fHWlBkdbNMBVwPOquJ+KsnnXQ7rPzzVnv/5hCoFnIiRvqWlE6sHcPKKp10B4NT4hgeSQ8p7Dt55N59/arj1AQAAhm/6473v/xf6brnXvxg48xzEcHH1v/8PnGet+/+DjuR1sQDnSskVAFx4g9//P3AR8O6gEdL0yJUCAACGaqI1JYVyfmU/EYVCuRxxpfVagFKyvFqrzkTEUxHxu8nSh7L8bGvL5NA+AwAAAAAAAAAAAAAAAAAAAAAAAADQlqZJpAAAAMC5FlH4a/Lr9rP8pydfmDj4+8Bo8t/JyF8R+uaPX//hrYVmc2s2W/7P/eXNH+XLXzyNXzAAAADgQjjSC/w7/fROPx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhun9O28tdqaTjPv3L0bE1IH4SVZSjLGI0YixKEXEpX8lUbxvu0JEjAwh/nj252Pd2p9k1doPeTB+0tn2Me3d7hs/prJPoUf8y0OIDxfZO9n550a3468Qz7Xm3Y+/YsQD+UfV9fyXG8v/jvQ4/q8MGOOZ935R6Rn/dsQzxe7nn078pEf85weM/81v7O72Kkt/EjHd9fsneSBWpbm+WWns7F5fXV9Yqa5UN+bmZl+ef2X+pfmZyvJqrZr/7Rrje5/45d1+7b/UI/7UIe1/YcD2//+9W3c+0k6WusW/+nyX+L/5ab7Gw/Hz77707TydlU930nvt9P2e/flvn+3X/qUe7T/s/391wPZf+9p3/jTgqgDACWjs7K4t1GrVrWEnCse25yMmsl76GajGWftYJKpbjbeHusM0TdPsmHqM/SRxFj6WVuK0z0wAAMCw3bvoP+2aAAAAAAAAAAAAAAAAAAAAwMV1Eo8TOxhzbz+VDOMR2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ/FBAAAA///ROdsN") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 402.361892ms ago: executing program 8 (id=13698): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES64=r0], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="14fff5001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008"], 0xfc}}, 0x0) 326.581314ms ago: executing program 4 (id=13699): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000940)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x4, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}}, 0x40) 294.251995ms ago: executing program 3 (id=13700): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x63, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r1, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x90, &(0x7f0000000180)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000001c0), &(0x7f0000000300), 0x8, 0x61, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x800, 0x20) getdents64(r3, 0xfffffffffffffffe, 0x29) bind$802154_dgram(r3, &(0x7f00000007c0)={0x24, @none={0x0, 0xffff}}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYRESOCT], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x18) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x100800004, 0x30118, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffcb7, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x110000, 0x0, 0x0, 0x8, 0x20004, 0xeffc, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6}, 0x20) close(r6) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 263.067495ms ago: executing program 4 (id=13701): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000e00)={[{@jqfmt_vfsold}, {@nojournal_checksum}, {@nodelalloc}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@grpquota}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0xa20, 0x8000c64) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) ioprio_set$pid(0x2, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) lseek(r3, 0x3, 0x1) pread64(r3, &(0x7f0000001a80)=""/105, 0x69, 0x27) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x95, 0x3}, 0x100002, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ffffffc}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0xff, 0x7ffc1ffd}]}) r5 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) tgkill(r5, r5, 0x21) 86.112869ms ago: executing program 3 (id=13702): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@nolazytime}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noquota}, {@noinit_itable}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x3, 0x473, &(0x7f0000000640)="$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") 7.12279ms ago: executing program 3 (id=13703): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x0) io_uring_setup(0x6c4, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x2c, 0x3, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r1 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) (fail_nth: 4) 0s ago: executing program 8 (id=13704): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r1) syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f00000002c0)=ANY=[], 0x1, 0x5b1, &(0x7f0000001000)="$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") r2 = socket$unix(0x1, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) bind$unix(r2, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000380), &(0x7f00000003c0)=r5}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000300000000000600000000000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x10}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000006c0)=@newtaction={0xa0, 0x30, 0x9, 0xf00, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {0x0, 0x0, 0xfe}, {}, {0x6}, {0x2, 0x3, 0x8, 0x3}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x40040c0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8f7ffffb702000008000000b703000000000000a5000000eeffffff95"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sys_enter\x00', r8}, 0x10) r9 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'veth0_macvtap\x00', @local}) setsockopt$MRT_FLUSH(r9, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) kernel console output (not intermixed with test programs): ype=1400 audit(2000001418.209:62826): avc: denied { read } for pid=12303 comm="syz.8.13253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 1507.960708][T12298] loop4: detected capacity change from 0 to 512 [ 1507.991086][T12298] loop4: detected capacity change from 0 to 1024 [ 1507.998658][T12298] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1508.012525][T12298] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1508.023541][T12298] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 1508.033281][T12298] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1508.047265][T12298] EXT4-fs error (device loop4): ext4_get_journal_inode:5800: inode #17: comm syz.4.13252: iget: bad i_size value: 4398046511204 [ 1508.060840][T12298] EXT4-fs (loop4): no journal found [ 1508.069628][T12321] loop1: detected capacity change from 0 to 512 [ 1508.076196][T12321] EXT4-fs: Ignoring removed nobh option [ 1508.091701][T12321] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.13257: corrupted inode contents [ 1508.104016][T12321] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.13257: mark_inode_dirty error [ 1508.115900][T12321] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.13257: corrupted inode contents [ 1508.128004][T12321] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.13257: mark_inode_dirty error [ 1508.132243][T12326] 9pnet_fd: Insufficient options for proto=fd [ 1508.146901][T12321] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.13257: Failed to acquire dquot type 0 [ 1508.172921][T12321] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.13257: corrupted inode contents [ 1508.188575][T12328] netlink: 'syz.3.13260': attribute type 21 has an invalid length. [ 1508.199608][T12321] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.13257: mark_inode_dirty error [ 1508.220638][T12321] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.13257: corrupted inode contents [ 1508.233660][T12321] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.13257: mark_inode_dirty error [ 1508.245605][T12321] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.13257: corrupted inode contents [ 1508.257860][T12321] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 1508.258097][T12333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13262'. [ 1508.267408][T12321] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.13257: corrupted inode contents [ 1508.287633][T12321] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.13257: mark_inode_dirty error [ 1508.299649][T12321] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 1508.309078][T12321] EXT4-fs (loop1): 1 truncate cleaned up [ 1508.315191][T12321] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1508.340605][T12321] ext4 filesystem being mounted at /475/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1508.467766][ T5018] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1508.565298][T12358] netlink: 'syz.1.13273': attribute type 21 has an invalid length. [ 1508.610961][T12365] netlink: 64 bytes leftover after parsing attributes in process `syz.8.13276'. [ 1508.748590][T12391] loop8: detected capacity change from 0 to 1024 [ 1508.756071][T12391] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 1508.764672][T12391] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1508.775838][T12391] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 1508.807388][T12391] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1508.818973][T12391] EXT4-fs error (device loop8): ext4_get_journal_inode:5800: inode #17: comm syz.8.13286: iget: bad i_size value: 4398046511204 [ 1508.836736][T12391] EXT4-fs (loop8): no journal found [ 1508.839738][T12396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13288'. [ 1508.858390][T12396] loop3: detected capacity change from 0 to 736 [ 1508.891162][T12400] FAULT_INJECTION: forcing a failure. [ 1508.891162][T12400] name failslab, interval 1, probability 0, space 0, times 0 [ 1508.903999][T12400] CPU: 0 UID: 0 PID: 12400 Comm: syz.1.13290 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1508.904030][T12400] Tainted: [W]=WARN [ 1508.904103][T12400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1508.904113][T12400] Call Trace: [ 1508.904118][T12400] [ 1508.904124][T12400] __dump_stack+0x1d/0x30 [ 1508.904142][T12400] dump_stack_lvl+0xe8/0x140 [ 1508.904159][T12400] dump_stack+0x15/0x1b [ 1508.904176][T12400] should_fail_ex+0x265/0x280 [ 1508.904202][T12400] should_failslab+0x8c/0xb0 [ 1508.904248][T12400] __kmalloc_cache_node_noprof+0x54/0x320 [ 1508.904273][T12400] ? __get_vm_area_node+0x106/0x1d0 [ 1508.904366][T12400] __get_vm_area_node+0x106/0x1d0 [ 1508.904460][T12400] __vmalloc_node_range_noprof+0x273/0xe00 [ 1508.904546][T12400] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 1508.904627][T12400] ? avc_has_perm_noaudit+0x1b1/0x200 [ 1508.904656][T12400] ? cred_has_capability+0x210/0x280 [ 1508.904680][T12400] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 1508.904713][T12400] __vmalloc_noprof+0x83/0xc0 [ 1508.904737][T12400] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 1508.904770][T12400] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 1508.904791][T12400] ? bpf_prog_alloc+0x2a/0x150 [ 1508.904862][T12400] bpf_prog_alloc+0x3c/0x150 [ 1508.904882][T12400] bpf_prog_load+0x514/0x1070 [ 1508.904912][T12400] ? security_bpf+0x2b/0x90 [ 1508.904967][T12400] __sys_bpf+0x462/0x7b0 [ 1508.905014][T12400] __x64_sys_bpf+0x41/0x50 [ 1508.905095][T12400] x64_sys_call+0x2aea/0x2ff0 [ 1508.905113][T12400] do_syscall_64+0xd2/0x200 [ 1508.905143][T12400] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1508.905244][T12400] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1508.905273][T12400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1508.905294][T12400] RIP: 0033:0x7f636d41eba9 [ 1508.905307][T12400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1508.905321][T12400] RSP: 002b:00007f636be87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1508.905393][T12400] RAX: ffffffffffffffda RBX: 00007f636d665fa0 RCX: 00007f636d41eba9 [ 1508.905406][T12400] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 1508.905417][T12400] RBP: 00007f636be87090 R08: 0000000000000000 R09: 0000000000000000 [ 1508.905428][T12400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1508.905439][T12400] R13: 00007f636d666038 R14: 00007f636d665fa0 R15: 00007ffe1b864428 [ 1508.905459][T12400] [ 1508.905467][T12400] syz.1.13290: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 1508.914330][T12396] rock: directory entry would overflow storage [ 1508.917002][T12400] ,cpuset= [ 1508.920850][T12396] rock: sig=0x3b10, size=4, remaining=3 [ 1508.930987][T12400] / [ 1508.934398][T12389] loop4: detected capacity change from 0 to 512 [ 1508.937120][T12400] ,mems_allowed=0 [ 1508.937143][T12400] CPU: 0 UID: 0 PID: 12400 Comm: syz.1.13290 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1508.937214][T12400] Tainted: [W]=WARN [ 1508.937221][T12400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1508.937233][T12400] Call Trace: [ 1508.937240][T12400] [ 1508.937247][T12400] __dump_stack+0x1d/0x30 [ 1508.937265][T12400] dump_stack_lvl+0xe8/0x140 [ 1508.937337][T12400] dump_stack+0x15/0x1b [ 1508.937353][T12400] warn_alloc+0x12b/0x1a0 [ 1508.937388][T12400] __vmalloc_node_range_noprof+0x297/0xe00 [ 1508.937514][T12400] ? avc_has_perm_noaudit+0x1b1/0x200 [ 1508.937546][T12400] ? cred_has_capability+0x210/0x280 [ 1508.937568][T12400] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 1508.937596][T12400] __vmalloc_noprof+0x83/0xc0 [ 1508.937701][T12400] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 1508.937727][T12400] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 1508.937816][T12400] ? bpf_prog_alloc+0x2a/0x150 [ 1508.937840][T12400] bpf_prog_alloc+0x3c/0x150 [ 1508.937865][T12400] bpf_prog_load+0x514/0x1070 [ 1508.937954][T12400] ? security_bpf+0x2b/0x90 [ 1508.937972][T12400] __sys_bpf+0x462/0x7b0 [ 1508.938004][T12400] __x64_sys_bpf+0x41/0x50 [ 1508.938027][T12400] x64_sys_call+0x2aea/0x2ff0 [ 1508.938076][T12400] do_syscall_64+0xd2/0x200 [ 1508.938122][T12400] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1508.938145][T12400] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1508.938173][T12400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1508.938233][T12400] RIP: 0033:0x7f636d41eba9 [ 1508.938249][T12400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1508.938266][T12400] RSP: 002b:00007f636be87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1508.938285][T12400] RAX: ffffffffffffffda RBX: 00007f636d665fa0 RCX: 00007f636d41eba9 [ 1508.938343][T12400] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 1508.938356][T12400] RBP: 00007f636be87090 R08: 0000000000000000 R09: 0000000000000000 [ 1508.938368][T12400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1508.938399][T12400] R13: 00007f636d666038 R14: 00007f636d665fa0 R15: 00007ffe1b864428 [ 1508.938419][T12400] [ 1508.938426][T12400] Mem-Info: [ 1508.976580][T12389] loop4: detected capacity change from 0 to 1024 [ 1508.981458][T12400] active_anon:9040 inactive_anon:46 isolated_anon:0 [ 1508.981458][T12400] active_file:8419 inactive_file:20940 isolated_file:0 [ 1508.981458][T12400] unevictable:0 dirty:689 writeback:0 [ 1508.981458][T12400] slab_reclaimable:4005 slab_unreclaimable:87543 [ 1508.981458][T12400] mapped:35299 shmem:4252 pagetables:2489 [ 1508.981458][T12400] sec_pagetables:0 bounce:0 [ 1508.981458][T12400] kernel_misc_reclaimable:0 [ 1508.981458][T12400] free:1792484 free_pcp:5818 free_cma:0 [ 1508.981511][T12400] Node 0 active_anon:36160kB inactive_anon:184kB active_file:33676kB inactive_file:83760kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:141196kB dirty:2756kB writeback:0kB shmem:17008kB kernel_stack:4576kB pagetables:9956kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1508.992167][T12396] netlink: 'syz.3.13288': attribute type 27 has an invalid length. [ 1508.992461][T12400] Node 0 [ 1508.999061][T12389] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1509.003218][T12400] DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1509.008922][T12389] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1509.013434][T12400] lowmem_reserve[]: 0 2883 7862 7862 [ 1509.013463][T12400] Node 0 [ 1509.018814][T12389] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 1509.023579][T12400] DMA32 free:2949196kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952828kB mlocked:0kB bounce:0kB free_pcp:3632kB local_pcp:100kB free_cma:0kB [ 1509.033672][T12389] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1509.037731][T12400] lowmem_reserve[]: [ 1509.043038][T12389] EXT4-fs error (device loop4): ext4_get_journal_inode:5800: inode #17: comm syz.4.13285: iget: bad i_size value: 4398046511204 [ 1509.046464][T12400] 0 0 4978 4978 [ 1509.052746][T12389] EXT4-fs (loop4): no journal found [ 1509.055733][T12400] [ 1509.055739][T12400] Node 0 Normal free:4205380kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36160kB inactive_anon:184kB active_file:33676kB inactive_file:83760kB unevictable:0kB writepending:2756kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:19800kB local_pcp:11120kB free_cma:0kB [ 1509.662278][T12400] lowmem_reserve[]: 0 0 0 0 [ 1509.666827][T12400] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1509.679616][T12400] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949196kB [ 1509.695691][T12400] Node 0 Normal: 1571*4kB (UM) 1331*8kB (UME) 380*16kB (UME) 860*32kB (UM) 340*64kB (UME) 419*128kB (UME) 359*256kB (UM) 284*512kB (UME) 168*1024kB (UME) 76*2048kB (UME) 858*4096kB (UM) = 4205284kB [ 1509.715324][T12400] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1509.724597][T12400] 33727 total pagecache pages [ 1509.729320][T12400] 108 pages in swap cache [ 1509.733645][T12400] Free swap = 124560kB [ 1509.737769][T12400] Total swap = 124996kB [ 1509.742014][T12400] 2097051 pages RAM [ 1509.745852][T12400] 0 pages HighMem/MovableOnly [ 1509.750568][T12400] 80444 pages reserved [ 1509.777752][T12389] 9pnet_fd: Insufficient options for proto=fd [ 1509.790543][ T4583] lo speed is unknown, defaulting to 1000 [ 1509.796284][ T4583] syz0: Port: 1 Link DOWN [ 1509.807539][T12407] syz_tun: entered allmulticast mode [ 1509.814863][T12416] netlink: 'syz.9.13295': attribute type 13 has an invalid length. [ 1509.823118][T12407] syz_tun: left allmulticast mode [ 1509.828346][T12418] netlink: 64 bytes leftover after parsing attributes in process `syz.1.13296'. [ 1509.847830][T12416] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1509.928769][T12435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1509.940965][T12436] SELinux: failed to load policy [ 1509.946957][T12435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1509.972144][T12438] loop4: detected capacity change from 0 to 256 [ 1509.974384][T12441] loop9: detected capacity change from 0 to 512 [ 1509.984082][T12438] netlink: 'syz.4.13306': attribute type 4 has an invalid length. [ 1509.992513][T12438] netlink: 152 bytes leftover after parsing attributes in process `syz.4.13306'. [ 1509.993696][T12441] EXT4-fs: Ignoring removed bh option [ 1510.006404][T12438] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1510.009597][T12441] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1510.037945][T12435] loop8: detected capacity change from 0 to 1024 [ 1510.044465][T12438] loop4: detected capacity change from 0 to 2048 [ 1510.053996][T12444] loop3: detected capacity change from 0 to 512 [ 1510.063318][T12444] EXT4-fs: Ignoring removed bh option [ 1510.068292][T12441] EXT4-fs (loop9): 1 truncate cleaned up [ 1510.069112][T12444] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1510.085450][T12441] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1510.105384][T12444] EXT4-fs (loop3): 1 truncate cleaned up [ 1510.112080][T12438] Alternate GPT is invalid, using primary GPT. [ 1510.118366][T12438] loop4: p1 p2 p3 [ 1510.127306][T12447] SELinux: Context @ is not valid (left unmapped). [ 1510.138306][T12444] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1510.195145][T12456] EXT4-fs: Ignoring removed orlov option [ 1510.201415][T12456] EXT4-fs (loop9): can't enable nombcache during remount [ 1510.243581][T12457] EXT4-fs: Ignoring removed orlov option [ 1510.244678][T12459] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13312'. [ 1510.262199][T12457] EXT4-fs (loop3): can't enable nombcache during remount [ 1510.274199][T12459] loop1: detected capacity change from 0 to 736 [ 1510.291820][T12459] rock: directory entry would overflow storage [ 1510.297996][T12459] rock: sig=0x3b10, size=4, remaining=3 [ 1510.314347][T12459] netlink: 'syz.1.13312': attribute type 27 has an invalid length. [ 1510.328211][ T7921] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1510.337906][T12459] tunl0: left promiscuous mode [ 1510.343491][T12465] FAULT_INJECTION: forcing a failure. [ 1510.343491][T12465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1510.356601][T12465] CPU: 0 UID: 0 PID: 12465 Comm: syz.4.13315 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1510.356631][T12465] Tainted: [W]=WARN [ 1510.356638][T12465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1510.356650][T12465] Call Trace: [ 1510.356656][T12465] [ 1510.356665][T12465] __dump_stack+0x1d/0x30 [ 1510.356685][T12465] dump_stack_lvl+0xe8/0x140 [ 1510.356703][T12465] dump_stack+0x15/0x1b [ 1510.356756][T12465] should_fail_ex+0x265/0x280 [ 1510.356777][T12465] should_fail+0xb/0x20 [ 1510.356794][T12465] should_fail_usercopy+0x1a/0x20 [ 1510.356816][T12465] _copy_to_user+0x20/0xa0 [ 1510.356871][T12465] simple_read_from_buffer+0xb5/0x130 [ 1510.356893][T12465] proc_fail_nth_read+0x10e/0x150 [ 1510.356985][T12465] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1510.357007][T12465] vfs_read+0x1a8/0x770 [ 1510.357027][T12465] ? __rcu_read_unlock+0x4f/0x70 [ 1510.357101][T12465] ? __fget_files+0x184/0x1c0 [ 1510.357126][T12465] ksys_read+0xda/0x1a0 [ 1510.357208][T12465] __x64_sys_read+0x40/0x50 [ 1510.357296][T12465] x64_sys_call+0x27bc/0x2ff0 [ 1510.357315][T12465] do_syscall_64+0xd2/0x200 [ 1510.357361][T12465] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1510.357406][T12465] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1510.357431][T12465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1510.357461][T12465] RIP: 0033:0x7f1cf3c7d5bc [ 1510.357477][T12465] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1510.357524][T12465] RSP: 002b:00007f1cf26df030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1510.357544][T12465] RAX: ffffffffffffffda RBX: 00007f1cf3ec5fa0 RCX: 00007f1cf3c7d5bc [ 1510.357560][T12465] RDX: 000000000000000f RSI: 00007f1cf26df0a0 RDI: 0000000000000005 [ 1510.357571][T12465] RBP: 00007f1cf26df090 R08: 0000000000000000 R09: 0000000000000000 [ 1510.357650][T12465] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 1510.357662][T12465] R13: 00007f1cf3ec6038 R14: 00007f1cf3ec5fa0 R15: 00007ffd1b3baa08 [ 1510.357682][T12465] [ 1510.568734][ T5004] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1510.605440][T12459] bridge0: port 2(bridge_slave_1) entered disabled state [ 1510.612668][T12459] bridge0: port 1(bridge_slave_0) entered disabled state [ 1510.696174][T12480] loop9: detected capacity change from 0 to 512 [ 1510.732759][T12459] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1510.748428][T12480] loop9: detected capacity change from 0 to 1024 [ 1510.756909][T12480] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 1510.766589][T12459] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1510.772194][T12480] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1510.784922][T12480] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 1510.797937][T12480] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1510.809112][T12480] EXT4-fs error (device loop9): ext4_get_journal_inode:5800: inode #17: comm syz.9.13316: iget: bad i_size value: 4398046511204 [ 1510.823919][T12480] EXT4-fs (loop9): no journal found [ 1510.861100][T12489] loop3: detected capacity change from 0 to 8192 [ 1510.868768][T12459] batman_adv: batadv0: Interface deactivated: gretap1 [ 1510.883618][T12468] syz_tun: entered allmulticast mode [ 1510.892004][ T9320] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.901398][T12480] 9pnet_fd: Insufficient options for proto=fd [ 1510.908169][ T9320] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.921169][ T9320] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.932288][ T9320] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1510.949836][T12458] syz_tun: left allmulticast mode [ 1510.988432][T12494] loop1: detected capacity change from 0 to 1024 [ 1510.995460][T12494] EXT4-fs: Ignoring removed nobh option [ 1511.001044][T12494] EXT4-fs: inline encryption not supported [ 1511.018163][T12494] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1511.038330][T12494] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.13324: Allocating blocks 481-513 which overlap fs metadata [ 1511.095268][ T5018] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1511.118488][T12506] loop1: detected capacity change from 0 to 512 [ 1511.126544][T12506] EXT4-fs: Ignoring removed bh option [ 1511.134196][T12506] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1511.146871][T12506] EXT4-fs (loop1): 1 truncate cleaned up [ 1511.153473][T12506] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1511.215455][T12516] netlink: 'syz.3.13330': attribute type 21 has an invalid length. [ 1511.233839][T12518] EXT4-fs: Ignoring removed orlov option [ 1511.243767][T12518] EXT4-fs (loop1): can't enable nombcache during remount [ 1511.294598][T12522] pimreg: entered allmulticast mode [ 1511.300444][T12522] pimreg: left allmulticast mode [ 1511.337941][ T5018] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1511.356624][T12524] SELinux: Context ELF  is not valid (left unmapped). [ 1511.371848][T12524] loop1: detected capacity change from 0 to 1024 [ 1511.379344][T12524] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 1511.391600][T12526] loop3: detected capacity change from 0 to 512 [ 1511.401493][T12526] EXT4-fs error (device loop3): ext4_quota_enable:7128: inode #4: comm syz.3.13334: iget: bogus i_mode (4200) [ 1511.413539][T12526] EXT4-fs error (device loop3): ext4_quota_enable:7131: comm syz.3.13334: Bad quota inode: 4, type: 1 [ 1511.425147][T12526] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1511.440175][T12526] EXT4-fs (loop3): mount failed [ 1511.456885][T12533] loop1: detected capacity change from 0 to 1024 [ 1511.464375][T12533] EXT4-fs: Ignoring removed nobh option [ 1511.470009][T12533] EXT4-fs: inline encryption not supported [ 1511.470102][T12526] loop3: detected capacity change from 0 to 1024 [ 1511.482709][T12526] EXT4-fs: Ignoring removed bh option [ 1511.488800][T12526] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1511.491050][T12533] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1511.512169][T12526] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e84ce018, mo2=0000] [ 1511.520349][T12526] System zones: 0-1, 3-12 [ 1511.521247][T12533] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.13336: Allocating blocks 481-513 which overlap fs metadata [ 1511.525510][T12526] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #3: block 1: comm syz.3.13334: lblock 1 mapped to illegal pblock 1 (length 1) [ 1511.559365][T12526] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.13334: Failed to acquire dquot type 0 [ 1511.571618][T12526] EXT4-fs error (device loop3): ext4_free_blocks:6696: comm syz.3.13334: Freeing blocks not in datazone - block = 0, count = 4096 [ 1511.587780][T12526] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.13334: Invalid inode bitmap blk 0 in block_group 0 [ 1511.601165][ T9320] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:12: lblock 1 mapped to illegal pblock 1 (length 1) [ 1511.604744][T12526] EXT4-fs error (device loop3) in ext4_free_inode:361: Corrupt filesystem [ 1511.622957][ T9320] EXT4-fs error (device loop3): ext4_release_dquot:6973: comm kworker/u8:12: Failed to release dquot type 0 [ 1511.626276][T12526] EXT4-fs (loop3): 1 orphan inode deleted [ 1511.641742][T12526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1511.657028][ T5018] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1511.716549][T12551] netlink: 'syz.1.13341': attribute type 1 has an invalid length. [ 1511.724436][T12551] netlink: 224 bytes leftover after parsing attributes in process `syz.1.13341'. [ 1511.724534][T12550] loop4: detected capacity change from 0 to 1024 [ 1511.751136][T12550] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1511.812039][T12557] loop9: detected capacity change from 0 to 512 [ 1511.818743][T12557] EXT4-fs: Ignoring removed bh option [ 1511.825264][T12557] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1511.837998][T12557] EXT4-fs (loop9): 1 truncate cleaned up [ 1511.844613][T12557] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1511.888920][T12526] netlink: 156 bytes leftover after parsing attributes in process `syz.3.13334'. [ 1511.898129][T12526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13334'. [ 1511.908930][T12526] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13334'. [ 1511.918081][T12526] netem: change failed [ 1511.936670][T12566] EXT4-fs: Ignoring removed orlov option [ 1511.942770][T12566] EXT4-fs (loop9): can't enable nombcache during remount [ 1512.025985][ T7921] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1512.045115][T12570] loop9: detected capacity change from 0 to 1024 [ 1512.052320][T12570] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 1512.053015][T12571] loop1: detected capacity change from 0 to 512 [ 1512.060647][T12570] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1512.076483][T12571] loop1: detected capacity change from 0 to 1024 [ 1512.077659][T12570] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 1512.087672][T12571] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 1512.094124][T12570] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1512.102953][T12571] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1512.122830][T12571] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 1512.129428][T12570] EXT4-fs error (device loop9): ext4_get_journal_inode:5800: inode #17: comm syz.9.13347: iget: bad i_size value: 4398046511204 [ 1512.134020][T12571] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1512.146404][T12570] EXT4-fs (loop9): no journal found [ 1512.157521][T12571] EXT4-fs error (device loop1): ext4_get_journal_inode:5800: inode #17: comm syz.1.13346: iget: bad i_size value: 4398046511204 [ 1512.174374][T12571] EXT4-fs (loop1): no journal found [ 1512.238012][T12577] 9pnet_fd: Insufficient options for proto=fd [ 1512.465800][ T5004] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1512.500323][T12581] loop3: detected capacity change from 0 to 2048 [ 1512.510942][T12581] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1512.556055][ T9791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1512.575685][T12585] validate_nla: 1 callbacks suppressed [ 1512.575705][T12585] netlink: 'syz.4.13352': attribute type 1 has an invalid length. [ 1512.579719][T12586] tmpfs: Bad value for 'mpol' [ 1512.649779][ T5004] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1512.751307][T12592] netlink: 32 bytes leftover after parsing attributes in process `syz.9.13355'. [ 1512.772670][T12594] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13356'. [ 1512.786527][ T29] kauditd_printk_skb: 154 callbacks suppressed [ 1512.786543][ T29] audit: type=1400 audit(2000001423.169:62976): avc: denied { setopt } for pid=12593 comm="syz.3.13356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1512.812653][ T29] audit: type=1400 audit(2000001423.169:62977): avc: denied { write } for pid=12593 comm="syz.3.13356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 1512.855478][T12600] pimreg: entered allmulticast mode [ 1512.861629][T12600] pimreg: left allmulticast mode [ 1512.876133][T12598] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13358'. [ 1512.894227][T12598] loop1: detected capacity change from 0 to 2048 [ 1512.916552][ T29] audit: type=1326 audit(2000001423.289:62978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12599 comm="syz.3.13359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed431eba9 code=0x7ffc0000 [ 1512.940344][ T29] audit: type=1326 audit(2000001423.289:62979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12599 comm="syz.3.13359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed431eba9 code=0x7ffc0000 [ 1512.964213][ T29] audit: type=1326 audit(2000001423.289:62980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12599 comm="syz.3.13359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ed431eba9 code=0x7ffc0000 [ 1512.987869][ T29] audit: type=1326 audit(2000001423.289:62981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12599 comm="syz.3.13359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed431eba9 code=0x7ffc0000 [ 1513.011543][ T29] audit: type=1326 audit(2000001423.289:62982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12599 comm="syz.3.13359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed431eba9 code=0x7ffc0000 [ 1513.035250][ T29] audit: type=1326 audit(2000001423.289:62983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12599 comm="syz.3.13359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ed431eba9 code=0x7ffc0000 [ 1513.058993][ T29] audit: type=1326 audit(2000001423.289:62984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12599 comm="syz.3.13359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed431eba9 code=0x7ffc0000 [ 1513.082708][ T29] audit: type=1326 audit(2000001423.289:62985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12599 comm="syz.3.13359" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ed431eba9 code=0x7ffc0000 [ 1513.135764][T12611] loop9: detected capacity change from 0 to 512 [ 1513.154794][T12598] loop1: unable to read partition table [ 1513.156475][T12611] EXT4-fs: Ignoring removed bh option [ 1513.161924][T12598] loop1: partition table beyond EOD, truncated [ 1513.172038][T12598] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 1513.185125][T12611] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1513.197201][T12611] EXT4-fs (loop9): 1 truncate cleaned up [ 1513.205101][T12611] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1513.205985][T12610] loop8: detected capacity change from 0 to 8192 [ 1513.289968][T12611] EXT4-fs: Ignoring removed orlov option [ 1513.295830][T12611] EXT4-fs (loop9): can't enable nombcache during remount [ 1513.312750][ T7921] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1513.390128][T12631] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12631 comm=syz.9.13369 [ 1513.468438][T12634] wireguard0: entered promiscuous mode [ 1513.473953][T12634] wireguard0: entered allmulticast mode [ 1513.508555][T12633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12633 comm=syz.1.13372 [ 1513.609586][T12649] loop8: detected capacity change from 0 to 512 [ 1513.641415][T12650] loop4: detected capacity change from 0 to 128 [ 1513.654864][T12649] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.13377: casefold flag without casefold feature [ 1513.681766][T12649] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.13377: couldn't read orphan inode 15 (err -117) [ 1513.725187][T12649] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1513.751718][T12654] loop3: detected capacity change from 0 to 512 [ 1513.758316][T12654] EXT4-fs: Ignoring removed bh option [ 1513.787513][T12654] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1513.814388][T12654] EXT4-fs (loop3): 1 truncate cleaned up [ 1513.814811][T12654] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1513.963644][T12654] EXT4-fs: Ignoring removed orlov option [ 1514.004289][T12654] EXT4-fs (loop3): can't enable nombcache during remount [ 1514.026591][ T5004] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1514.071459][T12672] FAULT_INJECTION: forcing a failure. [ 1514.071459][T12672] name failslab, interval 1, probability 0, space 0, times 0 [ 1514.084145][T12672] CPU: 1 UID: 0 PID: 12672 Comm: syz.1.13385 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1514.084176][T12672] Tainted: [W]=WARN [ 1514.084261][T12672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1514.084301][T12672] Call Trace: [ 1514.084308][T12672] [ 1514.084317][T12672] __dump_stack+0x1d/0x30 [ 1514.084339][T12672] dump_stack_lvl+0xe8/0x140 [ 1514.084356][T12672] dump_stack+0x15/0x1b [ 1514.084372][T12672] should_fail_ex+0x265/0x280 [ 1514.084407][T12672] should_failslab+0x8c/0xb0 [ 1514.084430][T12672] kmem_cache_alloc_node_noprof+0x57/0x320 [ 1514.084531][T12672] ? __alloc_skb+0x101/0x320 [ 1514.084554][T12672] __alloc_skb+0x101/0x320 [ 1514.084598][T12672] netlink_alloc_large_skb+0xba/0xf0 [ 1514.084620][T12672] netlink_sendmsg+0x3cf/0x6b0 [ 1514.084647][T12672] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1514.084710][T12672] __sock_sendmsg+0x145/0x180 [ 1514.084742][T12672] ____sys_sendmsg+0x31e/0x4e0 [ 1514.084849][T12672] ___sys_sendmsg+0x17b/0x1d0 [ 1514.084929][T12672] __x64_sys_sendmsg+0xd4/0x160 [ 1514.084954][T12672] x64_sys_call+0x191e/0x2ff0 [ 1514.084974][T12672] do_syscall_64+0xd2/0x200 [ 1514.085024][T12672] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1514.085105][T12672] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1514.085129][T12672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1514.085146][T12672] RIP: 0033:0x7f636d41eba9 [ 1514.085159][T12672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1514.085249][T12672] RSP: 002b:00007f636be87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1514.085322][T12672] RAX: ffffffffffffffda RBX: 00007f636d665fa0 RCX: 00007f636d41eba9 [ 1514.085335][T12672] RDX: 0000000000000000 RSI: 00002000000007c0 RDI: 0000000000000003 [ 1514.085348][T12672] RBP: 00007f636be87090 R08: 0000000000000000 R09: 0000000000000000 [ 1514.085360][T12672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1514.085370][T12672] R13: 00007f636d666038 R14: 00007f636d665fa0 R15: 00007ffe1b864428 [ 1514.085388][T12672] [ 1514.094583][T12674] netlink: 'syz.3.13384': attribute type 1 has an invalid length. [ 1514.428740][T12688] loop9: detected capacity change from 0 to 512 [ 1514.444777][T12688] EXT4-fs: Ignoring removed bh option [ 1514.453659][T12688] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1514.465794][T12688] EXT4-fs (loop9): 1 truncate cleaned up [ 1514.471964][T12688] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1514.472098][T11368] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1514.513596][T12693] loop8: detected capacity change from 0 to 512 [ 1514.530549][T12693] EXT4-fs: Ignoring removed nobh option [ 1514.545146][T12693] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #2: block 3: comm syz.8.13393: lblock 0 mapped to illegal pblock 3 (length 1) [ 1514.565472][T12688] EXT4-fs: Ignoring removed orlov option [ 1514.572737][T12688] EXT4-fs (loop9): can't enable nombcache during remount [ 1514.579904][T12693] EXT4-fs warning (device loop8): dx_probe:791: inode #2: lblock 0: comm syz.8.13393: error -117 reading directory block [ 1514.592844][T12693] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -117 [ 1514.601634][T12693] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1514.617748][ T7921] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1514.626881][T12691] loop4: detected capacity change from 0 to 512 [ 1514.642010][T11368] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1514.921162][T12718] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12718 comm=syz.8.13402 [ 1515.010028][T12728] netlink: 'syz.3.13406': attribute type 13 has an invalid length. [ 1515.052085][T12728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1515.062245][T12728] 8021q: adding VLAN 0 to HW filter on device team0 [ 1515.072937][T12728] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1515.088609][ T9] lo speed is unknown, defaulting to 1000 [ 1515.094615][ T9] syz0: Port: 1 Link ACTIVE [ 1515.169865][T12738] random: crng reseeded on system resumption [ 1515.226988][T12751] pimreg: entered allmulticast mode [ 1515.233037][T12751] pimreg: left allmulticast mode [ 1515.249108][T12756] loop1: detected capacity change from 0 to 512 [ 1515.256208][T12756] EXT4-fs: Ignoring removed nobh option [ 1515.272796][T12756] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.13413: corrupted inode contents [ 1515.296044][T12756] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.13413: mark_inode_dirty error [ 1515.318203][T12756] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.13413: corrupted inode contents [ 1515.332899][T12762] netlink: 'syz.3.13417': attribute type 1 has an invalid length. [ 1515.344807][T12756] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.13413: mark_inode_dirty error [ 1515.357839][T12756] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.13413: Failed to acquire dquot type 0 [ 1515.376564][T12756] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.13413: corrupted inode contents [ 1515.394007][T12767] loop4: detected capacity change from 0 to 512 [ 1515.402319][T12756] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.13413: mark_inode_dirty error [ 1515.416284][T12756] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.13413: corrupted inode contents [ 1515.439451][T12767] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1515.447998][T12767] FAT-fs (loop4): Filesystem has been set read-only [ 1515.464956][T12756] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.13413: mark_inode_dirty error [ 1515.488055][T12756] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.13413: corrupted inode contents [ 1515.508517][T12767] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1515.529024][T12767] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1515.539133][T12756] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 1515.550255][T12756] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.13413: corrupted inode contents [ 1515.564380][T12756] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.13413: mark_inode_dirty error [ 1515.576094][T12756] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 1515.585061][T12767] tc_dump_action: action bad kind [ 1515.591784][T12756] EXT4-fs (loop1): 1 truncate cleaned up [ 1515.597796][T12756] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1515.610413][T12767] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 1515.621227][T12756] ext4 filesystem being mounted at /515/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1515.643093][T12756] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1515.691792][T12781] loop1: detected capacity change from 0 to 1024 [ 1515.691923][T12782] loop3: detected capacity change from 0 to 128 [ 1515.698624][T12781] EXT4-fs: Ignoring removed nobh option [ 1515.710022][T12781] EXT4-fs: inline encryption not supported [ 1515.719891][T12782] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1515.733571][T12784] loop4: detected capacity change from 0 to 1024 [ 1515.751595][T12782] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1515.752307][T12781] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1515.788369][T12784] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1515.811655][T12784] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.13426: Allocating blocks 385-513 which overlap fs metadata [ 1515.834317][T12781] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.13425: Allocating blocks 481-513 which overlap fs metadata [ 1515.851781][T12793] pimreg: entered allmulticast mode [ 1515.858688][T12793] pimreg: left allmulticast mode [ 1515.924377][ T5018] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1515.947357][T12794] EXT4-fs (loop4): pa ffff888106e23690: logic 16, phys. 129, len 24 [ 1515.955474][T12794] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 1515.978896][ T9791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1516.091943][T12808] loop1: detected capacity change from 0 to 512 [ 1516.109068][T12810] loop4: detected capacity change from 0 to 1024 [ 1516.143917][ T9360] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1516.154427][T12810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1516.178204][T12810] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.13433: Allocating blocks 385-513 which overlap fs metadata [ 1516.185211][T12816] netlink: 'syz.3.13434': attribute type 10 has an invalid length. [ 1516.200641][T12816] __nla_validate_parse: 2 callbacks suppressed [ 1516.200688][T12816] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13434'. [ 1516.267018][T12816] dummy0: entered promiscuous mode [ 1516.286536][T12816] FAULT_INJECTION: forcing a failure. [ 1516.286536][T12816] name failslab, interval 1, probability 0, space 0, times 0 [ 1516.300288][T12816] CPU: 0 UID: 0 PID: 12816 Comm: syz.3.13434 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1516.300319][T12816] Tainted: [W]=WARN [ 1516.300325][T12816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1516.300355][T12816] Call Trace: [ 1516.300435][T12816] [ 1516.300474][T12816] __dump_stack+0x1d/0x30 [ 1516.300496][T12816] dump_stack_lvl+0xe8/0x140 [ 1516.300585][T12816] dump_stack+0x15/0x1b [ 1516.300691][T12816] should_fail_ex+0x265/0x280 [ 1516.300715][T12816] should_failslab+0x8c/0xb0 [ 1516.300740][T12816] __kmalloc_noprof+0xa5/0x3e0 [ 1516.300763][T12816] ? bitmap_zalloc+0x29/0x40 [ 1516.300839][T12816] bitmap_zalloc+0x29/0x40 [ 1516.300888][T12816] new_nbp+0x24/0x300 [ 1516.300910][T12816] br_add_if+0x1e7/0xa60 [ 1516.300929][T12816] ? __pfx_ip6_route_dev_notify+0x10/0x10 [ 1516.300957][T12816] ? __dev_get_by_index+0x20/0xc0 [ 1516.301052][T12816] ? __pfx_br_add_slave+0x10/0x10 [ 1516.301067][T12816] br_add_slave+0x2c/0x40 [ 1516.301086][T12816] do_set_master+0x38d/0x460 [ 1516.301108][T12816] do_setlink+0xa43/0x2810 [ 1516.301130][T12816] ? save_fpregs_to_fpstate+0x100/0x160 [ 1516.301182][T12816] ? _raw_spin_unlock+0x26/0x50 [ 1516.301200][T12816] ? finish_task_switch+0xad/0x2b0 [ 1516.301233][T12816] ? __schedule+0x6b9/0xb30 [ 1516.301255][T12816] rtnl_setlink+0x311/0x420 [ 1516.301299][T12816] ? __pfx_rtnl_setlink+0x10/0x10 [ 1516.301386][T12816] ? __pfx_rtnl_setlink+0x10/0x10 [ 1516.301470][T12816] ? rtnetlink_rcv_msg+0x5ea/0x6d0 [ 1516.301500][T12816] ? __pfx_rtnl_setlink+0x10/0x10 [ 1516.301530][T12816] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 1516.301556][T12816] ? netlink_rcv_skb+0xec/0x220 [ 1516.301643][T12816] netlink_rcv_skb+0x123/0x220 [ 1516.301663][T12816] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1516.301700][T12816] rtnetlink_rcv+0x1c/0x30 [ 1516.301777][T12816] netlink_unicast+0x5bd/0x690 [ 1516.301827][T12816] netlink_sendmsg+0x58b/0x6b0 [ 1516.301854][T12816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1516.301951][T12816] __sock_sendmsg+0x145/0x180 [ 1516.301977][T12816] ____sys_sendmsg+0x31e/0x4e0 [ 1516.302072][T12816] ___sys_sendmsg+0x17b/0x1d0 [ 1516.302185][T12816] __x64_sys_sendmsg+0xd4/0x160 [ 1516.302213][T12816] x64_sys_call+0x191e/0x2ff0 [ 1516.302299][T12816] do_syscall_64+0xd2/0x200 [ 1516.302329][T12816] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1516.302392][T12816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.302413][T12816] RIP: 0033:0x7f8ed431eba9 [ 1516.302429][T12816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1516.302448][T12816] RSP: 002b:00007f8ed2d87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1516.302467][T12816] RAX: ffffffffffffffda RBX: 00007f8ed4565fa0 RCX: 00007f8ed431eba9 [ 1516.302543][T12816] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1516.302553][T12816] RBP: 00007f8ed2d87090 R08: 0000000000000000 R09: 0000000000000000 [ 1516.302564][T12816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1516.302577][T12816] R13: 00007f8ed4566038 R14: 00007f8ed4565fa0 R15: 00007ffc42730d78 [ 1516.302597][T12816] [ 1516.619633][T12816] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1516.694283][T12823] netlink: 'syz.3.13435': attribute type 1 has an invalid length. [ 1516.731270][T12810] EXT4-fs (loop4): pa ffff888106e235b0: logic 16, phys. 129, len 24 [ 1516.739398][T12810] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 1516.774235][ T9791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1516.912040][T12833] pimreg: entered allmulticast mode [ 1516.959710][T12836] FAULT_INJECTION: forcing a failure. [ 1516.959710][T12836] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1516.972991][T12836] CPU: 0 UID: 0 PID: 12836 Comm: syz.4.13441 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1516.973024][T12836] Tainted: [W]=WARN [ 1516.973031][T12836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1516.973041][T12836] Call Trace: [ 1516.973046][T12836] [ 1516.973052][T12836] __dump_stack+0x1d/0x30 [ 1516.973110][T12836] dump_stack_lvl+0xe8/0x140 [ 1516.973130][T12836] dump_stack+0x15/0x1b [ 1516.973148][T12836] should_fail_ex+0x265/0x280 [ 1516.973170][T12836] should_fail+0xb/0x20 [ 1516.973205][T12836] should_fail_usercopy+0x1a/0x20 [ 1516.973230][T12836] strncpy_from_user+0x25/0x230 [ 1516.973322][T12836] ? kmem_cache_alloc_noprof+0x186/0x310 [ 1516.973346][T12836] ? getname_flags+0x80/0x3b0 [ 1516.973370][T12836] getname_flags+0xae/0x3b0 [ 1516.973395][T12836] user_path_at+0x28/0x130 [ 1516.973474][T12836] __se_sys_mount+0x25b/0x2e0 [ 1516.973493][T12836] ? fput+0x8f/0xc0 [ 1516.973518][T12836] __x64_sys_mount+0x67/0x80 [ 1516.973539][T12836] x64_sys_call+0x2b4d/0x2ff0 [ 1516.973621][T12836] do_syscall_64+0xd2/0x200 [ 1516.973646][T12836] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1516.973704][T12836] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1516.973728][T12836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1516.973764][T12836] RIP: 0033:0x7f1cf3c7eba9 [ 1516.973781][T12836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1516.973797][T12836] RSP: 002b:00007f1cf26df038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1516.973816][T12836] RAX: ffffffffffffffda RBX: 00007f1cf3ec5fa0 RCX: 00007f1cf3c7eba9 [ 1516.973829][T12836] RDX: 00002000000000c0 RSI: 0000200000000240 RDI: 0000000000000000 [ 1516.973843][T12836] RBP: 00007f1cf26df090 R08: 0000200000000000 R09: 0000000000000000 [ 1516.973860][T12836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1516.973873][T12836] R13: 00007f1cf3ec6038 R14: 00007f1cf3ec5fa0 R15: 00007ffd1b3baa08 [ 1516.973893][T12836] [ 1517.194839][T12838] loop4: detected capacity change from 0 to 512 [ 1517.213783][T12838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1517.226900][T12838] ext4 filesystem being mounted at /202/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1517.264193][T12838] : renamed from bond0 (while UP) [ 1517.305160][ T9791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1517.362474][T12849] loop4: detected capacity change from 0 to 1024 [ 1517.384743][T12849] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1517.402768][T12852] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13447'. [ 1517.413960][T12849] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1517.424905][T12849] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 1517.425660][T12854] loop8: detected capacity change from 0 to 8192 [ 1517.437740][T12852] netlink: 'syz.1.13447': attribute type 83 has an invalid length. [ 1517.452464][T12849] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1517.469318][T12849] EXT4-fs error (device loop4): ext4_get_journal_inode:5800: inode #17: comm syz.4.13446: iget: bad i_size value: 4398046511204 [ 1517.483950][T12849] EXT4-fs (loop4): no journal found [ 1517.659695][T12879] lo speed is unknown, defaulting to 1000 [ 1518.176771][ T29] kauditd_printk_skb: 164 callbacks suppressed [ 1518.176784][ T29] audit: type=1400 audit(2000001428.549:63148): avc: denied { create } for pid=12877 comm="syz.4.13459" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1518.204000][ T29] audit: type=1400 audit(2000001428.549:63149): avc: denied { getopt } for pid=12877 comm="syz.4.13459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 1518.261652][T12892] netlink: 456 bytes leftover after parsing attributes in process `syz.1.13462'. [ 1518.331293][T12890] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13462'. [ 1518.340550][T12898] loop8: detected capacity change from 0 to 512 [ 1518.347096][T12898] EXT4-fs: Ignoring removed bh option [ 1518.353546][T12898] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1518.373726][T12890] bridge_slave_1: left allmulticast mode [ 1518.379442][T12890] bridge_slave_1: left promiscuous mode [ 1518.385122][T12890] bridge0: port 2(bridge_slave_1) entered disabled state [ 1518.393291][T12890] bridge_slave_0: left allmulticast mode [ 1518.394445][T12898] EXT4-fs (loop8): 1 truncate cleaned up [ 1518.398944][T12890] bridge_slave_0: left promiscuous mode [ 1518.410453][T12890] bridge0: port 1(bridge_slave_0) entered disabled state [ 1518.425322][T12898] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1518.454171][T12891] loop1: detected capacity change from 0 to 1024 [ 1518.483164][ T29] audit: type=1400 audit(2000001428.859:63150): avc: denied { read } for pid=12901 comm="syz.3.13466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 1518.515067][T12891] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5 [ 1518.524258][T12891] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0 [ 1518.533710][T12891] EXT4-fs error (device loop1): ext4_acquire_dquot:6937: comm syz.1.13462: Failed to acquire dquot type 0 [ 1518.550895][T12891] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1518.567403][T12891] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.13462: corrupted inode contents [ 1518.581180][T12891] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #13: comm syz.1.13462: mark_inode_dirty error [ 1518.593179][T12891] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.13462: corrupted inode contents [ 1518.606697][T12891] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.13462: mark_inode_dirty error [ 1518.618298][T12891] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.13462: corrupted inode contents [ 1518.641331][T12891] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 1518.650351][T12898] EXT4-fs: Ignoring removed orlov option [ 1518.670262][T12891] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.13462: corrupted inode contents [ 1518.683407][T12898] EXT4-fs (loop8): can't enable nombcache during remount [ 1518.696071][T12891] EXT4-fs error (device loop1): ext4_truncate:4666: inode #13: comm syz.1.13462: mark_inode_dirty error [ 1518.718733][T11368] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1518.749355][T12891] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 1518.758926][T12891] EXT4-fs (loop1): 1 truncate cleaned up [ 1518.765906][T12891] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1518.917492][ T5018] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1518.965472][ T29] audit: type=1400 audit(2000001429.339:63151): avc: denied { mounton } for pid=12913 comm="syz.8.13470" path="/newroot/114/cgroup" dev="tmpfs" ino=625 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 1518.995219][T12919] loop1: detected capacity change from 0 to 8192 [ 1519.036462][T12922] lo speed is unknown, defaulting to 1000 [ 1519.471697][ T29] audit: type=1326 audit(2000001429.849:63152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12930 comm="syz.1.13477" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f636d41eba9 code=0x0 [ 1519.573196][T12933] loop1: detected capacity change from 0 to 512 [ 1519.596120][T12921] loop3: detected capacity change from 0 to 1024 [ 1519.622926][T12921] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1519.637135][T12921] ext4 filesystem being mounted at /595/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1519.801504][T12947] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.13474: bg 0: block 393: padding at end of block bitmap is not set [ 1519.843885][T12947] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 1519.856621][T12947] EXT4-fs (loop3): This should not happen!! Data will be lost [ 1519.856621][T12947] [ 1520.142348][ T29] audit: type=1326 audit(2000001430.519:63153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12958 comm="syz.9.13485" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fca445ceba9 code=0x0 [ 1520.264510][T12961] loop9: detected capacity change from 0 to 512 [ 1520.414513][T12966] netlink: 204 bytes leftover after parsing attributes in process `syz.1.13486'. [ 1520.428108][T12959] loop9: detected capacity change from 0 to 1024 [ 1520.465721][T12959] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 1520.508805][T12959] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1520.519786][T12959] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 1520.603605][T12959] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1520.643682][T12959] EXT4-fs error (device loop9): ext4_get_journal_inode:5800: inode #17: comm syz.9.13485: iget: bad i_size value: 4398046511204 [ 1520.657622][T12971] loop1: detected capacity change from 0 to 512 [ 1520.677588][T12971] EXT4-fs: Ignoring removed bh option [ 1520.685682][T12959] EXT4-fs (loop9): no journal found [ 1520.692609][T12971] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1520.713950][T12971] EXT4-fs (loop1): 1 truncate cleaned up [ 1520.721199][T12971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1520.825894][T12959] 9pnet_fd: Insufficient options for proto=fd [ 1520.898149][T12971] EXT4-fs: Ignoring removed orlov option [ 1520.919181][T12971] EXT4-fs (loop1): can't enable nombcache during remount [ 1520.938136][ T5004] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1521.012735][ T5018] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1521.072149][T12979] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13491'. [ 1521.089480][T12981] netlink: 4 bytes leftover after parsing attributes in process `syz.9.13493'. [ 1521.123857][T12981] loop9: detected capacity change from 0 to 736 [ 1521.135688][T12979] netlink: 'syz.1.13491': attribute type 2 has an invalid length. [ 1521.164786][T12981] rock: directory entry would overflow storage [ 1521.171178][T12981] rock: sig=0x3b10, size=4, remaining=3 [ 1521.177446][ T29] audit: type=1326 audit(2000001431.539:63154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12978 comm="syz.1.13491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f636d41eba9 code=0x7ffc0000 [ 1521.203165][T12979] loop1: detected capacity change from 0 to 256 [ 1521.225938][T12979] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1521.251604][T12981] netlink: 'syz.9.13493': attribute type 27 has an invalid length. [ 1521.272116][ T29] audit: type=1326 audit(2000001431.589:63155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12978 comm="syz.1.13491" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f636d41eba9 code=0x7ffc0000 [ 1521.510294][T12984] syz_tun: entered allmulticast mode [ 1521.546785][T12980] syz_tun: left allmulticast mode [ 1521.602201][T12989] loop1: detected capacity change from 0 to 512 [ 1521.635264][T12989] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1521.685149][T12989] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 1521.767666][ T5018] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 1521.850937][T13000] loop9: detected capacity change from 0 to 512 [ 1522.262012][T13018] loop3: detected capacity change from 0 to 1024 [ 1522.268444][T13016] loop1: detected capacity change from 0 to 1024 [ 1522.287375][T13016] EXT4-fs: Ignoring removed nobh option [ 1522.293032][T13016] EXT4-fs: inline encryption not supported [ 1522.301167][T13018] EXT4-fs: Ignoring removed nobh option [ 1522.306738][T13018] EXT4-fs: inline encryption not supported [ 1522.323087][T13018] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1522.340929][T13016] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1522.375792][T13016] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.13502: Allocating blocks 481-513 which overlap fs metadata [ 1522.395353][T13025] loop8: detected capacity change from 0 to 1024 [ 1522.403081][T13018] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.13503: Allocating blocks 481-513 which overlap fs metadata [ 1522.419047][T13025] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1522.430106][T13025] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 1522.454575][T13025] JBD2: no valid journal superblock found [ 1522.460438][T13025] EXT4-fs (loop8): Could not load journal inode [ 1522.558308][ T7179] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1522.583676][ T5004] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1522.613696][T13035] loop9: detected capacity change from 0 to 1024 [ 1522.640174][T13035] EXT4-fs (loop9): VFS: Can't find ext4 filesystem [ 1522.796514][T13038] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13038 comm=syz.4.13509 [ 1522.828930][T13067] loop8: detected capacity change from 0 to 1024 [ 1522.864221][T13039] lo speed is unknown, defaulting to 1000 [ 1522.870472][T13067] EXT4-fs: Ignoring removed nobh option [ 1522.876053][T13067] EXT4-fs: inline encryption not supported [ 1522.915608][T13067] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.13514: Allocating blocks 481-513 which overlap fs metadata [ 1522.967310][T13047] lo speed is unknown, defaulting to 1000 [ 1523.007634][ T9322] batman_adv: batadv0: Removing interface: gretap1 [ 1523.092026][T13076] loop9: detected capacity change from 0 to 512 [ 1523.108559][T13083] FAULT_INJECTION: forcing a failure. [ 1523.108559][T13083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1523.121671][T13083] CPU: 0 UID: 0 PID: 13083 Comm: syz.4.13517 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1523.121723][T13083] Tainted: [W]=WARN [ 1523.121728][T13083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1523.121739][T13083] Call Trace: [ 1523.121745][T13083] [ 1523.121753][T13083] __dump_stack+0x1d/0x30 [ 1523.121774][T13083] dump_stack_lvl+0xe8/0x140 [ 1523.121812][T13083] dump_stack+0x15/0x1b [ 1523.121844][T13083] should_fail_ex+0x265/0x280 [ 1523.121865][T13083] should_fail+0xb/0x20 [ 1523.121946][T13083] should_fail_usercopy+0x1a/0x20 [ 1523.121971][T13083] _copy_from_user+0x1c/0xb0 [ 1523.121996][T13083] __sys_connect+0xd0/0x2b0 [ 1523.122019][T13083] __x64_sys_connect+0x3f/0x50 [ 1523.122101][T13083] x64_sys_call+0x2c08/0x2ff0 [ 1523.122123][T13083] do_syscall_64+0xd2/0x200 [ 1523.122162][T13083] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1523.122227][T13083] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1523.122345][T13083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.122363][T13083] RIP: 0033:0x7f1cf3c7eba9 [ 1523.122379][T13083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1523.122433][T13083] RSP: 002b:00007f1cf26df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1523.122484][T13083] RAX: ffffffffffffffda RBX: 00007f1cf3ec5fa0 RCX: 00007f1cf3c7eba9 [ 1523.122559][T13083] RDX: 000000000000001c RSI: 00002000000000c0 RDI: 0000000000000003 [ 1523.122570][T13083] RBP: 00007f1cf26df090 R08: 0000000000000000 R09: 0000000000000000 [ 1523.122581][T13083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1523.122591][T13083] R13: 00007f1cf3ec6038 R14: 00007f1cf3ec5fa0 R15: 00007ffd1b3baa08 [ 1523.122653][T13083] [ 1523.307769][T13085] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13518'. [ 1523.318571][ T9322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1523.328086][ T9322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1523.337565][ T9322] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1523.346523][ T9322] bond0 (unregistering): Released all slaves [ 1523.364286][T13086] loop4: detected capacity change from 0 to 512 [ 1523.380285][T13086] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1523.395674][T13086] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1523.403673][T13086] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 1523.415253][T13086] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1523.422183][T13086] __quota_error: 93 callbacks suppressed [ 1523.422195][T13086] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0 [ 1523.438825][T13086] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1523.453506][T13086] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 1523.460973][ T9322] tipc: Left network mode [ 1523.467285][T13086] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.13518: bg 0: block 40: padding at end of block bitmap is not set [ 1523.495128][T13086] EXT4-fs (loop4): Remounting filesystem read-only [ 1523.501859][T13086] EXT4-fs (loop4): 1 truncate cleaned up [ 1523.516464][T13085] EXT4-fs (loop4): shut down requested (2) [ 1523.529465][T13085] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 1523.543079][ T9322] hsr_slave_0: left promiscuous mode [ 1523.544157][T13085] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 1523.557357][ T9322] hsr_slave_1: left promiscuous mode [ 1523.563220][ T9322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1523.571043][ T9322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1523.629899][ T29] audit: type=1326 audit(2000001434.009:63248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13100 comm="syz.8.13523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754254eba9 code=0x7ffc0000 [ 1523.654222][ T29] audit: type=1326 audit(2000001434.009:63249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13100 comm="syz.8.13523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f754254eba9 code=0x7ffc0000 [ 1523.678037][ T29] audit: type=1326 audit(2000001434.009:63250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13100 comm="syz.8.13523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754254eba9 code=0x7ffc0000 [ 1523.678218][T13101] loop8: detected capacity change from 0 to 2048 [ 1523.701736][ T29] audit: type=1326 audit(2000001434.009:63251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13100 comm="syz.8.13523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754254eba9 code=0x7ffc0000 [ 1523.701764][ T29] audit: type=1326 audit(2000001434.009:63252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13100 comm="syz.8.13523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f754254eba9 code=0x7ffc0000 [ 1523.755386][ T29] audit: type=1326 audit(2000001434.009:63253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13100 comm="syz.8.13523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754254eba9 code=0x7ffc0000 [ 1523.779119][ T29] audit: type=1326 audit(2000001434.009:63254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13100 comm="syz.8.13523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f754254eba9 code=0x7ffc0000 [ 1523.802909][ T29] audit: type=1326 audit(2000001434.009:63255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13100 comm="syz.8.13523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754254eba9 code=0x7ffc0000 [ 1523.826561][ T29] audit: type=1326 audit(2000001434.009:63256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13100 comm="syz.8.13523" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f754254eba9 code=0x7ffc0000 [ 1523.835418][T13105] EXT4-fs error (device loop8): ext4_find_inline_data_nolock:169: inode #12: comm syz.8.13523: inline data xattr refers to an external xattr inode [ 1523.890751][ T9322] team0 (unregistering): Port device team_slave_1 removed [ 1523.904807][ T9322] team0 (unregistering): Port device team_slave_0 removed [ 1523.914333][ T9357] smc: removing ib device syz! [ 1523.936714][T13105] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1523.952220][T13105] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1934 with error 28 [ 1523.964774][T13105] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1523.964774][T13105] [ 1523.974490][T13105] EXT4-fs (loop8): Total free blocks count 0 [ 1523.980526][T13105] EXT4-fs (loop8): Free/Dirty block details [ 1523.982555][T13039] chnl_net:caif_netlink_parms(): no params data found [ 1523.986429][T13105] EXT4-fs (loop8): free_blocks=2415919104 [ 1523.998905][T13105] EXT4-fs (loop8): dirty_blocks=1936 [ 1524.004224][T13105] EXT4-fs (loop8): Block reservation details [ 1524.010386][T13105] EXT4-fs (loop8): i_reserved_data_blocks=121 [ 1524.061940][T13047] chnl_net:caif_netlink_parms(): no params data found [ 1524.087812][T13117] loop9: detected capacity change from 0 to 1024 [ 1524.096060][T13119] netlink: 'syz.4.13526': attribute type 21 has an invalid length. [ 1524.119458][T13117] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 1524.127831][T13117] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1524.138838][T13117] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 1524.151576][T13117] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1524.191263][T13117] EXT4-fs error (device loop9): ext4_get_journal_inode:5800: inode #17: comm syz.9.13525: iget: bad i_size value: 4398046511204 [ 1524.208791][T13117] EXT4-fs (loop9): no journal found [ 1524.246830][T13039] bridge0: port 1(bridge_slave_0) entered blocking state [ 1524.254191][T13039] bridge0: port 1(bridge_slave_0) entered disabled state [ 1524.269222][T13039] bridge_slave_0: entered allmulticast mode [ 1524.276202][T13039] bridge_slave_0: entered promiscuous mode [ 1524.296243][T13039] bridge0: port 2(bridge_slave_1) entered blocking state [ 1524.303689][T13039] bridge0: port 2(bridge_slave_1) entered disabled state [ 1524.314002][T13039] bridge_slave_1: entered allmulticast mode [ 1524.320498][T13039] bridge_slave_1: entered promiscuous mode [ 1524.341445][T13047] bridge0: port 1(bridge_slave_0) entered blocking state [ 1524.348532][T13047] bridge0: port 1(bridge_slave_0) entered disabled state [ 1524.359710][T13047] bridge_slave_0: entered allmulticast mode [ 1524.366874][T13047] bridge_slave_0: entered promiscuous mode [ 1524.400710][T13039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1524.411811][T13047] bridge0: port 2(bridge_slave_1) entered blocking state [ 1524.418874][T13047] bridge0: port 2(bridge_slave_1) entered disabled state [ 1524.426902][T13047] bridge_slave_1: entered allmulticast mode [ 1524.435058][T13047] bridge_slave_1: entered promiscuous mode [ 1524.442619][T13039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1524.460519][T13137] FAULT_INJECTION: forcing a failure. [ 1524.460519][T13137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1524.473616][T13137] CPU: 1 UID: 0 PID: 13137 Comm: +}[@ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1524.473683][T13137] Tainted: [W]=WARN [ 1524.473690][T13137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1524.473703][T13137] Call Trace: [ 1524.473711][T13137] [ 1524.473719][T13137] __dump_stack+0x1d/0x30 [ 1524.473788][T13137] dump_stack_lvl+0xe8/0x140 [ 1524.473808][T13137] dump_stack+0x15/0x1b [ 1524.473853][T13137] should_fail_ex+0x265/0x280 [ 1524.473878][T13137] should_fail+0xb/0x20 [ 1524.473898][T13137] should_fail_usercopy+0x1a/0x20 [ 1524.473981][T13137] strncpy_from_user+0x25/0x230 [ 1524.474139][T13137] ? kmem_cache_alloc_noprof+0x186/0x310 [ 1524.474235][T13137] ? getname_flags+0x80/0x3b0 [ 1524.474304][T13137] getname_flags+0xae/0x3b0 [ 1524.474332][T13137] __se_sys_move_mount+0x2d6/0x490 [ 1524.474361][T13137] __x64_sys_move_mount+0x67/0x80 [ 1524.474386][T13137] x64_sys_call+0xcfe/0x2ff0 [ 1524.474480][T13137] do_syscall_64+0xd2/0x200 [ 1524.474511][T13137] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1524.474536][T13137] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1524.474611][T13137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1524.474633][T13137] RIP: 0033:0x7f1cf3c7eba9 [ 1524.474650][T13137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1524.474667][T13137] RSP: 002b:00007f1cf26df038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 1524.474687][T13137] RAX: ffffffffffffffda RBX: 00007f1cf3ec5fa0 RCX: 00007f1cf3c7eba9 [ 1524.474713][T13137] RDX: ffffffffffffff9c RSI: 0000200000000140 RDI: 0000000000000003 [ 1524.474726][T13137] RBP: 00007f1cf26df090 R08: 0000000000000262 R09: 0000000000000000 [ 1524.474739][T13137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1524.474794][T13137] R13: 00007f1cf3ec6038 R14: 00007f1cf3ec5fa0 R15: 00007ffd1b3baa08 [ 1524.474814][T13137] [ 1524.685422][T13047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1524.694990][ T9357] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 24 with max blocks 2 with error 28 [ 1524.695311][T13039] team0: Port device team_slave_0 added [ 1524.707366][ T9357] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1524.707366][ T9357] [ 1524.714101][T13047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1524.735558][T13039] team0: Port device team_slave_1 added [ 1524.749669][T13140] loop4: detected capacity change from 0 to 1024 [ 1524.756811][T13140] EXT4-fs: Ignoring removed nobh option [ 1524.762407][T13140] EXT4-fs: inline encryption not supported [ 1524.803532][T13140] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.13533: Allocating blocks 481-513 which overlap fs metadata [ 1524.891434][T13148] loop9: detected capacity change from 0 to 256 [ 1525.100173][T13148] lo speed is unknown, defaulting to 1000 [ 1525.180982][T13047] team0: Port device team_slave_0 added [ 1525.188158][T13047] team0: Port device team_slave_1 added [ 1525.220360][T13039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1525.227325][T13039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1525.253458][T13039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1525.266688][T13039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1525.270100][T13152] loop8: detected capacity change from 0 to 1024 [ 1525.273746][T13039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1525.280827][T13152] EXT4-fs: Ignoring removed nobh option [ 1525.305930][T13039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1525.322134][T13152] EXT4-fs: inline encryption not supported [ 1525.351833][T13047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1525.359154][T13047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1525.385166][T13047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1525.401489][T13152] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.13534: Allocating blocks 481-513 which overlap fs metadata [ 1525.416949][T13159] loop4: detected capacity change from 0 to 1024 [ 1525.425469][T13159] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1525.435660][T13047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1525.442444][T13159] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1525.442777][T13047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1525.453624][T13159] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 1525.479566][T13047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1525.490515][T13159] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1525.545579][T13159] EXT4-fs error (device loop4): ext4_get_journal_inode:5800: inode #17: comm syz.4.13537: iget: bad i_size value: 4398046511204 [ 1525.560603][T13159] EXT4-fs (loop4): no journal found [ 1525.590551][T13039] hsr_slave_0: entered promiscuous mode [ 1525.605815][T13039] hsr_slave_1: entered promiscuous mode [ 1525.614825][T13039] debugfs: 'hsr0' already exists in 'hsr' [ 1525.620623][T13039] Cannot create hsr debugfs directory [ 1525.632043][T13047] hsr_slave_0: entered promiscuous mode [ 1525.640167][T13047] hsr_slave_1: entered promiscuous mode [ 1525.649644][T13047] debugfs: 'hsr0' already exists in 'hsr' [ 1525.655377][T13047] Cannot create hsr debugfs directory [ 1525.655482][T13175] loop9: detected capacity change from 0 to 1024 [ 1525.695499][T13175] ext4 filesystem being mounted at /409/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1525.720632][T13173] infiniband syz!: set down [ 1525.725187][T13173] infiniband syz!: added team_slave_0 [ 1525.769159][T13173] RDS/IB: syz!: added [ 1525.773779][T13173] smc: adding ib device syz! with port count 1 [ 1525.781570][T13173] smc: ib device syz! port 1 has pnetid [ 1525.842452][T13188] loop9: detected capacity change from 0 to 512 [ 1525.849131][T13188] EXT4-fs: Ignoring removed bh option [ 1525.858677][T13188] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1525.872627][T13188] EXT4-fs (loop9): 1 truncate cleaned up [ 1525.885420][T13047] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.023990][T13047] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.127489][T13190] EXT4-fs: Ignoring removed orlov option [ 1526.134442][T13190] EXT4-fs (loop9): can't enable nombcache during remount [ 1526.167341][T13047] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.208128][ T9322] bridge_slave_1: left allmulticast mode [ 1526.213859][ T9322] bridge_slave_1: left promiscuous mode [ 1526.219702][ T9322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1526.248416][ T9322] bridge_slave_0: left promiscuous mode [ 1526.254277][ T9322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1526.731451][ T9322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1526.742080][ T9322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1526.751508][ T9322] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1526.761603][ T9322] bond0 (unregistering): Released all slaves [ 1526.770116][ T9322] bond1 (unregistering): Released all slaves [ 1526.788454][T13047] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1526.850712][ T9322] tipc: Left network mode [ 1526.938249][T13047] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1526.959557][T13047] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1526.983345][T13047] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1527.024151][T13047] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1527.059325][ T9322] hsr_slave_0: left promiscuous mode [ 1527.072370][ T9322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1527.091676][ T9322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1527.248233][T13203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13203 comm=syz.4.13549 [ 1527.274381][ T9322] team0 (unregistering): Port device team_slave_1 removed [ 1527.296453][ T9322] team0 (unregistering): Port device team_slave_0 removed [ 1527.368391][ T36] lo speed is unknown, defaulting to 1000 [ 1527.374187][ T36] infiniband syz0: ib_query_port failed (-19) [ 1527.414182][T13207] netlink: 204 bytes leftover after parsing attributes in process `syz.4.13551'. [ 1527.472234][T13047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1527.486871][T13217] vhci_hcd: invalid port number 96 [ 1527.492061][T13217] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 1527.504938][T13047] 8021q: adding VLAN 0 to HW filter on device team0 [ 1527.522839][ T9342] bridge0: port 1(bridge_slave_0) entered blocking state [ 1527.530007][ T9342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1527.557878][T13219] netlink: 'syz.4.13553': attribute type 1 has an invalid length. [ 1527.570302][ T9342] bridge0: port 2(bridge_slave_1) entered blocking state [ 1527.577372][ T9342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1527.602671][T13047] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1527.661150][T13047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1527.792952][T13047] veth0_vlan: entered promiscuous mode [ 1527.801983][T13047] veth1_vlan: entered promiscuous mode [ 1527.817184][T13047] veth0_macvtap: entered promiscuous mode [ 1527.825153][T13047] veth1_macvtap: entered promiscuous mode [ 1527.846553][T13047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1527.857728][T13047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1527.868066][ T31] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.880986][ T9342] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.919516][ T9342] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1527.952529][T13252] netlink: 64 bytes leftover after parsing attributes in process `syz.9.13560'. [ 1527.992340][T13039] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1528.021383][ T9342] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1528.034769][T13039] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1528.051136][T13262] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13262 comm=syz.8.13559 [ 1528.091655][T13039] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1528.100623][T13264] netlink: 'syz.7.13510': attribute type 13 has an invalid length. [ 1528.151143][T13267] netlink: 'syz.9.13563': attribute type 21 has an invalid length. [ 1528.177363][T13264] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1528.202518][T13039] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1528.250073][T13286] netlink: 64 bytes leftover after parsing attributes in process `syz.8.13568'. [ 1528.284699][T13039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1528.300509][T13292] FAULT_INJECTION: forcing a failure. [ 1528.300509][T13292] name failslab, interval 1, probability 0, space 0, times 0 [ 1528.306910][T13039] 8021q: adding VLAN 0 to HW filter on device team0 [ 1528.313280][T13292] CPU: 0 UID: 0 PID: 13292 Comm: syz.8.13570 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1528.313343][T13292] Tainted: [W]=WARN [ 1528.313350][T13292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1528.313362][T13292] Call Trace: [ 1528.313368][T13292] [ 1528.313374][T13292] __dump_stack+0x1d/0x30 [ 1528.313440][T13292] dump_stack_lvl+0xe8/0x140 [ 1528.313486][T13292] dump_stack+0x15/0x1b [ 1528.313503][T13292] should_fail_ex+0x265/0x280 [ 1528.313527][T13292] should_failslab+0x8c/0xb0 [ 1528.313617][T13292] kmem_cache_alloc_node_noprof+0x57/0x320 [ 1528.313645][T13292] ? __alloc_skb+0x101/0x320 [ 1528.313676][T13292] __alloc_skb+0x101/0x320 [ 1528.313711][T13292] netlink_alloc_large_skb+0xba/0xf0 [ 1528.313734][T13292] netlink_sendmsg+0x3cf/0x6b0 [ 1528.313760][T13292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1528.313785][T13292] __sock_sendmsg+0x145/0x180 [ 1528.313926][T13292] ____sys_sendmsg+0x31e/0x4e0 [ 1528.313955][T13292] ___sys_sendmsg+0x17b/0x1d0 [ 1528.313993][T13292] __x64_sys_sendmsg+0xd4/0x160 [ 1528.314070][T13292] x64_sys_call+0x191e/0x2ff0 [ 1528.314090][T13292] do_syscall_64+0xd2/0x200 [ 1528.314120][T13292] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1528.314166][T13292] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1528.314193][T13292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1528.314213][T13292] RIP: 0033:0x7f754254eba9 [ 1528.314229][T13292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1528.314247][T13292] RSP: 002b:00007f7540faf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1528.314277][T13292] RAX: ffffffffffffffda RBX: 00007f7542795fa0 RCX: 00007f754254eba9 [ 1528.314290][T13292] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000003 [ 1528.314302][T13292] RBP: 00007f7540faf090 R08: 0000000000000000 R09: 0000000000000000 [ 1528.314315][T13292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1528.314327][T13292] R13: 00007f7542796038 R14: 00007f7542795fa0 R15: 00007ffe31e21508 [ 1528.314346][T13292] [ 1528.435584][T13301] loop8: detected capacity change from 0 to 1024 [ 1528.451026][T13039] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1528.542179][T13039] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1528.555508][ T9322] bridge0: port 1(bridge_slave_0) entered blocking state [ 1528.562602][ T9322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1528.563084][T13301] EXT4-fs: Ignoring removed nobh option [ 1528.575516][T13301] EXT4-fs: inline encryption not supported [ 1528.577324][ T9322] bridge0: port 2(bridge_slave_1) entered blocking state [ 1528.588409][ T9322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1528.612911][T13301] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.13575: Allocating blocks 481-513 which overlap fs metadata [ 1528.663477][T13039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1528.694460][ T29] kauditd_printk_skb: 304 callbacks suppressed [ 1528.694476][ T29] audit: type=1326 audit(2000001439.059:63561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13300 comm="syz.8.13575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754254eba9 code=0x7ffc0000 [ 1528.724514][ T29] audit: type=1326 audit(2000001439.059:63562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13300 comm="syz.8.13575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754254eba9 code=0x7ffc0000 [ 1528.748199][ T29] audit: type=1326 audit(2000001439.059:63563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13300 comm="syz.8.13575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7f754254eba9 code=0x7ffc0000 [ 1528.772040][ T29] audit: type=1326 audit(2000001439.059:63564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13300 comm="syz.8.13575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754254eba9 code=0x7ffc0000 [ 1528.796063][ T29] audit: type=1326 audit(2000001439.059:63565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13300 comm="syz.8.13575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754254eba9 code=0x7ffc0000 [ 1529.032563][T13039] veth0_vlan: entered promiscuous mode [ 1529.042327][T13039] veth1_vlan: entered promiscuous mode [ 1529.061938][T13039] veth0_macvtap: entered promiscuous mode [ 1529.160466][ T29] audit: type=1400 audit(2000001439.509:63566): avc: denied { create } for pid=13325 comm="syz.9.13579" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1529.183225][T13039] veth1_macvtap: entered promiscuous mode [ 1529.210912][T13039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1529.229694][T13328] netlink: 64 bytes leftover after parsing attributes in process `syz.9.13580'. [ 1529.240652][T13039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1529.248430][ T29] audit: type=1400 audit(2000001439.579:63567): avc: denied { unlink } for pid=7921 comm="syz-executor" name="file0" dev="tmpfs" ino=2260 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1529.282087][ T9322] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.306408][T13330] loop9: detected capacity change from 0 to 1024 [ 1529.320907][ T9322] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.330250][T13330] EXT4-fs: Ignoring removed nobh option [ 1529.335875][T13330] EXT4-fs: inline encryption not supported [ 1529.362054][ T9322] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.380044][ T9322] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1529.496378][T13330] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4183: comm syz.9.13581: Allocating blocks 481-513 which overlap fs metadata [ 1529.534692][T13346] loop3: detected capacity change from 0 to 2048 [ 1529.604036][T13311] netlink: 'syz.4.13576': attribute type 21 has an invalid length. [ 1529.675540][ T29] audit: type=1326 audit(2000001440.049:63568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13354 comm="syz.9.13587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca445ceba9 code=0x7ffc0000 [ 1529.725191][ T29] audit: type=1326 audit(2000001440.079:63569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13354 comm="syz.9.13587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fca445ceba9 code=0x7ffc0000 [ 1529.749053][ T29] audit: type=1326 audit(2000001440.079:63570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13354 comm="syz.9.13587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca445ceba9 code=0x7ffc0000 [ 1529.861358][T13367] loop8: detected capacity change from 0 to 1024 [ 1529.877557][T13367] EXT4-fs: Ignoring removed nobh option [ 1529.883205][T13367] EXT4-fs: inline encryption not supported [ 1529.918514][T13367] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.13589: Allocating blocks 481-513 which overlap fs metadata [ 1530.304734][T13390] loop9: detected capacity change from 0 to 512 [ 1530.359911][T13394] loop7: detected capacity change from 0 to 512 [ 1530.366485][T13394] EXT4-fs: Ignoring removed bh option [ 1530.370177][T13396] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(11) [ 1530.372541][T13394] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1530.378523][T13396] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1530.395953][T13396] vhci_hcd vhci_hcd.0: Device attached [ 1530.406425][T13394] EXT4-fs (loop7): 1 truncate cleaned up [ 1530.435580][T13404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13600'. [ 1530.448646][T13404] loop3: detected capacity change from 0 to 736 [ 1530.465045][T13398] vhci_hcd: connection closed [ 1530.469385][ T9342] vhci_hcd: stop threads [ 1530.478388][ T9342] vhci_hcd: release socket [ 1530.482954][ T9342] vhci_hcd: disconnect device [ 1530.485788][T13410] netlink: 64 bytes leftover after parsing attributes in process `syz.4.13603'. [ 1530.499819][T13404] rock: directory entry would overflow storage [ 1530.505977][T13404] rock: sig=0x3b10, size=4, remaining=3 [ 1530.516878][T13404] netlink: 'syz.3.13600': attribute type 27 has an invalid length. [ 1530.544944][T13412] netlink: 'syz.4.13604': attribute type 13 has an invalid length. [ 1530.558965][T13404] bridge0: port 2(bridge_slave_1) entered disabled state [ 1530.565356][T13394] EXT4-fs: Ignoring removed orlov option [ 1530.566169][T13404] bridge0: port 1(bridge_slave_0) entered disabled state [ 1530.579627][T13394] EXT4-fs (loop7): can't enable nombcache during remount [ 1530.614538][T13404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1530.625155][T13404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1530.684132][T13412] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1530.709999][T13415] syz_tun: entered allmulticast mode [ 1530.719456][ T31] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.728440][ T31] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.738703][ T31] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.748573][ T31] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1530.758443][T13403] syz_tun: left allmulticast mode [ 1530.763941][T13423] netlink: 'syz.4.13608': attribute type 13 has an invalid length. [ 1530.777754][T13423] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1530.804666][T13427] loop3: detected capacity change from 0 to 1024 [ 1530.812408][T13427] EXT4-fs: Ignoring removed nobh option [ 1530.817976][T13427] EXT4-fs: inline encryption not supported [ 1530.843992][T13427] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.13610: Allocating blocks 481-513 which overlap fs metadata [ 1530.864997][T13435] netlink: 64 bytes leftover after parsing attributes in process `syz.7.13613'. [ 1530.955359][T13431] loop4: detected capacity change from 0 to 512 [ 1530.958223][T13447] FAULT_INJECTION: forcing a failure. [ 1530.958223][T13447] name failslab, interval 1, probability 0, space 0, times 0 [ 1530.971034][T13431] loop4: detected capacity change from 0 to 1024 [ 1530.974407][T13447] CPU: 0 UID: 0 PID: 13447 Comm: syz.7.13617 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1530.974440][T13447] Tainted: [W]=WARN [ 1530.974447][T13447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1530.974460][T13447] Call Trace: [ 1530.974467][T13447] [ 1530.974475][T13447] __dump_stack+0x1d/0x30 [ 1530.974496][T13447] dump_stack_lvl+0xe8/0x140 [ 1530.974536][T13447] dump_stack+0x15/0x1b [ 1530.974552][T13447] should_fail_ex+0x265/0x280 [ 1530.974576][T13447] should_failslab+0x8c/0xb0 [ 1530.974600][T13447] __kvmalloc_node_noprof+0x123/0x4e0 [ 1530.974647][T13447] ? seq_read_iter+0x13e/0x940 [ 1530.974757][T13447] ? __rcu_read_unlock+0x4f/0x70 [ 1530.974825][T13447] seq_read_iter+0x13e/0x940 [ 1530.974868][T13447] kernfs_fop_read_iter+0xc1/0x330 [ 1530.974972][T13447] ? iov_iter_bvec+0xa4/0xd0 [ 1530.975040][T13447] copy_splice_read+0x442/0x660 [ 1530.975064][T13447] ? __pfx_copy_splice_read+0x10/0x10 [ 1530.975153][T13447] splice_direct_to_actor+0x26f/0x680 [ 1530.975174][T13447] ? __pfx_direct_splice_actor+0x10/0x10 [ 1530.975198][T13447] do_splice_direct+0xda/0x150 [ 1530.975217][T13447] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1530.975309][T13447] do_sendfile+0x380/0x650 [ 1530.975400][T13447] __x64_sys_sendfile64+0x105/0x150 [ 1530.975428][T13447] x64_sys_call+0x2bb0/0x2ff0 [ 1530.975448][T13447] do_syscall_64+0xd2/0x200 [ 1530.975478][T13447] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1530.975582][T13447] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1530.975609][T13447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1530.975629][T13447] RIP: 0033:0x7f36ccb1eba9 [ 1530.975707][T13447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1530.975724][T13447] RSP: 002b:00007f36cb587038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1530.975759][T13447] RAX: ffffffffffffffda RBX: 00007f36ccd65fa0 RCX: 00007f36ccb1eba9 [ 1530.975772][T13447] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000006 [ 1530.975784][T13447] RBP: 00007f36cb587090 R08: 0000000000000000 R09: 0000000000000000 [ 1530.975797][T13447] R10: 0000000400000013 R11: 0000000000000246 R12: 0000000000000001 [ 1530.975810][T13447] R13: 00007f36ccd66038 R14: 00007f36ccd65fa0 R15: 00007ffe44fcaba8 [ 1530.975830][T13447] [ 1531.039627][T13450] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1531.136379][T13431] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 1531.202791][T13459] netlink: 'syz.7.13622': attribute type 13 has an invalid length. [ 1531.226379][T13431] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1531.243246][T13431] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 1531.253671][T13431] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1531.266715][T13431] EXT4-fs error (device loop4): ext4_get_journal_inode:5800: inode #17: comm syz.4.13612: iget: bad i_size value: 4398046511204 [ 1531.281303][T13431] EXT4-fs (loop4): no journal found [ 1531.286530][T13459] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1531.309025][T13460] loop8: detected capacity change from 0 to 512 [ 1531.325664][T13431] 9pnet_fd: Insufficient options for proto=fd [ 1531.326054][T13460] ext3: Unknown parameter 'mask' [ 1531.345318][T13467] loop3: detected capacity change from 0 to 512 [ 1531.357113][T13467] EXT4-fs: Ignoring removed bh option [ 1531.364055][T13460] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1531.367348][T13471] netlink: 64 bytes leftover after parsing attributes in process `syz.7.13627'. [ 1531.381336][T13467] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1531.419593][T13467] EXT4-fs (loop3): 1 truncate cleaned up [ 1531.453307][T13482] FAULT_INJECTION: forcing a failure. [ 1531.453307][T13482] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1531.466663][T13482] CPU: 1 UID: 0 PID: 13482 Comm: syz.9.13632 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1531.466697][T13482] Tainted: [W]=WARN [ 1531.466702][T13482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1531.466713][T13482] Call Trace: [ 1531.466719][T13482] [ 1531.466726][T13482] __dump_stack+0x1d/0x30 [ 1531.466745][T13482] dump_stack_lvl+0xe8/0x140 [ 1531.466798][T13482] dump_stack+0x15/0x1b [ 1531.466812][T13482] should_fail_ex+0x265/0x280 [ 1531.466909][T13482] should_fail+0xb/0x20 [ 1531.466943][T13482] should_fail_usercopy+0x1a/0x20 [ 1531.466994][T13482] _copy_to_user+0x20/0xa0 [ 1531.467025][T13482] simple_read_from_buffer+0xb5/0x130 [ 1531.467049][T13482] proc_fail_nth_read+0x10e/0x150 [ 1531.467101][T13482] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1531.467115][T13482] vfs_read+0x1a8/0x770 [ 1531.467153][T13482] ? __rcu_read_unlock+0x4f/0x70 [ 1531.467190][T13482] ? __fget_files+0x184/0x1c0 [ 1531.467205][T13482] ksys_read+0xda/0x1a0 [ 1531.467288][T13482] __x64_sys_read+0x40/0x50 [ 1531.467300][T13482] x64_sys_call+0x27bc/0x2ff0 [ 1531.467312][T13482] do_syscall_64+0xd2/0x200 [ 1531.467329][T13482] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1531.467342][T13482] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1531.467394][T13482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1531.467408][T13482] RIP: 0033:0x7fca445cd5bc [ 1531.467450][T13482] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1531.467460][T13482] RSP: 002b:00007fca4302f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1531.467472][T13482] RAX: ffffffffffffffda RBX: 00007fca44815fa0 RCX: 00007fca445cd5bc [ 1531.467542][T13482] RDX: 000000000000000f RSI: 00007fca4302f0a0 RDI: 0000000000000004 [ 1531.467549][T13482] RBP: 00007fca4302f090 R08: 0000000000000000 R09: ffffffffffffffa1 [ 1531.467556][T13482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1531.467563][T13482] R13: 00007fca44816038 R14: 00007fca44815fa0 R15: 00007fff40cd02d8 [ 1531.467574][T13482] [ 1531.694849][T13467] EXT4-fs: Ignoring removed orlov option [ 1531.715510][T13467] EXT4-fs (loop3): can't enable nombcache during remount [ 1531.758129][T13493] syzkaller0: entered promiscuous mode [ 1531.763680][T13493] syzkaller0: entered allmulticast mode [ 1531.927344][T13508] FAULT_INJECTION: forcing a failure. [ 1531.927344][T13508] name failslab, interval 1, probability 0, space 0, times 0 [ 1531.939998][T13508] CPU: 0 UID: 0 PID: 13508 Comm: syz.7.13636 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1531.940046][T13508] Tainted: [W]=WARN [ 1531.940053][T13508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1531.940065][T13508] Call Trace: [ 1531.940073][T13508] [ 1531.940082][T13508] __dump_stack+0x1d/0x30 [ 1531.940104][T13508] dump_stack_lvl+0xe8/0x140 [ 1531.940193][T13508] dump_stack+0x15/0x1b [ 1531.940221][T13508] should_fail_ex+0x265/0x280 [ 1531.940247][T13508] should_failslab+0x8c/0xb0 [ 1531.940267][T13508] __kvmalloc_node_noprof+0x123/0x4e0 [ 1531.940292][T13508] ? alloc_fdtable+0x10b/0x1d0 [ 1531.940318][T13508] alloc_fdtable+0x10b/0x1d0 [ 1531.940348][T13508] dup_fd+0x4c7/0x540 [ 1531.940370][T13508] ? _raw_spin_unlock+0x26/0x50 [ 1531.940470][T13508] ksys_unshare+0x346/0x6d0 [ 1531.940494][T13508] ? ksys_write+0x192/0x1a0 [ 1531.940514][T13508] __x64_sys_unshare+0x1f/0x30 [ 1531.940539][T13508] x64_sys_call+0x2911/0x2ff0 [ 1531.940600][T13508] do_syscall_64+0xd2/0x200 [ 1531.940627][T13508] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1531.940653][T13508] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1531.940754][T13508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1531.940776][T13508] RIP: 0033:0x7f36ccb1eba9 [ 1531.940793][T13508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1531.940809][T13508] RSP: 002b:00007f36cb545038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1531.940826][T13508] RAX: ffffffffffffffda RBX: 00007f36ccd66180 RCX: 00007f36ccb1eba9 [ 1531.940837][T13508] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000064000600 [ 1531.940848][T13508] RBP: 00007f36cb545090 R08: 0000000000000000 R09: 0000000000000000 [ 1531.940858][T13508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1531.940892][T13508] R13: 00007f36ccd66218 R14: 00007f36ccd66180 R15: 00007ffe44fcaba8 [ 1531.940912][T13508] [ 1532.421711][T13518] loop8: detected capacity change from 0 to 512 [ 1532.448919][T13518] loop8: detected capacity change from 0 to 1024 [ 1532.460736][T13518] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 1532.469835][T13518] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 1532.480835][T13518] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869) [ 1532.491596][T13518] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1532.502408][T13518] EXT4-fs error (device loop8): ext4_get_journal_inode:5800: inode #17: comm syz.8.13645: iget: bad i_size value: 4398046511204 [ 1532.516933][T13518] EXT4-fs (loop8): no journal found [ 1532.530560][T13523] syz!: rxe_newlink: already configured on team_slave_0 [ 1532.586394][T13529] 9pnet_fd: Insufficient options for proto=fd [ 1532.775313][T13545] loop4: detected capacity change from 0 to 1024 [ 1532.792805][T13545] EXT4-fs: Ignoring removed nobh option [ 1532.798590][T13545] EXT4-fs: inline encryption not supported [ 1532.844055][T13545] EXT4-fs mount: 28 callbacks suppressed [ 1532.844068][T13545] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1532.903430][T13545] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.13656: Allocating blocks 481-513 which overlap fs metadata [ 1533.006151][ T9791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1533.057030][T13554] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1533.079913][T13558] loop7: detected capacity change from 0 to 1024 [ 1533.111035][T13558] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1533.129007][T13567] loop4: detected capacity change from 0 to 1024 [ 1533.135722][T13558] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1533.167277][T13567] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1533.190205][T13567] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1533.203588][T13571] loop3: detected capacity change from 0 to 128 [ 1533.210307][T13573] loop8: detected capacity change from 0 to 1024 [ 1533.225305][T13571] macvtap0: refused to change device tx_queue_len [ 1533.238379][T13573] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1533.259430][T13573] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1533.281746][T13573] FAULT_INJECTION: forcing a failure. [ 1533.281746][T13573] name failslab, interval 1, probability 0, space 0, times 0 [ 1533.294684][T13573] CPU: 0 UID: 0 PID: 13573 Comm: syz.8.13664 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1533.294901][T13573] Tainted: [W]=WARN [ 1533.294907][T13573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1533.294917][T13573] Call Trace: [ 1533.294923][T13573] [ 1533.294930][T13573] __dump_stack+0x1d/0x30 [ 1533.294950][T13573] dump_stack_lvl+0xe8/0x140 [ 1533.294965][T13573] dump_stack+0x15/0x1b [ 1533.295054][T13573] should_fail_ex+0x265/0x280 [ 1533.295074][T13573] ? alloc_pipe_info+0xae/0x350 [ 1533.295177][T13573] should_failslab+0x8c/0xb0 [ 1533.295221][T13573] __kmalloc_cache_noprof+0x4c/0x320 [ 1533.295257][T13573] alloc_pipe_info+0xae/0x350 [ 1533.295276][T13573] splice_direct_to_actor+0x592/0x680 [ 1533.295294][T13573] ? kstrtouint_from_user+0x9f/0xf0 [ 1533.295378][T13573] ? __pfx_direct_splice_actor+0x10/0x10 [ 1533.295395][T13573] ? __rcu_read_unlock+0x4f/0x70 [ 1533.295413][T13573] ? get_pid_task+0x96/0xd0 [ 1533.295539][T13573] ? avc_policy_seqno+0x15/0x30 [ 1533.295560][T13573] ? selinux_file_permission+0x1e4/0x320 [ 1533.295579][T13573] do_splice_direct+0xda/0x150 [ 1533.295595][T13573] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1533.295647][T13573] do_sendfile+0x380/0x650 [ 1533.295674][T13573] __x64_sys_sendfile64+0x105/0x150 [ 1533.295698][T13573] x64_sys_call+0x2bb0/0x2ff0 [ 1533.295717][T13573] do_syscall_64+0xd2/0x200 [ 1533.295765][T13573] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1533.295785][T13573] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1533.295918][T13573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1533.295936][T13573] RIP: 0033:0x7f754254eba9 [ 1533.295949][T13573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1533.295971][T13573] RSP: 002b:00007f7540faf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1533.296032][T13573] RAX: ffffffffffffffda RBX: 00007f7542795fa0 RCX: 00007f754254eba9 [ 1533.296043][T13573] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 1533.296053][T13573] RBP: 00007f7540faf090 R08: 0000000000000000 R09: 0000000000000000 [ 1533.296082][T13573] R10: 00000000e0000000 R11: 0000000000000246 R12: 0000000000000001 [ 1533.296092][T13573] R13: 00007f7542796038 R14: 00007f7542795fa0 R15: 00007ffe31e21508 [ 1533.296151][T13573] [ 1533.542460][ T9345] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:37: bg 0: block 393: padding at end of block bitmap is not set [ 1533.557354][ T9345] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 1533.570128][ T9345] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1533.570128][ T9345] [ 1533.581682][ T9357] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm kworker/u8:49: bg 0: block 393: padding at end of block bitmap is not set [ 1533.596842][ T9357] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 2050 with max blocks 1 with error 117 [ 1533.609472][ T9357] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1533.609472][ T9357] [ 1533.621097][T11368] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1533.652685][ T9357] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm kworker/u8:49: bg 0: block 393: padding at end of block bitmap is not set [ 1533.657823][ T9791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1533.672111][ T9357] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 1533.688780][ T9357] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1533.688780][ T9357] [ 1533.703162][T13577] netlink: 204 bytes leftover after parsing attributes in process `syz.8.13667'. [ 1533.714686][T13047] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1533.763557][T13592] FAULT_INJECTION: forcing a failure. [ 1533.763557][T13592] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1533.776757][T13592] CPU: 1 UID: 0 PID: 13592 Comm: syz.7.13668 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1533.776791][T13592] Tainted: [W]=WARN [ 1533.776815][T13592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1533.776825][T13592] Call Trace: [ 1533.776832][T13592] [ 1533.776839][T13592] __dump_stack+0x1d/0x30 [ 1533.776858][T13592] dump_stack_lvl+0xe8/0x140 [ 1533.776954][T13592] dump_stack+0x15/0x1b [ 1533.776968][T13592] should_fail_ex+0x265/0x280 [ 1533.777048][T13592] should_fail+0xb/0x20 [ 1533.777067][T13592] should_fail_usercopy+0x1a/0x20 [ 1533.777192][T13592] _copy_from_user+0x1c/0xb0 [ 1533.777217][T13592] ___sys_sendmsg+0xc1/0x1d0 [ 1533.777344][T13592] __x64_sys_sendmsg+0xd4/0x160 [ 1533.777424][T13592] x64_sys_call+0x191e/0x2ff0 [ 1533.777539][T13592] do_syscall_64+0xd2/0x200 [ 1533.777564][T13592] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1533.777585][T13592] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1533.777626][T13592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1533.777647][T13592] RIP: 0033:0x7f36ccb1eba9 [ 1533.777735][T13592] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1533.777758][T13592] RSP: 002b:00007f36cb587038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1533.777776][T13592] RAX: ffffffffffffffda RBX: 00007f36ccd65fa0 RCX: 00007f36ccb1eba9 [ 1533.777789][T13592] RDX: 0000000000000800 RSI: 0000200000000000 RDI: 0000000000000005 [ 1533.777802][T13592] RBP: 00007f36cb587090 R08: 0000000000000000 R09: 0000000000000000 [ 1533.777852][T13592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1533.777863][T13592] R13: 00007f36ccd66038 R14: 00007f36ccd65fa0 R15: 00007ffe44fcaba8 [ 1533.777879][T13592] [ 1533.961539][T13595] loop3: detected capacity change from 0 to 512 [ 1533.999370][T13595] EXT4-fs: Ignoring removed bh option [ 1534.005066][T13595] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1534.031700][T13595] EXT4-fs (loop3): 1 truncate cleaned up [ 1534.037901][T13595] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1534.051683][T13583] netlink: 204 bytes leftover after parsing attributes in process `syz.4.13666'. [ 1534.089183][T13601] loop8: detected capacity change from 0 to 1024 [ 1534.096533][T13601] EXT4-fs: Ignoring removed orlov option [ 1534.101694][T13603] loop4: detected capacity change from 0 to 128 [ 1534.108669][T13605] loop9: detected capacity change from 0 to 1024 [ 1534.115632][T13605] EXT4-fs: Ignoring removed nobh option [ 1534.121272][T13605] EXT4-fs: inline encryption not supported [ 1534.121617][T13601] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1534.140865][T13601] ext4 filesystem being mounted at /155/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1534.164125][T13605] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1534.177518][T13601] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #15: block 3: comm syz.8.13676: lblock 3 mapped to illegal pblock 3 (length 1) [ 1534.230367][T13601] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117 [ 1534.242724][T13601] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1534.242724][T13601] [ 1534.263451][T13605] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4183: comm syz.9.13678: Allocating blocks 481-513 which overlap fs metadata [ 1534.341097][T13614] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 3: comm syz.8.13676: lblock 3 mapped to illegal pblock 3 (length 1) [ 1534.364604][T13619] netlink: 'syz.7.13679': attribute type 4 has an invalid length. [ 1534.372655][T13619] netlink: 17 bytes leftover after parsing attributes in process `syz.7.13679'. [ 1534.388345][ T29] kauditd_printk_skb: 185 callbacks suppressed [ 1534.388359][ T29] audit: type=1326 audit(2000001444.759:63756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13604 comm="syz.9.13678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca445ceba9 code=0x7ffc0000 [ 1534.417204][T13600] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 3: comm syz.8.13676: lblock 3 mapped to illegal pblock 3 (length 1) [ 1534.418265][ T29] audit: type=1326 audit(2000001444.759:63757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13604 comm="syz.9.13678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fca445ceba9 code=0x7ffc0000 [ 1534.464733][T13600] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 3: comm syz.8.13676: lblock 3 mapped to illegal pblock 3 (length 1) [ 1534.480715][T13600] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 3: comm syz.8.13676: lblock 3 mapped to illegal pblock 3 (length 1) [ 1534.495904][ T29] audit: type=1326 audit(2000001444.779:63758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13604 comm="syz.9.13678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca445ceba9 code=0x7ffc0000 [ 1534.519669][ T29] audit: type=1326 audit(2000001444.779:63759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13604 comm="syz.9.13678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=234 compat=0 ip=0x7fca445ceba9 code=0x7ffc0000 [ 1534.543491][ T29] audit: type=1326 audit(2000001444.779:63760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13604 comm="syz.9.13678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca445ceba9 code=0x7ffc0000 [ 1534.559552][T13614] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 3: comm syz.8.13676: lblock 3 mapped to illegal pblock 3 (length 1) [ 1534.567288][ T29] audit: type=1326 audit(2000001444.779:63761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13604 comm="syz.9.13678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca445ceba9 code=0x7ffc0000 [ 1534.590045][T13601] EXT4-fs error (device loop8): ext4_map_blocks:814: inode #15: comm syz.8.13676: lblock 0 mapped to illegal pblock 0 (length 1) [ 1534.605611][T13595] EXT4-fs: Ignoring removed orlov option [ 1534.621963][T13600] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 3: comm syz.8.13676: lblock 3 mapped to illegal pblock 3 (length 1) [ 1534.640477][T11239] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1534.652467][T13600] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 3: comm syz.8.13676: lblock 3 mapped to illegal pblock 3 (length 1) [ 1534.679421][T13595] EXT4-fs (loop3): can't enable nombcache during remount [ 1534.703259][T13621] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #15: block 3: comm syz.8.13676: lblock 3 mapped to illegal pblock 3 (length 1) [ 1534.718986][T13039] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1535.165039][T13627] tipc: Started in network mode [ 1535.169979][T13627] tipc: Node identity 4ef8fb42591f, cluster identity 4711 [ 1535.177125][T13627] tipc: Enabled bearer , priority 0 [ 1535.209614][ T9342] bridge_slave_1: left allmulticast mode [ 1535.215278][ T9342] bridge_slave_1: left promiscuous mode [ 1535.221059][ T9342] bridge0: port 2(bridge_slave_1) entered disabled state [ 1535.293662][ T9342] bridge_slave_0: left allmulticast mode [ 1535.299500][ T9342] bridge_slave_0: left promiscuous mode [ 1535.305160][ T9342] bridge0: port 1(bridge_slave_0) entered disabled state [ 1535.649102][T11368] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1535.691172][ T9342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1535.710704][ T9342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1535.725452][T13637] netlink: 204 bytes leftover after parsing attributes in process `syz.7.13688'. [ 1535.735415][ T9342] bond0 (unregistering): Released all slaves [ 1535.749687][T13631] syzkaller0: entered promiscuous mode [ 1535.755186][T13631] syzkaller0: entered allmulticast mode [ 1535.791845][T13633] tipc: Resetting bearer [ 1535.813036][T13633] tipc: Disabling bearer [ 1535.824501][T13643] loop7: detected capacity change from 0 to 1024 [ 1535.846041][T13643] EXT4-fs: Ignoring removed nobh option [ 1535.851811][T13643] EXT4-fs: inline encryption not supported [ 1535.903004][ T9342] hsr_slave_0: left promiscuous mode [ 1535.934537][T13643] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1535.957289][ T9342] hsr_slave_1: left promiscuous mode [ 1535.972459][T13661] loop3: detected capacity change from 0 to 1024 [ 1535.979160][ T9342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1535.986637][T13659] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 1536.003740][ T9342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1536.012400][T13661] EXT4-fs: Ignoring removed nobh option [ 1536.017994][T13661] EXT4-fs: inline encryption not supported [ 1536.031113][T13643] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.13690: Allocating blocks 481-513 which overlap fs metadata [ 1536.075710][T13661] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1536.133134][T13661] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.13694: Allocating blocks 481-513 which overlap fs metadata [ 1536.208781][ T29] audit: type=1326 audit(2000001446.499:63762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13642 comm="syz.7.13690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ccb1eba9 code=0x7ffc0000 [ 1536.232469][ T29] audit: type=1326 audit(2000001446.499:63763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13642 comm="syz.7.13690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f36ccb1eba9 code=0x7ffc0000 [ 1536.256388][ T29] audit: type=1326 audit(2000001446.499:63764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13669 comm="syz.7.13690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f36ccb51465 code=0x7ffc0000 [ 1536.280109][ T29] audit: type=1326 audit(2000001446.529:63765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13642 comm="syz.7.13690" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36ccb1eba9 code=0x7ffc0000 [ 1536.322956][T13673] loop4: detected capacity change from 0 to 512 [ 1536.342377][T13047] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1536.354656][T13673] journal_path: Lookup failure for './file0/../file0' [ 1536.361648][T13673] EXT4-fs: error: could not find journal device path [ 1536.381557][T13685] loop7: detected capacity change from 0 to 512 [ 1536.394771][T13685] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13697'. [ 1536.417747][T13685] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13697'. [ 1536.434286][T13685] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13697'. [ 1536.449383][T13039] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1536.458696][T13685] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13697'. [ 1536.481786][T13685] netlink: 24 bytes leftover after parsing attributes in process `syz.7.13697'. [ 1536.510699][T13691] loop4: detected capacity change from 0 to 1024 [ 1536.522353][T13685] loop7: detected capacity change from 0 to 512 [ 1536.539739][T13691] EXT4-fs: Ignoring removed nobh option [ 1536.545379][T13691] EXT4-fs: inline encryption not supported [ 1536.560403][T13685] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1536.571778][T13685] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.13697: bg 0: block 248: padding at end of block bitmap is not set [ 1536.586804][T13685] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.13697: Failed to acquire dquot type 1 [ 1536.616557][T13697] loop3: detected capacity change from 0 to 512 [ 1536.624377][T13691] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1536.638972][T13685] EXT4-fs (loop7): 1 truncate cleaned up [ 1536.644948][T13697] journal_path: Lookup failure for './file0/../file0' [ 1536.651878][T13697] EXT4-fs: error: could not find journal device path [ 1536.659839][T13691] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.13701: Allocating blocks 481-513 which overlap fs metadata [ 1536.680432][T13685] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1536.705184][T13644] chnl_net:caif_netlink_parms(): no params data found [ 1536.747692][T13708] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13704'. [ 1536.760304][T13706] FAULT_INJECTION: forcing a failure. [ 1536.760304][T13706] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1536.773438][T13706] CPU: 1 UID: 0 PID: 13706 Comm: +}[@ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1536.773467][T13706] Tainted: [W]=WARN [ 1536.773474][T13706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1536.773496][T13708] loop8: detected capacity change from 0 to 736 [ 1536.773595][T13706] ================================================================== [ 1536.773623][T13706] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 1536.773656][T13706] [ 1536.773661][T13706] write to 0xffffffff88e291f7 of 32 bytes by task 13708 on cpu 0: [ 1536.773677][T13706] vsnprintf+0x2ce/0x890 [ 1536.773696][T13706] vscnprintf+0x41/0x90 [ 1536.773715][T13706] printk_sprint+0x30/0x2d0 [ 1536.773730][T13706] vprintk_store+0x599/0x860 [ 1536.773745][T13706] vprintk_emit+0x178/0x650 [ 1536.773760][T13706] vprintk_default+0x26/0x30 [ 1536.773777][T13706] vprintk+0x1d/0x30 [ 1536.773797][T13706] _printk+0x79/0xa0 [ 1536.773821][T13706] set_capacity_and_notify+0x14c/0x1f0 [ 1536.773845][T13706] loop_set_size+0x2e/0x70 [ 1536.773865][T13706] loop_configure+0x825/0x9c0 [ 1536.773883][T13706] lo_ioctl+0x1e1/0x12b0 [ 1536.773898][T13706] blkdev_ioctl+0x34f/0x440 [ 1536.773925][T13706] __se_sys_ioctl+0xce/0x140 [ 1536.773941][T13706] __x64_sys_ioctl+0x43/0x50 [ 1536.773956][T13706] x64_sys_call+0x1816/0x2ff0 [ 1536.773975][T13706] do_syscall_64+0xd2/0x200 [ 1536.774003][T13706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.774021][T13706] [ 1536.774026][T13706] read to 0xffffffff88e29210 of 8 bytes by task 13706 on cpu 1: [ 1536.774041][T13706] data_push_tail+0xfd/0x420 [ 1536.774067][T13706] data_alloc+0xbf/0x2b0 [ 1536.774091][T13706] prb_reserve+0x808/0xaf0 [ 1536.774116][T13706] vprintk_store+0x56d/0x860 [ 1536.774130][T13706] vprintk_emit+0x178/0x650 [ 1536.774146][T13706] vprintk_default+0x26/0x30 [ 1536.774162][T13706] vprintk+0x1d/0x30 [ 1536.774182][T13706] _printk+0x79/0xa0 [ 1536.774204][T13706] dump_stack_print_info+0x1a0/0x1b0 [ 1536.774221][T13706] __dump_stack+0x11/0x30 [ 1536.774236][T13706] dump_stack_lvl+0xe8/0x140 [ 1536.774251][T13706] dump_stack+0x15/0x1b [ 1536.774266][T13706] should_fail_ex+0x265/0x280 [ 1536.774286][T13706] should_fail+0xb/0x20 [ 1536.774304][T13706] should_fail_usercopy+0x1a/0x20 [ 1536.774326][T13706] _copy_from_iter+0xd2/0xe80 [ 1536.774350][T13706] netlink_sendmsg+0x471/0x6b0 [ 1536.774373][T13706] __sock_sendmsg+0x145/0x180 [ 1536.774400][T13706] ____sys_sendmsg+0x345/0x4e0 [ 1536.774421][T13706] ___sys_sendmsg+0x17b/0x1d0 [ 1536.774442][T13706] __sys_sendmmsg+0x178/0x300 [ 1536.774463][T13706] __x64_sys_sendmmsg+0x57/0x70 [ 1536.774485][T13706] x64_sys_call+0x1c4a/0x2ff0 [ 1536.774504][T13706] do_syscall_64+0xd2/0x200 [ 1536.774530][T13706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.774548][T13706] [ 1536.774552][T13706] value changed: 0x0000000100004288 -> 0x742030206d6f7266 [ 1536.774563][T13706] [ 1536.774566][T13706] Reported by Kernel Concurrency Sanitizer on: [ 1536.774578][T13706] CPU: 1 UID: 0 PID: 13706 Comm: +}[@ Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1536.774605][T13706] Tainted: [W]=WARN [ 1536.774611][T13706] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1536.774622][T13706] ================================================================== [ 1536.774648][T13706] Call Trace: [ 1536.774654][T13706] [ 1536.774662][T13706] __dump_stack+0x1d/0x30 [ 1536.774700][T13706] dump_stack_lvl+0xe8/0x140 [ 1536.774718][T13706] dump_stack+0x15/0x1b [ 1536.774735][T13706] should_fail_ex+0x265/0x280 [ 1536.774757][T13706] should_fail+0xb/0x20 [ 1536.774776][T13706] should_fail_usercopy+0x1a/0x20 [ 1536.774875][T13706] _copy_from_iter+0xd2/0xe80 [ 1536.774901][T13706] ? __build_skb_around+0x1a0/0x200 [ 1536.774928][T13706] ? skb_put+0x8e/0xf0 [ 1536.774951][T13706] netlink_sendmsg+0x471/0x6b0 [ 1536.774977][T13706] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1536.775092][T13706] __sock_sendmsg+0x145/0x180 [ 1536.775121][T13706] ____sys_sendmsg+0x345/0x4e0 [ 1536.775149][T13706] ___sys_sendmsg+0x17b/0x1d0 [ 1536.775266][T13706] __sys_sendmmsg+0x178/0x300 [ 1536.775300][T13706] __x64_sys_sendmmsg+0x57/0x70 [ 1536.775325][T13706] x64_sys_call+0x1c4a/0x2ff0 [ 1536.775402][T13706] do_syscall_64+0xd2/0x200 [ 1536.775430][T13706] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 1536.775500][T13706] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 1536.775527][T13706] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1536.775568][T13706] RIP: 0033:0x7ffac8efeba9 [ 1536.775584][T13706] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1536.775601][T13706] RSP: 002b:00007ffac7967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1536.775620][T13706] RAX: ffffffffffffffda RBX: 00007ffac9145fa0 RCX: 00007ffac8efeba9 [ 1536.775632][T13706] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 1536.775656][T13706] RBP: 00007ffac7967090 R08: 0000000000000000 R09: 0000000000000000 [ 1536.775669][T13706] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1536.775683][T13706] R13: 00007ffac9146038 R14: 00007ffac9145fa0 R15: 00007ffc5d0fdd98 [ 1536.775701][T13706] [ 1536.798952][T13708] rock: directory entry would overflow storage [ 1537.276299][T13708] rock: sig=0x3b10, size=4, remaining=3 [ 1537.285650][ T9791] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1537.288723][T13708] netlink: 'syz.8.13704': attribute type 27 has an invalid length. [ 1537.313969][T13644] bridge0: port 1(bridge_slave_0) entered blocking state [ 1537.321403][T13644] bridge0: port 1(bridge_slave_0) entered disabled state [ 1537.331871][T13644] bridge_slave_0: entered allmulticast mode [ 1537.338203][T13644] bridge_slave_0: entered promiscuous mode [ 1537.345663][T13644] bridge0: port 2(bridge_slave_1) entered blocking state [ 1537.353043][T13644] bridge0: port 2(bridge_slave_1) entered disabled state [ 1537.360212][T13644] bridge_slave_1: entered allmulticast mode [ 1537.366559][T13644] bridge_slave_1: entered promiscuous mode [ 1537.387578][T13716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13705'. [ 1537.398476][T13644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1537.409377][T13644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1537.428096][T13047] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1537.438595][T13644] team0: Port device team_slave_0 added [ 1537.445516][T13644] team0: Port device team_slave_1 added [ 1537.460310][T13644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1537.467297][T13644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1537.493296][T13644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1537.504957][T13644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1537.511968][T13644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1537.537948][T13644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1537.562677][T13644] hsr_slave_0: entered promiscuous mode [ 1537.568612][T13644] hsr_slave_1: entered promiscuous mode [ 1537.574919][T13644] debugfs: 'hsr0' already exists in 'hsr' [ 1537.580688][T13644] Cannot create hsr debugfs directory [ 1537.782706][T13644] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1537.790879][T13644] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1537.798921][T13644] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1537.807091][T13644] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1537.836122][T13644] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1537.850412][T13644] 8021q: adding VLAN 0 to HW filter on device team0 [ 1537.860003][ T9345] bridge0: port 1(bridge_slave_0) entered blocking state [ 1537.867071][ T9345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1537.877432][ T9357] bridge0: port 2(bridge_slave_1) entered blocking state [ 1537.884510][ T9357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1537.940508][T13644] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1538.027261][T13644] veth0_vlan: entered promiscuous mode [ 1538.035023][T13644] veth1_vlan: entered promiscuous mode [ 1538.048808][T13644] veth0_macvtap: entered promiscuous mode [ 1538.056573][T13644] veth1_macvtap: entered promiscuous mode [ 1538.066934][T13644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1538.077541][T13644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1538.087901][ T9345] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.097021][ T9345] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.105956][ T9345] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1538.116213][ T9345] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0