last executing test programs: 3m0.62837572s ago: executing program 32 (id=13): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000380)='sys_enter\x00', r1}, 0x10) munlock(&(0x7f0000250000/0x2000)=nil, 0x2000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f00000017c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40dddb51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42553ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca000000000000000000000509619f5f0cbc72eebc653946d3552236f0dfe485cfa71bd69f4ded6e131128c3875b785875addfcbd5931c12adbef75535e694f3a19f28f9f99fa32e8ff66e7b1ff674434fb63ba0e28aadccf77d387525c98e81476058c958eaccfa7d251d0671222dc9d06485f7f690d3d4227bd21bd7ff8338617705b7faec47c86789a488b43d0fedf1b0ee05d65c677ced1e8214b2f6cb74d73886eb"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000200)={0x0, &(0x7f00000001c0)}, 0x10) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, &(0x7f0000000180)={0x5, 0x0, &(0x7f0000000140)=[r7, r4, 0xffffffffffffffff, r5, 0xffffffffffffffff, r4, 0xffffffffffffffff, r6]}, 0x8) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000380)={0x0, 0x7f, 0x708}) ioctl$TIOCSRS485(r6, 0x542f, &(0x7f0000000040)={0x5, 0x7, 0xfffffffe}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r8}, &(0x7f0000000380), &(0x7f00000005c0)=r9}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r10}, 0x10) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) lseek(r11, 0x9, 0x0) r12 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r12, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000042, &(0x7f0000000000), 0x3, 0x4ec, &(0x7f00000006c0)="$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") ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000040)={'bridge0\x00', 0x400}) 2m58.667514359s ago: executing program 3 (id=31): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='afs_cm_no_server\x00'}, 0xffffffffffffffbe) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000980)={0x3c, r1, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x3c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@resuid}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@grpquota}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000300)="$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") r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) stat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c00180008ac0f0000000100140001"], 0x114}, {&(0x7f00000009c0)=ANY=[], 0x2cc}], 0x2, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x1c}, 0x4e23, 0x0, 0x4e24, 0x0, 0x2, 0x80, 0x0, 0x11, 0x0, r3}, {0xe61, 0x0, 0x0, 0x2, 0x9, 0x1, 0xffd, 0xc}, {0xfffffffffffff5b9, 0x4, 0x7fffffffffffffff, 0x7}, 0x8000, 0x6e6bb5, 0x0, 0x1, 0x2, 0x3}, {{@in6=@local, 0x4d3, 0x3c}, 0xa, @in6=@remote, 0x43500, 0x0, 0x0, 0x4, 0xc, 0xd0, 0x1}}, 0xe8) r4 = getgid() r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b70300000000000055090100000000009500000000000000bf910000000000007ac9392009e770d264b7020000000000008500000085000000b700000000000000950000000000000080257306b4cf3f9f6051e56e811c12211b16523550058bc129fdafc08f9ab8915b52d54e8fdc8e22d7302f18f7855c6eb690321519a2a1fa8ae6fbed45908be392d64e31d03466291f5ad2eb477e0137555013fbbb7f1356837c07aabd8b4bca3f224364c8a3489128a4610f93f35a13bdafd97000"/221], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r2, 0x8983, &(0x7f0000000100)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe) lchown(&(0x7f0000000040)='./file0\x00', r3, r4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x84aa5000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000bc0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @cb_func={0x18, 0x2}, @jmp={0x5, 0x1, 0xd, 0x6, 0x0, 0x30}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvfrom(r2, &(0x7f0000000c40)=""/4096, 0x1000, 0x40, &(0x7f0000000900)=@ethernet={0x6}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) 2m57.458016252s ago: executing program 3 (id=37): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x80, @loopback}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[{0x18, 0x110, 0x1, '\n'}], 0x18, 0xe000}, 0x5}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000740)={'ip6tnl0\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x29, 0x30, 0x7, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}, @remote, 0x80, 0x70, 0x2, 0x4}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x20000000000002db, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500ff00002dba513d7b1af8ff00000000bfa100000000000007010000f8ff7fffb702000008000000b703000000008fd8850000000400000095", @ANYRES8=r1, @ANYRESOCT=r2, @ANYBLOB="e10188b716916464c07e2374dcb7f2ba6608819f761bd462ffecafdcd037913efa0d598b5b34f7cf9a165ee6f8e5210a9aecace405f2da38ee174bb1669c5457237185c151ba3ed142844b9024d338dd9219540e12a1ba2730b127ce0a45bd962b0a67e6253713128628ff52ecf3d301a807461afbf80a565bc1ea7419b864bd4845bf9889c9b399148073a6b31e9a4710cc8711e9a8e32974601a59d4db2062f8883df909befde81d82ac4b0a63bc76ed555f2711fbb79424e62e358faccf729fc49e13a1dea7f6101b239b50a770d4a412"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0xa6dc367b82b18d8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[], 0x15) r7 = dup(r6) write$P9_RLERRORu(r7, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) r8 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x20200) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r8, 0xc0145401, &(0x7f0000000700)={0x3, 0x3, 0x8000, 0x1, 0x87}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000001c0)='ext4_mb_release_group_pa\x00', r4, 0x0, 0xd82a}, 0x18) write$binfmt_elf64(r7, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) write$P9_RSYMLINK(r7, &(0x7f00000003c0)={0x14, 0x11, 0x2, {0x4, 0x4, 0x2}}, 0x14) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r9}, 0x10) r10 = syz_io_uring_setup(0x110, &(0x7f00000002c0)={0x0, 0xb358, 0x0, 0x210000, 0x3e}, &(0x7f0000000280)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f0000000180)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r10, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2m57.189177148s ago: executing program 3 (id=40): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x454a, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000000)=0x1, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 2m56.853385834s ago: executing program 3 (id=41): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x1c9441, 0x0) pwrite64(r0, 0x0, 0x0, 0x9000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2, 0x0, 0x10}, 0x18) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) syz_open_procfs(0x0, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) setsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f00000003c0), 0x20075, r4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) inotify_init() socket$nl_generic(0x10, 0x3, 0x10) 2m56.595567559s ago: executing program 5 (id=45): mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000400180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000001700)=ANY=[@ANYBLOB="540200001600050000000000fedbdf25ff0100000000000000000000000000010a0101010000000000000000000000004e2200004e2300000a00200021000000", @ANYRES32=r2, @ANYRES32, @ANYBLOB="fc0000000000000000000000000000000000000033000000e0000002000000000000000000000000060000000000000019d000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000ff030000100000000300000000000000ffffffff00000000ffffff7f000000000900000000000000000000007f000000070000002bbd7000000000000200013f000000000000000001000000060000002c001300200100000000000000000000000000010000000000000000000000020000001c00040003004e204e210000fe"], 0x254}}, 0x40858) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[], 0x15) r5 = dup(r4) write$P9_RLERRORu(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) lchown(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) 2m56.499141481s ago: executing program 5 (id=47): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) 2m56.391676563s ago: executing program 5 (id=48): r0 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0xfef6) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000100000009000000ae"], 0x50) bpf$MAP_CREATE(0xc00000000000000, &(0x7f00000007c0)=ANY=[@ANYBLOB="0d00000002000000040000000240000000000000", @ANYRES32=r3, @ANYRES32=0x0], 0x48) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x15069}}, 0x20}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) 2m55.0105897s ago: executing program 2 (id=56): r0 = syz_io_uring_setup(0xec5, &(0x7f00000008c0), &(0x7f0000000080), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000800)=ANY=[], 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 2m54.944902091s ago: executing program 2 (id=57): r0 = syz_io_uring_setup(0xec5, &(0x7f00000008c0), &(0x7f0000000080), &(0x7f0000000340)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, 0x0, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000800)=ANY=[], 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 2m54.862531703s ago: executing program 2 (id=59): prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000540)={0x8, &(0x7f0000000000)=[{0xbead, 0x8, 0x81, 0x8}, {0xfffe, 0x7, 0x1, 0x3}, {0x0, 0xf, 0xa, 0x53967cae}, {0x1c9, 0x2, 0x8, 0x2efe5a39}, {0x4, 0x7, 0x4, 0x100}, {0x4, 0x87, 0xad, 0x5}, {0x8, 0x7d, 0x8, 0x9}, {0xaf, 0x9, 0x8, 0x6}]}) syz_open_dev$usbfs(0x0, 0x9, 0x101100) socket$inet6(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x0, 0x8, 0x3, 0x5b}, {0x4, 0xeb, 0x7, 0x14000000}, {0x4, 0x10, 0xc5, 0xc}, {0x4, 0x6, 0x9, 0x5}]}) socket$key(0xf, 0x3, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0x1000}, 0x18) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c5}, 0x0) 2m54.741549976s ago: executing program 5 (id=60): prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000540)={0x8, &(0x7f0000000000)=[{0xbead, 0x8, 0x81, 0x8}, {0xfffe, 0x7, 0x1, 0x3}, {0x0, 0xf, 0xa, 0x53967cae}, {0x1c9, 0x2, 0x8, 0x2efe5a39}, {0x4, 0x7, 0x4, 0x100}, {0x4, 0x87, 0xad, 0x5}, {0x8, 0x7d, 0x8, 0x9}, {0xaf, 0x9, 0x8, 0x6}]}) syz_open_dev$usbfs(0x0, 0x9, 0x101100) socket$inet6(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x4, &(0x7f0000000040)=[{0x0, 0x8, 0x3, 0x5b}, {0x4, 0xeb, 0x7, 0x14000000}, {0x4, 0x10, 0xc5, 0xc}, {0x4, 0x6, 0x9, 0x5}]}) socket$key(0xf, 0x3, 0x2) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r0, 0x0, 0x1000}, 0x18) syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x400c5}, 0x0) 2m53.825637564s ago: executing program 2 (id=62): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000002d80)={'ip_vti0\x00', &(0x7f0000002c80)=@ethtool_rxnfc={0x31, 0x11, 0xe8, {0x4, @hdata="4ccbebb4add1395ee325a350b1e8d5aa4bc8f864be3e8b34fc5684fd0ad87b3e9ebdb22bfff77549fba411b6983ce1727dffae91", {0x0, @random="f860c2d67e46", 0xa3b7, 0x3, [0x100, 0x3ff]}, @udp_ip4_spec={@multicast1, @remote, 0x4e21, 0x4e22}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, 0xfff9, 0x7ff, [0x1000, 0x203f]}, 0xe, 0x3ff}}}) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r1 = io_uring_setup(0x5594, &(0x7f0000000100)={0x0, 0x10000000, 0x1, 0x0, 0x1d2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) fcntl$setlease(r0, 0x400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYRES16=r1], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x18) r4 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0) write$selinux_validatetrans(r4, &(0x7f0000000640)=ANY=[@ANYBLOB='system_u:object_r:iptables_conf_t:s0 system_u:object_r:iptables_unit_file_t:s0 00000000000000000000 /'], 0x74) syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = pidfd_getfd(r5, r5, 0x0) setns(r6, 0x20000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) getgid() r7 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) set_mempolicy(0x0, &(0x7f0000000200)=0x8, 0x7fffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r8 = gettid() process_vm_writev(r8, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) 2m53.818751324s ago: executing program 3 (id=63): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newtclass={0x24, 0x28, 0x5b1c90f1fc49f939, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x8, 0x5}, {0x7, 0xa}}}, 0x24}}, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x2) r3 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r3, 0x1) flock(r2, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r5}, 0x18) clock_getres(0x4, 0x0) flock(r3, 0x1) flock(r1, 0x5) close(r0) 2m53.581574589s ago: executing program 3 (id=66): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r0, 0x0) 2m53.568175749s ago: executing program 5 (id=67): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000b"], 0x10b8}, 0x0) setresuid(0xee00, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x400000000}) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0/file3\x00', 0x1) 2m52.901966312s ago: executing program 2 (id=69): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000240)='afs_cm_no_server\x00'}, 0xffffffffffffffbe) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000980)={0x3c, r1, 0x1, 0x70bd28, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x3c}}, 0x0) 2m52.766986554s ago: executing program 5 (id=70): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1a, 0xc, &(0x7f0000000680)=ANY=[@ANYRES32=r0, @ANYRES16=r0, @ANYBLOB="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"], 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000002c0)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x9, &(0x7f0000000180)={[{@nombcache}, {@jqfmt_vfsv1}, {@nobh}, {}, {@nojournal_checksum}, {@grpjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$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") r2 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x88001) r3 = fspick(r2, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x349a00, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r4}, 0x18) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x24040840}, 0x20040000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r9 = accept4$llc(r2, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) getsockname$llc(r9, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000540)=0x10) r10 = pidfd_getfd(0xffffffffffffffff, r6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6gre0\x00', r8, 0x29, 0x9f, 0x0, 0xef, 0x70, @rand_addr=' \x01\x00', @loopback, 0x1, 0x700, 0x10, 0xc0000000}}) r12 = dup(0xffffffffffffffff) write$UHID_INPUT(r12, &(0x7f0000001180)={0xa, {"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", 0x1000}}, 0x1006) bpf$MAP_CREATE(0x0, &(0x7f0000002340)=ANY=[@ANYBLOB="909f9e60063ca800264ac52cb0757a58ba8559fd73e289bb3730b759ebe11b979427f3081621780e2f435a242e1ab129b1fc84d3bac3dd4a4359dea6f677255555aad9d48e53dacaf6f81ff34f5f2d560e6bace6e68a3fd022d044d99723a050366c0a21df02623194230223abd78fdcf64513078c3d170012184327b7fb1427efcfed06596f161575a2f1628a6d2a874ea9b3c183ab9c36886dbed29c69308d725c6f8364a4d4a82fcb681519d8", @ANYRES32=r10, @ANYRES64=r8, @ANYRES32=r11, @ANYRES32, @ANYBLOB="0500000004000000000000000000000000000000b032de72e023e897fb7e0f6f88fa5d04323fcb2510cc86819dc216c624eace35cfe17086d538685c42bcb0f37412d255827f3727cbd91a99f2672c21d678795867be61284bc63778f73b3c003da89e25a55c0024b31cc588dbef872d32ec2f82c60ce16bfc8094", @ANYRES32=r7, @ANYBLOB="8daf596e8c6f637db1649e18b938e13fa4a01bf62232", @ANYRES32=r12, @ANYBLOB], 0x50) sendmsg$NFT_MSG_GETGEN(r12, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2m52.756270005s ago: executing program 2 (id=71): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) 1m36.637064811s ago: executing program 33 (id=72): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000300), 0x3b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r6, 0x0, 0x200000c0) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='v\x00\x00\x00\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="05072bbd7000ffdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) ioctl$sock_TIOCINQ(r4, 0x541b, &(0x7f0000000200)) socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r8, {0x10, 0xb}, {0x0, 0x4}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r10 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x48202) ioctl$SCSI_IOCTL_GET_PCI(r10, 0x5393, &(0x7f0000000000)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 1m36.615059571s ago: executing program 34 (id=65): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x1c9441, 0x0) pwrite64(r0, 0x0, 0x0, 0x9000) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f000801}, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x26, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f00000003c0), 0x20075, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) inotify_init() socket$nl_generic(0x10, 0x3, 0x10) 1m36.555902882s ago: executing program 35 (id=71): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) 1m36.536920893s ago: executing program 36 (id=66): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r0, 0x0) 1m36.464543774s ago: executing program 37 (id=70): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1a, 0xc, &(0x7f0000000680)=ANY=[@ANYRES32=r0, @ANYRES16=r0, @ANYBLOB="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"], 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000002c0)=ANY=[]) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x9, &(0x7f0000000180)={[{@nombcache}, {@jqfmt_vfsv1}, {@nobh}, {}, {@nojournal_checksum}, {@grpjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$eJzs3EtvG1UbAOB3xnV6/5qv3wV6AQIFEXFJmrRAF2xAIHWDhARIZRnStCpNG9QEiVYVTREqS9RfACyR+AWsYIOAFYgtSGyQEFKFuqGwGjT2TOpcHGzHjil+HsntOTNnfM47M8c+MyfjAAbWSP5PErErIr4fithTzy4vMFL/79bNy9O/37w8nUSWvfRrUiv3283L02XRcrudRWY0jUjfTeLAGvXOX7x0dmp2duZCkR9fOPfG+PzFS4+fOTd1eub0zPnJY8eOHpl46snJJ7oS5+68rfvfnju47/ir11+YPnH9ta8+yZfvKtY3xlE33PJ7b2+yfCRGlu/LBg9F/JRlWct1/N3tbkgnW/rYENpSiYj8cFXz/h97ohK3D96eeP6dvjYO6Kksy7Ktq5ZWysRiBvyDJdF0VbqpDQE2WflFn1//lq9NHH703Y1n6hdAedy3ild9zZZIizLVFde33TQSEScW//ggf8Wa9yEAALrrs3z889ha4780/t9Q7l9Rnxsajoh/R8TeiPhPRPw3Iv4XUSt7V0Tc3Wb9Iyvyq8c/3zabXumKfPz3dDG3dXv8N1SLvzBcKXK7a/FXk1NnZmcOF/tkNKpb8/zEOnV8/tx37y9lti1f1zj+y195/eVYsC79ZcuKG3QnpxamuhB6zY2rS4GuGP8mSzMBSUTsi4j9Hbx/vs/OPPLxwWbr/zr+dXRhnin7KOLh+vFfjBXxl5L15yfHt8XszOHx8qxY7etvrr3YrP4Nxd8FN65G7Fh1/kdj/MNJ43ztfPt1XPvhvabXNJ2e/0PJy7X0ULHsramFhQsTEUPJ4urlk7e3LfNl+Tz+0UNrxZ/W3uPDYrsDEZGfxPdExL0RcV/R9vsj4oGIOLRO/F8+++DrncffW3n8J9s6/u0nKme/+LRZ/a0d/6O11GixpJXPv1YbuJF9BwAAAHeKtPY38Ek6tpRO07GxiFdq93Z3pLNz8wuPnpp78/zJ+t/KD0c1Le90pQ33QyeKe8NlfnJF/kjtvnGWZdn2Wn5sem62V3PqQGt2Nun/uZ8r/W4d0HNtzaM1e6INuCO11f9XPy0E3ME8rw2Dq9X+X+1xO4DN5/sfBtda/f9KxK0+NAXYZL7/YXDp/zC49H8YXPo/DKSNPNe/XmLv8Y43zzZUe/n7Kh1u/mNP9sZ6iUqnm29t42cOepCIdM1V1YjoS3vaSqS9qyI/+drbKj+QrRa+0umJ3XZi2cfEUD8+mwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrhzwAAAP//dNfhIw==") r2 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x88001) r3 = fspick(r2, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x349a00, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r4}, 0x18) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f80)=ANY=[@ANYBLOB="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"], 0x100}, 0x1, 0x0, 0x0, 0x24040840}, 0x20040000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r9 = accept4$llc(r2, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x80000) getsockname$llc(r9, &(0x7f0000000100)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000540)=0x10) r10 = pidfd_getfd(0xffffffffffffffff, r6, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000440)={'ip6gre0\x00', r8, 0x29, 0x9f, 0x0, 0xef, 0x70, @rand_addr=' \x01\x00', @loopback, 0x1, 0x700, 0x10, 0xc0000000}}) r12 = dup(0xffffffffffffffff) write$UHID_INPUT(r12, &(0x7f0000001180)={0xa, {"a2e3ad21ed0d52f91b38090987f70e06d038e7ff7fc6e5539b3244078b089b3407326d090890e0878f0e1ac6e7049b336d959b679a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d61a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec97a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f11f46295d8a0fa17713c5802630933a9a34af674f3f39fe27491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f1b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83cd06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11b58cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb783b2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803335ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c134b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3765b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b33c5260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) bpf$MAP_CREATE(0x0, &(0x7f0000002340)=ANY=[@ANYBLOB="909f9e60063ca800264ac52cb0757a58ba8559fd73e289bb3730b759ebe11b979427f3081621780e2f435a242e1ab129b1fc84d3bac3dd4a4359dea6f677255555aad9d48e53dacaf6f81ff34f5f2d560e6bace6e68a3fd022d044d99723a050366c0a21df02623194230223abd78fdcf64513078c3d170012184327b7fb1427efcfed06596f161575a2f1628a6d2a874ea9b3c183ab9c36886dbed29c69308d725c6f8364a4d4a82fcb681519d8", @ANYRES32=r10, @ANYRES64=r8, @ANYRES32=r11, @ANYRES32, @ANYBLOB="0500000004000000000000000000000000000000b032de72e023e897fb7e0f6f88fa5d04323fcb2510cc86819dc216c624eace35cfe17086d538685c42bcb0f37412d255827f3727cbd91a99f2672c21d678795867be61284bc63778f73b3c003da89e25a55c0024b31cc588dbef872d32ec2f82c60ce16bfc8094", @ANYRES32=r7, @ANYBLOB="8daf596e8c6f637db1649e18b938e13fa4a01bf62232", @ANYRES32=r12, @ANYBLOB], 0x50) sendmsg$NFT_MSG_GETGEN(r12, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x10, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040040}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m11.818999079s ago: executing program 4 (id=321): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000a40)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10) sendto$inet(r3, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r3, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 1m11.7469981s ago: executing program 4 (id=324): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) syz_clone3(&(0x7f00000006c0)={0x102102180, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x0], 0x1}, 0x58) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') getdents(r2, &(0x7f00000001c0)=""/4098, 0x1002) syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r3 = socket(0x28, 0x6, 0x100) connect$pppoe(r3, &(0x7f0000000600)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 'ip_vti0\x00'}}, 0x1e) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x8840) 1m11.675164942s ago: executing program 4 (id=326): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newtclass={0x24, 0x28, 0x5b1c90f1fc49f939, 0x70bd2c, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x8, 0x5}, {0x7, 0xa}}}, 0x24}}, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) open(&(0x7f0000000180)='.\x00', 0x10000, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000e00000850000001b000000b700000000fa000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r4}, 0x18) flock(r2, 0x1) flock(r1, 0x5) 1m11.579122613s ago: executing program 4 (id=331): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x80000001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) syz_mount_image$vfat(&(0x7f0000000540), &(0x7f00000001c0)='./file0\x00', 0x4, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x1, 0x387, &(0x7f0000001440)="$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") r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095", @ANYRESOCT=r1, @ANYRES16=r2, @ANYRES32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000d00)='kfree\x00', r3}, 0x18) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f0000000040)=[{{0x2, 0x1}, {0x2, 0x0, 0x1}}, {{}, {0x2, 0x1, 0x1}}], 0x10) r5 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x3) ioctl$FIONREAD(r6, 0x541b, &(0x7f0000002300)) ioctl$PTP_SYS_OFFSET(r5, 0x43403d05, &(0x7f00000004c0)) setsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, 0x0, 0x0) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) write$P9_RUNLINKAT(r7, &(0x7f0000000300)={0x7, 0x4d, 0x2}, 0x7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x42, 0x0, &(0x7f0000000100), 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x2f) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x100}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bond_slave_0\x00', 0x800}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r8, 0x8946, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r9) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r9, 0x40047440, &(0x7f0000001200)) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r1, r1, 0x2f, 0x0, @void}, 0x10) 1m11.388000137s ago: executing program 4 (id=334): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000b"], 0x10b8}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x400000000}) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0/file3\x00', 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000300000000000019078ac1e0201ac1414aa03ff9078030000004500000000000000002f0000ac14140ae00000ff"], 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000100)=0x100000001) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x3}], 0x1c) r7 = dup(r6) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000300)='veth1_macvtap\x00', 0x10) pipe2$9p(&(0x7f0000000080), 0x800) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) 1m10.593891853s ago: executing program 4 (id=343): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xe8, 0xdaf3}, 0x0, 0x10000, 0x0, 0x0, 0xd8b2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r0, &(0x7f00000029c0)=""/4096, 0x1000, 0xd36) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000001}}, './file1\x00'}) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000300), 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}, {@nobarrier}, {@abort}, {@nogrpid}, {@norecovery}, {@errors_remount}]}, 0x1, 0x57d, &(0x7f0000000580)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r2, 0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40001333}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r8, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x40000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x0, 0x1}) syz_io_uring_complete(r3) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) pread64(r9, &(0x7f0000000080)=""/79, 0x4f, 0x7f) renameat(r9, &(0x7f0000000380)='./file1\x00', r4, &(0x7f00000003c0)='./file1\x00') io_uring_enter(r5, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 1m10.593536183s ago: executing program 38 (id=343): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x2, @perf_config_ext={0xe8, 0xdaf3}, 0x0, 0x10000, 0x0, 0x0, 0xd8b2, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r0, &(0x7f00000029c0)=""/4096, 0x1000, 0xd36) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000001}}, './file1\x00'}) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000300), 0x4) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x10002}}, {@dioread_lock}, {@data_err_ignore}, {@mb_optimize_scan}, {@dioread_nolock}, {@nobarrier}, {@abort}, {@nogrpid}, {@norecovery}, {@errors_remount}]}, 0x1, 0x57d, &(0x7f0000000580)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2, 0x11, r2, 0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) r5 = syz_io_uring_setup(0xbdc, &(0x7f0000000080)={0x0, 0xec21, 0x80, 0x1, 0x40001333}, &(0x7f0000000340)=0x0, &(0x7f00000002c0)=0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r8, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x40000) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1, 0x0, 0x1}) syz_io_uring_complete(r3) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/tty/ldiscs\x00', 0x0, 0x0) pread64(r9, &(0x7f0000000080)=""/79, 0x4f, 0x7f) renameat(r9, &(0x7f0000000380)='./file1\x00', r4, &(0x7f00000003c0)='./file1\x00') io_uring_enter(r5, 0x847ba, 0x2000, 0xe, 0x0, 0x0) 51.750226963s ago: executing program 0 (id=663): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$sg(0x0, 0x0, 0x2000) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r2 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0x401}, 0x11) r4 = socket$key(0xf, 0x3, 0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000080)={0x1, 0x1, 0x9b2, 0x80000000, 0x0, "e122e2353f1dfff02aa252d1b0a76f7cb85d51", 0x101, 0xb9}) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3fd7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0xfffffffe}, 0xdf) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac550000000003000600000000000200000000000000000000000000000002000100000000000000030d00000000030005000000000002"], 0x78}, 0x1, 0x7}, 0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendto$l2tp(r11, &(0x7f0000000240)="fb0cf107af7626c66bbfcb9bd4d515f240dc231abd642ee8f32f94ca218c6709c90f972ea1c66a3f0908274c8e2932c4dfefb5c510aec6f6a036359783089b35aea543e735962917c7205a0c1ea4da9160bec9e9945d1e4256b0c98ca5cb38ef61e9bf596f577d009e2453900380fd4ad4f3154d661aaf693fb518d324ae53d2c9b74582b3898cd5becb5eecb2144374f00a8fedffc0b75163ca722ce7ce333832c2bcdfad2cb8cae361b6eecb53de63f6940f", 0xb3, 0xc000, &(0x7f0000000300)={0x2, 0x0, @multicast1, 0x3}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x1, 0x7f, 0x9}) 51.572167346s ago: executing program 0 (id=667): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000bc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r4 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000100000000000020000000000000000"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000004000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r6}, 0x18) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') close(r4) 51.514662388s ago: executing program 0 (id=668): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) sync() r4 = socket$kcm(0x10, 0x2, 0x0) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x14, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000e784a98e4d5b2b7540459fde106f9e0000000700000018115c48262c76356b9584fa0c59cb3ed9912d25d45e36216b6616925a4de908d5060ee9f9b9e2a341f91ac03cbd37329c5217485971ef61bd3c4989877106b108b3c4873e96ace6f438db5e2f4f11a05d636faf5200e91e14c01d9bffeb576d08fd0965b15f088d17b502b987b280d2c788478846853390a48e96544b1f702c538afef661f0ca6c7708595d050bb6bff60a39f8f0b76dc41ea24d2bc94dbda135680a1339a64609eaed275a2b1571465037b13bcdeda1ebb103578de127db083509c1867cdb7f9d976005a9fa7d266ade2937", @ANYRES32=r2, @ANYRES8=r3], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) r8 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x5) fchdir(r9) r10 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r11 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r11, 0x2) r12 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r12, 0x2) close_range(r10, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x2}, 0x18) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) 50.492331678s ago: executing program 0 (id=677): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f00000000c0)={[{@noauto_da_alloc}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@dioread_nolock}, {@grpquota}]}, 0x5, 0x4dd, &(0x7f0000000c40)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x6, &(0x7f0000000200)=[{0x3, 0x5, 0x7f, 0x7}, {0x7, 0x2, 0x20}, {0x3, 0xbd, 0xf, 0x1}, {0x2, 0x0, 0x0, 0x7}, {0xc, 0x9f, 0x9, 0xc585}, {0x401, 0x4, 0xfc, 0x2}]}) socket$netlink(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xc, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0xa, 0x300) socket$packet(0x11, 0xa, 0x300) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r1 = socket(0x10, 0x3, 0x0) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x2}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x3000046, &(0x7f0000000940)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@resgid}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nomblk_io_submit}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x553, &(0x7f0000000a40)="$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") utime(0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff4a, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r2}, 0x10) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="219a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'dummy0\x00', @random="7b8cf68659c2"}) socket$pppl2tp(0x18, 0x1, 0x1) 49.752141162s ago: executing program 0 (id=687): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) fsetxattr(r1, &(0x7f00000002c0)=@known='trusted.syz\x00', &(0x7f0000000300)='*[,*#-#\x00', 0x8, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000380)={'syz', 0x3}, &(0x7f00000003c0)=')\x00', 0x0) 49.37188878s ago: executing program 0 (id=690): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, 0x0, 0x64, 0x183000, 0x23456}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="07000000040000000001000005"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='fib6_table_lookup\x00', r5, 0x0, 0x8000000000000000}, 0x18) r6 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r6, &(0x7f0000000640)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0x400}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}], 0x1, 0x4008040) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000200)={0xb, &(0x7f00000014c0)=[{0xa775, 0x8, 0x10, 0x3}, {0xffff, 0x2, 0x1, 0xbb67}, {0x8000, 0x1f, 0x3, 0x205}, {0xb, 0xf7, 0x3, 0x7f}, {0x5, 0x6, 0x1}, {0x3, 0x2, 0x9, 0x2}, {0xfff8, 0xd, 0x9, 0x100101}, {0xe5b9, 0x0, 0x7, 0x8}, {0x2, 0x4, 0x4}, {0xc8, 0x3, 0x6, 0x8}, {0x7, 0x3, 0xff, 0x10000}]}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r8 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r8, r9, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='mmap_lock_acquire_returned\x00', r5}, 0x18) io_uring_enter(r0, 0x47f6, 0x84de, 0x0, 0x0, 0x0) 49.371473239s ago: executing program 39 (id=690): r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, 0x0, 0x64, 0x183000, 0x23456}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="07000000040000000001000005"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000300)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='fib6_table_lookup\x00', r5, 0x0, 0x8000000000000000}, 0x18) r6 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r6, &(0x7f0000000640)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0x400}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}], 0x1, 0x4008040) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000200)={0xb, &(0x7f00000014c0)=[{0xa775, 0x8, 0x10, 0x3}, {0xffff, 0x2, 0x1, 0xbb67}, {0x8000, 0x1f, 0x3, 0x205}, {0xb, 0xf7, 0x3, 0x7f}, {0x5, 0x6, 0x1}, {0x3, 0x2, 0x9, 0x2}, {0xfff8, 0xd, 0x9, 0x100101}, {0xe5b9, 0x0, 0x7, 0x8}, {0x2, 0x4, 0x4}, {0xc8, 0x3, 0x6, 0x8}, {0x7, 0x3, 0xff, 0x10000}]}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r8 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r8, r9, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='mmap_lock_acquire_returned\x00', r5}, 0x18) io_uring_enter(r0, 0x47f6, 0x84de, 0x0, 0x0, 0x0) 2.171240987s ago: executing program 9 (id=1823): syz_emit_ethernet(0x46, &(0x7f0000007380)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x10, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0xd, 0x6, 0xc18, 0x5932}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000008000000080000000090000000a0000000000000b010000000d00000000000011010000000a0000000e00000002000093000000000a00000005000000010400000c0000000100000007000000060000000000001004000000010000000000001101000000050000000900000000000008100000000d000000000000070000000007000000000000100c00000000005f305f5f5f0000"], &(0x7f00000000c0)=""/155, 0xa1, 0x9b, 0x0, 0x8}, 0x28) 2.05866062s ago: executing program 9 (id=1826): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.888279343s ago: executing program 6 (id=1831): r0 = socket(0x10, 0x3, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x20000000}, 0xc) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000940)={0x20, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x26}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x80c4) 1.876870643s ago: executing program 9 (id=1833): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x400000000}) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0/file3\x00', 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000300000000000019078ac1e0201ac1414aa03ff9078030000004500000000000000002f0000ac14140ae00000ff"], 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000100)=0x100000001) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x3}], 0x1c) r6 = dup(r5) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000300)='veth1_macvtap\x00', 0x10) pipe2$9p(&(0x7f0000000080), 0x800) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) 1.844908364s ago: executing program 6 (id=1835): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x40) 1.714189056s ago: executing program 6 (id=1840): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x5e22, @remote}, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x9460, 0x2, 0x5}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8041, 0x1c3) pwrite64(r1, &(0x7f0000001740)="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", 0x11c, 0x8000c62) getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="014054237830c5e7e6"], 0x18}, 0x1, 0x0, 0x0, 0x24000080}, 0x0) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x1a2) fallocate(r4, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="5500000018007f5f00fe01b2a4a2809302060000ff41fd01020400000a0012000a002800000019002d007fffffff0022de1330d54400009b84136ef75afb83de066a5900e1baac968300000000f2ff000001000000", 0x55}, {&(0x7f0000000580)="940946304cc09d58798074315a35a3b664c74afd05aaa9be39b38978fe915488cc4aa2394f26df01e703fee24498ed58ab0aca72aa17c008f955aefa31006b13f0d4d154e9c2cc660206ebe5b87410e24e6e03ac7e6fbd4f64db57fb43475f3dc0ca32211ceadd28e2ec532eded122f6f2715d0a5aa22664676c9a4433d3af11adf695165e26dc72299b76fa63c14bbe7e3b5c1026fcc0ce48b60e3d966951e630a2c55453708831926566d7d66b3580a126a63fbb01fb6682fa48bf7306b11ad58fb549e0a5eed91c1bca220558a9a3c6649877ddd7315eaaf6a39c1b4cb556c2827cabce", 0xe5}, {&(0x7f0000000900)="8475900577786aefbc86d8f7ef5eac9227319814145319f7d864d9fcd3f9394f1ef0343234935a3c9bbf777011d3a254240a09ce030b50716548c76c6f8dd30f34a2ebcbfd498f93c92301f93fccfe4eb34b1dc0aa805760ac983822d1fbf5b368b84a1ad255603dcb82e9d46da4e3b7eee0e46651912cba0cbefee826b537d536165614f22047c14e52da1cfcee322ab4972d9ea9c39dffb89a8244ae7007bc276030156341c79cb95a30b9035786adc5d21ba11e1d41e8d091276d8f3b6fc597106da36057915f9ccebf896c441f5833d11b", 0xd3}], 0x3, 0x0, 0x0, 0x7a000000}, 0x4000884) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x40, &(0x7f0000000080), 0xc1, 0x7c0, &(0x7f0000000f80)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x81) r6 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0) mkdirat(r6, &(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5f}, 0x94) io_uring_register$IORING_REGISTER_IOWQ_AFF(r6, 0x11, &(0x7f0000000800)="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", 0xfb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kfree\x00', r8}, 0x18) pipe(&(0x7f0000005880)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_selinux(r9, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) 1.708349717s ago: executing program 8 (id=1844): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)=0x3) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x420e, r1, 0x0, 0xfffffffffffffffe) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x0, 0x17}) ioctl$VT_DISALLOCATE(r2, 0x5608) r3 = dup(r2) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0xfffffd28, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x10000}, 0x18) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000007c0)={0x2, {0x2, 0x101, 0x0, 0x101}}) 1.668889627s ago: executing program 1 (id=1845): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x33, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x1040, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&20\t&&') 1.634037708s ago: executing program 9 (id=1847): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000004) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) write(r0, &(0x7f0000000000)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce241a37bad3317fba7e4be3dbbfec5e2f401b", 0x55) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0x9, 0x200, 0x2, 0xc9a, 0x0}, &(0x7f0000000240)=0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000140)={r4, 0x15, "82c3f728acebbc0276e4266507635f696fb9541c6f"}, &(0x7f00000001c0)=0xfffffefb) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000001200)={r6, 0xe3, 0xca3, 0x6, 0x6, 0x9, 0x7, 0x3, {0x0, @in={{0x2, 0x4e20, @empty}}, 0x18, 0x2, 0x7, 0x4, 0x2}}, &(0x7f00000012c0)=0xb0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, 0x0, 0x855) recvmsg$unix(r7, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) r9 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r9, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x7f) 1.544020029s ago: executing program 1 (id=1848): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000380), &(0x7f0000000180)=0x68) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000000040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="c4000000190001000000000000000000e000000200000000000000000000000000000000000000000000000000000000000000004e", @ANYRES32=r0, @ANYBLOB="61570954a7c98ecfc361a7dba450b8915acf1905b946acfcf8dee3a04a6050541d3f", @ANYBLOB, @ANYRESOCT=r2, @ANYRES32=r2], 0xc4}}, 0x14) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~'], 0x1c}}, 0x0) 1.238356886s ago: executing program 1 (id=1849): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)=0x3) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x420e, r1, 0x0, 0xfffffffffffffffe) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x0, 0x17}) ioctl$VT_DISALLOCATE(r2, 0x5608) r3 = dup(r2) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0xfffffd28, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x10000}, 0x18) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000007c0)={0x2, {0x2, 0x101, 0x0, 0x101}}) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x50, 0xff, 0x0, 0xffeffffd}, {0x6, 0x5e, 0x0, 0x8}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000080000000180100002020642500000000002020207b1af8ff00000000bfa100000600000007010000f8ffffffb702000008000000b70300000800000085000000060000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x18) 547.326919ms ago: executing program 1 (id=1852): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)={0x28, 0x2d, 0x1, 0xfffffffc, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r2}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0x9, 0xb9, 0x0, 0x0, @binary="464e3b122b"}]}]}, 0x28}], 0x1, 0x0, 0x0, 0x4}, 0x0) (fail_nth: 2) 526.67946ms ago: executing program 8 (id=1853): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 507.90977ms ago: executing program 6 (id=1854): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x34, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 507.67101ms ago: executing program 7 (id=1855): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) time(0x0) 482.95749ms ago: executing program 7 (id=1856): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) close(r2) 451.576171ms ago: executing program 7 (id=1857): r0 = socket(0x10, 0x3, 0x9) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x20000000}, 0xc) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000940)={0x20, 0x0, 0x10, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x26}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x80c4) 450.558361ms ago: executing program 8 (id=1858): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x33, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x1040, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f00000001c0)='cpu&20\t&&') 432.072792ms ago: executing program 9 (id=1859): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x208, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 328.061544ms ago: executing program 1 (id=1860): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f00000002c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @remote, @loopback}, 0xc) syz_clone(0x20100000, 0x0, 0x0, 0x0, 0x0, 0x0) 194.595406ms ago: executing program 9 (id=1861): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a3, &(0x7f0000000580)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x400000000}) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0/file3\x00', 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe89}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000300000000000019078ac1e0201ac1414aa03ff9078030000004500000000000000002f0000ac14140ae00000ff"], 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000100)=0x100000001) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x3}], 0x1c) r6 = dup(r5) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000300)='veth1_macvtap\x00', 0x10) pipe2$9p(&(0x7f0000000080), 0x800) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) 180.621777ms ago: executing program 6 (id=1862): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x33, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_bp={0x0}, 0x1040, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f00000001c0)='cpu&20\t&&') 171.185587ms ago: executing program 7 (id=1863): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_dev$sg(0x0, 0x0, 0x2000) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00'}, 0x18) syz_io_uring_submit(0x0, 0x0, 0x0) r2 = add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0x401}, 0x11) r4 = socket$key(0xf, 0x3, 0x2) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCSETS2(r5, 0x402c542b, &(0x7f0000000080)={0x1, 0x1, 0x9b2, 0x80000000, 0x0, "e122e2353f1dfff02aa252d1b0a76f7cb85d51", 0x101, 0xb9}) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3fd7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0xfffffffe}, 0xdf) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0x7, 0x0, &(0x7f0000000200)="63eced8e46dc3f", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(r9, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac550000000003000600000000000200000000000000000000000000000002000100000000000000030d00000000030005000000000002"], 0x78}, 0x1, 0x7}, 0x10) add_key$keyring(0x0, 0x0, 0x0, 0x0, r2) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendto$l2tp(r11, &(0x7f0000000240)="fb0cf107af7626c66bbfcb9bd4d515f240dc231abd642ee8f32f94ca218c6709c90f972ea1c66a3f0908274c8e2932c4dfefb5c510aec6f6a036359783089b35aea543e735962917c7205a0c1ea4da9160bec9e9945d1e4256b0c98ca5cb38ef61e9bf596f577d009e2453900380fd4ad4f3154d661aaf693fb518d324ae53d2c9b74582b3898cd5becb5eecb2144374f00a8fedffc0b75163ca722ce7ce333832c2bcdfad2cb8cae361b6eecb53de63f6940f", 0xb3, 0xc000, &(0x7f0000000300)={0x2, 0x0, @multicast1, 0x3}, 0x10) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000000)={0x1, 0x7f, 0x9}) 149.110377ms ago: executing program 8 (id=1864): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x37, 0x1, 0x0, 0x8, 0x0, 0xa, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_config_ext={0x3ff, 0xfffffffd}, 0x1076f2, 0x10000, 0x0, 0x1, 0x8, 0x3ff, 0xb, 0x0, 0x0, 0x0, 0x8000000000000002}, 0xffffffffffffffff, 0xffffffdffbffffff, 0xffffffffffffffff, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r2) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x8840) 148.237967ms ago: executing program 1 (id=1865): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000440)=0x3) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$poke(0x420e, r1, 0x0, 0xfffffffffffffffe) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x0, 0x17}) ioctl$VT_DISALLOCATE(r2, 0x5608) r3 = dup(r2) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r5, &(0x7f0000004200)='t', 0x1) sendfile(r5, r4, 0x0, 0x3ffff) sendfile(r5, r4, 0x0, 0x7ffff000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0xfffffd28, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffefc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x10000}, 0x18) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, 0x0) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f00000007c0)={0x2, {0x2, 0x101, 0x0, 0x101}}) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f00000000c0)=[{0x50, 0xff, 0x0, 0xffeffffd}, {0x6, 0x5e, 0x0, 0x8}]}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000080000000180100002020642500000000002020207b1af8ff00000000bfa100000600000007010000f8ffffffb702000008000000b70300000800000085000000060000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x18) 141.916097ms ago: executing program 7 (id=1866): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) time(0x0) 81.313399ms ago: executing program 6 (id=1867): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x36e, &(0x7f00000007c0)="$eJzs3U1oM0UYwPEnaZImeXmbHERRkA6+CHpZ2uhZDNKCELC0jdgKwrbdaMialGyoRsS2J4+Kd0+Ch9KbBQ8F7VnoxZteRPDWi6BgBXVlv5LNV9PGpMH2/4OSycw8uzPZSXk27WYv3vj03UrJ0kp6Q6JJJRERkUuRrEQlEPEfo245IfLJd622A3n+wW8/PL22UUx6FWo5v/5CTik1N//Nex+m/G6ns3Kefevi19wv54+fP3nxz/o7ZUuVLVWtNZSutmo/NfQt01A7ZauiKbViGrplqHLVMupe+1f+dsza7m5T6dWdh+ndumFZSq82VcVoqkZNNepNpb+tl6tK0zT1MC0Ypni0uqrnRwzeHvNgMCH1el6fEZFUT0vxaCoDAgAAU9Wd/0edlH5Y/h/Syv83Za5QWFpVTud2/n/8zFnjwesnc37+f5rol/+/+KO3rY783zmdaOf/Ne/8oDQ8//9cbpD/92ZE98vI+X92AoPBaOYTPVWRjmdO/p/237+uwzePF9wC+T8AAAAAAAAAAAAAAAAAAAAAAP8Hl7adsW07EzwGP+1LCPznuJMGHf9ZEUk6R9/m+N9laxubknQv3HOOsfnxXnGv6D36Hc5ExBTjb7ubszaCK4+UIyvfmvt+/P5eccZtyZek7MTLomQk666nULxtL79aWFpUHj++dZlSOhyfk4w8Fo7/2l2dTnyuM97ff0KeexSK1yQj329LTUzZcSPb+/9oUalXXit0xafcfiLy860fFAAAAAAAxkxTLX3P3zVtULv3LSP5kvsxkSELkpG/+p/fL/Q9P49lnopNe/YAAAAAANwPVvODii5Ro+4WTLNfISUDm8ZQiHXUxEWkb+dEV038qi3PhGZ43fEkxLuDyX+d1xfBq3qTqOAfKZyBt5r8O6rIaOMJ5u/WRGLP/u43/XnTeUUOxF0AB+GmqFwjPNY9+HmnQvXt/Gjgdg79ibRqgo+NEgNeZ1np3U70ipUQ76mxI6MtgCc++/KP8b1BXjrxV8D7wzsfmoa9L9c5KF0FZxe9TfGJ/+IBAAAAcOvaSX9Q83K4OXwjkfDNcvjLPQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYzSRr/TrKgze++xtThUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYun8DAAD//7ct9c4=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105142, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r1, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000004) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) write(r0, &(0x7f0000000000)="e8bd8a4c56281ba2ba42cfa5b9fe5fc6dcde2ee431f5595ceadb9a2c95e57f15ee4a83f9e7d78ea996f78bd588bedcdbc730d6d15df6d2a26ca4e55e97ed0522a190ce241a37bad3317fba7e4be3dbbfec5e2f401b5658cc8f", 0x59) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000280)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0x9, 0x200, 0x2, 0xc9a, 0x0}, &(0x7f0000000240)=0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r5, 0x84, 0x1b, &(0x7f0000000140)={r4, 0x15, "82c3f728acebbc0276e4266507635f696fb9541c6f"}, &(0x7f00000001c0)=0xfffffefb) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000001200)={r6, 0xe3, 0xca3, 0x6, 0x6, 0x9, 0x7, 0x3, {0x0, @in={{0x2, 0x4e20, @empty}}, 0x18, 0x2, 0x7, 0x4, 0x2}}, &(0x7f00000012c0)=0xb0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, 0x0, 0x855) recvmsg$unix(r7, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) r9 = openat$selinux_policy(0xffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r9, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x7f) 80.418268ms ago: executing program 8 (id=1868): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000080000000000000000000180100003020702500000000002020207b1af8ff00000000bfa1000000000000070100003affffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="940201a821000100fcffffff00000000ac1414aae5fffff8b49ed9825133a900fc0100000000000000000000000000000000add500200000000000801aeaaec1", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000070000400706362632874776f666973682900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040010000dc06216ef2c68e9f6da05d886dbc3273ef99796b36698e2bd5179c3eea5474fc78c9720bfc4f90a708001f0001000000cc0111"], 0x294}}, 0x0) 65.235229ms ago: executing program 7 (id=1869): set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 8 (id=1870): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x1ffffffffffffffd}, 0x18) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'erspan0\x00', 0x0}) socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x7, 0x6}, 0x4) sendto$packet(r5, 0x0, 0x0, 0x20000081, &(0x7f00000001c0)={0x11, 0xc, r4, 0x1, 0x4, 0x6, @broadcast}, 0x14) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r7 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r7, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r8 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r7, 0x0, 0x0}) io_uring_enter(r8, 0x3498, 0x969, 0x0, 0x0, 0x0) dup3(r8, r6, 0x80000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="7ffbe38977b679a23d399d82e012d7f28d708b024e20c1df250a8080"], 0x1c}}, 0x20000050) r11 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000040)=0x10, 0x80000) getsockopt$SO_TIMESTAMPING(r11, 0x1, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) kernel console output (not intermixed with test programs): T7297] loop6: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 184.660179][ T7289] syz.6.1098: attempt to access beyond end of device [ 184.660179][ T7289] loop6: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 184.838991][ T7306] bridge0: port 1(@) entered blocking state [ 184.845144][ T7306] bridge0: port 1(@) entered forwarding state [ 184.856823][ T7306] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.863957][ T7306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.069182][ T7331] tipc: Enabled bearer , priority 0 [ 185.091687][ T7310] tipc: Resetting bearer [ 185.108894][ T7310] tipc: Disabling bearer [ 185.150760][ T7338] pimreg: entered allmulticast mode [ 185.164077][ T7338] pimreg: left allmulticast mode [ 185.274883][ T7358] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1129'. [ 185.320910][ T7364] loop9: detected capacity change from 0 to 512 [ 185.334846][ T7368] loop1: detected capacity change from 0 to 512 [ 185.341151][ T7364] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.341224][ T7364] ext4 filesystem being mounted at /180/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.344043][ T7364] EXT4-fs (loop9): shut down requested (0) [ 185.372924][ T7368] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.404250][ T7368] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.419084][ T7364] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 185.430169][ T7364] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 185.439352][ T7364] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 185.450137][ T7364] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 185.451987][ T7368] EXT4-fs (loop1): shut down requested (0) [ 185.459111][ T7364] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 185.459137][ T7364] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 185.487480][ T7372] loop6: detected capacity change from 0 to 128 [ 185.503868][ T3873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.532578][ T7368] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 185.553884][ T7379] loop9: detected capacity change from 0 to 512 [ 185.554973][ T7368] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 185.566258][ T7372] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 185.577430][ T7372] FAT-fs (loop6): Filesystem has been set read-only [ 185.579259][ T7368] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 185.592984][ T7372] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 185.601617][ T7372] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 185.609282][ T7368] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 185.609631][ T7379] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 185.622543][ T7380] buffer_io_error: 31975 callbacks suppressed [ 185.622560][ T7380] Buffer I/O error on dev loop6, logical block 2065, async page read [ 185.627417][ T7379] EXT4-fs (loop9): Invalid default hash set in the superblock [ 185.633557][ T7380] Buffer I/O error on dev loop6, logical block 2066, async page read [ 185.633587][ T7380] Buffer I/O error on dev loop6, logical block 2067, async page read [ 185.633607][ T7380] Buffer I/O error on dev loop6, logical block 2068, async page read [ 185.633627][ T7380] Buffer I/O error on dev loop6, logical block 2069, async page read [ 185.633646][ T7380] Buffer I/O error on dev loop6, logical block 2070, async page read [ 185.633699][ T7380] Buffer I/O error on dev loop6, logical block 2071, async page read [ 185.633719][ T7380] Buffer I/O error on dev loop6, logical block 2072, async page read [ 185.633755][ T7380] Buffer I/O error on dev loop6, logical block 2065, async page read [ 185.633775][ T7380] Buffer I/O error on dev loop6, logical block 2066, async page read [ 185.638126][ T7368] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 185.741193][ T7368] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 185.853543][ T7389] netlink: 'syz.9.1140': attribute type 4 has an invalid length. [ 185.890395][ T6209] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 185.983713][ T7396] lo speed is unknown, defaulting to 1000 [ 186.052479][ T7402] bridge_slave_0: left allmulticast mode [ 186.058399][ T7402] bridge_slave_0: left promiscuous mode [ 186.064083][ T7402] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.080170][ T7402] bridge_slave_1: left allmulticast mode [ 186.086010][ T7402] bridge_slave_1: left promiscuous mode [ 186.091756][ T7402] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.134175][ T7402] bond0: (slave bond_slave_0): Releasing backup interface [ 186.151691][ T7402] bond0: (slave bond_slave_1): Releasing backup interface [ 186.164342][ T7402] team_slave_0: left promiscuous mode [ 186.172817][ T7402] team0: Port device team_slave_0 removed [ 186.185837][ T7402] team_slave_1: left promiscuous mode [ 186.191462][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 186.191480][ T29] audit: type=1326 audit(1759007890.609:4459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7414 comm="syz.7.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee44deec9 code=0x7ffc0000 [ 186.199957][ T7402] team0: Port device team_slave_1 removed [ 186.221844][ T29] audit: type=1326 audit(1759007890.609:4460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7414 comm="syz.7.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee44deec9 code=0x7ffc0000 [ 186.261032][ T7402] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.268667][ T7402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.271502][ T29] audit: type=1326 audit(1759007890.629:4461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7414 comm="syz.7.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ee44deec9 code=0x7ffc0000 [ 186.300061][ T29] audit: type=1326 audit(1759007890.629:4462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7414 comm="syz.7.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee44deec9 code=0x7ffc0000 [ 186.323624][ T29] audit: type=1326 audit(1759007890.629:4463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7414 comm="syz.7.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee44deec9 code=0x7ffc0000 [ 186.347854][ T29] audit: type=1326 audit(1759007890.629:4464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7414 comm="syz.7.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ee44deec9 code=0x7ffc0000 [ 186.371881][ T29] audit: type=1326 audit(1759007890.629:4465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7414 comm="syz.7.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee44deec9 code=0x7ffc0000 [ 186.395718][ T29] audit: type=1326 audit(1759007890.629:4466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7414 comm="syz.7.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2ee44deec9 code=0x7ffc0000 [ 186.420088][ T29] audit: type=1326 audit(1759007890.629:4467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7414 comm="syz.7.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee44deec9 code=0x7ffc0000 [ 186.443559][ T29] audit: type=1326 audit(1759007890.629:4468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7414 comm="syz.7.1151" exe="/root/syz-executor" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f2ee44deec9 code=0x7ffc0000 [ 186.470472][ T7402] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.477941][ T7402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.547856][ T7432] netlink: 'syz.7.1159': attribute type 1 has an invalid length. [ 186.579610][ T7435] loop6: detected capacity change from 0 to 512 [ 186.662783][ T7447] netlink: 'syz.8.1165': attribute type 4 has an invalid length. [ 186.728312][ T7435] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 186.804941][ T7435] EXT4-fs (loop6): mount failed [ 186.893159][ T7464] lo speed is unknown, defaulting to 1000 [ 186.924818][ T7453] loop9: detected capacity change from 0 to 128 [ 186.966367][ T7474] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7474 comm=syz.1.1175 [ 187.002269][ T7453] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 187.010269][ T7453] FAT-fs (loop9): Filesystem has been set read-only [ 187.017404][ T7453] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 187.025504][ T7453] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 187.103030][ T7485] pimreg: entered allmulticast mode [ 187.112416][ T7476] tipc: Enabled bearer , priority 0 [ 187.126162][ T7487] __nla_validate_parse: 6 callbacks suppressed [ 187.126178][ T7487] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1181'. [ 187.195281][ T7485] pimreg: left allmulticast mode [ 187.251674][ T7487] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1181'. [ 187.332369][ T7475] tipc: Resetting bearer [ 187.393963][ T7475] tipc: Disabling bearer [ 187.824029][ T7435] Set syz1 is full, maxelem 65536 reached [ 187.864990][ T7500] loop1: detected capacity change from 0 to 512 [ 187.906512][ T7506] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7506 comm=syz.8.1189 [ 187.936785][ T7514] futex_wake_op: syz.6.1192 tries to shift op by -1; fix this program [ 187.946098][ T7500] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 187.962731][ T7500] EXT4-fs (loop1): mount failed [ 187.981458][ T7508] netlink: 'syz.7.1191': attribute type 4 has an invalid length. [ 188.016054][ T7516] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1194'. [ 188.029558][ T7522] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7522 comm=syz.6.1195 [ 188.079074][ T7529] netlink: 'syz.7.1198': attribute type 13 has an invalid length. [ 188.121087][ T7529] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.128394][ T7529] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.145591][ T7536] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1202'. [ 188.189285][ T7536] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1202'. [ 188.190665][ T7529] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.220612][ T7529] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.287318][ T7553] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7553 comm=syz.8.1209 [ 188.288683][ T31] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.332897][ T31] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.342898][ T31] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.352058][ T31] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.371673][ T7557] netlink: 36 bytes leftover after parsing attributes in process `syz.9.1211'. [ 188.403188][ T7560] netlink: 'syz.8.1212': attribute type 4 has an invalid length. [ 188.407681][ T7547] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1207'. [ 188.453144][ T7566] loop9: detected capacity change from 0 to 128 [ 188.464227][ T7566] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 188.472166][ T7566] FAT-fs (loop9): Filesystem has been set read-only [ 188.482790][ T7566] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 188.490829][ T7566] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 188.601753][ T7584] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7584 comm=syz.1.1223 [ 188.682427][ T7595] futex_wake_op: syz.1.1228 tries to shift op by -1; fix this program [ 188.699469][ T7596] capability: warning: `syz.8.1225' uses 32-bit capabilities (legacy support in use) [ 188.954974][ T7617] tipc: Started in network mode [ 188.960247][ T7617] tipc: Node identity 46bd6570ec33, cluster identity 4711 [ 188.967768][ T7617] tipc: Enabled bearer , priority 0 [ 189.022466][ T7622] syzkaller0: entered promiscuous mode [ 189.027996][ T7622] syzkaller0: entered allmulticast mode [ 189.038697][ T7616] tipc: Resetting bearer [ 189.060902][ T7616] tipc: Disabling bearer [ 189.119772][ T7629] pimreg: entered allmulticast mode [ 189.131010][ T7629] pimreg: left allmulticast mode [ 189.230159][ T7635] loop1: detected capacity change from 0 to 512 [ 189.255289][ T7635] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 189.302036][ T7635] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.378319][ T7645] netlink: 'syz.9.1248': attribute type 4 has an invalid length. [ 189.424999][ T7635] EXT4-fs (loop1): shut down requested (0) [ 189.439764][ T7635] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 189.463213][ T7635] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 189.488205][ T7635] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 189.497464][ T7635] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 189.533916][ T7635] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 189.545551][ T7655] netlink: 'syz.6.1251': attribute type 13 has an invalid length. [ 189.565588][ T7635] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 189.592811][ T6209] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.688577][ T7655] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.695793][ T7655] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.759481][ T7655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.769179][ T7655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.869371][ T7656] FAULT_INJECTION: forcing a failure. [ 189.869371][ T7656] name failslab, interval 1, probability 0, space 0, times 0 [ 189.882098][ T7656] CPU: 1 UID: 0 PID: 7656 Comm: syz.6.1251 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 189.882202][ T7656] Tainted: [W]=WARN [ 189.882210][ T7656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 189.882225][ T7656] Call Trace: [ 189.882233][ T7656] [ 189.882243][ T7656] __dump_stack+0x1d/0x30 [ 189.882329][ T7656] dump_stack_lvl+0xe8/0x140 [ 189.882351][ T7656] dump_stack+0x15/0x1b [ 189.882371][ T7656] should_fail_ex+0x265/0x280 [ 189.882464][ T7656] ? alloc_netdev_mqs+0x7cb/0xa30 [ 189.882492][ T7656] should_failslab+0x8c/0xb0 [ 189.882522][ T7656] __kmalloc_cache_noprof+0x4c/0x320 [ 189.882648][ T7656] alloc_netdev_mqs+0x7cb/0xa30 [ 189.882678][ T7656] register_vlan_device+0x26c/0x3d0 [ 189.882721][ T7656] vlan_ioctl_handler+0x1b8/0x4f0 [ 189.882787][ T7656] ? __pfx_vlan_ioctl_handler+0x10/0x10 [ 189.882888][ T7656] sock_ioctl+0x4a7/0x610 [ 189.882921][ T7656] ? __pfx_sock_ioctl+0x10/0x10 [ 189.882951][ T7656] __se_sys_ioctl+0xce/0x140 [ 189.882978][ T7656] __x64_sys_ioctl+0x43/0x50 [ 189.883000][ T7656] x64_sys_call+0x1816/0x2ff0 [ 189.883026][ T7656] do_syscall_64+0xd2/0x200 [ 189.883061][ T7656] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 189.883206][ T7656] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 189.883237][ T7656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.883262][ T7656] RIP: 0033:0x7f7a5d67eec9 [ 189.883281][ T7656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.883349][ T7656] RSP: 002b:00007f7a5c0be038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 189.883392][ T7656] RAX: ffffffffffffffda RBX: 00007f7a5d8d6090 RCX: 00007f7a5d67eec9 [ 189.883407][ T7656] RDX: 0000200000000040 RSI: 0000000000008982 RDI: 0000000000000007 [ 189.883422][ T7656] RBP: 00007f7a5c0be090 R08: 0000000000000000 R09: 0000000000000000 [ 189.883437][ T7656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 189.883451][ T7656] R13: 00007f7a5d8d6128 R14: 00007f7a5d8d6090 R15: 00007ffd1aadd478 [ 189.883472][ T7656] [ 190.122741][ T1084] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.133016][ T1084] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.142132][ T1084] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.163836][ T1084] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.211698][ T7663] pimreg: entered allmulticast mode [ 190.233436][ T7666] syzkaller0: entered promiscuous mode [ 190.239167][ T7666] syzkaller0: entered allmulticast mode [ 190.248793][ T7663] pimreg: left allmulticast mode [ 190.302195][ T7676] netlink: 'syz.7.1261': attribute type 1 has an invalid length. [ 190.310037][ T7676] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1261'. [ 190.463503][ T7689] tipc: Enabled bearer , priority 0 [ 190.490426][ T7688] tipc: Resetting bearer [ 190.498856][ T7694] loop9: detected capacity change from 0 to 128 [ 190.521930][ T7694] FAT-fs (loop9): Directory bread(block 32) failed [ 190.528859][ T7694] FAT-fs (loop9): Directory bread(block 33) failed [ 190.532095][ T7688] tipc: Disabling bearer [ 190.540206][ T7694] FAT-fs (loop9): Directory bread(block 34) failed [ 190.550004][ T7694] FAT-fs (loop9): Directory bread(block 35) failed [ 190.561744][ T7694] FAT-fs (loop9): Directory bread(block 36) failed [ 190.568673][ T7694] FAT-fs (loop9): Directory bread(block 37) failed [ 190.575403][ T7694] FAT-fs (loop9): Directory bread(block 38) failed [ 190.582737][ T7694] FAT-fs (loop9): Directory bread(block 39) failed [ 190.589647][ T7694] FAT-fs (loop9): Directory bread(block 40) failed [ 190.596569][ T7694] FAT-fs (loop9): Directory bread(block 41) failed [ 190.687969][ T7711] loop1: detected capacity change from 0 to 512 [ 190.713498][ T7716] loop6: detected capacity change from 0 to 512 [ 190.738490][ T7716] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 190.755542][ T7711] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 190.761100][ T7716] EXT4-fs (loop6): mount failed [ 190.781039][ T7711] EXT4-fs (loop1): mount failed [ 190.814556][ T7729] netlink: 'syz.9.1282': attribute type 4 has an invalid length. [ 190.961430][ T7737] tipc: Enabled bearer , priority 0 [ 190.974973][ T7736] tipc: Resetting bearer [ 191.006396][ T7736] tipc: Disabling bearer [ 191.198258][ T29] kauditd_printk_skb: 230 callbacks suppressed [ 191.198276][ T29] audit: type=1326 audit(1759007895.629:4695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.8.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230660eec9 code=0x7ffc0000 [ 191.230466][ T29] audit: type=1326 audit(1759007895.629:4696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.8.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7f230660eec9 code=0x7ffc0000 [ 191.254060][ T29] audit: type=1326 audit(1759007895.629:4697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.8.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230660eec9 code=0x7ffc0000 [ 191.277625][ T29] audit: type=1326 audit(1759007895.629:4698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.8.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230660eec9 code=0x7ffc0000 [ 191.301319][ T29] audit: type=1326 audit(1759007895.629:4699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.8.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f230660eec9 code=0x7ffc0000 [ 191.324665][ T29] audit: type=1326 audit(1759007895.629:4700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.8.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230660eec9 code=0x7ffc0000 [ 191.348385][ T29] audit: type=1326 audit(1759007895.629:4701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.8.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230660eec9 code=0x7ffc0000 [ 191.372920][ T29] audit: type=1326 audit(1759007895.629:4702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.8.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f230660eec9 code=0x7ffc0000 [ 191.396516][ T29] audit: type=1326 audit(1759007895.629:4703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.8.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230660eec9 code=0x7ffc0000 [ 191.420067][ T29] audit: type=1326 audit(1759007895.629:4704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7767 comm="syz.8.1299" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f230660eec9 code=0x7ffc0000 [ 191.489586][ T7776] loop1: detected capacity change from 0 to 512 [ 191.510256][ T7776] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 191.531156][ T7776] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 191.556515][ T7776] EXT4-fs (loop1): shut down requested (0) [ 191.574333][ T7776] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 191.588107][ T7776] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 191.612396][ T7776] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 191.639321][ T7776] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 191.650372][ T7776] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 191.659480][ T7776] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 191.754340][ T6209] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 191.885458][ T7801] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1311'. [ 191.974010][ T7812] loop1: detected capacity change from 0 to 128 [ 191.993890][ T7808] Driver unsupported XDP return value 0 on prog (id 1008) dev N/A, expect packet loss! [ 192.026482][ T7812] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 192.034405][ T7812] FAT-fs (loop1): Filesystem has been set read-only [ 192.036938][ T7817] loop6: detected capacity change from 0 to 512 [ 192.048716][ T7817] EXT4-fs: Ignoring removed nobh option [ 192.051437][ T7812] bio_check_eod: 78243 callbacks suppressed [ 192.051453][ T7812] syz.1.1318: attempt to access beyond end of device [ 192.051453][ T7812] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 192.054323][ T7817] EXT4-fs: Ignoring removed orlov option [ 192.061270][ T7812] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 192.088009][ T7812] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 192.090946][ T7819] netlink: 'syz.7.1321': attribute type 1 has an invalid length. [ 192.097091][ T7820] syz.1.1318: attempt to access beyond end of device [ 192.097091][ T7820] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 192.104395][ T7819] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1321'. [ 192.117127][ T7820] buffer_io_error: 53998 callbacks suppressed [ 192.117147][ T7820] Buffer I/O error on dev loop1, logical block 2065, async page read [ 192.140401][ T7817] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 192.140884][ T7820] syz.1.1318: attempt to access beyond end of device [ 192.140884][ T7820] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 192.166236][ T7820] Buffer I/O error on dev loop1, logical block 2066, async page read [ 192.174501][ T7817] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.211399][ T7817] tipc: Enabled bearer , priority 0 [ 192.221091][ T7820] syz.1.1318: attempt to access beyond end of device [ 192.221091][ T7820] loop1: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 192.234433][ T7820] Buffer I/O error on dev loop1, logical block 2067, async page read [ 192.242642][ T7820] syz.1.1318: attempt to access beyond end of device [ 192.242642][ T7820] loop1: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 192.255984][ T7820] Buffer I/O error on dev loop1, logical block 2068, async page read [ 192.264813][ T7820] syz.1.1318: attempt to access beyond end of device [ 192.264813][ T7820] loop1: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 192.278902][ T7820] Buffer I/O error on dev loop1, logical block 2069, async page read [ 192.287154][ T7820] syz.1.1318: attempt to access beyond end of device [ 192.287154][ T7820] loop1: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 192.300579][ T7820] Buffer I/O error on dev loop1, logical block 2070, async page read [ 192.309443][ T7820] syz.1.1318: attempt to access beyond end of device [ 192.309443][ T7820] loop1: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 192.309522][ T7816] tipc: Resetting bearer [ 192.322693][ T7820] Buffer I/O error on dev loop1, logical block 2071, async page read [ 192.336673][ T7820] syz.1.1318: attempt to access beyond end of device [ 192.336673][ T7820] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 192.350400][ T7820] Buffer I/O error on dev loop1, logical block 2072, async page read [ 192.359253][ T7820] syz.1.1318: attempt to access beyond end of device [ 192.359253][ T7820] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 192.364872][ T7816] tipc: Disabling bearer [ 192.372712][ T7820] Buffer I/O error on dev loop1, logical block 2065, async page read [ 192.387138][ T7820] Buffer I/O error on dev loop1, logical block 2066, async page read [ 192.444590][ T7828] netlink: 'syz.7.1323': attribute type 4 has an invalid length. [ 192.489215][ T3856] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 192.501870][ T7832] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1325'. [ 192.513393][ T7832] capability: warning: `syz.7.1325' uses deprecated v2 capabilities in a way that may be insecure [ 192.546011][ T7836] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1327'. [ 192.555607][ T7834] loop6: detected capacity change from 0 to 1024 [ 192.563535][ T7834] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 192.564733][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1327'. [ 192.575213][ T7834] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #4: comm syz.6.1326: pblk 98 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 192.617475][ T7834] EXT4-fs (loop6): no journal found [ 192.622782][ T7834] EXT4-fs (loop6): can't get journal size [ 192.631503][ T7834] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a054e11c, mo2=0002] [ 192.639872][ T7834] EXT4-fs (loop6): failed to initialize system zone (-117) [ 192.647228][ T7834] EXT4-fs (loop6): mount failed [ 192.674366][ T7842] futex_wake_op: syz.7.1329 tries to shift op by -1; fix this program [ 192.730310][ T7845] netlink: 16 bytes leftover after parsing attributes in process `'. [ 192.957481][ T7862] loop1: detected capacity change from 0 to 512 [ 192.977313][ T7862] EXT4-fs: Ignoring removed nobh option [ 192.983097][ T7862] EXT4-fs: Ignoring removed orlov option [ 193.010471][ T7862] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.116869][ T7865] loop6: detected capacity change from 0 to 128 [ 193.124955][ T7862] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 193.205244][ T7862] tipc: Enabled bearer , priority 0 [ 193.220593][ T7861] tipc: Resetting bearer [ 193.271891][ T7865] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 193.279774][ T7865] FAT-fs (loop6): Filesystem has been set read-only [ 193.281984][ T7867] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7867 comm=syz.8.1338 [ 193.287953][ T7865] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 193.306646][ T7865] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 193.351461][ T7861] tipc: Disabling bearer [ 193.486555][ T6209] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 193.507780][ T7874] futex_wake_op: syz.8.1340 tries to shift op by -1; fix this program [ 193.581239][ T7876] loop9: detected capacity change from 0 to 1024 [ 193.727318][ T7885] loop1: detected capacity change from 0 to 1024 [ 193.744090][ T7885] EXT4-fs: Ignoring removed orlov option [ 193.770229][ T7885] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 193.785957][ T7902] FAULT_INJECTION: forcing a failure. [ 193.785957][ T7902] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 193.799620][ T7902] CPU: 0 UID: 0 PID: 7902 Comm: syz.7.1352 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 193.799718][ T7902] Tainted: [W]=WARN [ 193.799724][ T7902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 193.799736][ T7902] Call Trace: [ 193.799743][ T7902] [ 193.799751][ T7902] __dump_stack+0x1d/0x30 [ 193.799773][ T7902] dump_stack_lvl+0xe8/0x140 [ 193.799796][ T7902] dump_stack+0x15/0x1b [ 193.799815][ T7902] should_fail_ex+0x265/0x280 [ 193.799844][ T7902] should_fail_alloc_page+0xf2/0x100 [ 193.799945][ T7902] __alloc_frozen_pages_noprof+0xff/0x360 [ 193.800056][ T7902] alloc_pages_mpol+0xb3/0x250 [ 193.800086][ T7902] vma_alloc_folio_noprof+0x1aa/0x300 [ 193.800120][ T7902] handle_mm_fault+0xec2/0x2c20 [ 193.800182][ T7902] do_user_addr_fault+0x636/0x1090 [ 193.800326][ T7902] ? fpregs_assert_state_consistent+0xb4/0xe0 [ 193.800365][ T7902] exc_page_fault+0x62/0xa0 [ 193.800439][ T7902] asm_exc_page_fault+0x26/0x30 [ 193.800462][ T7902] RIP: 0033:0x7f2ee43a0c03 [ 193.800480][ T7902] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 193.800502][ T7902] RSP: 002b:00007f2ee2f3e4a0 EFLAGS: 00010206 [ 193.800524][ T7902] RAX: 0000000000002000 RBX: 00007f2ee2f3e540 RCX: 00007f2edab1f000 [ 193.800539][ T7902] RDX: 00007f2ee2f3e6e0 RSI: 000000000000000f RDI: 00007f2ee2f3e5e0 [ 193.800554][ T7902] RBP: 00000000000000b3 R08: 0000000000000006 R09: 0000000000000021 [ 193.800597][ T7902] R10: 0000000000000024 R11: 00007f2ee2f3e540 R12: 0000000000000001 [ 193.800613][ T7902] R13: 00007f2ee457db80 R14: 00000000000000ff R15: 00007f2ee2f3e5e0 [ 193.800634][ T7902] [ 193.800645][ T7902] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 193.837966][ T7904] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1353'. [ 194.022055][ T6209] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.054118][ T7907] tipc: Enabled bearer , priority 0 [ 194.068005][ T7904] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1353'. [ 194.077162][ T7906] tipc: Resetting bearer [ 194.086734][ T7909] loop1: detected capacity change from 0 to 512 [ 194.112439][ T7906] tipc: Disabling bearer [ 194.130830][ T7911] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7911 comm=syz.8.1356 [ 194.145017][ T7909] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.170681][ T7909] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 194.197622][ T7919] loop6: detected capacity change from 0 to 1024 [ 194.204372][ T7919] EXT4-fs: Ignoring removed bh option [ 194.210401][ T7919] EXT4-fs: inline encryption not supported [ 194.224451][ T7909] EXT4-fs (loop1): shut down requested (0) [ 194.230335][ T7919] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 194.231892][ T7922] loop9: detected capacity change from 0 to 128 [ 194.251912][ T7922] FAT-fs (loop9): Directory bread(block 32) failed [ 194.259568][ T7922] FAT-fs (loop9): Directory bread(block 33) failed [ 194.262315][ T7919] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.1358: lblock 2 mapped to illegal pblock 2 (length 1) [ 194.266576][ T7922] FAT-fs (loop9): Directory bread(block 34) failed [ 194.286772][ T7922] FAT-fs (loop9): Directory bread(block 35) failed [ 194.294250][ T7922] FAT-fs (loop9): Directory bread(block 36) failed [ 194.301154][ T7922] FAT-fs (loop9): Directory bread(block 37) failed [ 194.307860][ T7929] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 194.307970][ T7922] FAT-fs (loop9): Directory bread(block 38) failed [ 194.323885][ T7922] FAT-fs (loop9): Directory bread(block 39) failed [ 194.327332][ T7929] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 194.332014][ T7922] FAT-fs (loop9): Directory bread(block 40) failed [ 194.346256][ T7922] FAT-fs (loop9): Directory bread(block 41) failed [ 194.363603][ T7919] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.1358: lblock 0 mapped to illegal pblock 48 (length 1) [ 194.379475][ T7919] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.1358: Failed to acquire dquot type 0 [ 194.392161][ T7919] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 194.412280][ T7919] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.1358: mark_inode_dirty error [ 194.437568][ T7919] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 194.448484][ T7919] EXT4-fs (loop6): 1 orphan inode deleted [ 194.454699][ T7919] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 194.474525][ T31] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 194.501320][ T6209] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.513524][ T31] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0 [ 194.526874][ T7919] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #2: block 16: comm syz.6.1358: lblock 0 mapped to illegal pblock 16 (length 1) [ 194.542922][ T7939] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7939 comm=syz.9.1368 [ 194.545229][ T7919] netlink: 'syz.6.1358': attribute type 1 has an invalid length. [ 194.563631][ T7919] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1358'. [ 194.601561][ T7944] futex_wake_op: syz.9.1370 tries to shift op by -1; fix this program [ 194.602880][ T7941] loop1: detected capacity change from 0 to 512 [ 194.632578][ T7919] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #2: block 16: comm syz.6.1358: lblock 0 mapped to illegal pblock 16 (length 1) [ 194.677960][ T7941] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 194.680842][ T7945] tipc: Enabled bearer , priority 0 [ 194.704944][ T7942] tipc: Resetting bearer [ 194.705278][ T7941] EXT4-fs (loop1): mount failed [ 194.733311][ T7942] tipc: Disabling bearer [ 194.859332][ T7950] loop9: detected capacity change from 0 to 128 [ 194.908579][ T7950] FAT-fs (loop9): Directory bread(block 32) failed [ 194.918985][ T7950] FAT-fs (loop9): Directory bread(block 33) failed [ 194.926986][ T3856] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 194.939753][ T7950] FAT-fs (loop9): Directory bread(block 34) failed [ 194.946619][ T7950] FAT-fs (loop9): Directory bread(block 35) failed [ 194.954785][ T7950] FAT-fs (loop9): Directory bread(block 36) failed [ 194.962061][ T7950] FAT-fs (loop9): Directory bread(block 37) failed [ 194.968702][ T7950] FAT-fs (loop9): Directory bread(block 38) failed [ 194.975315][ T7950] FAT-fs (loop9): Directory bread(block 39) failed [ 194.983137][ T7950] FAT-fs (loop9): Directory bread(block 40) failed [ 194.989989][ T7950] FAT-fs (loop9): Directory bread(block 41) failed [ 195.001387][ T3856] EXT4-fs error (device loop6): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 195.018514][ T3856] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 195.038866][ T3856] EXT4-fs error (device loop6): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 195.086711][ T7961] loop9: detected capacity change from 0 to 128 [ 195.095593][ T7961] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 195.104262][ T7961] FAT-fs (loop9): Filesystem has been set read-only [ 195.112449][ T7961] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 195.120353][ T7961] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 195.247795][ T7968] loop6: detected capacity change from 0 to 512 [ 195.258169][ T7968] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 195.267329][ T7968] EXT4-fs (loop6): Invalid default hash set in the superblock [ 195.350962][ T7972] netlink: 'syz.8.1379': attribute type 1 has an invalid length. [ 195.358938][ T7972] netlink: 224 bytes leftover after parsing attributes in process `syz.8.1379'. [ 195.478440][ T7974] loop6: detected capacity change from 0 to 1024 [ 195.504321][ T7974] EXT4-fs: Ignoring removed bh option [ 195.510127][ T7974] EXT4-fs: inline encryption not supported [ 195.516474][ T7974] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 195.529953][ T7974] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.1380: lblock 2 mapped to illegal pblock 2 (length 1) [ 195.551193][ T7974] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.1380: lblock 0 mapped to illegal pblock 48 (length 1) [ 195.566980][ T7977] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1381'. [ 195.577193][ T7974] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.1380: Failed to acquire dquot type 0 [ 195.590703][ T7974] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 195.591489][ T7982] tipc: Enabled bearer , priority 0 [ 195.617575][ T7974] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.1380: mark_inode_dirty error [ 195.636912][ T7974] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 195.647463][ T7974] EXT4-fs (loop6): 1 orphan inode deleted [ 195.653873][ T7981] tipc: Resetting bearer [ 195.653950][ T7974] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.672554][ T4318] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 195.703140][ T7981] tipc: Disabling bearer [ 195.710094][ T4318] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:8: Failed to release dquot type 0 [ 195.721750][ T7974] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #2: block 16: comm syz.6.1380: lblock 0 mapped to illegal pblock 16 (length 1) [ 195.748225][ T7974] netlink: 'syz.6.1380': attribute type 1 has an invalid length. [ 195.755989][ T7974] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1380'. [ 195.781559][ T7974] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #2: block 16: comm syz.6.1380: lblock 0 mapped to illegal pblock 16 (length 1) [ 195.812329][ T7987] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=7987 comm=syz.1.1384 [ 196.017248][ T3856] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.056570][ T3856] EXT4-fs error (device loop6): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 196.077319][ T3856] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 196.098525][ T3856] EXT4-fs error (device loop6): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 196.314168][ T29] kauditd_printk_skb: 207 callbacks suppressed [ 196.314189][ T29] audit: type=1400 audit(1759007900.739:4905): avc: denied { bind } for pid=8030 comm="syz.6.1400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 196.350396][ T29] audit: type=1326 audit(1759007900.779:4906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8030 comm="syz.6.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5d67eec9 code=0x7ffc0000 [ 196.391161][ T8031] loop6: detected capacity change from 0 to 512 [ 196.398204][ T29] audit: type=1326 audit(1759007900.779:4907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8030 comm="syz.6.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5d67eec9 code=0x7ffc0000 [ 196.421962][ T29] audit: type=1326 audit(1759007900.779:4908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8030 comm="syz.6.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a5d67eec9 code=0x7ffc0000 [ 196.445696][ T29] audit: type=1326 audit(1759007900.779:4909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8030 comm="syz.6.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5d67eec9 code=0x7ffc0000 [ 196.452398][ T8031] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 196.469184][ T29] audit: type=1326 audit(1759007900.779:4910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8030 comm="syz.6.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7a5d67eec9 code=0x7ffc0000 [ 196.502610][ T29] audit: type=1326 audit(1759007900.779:4911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8030 comm="syz.6.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5d67eec9 code=0x7ffc0000 [ 196.511378][ T8031] EXT4-fs (loop6): can't mount with journal_async_commit, fs mounted w/o journal [ 196.526133][ T29] audit: type=1326 audit(1759007900.779:4912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8030 comm="syz.6.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f7a5d67eec9 code=0x7ffc0000 [ 196.526167][ T29] audit: type=1326 audit(1759007900.779:4913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8030 comm="syz.6.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5d67eec9 code=0x7ffc0000 [ 196.582417][ T29] audit: type=1326 audit(1759007900.779:4914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8030 comm="syz.6.1400" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7a5d67eec9 code=0x7ffc0000 [ 196.706759][ T8038] loop1: detected capacity change from 0 to 128 [ 196.724158][ T8050] futex_wake_op: syz.8.1408 tries to shift op by -1; fix this program [ 196.751706][ T8052] loop6: detected capacity change from 0 to 1024 [ 196.760512][ T8052] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 196.773467][ T8052] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.1407: Invalid block bitmap block 0 in block_group 0 [ 196.782491][ T8038] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 196.795041][ T8038] FAT-fs (loop1): Filesystem has been set read-only [ 196.802022][ T8038] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 196.809985][ T8038] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 196.839181][ T8052] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.1407: Failed to acquire dquot type 0 [ 196.852212][ T8052] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.1407: Freeing blocks not in datazone - block = 0, count = 4096 [ 196.868169][ T8052] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.1407: Invalid inode bitmap blk 0 in block_group 0 [ 196.888232][ T4318] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:8: Failed to release dquot type 0 [ 196.907086][ T8052] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 196.920183][ T8052] EXT4-fs (loop6): 1 orphan inode deleted [ 196.931678][ T8052] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 196.963302][ T8061] loop9: detected capacity change from 0 to 512 [ 196.999432][ T8061] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.013850][ T8061] ext4 filesystem being mounted at /225/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.029608][ T8061] EXT4-fs (loop9): shut down requested (0) [ 197.037020][ T8061] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 197.046087][ T8061] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 197.056700][ T8061] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 197.065960][ T8061] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 197.079923][ T8061] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 197.093159][ T8061] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 197.094063][ T8038] bio_check_eod: 37736 callbacks suppressed [ 197.094078][ T8038] syz.1.1402: attempt to access beyond end of device [ 197.094078][ T8038] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 197.121848][ T8038] syz.1.1402: attempt to access beyond end of device [ 197.121848][ T8038] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 197.136302][ T3873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.158298][ T8038] syz.1.1402: attempt to access beyond end of device [ 197.158298][ T8038] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 197.172826][ T8038] syz.1.1402: attempt to access beyond end of device [ 197.172826][ T8038] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 197.193574][ T8038] syz.1.1402: attempt to access beyond end of device [ 197.193574][ T8038] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 197.219288][ T8038] syz.1.1402: attempt to access beyond end of device [ 197.219288][ T8038] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 197.267488][ T8083] loop1: detected capacity change from 0 to 1024 [ 197.283658][ T8083] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 197.309775][ T8083] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #4: comm syz.1.1420: pblk 98 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 197.351376][ T8083] EXT4-fs (loop1): no journal found [ 197.356658][ T8083] EXT4-fs (loop1): can't get journal size [ 197.473686][ T8083] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a054e11c, mo2=0002] [ 197.487277][ T8095] netlink: 'syz.8.1425': attribute type 1 has an invalid length. [ 197.488457][ T8083] EXT4-fs (loop1): failed to initialize system zone (-117) [ 197.502491][ T8083] EXT4-fs (loop1): mount failed [ 197.528877][ T8052] syz.6.1407 (8052) used greatest stack depth: 9312 bytes left [ 197.600891][ T3856] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.685080][ T8101] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8101 comm=syz.6.1426 [ 197.740531][ T8104] loop1: detected capacity change from 0 to 1024 [ 197.759323][ T8104] EXT4-fs: Ignoring removed orlov option [ 197.766363][ T8107] FAULT_INJECTION: forcing a failure. [ 197.766363][ T8107] name failslab, interval 1, probability 0, space 0, times 0 [ 197.778885][ T8104] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.779245][ T8107] CPU: 1 UID: 0 PID: 8107 Comm: syz.6.1429 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 197.779281][ T8107] Tainted: [W]=WARN [ 197.779288][ T8107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 197.779311][ T8107] Call Trace: [ 197.779317][ T8107] [ 197.779323][ T8107] __dump_stack+0x1d/0x30 [ 197.779344][ T8107] dump_stack_lvl+0xe8/0x140 [ 197.779362][ T8107] dump_stack+0x15/0x1b [ 197.779378][ T8107] should_fail_ex+0x265/0x280 [ 197.779453][ T8107] should_failslab+0x8c/0xb0 [ 197.779478][ T8107] kmem_cache_alloc_noprof+0x50/0x310 [ 197.779507][ T8107] ? __anon_vma_prepare+0xcd/0x2f0 [ 197.779552][ T8107] __anon_vma_prepare+0xcd/0x2f0 [ 197.779573][ T8107] handle_mm_fault+0x1d58/0x2c20 [ 197.779606][ T8107] do_user_addr_fault+0x636/0x1090 [ 197.779687][ T8107] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 197.779765][ T8107] exc_page_fault+0x62/0xa0 [ 197.779849][ T8107] asm_exc_page_fault+0x26/0x30 [ 197.779870][ T8107] RIP: 0033:0x7f7a5d540c03 [ 197.779918][ T8107] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 197.779938][ T8107] RSP: 002b:00007f7a5c0de4a0 EFLAGS: 00010206 [ 197.779956][ T8107] RAX: 0000000000000000 RBX: 00007f7a5c0de540 RCX: 00007f7a53cbf000 [ 197.779970][ T8107] RDX: 00007f7a5c0de6e0 RSI: 0000000000000000 RDI: 00007f7a5c0de5e0 [ 197.780037][ T8107] RBP: 000000000000013a R08: 0000000000000008 R09: 00000000000000c4 [ 197.780050][ T8107] R10: 00000000000000ca R11: 00007f7a5c0de540 R12: 00007f7a5c0de540 [ 197.780063][ T8107] R13: 00007f7a5d71db80 R14: 00000000000000eb R15: 00007f7a5c0de5e0 [ 197.780082][ T8107] [ 197.780100][ T8107] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 198.043188][ T8107] loop6: detected capacity change from 0 to 8192 [ 198.082954][ T6209] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.170370][ T8131] loop9: detected capacity change from 0 to 512 [ 198.177014][ T8131] EXT4-fs: Ignoring removed nobh option [ 198.180015][ T8134] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8134 comm=syz.7.1439 [ 198.182747][ T8131] EXT4-fs: Ignoring removed orlov option [ 198.204460][ T8128] loop6: detected capacity change from 0 to 1024 [ 198.211729][ T8128] EXT4-fs: Ignoring removed bh option [ 198.217296][ T8128] EXT4-fs: inline encryption not supported [ 198.224922][ T8128] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 198.268694][ T8139] loop1: detected capacity change from 0 to 512 [ 198.282828][ T8128] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.1437: lblock 2 mapped to illegal pblock 2 (length 1) [ 198.298733][ T8131] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.312878][ T8128] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.1437: lblock 0 mapped to illegal pblock 48 (length 1) [ 198.327267][ T8128] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.1437: Failed to acquire dquot type 0 [ 198.339998][ T8128] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 198.349593][ T8128] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.1437: mark_inode_dirty error [ 198.362249][ T8128] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 198.372247][ T8136] 9pnet_fd: Insufficient options for proto=fd [ 198.372686][ T8128] EXT4-fs (loop6): 1 orphan inode deleted [ 198.385966][ T8128] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.398793][ T31] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 198.444994][ T31] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0 [ 198.466760][ T8128] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #2: block 16: comm syz.6.1437: lblock 0 mapped to illegal pblock 16 (length 1) [ 198.484526][ T8131] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.496520][ T8128] netlink: 'syz.6.1437': attribute type 1 has an invalid length. [ 198.504303][ T8128] __nla_validate_parse: 7 callbacks suppressed [ 198.504320][ T8128] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1437'. [ 198.521720][ T8139] EXT4-fs warning (device loop1): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 198.536918][ T8139] EXT4-fs (loop1): mount failed [ 198.598853][ T8128] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #2: block 16: comm syz.6.1437: lblock 0 mapped to illegal pblock 16 (length 1) [ 198.745657][ T3873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.827991][ T3856] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.849750][ T3856] EXT4-fs error (device loop6): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 198.855210][ T8165] loop9: detected capacity change from 0 to 128 [ 198.869438][ T3856] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 198.885346][ T8165] FAT-fs (loop9): Directory bread(block 32) failed [ 198.899337][ T3856] EXT4-fs error (device loop6): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 198.899698][ T8165] FAT-fs (loop9): Directory bread(block 33) failed [ 198.918139][ T8165] FAT-fs (loop9): Directory bread(block 34) failed [ 198.924747][ T8165] FAT-fs (loop9): Directory bread(block 35) failed [ 198.934199][ T8165] FAT-fs (loop9): Directory bread(block 36) failed [ 198.962322][ T8165] FAT-fs (loop9): Directory bread(block 37) failed [ 198.969315][ T8165] FAT-fs (loop9): Directory bread(block 38) failed [ 198.973959][ T8169] pimreg: entered allmulticast mode [ 198.976034][ T8165] FAT-fs (loop9): Directory bread(block 39) failed [ 198.989329][ T8165] FAT-fs (loop9): Directory bread(block 40) failed [ 198.996234][ T8165] FAT-fs (loop9): Directory bread(block 41) failed [ 199.007944][ T8169] pimreg: left allmulticast mode [ 199.111777][ T8173] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8173 comm=syz.9.1452 [ 199.142994][ T8178] futex_wake_op: syz.1.1453 tries to shift op by -1; fix this program [ 199.156308][ T8175] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 199.192838][ T8180] netlink: 48 bytes leftover after parsing attributes in process `syz.9.1455'. [ 199.200911][ T8182] netlink: 'syz.1.1456': attribute type 4 has an invalid length. [ 199.311996][ T8187] loop1: detected capacity change from 0 to 512 [ 199.357305][ T8187] EXT4-fs: Ignoring removed nobh option [ 199.363013][ T8187] EXT4-fs: Ignoring removed orlov option [ 199.375402][ T8192] loop6: detected capacity change from 0 to 1024 [ 199.382626][ T8192] EXT4-fs: Ignoring removed orlov option [ 199.412366][ T8200] loop9: detected capacity change from 0 to 128 [ 199.432623][ T8200] FAT-fs (loop9): Directory bread(block 32) failed [ 199.441707][ T8192] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.454317][ T8200] FAT-fs (loop9): Directory bread(block 33) failed [ 199.461156][ T8200] FAT-fs (loop9): Directory bread(block 34) failed [ 199.467819][ T8200] FAT-fs (loop9): Directory bread(block 35) failed [ 199.474911][ T8200] FAT-fs (loop9): Directory bread(block 36) failed [ 199.481625][ T8200] FAT-fs (loop9): Directory bread(block 37) failed [ 199.488251][ T8200] FAT-fs (loop9): Directory bread(block 38) failed [ 199.495069][ T8200] FAT-fs (loop9): Directory bread(block 39) failed [ 199.496149][ T8187] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.504261][ T8200] FAT-fs (loop9): Directory bread(block 40) failed [ 199.523535][ T8187] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.535169][ T8200] FAT-fs (loop9): Directory bread(block 41) failed [ 199.649325][ T8212] futex_wake_op: syz.8.1466 tries to shift op by -1; fix this program [ 199.692748][ T6209] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.737967][ T8219] netlink: 'syz.1.1469': attribute type 4 has an invalid length. [ 199.780646][ T8223] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8223 comm=syz.1.1472 [ 199.907535][ T8232] pimreg: entered allmulticast mode [ 199.915724][ T8232] pimreg: left allmulticast mode [ 200.021796][ T8240] loop9: detected capacity change from 0 to 512 [ 200.030331][ T8240] EXT4-fs: Ignoring removed nobh option [ 200.035942][ T8240] EXT4-fs: Ignoring removed orlov option [ 200.051792][ T8240] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.058002][ T8239] syzkaller0: entered promiscuous mode [ 200.068075][ T8240] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.069905][ T8239] syzkaller0: entered allmulticast mode [ 200.093663][ T3856] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.197982][ T8253] netlink: 'syz.6.1483': attribute type 4 has an invalid length. [ 200.268030][ T3873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.302240][ T8274] loop1: detected capacity change from 0 to 512 [ 200.335245][ T8274] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.363251][ T8274] ext4 filesystem being mounted at /132/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.419496][ T8286] loop9: detected capacity change from 0 to 1024 [ 200.431356][ T8286] EXT4-fs: Ignoring removed orlov option [ 200.487082][ T8286] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.529039][ T8297] netlink: 'syz.6.1500': attribute type 4 has an invalid length. [ 200.835336][ T6209] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.942900][ T3873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.280798][ T8326] netlink: 'syz.9.1512': attribute type 4 has an invalid length. [ 201.371091][ T8338] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1517'. [ 201.397629][ T8338] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1517'. [ 201.432685][ T8330] loop1: detected capacity change from 0 to 1024 [ 201.459968][ T8330] EXT4-fs: Ignoring removed orlov option [ 201.471451][ T29] kauditd_printk_skb: 511 callbacks suppressed [ 201.471467][ T29] audit: type=1326 audit(1759007905.899:5419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.9.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee99aceec9 code=0x7ffc0000 [ 201.512738][ T8345] pimreg: entered allmulticast mode [ 201.520304][ T8330] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 201.543675][ T8345] pimreg: left allmulticast mode [ 201.558736][ T29] audit: type=1326 audit(1759007905.899:5420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.9.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee99aceec9 code=0x7ffc0000 [ 201.582479][ T29] audit: type=1326 audit(1759007905.899:5421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.9.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fee99aceec9 code=0x7ffc0000 [ 201.606659][ T29] audit: type=1326 audit(1759007905.899:5422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8342 comm="syz.9.1519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee99aceec9 code=0x7ffc0000 [ 201.652720][ T8355] futex_wake_op: syz.7.1523 tries to shift op by -1; fix this program [ 201.705757][ T6209] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 201.744528][ T8363] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8363 comm=syz.6.1528 [ 201.798993][ T8367] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1530'. [ 201.819554][ T8367] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1530'. [ 201.828752][ T29] audit: type=1326 audit(1759007906.249:5423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8370 comm="syz.1.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9117beec9 code=0x7ffc0000 [ 201.849746][ T8373] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1532'. [ 201.853002][ T29] audit: type=1326 audit(1759007906.249:5424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8370 comm="syz.1.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9117beec9 code=0x7ffc0000 [ 201.929895][ T29] audit: type=1326 audit(1759007906.259:5425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8370 comm="syz.1.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7ff9117beec9 code=0x7ffc0000 [ 201.954343][ T29] audit: type=1326 audit(1759007906.259:5426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8370 comm="syz.1.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9117beec9 code=0x7ffc0000 [ 201.977997][ T29] audit: type=1326 audit(1759007906.259:5427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8370 comm="syz.1.1526" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9117beec9 code=0x7ffc0000 [ 201.995505][ T8383] pimreg: entered allmulticast mode [ 202.010202][ T8381] pimreg: left allmulticast mode [ 202.017322][ T8385] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1537'. [ 202.237540][ T8401] FAULT_INJECTION: forcing a failure. [ 202.237540][ T8401] name failslab, interval 1, probability 0, space 0, times 0 [ 202.251180][ T8401] CPU: 1 UID: 0 PID: 8401 Comm: syz.7.1544 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 202.251291][ T8401] Tainted: [W]=WARN [ 202.251298][ T8401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 202.251312][ T8401] Call Trace: [ 202.251320][ T8401] [ 202.251329][ T8401] __dump_stack+0x1d/0x30 [ 202.251402][ T8401] dump_stack_lvl+0xe8/0x140 [ 202.251425][ T8401] dump_stack+0x15/0x1b [ 202.251444][ T8401] should_fail_ex+0x265/0x280 [ 202.251471][ T8401] should_failslab+0x8c/0xb0 [ 202.251498][ T8401] __kmalloc_noprof+0xa5/0x3e0 [ 202.251577][ T8401] ? aio_setup_ring+0x1e8/0x760 [ 202.251617][ T8401] aio_setup_ring+0x1e8/0x760 [ 202.251648][ T8401] ioctx_alloc+0x2c4/0x4e0 [ 202.251723][ T8401] ? fput+0x8f/0xc0 [ 202.251756][ T8401] __se_sys_io_setup+0x6b/0x1b0 [ 202.251784][ T8401] __x64_sys_io_setup+0x31/0x40 [ 202.251810][ T8401] x64_sys_call+0x2eff/0x2ff0 [ 202.251913][ T8401] do_syscall_64+0xd2/0x200 [ 202.252022][ T8401] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 202.252047][ T8401] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 202.252151][ T8401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.252216][ T8401] RIP: 0033:0x7f2ee44deec9 [ 202.252235][ T8401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.252326][ T8401] RSP: 002b:00007f2ee2f3f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 202.252351][ T8401] RAX: ffffffffffffffda RBX: 00007f2ee4735fa0 RCX: 00007f2ee44deec9 [ 202.252366][ T8401] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000002004 [ 202.252449][ T8401] RBP: 00007f2ee2f3f090 R08: 0000000000000000 R09: 0000000000000000 [ 202.252464][ T8401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.252478][ T8401] R13: 00007f2ee4736038 R14: 00007f2ee4735fa0 R15: 00007ffd08a4c0b8 [ 202.252499][ T8401] [ 202.458692][ T8403] FAULT_INJECTION: forcing a failure. [ 202.458692][ T8403] name failslab, interval 1, probability 0, space 0, times 0 [ 202.471571][ T8403] CPU: 1 UID: 0 PID: 8403 Comm: syz.1.1543 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 202.471608][ T8403] Tainted: [W]=WARN [ 202.471615][ T8403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 202.471627][ T8403] Call Trace: [ 202.471636][ T8403] [ 202.471704][ T8403] __dump_stack+0x1d/0x30 [ 202.471731][ T8403] dump_stack_lvl+0xe8/0x140 [ 202.471754][ T8403] dump_stack+0x15/0x1b [ 202.471773][ T8403] should_fail_ex+0x265/0x280 [ 202.471823][ T8403] should_failslab+0x8c/0xb0 [ 202.471857][ T8403] __kmalloc_noprof+0xa5/0x3e0 [ 202.471885][ T8403] ? fib6_info_alloc+0x2e/0x90 [ 202.471980][ T8403] fib6_info_alloc+0x2e/0x90 [ 202.472014][ T8403] ip6_route_info_create+0xe7/0x390 [ 202.472061][ T8403] ip6_route_add+0x49/0x170 [ 202.472084][ T8403] inet6_rtm_newroute+0x112/0x1020 [ 202.472116][ T8403] ? __memcg_slab_free_hook+0x135/0x230 [ 202.472161][ T8403] ? selinux_capable+0x31/0x40 [ 202.472245][ T8403] ? security_capable+0x83/0x90 [ 202.472272][ T8403] ? ns_capable+0x7d/0xb0 [ 202.472296][ T8403] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 202.472330][ T8403] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 202.472399][ T8403] netlink_rcv_skb+0x123/0x220 [ 202.472421][ T8403] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 202.472458][ T8403] rtnetlink_rcv+0x1c/0x30 [ 202.472548][ T8403] netlink_unicast+0x5bd/0x690 [ 202.472573][ T8403] netlink_sendmsg+0x58b/0x6b0 [ 202.472600][ T8403] ? __pfx_netlink_sendmsg+0x10/0x10 [ 202.472627][ T8403] __sock_sendmsg+0x145/0x180 [ 202.472705][ T8403] ____sys_sendmsg+0x31e/0x4e0 [ 202.472775][ T8403] ___sys_sendmsg+0x17b/0x1d0 [ 202.472862][ T8403] __x64_sys_sendmsg+0xd4/0x160 [ 202.472894][ T8403] x64_sys_call+0x191e/0x2ff0 [ 202.472918][ T8403] do_syscall_64+0xd2/0x200 [ 202.472957][ T8403] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 202.473004][ T8403] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 202.473033][ T8403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.473056][ T8403] RIP: 0033:0x7ff9117beec9 [ 202.473126][ T8403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 202.473147][ T8403] RSP: 002b:00007ff910227038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 202.473235][ T8403] RAX: ffffffffffffffda RBX: 00007ff911a15fa0 RCX: 00007ff9117beec9 [ 202.473249][ T8403] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000005 [ 202.473264][ T8403] RBP: 00007ff910227090 R08: 0000000000000000 R09: 0000000000000000 [ 202.473280][ T8403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.473295][ T8403] R13: 00007ff911a16038 R14: 00007ff911a15fa0 R15: 00007ffc4353f1f8 [ 202.473316][ T8403] [ 202.748386][ T8407] netlink: 4380 bytes leftover after parsing attributes in process `syz.9.1546'. [ 202.758543][ T29] audit: type=1400 audit(1759007907.189:5428): avc: denied { create } for pid=8405 comm="syz.6.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 202.765229][ T8409] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1547'. [ 202.828616][ T8415] loop6: detected capacity change from 0 to 1024 [ 202.836865][ T8415] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 202.847825][ T8415] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #4: comm syz.6.1549: pblk 98 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 202.871853][ T8415] EXT4-fs (loop6): no journal found [ 202.877211][ T8415] EXT4-fs (loop6): can't get journal size [ 202.884400][ T8415] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a054e11c, mo2=0002] [ 202.892804][ T8415] EXT4-fs (loop6): failed to initialize system zone (-117) [ 202.900993][ T8415] EXT4-fs (loop6): mount failed [ 202.959850][ T8425] netlink: 'syz.6.1553': attribute type 4 has an invalid length. [ 203.044125][ T8431] loop1: detected capacity change from 0 to 512 [ 203.054603][ T8431] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 203.063775][ T8431] EXT4-fs (loop1): Invalid default hash set in the superblock [ 203.103782][ T8434] loop6: detected capacity change from 0 to 1024 [ 203.116963][ T8434] EXT4-fs: Ignoring removed orlov option [ 203.125985][ T8434] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.151221][ T8443] loop9: detected capacity change from 0 to 1024 [ 203.184834][ T8443] EXT4-fs: Ignoring removed bh option [ 203.210716][ T8443] EXT4-fs: inline encryption not supported [ 203.241483][ T8443] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 203.262470][ T8451] loop1: detected capacity change from 0 to 1024 [ 203.270626][ T8451] EXT4-fs: Ignoring removed orlov option [ 203.308470][ T8451] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.323871][ T8443] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 2: comm syz.9.1560: lblock 2 mapped to illegal pblock 2 (length 1) [ 203.353398][ T8443] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 48: comm syz.9.1560: lblock 0 mapped to illegal pblock 48 (length 1) [ 203.390503][ T8443] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.1560: Failed to acquire dquot type 0 [ 203.418317][ T8443] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 203.434488][ T8443] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.1560: mark_inode_dirty error [ 203.482301][ T8443] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 203.575573][ T8443] EXT4-fs (loop9): 1 orphan inode deleted [ 203.597846][ T8443] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 203.610791][ T31] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 203.625902][ T31] EXT4-fs error (device loop9): ext4_release_dquot:6973: comm kworker/u8:1: Failed to release dquot type 0 [ 203.670137][ T8443] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #2: block 16: comm syz.9.1560: lblock 0 mapped to illegal pblock 16 (length 1) [ 203.703407][ T8443] netlink: 'syz.9.1560': attribute type 1 has an invalid length. [ 203.711413][ T8443] __nla_validate_parse: 2 callbacks suppressed [ 203.711432][ T8443] netlink: 224 bytes leftover after parsing attributes in process `syz.9.1560'. [ 203.730805][ T6209] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.750948][ T8443] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #2: block 16: comm syz.9.1560: lblock 0 mapped to illegal pblock 16 (length 1) [ 203.765845][ T8461] loop1: detected capacity change from 0 to 1024 [ 203.784898][ T8461] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 203.796172][ T8461] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #4: comm syz.1.1564: pblk 98 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 203.817510][ T3856] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.827084][ T8461] EXT4-fs (loop1): no journal found [ 203.832480][ T8461] EXT4-fs (loop1): can't get journal size [ 203.841054][ T8461] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a054e11c, mo2=0002] [ 203.849794][ T8461] EXT4-fs (loop1): failed to initialize system zone (-117) [ 203.857207][ T8461] EXT4-fs (loop1): mount failed [ 203.916467][ T3873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.926066][ T3873] EXT4-fs error (device loop9): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 203.940124][ T3873] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 203.951510][ T3873] EXT4-fs error (device loop9): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 203.985166][ T8477] loop9: detected capacity change from 0 to 512 [ 203.992502][ T8477] ext4: Bad value for 'max_dir_size_kb' [ 204.059234][ T8483] loop1: detected capacity change from 0 to 512 [ 204.091192][ T8483] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.104569][ T8483] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 204.120793][ T8483] EXT4-fs (loop1): shut down requested (0) [ 204.139981][ T8483] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 204.159806][ T8483] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 204.163602][ T8495] loop6: detected capacity change from 0 to 1024 [ 204.169797][ T8483] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 204.175600][ T8495] EXT4-fs: dax option not supported [ 204.194766][ T8495] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1576'. [ 204.204399][ T8483] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 204.208648][ T8495] loop6: detected capacity change from 0 to 512 [ 204.215975][ T8483] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 204.229998][ T8483] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 204.270615][ T6209] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.297265][ T8506] loop1: detected capacity change from 0 to 1024 [ 204.304186][ T8506] EXT4-fs: Ignoring removed orlov option [ 204.312051][ T8506] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.670184][ T8521] netlink: 'syz.7.1584': attribute type 4 has an invalid length. [ 204.802774][ T8530] loop1: detected capacity change from 0 to 2048 [ 204.810168][ T8530] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 68719476740)! [ 204.821180][ T8530] EXT4-fs (loop1): group descriptors corrupted! [ 204.851567][ T8532] loop1: detected capacity change from 0 to 512 [ 205.069827][ T8532] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 205.132721][ T8532] EXT4-fs (loop1): shut down requested (0) [ 205.141512][ T8551] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1596'. [ 205.153105][ T8532] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 205.159689][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1596'. [ 205.162528][ T8532] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 205.191319][ T8532] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 205.207882][ T8550] netlink: 'syz.8.1597': attribute type 4 has an invalid length. [ 205.208023][ T8532] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 205.226006][ T8532] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=15 [ 205.302238][ T8532] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 205.493234][ T8565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.505049][ T8564] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1602'. [ 205.525709][ T8565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.562998][ T8572] loop1: detected capacity change from 0 to 1024 [ 205.572152][ T8572] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 205.583316][ T8578] loop6: detected capacity change from 0 to 128 [ 205.587115][ T8572] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #4: comm syz.1.1604: pblk 98 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 205.620865][ T8572] EXT4-fs (loop1): no journal found [ 205.626125][ T8572] EXT4-fs (loop1): can't get journal size [ 205.628948][ T8583] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1610'. [ 205.673883][ T8583] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1610'. [ 205.703690][ T8578] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 205.711843][ T8578] FAT-fs (loop6): Filesystem has been set read-only [ 205.743983][ T8572] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a054e11c, mo2=0002] [ 205.762279][ T8572] EXT4-fs (loop1): failed to initialize system zone (-117) [ 205.769755][ T8578] syz.6.1608: attempt to access beyond end of device [ 205.769755][ T8578] loop6: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 205.778118][ T8572] EXT4-fs (loop1): mount failed [ 205.820198][ T8578] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 205.828105][ T8578] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 205.838206][ T8578] syz.6.1608: attempt to access beyond end of device [ 205.838206][ T8578] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 205.863211][ T8577] syz.6.1608: attempt to access beyond end of device [ 205.863211][ T8577] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 205.877263][ T8578] syz.6.1608: attempt to access beyond end of device [ 205.877263][ T8578] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 205.927818][ T8577] syz.6.1608: attempt to access beyond end of device [ 205.927818][ T8577] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 205.974207][ T8592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1613'. [ 205.985543][ T8578] syz.6.1608: attempt to access beyond end of device [ 205.985543][ T8578] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 206.006228][ T8577] syz.6.1608: attempt to access beyond end of device [ 206.006228][ T8577] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 206.030746][ T8578] syz.6.1608: attempt to access beyond end of device [ 206.030746][ T8578] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 206.057355][ T8577] syz.6.1608: attempt to access beyond end of device [ 206.057355][ T8577] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 206.072014][ T8578] syz.6.1608: attempt to access beyond end of device [ 206.072014][ T8578] loop6: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 206.128726][ T8585] buffer_io_error: 14110 callbacks suppressed [ 206.128746][ T8585] Buffer I/O error on dev loop6, logical block 2065, async page read [ 206.152126][ T8585] Buffer I/O error on dev loop6, logical block 2066, async page read [ 206.161660][ T8585] Buffer I/O error on dev loop6, logical block 2067, async page read [ 206.170430][ T8585] Buffer I/O error on dev loop6, logical block 2068, async page read [ 206.170458][ T8585] Buffer I/O error on dev loop6, logical block 2069, async page read [ 206.170479][ T8585] Buffer I/O error on dev loop6, logical block 2070, async page read [ 206.170566][ T8585] Buffer I/O error on dev loop6, logical block 2071, async page read [ 206.170582][ T8585] Buffer I/O error on dev loop6, logical block 2072, async page read [ 206.170621][ T8585] Buffer I/O error on dev loop6, logical block 2065, async page read [ 206.170642][ T8585] Buffer I/O error on dev loop6, logical block 2066, async page read [ 206.207254][ T8616] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 206.305873][ T8624] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8624 comm=syz.1.1627 [ 206.321939][ T8622] netlink: 'syz.7.1626': attribute type 4 has an invalid length. [ 206.426787][ T8639] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1633'. [ 206.436730][ T8639] netlink: 144 bytes leftover after parsing attributes in process `syz.6.1633'. [ 206.448723][ T8628] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8628 comm=syz.7.1629 [ 206.461960][ T8628] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8628 comm=syz.7.1629 [ 206.481733][ T29] kauditd_printk_skb: 779 callbacks suppressed [ 206.481750][ T29] audit: type=1400 audit(1759007910.909:6205): avc: denied { audit_write } for pid=8627 comm="syz.7.1629" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 206.488377][ T8645] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8645 comm=syz.6.1635 [ 206.596320][ T29] audit: type=1326 audit(1759007911.019:6206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8650 comm="syz.6.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5d67eec9 code=0x7ffc0000 [ 206.646025][ T29] audit: type=1326 audit(1759007911.019:6207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8650 comm="syz.6.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f7a5d67eec9 code=0x7ffc0000 [ 206.670298][ T29] audit: type=1326 audit(1759007911.019:6208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8650 comm="syz.6.1639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5d67eec9 code=0x7ffc0000 [ 206.725161][ T8655] loop6: detected capacity change from 0 to 512 [ 206.741941][ T8655] Quota error (device loop6): v2_read_file_info: Free block number 1 out of range (1, 6). [ 206.742346][ T8659] loop1: detected capacity change from 0 to 128 [ 206.761907][ T8659] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 206.763146][ T8655] EXT4-fs warning (device loop6): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 206.770581][ T8659] FAT-fs (loop1): Filesystem has been set read-only [ 206.792896][ T8659] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 206.801370][ T8659] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 206.803418][ T8655] EXT4-fs (loop6): mount failed [ 206.985780][ T8673] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8673 comm=syz.9.1647 [ 207.041995][ T29] audit: type=1326 audit(1759007911.469:6209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8678 comm="syz.9.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee99aceec9 code=0x7ffc0000 [ 207.065901][ T29] audit: type=1326 audit(1759007911.469:6210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8678 comm="syz.9.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee99aceec9 code=0x7ffc0000 [ 207.089363][ T29] audit: type=1326 audit(1759007911.469:6211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8678 comm="syz.9.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7fee99aceec9 code=0x7ffc0000 [ 207.113142][ T29] audit: type=1326 audit(1759007911.469:6212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8678 comm="syz.9.1650" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee99aceec9 code=0x7ffc0000 [ 207.160096][ T8684] loop9: detected capacity change from 0 to 1024 [ 207.172348][ T8684] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 207.184954][ T8684] EXT4-fs error (device loop9): ext4_ext_check_inode:523: inode #4: comm syz.9.1652: pblk 98 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 207.220530][ T8684] EXT4-fs (loop9): no journal found [ 207.225777][ T8684] EXT4-fs (loop9): can't get journal size [ 207.238404][ T8684] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a054e11c, mo2=0002] [ 207.253670][ T8684] EXT4-fs (loop9): failed to initialize system zone (-117) [ 207.261677][ T8684] EXT4-fs (loop9): mount failed [ 207.314358][ T29] audit: type=1326 audit(1759007911.739:6213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8700 comm="syz.9.1658" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee99aceec9 code=0x7ffc0000 [ 207.347020][ T8701] loop9: detected capacity change from 0 to 512 [ 207.354500][ T8701] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 207.363587][ T8701] EXT4-fs (loop9): Invalid default hash set in the superblock [ 207.401471][ T8705] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8705 comm=syz.8.1660 [ 207.508486][ T8714] loop9: detected capacity change from 0 to 1024 [ 207.515430][ T8714] EXT4-fs: Ignoring removed orlov option [ 207.536944][ T8719] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 207.548404][ T8707] IPVS: stopping master sync thread 8719 ... [ 207.686935][ T8726] sctp: [Deprecated]: syz.1.1668 (pid 8726) Use of struct sctp_assoc_value in delayed_ack socket option. [ 207.686935][ T8726] Use struct sctp_sack_info instead [ 207.942397][ T8738] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8738 comm=syz.8.1672 [ 208.077707][ T8740] loop1: detected capacity change from 0 to 512 [ 208.137019][ T8740] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 208.146829][ T8740] EXT4-fs (loop1): Invalid default hash set in the superblock [ 208.200851][ T8746] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 208.373668][ T8752] program syz.8.1678 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 208.384865][ T8752] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 208.527149][ T8755] loop9: detected capacity change from 0 to 512 [ 208.533940][ T8756] loop6: detected capacity change from 0 to 1024 [ 208.534810][ T8755] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 208.551883][ T8756] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 208.564528][ T8756] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #4: comm syz.6.1679: pblk 98 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 208.586501][ T8756] EXT4-fs (loop6): no journal found [ 208.592643][ T8756] EXT4-fs (loop6): can't get journal size [ 208.615701][ T8755] loop9: detected capacity change from 0 to 8192 [ 208.616729][ T8756] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a054e11c, mo2=0002] [ 208.630264][ T8756] EXT4-fs (loop6): failed to initialize system zone (-117) [ 208.637591][ T8756] EXT4-fs (loop6): mount failed [ 208.737136][ T8768] netlink: 'syz.8.1684': attribute type 4 has an invalid length. [ 208.754429][ T8770] loop6: detected capacity change from 0 to 512 [ 208.777751][ T8770] EXT4-fs: Ignoring removed nobh option [ 208.783512][ T8770] EXT4-fs: Ignoring removed orlov option [ 208.814360][ T8770] ext4 filesystem being mounted at /318/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 208.857831][ T8781] pimreg: entered allmulticast mode [ 208.881161][ T8781] pimreg: left allmulticast mode [ 209.042282][ T8790] netlink: 'syz.6.1692': attribute type 4 has an invalid length. [ 209.061279][ T8792] loop9: detected capacity change from 0 to 1024 [ 209.068016][ T8792] EXT4-fs: Ignoring removed bh option [ 209.073547][ T8792] EXT4-fs: inline encryption not supported [ 209.087857][ T8792] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 209.103170][ T8787] loop1: detected capacity change from 0 to 512 [ 209.110751][ T8787] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 209.119979][ T8787] EXT4-fs (loop1): Invalid default hash set in the superblock [ 209.136215][ T8799] __nla_validate_parse: 4 callbacks suppressed [ 209.136313][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1696'. [ 209.140063][ T8792] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 2: comm syz.9.1693: lblock 2 mapped to illegal pblock 2 (length 1) [ 209.166301][ T8792] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 48: comm syz.9.1693: lblock 0 mapped to illegal pblock 48 (length 1) [ 209.191794][ T8792] EXT4-fs error (device loop9): ext4_acquire_dquot:6937: comm syz.9.1693: Failed to acquire dquot type 0 [ 209.208328][ T8792] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 209.228233][ T8792] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.1693: mark_inode_dirty error [ 209.270587][ T8792] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 209.283296][ T8809] loop6: detected capacity change from 0 to 512 [ 209.290994][ T8809] EXT4-fs: Ignoring removed nobh option [ 209.296668][ T8809] EXT4-fs: Ignoring removed orlov option [ 209.302734][ T8792] EXT4-fs (loop9): 1 orphan inode deleted [ 209.318178][ T1084] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 209.338232][ T1084] EXT4-fs error (device loop9): ext4_release_dquot:6973: comm kworker/u8:5: Failed to release dquot type 0 [ 209.353007][ T8792] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #2: block 16: comm syz.9.1693: lblock 0 mapped to illegal pblock 16 (length 1) [ 209.374000][ T8813] pimreg: entered allmulticast mode [ 209.380973][ T8813] pimreg: left allmulticast mode [ 209.387250][ T8809] ext4 filesystem being mounted at /323/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.400762][ T8792] netlink: 'syz.9.1693': attribute type 1 has an invalid length. [ 209.409227][ T8792] netlink: 224 bytes leftover after parsing attributes in process `syz.9.1693'. [ 209.427287][ T8792] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #2: block 16: comm syz.9.1693: lblock 0 mapped to illegal pblock 16 (length 1) [ 209.511339][ T8818] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8818 comm=syz.1.1703 [ 209.586582][ T3873] EXT4-fs error (device loop9): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 209.617455][ T3873] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 209.627328][ T3873] EXT4-fs error (device loop9): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 209.671490][ T8829] netlink: 'syz.7.1707': attribute type 13 has an invalid length. [ 209.671680][ T8827] loop6: detected capacity change from 0 to 1024 [ 209.679520][ T8829] netlink: 'syz.7.1707': attribute type 17 has an invalid length. [ 209.691560][ T8832] netlink: 'syz.9.1706': attribute type 4 has an invalid length. [ 209.717552][ T8829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.718970][ T8827] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 209.727426][ T8829] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.742672][ T8831] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1709'. [ 209.754631][ T8827] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #4: comm syz.6.1708: pblk 98 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 209.774169][ T8829] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 209.791081][ T8827] EXT4-fs (loop6): no journal found [ 209.796421][ T8827] EXT4-fs (loop6): can't get journal size [ 209.819161][ T8827] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a054e11c, mo2=0002] [ 209.844202][ T8827] EXT4-fs (loop6): failed to initialize system zone (-117) [ 209.859127][ T8827] EXT4-fs (loop6): mount failed [ 209.926633][ T8848] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8848 comm=syz.7.1716 [ 209.987158][ T8855] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1719'. [ 210.006654][ T8853] loop1: detected capacity change from 0 to 512 [ 210.022320][ T8853] EXT4-fs: Ignoring removed nobh option [ 210.028322][ T8853] EXT4-fs: Ignoring removed orlov option [ 210.048807][ T8853] EXT4-fs mount: 11 callbacks suppressed [ 210.048825][ T8853] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.072088][ T8853] ext4 filesystem being mounted at /187/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.100301][ T8866] netlink: 'syz.6.1723': attribute type 4 has an invalid length. [ 210.130232][ T8872] loop6: detected capacity change from 0 to 1024 [ 210.137465][ T8872] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 210.148355][ T8872] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #4: comm syz.6.1726: pblk 98 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 210.168757][ T8872] EXT4-fs (loop6): no journal found [ 210.174203][ T8872] EXT4-fs (loop6): can't get journal size [ 210.180344][ T8872] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a054e11c, mo2=0002] [ 210.180636][ T6209] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.188559][ T8872] EXT4-fs (loop6): failed to initialize system zone (-117) [ 210.189510][ T8872] EXT4-fs (loop6): mount failed [ 210.244738][ T8875] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1727'. [ 210.257329][ T8877] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8877 comm=syz.6.1728 [ 210.341597][ T8886] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1732'. [ 210.372410][ T8896] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1736'. [ 210.399885][ T8898] loop1: detected capacity change from 0 to 512 [ 210.406642][ T8898] EXT4-fs: Ignoring removed nobh option [ 210.412356][ T8898] EXT4-fs: Ignoring removed orlov option [ 210.424339][ T8900] loop6: detected capacity change from 0 to 1024 [ 210.429885][ T8898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.432570][ T8900] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 210.443713][ T8898] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 210.454674][ T8900] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #4: comm syz.6.1738: pblk 98 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 210.482581][ T8900] EXT4-fs (loop6): no journal found [ 210.487840][ T8900] EXT4-fs (loop6): can't get journal size [ 210.494390][ T8900] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a054e11c, mo2=0002] [ 210.502661][ T8900] EXT4-fs (loop6): failed to initialize system zone (-117) [ 210.510090][ T8900] EXT4-fs (loop6): mount failed [ 210.515506][ T6209] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.535462][ T8905] netlink: 'syz.1.1739': attribute type 4 has an invalid length. [ 210.560467][ T8907] FAULT_INJECTION: forcing a failure. [ 210.560467][ T8907] name failslab, interval 1, probability 0, space 0, times 0 [ 210.573481][ T8907] CPU: 0 UID: 0 PID: 8907 Comm: syz.6.1740 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 210.573514][ T8907] Tainted: [W]=WARN [ 210.573521][ T8907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 210.573532][ T8907] Call Trace: [ 210.573540][ T8907] [ 210.573548][ T8907] __dump_stack+0x1d/0x30 [ 210.573599][ T8907] dump_stack_lvl+0xe8/0x140 [ 210.573619][ T8907] dump_stack+0x15/0x1b [ 210.573662][ T8907] should_fail_ex+0x265/0x280 [ 210.573685][ T8907] should_failslab+0x8c/0xb0 [ 210.573711][ T8907] kmem_cache_alloc_noprof+0x50/0x310 [ 210.573738][ T8907] ? security_inode_alloc+0x37/0x100 [ 210.573841][ T8907] security_inode_alloc+0x37/0x100 [ 210.573872][ T8907] inode_init_always_gfp+0x4b7/0x500 [ 210.573900][ T8907] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 210.573929][ T8907] alloc_inode+0x58/0x170 [ 210.574073][ T8907] new_inode+0x1d/0xe0 [ 210.574097][ T8907] __debugfs_create_file+0x109/0x330 [ 210.574122][ T8907] debugfs_create_file_full+0x3f/0x60 [ 210.574182][ T8907] ? __pfx_vlan_setup+0x10/0x10 [ 210.574200][ T8907] ref_tracker_dir_debugfs+0x100/0x1e0 [ 210.574313][ T8907] alloc_netdev_mqs+0x1a2/0xa30 [ 210.574338][ T8907] rtnl_create_link+0x239/0x710 [ 210.574362][ T8907] rtnl_newlink_create+0x14c/0x620 [ 210.574470][ T8907] ? security_capable+0x83/0x90 [ 210.574495][ T8907] ? netlink_ns_capable+0x86/0xa0 [ 210.574573][ T8907] rtnl_newlink+0xf29/0x12d0 [ 210.574606][ T8907] ? xas_load+0x413/0x430 [ 210.574633][ T8907] ? __rcu_read_unlock+0x4f/0x70 [ 210.574653][ T8907] ? xa_load+0xb1/0xe0 [ 210.574737][ T8907] ? __rcu_read_unlock+0x4f/0x70 [ 210.574757][ T8907] ? avc_has_perm_noaudit+0x1b1/0x200 [ 210.574783][ T8907] ? cred_has_capability+0x210/0x280 [ 210.574807][ T8907] ? selinux_capable+0x31/0x40 [ 210.574896][ T8907] ? security_capable+0x83/0x90 [ 210.574918][ T8907] ? ns_capable+0x7d/0xb0 [ 210.574937][ T8907] ? __pfx_rtnl_newlink+0x10/0x10 [ 210.574964][ T8907] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 210.574996][ T8907] ? avc_has_perm_noaudit+0x1b1/0x200 [ 210.575023][ T8907] netlink_rcv_skb+0x123/0x220 [ 210.575042][ T8907] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 210.575113][ T8907] rtnetlink_rcv+0x1c/0x30 [ 210.575137][ T8907] netlink_unicast+0x5bd/0x690 [ 210.575157][ T8907] netlink_sendmsg+0x58b/0x6b0 [ 210.575181][ T8907] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.575203][ T8907] __sock_sendmsg+0x145/0x180 [ 210.575296][ T8907] ____sys_sendmsg+0x31e/0x4e0 [ 210.575321][ T8907] ___sys_sendmsg+0x17b/0x1d0 [ 210.575356][ T8907] __x64_sys_sendmsg+0xd4/0x160 [ 210.575382][ T8907] x64_sys_call+0x191e/0x2ff0 [ 210.575465][ T8907] do_syscall_64+0xd2/0x200 [ 210.575552][ T8907] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 210.575576][ T8907] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 210.575602][ T8907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.575697][ T8907] RIP: 0033:0x7f7a5d67eec9 [ 210.575712][ T8907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 210.575739][ T8907] RSP: 002b:00007f7a5c0df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.575820][ T8907] RAX: ffffffffffffffda RBX: 00007f7a5d8d5fa0 RCX: 00007f7a5d67eec9 [ 210.575832][ T8907] RDX: 0000000008000002 RSI: 0000200000000000 RDI: 0000000000000003 [ 210.575844][ T8907] RBP: 00007f7a5c0df090 R08: 0000000000000000 R09: 0000000000000000 [ 210.575856][ T8907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.575868][ T8907] R13: 00007f7a5d8d6038 R14: 00007f7a5d8d5fa0 R15: 00007ffd1aadd478 [ 210.575886][ T8907] [ 210.576003][ T8907] debugfs: out of free dentries, can not create file 'netdev@ffff88810bc3b550' [ 210.942885][ T8907] vlan2: entered promiscuous mode [ 210.948215][ T8907] syz_tun: entered promiscuous mode [ 210.960912][ T8909] pimreg: entered allmulticast mode [ 210.975014][ T8910] pimreg: left allmulticast mode [ 210.987861][ T8920] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 211.023050][ T8923] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1746'. [ 211.032276][ T8923] netlink: 'syz.9.1746': attribute type 2 has an invalid length. [ 211.040887][ T8923] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1746'. [ 211.096601][ T8933] loop6: detected capacity change from 0 to 1024 [ 211.119364][ T8933] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 211.124733][ T8937] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1750'. [ 211.145852][ T8933] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #4: comm syz.6.1751: pblk 98 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 211.220743][ T8933] EXT4-fs (loop6): no journal found [ 211.226091][ T8933] EXT4-fs (loop6): can't get journal size [ 211.242153][ T8933] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a054e11c, mo2=0002] [ 211.250708][ T8933] EXT4-fs (loop6): failed to initialize system zone (-117) [ 211.258264][ T8933] EXT4-fs (loop6): mount failed [ 211.272858][ T8937] IPVS: Unknown mcast interface: [ 211.332993][ T8966] loop6: detected capacity change from 0 to 1024 [ 211.340751][ T8966] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 211.394653][ T8976] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 211.407441][ T8978] selinux_netlink_send: 1 callbacks suppressed [ 211.407540][ T8978] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=8978 comm=syz.8.1767 [ 211.457436][ T8982] loop9: detected capacity change from 0 to 512 [ 211.487824][ T8984] netlink: 'syz.8.1770': attribute type 1 has an invalid length. [ 211.504369][ T8988] loop1: detected capacity change from 0 to 1024 [ 211.511995][ T8988] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 211.523218][ T8988] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #4: comm syz.1.1771: pblk 98 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 211.543306][ T8988] EXT4-fs (loop1): no journal found [ 211.549023][ T8988] EXT4-fs (loop1): can't get journal size [ 211.555452][ T8988] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a054e11c, mo2=0002] [ 211.564761][ T8988] EXT4-fs (loop1): failed to initialize system zone (-117) [ 211.572400][ T8988] EXT4-fs (loop1): mount failed [ 211.588097][ T29] kauditd_printk_skb: 695 callbacks suppressed [ 211.588117][ T29] audit: type=1326 audit(1759007916.009:6906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8980 comm="syz.9.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fee99acdb2a code=0x7ffc0000 [ 211.618129][ T29] audit: type=1326 audit(1759007916.009:6907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8980 comm="syz.9.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fee99acdb2a code=0x7ffc0000 [ 211.641404][ T29] audit: type=1326 audit(1759007916.009:6908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8980 comm="syz.9.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fee99acd617 code=0x7ffc0000 [ 211.665305][ T29] audit: type=1326 audit(1759007916.009:6909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8980 comm="syz.9.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fee99ad066a code=0x7ffc0000 [ 211.674625][ T8982] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.1768: bad orphan inode 11862016 [ 211.701264][ T29] audit: type=1326 audit(1759007916.079:6910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8990 comm="syz.6.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5d67eec9 code=0x7ffc0000 [ 211.712590][ T8982] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 211.725486][ T29] audit: type=1326 audit(1759007916.079:6911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8990 comm="syz.6.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f7a5d67eec9 code=0x7ffc0000 [ 211.740040][ T8982] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 211.762009][ T29] audit: type=1326 audit(1759007916.079:6912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8990 comm="syz.6.1772" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a5d67eec9 code=0x7ffc0000 [ 211.797212][ T29] audit: type=1326 audit(1759007916.209:6913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8980 comm="syz.9.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fee99acd710 code=0x7ffc0000 [ 211.821697][ T29] audit: type=1326 audit(1759007916.209:6914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8980 comm="syz.9.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fee99acdc17 code=0x7ffc0000 [ 211.845231][ T29] audit: type=1326 audit(1759007916.209:6915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8980 comm="syz.9.1768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fee99acd710 code=0x7ffc0000 [ 211.895346][ T8982] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #20: comm syz.9.1768: corrupted inode contents [ 211.907624][ T8982] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #20: comm syz.9.1768: mark_inode_dirty error [ 211.956893][ T8982] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #20: comm syz.9.1768: corrupted inode contents [ 211.999261][ T8982] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2991: inode #20: comm syz.9.1768: mark_inode_dirty error [ 212.023228][ T9019] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9019 comm=syz.6.1781 [ 212.039442][ T9023] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9023 comm=syz.8.1784 [ 212.066797][ T8982] EXT4-fs error (device loop9): ext4_xattr_delete_inode:2994: inode #20: comm syz.9.1768: mark inode dirty (error -117) [ 212.087921][ T9028] netlink: 'syz.8.1785': attribute type 4 has an invalid length. [ 212.091762][ T8982] EXT4-fs warning (device loop9): ext4_evict_inode:274: xattr delete (err -117) [ 212.171751][ T9036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9036 comm=syz.8.1789 [ 212.195681][ T3873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 212.248169][ T9039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.257044][ T9039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.324333][ T9050] loop9: detected capacity change from 0 to 128 [ 212.386193][ T9050] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 212.394554][ T9050] FAT-fs (loop9): Filesystem has been set read-only [ 212.401805][ T9050] bio_check_eod: 14427 callbacks suppressed [ 212.401825][ T9050] syz.9.1791: attempt to access beyond end of device [ 212.401825][ T9050] loop9: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 212.421576][ T9050] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 212.429592][ T9050] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 212.478285][ T9052] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9052 comm=syz.8.1796 [ 212.500258][ T9050] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 212.531392][ T9050] syz.9.1791: attempt to access beyond end of device [ 212.531392][ T9050] loop9: rw=524288, sector=2065, nr_sectors = 8 limit=128 [ 212.558618][ T9056] syz.9.1791: attempt to access beyond end of device [ 212.558618][ T9056] loop9: rw=0, sector=2065, nr_sectors = 1 limit=128 [ 212.560306][ T9059] FAULT_INJECTION: forcing a failure. [ 212.560306][ T9059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.571902][ T9056] buffer_io_error: 12974 callbacks suppressed [ 212.571920][ T9056] Buffer I/O error on dev loop9, logical block 2065, async page read [ 212.585075][ T9059] CPU: 1 UID: 0 PID: 9059 Comm: syz.8.1797 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 212.585123][ T9059] Tainted: [W]=WARN [ 212.585132][ T9059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 212.585146][ T9059] Call Trace: [ 212.585154][ T9059] [ 212.585162][ T9059] __dump_stack+0x1d/0x30 [ 212.585250][ T9059] dump_stack_lvl+0xe8/0x140 [ 212.585271][ T9059] dump_stack+0x15/0x1b [ 212.585288][ T9059] should_fail_ex+0x265/0x280 [ 212.585427][ T9059] should_fail+0xb/0x20 [ 212.585523][ T9059] should_fail_usercopy+0x1a/0x20 [ 212.585550][ T9059] _copy_to_user+0x20/0xa0 [ 212.585582][ T9059] simple_read_from_buffer+0xb5/0x130 [ 212.585676][ T9059] proc_fail_nth_read+0x10e/0x150 [ 212.585705][ T9059] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 212.585732][ T9059] vfs_read+0x1a5/0x770 [ 212.585761][ T9059] ? __rcu_read_unlock+0x4f/0x70 [ 212.585813][ T9059] ? __fget_files+0x184/0x1c0 [ 212.585836][ T9059] ? do_symlinkat+0x2a5/0x3c0 [ 212.585894][ T9059] ksys_read+0xda/0x1a0 [ 212.585918][ T9059] __x64_sys_read+0x40/0x50 [ 212.585941][ T9059] x64_sys_call+0x27bc/0x2ff0 [ 212.586001][ T9059] do_syscall_64+0xd2/0x200 [ 212.586031][ T9059] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 212.586121][ T9059] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 212.586173][ T9059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.586196][ T9059] RIP: 0033:0x7f230660d8dc [ 212.586213][ T9059] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 212.586288][ T9059] RSP: 002b:00007f2305077030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 212.586310][ T9059] RAX: ffffffffffffffda RBX: 00007f2306865fa0 RCX: 00007f230660d8dc [ 212.586324][ T9059] RDX: 000000000000000f RSI: 00007f23050770a0 RDI: 0000000000000004 [ 212.586337][ T9059] RBP: 00007f2305077090 R08: 0000000000000000 R09: 0000000000000000 [ 212.586350][ T9059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 212.586363][ T9059] R13: 00007f2306866038 R14: 00007f2306865fa0 R15: 00007ffd93964778 [ 212.586383][ T9059] [ 212.633913][ T9050] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 212.660833][ T9056] syz.9.1791: attempt to access beyond end of device [ 212.660833][ T9056] loop9: rw=0, sector=2066, nr_sectors = 1 limit=128 [ 212.663831][ T9050] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 212.669266][ T9056] Buffer I/O error on dev loop9, logical block 2066, async page read [ 212.850528][ T9056] syz.9.1791: attempt to access beyond end of device [ 212.850528][ T9056] loop9: rw=0, sector=2067, nr_sectors = 1 limit=128 [ 212.863897][ T9056] Buffer I/O error on dev loop9, logical block 2067, async page read [ 212.872155][ T9056] syz.9.1791: attempt to access beyond end of device [ 212.872155][ T9056] loop9: rw=0, sector=2068, nr_sectors = 1 limit=128 [ 212.885585][ T9056] Buffer I/O error on dev loop9, logical block 2068, async page read [ 212.893802][ T9056] syz.9.1791: attempt to access beyond end of device [ 212.893802][ T9056] loop9: rw=0, sector=2069, nr_sectors = 1 limit=128 [ 212.907175][ T9056] Buffer I/O error on dev loop9, logical block 2069, async page read [ 212.915396][ T9056] syz.9.1791: attempt to access beyond end of device [ 212.915396][ T9056] loop9: rw=0, sector=2070, nr_sectors = 1 limit=128 [ 212.929311][ T9056] Buffer I/O error on dev loop9, logical block 2070, async page read [ 212.938335][ T9056] syz.9.1791: attempt to access beyond end of device [ 212.938335][ T9056] loop9: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 212.951708][ T9056] Buffer I/O error on dev loop9, logical block 2071, async page read [ 212.960792][ T9056] syz.9.1791: attempt to access beyond end of device [ 212.960792][ T9056] loop9: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 212.974073][ T9056] Buffer I/O error on dev loop9, logical block 2072, async page read [ 212.984006][ T9050] Buffer I/O error on dev loop9, logical block 2065, async page read [ 212.993083][ T9050] Buffer I/O error on dev loop9, logical block 2066, async page read [ 213.061202][ T9068] bond0: (slave dummy0): Releasing backup interface [ 213.075876][ T9068] bridge_slave_0: left allmulticast mode [ 213.081658][ T9068] bridge_slave_0: left promiscuous mode [ 213.087390][ T9068] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.104380][ T9068] bridge_slave_1: left allmulticast mode [ 213.110191][ T9068] bridge_slave_1: left promiscuous mode [ 213.115888][ T9068] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.145657][ T9068] bond0: (slave bond_slave_0): Releasing backup interface [ 213.155626][ T9068] bond0: (slave bond_slave_1): Releasing backup interface [ 213.167656][ T9068] team0: Port device team_slave_0 removed [ 213.177424][ T9068] team0: Port device team_slave_1 removed [ 213.185111][ T9068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.192554][ T9068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.205625][ T9068] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.213088][ T9068] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.231328][ T9068] bond1: (slave geneve2): Releasing active interface [ 213.241729][ T9072] loop1: detected capacity change from 0 to 512 [ 213.250579][ T9072] EXT4-fs: Ignoring removed nobh option [ 213.256239][ T9072] EXT4-fs: Ignoring removed orlov option [ 213.390066][ T9072] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.453511][ T9072] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.510657][ T6209] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.893251][ T9116] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9116 comm=syz.6.1818 [ 214.001292][ T9122] loop6: detected capacity change from 0 to 512 [ 214.025776][ T9122] EXT4-fs: Ignoring removed nobh option [ 214.031522][ T9122] EXT4-fs: Ignoring removed orlov option [ 214.073105][ T9122] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.087646][ T9122] ext4 filesystem being mounted at /349/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.121016][ T3856] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.221778][ T9138] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9138 comm=syz.6.1825 [ 214.323851][ T9144] __nla_validate_parse: 26 callbacks suppressed [ 214.323869][ T9144] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1830'. [ 214.366214][ T9147] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9147 comm=syz.6.1831 [ 214.384196][ T9152] loop9: detected capacity change from 0 to 512 [ 214.392294][ T9144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1830'. [ 214.460943][ T9152] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.484439][ T9152] ext4 filesystem being mounted at /300/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.532377][ T9169] loop6: detected capacity change from 0 to 512 [ 214.542779][ T9173] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9173 comm=syz.1.1843 [ 214.602515][ T9169] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.1840: bad orphan inode 11862016 [ 214.615011][ T3873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.625762][ T9169] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 214.658353][ T9169] ext4 filesystem being mounted at /353/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 214.672978][ T9187] netlink: 'syz.7.1846': attribute type 21 has an invalid length. [ 214.674760][ T9186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1848'. [ 214.680979][ T9187] netlink: 156 bytes leftover after parsing attributes in process `syz.7.1846'. [ 214.713185][ T9189] loop9: detected capacity change from 0 to 128 [ 214.723740][ T9189] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 214.731615][ T9189] FAT-fs (loop9): Filesystem has been set read-only [ 214.739783][ T9189] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 214.747623][ T9189] FAT-fs (loop9): error, invalid access to FAT (entry 0x00000100) [ 214.802909][ T9186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1848'. [ 214.851951][ T9169] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #20: comm syz.6.1840: corrupted inode contents [ 214.912992][ T9169] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #20: comm syz.6.1840: mark_inode_dirty error [ 214.955762][ T9169] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #20: comm syz.6.1840: corrupted inode contents [ 215.057921][ T9195] loop1: detected capacity change from 0 to 1024 [ 215.091815][ T9195] EXT4-fs: Ignoring removed orlov option [ 215.102327][ T9169] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2991: inode #20: comm syz.6.1840: mark_inode_dirty error [ 215.124946][ T9195] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.197479][ T9169] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2994: inode #20: comm syz.6.1840: mark inode dirty (error -117) [ 215.323782][ T9169] EXT4-fs warning (device loop6): ext4_evict_inode:274: xattr delete (err -117) [ 215.435199][ T9204] FAULT_INJECTION: forcing a failure. [ 215.435199][ T9204] name failslab, interval 1, probability 0, space 0, times 0 [ 215.448666][ T9204] CPU: 1 UID: 0 PID: 9204 Comm: syz.7.1851 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 215.448772][ T9204] Tainted: [W]=WARN [ 215.448779][ T9204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 215.448790][ T9204] Call Trace: [ 215.448798][ T9204] [ 215.448808][ T9204] __dump_stack+0x1d/0x30 [ 215.448829][ T9204] dump_stack_lvl+0xe8/0x140 [ 215.448848][ T9204] dump_stack+0x15/0x1b [ 215.448940][ T9204] should_fail_ex+0x265/0x280 [ 215.448996][ T9204] should_failslab+0x8c/0xb0 [ 215.449020][ T9204] kmem_cache_alloc_noprof+0x50/0x310 [ 215.449051][ T9204] ? security_inode_alloc+0x37/0x100 [ 215.449155][ T9204] security_inode_alloc+0x37/0x100 [ 215.449260][ T9204] inode_init_always_gfp+0x4b7/0x500 [ 215.449284][ T9204] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 215.449307][ T9204] alloc_inode+0x58/0x170 [ 215.449328][ T9204] new_inode+0x1d/0xe0 [ 215.449376][ T9204] shmem_get_inode+0x244/0x750 [ 215.449403][ T9204] __shmem_file_setup+0x113/0x210 [ 215.449465][ T9204] shmem_file_setup+0x3b/0x50 [ 215.449504][ T9204] __se_sys_memfd_create+0x2c3/0x590 [ 215.449532][ T9204] __x64_sys_memfd_create+0x31/0x40 [ 215.449634][ T9204] x64_sys_call+0x2abe/0x2ff0 [ 215.449661][ T9204] do_syscall_64+0xd2/0x200 [ 215.449777][ T9204] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 215.449808][ T9204] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 215.449876][ T9204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.449902][ T9204] RIP: 0033:0x7f2ee44deec9 [ 215.449979][ T9204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.449997][ T9204] RSP: 002b:00007f2ee2f3ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 215.450017][ T9204] RAX: ffffffffffffffda RBX: 00000000000004bc RCX: 00007f2ee44deec9 [ 215.450065][ T9204] RDX: 00007f2ee2f3eef0 RSI: 0000000000000000 RDI: 00007f2ee4562960 [ 215.450077][ T9204] RBP: 0000200000000a40 R08: 00007f2ee2f3ebb7 R09: 00007f2ee2f3ee40 [ 215.450089][ T9204] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000500 [ 215.450126][ T9204] R13: 00007f2ee2f3eef0 R14: 00007f2ee2f3eeb0 R15: 0000200000000540 [ 215.450148][ T9204] [ 215.739737][ T6209] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.770267][ T3856] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 215.786798][ T9215] FAULT_INJECTION: forcing a failure. [ 215.786798][ T9215] name failslab, interval 1, probability 0, space 0, times 0 [ 215.799719][ T9215] CPU: 0 UID: 0 PID: 9215 Comm: syz.1.1852 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 215.799757][ T9215] Tainted: [W]=WARN [ 215.799806][ T9215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 215.799877][ T9215] Call Trace: [ 215.799885][ T9215] [ 215.799892][ T9215] __dump_stack+0x1d/0x30 [ 215.799913][ T9215] dump_stack_lvl+0xe8/0x140 [ 215.799956][ T9215] dump_stack+0x15/0x1b [ 215.799977][ T9215] should_fail_ex+0x265/0x280 [ 215.800003][ T9215] should_failslab+0x8c/0xb0 [ 215.800031][ T9215] kmem_cache_alloc_node_noprof+0x57/0x320 [ 215.800117][ T9215] ? __alloc_skb+0x101/0x320 [ 215.800141][ T9215] __alloc_skb+0x101/0x320 [ 215.800163][ T9215] netlink_alloc_large_skb+0xba/0xf0 [ 215.800269][ T9215] netlink_sendmsg+0x3cf/0x6b0 [ 215.800298][ T9215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.800325][ T9215] __sock_sendmsg+0x145/0x180 [ 215.800404][ T9215] ____sys_sendmsg+0x31e/0x4e0 [ 215.800494][ T9215] ___sys_sendmsg+0x17b/0x1d0 [ 215.800531][ T9215] __x64_sys_sendmsg+0xd4/0x160 [ 215.800562][ T9215] x64_sys_call+0x191e/0x2ff0 [ 215.800586][ T9215] do_syscall_64+0xd2/0x200 [ 215.800638][ T9215] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 215.800665][ T9215] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 215.800732][ T9215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.800756][ T9215] RIP: 0033:0x7ff9117beec9 [ 215.800775][ T9215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.800836][ T9215] RSP: 002b:00007ff910227038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.800860][ T9215] RAX: ffffffffffffffda RBX: 00007ff911a15fa0 RCX: 00007ff9117beec9 [ 215.800875][ T9215] RDX: 0000000000000000 RSI: 0000200000001280 RDI: 0000000000000003 [ 215.800888][ T9215] RBP: 00007ff910227090 R08: 0000000000000000 R09: 0000000000000000 [ 215.800973][ T9215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.800987][ T9215] R13: 00007ff911a16038 R14: 00007ff911a15fa0 R15: 00007ffc4353f1f8 [ 215.801008][ T9215] [ 215.802579][ T9213] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=9213 comm=syz.7.1857 [ 216.055617][ T9228] loop9: detected capacity change from 0 to 512 [ 216.096481][ T9228] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.119600][ T9228] ext4 filesystem being mounted at /303/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.130960][ T9238] loop1: detected capacity change from 0 to 1024 [ 216.137666][ T9238] EXT4-fs: Ignoring removed orlov option [ 216.160767][ T9228] EXT4-fs (loop9): shut down requested (0) [ 216.171608][ T9245] loop6: detected capacity change from 0 to 128 [ 216.172725][ T9238] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.199302][ T9245] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 216.207229][ T9245] FAT-fs (loop6): Filesystem has been set read-only [ 216.225911][ T9252] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 216.235845][ T9245] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 216.244060][ T9245] FAT-fs (loop6): error, invalid access to FAT (entry 0x00000100) [ 216.263026][ T9252] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 216.275825][ T9254] ================================================================== [ 216.283961][ T9254] BUG: KCSAN: data-race in vfs_fsync_range / writeback_single_inode [ 216.292071][ T9254] [ 216.294416][ T9254] write to 0xffff88811a0d1bb0 of 4 bytes by task 9238 on cpu 1: [ 216.302150][ T9254] writeback_single_inode+0x14a/0x3e0 [ 216.307650][ T9254] sync_inode_metadata+0x5b/0x90 [ 216.312690][ T9254] generic_buffers_fsync_noflush+0xd9/0x120 [ 216.318728][ T9254] ext4_sync_file+0x1ab/0x690 [ 216.323415][ T9254] vfs_fsync_range+0x10a/0x130 [ 216.328193][ T9254] ext4_buffered_write_iter+0x34f/0x3c0 [ 216.333784][ T9254] ext4_file_write_iter+0x383/0xf00 [ 216.338998][ T9254] iter_file_splice_write+0x666/0xa60 [ 216.344459][ T9254] direct_splice_actor+0x156/0x2a0 [ 216.349579][ T9254] splice_direct_to_actor+0x312/0x680 [ 216.354956][ T9254] do_splice_direct+0xda/0x150 [ 216.359977][ T9254] do_sendfile+0x380/0x650 [ 216.364424][ T9254] __x64_sys_sendfile64+0x105/0x150 [ 216.369659][ T9254] x64_sys_call+0x2bb0/0x2ff0 [ 216.374362][ T9254] do_syscall_64+0xd2/0x200 [ 216.378897][ T9254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.384912][ T9254] [ 216.387324][ T9254] read to 0xffff88811a0d1bb0 of 4 bytes by task 9254 on cpu 0: [ 216.394919][ T9254] vfs_fsync_range+0x9b/0x130 [ 216.399608][ T9254] ext4_buffered_write_iter+0x34f/0x3c0 [ 216.405173][ T9254] ext4_file_write_iter+0x383/0xf00 [ 216.410564][ T9254] iter_file_splice_write+0x666/0xa60 [ 216.416042][ T9254] direct_splice_actor+0x156/0x2a0 [ 216.421424][ T9254] splice_direct_to_actor+0x312/0x680 [ 216.426814][ T9254] do_splice_direct+0xda/0x150 [ 216.431590][ T9254] do_sendfile+0x380/0x650 [ 216.436024][ T9254] __x64_sys_sendfile64+0x105/0x150 [ 216.441331][ T9254] x64_sys_call+0x2bb0/0x2ff0 [ 216.446023][ T9254] do_syscall_64+0xd2/0x200 [ 216.450591][ T9254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.456684][ T9254] [ 216.459019][ T9254] value changed: 0x00000038 -> 0x00000002 [ 216.464738][ T9254] [ 216.467071][ T9254] Reported by Kernel Concurrency Sanitizer on: [ 216.473226][ T9254] CPU: 0 UID: 0 PID: 9254 Comm: syz.1.1865 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 216.484540][ T9254] Tainted: [W]=WARN [ 216.488439][ T9254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 216.498604][ T9254] ================================================================== [ 216.533397][ T3873] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.672110][ T6209] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.