last executing test programs: 3m53.916437809s ago: executing program 32 (id=322): pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) connect$inet(r1, &(0x7f0000000300)={0x2, 0x0, @remote}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0xa) 3m41.537713767s ago: executing program 33 (id=508): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r4}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYRESHEX=0x0, @ANYRES32=0x1, @ANYBLOB="0000000000000000000000008000000000000000", @ANYRESOCT=r6, @ANYRES32, @ANYBLOB="000000004000000001"], 0x48) close(r3) perf_event_open(&(0x7f0000000380)={0x3, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0xc, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x8810, 0xc8, 0x100000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x40) write$cgroup_subtree(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce8111036c00fe08000000000200875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x3, 0x1000002, 0x0, 0x1, "d52c2000000102000300ecffffff0100"}) r8 = syz_open_pts(r1, 0x0) ioctl$TCSBRK(r8, 0x5409, 0x9) r9 = dup(r0) write$UHID_INPUT(r9, &(0x7f0000002080)={0xc, {"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", 0xfffffffffffffedd}}, 0x1006) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x40, 0x2, 0x6, 0x201, 0x0, 0x0, {0xd, 0x0, 0x2}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0x8050) r11 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r11, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r12 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r12, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) close(r11) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r7) sendmsg$ETHTOOL_MSG_DEBUG_SET(r9, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0x1c0, r13, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x1ac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xee, 0x5, "54303eed0ac6aa418e332b4cae062af73490efdfeaa628575549f6136279b00513b9384177ee40d500e8eb6b4dd38f585c8bd6ec2e3fba9248703cd297ab65918d1adb41d86dd38943c60ae4d871bac09543ba7b53a5950c5f96fe7f6d32a043a7f0401535fffaf4e6d488cd02d24b760f1fa10b0dc2544fc6cb2859c2f258888a4bdb7e25e7687ee3f18cae2a34f3cec56e7b7d33f2ab8bde209089241fbf35ef4a693a3db025d11e5807c39c4fce1e51583699e2ae7b1b4cdb5fb106a51b1d611aa938a552a403ea6a2f0445b2272091ae2f690816498696c7d010a5257c4a6c81fbe2db17e3c2caea"}, @ETHTOOL_A_BITSET_MASK={0xa4, 0x5, "d4a1bba943a33194751e326cf09f891becaace76bd02f1ff47dc51eb88d18d7208125c6bfdd98d14876cd78f4eab61de02a3311eb519678bd7ebd1623bd31d4e6657c4b9824e001e7ec813040ab324575fc0c48683f88aba475a49a88291900be9eb50872fd9b6a0bf2eaacadc811a1dc70eaea4a961da029a02206a597384f1cd3543b7348407a667f30be3643e65a1041dde584a54406843e8a12da7f30bdf"}]}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x10802}, 0xc000) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000600)=@newtaction={0x44, 0x76, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [{0x30, 0x1, [@m_nat={0x2c, 0xe, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}]}]}, 0x44}}, 0x0) 2m20.306375461s ago: executing program 34 (id=2013): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000040)=@hopopts={0x2c}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1cd9, 0x9}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000380)='cpu') r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x1c, r5, 0xc4fc9e906872338b, 0x70bd2c, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x4c002) syz_emit_ethernet(0x66, &(0x7f00000068c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6007000000303a00fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r8}, 0x20) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, r10, 0x4234, '\x00', r9, r11, 0x3}, 0x50) r12 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r12, 0x4b47, &(0x7f0000000580)={0x8, 0x8, 0xde0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[@ANYBLOB="35230000000000002c0012800b0001006d616373656300001c00028005000b00000000000500060000000000080005000c00000008000500", @ANYBLOB="5c0000004bbf50202f244a05a74245ff5a100083050000242afedbdf250039ae9f6fcf94c2cdd88d54a96d95b4bc2336d36ab9b08fdf3e8d7e3de72054eeab7e81f6368f527774c0b5094ee43d50bd17b9c3d326569b3366bf86809a5f0465b032dcfd80dc39e64d6fd51687e8c8b87e7c0a574880cd6afee0d59b1929e80f983e45a8dc2a44221ed015143eb10cb10a362c2949432536fee3f6392c36c6e84906ea8b4c51c8603e4948dc3c8dfc8a7273b2d761094044d97c593c58c4a0a05e25dcc7dcb7d7c2ad10", @ANYRES32=r9, @ANYBLOB="345756fa54736ba0ba3ed80b29018f929b6360bade17fa048c5fd3fba1cc3a8acb08832fbf289c74b2a6bd6be15022a433dfa6ba445c14556f9dcfb5cee12876cd4cf0feef5a62aaf6cbc15969e53e188427aaef483a9702978977404ed878076325506b74bec5a6d711f365cfe9aba1f4", @ANYRES64=r3, @ANYRES64=r2, @ANYRES8=r1, @ANYRES64=r0, @ANYRES8=r9], 0x5c}}, 0x0) unshare(0x62040200) 2m7.971168466s ago: executing program 7 (id=2176): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r2) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c40002"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) 2m7.910562731s ago: executing program 7 (id=2179): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="02000000040000000800000001000000800000003381a190d2b5ba32815f5ba477fd8a073c844fb3198a0df556fbc53a71eb4658c748b7439b0b7a9f1a99c6d1090f34085a58c44a2b3aa0bc34b2b61535a6854e5271f0743c52e6118effb05b241f68e0e32cf1b22e71d62799b48a225f9ff366e35ea7135f542ce674d191a62b0b5bda54", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000800000000000000950000009500000000000000"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xb, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0xfc}}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x94) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) ioctl$TUNATTACHFILTER(r7, 0x401054d5, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x8, 0x7, 0xea}, {0x9, 0x6, 0x80, 0x18}, {0x82, 0x0, 0x7f, 0x7fff}, {0x6, 0x3, 0x1, 0xffff}, {0xd, 0x2, 0x5}, {0x2, 0x5, 0x0, 0x7237}, {0xc16, 0x8, 0x8, 0x73}]}) syslog(0x9, &(0x7f0000000300)=""/204, 0xcc) ioctl$KDFONTOP_GET(r7, 0x4b72, &(0x7f00000000c0)={0x1, 0x1, 0x19, 0xf, 0x87, &(0x7f0000000f00)}) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r8}, 0x10) request_key(0x0, 0x0, 0x0, 0x0) r9 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r9, 0xa, 0x13) fcntl$setlease(r9, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYRES64=r1], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095", @ANYRES64, @ANYRESDEC=r9], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='track_foreign_dirty\x00', r11, 0x0, 0x2}, 0x18) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r9, 0x400, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) 2m7.560071609s ago: executing program 7 (id=2185): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000080000000a90000000030a0300000000000000000002e000000c00020000000000000000010900010073797a30"], 0xb8}}, 0x0) 2m7.486310635s ago: executing program 7 (id=2186): openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000240)={0x8, 0x248}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000600)={[{@usrjquota}, {@minixdf}, {@init_itable}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x444, &(0x7f0000000980)="$eJzs3MtvG8UfAPDv2nHS5y/5lfJoaCFQEBGPpEkf9MAFBBIHkJC4FHEKSVqFpg1qgkSrCAKHcESVuCOOSPwFnOCCgBMSV7ijShXKpYWT0dq7qZvYaZw4del+PtLGM96xZr67O/bsjJ0ACmso/ZNE7IuI3yOiv569vcBQ/eHmyuLk3yuLk0lUq2//ldTK3VhZnMyL5q/bW89Uq1m+r0m9y+9GTMzOTl/K8qMLFz4Ynb985YWZCxPnps9NXxw/ffrE8SO9p8ZPdiTONK4bgx/PHT70+jtX35w8c/W9n79N27sv298YR6cM1Y9uU09XOl1bd+1vSCc9XWwIbSlHRHq6KrX+3x/l2L26rz9e+6yrjQN2VLVarTb7fM4sVYH7WBLdbgHQHfkHfXr/m293aehxT7j+cv0GKI37ZrbV9/REKStTWXN/20lDEXFm6Z+v0i12aB4CAKDR9+n45/lm479SPNRQ7n/ZGspARPw/Ig5ExAMRcTAiHoyolX04Ih5ps/61KyTrxz+la1sKbJPS8d9L2drW7eO/fPQXA+Ust78WfyU5OzM7fSw7JsNR6UvzYxvU8cOrv33Ral/j+C/d0vrzsWDWjms9aybopiYWJrYTc6Prn0YM9jSLP4l8GSeJiEMRMbjFOmae/eZwq313jn8DHVhnqn4d8Uz9/C/FmvhzScv1ybEXT42fHN0Vs9PHRvOrYr1ffl1+q1X924q/A9Lzv6fp9b8a/0CyK2L+8pXztfXa+fbrWP7j85b3NFu7/mdWG9ebPX40sbBwaSyiN3lj/fPjt16b5/PyafzDR5v3/wNx60g8GhHpRXwkIh6LiMeztj8REU9GxNEN4v/plafebz/+DWblOyiNf+pO5z8az3/7ifL5H79rP/5cev5P1FLD2TObef/bbAO3c+wAAADgv6JU+w58UhpZTZdKIyP17/AfjD1LMTe/8NzZuQ8vTtW/Kz8QlVI+09XfMB86ls0N5/nxNfnj2bzxl+XdtfzI5NzsVLeDh4Lb26L/p/4sd7t1wI7zey0oLv0fikv/h+LS/6G49H8ormb9/5MutAO4+3z+Q3Hp/1Bc+j8Ul/4PhdTyt/Glbf3kf7uJpBuVSrSTiNI90Yz7P9Gz6X9mscVEX9Nd3X5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6Ix/AwAA//+UFuN0") chdir(&(0x7f0000000240)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x25, 0x1, 0x0, 0x67, 0x0, 0xfffffffffffffe00, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f00000004c0)}, 0x0, 0x800000000000, 0xe4e6ee93, 0x0, 0x8, 0x20005, 0x9, 0x0, 0xfffffffe, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 2m7.163059081s ago: executing program 7 (id=2190): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000240)={0x8, 0x248}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000600)={[{@usrjquota}, {@minixdf}, {@init_itable}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x444, &(0x7f0000000980)="$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") chdir(&(0x7f0000000240)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r3 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x25, 0x1, 0x0, 0x67, 0x0, 0xfffffffffffffe00, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f00000004c0)}, 0x0, 0x800000000000, 0xe4e6ee93, 0x0, 0x8, 0x20005, 0x9, 0x0, 0xfffffffe, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x40, &(0x7f0000000300)='trans=rdma,') r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000900ffff00000000c23537cf9ded32aa1d2c9042ad32f6f531a3f6c235570feb369acc2063bdf9b6e39294577df8e7f769c79296ed801ac90c0beb0e564bf40206da4f68986918e39c50e8bd102d9db7fca3273b77bef6ac7086623ce2d5c5070a6a6dc03747a2effcadb70f443ca5e7474aa965b0659f979b2521ae8095a7b1a0dcb3fa013b527231c9aecaa2246e916e97b82e78af3d3d7359b496072b264ce575457abe04e64e64ec39616cd5f40c14a84058432b55567fb962c92c53a6480f9dd4b781a27145bf5ff4d987ba0f5cbc6b8b7f"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r7, @ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x100, 0x27, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r9 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000380)=0x10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x5d, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r10}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r11, &(0x7f0000004200)='t', 0x1) sendfile(r0, r6, 0x0, 0x7) sendto(r9, &(0x7f00000000c0)="08adfa46f5d60bdc5bf1ca3eca3dc4c16b47184aa7b73f8f232b090544d34b36f6c2444db9489bf7eeae297705661917a985a82ee97262f4f3d407a015216a04879091cd0166d12fd68da09c214d4b1d7b9cb28d8f971fb5a2aaee7d49181099d31ea1169e1f8d2dc4d944119ec34a78ac46af506e33", 0x76, 0x0, &(0x7f00000001c0)=@l2={0x1f, 0x3, @none, 0x2, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='afs_call\x00', r8}, 0x18) 2m5.143031534s ago: executing program 7 (id=2217): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/265, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000800000000000000950000009500000000000000"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0xfc}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x8, 0x7, 0xea}, {0x9, 0x6, 0x80, 0x18}, {0x82, 0x0, 0x7f, 0x7fff}, {0x6, 0x3, 0x1, 0xffff}, {0xd, 0x2, 0x5}, {0x2, 0x5, 0x0, 0x7237}, {0xc16, 0x8, 0x8, 0x73}]}) syslog(0x9, &(0x7f0000000300)=""/204, 0xcc) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f00000000c0)={0x1, 0x1, 0x19, 0xf, 0x87, &(0x7f0000000f00)}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10) request_key(0x0, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x13) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095", @ANYRES64, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) 2m5.086441859s ago: executing program 35 (id=2217): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="02000000040000000800000001000000800000003381a190d2b5ba32815f5ba477fd8a073c844fb3198a0df556fbc53a71eb4658c748b7439b0b7a9f1a99c6d1090f34085a58c44a2b3aa0bc34b2b61535a6854e5271f0743c52e6118effb05b241f68e0e32cf1b22e71d62799b48a225f9ff366e35ea7135f542ce674d191a62b0b5bda54df64fbf6af91c28c020eae0299a62da6b936aab411d9cd4d7775b93de86915465a797cf0a00f6c1dc90e7051cd13b8b2019c3c2b679f519eb706553bb705ce70e13e837063c270e42cde500b81d9c15479af36c48399aada8ed4d975633b6de135c7d423e91221f1cb37731accf2fc35636005c32cf43eca1900"/265, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000800000000000000950000009500000000000000"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0xfc}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x8, 0x7, 0xea}, {0x9, 0x6, 0x80, 0x18}, {0x82, 0x0, 0x7f, 0x7fff}, {0x6, 0x3, 0x1, 0xffff}, {0xd, 0x2, 0x5}, {0x2, 0x5, 0x0, 0x7237}, {0xc16, 0x8, 0x8, 0x73}]}) syslog(0x9, &(0x7f0000000300)=""/204, 0xcc) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f00000000c0)={0x1, 0x1, 0x19, 0xf, 0x87, &(0x7f0000000f00)}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r6}, 0x10) request_key(0x0, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x13) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095", @ANYRES64, @ANYRESDEC], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) 1m54.570927597s ago: executing program 8 (id=2347): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@noquota}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x2, 0x4f3, &(0x7f0000000700)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r1, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 1m53.577279057s ago: executing program 8 (id=2363): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x756}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) r6 = pidfd_getfd(r5, r5, 0x0) setns(r6, 0x66020000) syz_clone(0x50a60080, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1a"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x18) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "cf7995313c0de300f96ded7400", "62266bd8", "1e00040000000100"}, 0x28) write$binfmt_script(r8, &(0x7f0000000500)={'#! ', './file0'}, 0xb) 1m52.42446844s ago: executing program 8 (id=2368): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 1m52.327700158s ago: executing program 8 (id=2371): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000240)={0x8, 0x248}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000600)={[{@usrjquota}, {@minixdf}, {@init_itable}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x444, &(0x7f0000000980)="$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") chdir(&(0x7f0000000240)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r3 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x25, 0x1, 0x0, 0x67, 0x0, 0xfffffffffffffe00, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f00000004c0)}, 0x0, 0x800000000000, 0xe4e6ee93, 0x0, 0x8, 0x20005, 0x9, 0x0, 0xfffffffe, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x40, &(0x7f0000000300)='trans=rdma,') r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000900ffff00000000c23537cf9ded32aa1d2c9042ad32f6f531a3f6c235570feb369acc2063bdf9b6e39294577df8e7f769c79296ed801ac90c0beb0e564bf40206da4f68986918e39c50e8bd102d9db7fca3273b77bef6ac7086623ce2d5c5070a6a6dc03747a2effcadb70f443ca5e7474aa965b0659f979b2521ae8095a7b1a0dcb3fa013b527231c9aecaa2246e916e97b82e78af3d3d7359b496072b264ce575457abe04e64e64ec39616cd5f40c14a84058432b55567fb962c92c53a6480f9dd4b781a27145bf5ff4d987ba0f5cbc6b8b7f"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r7, @ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x100, 0x27, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r9 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000380)=0x10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x5d, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r10}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r11 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) write(0xffffffffffffffff, &(0x7f0000004200)='t', 0x1) sendfile(r0, r6, 0x0, 0x7) sendfile(0xffffffffffffffff, r11, 0x0, 0x7ffff000) sendto(r9, &(0x7f00000000c0)="08adfa46f5d60bdc5bf1ca3eca3dc4c16b47184aa7b73f8f232b090544d34b36f6c2444db9489bf7eeae297705661917a985a82ee97262f4f3d407a015216a04879091cd0166d12fd68da09c214d4b1d7b9cb28d8f971fb5a2aaee7d49181099d31ea1169e1f8d2dc4d944119ec34a78ac46af506e33", 0x76, 0x0, &(0x7f00000001c0)=@l2={0x1f, 0x3, @none, 0x2, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='afs_call\x00', r8}, 0x18) 1m52.272373433s ago: executing program 5 (id=2374): r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) fcntl$setlease(r2, 0x400, 0x1) memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = accept(r3, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xfffffdef}}, 0x1) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 1m52.019828913s ago: executing program 8 (id=2377): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) 1m51.19558383s ago: executing program 5 (id=2387): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x20000077, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0x100}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@noquota}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x2, 0x4f3, &(0x7f0000000700)="$eJzs3c9vG0sdAPDvOnGTtHk4Dzg8nsSjgofSCmonDW0jDiVICE6VKOXCKYTEiaI4cRQ7bRNVKBV/ABLil+DEiQsSZ4SE+icgpEpwRwiBKmjLgQNgtM6ahtRJnNc4buPPR5ru7M7ufmfqeOzZWXkD6FsXI2ImIgYi4nJEFLLtuSzFzm5K93v29MF8mpJoDN35WxJJtq11riRbXsgOG46Ir30l4lvJy3FrW9src5VKeSNbL9VX10u1re0ry6tzS+Wl8trM1OT16RvT16YnTqytN7/05x9+9+dfvvmbz9774+xfL307rdZoVra3HZ3Y6XC/3abnm/8XLYMRsXGcYK+xgaw9+V5XBACAjqTf8T8cEZ+MiOc/6XVtAAAAgG5ofGE0/pVENAAAAIAzK9e8BzbJFbN7AUYjlysWd+/h/Wicz1WqtfpnFqubawu798qORT63uFwpT2T3Co9FPknXJ5v5F+tX961PRcTbEfH9wkhzvThfrSz0+uIHAAAA9IkL+8b//yjsjv8BAACAM2as1xUAAAAAus74HwAAAM6+A8f/yeDpVgQAAADohq/eupWmRuv51wt3tzZXqnevLJRrK8XVzfnifHVjvbhUrS41f7Nv9ajzVarV9c/F2ub9Ur1cq5dqW9uzq9XNtfps87nes+VG4VSaBQAAAOzx9ice/SGJiJ3PjzRT6lxWlj/68Jnu1g7optzxdk+6VQ/g9A30ugJAz7jBF/pXB2N84Iw7YmD/g33rx7xsAAAAvA7GP/ZK8//mA+ENZiAP/cv8P/Qv8//Qv8z/Q58bOnqX4YMKfnvCdQEAALpmtJmSXDGbCxyNXK5YjHir+ViAfLK4XClPRMSHIuL3hfxQuj7Z60oDAAAAAAAAAAAAAAAAAAAAAAAAwBum0UiiAQAAAJxpEbm/JNmD/McL74/uvz5wLvlnobmMiHs/vfOj+3P1+sZkuv3v/9te/3G2/WprS+obp3wlAwAAAGhpjdNb43gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOEnPnj6Yb6XTjPvkixEx1i7+YAw3l8O/KkTE+edJDO45LomIgROIv/MwIt5pFz9JqxVjWS32x89FxEiP4184gfjQzx6l/c9M+v7L73v/5eJic9n+/TeYpVf15OJB/V+u1f81+7l2/d9bh596uJV59/EvSy+VFrL4DyPeHWzf/7TiJ+3in+u8jd/8+vb2QWWNn0WMH/H5k8Yv1VfXS7Wt7SvLq3NL5aXy2tTU5PXpG9PXpidKi8uVcvZv2xjf+/iv/3NQ/LT959vG3+1/D2x/RLzfYfv//fj+048cEv/Sp9q//u8cEj/9m/h09jmQlo+38ju7+b3e+8Xv3jus/QsHtP/Q1z8iLnXY/su3v/OnDncFAE5BbWt7Za5SKW90JTPStTPLpJnq2lH7pN8TP3CI/Kn8kch0M3M7ew2PfXgPOyUAAKArXnzp319yjAkeAAAAAAAAAAAAAAAAAAAA4JV0/UfIhv7/lwWGe9dUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBD/TcAAP//V7HNuw==") r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYRES16=r4, @ANYRES32=r3, @ANYRES32=r4, @ANYRESOCT=r4, @ANYRES64=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) prctl$PR_SET_NAME(0xf, &(0x7f0000000280)='+}[@\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e300000000000000000000000080003000000000014000600ff"], 0x58}}, 0x0) 1m50.69628707s ago: executing program 5 (id=2394): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x14c0e, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0xfd, 0x6b1, &(0x7f0000001f80)="$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") r0 = io_uring_setup(0x1252, &(0x7f0000000040)={0x0, 0xf83c, 0x10000, 0x0, 0x1bb}) io_uring_register$IORING_UNREGISTER_EVENTFD(r0, 0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) syz_genetlink_get_family_id$nfc(&(0x7f00000011c0), r1) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r1, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4004) memfd_secret(0x80000) mbind(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x4, 0x0, 0x8, 0x2) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000003, 0x2, @perf_config_ext={0x8, 0x4}, 0x8, 0x0, 0x800000, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000000000c0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x24fa, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='kmem_cache_free\x00', r4}, 0x10) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r9], 0x54}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, 0x48010, 0x602a1}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m50.223048108s ago: executing program 5 (id=2398): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000240)={0x8, 0x248}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000600)={[{@usrjquota}, {@minixdf}, {@init_itable}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x444, &(0x7f0000000980)="$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") chdir(&(0x7f0000000240)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r3 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x25, 0x1, 0x0, 0x67, 0x0, 0xfffffffffffffe00, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f00000004c0)}, 0x0, 0x800000000000, 0xe4e6ee93, 0x0, 0x8, 0x20005, 0x9, 0x0, 0xfffffffe, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x40, &(0x7f0000000300)='trans=rdma,') r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000900ffff00000000c23537cf9ded32aa1d2c9042ad32f6f531a3f6c235570feb369acc2063bdf9b6e39294577df8e7f769c79296ed801ac90c0beb0e564bf40206da4f68986918e39c50e8bd102d9db7fca3273b77bef6ac7086623ce2d5c5070a6a6dc03747a2effcadb70f443ca5e7474aa965b0659f979b2521ae8095a7b1a0dcb3fa013b527231c9aecaa2246e916e97b82e78af3d3d7359b496072b264ce575457abe04e64e64ec39616cd5f40c14a84058432b55567fb962c92c53a6480f9dd4b781a27145bf5ff4d987ba0f5cbc6b8b7f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r7, @ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x100, 0x27, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r8 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000380)=0x10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x5d, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r9}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) sendfile(r0, r6, 0x0, 0x7) sendfile(r11, r10, 0x0, 0x7ffff000) sendto(r8, &(0x7f00000000c0)="08adfa46f5d60bdc5bf1ca3eca3dc4c16b47184aa7b73f8f232b090544d34b36f6c2444db9489bf7eeae297705661917a985a82ee97262f4f3d407a015216a04879091cd0166d12fd68da09c214d4b1d7b9cb28d8f971fb5a2aaee7d49181099d31ea1169e1f8d2dc4d944119ec34a78ac46af506e33", 0x76, 0x0, &(0x7f00000001c0)=@l2={0x1f, 0x3, @none, 0x2, 0x2}, 0x80) 1m49.937168561s ago: executing program 5 (id=2402): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711205000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) unshare(0x2c060000) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) unshare(0x2c020400) r3 = getpid() madvise(&(0x7f0000a5e000/0x1000)=nil, 0x1000, 0x17) process_vm_readv(r3, &(0x7f0000008400)=[{0x0}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) eventfd2(0x8, 0x0) io_submit(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x440a1}, 0x8000) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x20, 0x0, 0x0, 0x9, 0xf0f92534858949f7, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0xfffffffffffff6ee, 0x100000000b}, 0x100410, 0x1fc, 0x2, 0x1, 0x9, 0xa, 0xfffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r2, 0x1) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000240)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x20008000) creat(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0xbda, &(0x7f00000005c0)={0x0, 0xec25, 0x8, 0x3, 0x40000333}, &(0x7f0000000dc0)=0x0, 0x0) syz_io_uring_submit(r6, 0x0, 0x0) 1m49.437091641s ago: executing program 8 (id=2406): r0 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r0, 0x0, 0x0, 0x1, 0x3000) msgsnd(r0, &(0x7f0000000000)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000140)={0x0, ""/126}, 0x86, 0x2, 0x1000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) getresuid(&(0x7f0000000180)=0x0, &(0x7f0000000200), &(0x7f0000000500)) getgroups(0x2, &(0x7f0000000540)=[0xffffffffffffffff, 0xee01]) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)=0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000680)={{0x3, r1, 0x0, r2, r3, 0x80, 0x8}, 0x0, 0x0, 0x0, 0x19, 0x5, 0x2bde, 0xffffffffffffff27, 0xc7, 0x2, 0x9, r4}) lchown(&(0x7f0000000040)='./file0\x00', r1, 0xffffffffffffffff) 1m49.436637901s ago: executing program 36 (id=2406): r0 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r0, 0x0, 0x0, 0x1, 0x3000) msgsnd(r0, &(0x7f0000000000)={0x1}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000140)={0x0, ""/126}, 0x86, 0x2, 0x1000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) getresuid(&(0x7f0000000180)=0x0, &(0x7f0000000200), &(0x7f0000000500)) getgroups(0x2, &(0x7f0000000540)=[0xffffffffffffffff, 0xee01]) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)=0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000000680)={{0x3, r1, 0x0, r2, r3, 0x80, 0x8}, 0x0, 0x0, 0x0, 0x19, 0x5, 0x2bde, 0xffffffffffffff27, 0xc7, 0x2, 0x9, r4}) lchown(&(0x7f0000000040)='./file0\x00', r1, 0xffffffffffffffff) 1m47.652756505s ago: executing program 5 (id=2423): r0 = socket(0x2d, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000300)={0x2d, 0x0, 0x4001}, 0xc) (fail_nth: 7) 1m47.603996509s ago: executing program 37 (id=2423): r0 = socket(0x2d, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000300)={0x2d, 0x0, 0x4001}, 0xc) (fail_nth: 7) 1m43.693199405s ago: executing program 9 (id=2467): unshare(0x22020400) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 1m43.63610387s ago: executing program 9 (id=2468): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = dup(r3) write$P9_RLERRORu(r4, &(0x7f0000000540)=ANY=[], 0x53) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) (fail_nth: 7) 1m43.25954894s ago: executing program 9 (id=2471): socket$igmp(0x2, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x5, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000010000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES64=r2, @ANYRES32=0x0, @ANYRESHEX=r1, @ANYRESHEX=r2], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) close_range(r4, 0xffffffffffffffff, 0x0) 1m43.183350626s ago: executing program 9 (id=2472): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000240)={0x8, 0x248}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000600)={[{@usrjquota}, {@minixdf}, {@init_itable}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x444, &(0x7f0000000980)="$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") chdir(&(0x7f0000000240)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r3 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x25, 0x1, 0x0, 0x67, 0x0, 0xfffffffffffffe00, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f00000004c0)}, 0x0, 0x800000000000, 0xe4e6ee93, 0x0, 0x8, 0x20005, 0x9, 0x0, 0xfffffffe, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x40, &(0x7f0000000300)='trans=rdma,') r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000900ffff00000000c23537cf9ded32aa1d2c9042ad32f6f531a3f6c235570feb369acc2063bdf9b6e39294577df8e7f769c79296ed801ac90c0beb0e564bf40206da4f68986918e39c50e8bd102d9db7fca3273b77bef6ac7086623ce2d5c5070a6a6dc03747a2effcadb70f443ca5e7474aa965b0659f979b2521ae8095a7b1a0dcb3fa013b527231c9aecaa2246e916e97b82e78af3d3d7359b496072b264ce575457abe04e64e64ec39616cd5f40c14a84058432b55567fb962c92c53a6480f9dd4b781a27145bf5ff4d987ba0f5cbc6b8b7f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r7, @ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x100, 0x27, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r8 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000380)=0x10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x5d, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r9}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r10 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r10, &(0x7f0000004200)='t', 0x1) sendfile(r0, r6, 0x0, 0x7) sendfile(r10, 0xffffffffffffffff, 0x0, 0x7ffff000) sendto(r8, &(0x7f00000000c0)="08adfa46f5d60bdc5bf1ca3eca3dc4c16b47184aa7b73f8f232b090544d34b36f6c2444db9489bf7eeae297705661917a985a82ee97262f4f3d407a015216a04879091cd0166d12fd68da09c214d4b1d7b9cb28d8f971fb5a2aaee7d49181099d31ea1169e1f8d2dc4d944119ec34a78ac46af506e33", 0x76, 0x0, &(0x7f00000001c0)=@l2={0x1f, 0x3, @none, 0x2, 0x2}, 0x80) 1m42.789924537s ago: executing program 9 (id=2477): r0 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) syz_io_uring_setup(0x1c84, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r1, r2, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, 0x0, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000000c0)='writeback_sb_inodes_requeue\x00', r3}, 0x18) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @random="6402a6c6a113", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000022c0)={[{@errors_remount}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") sendmsg$nl_netfilter(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000002d00)={0x1278, 0x1, 0x6, 0x401, 0x70bd25, 0x25dfdbfb, {0x7, 0x0, 0x4}, [@generic="b5fcef1a7c93c0eeebe087d613452b7bebb99ce236643d796dcd0b38129a9e0ac46b4cb85411669ef5405e43f83086eca6269047", @generic="92400f2e317a49c2fa15831631494065caf523be46bff4f88448c4fdf68168c55bec7282062fb1c9beeb3fb0b7dfeeda2e7e11e3ec646dfd4c2fe7fa2830070b64cbb815c2798bf2327af80d883b1e221012ebccca3f2c2c259e9b62465deffc3f5bf9addb5f143c06c42cd5ccac0af92e2521e6c536ccd0b6dc84a11d27844eba1d0b21be948b821b0a790877a85a0c63d6dc1af2aedaf00412c9258e64bbdb4d0cee03f97d3096cbeefaa425f88e0b3924187052", @typed={0x4, 0x11e}, @generic="e3d58ea0cb7dd9138464c824c9d138de7d61ec34ee7b1f3ffb18e98ca601ed439a87e220e70ef4be1a6e438b948260048655fca940bad87ac89aaff8f447c69b3467741d2dd82c0da285ffc7fb7a77b8991765ceefebf4ffaf81a4d6af3b1ae4c6496ace085d973d9ad4c44208d1151832ffac2f6126e13da36f3d2f5bb0b6f2d7b5afc5b671f513e317a9e3365cf70268d98124a1d83cf5682455ab6f704491da8e0e03938f6ee589eabef1fe0da958967dada7fccdd821bd4bcfe68cb4a10f76e83356b5952e9bbe1e", @generic="ba9891b0f5edbde994b638c522936e553c6cf6a4fa3ff5855d574ae034285bd192a116c76c09356609ab9216aaf273454eb1f7e66ef921080fad4c075cb6d78bd616a631b9917b4837448f7151e3ad9ba0982a9f9e7eb38f05a1c20557463811b61586ba78cf90403afe06e82ef2c23e9220735c0b22f0f68e661e1674328617dfa8101f2b0e44f4685d91b6343237d4ca730f89cecd62be0a68", @typed={0x8, 0x106, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0x1008, 0x81, 0x0, 0x1, [@typed={0x1004, 0x30, 0x0, 0x0, @binary="9ea8e778c35cd656fde0bcc97557b81167d740c462ef043ad3227d5b33197969b52f398a5fd7d2018a10d6abe4d73073053c5a225468ec58b3adc6fbebcae0c978190e0dc3171a50dec536a623ea100e5c332384e370e6cb72d0d55bd5357f3b1f7c9922ca99da58ccbb464620902108acf1b653ce31350b32b5b68c44cf13590b847dc89d4a7dc22637319ac179c2f8496aa1294cc40b84bfe09e9bd428c0c88e4f721aa3b047d91e6a5c9e5363353c0b34461c8666c93466338c1122530a3391df5eb4f6f281d11d7ad9ad5479a1ecfaaa8ce5adcbdac1cd7ce2f67f59fb090da8f1707502bbdddd4a63a1a92b13854bc9e9e7f2611b325fa8ae69bf9fd714ad456a05b3e604d35594448d523a5ac55439dd4fede189af820a8242c83d5333882070582a31def02fd3d1feff09c9b5849af682f52ddf3098c8abab7026df01891d6f5acf84ca1339f05036381b2691806bf0c4bd88cd8b45f1a94d4f06206c065f9cfc050712bf076839f9b180a4f07fb1562730cd2d6ac7b2443104118f2fb205873301762e03e45372025b2b5bc8fb1bfb66fbf30012f1c1f650f2ba147c90db1a97160aad9f3af8a5c12f437dfd3584f46d5a9936a530684b91c7ae35c8de21fcb325bbccd3e0f9493703959959e488c5ccad18fa917e698236632b047702a1db4576291412055ced34d92cf59ca138488fee2991c07fa050bbe7e23cc99bd18362b682a256306591dd5c81de693421a27527a3dd923974aab9bfd9513a6e6459095e31d5f20c13c0b774ff111ea797a93e258cefe959b893706b84674f04e4a937b61999c9c39443bfee027421e53ad4ac1ee700e48f2c94929cb6aac43968e4b42093dfca6c01bb1fa5081887444724feec0a42e5e185c36c132bea5a20b83bb5fe03ceb77b9d5d29083585946b0c28dc9cedcee1b0ab4e5ecc3cf5d4e20928be7e1643ded82767193a02c970b0b35ffe08fcd5206f0f537af6ae7e9d79cea6be0735f1036077af6b22e8b7e2b99475cae45bc7ff8896858e0717eea5de625162172bda20c8b00343b025234ee2a4ca280981add4f2a4f7c25c9af583ec1453eb403603af2bdc3fa31e1d1f48fee1ed0ac980b70989bd77b33066b46f4893d69967a975fb0c1321ff3260c64ce4fa4907d538f3a26eef0a401070081fc798071f40e16acd34bd593d9b7e0ab318eecc9c99d24bf87272fe025fc51621674f3f879322ba5678d3bae7ccf67cfefe17b7d295aa4361d5ef44835cf93ca1a7b59f4e30cafa72b8b383c276dce06ef4163b31e3de33677f2749cd50e8360fb1db66f760660108d201e1877af3cd7640d2cee5474ca289d08175b7205a6fd0d04cb065051abbdd88a90905fb9a9efe4ecff6d78b34a0b8b5a5a9b47db11869e741c77640125fab53fb98e1b963e0e9c0d9c84c55173ecce1be00f6fec4a2b42afc3ce133b721e8cc97652705da982a07e081ad8577db3418766e065254e5fd69fa9413c696539702d2f47a48cabf99f80e5f83b1623bf3648e49842b37d8c9eec040c031ea4af8ff5c23e46c060daa580f28f649d2a2e96e84784120d848a5849c50821f3c287c5e034f5a843d2f4b4309c5672b71b4f3ca238c79c11e30eb63572115046b9c507596a7b9826e17e33951f3c5da20b4542a4c23ef46dd2be5539e4ef14a7ca8f7fbc3e737cfc40a1b49868784de614a903566937d3e24b707de2487ef7927170e8b8ba01bc039e1b317f44b9c6f48ff9d624b151c30e5f5beb78a85f5db5aec1b5612cfb2e9024583760f1e64640ff41056a25a651dae38c2f3e898476299f616f449d83af9c83552678afa44dd08d791f720125bd5847811f8ae9e88e3767a3cabc7e290ef0a369f92dfc4796e8d95dc2d8861fc92376f9dfb497177af8c8203a468d2faaa4f85ba6eb8e84942debe3c9cf61e807e6289f9beabfb692d4d82cdc6ad28975f3f20468772a61903d645b13ad5b780c039ad78de19a32c11a16cc107eb23bfda876b15e6ad5ff64ef70e0b3f7fd6b8298b8dde7c407134a644ede8118489be6d509144d31f3ae8c396741a6af9c546fde6e6716b880e1ba799b7c364ef4e6074bb23b51f96f61d9abd88ecfecf0efc14fcda8968b7427b676abab850e60e8bf81054e9d5f2bb68d30ec16c42a0e01f9b1f11f75fdc067fca6518c6113829d458eb247895c2cee0930522c7976901f8956899059e18ef005e99e65f3a00260df67482c6e1ee852abd832f30e2557b5f4107731ee15955058ccd39e8d8c5691a5f72212f77c495c78fed5864c2a45ed1be4c03b0b7aa9a1b0064c78bd4011e245a178c90d93f5880e109819a4434b37aeb443d8a401c856caf576e48842f50ff4b80d3a5873d9d548f4c94d05050704ef6b25059d5266e90e098ef0d67636343be3735e6eda437bb07492e5b6d89c5aa97b6f615e023a15924eb13d31eba534a842d31297b30f03a8c5c8c81e7f0690f7ea5a6860d40abfa88360dfe82a588916a2bdf13db5c7d1c9c1cbee40473d5556923f5a78823e306e47b06bc2f29d7b0e4a53b5b7de661e5e015f64d2da4b668f80ff3039c1cb14807aa13ae523884c232771cb0f9eab45f485e3648aa501d56f3eb33395166e36184a99e8542b1076462868be92dffbdb91481de908b322a87c9973414180f0cf86085034cae9bdf579af39e6b3ab2ef7824d7f5bface65df3a8d229843f78c83cf75c452d6226c4a38521e4cf690596f4fa45349cd1e52be237ba1dceeef8b44ce012503939234a1a9d7c6dbf12be6fb16f9fd58c0486e3e2a54730f391e80e64088916f409952025eab7fd7d88873da5306a9d4da8d63a148431a50f431e5d01dbf81d936d0ab04397eaba8c346c36f9f196424d7e585db21df8095b544d9124618904cf688e3243a6fa67c9c7c20ba69c599670b6f56fd596cb16a6e48c01087e98d95a3d7c052a231cc4129993394b059096117d613499be0c0085673c661cc90317872eb8dc156748d5082b0cceb7704515e12523d0a284747eeac6347f881f2d47efc8b4068273ed10cad7e6f09ffd834c9bb6b09474c033f93d8329b34e110a3630c0d2f353682b990a73c4a285bf268c2782de8506aaf83fc529bf0b22c2342e0c623a008b5458ea959384bf443a397613dd97f50967a02c246aacda6f15362aa98e22aa3ef931d80a33ea69ef6d8a235a29bd100c6927423d990ef3ecfc9eb2227cf8d6869457d62c4de072ec4e70c96ee4dd58a6f6e84390b2a2fc1792e1a4a9b0e29c1ce952dff7008b08986d8fe572592e39caf99c1048ec681c2f92af2cb52a0a3ff402c7f592d6d4c68e650b1ac04ba68c83d0c9a2d252448dc282128e19b705f39fc59e1fdce2e459023888e71bfb040e45395def5e2b0f12b3327602450afdd3b547c0cffcd02819609e157a75947f1dff9266f0ace6892ef84911319fd33b72c6ebdde3f3283889fcac4853e180dd28e73f9b65ea715726262f5eacced88943e88d35e26dc5e7781fa4a0c4b93e8cc2c923896d02a59f7d1fc93d8525aebcef90fd060b66d75924fe470bf5d690ec16531122b61782fb26604bb3b78680ed60952e4ef7ab432f02ee31303a8308a7db0d40b226c425022c53fe9ea902922ff8f52263a7564e21536bb6686ea82f93c44163194670e00ff011218383ef077a532381f61a98cf2a0e4c9a2ffcd58b651ec325a8d738b034d6a186839e87cbfbea236e8a55d73e893e7f59c45f0d7214b71098cffa74297408ba8c3d5850aa2d47b440a126b72137b5af0cc9e7b93a7ad369805e66b388d23198f87770b8f199aa401b57788a3f20d43488e023ae0008d431d2ec634b2f8e5453ffc4cf829a5cf2902f15a390f7400e966c453fd2f2a92cc85c0b1fa9a2446f984deb8f8d6d450f36b7335344e9953f7aa316d83bd54231b0c3f6438f908aa736097e3bb6a8843f7e7eaa2d2adc2481e687d7da396406f40a8e6e14206b4e52c5225f3d9dbe08322f662b47ba49e446668c75b1869a87385f964f881102289169a2e112fccadad1be733c24795a4aff5e9b45deadac1786bd4bc434b4a7c3160aeb4d5279ce61ebb31bfbd524182320241150f1836523a2e00cb11b087a3aa1d160fd6e10ef0e30a16377c6fbff320c754a71afb27fe4f7415051e913203d67485e397e12c37a6ed63175f03d884e6096a31238bc5e7d1d7a09be29cbcfcde3574717f9dab4f4a899d0f2c8462f89908ddbe7dfcb86a8a22ced1f73cf9f0af3410c6e8a4ad0c55e73882b07f0d1bba40dadc761240c8b45a29ca8e03acd188d898cd5b5ac7648081c8ea7ea6cc71a86547e5d60bb93d16b7f19e3959f81024bb04433a6b3c3a7ee814070dbd907e36ef765e7197c2981d256b9d32dec59c6040fa4119b5f4389173665a1b65f6b2627d97498b7a2e8e02de2e12954a67581aa4b1152cc5e9a0dadb40b426f78e4aab2483b26d15a20a96f2c6641c0fa2645761fc3ba5283b35d19c544b307692acea65739cfa69ea3b34f94bba9e8a70af0432ef9ce61b62cd20779386beab93d2e8a01775b0e0a77e23e937e08ada1715eefe719429a03b848a18b055f9667540d4c3c1ca7246cef6c044168ca66f2ba38431cca34378af8ce5ce3cd14d6940655b9000af427c4c4a32fdfd2efdf8fc303549d851e7f52bdb6cb61f915321f5ba24c1569af84b6b44b7adb09f2f31afa1c6d85184edffa1886619a95bc748cdf8f99b7f68306985def704b8d5f1a7e1e767bbbe3f57487c139b78a890d1716829940a7267d4d71a2743adb2ca93047ea135c3158af4e5f26285fac8d0f5331cbf7673223ec8c30658f173b231f62dac6376fd4a878c38f6353d9d557aefb09de6cac02957541ec0bebbcaf15ccc50a92bc3748384ccb71787472c2d1df2343f1094ede74d77b0dceb290533d6d1f917c5439754ecad5dd6b6396598f542dc6c4928301370bc5ff275a29ad3d206810a2f5dfad3a8ab7137a200d67b92fc66624c7ad8d8e79e6b76ef00fad34b727f6d26d9d18398906eb3f337a6154c32c67de2399f7b0bddaded0db31d52022e001ed3efa932d638a38aa5ce44acdd23823a38ba9496df81966a3bbb24fba088c1496d3d1a62680cdd75ebb63f8769450ec3ac3842983441a811207db54326948e52e0f22cd7ddb29c4b9ab91c9831715f8617068db8fb86be13192a8788f22aed53316a8ab65c99f4fd8541158acfff969be352ed5bcc1f4ed1135aa93a8849b55cfe37c501430d5847623212251cb2c3130ba95abe1f0eeb452a65753ec258599c49c5560314035161b7b679c95ade5033b2e9d749b1f24f587da8ffc9a4f4e530b3bb147bb8a8f785d40206d61458992de484d197ce0295ac7cab4c811a1d6d05668f5a65bf0301289766a47181f7065245c6f157448947ecd7dc7f96a02649ec6cd0bb3394ac0932771663635b68a350f3a7b163b51cf79a5af9e4d1534c4f25be7a7737da4831234009e7f63909d926a50d3dc9a4d45927a8e9b35e7562413ef8e6009480397d838dd69d56a6589a3877b258b7c0192de0f34869bbb76310f14cef6812a6eb38367932d3d3504af8e65cdcd9e2f6c62fd3f489f9eb7c67d18e03af011ca3048b627c9c033a0c09b1dee108aa2cd62a177f9b1fe4ecb821216448deced5b2f5015ddb152e462405651902bce784cbd719ba533b78abcf788ac3bab0346ec5faf884960b0e7aa95592dc0b73e46bcfc769a641af0353a274f1c4e169186654852a2cf398d86a735e4c8daa547697ed6fdffc51ac9a8b438b1ec"}, @generic]}]}, 0x1278}, 0x1, 0x0, 0x0, 0x804}, 0x880) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r4, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {&(0x7f00000017c0)=""/130, 0x94}], 0x2}, 0xa1}], 0x2, 0x0, 0x0) 1m40.946423796s ago: executing program 9 (id=2492): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x8f, &(0x7f0000000040)=0x4) r1 = mq_open(&(0x7f0000000080)='*\x00', 0x40, 0x0, &(0x7f00000000c0)={0x9, 0xff, 0xd, 0x3e71}) mq_notify(r1, &(0x7f0000001200)={0x0, 0x2f, 0x2, @thr={&(0x7f0000000100)="4fb11b1b0e080979f1eb5390f5a54309cf27211b8fda5dcb4325224c828278f907ae0f3ab3790752def5760fff4cb13d5053375af5220fd288a12f89704aa3d30ac7230a3bd71b60c15811710b19da81b4da3d1f5bcace20206877f29ba109e827d152c7d42622141413b095701b9574ffaeaa022596cca3c67ad8d72c07d41df132bf4bac64abfb10ee8d1000697988709b0311b6654c25b97adff509cfce7147cfb42496510f518ddc93865cbcdc43e313fc4573f84f0aa5bf435a3eab0cb94f2314bcbe7d7ad76db9ba34ffb4eab1c933ed1e35856e6b99fabc54624e33dba7ffc5ba777c7d2fe3fd7e20016e11c18447c55dcc2dd181de6b36cf39b52a152536cba3226e9bdcdf142b3c36c560fae9723c942bf3caeef2aaef32ac685b55239c314084f0a50c41c2d7c8a38c40965e91fe04b4346639206e189a39f980e25bb77e8cd8a9e7bf421439122b298fed6bd924abdfd584eeb758b2f7c6eb5687b44ba3a0abac308f72ca0d0fa09a4697e4b63def36015dc6c3dc668321110ff9641eb2d704e0c9c4dee61e1dc9ca620d70dbdd5226326b048543b21418010fc0d20b47fd75a510f6ade8380bfdf50d21e034e0754ccd5f85de192307c6208df421033a6d56d2c9ff2e115291203731ea0519d20eb2efa26f5d8b4fcc945ddd4ca4d5e731b0d2c63ca28130a43e8a8776c8a4402ad3163d76b10c6eeba50dbf7b6ca683580f2e96a83a15822ff2c34b9e75c17980a5a1f627e3b6fb36277a7d992d7ba09febfd4b96490700ef88b33d86eeb2ed5190147cfd0783f0466c534585ee3d26d1ec3e9918ff927abfab415197f9227ef34c0813ca4d18b3386e4211df9f87f433b3e84f75d90ae8a89d0af425aed667337a087873b59416909119944e46f4f1f1693e533bbc39eb66cfd24f5f4c9b78a8fa13b352660d6f8e686c9e6cd594e5192941922d5d96b4bd2ef283c49b102ba3c744c5315e24dad4ad07de34f232fbb49c6ee174998eaf94235c958da3cb055f0322768f7907e87e98f554231dc5657f725eebb35deb9b50350de54ee8a7e69d96fdf77fb7827739740dfbcf467dc9d67be368cb524592cba88251a38e69ebf7515f393c687d6fc1dafe7d9bc2897d38fe207863e09debfaea112b47cd1a9ad6255a69e591055b623dbc8fe586b36d64ce0e445ffb86a4f1b57d14cacdb49af2ffbdbf78833562b475d55677cec5c5a162e8e5f3de7954eafdcf3cfa52db1b20277dd64220c93c9510f95f18c2e016eb232014b9368d5cb91dd2aff3e044f8a526cf7773aad4d425604fb4aa16cb285151e1d3f5669f209bb8f75a0a46f93fc4efad3049850f8e7ba9847937103fb0d750f8d338fb6c337b6ff39ec2eb302132b5f935a550ff11d0a63255f9ab56a30a40cde754769825b249fb03c5fefb178bb1de6370f61000b35245cdb85930a55c43a7f3a468f08d742f812edb0326f215a3db6846e5764d59ec357673a6c8d741c91b5e674dba0f90f80ce982b494973028a08fd6ef306a7f58c85ed01cb44b4aa8eb960c67c1aa9aecc532578ac6de407b0b84f56c697149ff75f88170500daa219566f98d05645477c174cb3948466b43590fc8aadaaf7b647b696976f27b071d72141f4920b8c4484e7f4ecbb031a7009f1d1c3d26d3c80d63579e300615e5e3bfe8760624947f66b2e7aecd95be755a65ab200d1ad78fddc9d7f9913b2df2ad3f2209536db82b859daa280d77722bdfc86c89cd12fdc5940342e4b6dc218a700934f1df3c66e0a2f592a29524fe9d1ef31f4d62e5268d1fe868d85ae41440cd430bc007abcd2ea6d50969c885d36ca009d852c943c43b7c0db5200efedb8e84855001d4940b71b581c2193fac28da643faad76e3539a7864d3006471a140a8e1353ecc18a819f8c3e1646780252e2479f6b4d8edefa1ea7e89578d5539d5a24e4d7d73bfe3419cb501887ea5b475e095ad1ce77fdc73f52f45c3655b780448bbcbdf06695d5998d90c2368410c8a0618758a525a582f680d8340602381500b544ff18a2e1178946212d2452cbf915a2a2376bab68d80954bc2ab5749337215d40598a996204d55f1ac429d4ac5b5470838142d39002c825e5b66d082463964bf481a2162acc1a9743f62228af81475ae77ddfc5b361c73057a0a96dbe76507ff1e986ec8380df8579f2aed299a904eefd8d90d0962776b3200c1aa8795c24647341d4befcbe332f1acfa0512f309088b92aa101e664b1a30b7b6e6fe2b668a84b94206f93e883a389122f015fa5c5e8f1844afcc13ed3e45af670771d5f958a3b44d33d1c53299fd5c4989ec76941368d2abc4e8858204f41c4be50c29c117967c11e88868dbf4c3c7711cbece7a8e41b92ac20d0152d62ec60deead05b708bf793c066cf3f6ebbb330becce179900b3a3a6c82142a17fe3fa39d755f751aab089cc57110bc50cac98863febaff7b7a6c09036549de6950c8843b1c4fb379c785a3cb628b554b16a434811d3acb64366910bec8e9f3da7defe227293e946507425d83045932c77917066e3f2c33d0b52b12f7a1c4125ea95c7283e9ff8c56431107e1fe88c2ac145e481a921ba43cedd1fd0fe7bcc2523771ff867d73baa09abdab09dd68c707a736ae10936e80d45cc898f7069621076b0b616c1316a07209f3b28bf5caf0e4a8eec3bff64b8aff9e628d0d160257d03655f6d2977a56eec6868eff5059f90da2125b036a799d0151243e3054c22e130c7c43bf2bdff776bc37085337a170a26c7832d9e13db2a210f745229f61ede756512b05126a3b9d74e211756bb72ef56817c78ef8bdbe7e747cd613c238500f4527ffde1a7ffe8b37375d6f993ae36bf913ff084ce4ef1500202ac871e481d6234baa36b9323a81a93681b39fe0733afbab1434f2225437083fae09ebdd638784a4cd7a01774e90100eb6ac5aa59972796e85472f4554fddac553da720151e792cbcb513ff5b2ef306f73133ab4d75a962e932835ffba1488179c71bc3f2ff75e47df1cce09be00c6464f857a8776a6805db93306bd1a8e70968483211d41a404b5096c38536fef73e0374c0ad43686ea06f64701c70bdea8f12790e6b50b9d191d81cbe621e1454ce645aec43c46d19d1fab451ed1a4df6840810515757555fc62e9a9f640d23dde54ca833ff28b8dbc1ae9cacc7cab712a9f9f60fec3d87d372cd6175095ce38e5369b5f9950f89d4bbc38cbcb0228e2a6c9e47d40ae6845575af1ead8a7557b0c94e09197b1533d895309771832c246bbe4a204c7caf772799f488994673cff3fa4041f1aa82d2e500d08cc3401f2c9fd1a121bf5380fea3bfea9a197e3be1b827d91b665c74c688bc64ce88c0a5ae858402e3bfd2d8e54497856bc67ca64c256e69aa0cbef06a90f64b51f4901da742bd83df0498de51f02f3e1a33393135e9f7777820ce3c956024dcf9b87dc8f5cc070f01f08cc276ef8ea8c73babb68a59b53fb05f9adbcb2d3c72d143967f63e0ee5dd4c44e543b1ddfe8cbf5bbe44add31acb77cf055a1d44c022dff48140719f6b62e18696c2c2e3b2ed8144226a72f7b99fefb9f7d17a9093304090ed96205d2466f022c86405198f7b64aac278e419ae1d1b1fb150d4be8a34d3278b4a667352b77ff38598aa8eb5591ce253d03729cc5a0dbbf5bf5f89402d414753e6b17c16b7c7586ab8735550eb224b328c29015a8aab55d8a409fd3a06f58687f8bf3bad46029be79e70b336fd061ac68b031fdaf3ce1c70678aff5dad48debb016d0104ef867d2e768b4ddddfb7969792eb82e1859896e3ff5f8d883a11e88790ee24f352e9835dcb5b21ce9f0f9139ccbfcb33832ad3df26be9d8b13c17275d0f1bc38c5b84428a51bf9b3e3fc1ef767bc845e6a58d3ba8bc40f9632937c764db444579eed9411aa5ed24d2c5a326470b352d7b76cb6bc1dadc8d9faee494f0113641f4a86a5c495ea97115e16627233e306a2d22b2c689a0124c5d49a354fa2e0249bb3329194064d37a7342b14fac828bb3ed5f6727e1254c5787f25988ec5fbd7c82c58d09373f68c60587dd6168bcce7177651175107032f8e1bb625731432f3e5d8ca59bd1dfc63ef25df9ddc0205531b3eddb3ee2428c4bcae1539dd0d46e7c1dfbb9813e2e12948e742b01bbb41110624092fab5dc69955a913b888608f0594fc7ad0a5cd3a5d362ad1f5a7a2136cb5aab8b1d0c557226eb62b19eb222500f96f805762347037f3487a8cd73726d757d890a74bd2b480afd22cfef86c9295c24eb3e6b9da8eb7f03a652690d5ed2bbbdaaad15e68acaca2e8b437c2c0312342f6c039de2b1598554db5aab1f59c6660244333617768b1c525987d58b041c8e4ee1710701a77ffb1852f5979fd75fbf0128338ebb24a0d598729ac546b68941d1f5c8d3440f507b2f9c3480301bdb477b8e650a20e038abca1e96b6d36e8f04e08991a7c562193abf2c6799d572ee01001f87baa91dc8798c34c6be84276580b9a31634c98b3dd1dd891680a15361341cf9ab157736c2256892f9597cc3758c9cd7c74e71eb2178578f54544b261e98f40525374aecb75642cb058ee66dec0b2b8459f4f40788e1f75d1f2a5ef4100f4c78bf1bfec34cee53b27368d44392ac6de56bf1dd61f925f6769c490e3ef741a5ae497e6186716f20223ecb67ef9e17da45d079cba8a7b4cb179ed04818c64a76cca9f609cc8a1ac17c02a7aa2b1d42c18696cd87d711c95c24490e415359f333dc2d29c352a0e324401a6a62e41cd99dda795e24a85973ab4ba8e1d07bd3f4b8ad618aae209cf02a14213491665dcfefd5dabe58ca515e8d2035c9e503d8bc37a3401b47d7be7674628151b7e7cc99443928c82f8c984bcc3d7473310fdb42e010cb075a05e2b5c43711f2d05edff409aa02e244effcd7ad460452063b44fce1be5cd7ceb4e41323b9d695a77a547c25a9a10717112bb9a43ca8c5bf4baf9ff906b34c47705353c34afaf00ecd603dfaf5f9fd4a0167cb627ec42f1ce563f4fd00d011ce46f753c7220f2241fe98471952a896521769e40c4f7ca8fcaebae8b36562dcdf3dcf93178cb6510298186d427c42cd3d0d4bbe927a39862a17a09adbcc0b43e8dfd21efc2c03cfc77aaf7eee7237bac2aed1a48976a927b945afca744af06fd8ff62780eeec7c4f4e2b00360bc3b444c07b5e1db74cf408e67dc6014231be224e3e6b3b80505b0de019227ada8aa51c2b7d2c6c979fa212917a6cdc177b7d3fcc06220ce5702bb29ca51ad38a8e41f06ba81025208b7420ebb965b727ea423c28d8bb6e643fcd7c09530357683561249d7ef933f9b53bc18957b648bad644a24df8aa7ee7afb2cfd14cc59430f3b7cd7854230ece9db9c5370018d27a60b71340c26d05e5bc830f29261f0dcb44f41fcffcf4ee31b864a5860979c4c3e89f383096dacbf11de5316d8a9d66d1d5a56e4681fc6f036a7154512a754d60198319089eb9f7105d30dd9bcc40e8037cde8b5e1f5c8858865020ebecc451d37e0a931441df1d6c8321117575d8a1054b4cc0870a43d8fadbf0fedbb3d26d00ab24510c622775dde2c797babba9df6aae0a3c946ad32d7f113470427f4c5f3cad27da463aaf706e3d46d0535e144a84ac5ec7c46440d6c7748d3370dcf0a5aaa33924fa3babb16734d58a86c7b86214d3cfcee23dc18e71c0de1eb995177d8c6ae9df9f85e5405c0ed0ba3d53ecf9da47583d6bd2b46d562ee2c3cc857ac6a1e169582ba4b1667fedcbbfb23641b273a88506120e3d42662a", &(0x7f0000001100)="78f53af299c0df6e102f308c9a12db4acdcbd35ed35a104aec311e957e78d9ec67892ed2059a1d747bbe301eb36b5d2a550925ad00ed232f8455e0e4534fff33da1b11f50599c3fad35bcfa84bab700a6f5d5a7c5ce32b09b282a4143713ebfc24010ef733193f9d813cbba45fec1a7f6187fa312d7ff526c84b4e1975446811c468669f1eec9739b55995edbb0dac1b396e3383b75952c7618347db00b9da2a500658f98aaaeebeebe52ec344c3db5e7112fc695ee7f9a0595863fe5b3cbc074cc9fb94"}}) getsockname$packet(r0, &(0x7f0000001240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001280)=0x14) clock_getres(0x4, &(0x7f00000012c0)) connect$l2tp(0xffffffffffffffff, &(0x7f0000001300)={0x2, 0x0, @loopback, 0x4}, 0x10) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001340), 0x1, 0x0) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x60, 0xc, 0x6, 0x101, 0x0, 0x0, {0xe, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f00000014c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa, r2}) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f0000001540)={0x0, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e22, @rand_addr=0x64010101}, {0x2, 0x4e23, @empty}, 0x1, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001500)='geneve0\x00', 0xc66, 0xcbd, 0xfa}) setsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f00000015c0)="f753133e103e843b4d9f2f0ccc4f0c3c60ba26cf74c049f4b4b1d4204a8a8364a50e6bb5515b598d04a88e08cc10aced3106c87e947e327a023b6c84c7eca05ced626052607d52455cc859345de343a8a136b68399ee20faf1cd02e0e07abe62c146b00b1ad0a0799d9b8be3fdb623fe0a7a98982bd89ff59b2c0b", 0x7b) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001680), r3) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000001940)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001900)={&(0x7f00000016c0)={0x230, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x110, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x290a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1652}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x46500000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd350}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffe}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x10}, 0x5) r5 = openat$cgroup_int(r3, &(0x7f0000001980)='memory.high\x00', 0x2, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f00000019c0)=0x6) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000001a40)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000001a00)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001ac0), r3) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x5c, r6, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="7aafdb5b7e41"}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0xd0}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000001cc0)={'syztnl2\x00', &(0x7f0000001c40)={'ip6gre0\x00', r2, 0x2f, 0x10, 0x6, 0x7, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x7800, 0x8, 0x406d}}) sendmsg$nl_route_sched_retired(r3, &(0x7f0000001f40)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001f00)={&(0x7f0000001d00)=@newqdisc={0x1d4, 0x24, 0xc00, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xffff, 0x4}, {0x4, 0xe}, {0x6, 0xa}}, [@q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x24}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x76}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xd1e}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x100}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x13}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7ef}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfff7}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x12}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}]}}, @q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xb}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xb2a}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x91d}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1ae}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfb3}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x24}]}}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x2000}, 0x40000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001f80)={0x1, 0x4, 0xf4, 0xf35}, 0x10) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000001fc0)) r8 = syz_genetlink_get_family_id$team(&(0x7f0000002040), r3) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000002080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f00000022c0)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002280)={&(0x7f00000020c0)={0x1c0, r8, 0x2, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0x160, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x18f}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5612a25e}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) write$binfmt_script(r3, &(0x7f0000002300)={'#! ', './file0', [{0x20, '$)^\'{)^{{$+h,/'}], 0xa, "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"}, 0x115) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000002480)=@usbdevfs_driver={0x4, 0x1, &(0x7f0000002440)="fa34563820fd5aac652c3f3672a898f8b649f03b2e2d829e13231735c34070f044cdd415fc08f1a13f128e267cc4629ec3ed82da5ca4"}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000002540)={'syztnl1\x00', &(0x7f00000024c0)={'ip6_vti0\x00', r7, 0x2f, 0x2, 0x6, 0x1, 0x14, @mcast2, @empty, 0x7801, 0x8, 0x7, 0x33fc}}) 1m40.910938839s ago: executing program 38 (id=2492): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x8f, &(0x7f0000000040)=0x4) r1 = mq_open(&(0x7f0000000080)='*\x00', 0x40, 0x0, &(0x7f00000000c0)={0x9, 0xff, 0xd, 0x3e71}) mq_notify(r1, &(0x7f0000001200)={0x0, 0x2f, 0x2, @thr={&(0x7f0000000100)="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", &(0x7f0000001100)="78f53af299c0df6e102f308c9a12db4acdcbd35ed35a104aec311e957e78d9ec67892ed2059a1d747bbe301eb36b5d2a550925ad00ed232f8455e0e4534fff33da1b11f50599c3fad35bcfa84bab700a6f5d5a7c5ce32b09b282a4143713ebfc24010ef733193f9d813cbba45fec1a7f6187fa312d7ff526c84b4e1975446811c468669f1eec9739b55995edbb0dac1b396e3383b75952c7618347db00b9da2a500658f98aaaeebeebe52ec344c3db5e7112fc695ee7f9a0595863fe5b3cbc074cc9fb94"}}) getsockname$packet(r0, &(0x7f0000001240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001280)=0x14) clock_getres(0x4, &(0x7f00000012c0)) connect$l2tp(0xffffffffffffffff, &(0x7f0000001300)={0x2, 0x0, @loopback, 0x4}, 0x10) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001340), 0x1, 0x0) sendmsg$IPSET_CMD_HEADER(r3, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x60, 0xc, 0x6, 0x101, 0x0, 0x0, {0xe, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f00000014c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa, r2}) ioctl$sock_inet_SIOCRTMSG(r3, 0x890d, &(0x7f0000001540)={0x0, {0x2, 0x4e21, @broadcast}, {0x2, 0x4e22, @rand_addr=0x64010101}, {0x2, 0x4e23, @empty}, 0x1, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001500)='geneve0\x00', 0xc66, 0xcbd, 0xfa}) setsockopt$inet_opts(r3, 0x0, 0x0, &(0x7f00000015c0)="f753133e103e843b4d9f2f0ccc4f0c3c60ba26cf74c049f4b4b1d4204a8a8364a50e6bb5515b598d04a88e08cc10aced3106c87e947e327a023b6c84c7eca05ced626052607d52455cc859345de343a8a136b68399ee20faf1cd02e0e07abe62c146b00b1ad0a0799d9b8be3fdb623fe0a7a98982bd89ff59b2c0b", 0x7b) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001680), r3) sendmsg$TIPC_NL_PUBL_GET(r3, &(0x7f0000001940)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001900)={&(0x7f00000016c0)={0x230, r4, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_LINK={0x110, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xb5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x290a}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xc80}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1652}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x46500000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd350}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x200}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffe}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x80}]}]}, 0x230}, 0x1, 0x0, 0x0, 0x10}, 0x5) r5 = openat$cgroup_int(r3, &(0x7f0000001980)='memory.high\x00', 0x2, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f00000019c0)=0x6) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000001a40)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000001a00)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000001ac0), r3) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f0000001bc0)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b00)={0x5c, r6, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="7aafdb5b7e41"}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0xd0}, 0x40000) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r3, 0x89f0, &(0x7f0000001cc0)={'syztnl2\x00', &(0x7f0000001c40)={'ip6gre0\x00', r2, 0x2f, 0x10, 0x6, 0x7, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x7800, 0x8, 0x406d}}) sendmsg$nl_route_sched_retired(r3, &(0x7f0000001f40)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001f00)={&(0x7f0000001d00)=@newqdisc={0x1d4, 0x24, 0xc00, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xffff, 0x4}, {0x4, 0xe}, {0x6, 0xa}}, [@q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x24}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x76}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xd1e}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x100}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x13}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7ef}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}, @q_dsmark={{0xb}, {0x2c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfff7}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x12}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}]}}, @q_dsmark={{0xb}, {0x34, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xb}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xb2a}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x40, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x91d}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1ae}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xfb3}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x24}]}}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x2000}, 0x40000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001f80)={0x1, 0x4, 0xf4, 0xf35}, 0x10) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000001fc0)) r8 = syz_genetlink_get_family_id$team(&(0x7f0000002040), r3) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000002080)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f00000022c0)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002280)={&(0x7f00000020c0)={0x1c0, r8, 0x2, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r9}, {0x160, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x18f}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5612a25e}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r2}}}]}}, {{0x8, 0x1, r2}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}]}}]}, 0x1c0}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) write$binfmt_script(r3, &(0x7f0000002300)={'#! ', './file0', [{0x20, '$)^\'{)^{{$+h,/'}], 0xa, "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"}, 0x115) ioctl$USBDEVFS_IOCTL(r3, 0xc0105512, &(0x7f0000002480)=@usbdevfs_driver={0x4, 0x1, &(0x7f0000002440)="fa34563820fd5aac652c3f3672a898f8b649f03b2e2d829e13231735c34070f044cdd415fc08f1a13f128e267cc4629ec3ed82da5ca4"}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000002540)={'syztnl1\x00', &(0x7f00000024c0)={'ip6_vti0\x00', r7, 0x2f, 0x2, 0x6, 0x1, 0x14, @mcast2, @empty, 0x7801, 0x8, 0x7, 0x33fc}}) 58.687341976s ago: executing program 3 (id=3119): r0 = socket$kcm(0xa, 0x2, 0x88) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x27}, @multicast1}}}], 0x20}, 0x8000) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)="1171fa6ad4c1e7e71446fac0eed3ac08d97f4ff91861bc18af4e54efb3a008a125d90d0000000000000000", 0x2b}, {&(0x7f0000000140)="493727b0c95517a4", 0x8}], 0x2}, 0x84) 58.612761222s ago: executing program 3 (id=3120): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x3}, 0x18) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000100)="ecb2d5cbde8069324a04ca01b564d6b0dafbcf2fc2fbb11384b275b4b420dd601be6fcccfb2bea1c47a8277ec8f9636facd89adfa62753b700650d5680", &(0x7f0000001d00)=""/4096}, 0x20) 58.612377572s ago: executing program 3 (id=3121): r0 = io_uring_setup(0x3c6f, &(0x7f0000000040)={0x0, 0xa751, 0x80, 0x0, 0x21a}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0xf}], 0x1, 0x10000, 0x0) close(r0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x200) r3 = syz_io_uring_setup(0x27f0, &(0x7f0000000340)={0x0, 0x400000, 0x10100, 0x400001, 0x28f}, &(0x7f0000000080), &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, r4, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r3, 0x8184c, 0x0, 0x9, 0x0, 0x0) sendto$inet6(r2, &(0x7f00000000c0)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 57.652553239s ago: executing program 3 (id=3129): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1000052, &(0x7f0000000240)=ANY=[], 0xf5, 0x1219, &(0x7f0000002100)="$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") r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x40) io_setup(0x9, &(0x7f0000000300)=0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) io_submit(r1, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0xe7030003, 0x2, 0x1, 0x0, r0, &(0x7f0000000000), 0x100000}]) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00'}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) readv(r4, &(0x7f0000000140)=[{&(0x7f0000000080)=""/155, 0x9b}], 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={&(0x7f0000000340)="4f83c85cb592812d86c5f5fed0880cd7b9531167b2696bb34e57a290587b246478c9b1bfd58a521f39f5f8bf2bc40c97d3b38d4bfd082d01ba4940b5d262574dd35ad0a99f3255278a5fb9190763929a18509a32082435b44aca951ccb4d403167bba6dfa31ca507092faa854ee76dae93983a018e7540e8f9b82e85f4a84f15dcded687cea6accee6c4b063ecc6", &(0x7f0000000400)=""/96, &(0x7f0000000580)="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", &(0x7f0000000480)="5f73d9f9fd38eba8413ae51b53e486a776bec1892336780a531f682b36619cd872d19da4e67044312fda06b3e12139846ffde25c40156b5f602cf350bcd5f176c0ca6813b855369ab4c35e", 0xd, r5, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='kmem_cache_free\x00', r6}, 0x18) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x7, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) 57.180932477s ago: executing program 3 (id=3130): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) r2 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r2, 0x0, 0x0, 0x1, 0x3000) msgrcv(r2, 0x0, 0x0, 0x1, 0x0) msgsnd(r2, &(0x7f0000000000)={0x1}, 0x8, 0x0) msgrcv(r2, &(0x7f0000000140)={0x0, ""/140}, 0x94, 0x2, 0x1000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) getresuid(&(0x7f0000000180)=0x0, &(0x7f0000000200), &(0x7f0000000500)) getgroups(0x2, &(0x7f0000000540)=[0xffffffffffffffff, 0xee01]) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)=0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000680)={{0x3, r3, r4, r5, r6, 0x80, 0x8}, 0x0, 0x0, 0x0, 0x19, 0x5, 0x2bde, 0xffffffffffffff27, 0xc7, 0x2, 0x9, r7}) lchown(&(0x7f0000000180)='./file0\x00', 0xee00, r4) r8 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) write$selinux_load(r8, &(0x7f0000000040)={0xf97cff8c, 0x8, 'SE Linux', "32c29d08191cf61b9d17e14c50a6529f"}, 0x20) 56.869672782s ago: executing program 3 (id=3140): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/265, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000800000000000000950000009500000000000000"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0xfc}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x8, 0x7, 0xea}, {0x9, 0x6, 0x80, 0x18}, {0x82, 0x0, 0x7f, 0x7fff}, {0x6, 0x3, 0x1, 0xffff}, {0xd, 0x2, 0x5}, {0x2, 0x5, 0x0, 0x7237}, {0xc16, 0x8, 0x8, 0x73}]}) syslog(0x9, &(0x7f0000000300)=""/204, 0xcc) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f00000000c0)={0x1, 0x1, 0x19, 0xf, 0x87, &(0x7f0000000f00)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) request_key(0x0, 0x0, 0x0, 0x0) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r6, 0xa, 0x13) fcntl$setlease(r6, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095", @ANYRES64, @ANYRESDEC=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r6, 0x400, 0x2) 56.825162166s ago: executing program 39 (id=3140): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x40, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"/265, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70400000800000000000000950000009500000000000000"], 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0xfc}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000080)={0x7, &(0x7f0000000040)=[{0x8, 0x7, 0xea}, {0x9, 0x6, 0x80, 0x18}, {0x82, 0x0, 0x7f, 0x7fff}, {0x6, 0x3, 0x1, 0xffff}, {0xd, 0x2, 0x5}, {0x2, 0x5, 0x0, 0x7237}, {0xc16, 0x8, 0x8, 0x73}]}) syslog(0x9, &(0x7f0000000300)=""/204, 0xcc) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f00000000c0)={0x1, 0x1, 0x19, 0xf, 0x87, &(0x7f0000000f00)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) request_key(0x0, 0x0, 0x0, 0x0) r6 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r6, 0xa, 0x13) fcntl$setlease(r6, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095", @ANYRES64, @ANYRESDEC=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r6, 0x400, 0x2) 3.754489347s ago: executing program 4 (id=4028): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00"/12], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) 3.646128077s ago: executing program 4 (id=4030): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000600)={[{@usrjquota}, {@minixdf}, {@init_itable}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x444, &(0x7f0000000980)="$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") chdir(&(0x7f0000000240)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r3 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x25, 0x1, 0x0, 0x67, 0x0, 0xfffffffffffffe00, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f00000004c0)}, 0x0, 0x800000000000, 0xe4e6ee93, 0x0, 0x8, 0x20005, 0x9, 0x0, 0xfffffffe, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x40, &(0x7f0000000300)='trans=rdma,') r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000900ffff00000000c23537cf9ded32aa1d2c9042ad32f6f531a3f6c235570feb369acc2063bdf9b6e39294577df8e7f769c79296ed801ac90c0beb0e564bf40206da4f68986918e39c50e8bd102d9db7fca3273b77bef6ac7086623ce2d5c5070a6a6dc03747a2effcadb70f443ca5e7474aa965b0659f979b2521ae8095a7b1a0dcb3fa013b527231c9aecaa2246e916e97b82e78af3d3d7359b496072b264ce575457abe04e64e64ec39616cd5f40c14a84058432b55567fb962c92c53a6480f9dd4b781a27145bf5ff4d987ba0f5cbc6b8b7f"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r7, @ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x100, 0x27, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r9 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000380)=0x10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x5d, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r10}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r11 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r12, &(0x7f0000004200)='t', 0x1) sendfile(r0, r6, 0x0, 0x7) sendfile(r12, r11, 0x0, 0x7ffff000) sendto(r9, &(0x7f00000000c0)="08adfa46f5d60bdc5bf1ca3eca3dc4c16b47184aa7b73f8f232b090544d34b36f6c2444db9489bf7eeae297705661917a985a82ee97262f4f3d407a015216a04879091cd0166d12fd68da09c214d4b1d7b9cb28d8f971fb5a2aaee7d49181099d31ea1169e1f8d2dc4d944119ec34a78ac46af506e33", 0x76, 0x0, &(0x7f00000001c0)=@l2={0x1f, 0x3, @none, 0x2, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='afs_call\x00', r8}, 0x18) 2.699892683s ago: executing program 2 (id=4046): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.698879583s ago: executing program 4 (id=4047): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r1, 0x0, 0x8000000000}, 0x18) pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0x3) 2.660431506s ago: executing program 2 (id=4049): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580), 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000013c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001580)=ANY=[@ANYBLOB="2800000000dd77e7edad6474b686f0eb810af8b9fe82f289c8c2aa7d550c5afc5f98a6e150474693a844f2ded8c2afe530529fc2ca9b54c972e5c1b36876be90447a9ef10c0765f85032d89d1b0660524b24f9d51054957877ccb8", @ANYRES16=r2, @ANYBLOB="010028bd5200fcdbdf251b00000008e7a193fad3dd5d9404deccb655fb9060bb333047bfd25146ec467a71d338147dd4979e73f5af123f19bd433003809707933f9be3dda8c3dc27773204ce697875a31ed02841422ce57e707849bd5c2687ea2ea4661168becb5195087bb31c2c485951b346511eb3888b94d7ed52f63efe24547715d5984e9924dd3e40c493b9006eeabdf94adce714792a5a6feb84ff56f9d1d32efd78b8e66919429112ba38128be5f98159fad7155158142a138e2db247d3a8e4", @ANYRES8=r4, @ANYRES8=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x40000) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7030, 0x0, 0x3) accept4(0xffffffffffffffff, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000000)=0x80, 0x80000) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r7, &(0x7f0000000380)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000600)="2705020059021400ddffff1144364dd0f1e09dd927accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b8ee679000000000000795e81883a561f0dcf0d3ccec946da3d6495ecd26ad2c3e9f427c03c5745dd4840ebc37e3221eca5c4cbfc12e2cc3680c00030c28ad4", 0xffffff72}, {&(0x7f0000000880)="1c393502dda1a67d93b1ceccbe972c4fef9c33ecf2d824f3a33513f45f472bbdc8e3a2275f2587f0da0b3ae419bed996116448f90d113ce98aa985f379d729430858f5cb9a66063700bf2354b33cdff83033de518580a3080d7f4cc2406e071138439e1566dd17983ee153ab672f362d3292e24a9952f18ec3d8b37bb3391096c1d4442a754899299321c03cbcfb98a26994b2a072c2b9d9c70d619545e5f61b050e40166d2ff57dcc008f24fd5339e7bc21e25863f80d2487c30b6bf781608a31d68e9319ab1712d8f5bdde849c040417c864cbfd3923dcb9fc6bdc2ea53334184b03efcb631dc68f0a7b6e13eea4b80d4237120e32932ca4e2b50bad0a35496d36a11f03b477b9587bc0ba489932e34f819fa1524ebad53a3d94b46c6aeff4f42fa067729fbb2862c09d337a75e0c8429d4bfe0dee2e1e23e8c22787178600ecca135623731e4701f35bd4e7c936a8ee274120e7662328a5aba1161b05970a000000000000bff0547efe051f3c5de77fdd3c77afd41a1a7747a982b7efb013c9d6bac7d3ad1f9b7c3a5a1448b35696f03bca1c875e346edc55b7a271c3e5f3c0df72c8e4d7cccfa2e9b598f0ae06efbc1a5d5bd91aed6b32deccf7755cef50fab72633c802533b9d94f17f9be978f2514c47671575ee528fbdddc6194328e605e4d10e293756d20eb8a545f2bfe48df5d1d98a270458392a0a57647dcb8ee005e78876a072d12d0429bbb9957a695c3289b4a59469691115e6ba1ae47418ed594b8128f20c100f5485a84e586b3b047a2e5531f2e9cb357e54c01e95128a82bcd59cbf6995b419e3779b332ce3d35e41fea811b03f0c0b3b92df5014e06f397942c1f366d8913d8d46a7894d585bce062fb76f3e3283102f3fd4a48eaa56b1e8256ca3db9fb8d7c70c10eafc055834627c052b2195a4ff32bdf0a7fc24cdc31b890134f92614ba1f78713cba780753c9c8eabbcf4deb8778837f8591fd32aaecc621f317f629", 0x234}], 0x2}, 0x0) 2.584711682s ago: executing program 4 (id=4050): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580), 0x1, 0x5d8, &(0x7f0000000c00)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000013c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001580)=ANY=[@ANYBLOB="2800000000dd77e7edad6474b686f0eb810af8b9fe82f289c8c2aa7d550c5afc5f98a6e150474693a844f2ded8c2afe530529fc2ca9b54c972e5c1b36876be90447a9ef10c0765f85032d89d1b0660524b24f9d51054957877ccb8", @ANYRES16=r2, @ANYBLOB="010028bd5200fcdbdf251b00000008e7a193fad3dd5d9404deccb655fb9060bb333047bfd25146ec467a71d338147dd4979e73f5af123f19bd433003809707933f9be3dda8c3dc27773204ce697875a31ed02841422ce57e707849bd5c2687ea2ea4661168becb5195087bb31c2c485951b346511eb3888b94d7ed52f63efe24547715d5984e9924dd3e40c493b9006eeabdf94adce714792a5a6feb84ff56f9d1d32efd78b8e66919429112ba38128be5f98159fad7155158142a138e2db247d3a8e4", @ANYRES8=r4, @ANYRES8=r2], 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x40000) r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7030, 0x0, 0x3) accept4(0xffffffffffffffff, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000000)=0x80, 0x80000) syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r7, &(0x7f0000000380)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000600)="2705020059021400ddffff1144364dd0f1e09dd927accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000102821880b8ee679000000000000795e81883a561f0dcf0d3ccec946da3d6495ecd26ad2c3e9f427c03c5745dd4840ebc37e3221eca5c4cbfc12e2cc3680c00030c28ad4", 0xffffff72}, {&(0x7f0000000880)="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", 0x234}], 0x2}, 0x0) 2.189642104s ago: executing program 0 (id=4057): r0 = openat$selinux_policy(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000240)={0x8, 0x248}, 0x0) chdir(&(0x7f0000000240)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r3 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x25, 0x1, 0x0, 0x67, 0x0, 0xfffffffffffffe00, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f00000004c0)}, 0x0, 0x800000000000, 0xe4e6ee93, 0x0, 0x8, 0x20005, 0x9, 0x0, 0xfffffffe, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x40, &(0x7f0000000300)='trans=rdma,') r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000900ffff00000000c23537cf9ded32aa1d2c9042ad32f6f531a3f6c235570feb369acc2063bdf9b6e39294577df8e7f769c79296ed801ac90c0beb0e564bf40206da4f68986918e39c50e8bd102d9db7fca3273b77bef6ac7086623ce2d5c5070a6a6dc03747a2effcadb70f443ca5e7474aa965b0659f979b2521ae8095a7b1a0dcb3fa013b527231c9aecaa2246e916e97b82e78af3d3d7359b496072b264ce575457abe04e64e64ec39616cd5f40c14a84058432b55567fb962c92c53a6480f9dd4b781a27145bf5ff4d987ba0f5cbc6b8b7f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r7, @ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x100, 0x27, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r8 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000380)=0x10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x5d, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r9}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r10 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r11, &(0x7f0000004200)='t', 0x1) sendfile(r0, r6, 0x0, 0x7) sendfile(r11, r10, 0x0, 0x7ffff000) sendto(r8, &(0x7f00000000c0)="08adfa46f5d60bdc5bf1ca3eca3dc4c16b47184aa7b73f8f232b090544d34b36f6c2444db9489bf7eeae297705661917a985a82ee97262f4f3d407a015216a04879091cd0166d12fd68da09c214d4b1d7b9cb28d8f971fb5a2aaee7d49181099d31ea1169e1f8d2dc4d944119ec34a78ac46af506e33", 0x76, 0x0, &(0x7f00000001c0)=@l2={0x1f, 0x3, @none, 0x2, 0x2}, 0x80) 2.167556955s ago: executing program 2 (id=4058): r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0006, &(0x7f0000000600)={[{@usrjquota}, {@minixdf}, {@init_itable}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x444, &(0x7f0000000980)="$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") chdir(&(0x7f0000000240)='./file0\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="07000000040000000802"], 0x50) r3 = perf_event_open(&(0x7f0000000140)={0x0, 0x80, 0x25, 0x1, 0x0, 0x67, 0x0, 0xfffffffffffffe00, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f00000004c0)}, 0x0, 0x800000000000, 0xe4e6ee93, 0x0, 0x8, 0x20005, 0x9, 0x0, 0xfffffffe, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_clone(0x80200, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000040000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) mount(&(0x7f0000000000), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x40, &(0x7f0000000300)='trans=rdma,') r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000900ffff00000000c23537cf9ded32aa1d2c9042ad32f6f531a3f6c235570feb369acc2063bdf9b6e39294577df8e7f769c79296ed801ac90c0beb0e564bf40206da4f68986918e39c50e8bd102d9db7fca3273b77bef6ac7086623ce2d5c5070a6a6dc03747a2effcadb70f443ca5e7474aa965b0659f979b2521ae8095a7b1a0dcb3fa013b527231c9aecaa2246e916e97b82e78af3d3d7359b496072b264ce575457abe04e64e64ec39616cd5f40c14a84058432b55567fb962c92c53a6480f9dd4b781a27145bf5ff4d987ba0f5cbc6b8b7f"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x9, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32=r7, @ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x100, 0x27, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r9 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000380)=0x10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r1], 0x0, 0x5d, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r10}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r11 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r12, &(0x7f0000004200)='t', 0x1) sendfile(r0, r6, 0x0, 0x7) sendfile(r12, r11, 0x0, 0x7ffff000) sendto(r9, &(0x7f00000000c0)="08adfa46f5d60bdc5bf1ca3eca3dc4c16b47184aa7b73f8f232b090544d34b36f6c2444db9489bf7eeae297705661917a985a82ee97262f4f3d407a015216a04879091cd0166d12fd68da09c214d4b1d7b9cb28d8f971fb5a2aaee7d49181099d31ea1169e1f8d2dc4d944119ec34a78ac46af506e33", 0x76, 0x0, &(0x7f00000001c0)=@l2={0x1f, 0x3, @none, 0x2, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='afs_call\x00', r8}, 0x18) 1.918378306s ago: executing program 1 (id=4060): r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r1, 0x0, 0x8000000000}, 0x18) pread64(r0, &(0x7f0000002280)=""/4096, 0x1000, 0x3) 1.916843516s ago: executing program 4 (id=4061): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000a00)={0xe, &(0x7f0000000740)}) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580), 0x0, 0x9a, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000680), 0x0, 0x0, 0xd7, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x23, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3, 0x0, 0x5f}, 0x18) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r4, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000001c0)='./file1\x00', 0x2) acct(&(0x7f0000000080)='./file1\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000740)={0x0, &(0x7f0000000580)}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r7, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1cb80b3fa1bda74e3977b40e7af46b4c60b70d7a79ed5d8c48f52a50185980", 0x30) sendfile(r7, r6, 0x0, 0x3ffff) sendfile(r7, r6, 0x0, 0x7fffeffd) 1.782745486s ago: executing program 1 (id=4062): getrandom(0x0, 0x0, 0x1) openat$selinux_load(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c646973636172642c757466383d312c757466383d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c757466383d312c00ef5c3556"], 0xfd, 0x2a8, &(0x7f0000000280)="$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") r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8ad996ab28735fda) 1.408247967s ago: executing program 6 (id=4063): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0xffffdffffffffffe}, 0x18) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x4a101, 0x0) (fail_nth: 1) 1.184852995s ago: executing program 2 (id=4064): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20001040}, 0x20000004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x1, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r7, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) 1.11688799s ago: executing program 6 (id=4065): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x20040, 0x0, 0x0) 1.006175839s ago: executing program 6 (id=4066): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000073790101000000000000000000000000000af7f4f0c55de8ca0000000000000000000000000000000000000000f3c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff000000000000000000000000000000200000"], 0x138) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000000000000085000000030000009500"/72], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000100)=0x100000001) setsockopt$inet_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x1, 0x4) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000800)={&(0x7f0000000a40)={0x494, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x144, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xf4, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, 'trusted.overlay.upper\x00'}]}, {0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdd02}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '.+{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, 'debug_want_extra_isize'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x14, 0x2, 'nomblk_io_submit'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '](#})\\\xdb&{:\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@!\x00'}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '}}:\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'syz'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'barrier'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '!/}$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xda3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1b0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x95, 0x5, "4a457f966a59108abaf86675a89ffd26345e5cf04a2a6aff740f47233953569e01c4733ce0f304c178830d0ff7030670aa1177363d7310f7e7a43cd254f349dd03bf9bce530ddce1a6bfb083672e1881e9daa0b4d3ce0fdd36c4a3257ae21990f6f3ad3a68a5adf2002edc993a91d2f50fbd1d79a70f887d9bae79d7973f400356ec894af0ca8239d2a0fab78d62f39dda"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_BITS={0x50, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'lazytime'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_BITS={0xa8, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1d}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '[}@:}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ']}+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x61a}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1b}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x11c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x84, 0x4, "d2ee035041975dedf8550be22a8f85db637540cdc6c10224e3ecd9844a767d1a1e3275dd453d5f32640c621de86199468436afccdbe9d492b5c84603f23c0ad9d8ad309d4033c52c39c448454ea975c6635fed3a0270b43dc535139d7b5ba0bd0e0c323a39137475c141beb688ca96318109bd6eb75fef0f07e5cba8cff64d68"}, @ETHTOOL_A_BITSET_VALUE={0x40, 0x4, "11d61cf2be49a7c9ed8a30520f142b2a48db9912bf3fe9ab4c7e85c931aeb5a5bd9eac940153ab57bba688f802022ae256dd4d3cef764a44ee1fd17b"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'nodelalloc'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '*[,%$\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xa73a}]}, @ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x494}, 0x1, 0x0, 0x0, 0x4}, 0x800) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e20, @dev}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='bdi_dirty_ratelimit\x00', r4}, 0x18) request_key(0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r5}, 0x18) setxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000400)=ANY=[@ANYRES64], 0x835, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb7030000fb000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9aa}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r9 = fcntl$dupfd(r8, 0x406, r8) ioctl$SG_IO(r9, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @buffer={0x17, 0x44, &(0x7f0000000200)=""/68}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x3, 0x0}) 962.815153ms ago: executing program 1 (id=4067): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000100000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="f39a559d89cc58eeb7452516c114740d5b488d9be2441fdc06daa5a7ba1a51601e25cb0d5282d4fb157a0405966ddcf9ff51fc267151ff075c943b87597f90b6c632159e27d0ca57fda0d10e186a915f865d37e67290e937a8c27f5bdb3db248db6af0402a807be59069"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) flock(0xffffffffffffffff, 0x1) gettid() syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0x3, r3}]}, 0x58}}, 0x4000000) 593.161482ms ago: executing program 0 (id=4068): r0 = socket$rds(0x15, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) bind$rds(r0, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000340)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x5}, &(0x7f0000000240)=0x70d, 0x0, 0x3, 0x100, 0x7, 0x9, 0x2, 0x7fffffff}}], 0x58}, 0x0) 520.501188ms ago: executing program 4 (id=4069): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@noquota}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x2, 0x4f3, &(0x7f0000000700)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r2, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 498.1574ms ago: executing program 0 (id=4070): socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x6fe1, &(0x7f0000000540)={0x0, 0x80ce0a, 0x400, 0x3, 0x9e}, 0x0, &(0x7f0000000100)) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0xd, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0xd7487aa6f8c07d18, 0xf7fa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r2, 0x4008550d, 0x0) 496.97143ms ago: executing program 1 (id=4071): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00'}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kfree\x00', r3, 0x0, 0x7}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r1}, 0x18) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) io_uring_setup(0x31fa, &(0x7f00000001c0)={0x0, 0x6a93, 0x40, 0x2, 0xd1}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601060000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001407f000001"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r10, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa1780c206050086dd6018232500102c"], 0x0) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r12 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r12, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20000009, 0x0, &(0x7f0000000240)={0x0, 0x0, 0xfffc, 0x360}, 0x8, 0x9, 0x80, 0x0, 0x0, 0x101, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 466.153443ms ago: executing program 6 (id=4072): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=0xffffffffffffffff, 0x4) socket$inet6(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000100000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="f39a559d89cc58eeb7452516c114740d5b488d9be2441fdc06daa5a7ba1a51601e25cb0d5282d4fb157a0405966ddcf9ff51fc267151ff075c943b87597f90b6c632159e27d0ca57fda0d10e186a915f865d37e67290e937a8c27f5bdb3db248db6af0402a807be59069"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) flock(0xffffffffffffffff, 0x1) gettid() syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_REMOTE={0x14, 0x7, @loopback}]}}}, @IFLA_MASTER={0x8, 0x3, r3}]}, 0x58}}, 0x4000000) 379.76358ms ago: executing program 0 (id=4073): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x80000000, 0x88200) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="75c1cc54649640be1983f79c5bfe88cd6a6a000070ab59578db363168a2559f334d436138406b699de69cb13fd737428808940bcd0940dc930c81aaad8b665cd232c5831977dd63ce2c88d43b17760a6e0df533940a702485bb198e47be6f2b546c27ebfdb041df6bbc2d10b61eb755df569c9cb7c4951ddb54505f67244cd16e376fbbdebc994d22a474b7bc494cafcac137748c8ebff7807053222d67c3ee79861e8cf4ff092236fccfbe08dcb5d7c2ba08b25883740695452a401800e63c157d64d90e4108e5eb8e917c00e9e52df03723ce3", 0xd4}, {&(0x7f0000000f80)="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", 0x205}], 0x2}, 0x0) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) keyctl$clear(0x7, 0xfffffffffffffffa) close(r1) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x143882) 352.187042ms ago: executing program 1 (id=4074): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x80000000, 0x88200) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$zero(0xffffffffffffff9c, 0x0, 0x2002, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000cc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)="75c1cc54649640be1983f79c5bfe88cd6a6a000070ab59578db363168a2559f334d436138406b699de69cb13fd737428808940bcd0940dc930c81aaad8b665cd232c5831977dd63ce2c88d43b17760a6e0df533940a702485bb198e47be6f2b546c27ebfdb041df6bbc2d10b61eb755df569c9cb7c4951ddb54505f67244cd16e376fbbdebc994d22a474b7bc494cafcac137748c8ebff7807053222d67c3ee79861e8cf4ff092236fccfbe08dcb5d7c2ba08b25883740695452a401800e63c157d64d90e4108e5eb8e917c00e9e52df03723ce3", 0xd4}, {&(0x7f0000000f80)="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", 0x205}], 0x2}, 0x0) recvmsg(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) keyctl$clear(0x7, 0xfffffffffffffffa) close(r1) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x143882) 348.914072ms ago: executing program 6 (id=4075): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000f82818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='mm_page_alloc\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x18, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 270.631499ms ago: executing program 6 (id=4076): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f0000000040)=@hopopts={0x2c}, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9c, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1cd9, 0x9}, 0x0, 0x0, 0x0, 0x0, 0xd4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x40082406, &(0x7f0000000380)='cpu') r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)={0x2c, r5, 0xc4fc9e906872338b, 0x70bd2c, 0x0, {{0x5}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x2c}}, 0x4c002) syz_emit_ethernet(0x66, &(0x7f00000068c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6007000000303a00fe8000000000000000000000000000bbff0200"/53], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7}, &(0x7f0000000280), &(0x7f00000002c0)=r8}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$KDSKBENT(r10, 0x4b47, &(0x7f0000000580)={0x8, 0x8, 0xde0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000580)=ANY=[@ANYBLOB="35230000000000002c0012800b0001006d616373656300001c00028005000b00000000000500060000000000080005000c00000008000500", @ANYBLOB="5c0000004bbf50202f244a05a74245ff5a100083050000242afedbdf250039ae9f6fcf94c2cdd88d54a96d95b4bc2336d36ab9b08fdf3e8d7e3de72054eeab7e81f6368f527774c0b5094ee43d50bd17b9c3d326569b3366bf86809a5f0465b032dcfd80dc39e64d6fd51687e8c8b87e7c0a574880cd6afee0d59b1929e80f983e45a8dc2a44221ed015143eb10cb10a362c2949432536fee3f6392c36c6e84906ea8b4c51c8603e4948dc3c8dfc8a7273b2d761094044d97c593c58c4", @ANYRES32=r9, @ANYBLOB="345756fa54736ba0ba3ed80b29018f929b6360bade17fa048c5fd3fba1cc3a8acb08832fbf289c74b2a6bd6be15022a433dfa6ba445c14556f9dcfb5cee12876cd4cf0feef5a62aaf6cbc15969e53e188427aaef483a9702978977404ed878076325506b74bec5a6d711f365cfe9aba1f4", @ANYRES64=r3, @ANYRES64=r2, @ANYRES8=r1, @ANYRES64=r0, @ANYRES8=r9], 0x5c}}, 0x0) unshare(0x62040200) 255.82983ms ago: executing program 0 (id=4077): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) fstat(0xffffffffffffffff, &(0x7f00000000c0)) socket$key(0xf, 0x3, 0x2) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0xe23, @remote}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000380)="5f719d7a65b60f807e", 0x9}], 0x1}, 0x448e4) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000000), 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={'batadv_slave_1\x00', {0x2, 0x4e23, @loopback}}) ioctl$sock_inet_SIOCSIFADDR(r2, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) 188.230075ms ago: executing program 1 (id=4078): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000a00)={0xe, &(0x7f0000000740)}) syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r0, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000180)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580), 0x0, 0x9a, &(0x7f0000000540)=[{}], 0x8, 0x10, &(0x7f0000000680), 0x0, 0x0, 0xd7, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000500)={0x0, r0}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x9, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x23, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3, 0x0, 0x5f}, 0x18) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r4, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) acct(&(0x7f0000000080)='./file1\x00') acct(0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b708000000000e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x445, &(0x7f0000001dc0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000740)={0x0, &(0x7f0000000580)}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r7, &(0x7f00000009c0)="3bf58d7d45d32cfe1da7c797b82f16713d1cb80b3fa1bda74e3977b40e7af46b4c60b70d7a79ed5d8c48f52a50185980", 0x30) sendfile(r7, r6, 0x0, 0x3ffff) sendfile(r7, r6, 0x0, 0x7fffeffd) 148.765688ms ago: executing program 2 (id=4079): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 106.836072ms ago: executing program 2 (id=4080): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file0\x00', 0x1008001, &(0x7f00000003c0)=ANY=[], 0xfe, 0x1af, &(0x7f00000007c0)="$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") ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000580)={0xd73, 0x5, 0x5}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f00000004c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x10}}, './file0\x00'}) syz_mount_image$iso9660(&(0x7f0000001080), &(0x7f00000010c0)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX, @ANYBLOB="2c6f76657272696465726f636b7065726d2c6e6f9b557065d678efd409aa07d1c5b828636f6d70726573732c00"], 0x1, 0x1045, &(0x7f0000001140)="$eJzs3Vl0nGd9+PHfTLxMbBYDxnHyD2RwSHCMcbQkNsZhUbQ4CrIVLDnEbMGxZSMi28EOS8wWln/3DWhL6V5aqLuRUkrpLXdtL3rR03O46W25LOpGS0uh5zd6JCuObcnYslw/n48OaDzzzLzvOD76vs+rmXkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIhG/0BXV3cjRob37n+kfWH9A/tG91zk9tnH+0aj86jfWHC7EY38X7RasXHmqo3Pa8zd+oL8/02xfubR1kcrv7fi9NoN63a9ZEVz9v4X2aGr4tRTpx8/ODU1cXK5d2SZ7B7cOzw2Orynb/dge3hstL1z+/auux8YGmsPDY8Mjh0YGx/c0+7fN9g3Prqvvbn/rnb3zp297cFtB0b379090DcyOHvljtf0dHVtbz+47aHBvn1jo3vvfnDbWP8DwyMjw3t3d8bkzTlmR/5DfPPweHt8sG9Pu31kcmqid6GdzEHdixnUs9Cgnq6enu7unp7u7ffuvHdHV9eK51zRdY54zojl/0fL8lqSn+Pwo2iW/sdIDMfe2B+PRPu8X/0xEPtiNPZc4PZitv933D140e3O7/+tM1fduu5s/18cnf5vmHm0DRfq/wX25ep9nYqn4nQ8HgdjKqZiIk4u+x5d3a/dMRh7YzjGYjSGY0/0da5pl2vasTO2x/boikfjgRiKsWjHUAzHSAzGWByIsRiPwc6/qP7YF4PRF+MxGvuiHZujP+6KdnTHztgZvdGOwdgWB2I09sfe2B0D0dd5lCMx2fl7773IPs4N6l7MoJ6LDNJ/Lt9S/SiHS/bD2f4DAPW4f7BP/wGgMnvH9nX16D8AVGXc/B8AAAAAAAAAAAAAAAAAAAAAAAAAAACutEY04x8i4ot3Tjfmr0zZ6iz4f8G7rWp07tmMxsxavtHa3rujf6h7aKCrq6uru3uw+6rs/ZwXxejYeF+7/8SxJ05OnDo1cbi9//jkoROHJxb9CJd7/0t037pvr167Yd2unfmHLUcnjk+eOjF57ODRJdsgAMyzIprx7Yi47ZnpxitKy2PL/oGh9sjD7eHjR07MG9ucXSbgMlu5wLHFUlt1Vbem7QBcg1ZGM3oj4puPTDc2ZePLMUDz1Z2FAZd79y6oc96hEdE5Z6GxAHBJVkUzRiPi8Iu+0rg9Im6I62B+38pjgs6T2D8w1HkiU5MHjz8ZnXMYN8yMWnfunWbPfVzjxxLrIt6U+7rKmo0A/OhWRzO+GhHHXtiKV3Z+HwAAXO9a0Zw5hx7TjTuWe2cAAAAAAAAAAAAAAAAAAAAAAAAAAADgOtGIZuyIiNba6UbXvOsvb/3/3qGBq7L3c6z/DwCXYEU047tl/f9u6/9fedoOwDVoZTSjv6z/32P9fwCowqpoxqNl/f9e6/9f+8cS1v8H4ApYHc34Zln//x7r/wNAFVrRjJnX/U037l3unQEAAAAAAAAAAAAAAAAAAAAAAAAAAIDrxI3RjNUR0Rz4QGddmfnr0s9fYeZ5Cyw3kzdvK5cXsybfyrLWYLORX1fwCQEAC2pFM+7rXJpu9C33zgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADXtGY0428jovGt6UY0IuLpiHbMfO9a7p0DAJZGoxn/GBEv+/vprH/ct+7bq9duWLdrZ0TcEDd0Dgka88ePjo33tftPHHvi5MSpUxOH2/uPTx46cXhisZtr9Q/sG92zFE9kUVYt8f6vuuw9bOUx2TxbOju8f2Cos9NTkwePP5lXNxs3XPamAKhXK5rx/c6l6UZjuXcGALgqVjaa8fyIeOx7Z+bmnStm5vwrZv7U1fxh8aX1Z+emrXKwMHvMMHve4CUXuXze44stRyeOT546MXns4NGFJuGtsl0zXwC4PI1GM/4qInY/trHT1Uasee456DLuOxGx4zPtMi7W5LjZE96rO3FvHZmcmth26MTU4Rz/2Yj46y/fWsY3V+X4clARK8+O78qxz0TEt74+OzY6Y1eXsa2zY7tz7I6IOPi1Z49tlbE3nh3bk2M3RcTU55499sYyds3Zsb1L+7cMANeWnP9/MCI+v/XMXJsvNv+fncOPl+9LPf9fOe9OrbLdlVfqyQNApXKO/Ddl/r9ygfn/30XEMz+4tYybmUuvKbevnTefv/rPAgC4FDn/fyh7/oUzc+fyy/y/TLPPzv8/ve7sHP5w+b7U8//V58z/c7s3XaknDwCVyv7fHxE9B87M/b59Mf2fnfcvdf9b5/Q/t7vxSj15AKhU9v/tETH20Jm519Atpv+bby/3L39eqv7feE7/c7s3X7FnDwB1yv7nfPrhG8/MvS7+Wur/Gv0HgCsu+/+qiPj6X56ZO6e/mP7fUt4dsNTn/9ee0//c7suv2LMHgDo1Yn1jpswr46WdS0PDI4Newg8AAADXk876PutnT/c3XhoN838AAAC43jRiQ/n9/5q4aebSkZiMqZiw/D8AAABcLzq//98ws5xfROOmaJj/AwAAwPVmU+f9/533AHQ+/rcVpzsf17Oi2Tk30GgsPKKxNTbOjNhYVgU6XEbMnF9orBkaHhnc1j86sqs77ux8ykDnnQbnfbSVnbcfbImbZ0bdXD6TaM2zH7GVo7q37eqOLXHLzMhbZj6R8PbN5xnZs+iRvTkSAK53mxbo8WL6vyVumxlx28ynAq645Txl7VJWALhWbOq8/r/zGoAL9n+BEY17Fpj/v3juJQXb4lCciKk4HFs77zbovOLgvI+6Zt7LELYucDbg7Nju2LrALP/s2J5LGNt71f+7AMBS2rRAhxfT/60LzP/XeEkhAFxTTj11+vGDU1MTJ5fwwnI/RwDg2VQaAAAAAAAAAAAAAACufVfj/X8uuODC/7ULy/2TCVhqzWjGP0VE41vTjXYjIp6OaMfMd5/WAwDXp+z/d0r/X6H/AFCF7P906f8m/QeAKmT//7n0/3b9B4AqZP//pfT/lfoPAFXI/v9r6f8d+g8AVcj+/1vp/536DwBVyP7/e+n/q/QfAKqQ/f9u6f9m/QeAKmT//6P0/y79B4AqZP//s/R/i/4DQBWy/98r/X+1/gNAFbL//1X6v1X/AaAK2f//Lv1/jf4DQBWy/98v/d+m/wBQhez//5T+363/AFCF7P8PSv+79B8AqpD9/2Hpf7f+A0AVsv9R+t+j/wBQhex/o/S/V/8BoArNcgYg+3+P/gNAFbL+N5T+36v/AFCF7P+K0v/t+g8AVcj+ryz936H/AFCF7P+q0v/X6j8AVCH7v7r0f6f+A0AVsv+t0v/X6T8AVCH7f2Pp/y79B4AqZP/XlP7fp/8AUIXs/9rS/9frPwBUIfv/vNL/N+g/AFQh+//80v836j8AVCH7/4LS/zfpPwBUIfv/wtL/Pv0HgCpk/9eV/t+v/wBQhez/i0r/+/UfAKqQ/X9x6f+A/gNAFbL/Lyn9H9R/AKhC9n996f+Q/gNAFbL/Ly39363/AFCF7P+G0v8H9B8AqpD9v6n0f1j/AaAK2f+Npf8P6j8AVCH7f3Pp/5v1HwCqkP2/pfR/RP8BoArZ//9X+r9H/wGgCtn/W0v/9+o/AFQh+/+y0v9R/QeAKmT/X176/5D+A0AVsv+3lf6/Rf8BoArZ/3bp/z79B4AqZP9fUfo/pv8AUIXs/6bS/3H9B4AqZP9vL/3fr/8AUIXs/ytL/x/WfwCoQvb/jtL/t+o/AFQh+39n6f8j+g8AVcj+v6r0/4D+A0AVsv+bS//fpv8AUIXs/12l/2/XfwCoQvZ/S+n/O/QfAKqQ/X916f879R8AqpD931r6/y79B4AqZP9fU/r/qP4DQBWy/9tK/9+t/wBQhez/3aX/B/UfAKqQ/e8q/X9M/wGgCtn/7tL/Q/oPAFXI/veU/h/WfwCoQva/t/R/Qv8BoArZ/3tK/4/oPwBUIft/b+n/Uf0HgCpk/7eX/r9H/wGgCtn/HaX/k/oPAFXI/r+29P+9+g8AVcj+7yz9f1z/AaAK2f/Xlf5P6T8AVCH7v6v0/5j+A0AVsv/3lf4f138AqEL2//Wl/yf0HwCqkP1/Q+n/E/oPAFXI/r+x9P99+g8AVcj+v6n0/6T+A0AVsv99pf+n9B8AqpD9v7/0/0n9B4AqZP/7S//fr/8AUIXs/0Dp/wf0HwCqkP0fLP3/oP4DQBWy/0Ol/x/SfwCoQvZ/d+n/U/oPAFXI/j9Q+n9a/wGgCtn/4dL/D+s/AFQh+/9g6f9H9B8AqpD9f3Pp/0f1HwCqkP0fKf3/mP4DQBWy/3tK/z+u/wBQhez/3tL/p/UfAKqQ/R8t/f+E/gNAFbL/D5X+f1L/AaAK2f+3lP5/Sv8BoArZ/32l/5/WfwCoQvZ/rPT//+s/AFQh+z9e+v9j+g8AVcj+7y/9/3H9B4AqZP8fLv3/Cf0HgCpk/99a+v+T+g8AVcj+P1L6/1P6DwBVyP4fKP3/af0HgCpk/99W+v8z+g8AVcj+v730/2f1HwCqkP1/R+n/z+k/AFQh+//O0v+f138AqEL2/12l/7+g/wBQhez/o6X/n9F/AKhC9v/dpf+f1X8AqEL2/2Dp/+f0HwCqkP1/rPT/F/UfAKqQ/T9U+v9L+g8AVcj+Hy79/2X9B4AqZP8nSv8/r/8AUIXs/5HS/1/RfwCoQvb/aOn/F/QfAKqQ/X9P6f+v6j8AVCH7P1n6/2v6DwBVyP6/t/T/1/UfAKqQ/X+89P839B8AqpD9nyr9/039B4AqZP+Plf7/lv4DQBWy/8dL/39b/wGgCtn/E6X/v6P/AFCF7P8Tpf9f1H8AqEL2/32l/7+r/wBQhez/ydL/39N/AKhC9v9U6f+X9B8AqpD9f7L0/8v6DwBVyP6/v/T/9/UfAKqQ/f9A6f8Z/QeAKmT/P1j6/wf6DwBVyP5/qPT/D/UfAKqQ/X+q9P+P9B8AqpD9P136/8f6DwBVyP5/uPT/T/QfAKqQ/f9I6f9X9B8AqpD9/2jp/zP6DwBVyP5/rPT/T/UfAKqQ/f946f9X9R8AqpD9f7r0/8/0HwCqkP3/ROn/1/QfAKqQ/f9k6f+f6z8AVCH7/6nS/6/rPwBUIfv/6dL/v9B/AKjC/wYAAP//aB9Xnw==") (fail_nth: 5) r0 = memfd_create(&(0x7f0000001ac0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(0xffffffffffffffff, 0x4008240b, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{r0}, 0x0, &(0x7f0000000300)='%ps \x00'}, 0x20) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8922, &(0x7f0000000080)) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000100)={r3, 0x1, 0x6, @remote}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r3, {0x7, 0xa}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x7ffffffe, 0x0, 0x0, 0x4000000}, 0x20048054) kernel console output (not intermixed with test programs): Delayed block allocation failed for inode 16 at logical offset 9 with max blocks 2048 with error 28 [ 264.770006][T14549] EXT4-fs (loop4): This should not happen!! Data will be lost [ 264.770006][T14549] [ 264.779710][T14549] EXT4-fs (loop4): Total free blocks count 0 [ 264.785816][T14549] EXT4-fs (loop4): Free/Dirty block details [ 264.791963][T14549] EXT4-fs (loop4): free_blocks=39626 [ 264.797571][T14549] EXT4-fs (loop4): dirty_blocks=4096 [ 264.802919][T14549] EXT4-fs (loop4): Block reservation details [ 264.808962][T14549] EXT4-fs (loop4): i_reserved_data_blocks=4096 [ 264.840545][ T29] audit: type=1326 audit(1755684947.873:21218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14598 comm="syz.6.3564" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc7fbebe9 code=0x7ffc0000 [ 264.907665][ T51] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 2058 with max blocks 2047 with error 28 [ 264.932931][T14601] loop6: detected capacity change from 0 to 2048 [ 264.983933][T14601] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.064319][T14609] lo speed is unknown, defaulting to 1000 [ 265.093716][T14611] loop4: detected capacity change from 0 to 512 [ 265.116333][T13412] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.126359][T14611] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 265.152904][T14611] EXT4-fs error (device loop4): __ext4_iget:5464: inode #15: block 1803188595: comm syz.4.3567: invalid block [ 265.165473][T14611] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3567: couldn't read orphan inode 15 (err -117) [ 265.178290][T14611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 265.271454][T14624] lo speed is unknown, defaulting to 1000 [ 265.444850][T14635] team1: entered promiscuous mode [ 265.450041][T14635] team1: entered allmulticast mode [ 265.645143][T14651] FAULT_INJECTION: forcing a failure. [ 265.645143][T14651] name failslab, interval 1, probability 0, space 0, times 0 [ 265.658019][T14651] CPU: 0 UID: 0 PID: 14651 Comm: syz.2.3586 Not tainted syzkaller #0 PREEMPT(voluntary) [ 265.658054][T14651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 265.658071][T14651] Call Trace: [ 265.658080][T14651] [ 265.658090][T14651] __dump_stack+0x1d/0x30 [ 265.658134][T14651] dump_stack_lvl+0xe8/0x140 [ 265.658154][T14651] dump_stack+0x15/0x1b [ 265.658171][T14651] should_fail_ex+0x265/0x280 [ 265.658198][T14651] should_failslab+0x8c/0xb0 [ 265.658327][T14651] __kmalloc_noprof+0xa5/0x3e0 [ 265.658362][T14651] ? usb_hcd_submit_urb+0x5d3/0x1200 [ 265.658395][T14651] usb_hcd_submit_urb+0x5d3/0x1200 [ 265.658431][T14651] usb_submit_urb+0xae2/0xc20 [ 265.658502][T14651] usbfs_start_wait_urb+0x95/0x1c0 [ 265.658540][T14651] do_proc_control+0x445/0x8b0 [ 265.658574][T14651] proc_control+0x71/0xa0 [ 265.658665][T14651] usbdev_ioctl+0x948/0x1710 [ 265.658698][T14651] ? __pfx_usbdev_ioctl+0x10/0x10 [ 265.658725][T14651] __se_sys_ioctl+0xce/0x140 [ 265.658758][T14651] __x64_sys_ioctl+0x43/0x50 [ 265.658829][T14651] x64_sys_call+0x1816/0x2ff0 [ 265.658861][T14651] do_syscall_64+0xd2/0x200 [ 265.658897][T14651] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 265.658929][T14651] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 265.658954][T14651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.658997][T14651] RIP: 0033:0x7ff552c2ebe9 [ 265.659017][T14651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.659087][T14651] RSP: 002b:00007ff55168f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 265.659112][T14651] RAX: ffffffffffffffda RBX: 00007ff552e55fa0 RCX: 00007ff552c2ebe9 [ 265.659135][T14651] RDX: 00002000000000c0 RSI: 00000000c0185500 RDI: 0000000000000003 [ 265.659215][T14651] RBP: 00007ff55168f090 R08: 0000000000000000 R09: 0000000000000000 [ 265.659232][T14651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.659247][T14651] R13: 00007ff552e56038 R14: 00007ff552e55fa0 R15: 00007fff55bb3508 [ 265.659267][T14651] [ 265.928871][ T1388] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.964243][ T1388] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.964366][ T1388] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.964420][ T1388] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.964544][T11006] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.969856][T14658] lo speed is unknown, defaulting to 1000 [ 266.141035][T14682] loop2: detected capacity change from 0 to 2048 [ 266.176012][T14682] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.177124][T14684] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.201559][T14682] FAULT_INJECTION: forcing a failure. [ 266.201559][T14682] name failslab, interval 1, probability 0, space 0, times 0 [ 266.214493][T14682] CPU: 0 UID: 0 PID: 14682 Comm: syz.2.3599 Not tainted syzkaller #0 PREEMPT(voluntary) [ 266.214521][T14682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 266.214533][T14682] Call Trace: [ 266.214541][T14682] [ 266.214551][T14682] __dump_stack+0x1d/0x30 [ 266.214584][T14682] dump_stack_lvl+0xe8/0x140 [ 266.214609][T14682] dump_stack+0x15/0x1b [ 266.214629][T14682] should_fail_ex+0x265/0x280 [ 266.214668][T14682] should_failslab+0x8c/0xb0 [ 266.214698][T14682] kmem_cache_alloc_noprof+0x50/0x310 [ 266.214733][T14682] ? __es_insert_extent+0x508/0xee0 [ 266.214785][T14682] __es_insert_extent+0x508/0xee0 [ 266.214818][T14682] ? ext4_ext_search_right+0x30b/0x4f0 [ 266.214849][T14682] __es_remove_extent+0x6a1/0xda0 [ 266.214936][T14682] ext4_es_insert_extent+0x3b4/0x1c10 [ 266.214981][T14682] ext4_map_blocks+0x8cd/0xd00 [ 266.215039][T14682] ext4_iomap_begin+0x88d/0xe00 [ 266.215082][T14682] ? __pfx_ext4_iomap_begin+0x10/0x10 [ 266.215114][T14682] iomap_iter+0x332/0x730 [ 266.215166][T14682] ? should_failslab+0x8c/0xb0 [ 266.215201][T14682] __iomap_dio_rw+0x708/0x1250 [ 266.215289][T14682] ? ext4_journal_check_start+0x11a/0x1b0 [ 266.215317][T14682] iomap_dio_rw+0x40/0x90 [ 266.215349][T14682] ext4_file_write_iter+0xad9/0xf00 [ 266.215383][T14682] do_iter_readv_writev+0x499/0x540 [ 266.215409][T14682] vfs_writev+0x2df/0x8b0 [ 266.215503][T14682] __se_sys_pwritev2+0xfc/0x1c0 [ 266.215538][T14682] __x64_sys_pwritev2+0x67/0x80 [ 266.215562][T14682] x64_sys_call+0x2c55/0x2ff0 [ 266.215581][T14682] do_syscall_64+0xd2/0x200 [ 266.215614][T14682] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 266.215634][T14682] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 266.215656][T14682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.215706][T14682] RIP: 0033:0x7ff552c2ebe9 [ 266.215719][T14682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.215734][T14682] RSP: 002b:00007ff55168f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000148 [ 266.215750][T14682] RAX: ffffffffffffffda RBX: 00007ff552e55fa0 RCX: 00007ff552c2ebe9 [ 266.215761][T14682] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000004 [ 266.215772][T14682] RBP: 00007ff55168f090 R08: 0000000000000000 R09: 0000000000000000 [ 266.215782][T14682] R10: 0000000000001400 R11: 0000000000000246 R12: 0000000000000001 [ 266.215813][T14682] R13: 00007ff552e56038 R14: 00007ff552e55fa0 R15: 00007fff55bb3508 [ 266.215829][T14682] [ 266.475091][T14690] vhci_hcd: invalid port number 96 [ 266.480259][T14690] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 266.490203][T12621] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.500524][T14684] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.528609][T14697] FAULT_INJECTION: forcing a failure. [ 266.528609][T14697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.541922][T14697] CPU: 1 UID: 0 PID: 14697 Comm: syz.2.3602 Not tainted syzkaller #0 PREEMPT(voluntary) [ 266.541955][T14697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 266.541971][T14697] Call Trace: [ 266.541978][T14697] [ 266.541988][T14697] __dump_stack+0x1d/0x30 [ 266.542041][T14697] dump_stack_lvl+0xe8/0x140 [ 266.542067][T14697] dump_stack+0x15/0x1b [ 266.542086][T14697] should_fail_ex+0x265/0x280 [ 266.542108][T14697] should_fail+0xb/0x20 [ 266.542126][T14697] should_fail_usercopy+0x1a/0x20 [ 266.542199][T14697] _copy_from_user+0x1c/0xb0 [ 266.542234][T14697] proc_submiturb+0x43/0xa0 [ 266.542304][T14697] usbdev_ioctl+0xcc2/0x1710 [ 266.542330][T14697] ? __pfx_usbdev_ioctl+0x10/0x10 [ 266.542360][T14697] __se_sys_ioctl+0xce/0x140 [ 266.542478][T14697] __x64_sys_ioctl+0x43/0x50 [ 266.542518][T14697] x64_sys_call+0x1816/0x2ff0 [ 266.542545][T14697] do_syscall_64+0xd2/0x200 [ 266.542630][T14697] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 266.542680][T14697] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 266.542705][T14697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.542724][T14697] RIP: 0033:0x7ff552c2ebe9 [ 266.542737][T14697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.542752][T14697] RSP: 002b:00007ff55168f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 266.542840][T14697] RAX: ffffffffffffffda RBX: 00007ff552e55fa0 RCX: 00007ff552c2ebe9 [ 266.542852][T14697] RDX: 0000200000000140 RSI: 000000008038550a RDI: 0000000000000003 [ 266.542863][T14697] RBP: 00007ff55168f090 R08: 0000000000000000 R09: 0000000000000000 [ 266.542874][T14697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.542885][T14697] R13: 00007ff552e56038 R14: 00007ff552e55fa0 R15: 00007fff55bb3508 [ 266.542903][T14697] [ 266.733499][T14698] netlink: 'syz.4.3603': attribute type 10 has an invalid length. [ 266.751263][T14698] team0: Port device geneve1 added [ 266.762789][T14684] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.800100][ T10] Process accounting resumed [ 266.813303][T14700] loop2: detected capacity change from 0 to 512 [ 266.835127][T14700] EXT4-fs: Ignoring removed mblk_io_submit option [ 266.854119][T14706] loop4: detected capacity change from 0 to 512 [ 266.860874][T14706] ext4: Unknown parameter 'smackfsfloor' [ 266.867793][T14700] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 266.884538][T14684] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.898022][T14700] EXT4-fs (loop2): 1 truncate cleaned up [ 266.904495][T14700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.970662][ T9] hid_parser_main: 86 callbacks suppressed [ 266.970685][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 266.984159][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 266.991726][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 266.999218][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 267.006675][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 267.009783][T14711] loop4: detected capacity change from 0 to 1024 [ 267.014128][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 267.014211][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 267.035729][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 267.043249][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 267.046303][T14711] EXT4-fs: Ignoring removed nomblk_io_submit option [ 267.050786][ T9] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 267.058977][T14709] vhci_hcd: invalid port number 96 [ 267.070385][T14709] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 267.070674][ T9] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [sy] on syz0 [ 267.097035][T14711] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.122867][T14718] lo speed is unknown, defaulting to 1000 [ 267.143899][T11006] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.160847][T14717] fido_id[14717]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 267.199510][T14721] loop1: detected capacity change from 0 to 512 [ 267.208338][T14721] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 267.241704][T14721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 267.273346][T14721] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.315914][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.334470][ T51] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.346083][T14727] loop4: detected capacity change from 0 to 512 [ 267.349778][ T51] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.374494][T14727] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 267.407724][ T51] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.423632][T14727] EXT4-fs error (device loop4): __ext4_iget:5464: inode #15: block 1803188595: comm syz.4.3613: invalid block [ 267.454642][T14727] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3613: couldn't read orphan inode 15 (err -117) [ 267.468680][T14727] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 267.722556][T14739] netlink: 'syz.0.3617': attribute type 10 has an invalid length. [ 267.730574][T14739] __nla_validate_parse: 5 callbacks suppressed [ 267.730593][T14739] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3617'. [ 267.834665][T14743] siw: device registration error -23 [ 267.854100][T14739] geneve1: entered promiscuous mode [ 267.859483][T14739] geneve1: entered allmulticast mode [ 267.865768][T14739] team0: Port device geneve1 added [ 267.894617][T12621] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.972656][T14721] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 267.988153][T14721] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 9 with max blocks 2048 with error 28 [ 268.000723][T14721] EXT4-fs (loop1): This should not happen!! Data will be lost [ 268.000723][T14721] [ 268.010402][T14721] EXT4-fs (loop1): Total free blocks count 0 [ 268.016440][T14721] EXT4-fs (loop1): Free/Dirty block details [ 268.022398][T14721] EXT4-fs (loop1): free_blocks=39626 [ 268.027756][T14721] EXT4-fs (loop1): dirty_blocks=4096 [ 268.033155][T14721] EXT4-fs (loop1): Block reservation details [ 268.039185][T14721] EXT4-fs (loop1): i_reserved_data_blocks=4096 [ 268.081587][T14754] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3621'. [ 268.103747][ T577] EXT4-fs (loop1): Delayed block allocation failed for inode 16 at logical offset 2058 with max blocks 2047 with error 28 [ 268.200724][T11006] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 268.224134][T14760] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.267471][T14760] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.294197][T14764] lo speed is unknown, defaulting to 1000 [ 268.336727][T14760] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.370678][T14762] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3622'. [ 268.396957][T14760] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.508735][ T1388] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.538037][ T1388] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.571024][ T1388] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.595358][ T1388] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.631206][T14787] loop1: detected capacity change from 0 to 128 [ 268.654644][T14787] FAT-fs (loop1): Directory bread(block 162) failed [ 268.669025][T10855] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [sy] on syz0 [ 268.692243][T14787] FAT-fs (loop1): Directory bread(block 163) failed [ 268.706626][T14787] FAT-fs (loop1): Directory bread(block 164) failed [ 268.713564][T14787] FAT-fs (loop1): Directory bread(block 165) failed [ 268.724793][T14789] loop4: detected capacity change from 0 to 1024 [ 268.736791][T14787] FAT-fs (loop1): Directory bread(block 166) failed [ 268.743460][T14787] FAT-fs (loop1): Directory bread(block 167) failed [ 268.748748][T14789] EXT4-fs: Ignoring removed nomblk_io_submit option [ 268.781705][T14787] FAT-fs (loop1): Directory bread(block 168) failed [ 268.792221][T14787] FAT-fs (loop1): Directory bread(block 169) failed [ 268.806869][T14789] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 268.841441][T14787] FAT-fs (loop1): Directory bread(block 162) failed [ 268.864727][T14787] FAT-fs (loop1): Directory bread(block 163) failed [ 268.874376][T14787] syz.1.3633: attempt to access beyond end of device [ 268.874376][T14787] loop1: rw=3, sector=226, nr_sectors = 6 limit=128 [ 268.889624][T14787] syz.1.3633: attempt to access beyond end of device [ 268.889624][T14787] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 268.964969][T11006] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 269.006253][ T3288] udevd[3288]: symlink '../../loop4' '/dev/disk/by-diskseq/1206.tmp-b7:4' failed: Read-only file system [ 269.048288][ T3476] udevd[3476]: symlink '../../loop1' '/dev/disk/by-diskseq/1205.tmp-b7:1' failed: Read-only file system [ 269.049039][ T3288] udevd[3288]: symlink '../../loop4' '/dev/disk/by-diskseq/1206.tmp-b7:4' failed: Read-only file system [ 269.094607][ T3288] udevd[3288]: symlink '../../loop4' '/dev/disk/by-diskseq/1207.tmp-b7:4' failed: Read-only file system [ 269.150858][T14812] loop1: detected capacity change from 0 to 128 [ 269.158594][T14812] FAT-fs (loop1): Directory bread(block 162) failed [ 269.168506][T14812] FAT-fs (loop1): Directory bread(block 163) failed [ 269.175246][T14812] FAT-fs (loop1): Directory bread(block 164) failed [ 269.182701][T14812] FAT-fs (loop1): Directory bread(block 165) failed [ 269.191469][T14812] FAT-fs (loop1): Directory bread(block 166) failed [ 269.206001][T14812] FAT-fs (loop1): Directory bread(block 167) failed [ 269.212727][T14812] FAT-fs (loop1): Directory bread(block 168) failed [ 269.226902][T14812] FAT-fs (loop1): Directory bread(block 169) failed [ 269.239416][ T3288] udevd[3288]: symlink '../../loop1' '/dev/disk/by-diskseq/1205.tmp-b7:1' failed: Read-only file system [ 269.264261][T14812] FAT-fs (loop1): Directory bread(block 162) failed [ 269.274450][T14812] FAT-fs (loop1): Directory bread(block 163) failed [ 269.286901][ T3288] udevd[3288]: symlink '../../loop1' '/dev/disk/by-diskseq/1205.tmp-b7:1' failed: Read-only file system [ 269.303605][T14812] syz.1.3641: attempt to access beyond end of device [ 269.303605][T14812] loop1: rw=3, sector=226, nr_sectors = 6 limit=128 [ 269.331065][ T3288] udevd[3288]: symlink '../../loop1' '/dev/disk/by-diskseq/1209.tmp-b7:1' failed: Read-only file system [ 269.346762][T14812] syz.1.3641: attempt to access beyond end of device [ 269.346762][T14812] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 269.401754][ T29] kauditd_printk_skb: 517 callbacks suppressed [ 269.401771][ T29] audit: type=1326 audit(1755684952.439:21736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14802 comm="syz.6.3639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc7fbebe9 code=0x7ffc0000 [ 269.406698][ T3288] udevd[3288]: symlink '../../loop1' '/dev/disk/by-diskseq/1209.tmp-b7:1' failed: Read-only file system [ 269.408121][ T29] audit: type=1326 audit(1755684952.439:21737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14802 comm="syz.6.3639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc7fbebe9 code=0x7ffc0000 [ 269.471569][ T3288] udevd[3288]: symlink '../../loop1' '/dev/disk/by-diskseq/1209.tmp-b7:1' failed: Read-only file system [ 269.492394][ T3288] udevd[3288]: symlink '../../loop1' '/dev/disk/by-diskseq/1210.tmp-b7:1' failed: Read-only file system [ 269.538629][ T29] audit: type=1326 audit(1755684952.569:21738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14827 comm="syz.1.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814283ebe9 code=0x7ffc0000 [ 269.562355][ T29] audit: type=1326 audit(1755684952.579:21739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14827 comm="syz.1.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814283ebe9 code=0x7ffc0000 [ 269.586239][ T29] audit: type=1326 audit(1755684952.579:21740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14827 comm="syz.1.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f814283ebe9 code=0x7ffc0000 [ 269.610269][ T29] audit: type=1326 audit(1755684952.579:21741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14827 comm="syz.1.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814283ebe9 code=0x7ffc0000 [ 269.633897][ T29] audit: type=1326 audit(1755684952.579:21742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14827 comm="syz.1.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814283ebe9 code=0x7ffc0000 [ 269.657602][ T29] audit: type=1326 audit(1755684952.579:21743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14827 comm="syz.1.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f814283ebe9 code=0x7ffc0000 [ 269.681368][ T29] audit: type=1326 audit(1755684952.579:21744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14827 comm="syz.1.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814283ebe9 code=0x7ffc0000 [ 269.705069][ T29] audit: type=1326 audit(1755684952.579:21745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14827 comm="syz.1.3646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f814283ebe9 code=0x7ffc0000 [ 269.905567][T14837] loop2: detected capacity change from 0 to 1024 [ 269.912919][T14837] EXT4-fs: Ignoring removed i_version option [ 269.927568][T14837] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 270.356405][T14837] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.3647: Invalid block bitmap block 0 in block_group 0 [ 270.371568][T14837] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.3647: Failed to acquire dquot type 0 [ 270.385860][T14837] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.3647: Freeing blocks not in datazone - block = 0, count = 4096 [ 270.400134][T14837] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.3647: Invalid inode bitmap blk 0 in block_group 0 [ 270.413596][T14837] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 270.423037][T14837] EXT4-fs (loop2): 1 orphan inode deleted [ 270.430007][T14837] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 271.383009][ T7017] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:8: Failed to release dquot type 0 [ 271.395541][T12621] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.449035][T14849] bond1 (unregistering): Released all slaves [ 271.467326][ T3414] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [sy] on syz0 [ 271.480900][T14854] loop6: detected capacity change from 0 to 1024 [ 271.496076][T14854] EXT4-fs: Ignoring removed nomblk_io_submit option [ 271.530409][T14854] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 271.584406][T14866] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3657'. [ 271.606436][T14868] atomic_op ffff88811a1c2528 conn xmit_atomic 0000000000000000 [ 271.621563][T13412] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 271.677030][T14876] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3661'. [ 271.738442][T14881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3665'. [ 271.776896][T14881] bond1 (unregistering): Released all slaves [ 271.887294][T14890] lo speed is unknown, defaulting to 1000 [ 271.910260][T14898] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3671'. [ 271.992207][ T36] hid_parser_main: 86 callbacks suppressed [ 271.992306][ T36] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 272.005708][ T36] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 272.013197][ T36] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 272.020643][ T36] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 272.028160][ T36] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 272.035661][ T36] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 272.043187][ T36] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 272.050666][ T36] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 272.058159][ T36] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 272.065578][ T36] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 272.075946][T14900] loop2: detected capacity change from 0 to 512 [ 272.086132][T14900] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 272.095503][T14900] EXT4-fs error (device loop2): __ext4_iget:5464: inode #15: block 1803188595: comm syz.2.3672: invalid block [ 272.107474][T14900] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3672: couldn't read orphan inode 15 (err -117) [ 272.108719][ T36] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [sy] on syz0 [ 272.197179][T14900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.232619][T14911] fido_id[14911]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 272.288627][T14921] FAULT_INJECTION: forcing a failure. [ 272.288627][T14921] name failslab, interval 1, probability 0, space 0, times 0 [ 272.289584][T14917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3679'. [ 272.301555][T14921] CPU: 0 UID: 0 PID: 14921 Comm: syz.1.3681 Not tainted syzkaller #0 PREEMPT(voluntary) [ 272.301653][T14921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 272.301672][T14921] Call Trace: [ 272.301681][T14921] [ 272.301691][T14921] __dump_stack+0x1d/0x30 [ 272.301723][T14921] dump_stack_lvl+0xe8/0x140 [ 272.301760][T14921] dump_stack+0x15/0x1b [ 272.301792][T14921] should_fail_ex+0x265/0x280 [ 272.301822][T14921] should_failslab+0x8c/0xb0 [ 272.301857][T14921] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 272.301922][T14921] ? sidtab_sid2str_get+0xa0/0x130 [ 272.301955][T14921] kmemdup_noprof+0x2b/0x70 [ 272.302060][T14921] sidtab_sid2str_get+0xa0/0x130 [ 272.302089][T14921] security_sid_to_context_core+0x1eb/0x2e0 [ 272.302170][T14921] security_sid_to_context+0x27/0x40 [ 272.302243][T14921] avc_audit_post_callback+0x10f/0x520 [ 272.302336][T14921] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 272.302389][T14921] common_lsm_audit+0x1bb/0x230 [ 272.302513][T14921] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 272.302627][T14921] slow_avc_audit+0x104/0x140 [ 272.302664][T14921] avc_has_perm+0x13a/0x180 [ 272.302701][T14921] selinux_socket_sendmsg+0x175/0x1b0 [ 272.302774][T14921] security_socket_sendmsg+0x48/0x80 [ 272.302816][T14921] __sock_sendmsg+0x30/0x180 [ 272.302880][T14921] ____sys_sendmsg+0x345/0x4e0 [ 272.302915][T14921] ___sys_sendmsg+0x17b/0x1d0 [ 272.302961][T14921] __sys_sendmmsg+0x178/0x300 [ 272.303006][T14921] __x64_sys_sendmmsg+0x57/0x70 [ 272.303077][T14921] x64_sys_call+0x1c4a/0x2ff0 [ 272.303109][T14921] do_syscall_64+0xd2/0x200 [ 272.303146][T14921] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 272.303180][T14921] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 272.303218][T14921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.303250][T14921] RIP: 0033:0x7f814283ebe9 [ 272.303271][T14921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.303299][T14921] RSP: 002b:00007f81412a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 272.303333][T14921] RAX: ffffffffffffffda RBX: 00007f8142a65fa0 RCX: 00007f814283ebe9 [ 272.303352][T14921] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000005 [ 272.303370][T14921] RBP: 00007f81412a7090 R08: 0000000000000000 R09: 0000000000000000 [ 272.303387][T14921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 272.303405][T14921] R13: 00007f8142a66038 R14: 00007f8142a65fa0 R15: 00007ffd9a7db498 [ 272.303432][T14921] [ 272.619060][T14930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3683'. [ 272.730805][ T10] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [sy] on syz0 [ 272.754602][T14942] loop6: detected capacity change from 0 to 128 [ 272.762152][T14940] loop1: detected capacity change from 0 to 1024 [ 272.773345][T14940] EXT4-fs: Ignoring removed nomblk_io_submit option [ 272.782270][T14942] FAT-fs (loop6): Directory bread(block 162) failed [ 272.810068][T14942] FAT-fs (loop6): Directory bread(block 163) failed [ 272.834236][T14940] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.848278][T14942] FAT-fs (loop6): Directory bread(block 164) failed [ 272.854947][T14942] FAT-fs (loop6): Directory bread(block 165) failed [ 272.878076][T14942] FAT-fs (loop6): Directory bread(block 166) failed [ 272.887155][T14942] FAT-fs (loop6): Directory bread(block 167) failed [ 272.895759][T14942] FAT-fs (loop6): Directory bread(block 168) failed [ 272.902833][T14942] FAT-fs (loop6): Directory bread(block 169) failed [ 272.907385][T11826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.922921][T14942] FAT-fs (loop6): Directory bread(block 162) failed [ 272.929780][T14942] FAT-fs (loop6): Directory bread(block 163) failed [ 272.938963][T14942] syz.6.3688: attempt to access beyond end of device [ 272.938963][T14942] loop6: rw=3, sector=226, nr_sectors = 6 limit=128 [ 272.951749][T12621] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 272.952477][T14942] syz.6.3688: attempt to access beyond end of device [ 272.952477][T14942] loop6: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 272.975024][T14949] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3689'. [ 273.023048][T14951] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3691'. [ 273.040483][T14953] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.055193][T14956] loop6: detected capacity change from 0 to 128 [ 273.064256][T14956] FAT-fs (loop6): Directory bread(block 162) failed [ 273.072316][T14956] FAT-fs (loop6): Directory bread(block 163) failed [ 273.079169][T14956] FAT-fs (loop6): Directory bread(block 164) failed [ 273.086063][T14956] FAT-fs (loop6): Directory bread(block 165) failed [ 273.100477][T14956] FAT-fs (loop6): Directory bread(block 166) failed [ 273.107219][T14956] FAT-fs (loop6): Directory bread(block 167) failed [ 273.114241][T14958] loop2: detected capacity change from 0 to 512 [ 273.122844][T14958] EXT4-fs: Ignoring removed mblk_io_submit option [ 273.129967][T14953] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.140189][T14956] FAT-fs (loop6): Directory bread(block 168) failed [ 273.147010][T14956] FAT-fs (loop6): Directory bread(block 169) failed [ 273.154928][T14958] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 273.164241][T14956] FAT-fs (loop6): Directory bread(block 162) failed [ 273.165795][T14958] EXT4-fs (loop2): 1 truncate cleaned up [ 273.171991][T14956] FAT-fs (loop6): Directory bread(block 163) failed [ 273.177556][T14958] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.186340][T14956] syz.6.3692: attempt to access beyond end of device [ 273.186340][T14956] loop6: rw=3, sector=226, nr_sectors = 6 limit=128 [ 273.210302][T14956] syz.6.3692: attempt to access beyond end of device [ 273.210302][T14956] loop6: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 273.226143][T14953] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.238670][T12621] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 273.259234][T14968] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3697'. [ 273.290611][T14953] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.317123][ T36] Process accounting resumed [ 273.325250][T14973] loop6: detected capacity change from 0 to 512 [ 273.334277][T14973] EXT4-fs: Ignoring removed mblk_io_submit option [ 273.342060][T14973] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 273.359858][T14973] EXT4-fs (loop6): 1 truncate cleaned up [ 273.371849][T14974] loop2: detected capacity change from 0 to 512 [ 273.379422][ T577] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.399828][T14973] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.405837][ T577] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.439050][T14981] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3702'. [ 273.448264][T14981] IPVS: Error joining to the multicast group [ 273.456192][T14974] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 273.480707][T14974] EXT4-fs error (device loop2): __ext4_iget:5464: inode #15: block 1803188595: comm syz.2.3698: invalid block [ 273.493629][ T577] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.505607][T14974] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3698: couldn't read orphan inode 15 (err -117) [ 273.575191][ T577] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 273.584857][T14974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 273.647694][T14989] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3704'. [ 274.027825][T15005] loop4: detected capacity change from 0 to 2048 [ 274.039365][T15005] EXT4-fs (loop4): #clusters per group too big: 16384 [ 274.062602][ T3288] udevd[3288]: symlink '../../loop4' '/dev/disk/by-diskseq/1227.tmp-b7:4' failed: Read-only file system [ 274.077399][ T3288] udevd[3288]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 274.109802][ T3288] udevd[3288]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 274.124679][ T3288] udevd[3288]: symlink '../../loop4' '/dev/disk/by-diskseq/1227.tmp-b7:4' failed: Read-only file system [ 274.146891][ T3288] udevd[3288]: symlink '../../loop4' '/dev/disk/by-diskseq/1227.tmp-b7:4' failed: Read-only file system [ 274.202242][T15008] FAULT_INJECTION: forcing a failure. [ 274.202242][T15008] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 274.215433][T15008] CPU: 0 UID: 0 PID: 15008 Comm: syz.4.3712 Not tainted syzkaller #0 PREEMPT(voluntary) [ 274.215467][T15008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 274.215483][T15008] Call Trace: [ 274.215493][T15008] [ 274.215503][T15008] __dump_stack+0x1d/0x30 [ 274.215724][T15008] dump_stack_lvl+0xe8/0x140 [ 274.215748][T15008] dump_stack+0x15/0x1b [ 274.215768][T15008] should_fail_ex+0x265/0x280 [ 274.215857][T15008] should_fail+0xb/0x20 [ 274.215948][T15008] should_fail_usercopy+0x1a/0x20 [ 274.216003][T15008] _copy_to_user+0x20/0xa0 [ 274.216046][T15008] simple_read_from_buffer+0xb5/0x130 [ 274.216076][T15008] proc_fail_nth_read+0x10e/0x150 [ 274.216109][T15008] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 274.216177][T15008] vfs_read+0x1a8/0x770 [ 274.216201][T15008] ? __rcu_read_unlock+0x4f/0x70 [ 274.216227][T15008] ? __fget_files+0x184/0x1c0 [ 274.216259][T15008] ksys_read+0xda/0x1a0 [ 274.216326][T15008] __x64_sys_read+0x40/0x50 [ 274.216351][T15008] x64_sys_call+0x27bc/0x2ff0 [ 274.216377][T15008] do_syscall_64+0xd2/0x200 [ 274.216408][T15008] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 274.216467][T15008] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 274.216497][T15008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.216523][T15008] RIP: 0033:0x7f6b8a2cd5fc [ 274.216542][T15008] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 274.216563][T15008] RSP: 002b:00007f6b88d2f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 274.216638][T15008] RAX: ffffffffffffffda RBX: 00007f6b8a4f5fa0 RCX: 00007f6b8a2cd5fc [ 274.216654][T15008] RDX: 000000000000000f RSI: 00007f6b88d2f0a0 RDI: 0000000000000004 [ 274.216670][T15008] RBP: 00007f6b88d2f090 R08: 0000000000000000 R09: 0000000000000000 [ 274.216685][T15008] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 274.216701][T15008] R13: 00007f6b8a4f6038 R14: 00007f6b8a4f5fa0 R15: 00007ffd79f6bd28 [ 274.216734][T15008] [ 274.437461][T12621] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.449500][T13412] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 274.472149][ T3288] udevd[3288]: symlink '../../loop2' '/dev/disk/by-diskseq/1226.tmp-b7:2' failed: Read-only file system [ 274.496657][ T3637] udevd[3637]: symlink '../../loop4' '/dev/disk/by-diskseq/1228.tmp-b7:4' failed: Read-only file system [ 274.518910][ T3476] udevd[3476]: symlink '../../loop6' '/dev/disk/by-diskseq/1225.tmp-b7:6' failed: Read-only file system [ 274.519496][T15015] loop2: detected capacity change from 0 to 128 [ 274.536489][ T29] kauditd_printk_skb: 422 callbacks suppressed [ 274.536506][ T29] audit: type=1400 audit(1755684957.566:22165): avc: denied { create } for pid=15011 comm="syz.4.3715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 274.537265][T15012] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3715'. [ 274.542885][ T29] audit: type=1400 audit(1755684957.566:22166): avc: denied { setopt } for pid=15011 comm="syz.4.3715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 274.570547][ T3476] udevd[3476]: symlink '../../loop6' '/dev/disk/by-diskseq/1225.tmp-b7:6' failed: Read-only file system [ 274.606093][ T3288] udevd[3288]: symlink '../../loop2' '/dev/disk/by-diskseq/1226.tmp-b7:2' failed: Read-only file system [ 274.624566][ T29] audit: type=1326 audit(1755684957.616:22167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15013 comm="syz.6.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc7fbebe9 code=0x7ffc0000 [ 274.648506][ T29] audit: type=1326 audit(1755684957.616:22168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15013 comm="syz.6.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc7fbebe9 code=0x7ffc0000 [ 274.672143][ T29] audit: type=1326 audit(1755684957.636:22169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15013 comm="syz.6.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcfc7fbebe9 code=0x7ffc0000 [ 274.696071][ T29] audit: type=1326 audit(1755684957.636:22170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15013 comm="syz.6.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc7fbebe9 code=0x7ffc0000 [ 274.719824][ T29] audit: type=1326 audit(1755684957.636:22171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15013 comm="syz.6.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc7fbebe9 code=0x7ffc0000 [ 274.743618][ T29] audit: type=1326 audit(1755684957.636:22172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15013 comm="syz.6.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcfc7fbebe9 code=0x7ffc0000 [ 274.767379][ T29] audit: type=1326 audit(1755684957.636:22173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15013 comm="syz.6.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcfc7fbebe9 code=0x7ffc0000 [ 274.791239][ T29] audit: type=1326 audit(1755684957.636:22174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15013 comm="syz.6.3714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcfc7fbebe9 code=0x7ffc0000 [ 274.820342][T15015] FAT-fs (loop2): Directory bread(block 162) failed [ 274.830739][T15015] FAT-fs (loop2): Directory bread(block 163) failed [ 274.847850][T15015] FAT-fs (loop2): Directory bread(block 164) failed [ 274.864888][T15015] FAT-fs (loop2): Directory bread(block 165) failed [ 274.874870][T15015] FAT-fs (loop2): Directory bread(block 166) failed [ 274.882603][T15015] FAT-fs (loop2): Directory bread(block 167) failed [ 274.897413][T15015] FAT-fs (loop2): Directory bread(block 168) failed [ 274.904633][T15026] netlink: 100 bytes leftover after parsing attributes in process `syz.0.3719'. [ 274.923780][T15015] FAT-fs (loop2): Directory bread(block 169) failed [ 274.982139][T15015] FAT-fs (loop2): Directory bread(block 162) failed [ 274.989314][T15015] FAT-fs (loop2): Directory bread(block 163) failed [ 274.996648][T15015] syz.2.3716: attempt to access beyond end of device [ 274.996648][T15015] loop2: rw=3, sector=226, nr_sectors = 6 limit=128 [ 275.017425][T15015] syz.2.3716: attempt to access beyond end of device [ 275.017425][T15015] loop2: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 275.138191][T15038] loop2: detected capacity change from 0 to 4096 [ 275.189732][T15038] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 275.242902][T15044] syz_tun: entered allmulticast mode [ 275.248562][T15043] syz_tun: left allmulticast mode [ 275.302053][T15030] net_ratelimit: 10 callbacks suppressed [ 275.302070][T15030] Set syz1 is full, maxelem 65536 reached [ 275.524388][T15062] lo speed is unknown, defaulting to 1000 [ 275.791271][T15076] syz_tun: entered allmulticast mode [ 275.807713][T15075] syz_tun: left allmulticast mode [ 275.900019][ T9] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [sy] on syz0 [ 275.917832][T15081] loop6: detected capacity change from 0 to 1024 [ 275.924851][T15081] EXT4-fs: Ignoring removed nomblk_io_submit option [ 275.970392][T12621] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.992740][T15081] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.022636][T15086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3740'. [ 276.101547][T15086] IPVS: Error joining to the multicast group [ 276.131797][T13412] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 276.208992][T15094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15094 comm=syz.6.3743 [ 276.256885][T15099] loop6: detected capacity change from 0 to 164 [ 276.322077][T15099] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3745'. [ 276.354440][T15104] syz_tun: entered allmulticast mode [ 276.374089][T15099] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 276.383490][T15103] syz_tun: left allmulticast mode [ 276.418505][T15107] netlink: 'syz.1.3744': attribute type 10 has an invalid length. [ 276.426681][T15107] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3744'. [ 276.441916][T15108] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 276.461632][T15108] bond1 (unregistering): Released all slaves [ 276.486654][T15111] siw: device registration error -23 [ 276.529162][ T2955] Process accounting resumed [ 276.536788][T15113] loop4: detected capacity change from 0 to 512 [ 276.543595][T15113] EXT4-fs: Ignoring removed mblk_io_submit option [ 276.552476][T15113] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 276.563482][T15113] EXT4-fs (loop4): 1 truncate cleaned up [ 276.569690][T15113] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 276.995453][T15120] bridge0: port 3(bond0) entered blocking state [ 277.001866][T15120] bridge0: port 3(bond0) entered disabled state [ 277.044426][T15122] FAULT_INJECTION: forcing a failure. [ 277.044426][T15122] name failslab, interval 1, probability 0, space 0, times 0 [ 277.056449][T15120] bond0: entered allmulticast mode [ 277.057498][T15122] CPU: 0 UID: 0 PID: 15122 Comm: syz.2.3752 Not tainted syzkaller #0 PREEMPT(voluntary) [ 277.057537][T15122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 277.057555][T15122] Call Trace: [ 277.057566][T15122] [ 277.057577][T15122] __dump_stack+0x1d/0x30 [ 277.057608][T15122] dump_stack_lvl+0xe8/0x140 [ 277.057639][T15122] dump_stack+0x15/0x1b [ 277.057662][T15122] should_fail_ex+0x265/0x280 [ 277.057687][T15122] ? resv_map_alloc+0x57/0x190 [ 277.057714][T15122] should_failslab+0x8c/0xb0 [ 277.057825][T15122] __kmalloc_cache_noprof+0x4c/0x320 [ 277.057870][T15122] resv_map_alloc+0x57/0x190 [ 277.057909][T15122] hugetlbfs_get_inode+0x67/0x370 [ 277.057959][T15122] hugetlb_file_setup+0x192/0x3d0 [ 277.057994][T15122] ksys_mmap_pgoff+0x157/0x310 [ 277.058088][T15122] x64_sys_call+0x14a3/0x2ff0 [ 277.058192][T15122] do_syscall_64+0xd2/0x200 [ 277.058238][T15122] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 277.058350][T15122] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 277.058386][T15122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.058416][T15122] RIP: 0033:0x7ff552c2ebe9 [ 277.058436][T15122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.058463][T15122] RSP: 002b:00007ff55168f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 277.058557][T15122] RAX: ffffffffffffffda RBX: 00007ff552e55fa0 RCX: 00007ff552c2ebe9 [ 277.058575][T15122] RDX: 0000000000000003 RSI: 0000000000ff5000 RDI: 0000200000000000 [ 277.058592][T15122] RBP: 00007ff55168f090 R08: ffffffffffffffff R09: 0000000000000000 [ 277.058610][T15122] R10: 00020000000ec071 R11: 0000000000000246 R12: 0000000000000001 [ 277.058627][T15122] R13: 00007ff552e56038 R14: 00007ff552e55fa0 R15: 00007fff55bb3508 [ 277.058655][T15122] [ 277.244929][T15120] bond_slave_0: entered allmulticast mode [ 277.250705][T15120] bond_slave_1: entered allmulticast mode [ 277.272021][T15120] bond0: entered promiscuous mode [ 277.277166][T15120] bond_slave_0: entered promiscuous mode [ 277.282978][T15120] bond_slave_1: entered promiscuous mode [ 277.309813][T11267] hid_parser_main: 86 callbacks suppressed [ 277.309899][T11267] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 277.323432][T11267] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 277.330865][T11267] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 277.338356][T11267] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 277.345835][T11267] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 277.353349][T11267] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 277.360635][T15120] bridge0: port 3(bond0) entered blocking state [ 277.360979][T11267] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 277.367071][T15120] bridge0: port 3(bond0) entered forwarding state [ 277.381111][T11267] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 277.388671][T11267] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 277.396249][T11267] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 277.408749][T15123] bond0: left allmulticast mode [ 277.413990][T15123] bond_slave_0: left allmulticast mode [ 277.414028][T15124] loop6: detected capacity change from 0 to 164 [ 277.419500][T15123] bond_slave_1: left allmulticast mode [ 277.431563][T15123] bond0: left promiscuous mode [ 277.436344][T15123] bond_slave_0: left promiscuous mode [ 277.442043][T15123] bond_slave_1: left promiscuous mode [ 277.442138][T15126] loop2: detected capacity change from 0 to 1024 [ 277.447680][T15123] bridge0: port 3(bond0) entered disabled state [ 277.462434][T15126] EXT4-fs: Ignoring removed nomblk_io_submit option [ 277.473503][T15120] process 'syz.6.3751' launched './file0' with NULL argv: empty string added [ 277.487777][T15120] syz.6.3751: attempt to access beyond end of device [ 277.487777][T15120] loop6: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 277.507376][T15120] syz.6.3751: attempt to access beyond end of device [ 277.507376][T15120] loop6: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 277.532851][T15126] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 277.538249][T11006] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.545213][T11267] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [sy] on syz0 [ 277.604628][T15132] fido_id[15132]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 277.673563][T15136] IPVS: Error joining to the multicast group [ 277.687908][T12621] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.730925][T11267] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [sy] on syz0 [ 277.750277][T15140] loop4: detected capacity change from 0 to 1024 [ 277.764992][T15145] FAULT_INJECTION: forcing a failure. [ 277.764992][T15145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.778148][T15145] CPU: 0 UID: 0 PID: 15145 Comm: syz.2.3757 Not tainted syzkaller #0 PREEMPT(voluntary) [ 277.778252][T15145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 277.778267][T15145] Call Trace: [ 277.778276][T15145] [ 277.778285][T15145] __dump_stack+0x1d/0x30 [ 277.778312][T15145] dump_stack_lvl+0xe8/0x140 [ 277.778389][T15145] dump_stack+0x15/0x1b [ 277.778410][T15145] should_fail_ex+0x265/0x280 [ 277.778436][T15145] should_fail+0xb/0x20 [ 277.778517][T15145] should_fail_usercopy+0x1a/0x20 [ 277.778543][T15145] _copy_from_user+0x1c/0xb0 [ 277.778618][T15145] __se_sys_add_key+0x209/0x350 [ 277.778650][T15145] __x64_sys_add_key+0x67/0x80 [ 277.778677][T15145] x64_sys_call+0x28c4/0x2ff0 [ 277.778700][T15145] do_syscall_64+0xd2/0x200 [ 277.778726][T15145] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 277.778807][T15145] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 277.778838][T15145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.778865][T15145] RIP: 0033:0x7ff552c2ebe9 [ 277.778883][T15145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.778904][T15145] RSP: 002b:00007ff55168f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 277.778987][T15145] RAX: ffffffffffffffda RBX: 00007ff552e55fa0 RCX: 00007ff552c2ebe9 [ 277.779000][T15145] RDX: 0000200000000280 RSI: 0000200000000180 RDI: 0000200000000380 [ 277.779012][T15145] RBP: 00007ff55168f090 R08: fffffffffffffffb R09: 0000000000000000 [ 277.779092][T15145] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000001 [ 277.779107][T15145] R13: 00007ff552e56038 R14: 00007ff552e55fa0 R15: 00007fff55bb3508 [ 277.779130][T15145] [ 277.783972][T15147] loop1: detected capacity change from 0 to 512 [ 277.794807][T15140] EXT4-fs: Ignoring removed nomblk_io_submit option [ 277.876110][T15147] EXT4-fs: Ignoring removed mblk_io_submit option [ 277.996118][T15140] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.002611][T15151] loop6: detected capacity change from 0 to 1024 [ 278.025154][T15147] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 278.078955][T15147] EXT4-fs (loop1): 1 truncate cleaned up [ 278.111374][T11006] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.124778][T15147] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.169161][T15160] __nla_validate_parse: 3 callbacks suppressed [ 278.169181][T15160] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3764'. [ 278.219704][T11826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 278.228958][T15167] loop2: detected capacity change from 0 to 1024 [ 278.237784][T15167] EXT4-fs: Ignoring removed orlov option [ 278.320372][T15167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.342890][T11267] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [sy] on syz0 [ 278.403603][T15174] loop4: detected capacity change from 0 to 1024 [ 278.454504][T15174] EXT4-fs: Ignoring removed nomblk_io_submit option [ 278.496569][T15174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 278.593250][T15184] loop6: detected capacity change from 0 to 164 [ 278.667452][T15184] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3770'. [ 278.706469][T15188] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3774'. [ 278.781293][T15194] loop6: detected capacity change from 0 to 512 [ 278.801316][T15194] EXT4-fs: Ignoring removed mblk_io_submit option [ 278.829790][T15194] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 278.856436][T15192] loop1: detected capacity change from 0 to 4096 [ 278.898010][T15202] loop2: detected capacity change from 0 to 1024 [ 278.904566][T15194] EXT4-fs (loop6): 1 truncate cleaned up [ 279.017715][T15208] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3780'. [ 279.065443][T15212] vhci_hcd: invalid port number 96 [ 279.070647][T15212] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 279.106677][ T3288] udevd[3288]: symlink '../../loop6' '/dev/disk/by-diskseq/1261.tmp-b7:6' failed: Read-only file system [ 279.143647][ T3476] udevd[3476]: symlink '../../loop1' '/dev/disk/by-diskseq/1260.tmp-b7:1' failed: Read-only file system [ 279.253821][ T3288] udevd[3288]: symlink '../../loop2' '/dev/disk/by-diskseq/1259.tmp-b7:2' failed: Read-only file system [ 279.277844][ T3476] udevd[3476]: symlink '../../loop6' '/dev/disk/by-diskseq/1261.tmp-b7:6' failed: Read-only file system [ 279.285735][ T3288] udevd[3288]: symlink '../../loop2' '/dev/disk/by-diskseq/1259.tmp-b7:2' failed: Read-only file system [ 279.320510][ T3288] udevd[3288]: symlink '../../loop2' '/dev/disk/by-diskseq/1262.tmp-b7:2' failed: Read-only file system [ 279.355247][T15231] loop2: detected capacity change from 0 to 1024 [ 279.358639][ T3288] udevd[3288]: symlink '../../loop6' '/dev/disk/by-diskseq/1261.tmp-b7:6' failed: Read-only file system [ 279.386721][ T3476] udevd[3476]: symlink '../../loop2' '/dev/disk/by-diskseq/1263.tmp-b7:2' failed: Read-only file system [ 279.417883][ T3476] udevd[3476]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system [ 279.459817][ T3288] udevd[3288]: symlink '../../loop2' '/dev/disk/by-diskseq/1263.tmp-b7:2' failed: Read-only file system [ 279.550159][T15239] atomic_op ffff88811668f528 conn xmit_atomic 0000000000000000 [ 279.627726][T15243] loop2: detected capacity change from 0 to 512 [ 279.646168][T15243] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 279.678699][T15245] loop6: detected capacity change from 0 to 128 [ 279.696343][T15245] FAT-fs (loop6): Directory bread(block 162) failed [ 279.719789][T15245] FAT-fs (loop6): Directory bread(block 163) failed [ 279.734321][T15243] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 279.736176][T15245] FAT-fs (loop6): Directory bread(block 164) failed [ 279.753687][T15245] FAT-fs (loop6): Directory bread(block 165) failed [ 279.760310][T15245] FAT-fs (loop6): Directory bread(block 166) failed [ 279.767228][T15245] FAT-fs (loop6): Directory bread(block 167) failed [ 279.779779][T15245] FAT-fs (loop6): Directory bread(block 168) failed [ 279.786555][T15245] FAT-fs (loop6): Directory bread(block 169) failed [ 279.799739][ T3387] hid-generic 0000:0000:0000.0011: hidraw0: HID v0.00 Device [sy] on syz0 [ 279.878784][T15252] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3795'. [ 279.896100][T15254] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3796'. [ 279.912482][T15252] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 279.915338][T15250] fido_id[15250]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 279.922637][T15254] IPVS: Error joining to the multicast group [ 279.945053][ T29] kauditd_printk_skb: 510 callbacks suppressed [ 279.945070][ T29] audit: type=1400 audit(1755684962.983:22685): avc: denied { read write } for pid=15251 comm="syz.6.3795" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 279.974990][ T29] audit: type=1400 audit(1755684962.983:22686): avc: denied { open } for pid=15251 comm="syz.6.3795" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 280.028595][ T29] audit: type=1400 audit(1755684963.033:22687): avc: denied { ioctl } for pid=15251 comm="syz.6.3795" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 280.202430][T15270] atomic_op ffff88811668cd28 conn xmit_atomic 0000000000000000 [ 280.307408][T15280] loop4: detected capacity change from 0 to 164 [ 280.327765][T15282] 9pnet_fd: Insufficient options for proto=fd [ 280.340621][T15280] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3806'. [ 280.415049][T15288] loop4: detected capacity change from 0 to 128 [ 280.421690][T15243] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 280.423924][T15288] FAT-fs (loop4): Directory bread(block 162) failed [ 280.445616][T15288] FAT-fs (loop4): Directory bread(block 163) failed [ 280.458762][T15288] FAT-fs (loop4): Directory bread(block 164) failed [ 280.467551][T15288] FAT-fs (loop4): Directory bread(block 165) failed [ 280.472850][T15243] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 9 with max blocks 2048 with error 28 [ 280.474527][T15288] FAT-fs (loop4): Directory bread(block 166) failed [ 280.486729][T15243] EXT4-fs (loop2): This should not happen!! Data will be lost [ 280.486729][T15243] [ 280.486752][T15243] EXT4-fs (loop2): Total free blocks count 0 [ 280.486765][T15243] EXT4-fs (loop2): Free/Dirty block details [ 280.495011][T15288] FAT-fs (loop4): Directory bread(block 167) failed [ 280.503151][T15243] EXT4-fs (loop2): free_blocks=39626 [ 280.503173][T15243] EXT4-fs (loop2): dirty_blocks=4096 [ 280.510075][T15288] FAT-fs (loop4): Directory bread(block 168) failed [ 280.515610][T15243] EXT4-fs (loop2): Block reservation details [ 280.523874][T15288] FAT-fs (loop4): Directory bread(block 169) failed [ 280.527560][T15243] EXT4-fs (loop2): i_reserved_data_blocks=4096 [ 280.543385][T15288] FAT-fs (loop4): Directory bread(block 162) failed [ 280.572485][T15288] FAT-fs (loop4): Directory bread(block 163) failed [ 280.579374][T15288] syz.4.3810: attempt to access beyond end of device [ 280.579374][T15288] loop4: rw=3, sector=226, nr_sectors = 6 limit=128 [ 280.594229][T15288] syz.4.3810: attempt to access beyond end of device [ 280.594229][T15288] loop4: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 280.641828][ T29] audit: type=1326 audit(1755684963.663:22688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15291 comm="syz.4.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8a2cebe9 code=0x7ffc0000 [ 280.665615][ T29] audit: type=1326 audit(1755684963.663:22689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15291 comm="syz.4.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b8a2cebe9 code=0x7ffc0000 [ 280.689501][ T29] audit: type=1326 audit(1755684963.663:22690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15291 comm="syz.4.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8a2cebe9 code=0x7ffc0000 [ 280.713343][ T29] audit: type=1326 audit(1755684963.663:22691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15291 comm="syz.4.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8a2cebe9 code=0x7ffc0000 [ 280.737043][ T29] audit: type=1326 audit(1755684963.663:22692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15291 comm="syz.4.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6b8a2cebe9 code=0x7ffc0000 [ 280.760793][ T29] audit: type=1326 audit(1755684963.663:22693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15291 comm="syz.4.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8a2cebe9 code=0x7ffc0000 [ 280.784380][ T29] audit: type=1326 audit(1755684963.663:22694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15291 comm="syz.4.3811" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6b8a2cebe9 code=0x7ffc0000 [ 280.818615][ T577] EXT4-fs (loop2): Delayed block allocation failed for inode 16 at logical offset 2058 with max blocks 2047 with error 28 [ 280.831478][ T577] EXT4-fs (loop2): This should not happen!! Data will be lost [ 280.831478][ T577] [ 281.451967][T15326] loop1: detected capacity change from 0 to 164 [ 281.546092][T15333] lo speed is unknown, defaulting to 1000 [ 281.563735][T15330] ref_ctr_offset mismatch. inode: 0x43b offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 281.568298][T15337] netlink: 'syz.2.3826': attribute type 10 has an invalid length. [ 281.605674][T15334] ref_ctr_offset mismatch. inode: 0x43b offset: 0x0 ref_ctr_offset(old): 0x4 ref_ctr_offset(new): 0x0 [ 281.613194][T15337] team0: Port device dummy0 added [ 281.620661][T15337] netlink: 'syz.2.3826': attribute type 10 has an invalid length. [ 281.623026][T15337] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 281.637784][T15337] team0: Failed to send options change via netlink (err -105) [ 281.637887][T15337] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 281.638191][T15337] team0: Port device dummy0 removed [ 281.643836][T15337] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 281.822414][T15345] loop4: detected capacity change from 0 to 512 [ 281.857528][T15345] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.3829: corrupted in-inode xattr: invalid ea_ino [ 281.977752][T15354] FAULT_INJECTION: forcing a failure. [ 281.977752][T15354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 281.990976][T15354] CPU: 1 UID: 0 PID: 15354 Comm: syz.1.3833 Not tainted syzkaller #0 PREEMPT(voluntary) [ 281.991031][T15354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 281.991090][T15354] Call Trace: [ 281.991099][T15354] [ 281.991108][T15354] __dump_stack+0x1d/0x30 [ 281.991135][T15354] dump_stack_lvl+0xe8/0x140 [ 281.991209][T15354] dump_stack+0x15/0x1b [ 281.991226][T15354] should_fail_ex+0x265/0x280 [ 281.991247][T15354] should_fail+0xb/0x20 [ 281.991264][T15354] should_fail_usercopy+0x1a/0x20 [ 281.991365][T15354] _copy_from_user+0x1c/0xb0 [ 281.991402][T15354] __se_sys_add_key+0x209/0x350 [ 281.991430][T15354] __x64_sys_add_key+0x67/0x80 [ 281.991487][T15354] x64_sys_call+0x28c4/0x2ff0 [ 281.991514][T15354] do_syscall_64+0xd2/0x200 [ 281.991586][T15354] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 281.991639][T15354] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 281.991664][T15354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.991686][T15354] RIP: 0033:0x7f814283ebe9 [ 281.991713][T15354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 281.991738][T15354] RSP: 002b:00007f81412a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 281.991762][T15354] RAX: ffffffffffffffda RBX: 00007f8142a65fa0 RCX: 00007f814283ebe9 [ 281.991795][T15354] RDX: 0000200000000280 RSI: 0000200000000180 RDI: 0000200000000380 [ 281.991811][T15354] RBP: 00007f81412a7090 R08: fffffffffffffffb R09: 0000000000000000 [ 281.991826][T15354] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000001 [ 281.991841][T15354] R13: 00007f8142a66038 R14: 00007f8142a65fa0 R15: 00007ffd9a7db498 [ 281.991864][T15354] [ 282.168712][T15345] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3829: couldn't read orphan inode 15 (err -117) [ 282.194563][ T3414] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [sy] on syz0 [ 282.283658][T15368] loop1: detected capacity change from 0 to 164 [ 282.299357][T15366] loop4: detected capacity change from 0 to 2048 [ 282.348302][T15362] fido_id[15362]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 282.435339][ T3387] Process accounting resumed [ 282.442739][T15381] loop1: detected capacity change from 0 to 512 [ 282.449355][T15381] EXT4-fs: Ignoring removed mblk_io_submit option [ 282.459126][T15386] FAULT_INJECTION: forcing a failure. [ 282.459126][T15386] name failslab, interval 1, probability 0, space 0, times 0 [ 282.472027][T15386] CPU: 0 UID: 0 PID: 15386 Comm: syz.4.3841 Not tainted syzkaller #0 PREEMPT(voluntary) [ 282.472124][T15386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 282.472180][T15386] Call Trace: [ 282.472189][T15386] [ 282.472199][T15386] __dump_stack+0x1d/0x30 [ 282.472229][T15386] dump_stack_lvl+0xe8/0x140 [ 282.472255][T15386] dump_stack+0x15/0x1b [ 282.472274][T15386] should_fail_ex+0x265/0x280 [ 282.472300][T15386] should_failslab+0x8c/0xb0 [ 282.472351][T15386] __kmalloc_node_noprof+0xa9/0x410 [ 282.472389][T15386] ? xas_load+0x413/0x430 [ 282.472423][T15386] ? alloc_slab_obj_exts+0x31/0x80 [ 282.472451][T15386] alloc_slab_obj_exts+0x31/0x80 [ 282.472536][T15386] __memcg_slab_post_alloc_hook+0x23f/0x580 [ 282.472586][T15386] kmem_cache_alloc_node_noprof+0x22c/0x320 [ 282.472617][T15386] ? __alloc_skb+0x101/0x320 [ 282.472681][T15386] __alloc_skb+0x101/0x320 [ 282.472720][T15386] ? __rcu_read_lock+0x37/0x50 [ 282.472748][T15386] alloc_skb_with_frags+0x7d/0x470 [ 282.472773][T15386] ? count_memcg_events+0x167/0x230 [ 282.472885][T15386] ? __rcu_read_unlock+0x4f/0x70 [ 282.472912][T15386] ? handle_mm_fault+0x22a3/0x2c20 [ 282.472941][T15386] sock_alloc_send_pskb+0x43a/0x4f0 [ 282.472977][T15386] unix_dgram_sendmsg+0x380/0xfe0 [ 282.473009][T15386] ? selinux_socket_sendmsg+0x175/0x1b0 [ 282.473074][T15386] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 282.473098][T15386] __sock_sendmsg+0x142/0x180 [ 282.473132][T15386] ____sys_sendmsg+0x345/0x4e0 [ 282.473226][T15386] ___sys_sendmsg+0x17b/0x1d0 [ 282.473341][T15386] __sys_sendmmsg+0x178/0x300 [ 282.473415][T15386] __x64_sys_sendmmsg+0x57/0x70 [ 282.473446][T15386] x64_sys_call+0x1c4a/0x2ff0 [ 282.473472][T15386] do_syscall_64+0xd2/0x200 [ 282.473508][T15386] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 282.473539][T15386] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 282.473571][T15386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.473597][T15386] RIP: 0033:0x7f6b8a2cebe9 [ 282.473658][T15386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 282.473680][T15386] RSP: 002b:00007f6b88d2f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 282.473703][T15386] RAX: ffffffffffffffda RBX: 00007f6b8a4f5fa0 RCX: 00007f6b8a2cebe9 [ 282.473764][T15386] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000004 [ 282.473779][T15386] RBP: 00007f6b88d2f090 R08: 0000000000000000 R09: 0000000000000000 [ 282.473831][T15386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 282.473903][T15386] R13: 00007f6b8a4f6038 R14: 00007f6b8a4f5fa0 R15: 00007ffd79f6bd28 [ 282.473922][T15386] [ 282.738179][T15381] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 282.752127][T15389] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.764326][T15381] EXT4-fs (loop1): 1 truncate cleaned up [ 282.794178][T15389] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.847612][T15389] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.894983][T15389] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.961903][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.975454][ T3426] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.995379][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.014314][ T3426] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.154399][ T3387] hid_parser_main: 150 callbacks suppressed [ 283.154439][ T3387] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 283.168230][ T3387] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 283.175691][ T3387] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 283.183240][ T3387] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 283.190729][ T3387] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 283.198681][ T3387] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 283.206123][ T3387] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 283.213584][ T3387] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 283.221005][ T3387] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 283.228453][ T3387] hid-generic 0000:0000:0000.0013: unknown main item tag 0x0 [ 283.260619][T15422] loop6: detected capacity change from 0 to 512 [ 283.283347][T15422] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 283.309140][ T3387] hid-generic 0000:0000:0000.0013: hidraw0: HID v0.00 Device [sy] on syz0 [ 283.368556][T15428] fido_id[15428]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 283.402722][T15422] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 283.420299][T15434] loop2: detected capacity change from 0 to 512 [ 283.469205][T15434] EXT4-fs: Ignoring removed mblk_io_submit option [ 283.482153][T15422] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 283.491974][T15434] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 283.493761][T15422] IPVS: Error joining to the multicast group [ 283.511081][T15434] EXT4-fs (loop2): 1 truncate cleaned up [ 283.551889][T15437] lo speed is unknown, defaulting to 1000 [ 283.667079][ T3387] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [sy] on syz0 [ 283.677004][T15446] loop6: detected capacity change from 0 to 2048 [ 283.695143][T15448] loop1: detected capacity change from 0 to 1024 [ 283.702472][T15448] EXT4-fs: Ignoring removed nomblk_io_submit option [ 283.810085][T15464] atomic_op ffff888118b08128 conn xmit_atomic 0000000000000000 [ 283.861777][T15468] loop6: detected capacity change from 0 to 512 [ 283.873925][T15468] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 283.911351][T15468] EXT4-fs error (device loop6): __ext4_iget:5464: inode #15: block 1803188595: comm syz.6.3867: invalid block [ 283.960714][T15468] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.3867: couldn't read orphan inode 15 (err -117) [ 283.978314][T15472] loop1: detected capacity change from 0 to 512 [ 283.999701][T15472] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 284.036024][T15472] EXT4-fs error (device loop1): __ext4_iget:5464: inode #15: block 1803188595: comm syz.1.3868: invalid block [ 284.071933][T15472] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3868: couldn't read orphan inode 15 (err -117) [ 284.164490][T15484] loop4: detected capacity change from 0 to 512 [ 284.171625][T15484] ext4: Unknown parameter 'smackfsfloor' [ 284.185741][ T3288] udevd[3288]: symlink '../../loop4' '/dev/disk/by-diskseq/1292.tmp-b7:4' failed: Read-only file system [ 284.202209][ T3288] udevd[3288]: symlink '../../loop4' '/dev/disk/by-diskseq/1292.tmp-b7:4' failed: Read-only file system [ 284.220998][ T3288] udevd[3288]: symlink '../../loop4' '/dev/disk/by-diskseq/1292.tmp-b7:4' failed: Read-only file system [ 284.256238][ T3288] udevd[3288]: symlink '../../loop4' '/dev/disk/by-diskseq/1293.tmp-b7:4' failed: Read-only file system [ 284.491856][T15490] loop4: detected capacity change from 0 to 1024 [ 284.527697][T15490] EXT4-fs: Ignoring removed orlov option [ 284.545623][ T3476] udevd[3476]: symlink '../../loop2' '/dev/disk/by-diskseq/1283.tmp-b7:2' failed: Read-only file system [ 284.560611][T15494] loop2: detected capacity change from 0 to 164 [ 284.575307][ T3288] udevd[3288]: symlink '../../loop4' '/dev/disk/by-diskseq/1294.tmp-b7:4' failed: Read-only file system [ 284.592793][ T3288] udevd[3288]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system [ 284.622934][ T3476] udevd[3476]: symlink '../../loop2' '/dev/disk/by-diskseq/1283.tmp-b7:2' failed: Read-only file system [ 284.635360][ T3476] udevd[3476]: symlink '../../loop2' '/dev/disk/by-label/CDROM.tmp-b7:2' failed: Read-only file system [ 284.647699][ T3476] udevd[3476]: symlink '../../loop2' '/dev/disk/by-uuid/2022-11-22-16-59-57-00.tmp-b7:2' failed: Read-only file system [ 284.675111][T15499] atomic_op ffff888118b08d28 conn xmit_atomic 0000000000000000 [ 284.733294][T15501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3878'. [ 284.778731][T15501] IPVS: Error joining to the multicast group [ 284.792125][T15504] loop6: detected capacity change from 0 to 1024 [ 284.822161][T15506] atomic_op ffff888118b08d28 conn xmit_atomic 0000000000000000 [ 284.962975][ T3387] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [sy] on syz0 [ 285.065971][T15517] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3884'. [ 285.111686][ T29] kauditd_printk_skb: 325 callbacks suppressed [ 285.111700][ T29] audit: type=1326 audit(1755684968.142:23020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15519 comm="syz.0.3885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3198ebe9 code=0x7ffc0000 [ 285.156171][ T29] audit: type=1326 audit(1755684968.182:23021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15519 comm="syz.0.3885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3198ebe9 code=0x7ffc0000 [ 285.180324][ T29] audit: type=1326 audit(1755684968.182:23022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15519 comm="syz.0.3885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c3198ebe9 code=0x7ffc0000 [ 285.204296][ T29] audit: type=1326 audit(1755684968.182:23023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15519 comm="syz.0.3885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3198ebe9 code=0x7ffc0000 [ 285.222875][T15528] loop2: detected capacity change from 0 to 512 [ 285.227963][ T29] audit: type=1326 audit(1755684968.182:23024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15519 comm="syz.0.3885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c3198ebe9 code=0x7ffc0000 [ 285.258035][ T29] audit: type=1326 audit(1755684968.182:23025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15519 comm="syz.0.3885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3198ebe9 code=0x7ffc0000 [ 285.268956][T15528] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 285.282163][ T29] audit: type=1326 audit(1755684968.182:23026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15519 comm="syz.0.3885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2c3198ebe9 code=0x7ffc0000 [ 285.315448][ T29] audit: type=1326 audit(1755684968.182:23027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15519 comm="syz.0.3885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3198ebe9 code=0x7ffc0000 [ 285.339116][ T29] audit: type=1326 audit(1755684968.182:23028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15519 comm="syz.0.3885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f2c3198ebe9 code=0x7ffc0000 [ 285.350838][T15528] EXT4-fs (loop2): 1 truncate cleaned up [ 285.362962][ T29] audit: type=1326 audit(1755684968.182:23029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15519 comm="syz.0.3885" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c3198ebe9 code=0x7ffc0000 [ 285.485182][T15528] EXT4-fs error (device loop2): __ext4_iget:5464: inode #12: block 2: comm syz.2.3889: invalid block [ 285.509662][T15541] loop6: detected capacity change from 0 to 512 [ 285.518110][T15528] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3889'. [ 285.528961][T15528] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.536550][T15528] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.547131][T15541] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 285.572552][T15528] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.580052][T15528] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.590491][T15541] ext4 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 285.596597][T15546] loop1: detected capacity change from 0 to 512 [ 285.612082][T15541] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 285.634270][T15541] IPVS: Error joining to the multicast group [ 285.645853][T15546] EXT4-fs: Ignoring removed mblk_io_submit option [ 285.683005][T15546] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 285.700996][T15546] EXT4-fs (loop1): 1 truncate cleaned up [ 285.729524][T15550] loop6: detected capacity change from 0 to 4096 [ 286.021354][T15567] loop2: detected capacity change from 0 to 512 [ 286.067275][T15567] ext4: Unknown parameter 'smackfsfloor' [ 286.306454][T15578] loop6: detected capacity change from 0 to 4096 [ 286.333538][T15578] EXT4-fs mount: 41 callbacks suppressed [ 286.333554][T15578] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 286.460332][T11267] hid-generic 0000:0000:0000.0016: hidraw0: HID v0.00 Device [sy] on syz0 [ 286.481805][T13412] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.494767][T15589] loop4: detected capacity change from 0 to 1024 [ 286.505963][T15589] EXT4-fs: Ignoring removed nomblk_io_submit option [ 286.575468][T15589] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.626630][T11826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.638699][T11006] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 286.682073][T15604] loop4: detected capacity change from 0 to 512 [ 286.688978][T15604] ext4: Unknown parameter 'smackfsfloor' [ 286.766855][T15615] loop4: detected capacity change from 0 to 512 [ 286.775289][T15615] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 286.785951][T15615] EXT4-fs error (device loop4): __ext4_iget:5464: inode #15: block 1803188595: comm syz.4.3919: invalid block [ 286.799066][T15615] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3919: couldn't read orphan inode 15 (err -117) [ 286.811781][T15615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 286.827791][T15619] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3912'. [ 286.839059][T15616] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3912'. [ 287.164462][T15627] vhci_hcd: invalid port number 96 [ 287.169640][T15627] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 287.614266][T15637] vhci_hcd: invalid port number 96 [ 287.619472][T15637] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 287.647209][T15639] loop1: detected capacity change from 0 to 512 [ 287.662966][T11006] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.694858][T15639] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 287.701508][T15641] loop2: detected capacity change from 0 to 512 [ 287.719026][T15641] ext4: Unknown parameter 'smackfsfloor' [ 287.801518][T15639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 287.859394][T15652] loop6: detected capacity change from 0 to 164 [ 287.866062][T15639] ext4 filesystem being mounted at /212/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.905299][T15652] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3930'. [ 287.960987][T15639] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 287.990651][T15639] IPVS: Error joining to the multicast group [ 287.997947][T15659] loop2: detected capacity change from 0 to 512 [ 288.055899][T15659] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.3934: corrupted in-inode xattr: invalid ea_ino [ 288.059681][T11826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.085799][T15659] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.3934: couldn't read orphan inode 15 (err -117) [ 288.107030][T15659] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.108968][T15667] FAULT_INJECTION: forcing a failure. [ 288.108968][T15667] name failslab, interval 1, probability 0, space 0, times 0 [ 288.131773][T15667] CPU: 1 UID: 0 PID: 15667 Comm: syz.0.3938 Not tainted syzkaller #0 PREEMPT(voluntary) [ 288.131801][T15667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 288.131813][T15667] Call Trace: [ 288.131823][T15667] [ 288.131830][T15667] __dump_stack+0x1d/0x30 [ 288.131854][T15667] dump_stack_lvl+0xe8/0x140 [ 288.131915][T15667] dump_stack+0x15/0x1b [ 288.131935][T15667] should_fail_ex+0x265/0x280 [ 288.131993][T15667] should_failslab+0x8c/0xb0 [ 288.132023][T15667] kmem_cache_alloc_noprof+0x50/0x310 [ 288.132058][T15667] ? audit_log_start+0x365/0x6c0 [ 288.132164][T15667] audit_log_start+0x365/0x6c0 [ 288.132223][T15667] ? _raw_spin_lock_irqsave+0x3a/0x90 [ 288.132265][T15667] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 288.132303][T15667] audit_seccomp+0x48/0x100 [ 288.132417][T15667] ? __seccomp_filter+0x68c/0x10d0 [ 288.132439][T15667] __seccomp_filter+0x69d/0x10d0 [ 288.132463][T15667] ? send_signal_locked+0x34e/0x3c0 [ 288.132503][T15667] __secure_computing+0x82/0x150 [ 288.132574][T15667] syscall_trace_enter+0xcf/0x1e0 [ 288.132601][T15667] do_syscall_64+0xac/0x200 [ 288.132626][T15667] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 288.132649][T15667] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 288.132711][T15667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.132737][T15667] RIP: 0033:0x7f2c3198d5fc [ 288.132752][T15667] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 288.132771][T15667] RSP: 002b:00007f2c303f7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 288.132795][T15667] RAX: ffffffffffffffda RBX: 00007f2c31bb5fa0 RCX: 00007f2c3198d5fc [ 288.132811][T15667] RDX: 000000000000000f RSI: 00007f2c303f70a0 RDI: 0000000000000007 [ 288.132849][T15667] RBP: 00007f2c303f7090 R08: 0000000000000000 R09: 0000000000000000 [ 288.132865][T15667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.132880][T15667] R13: 00007f2c31bb6038 R14: 00007f2c31bb5fa0 R15: 00007ffde87e98d8 [ 288.132984][T15667] [ 288.371848][T15673] loop1: detected capacity change from 0 to 512 [ 288.382361][T15673] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 288.395384][T15673] EXT4-fs error (device loop1): __ext4_iget:5464: inode #15: block 1803188595: comm syz.1.3936: invalid block [ 288.407490][T12621] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.422348][T15673] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.3936: couldn't read orphan inode 15 (err -117) [ 288.455963][T15673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.532028][T15684] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3943'. [ 288.595433][T15692] loop2: detected capacity change from 0 to 512 [ 288.624616][T15692] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 288.657723][T15692] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.690569][T15692] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.725472][T15692] netlink: 8 bytes leftover after parsing attributes in process `+}[@'. [ 288.734967][T15692] IPVS: Error joining to the multicast group [ 288.762589][T12621] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.783054][T15705] FAULT_INJECTION: forcing a failure. [ 288.783054][T15705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 288.796313][T15705] CPU: 1 UID: 0 PID: 15705 Comm: syz.0.3950 Not tainted syzkaller #0 PREEMPT(voluntary) [ 288.796362][T15705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 288.796379][T15705] Call Trace: [ 288.796388][T15705] [ 288.796430][T15705] __dump_stack+0x1d/0x30 [ 288.796452][T15705] dump_stack_lvl+0xe8/0x140 [ 288.796566][T15705] dump_stack+0x15/0x1b [ 288.796582][T15705] should_fail_ex+0x265/0x280 [ 288.796609][T15705] should_fail+0xb/0x20 [ 288.796695][T15705] should_fail_usercopy+0x1a/0x20 [ 288.796771][T15705] _copy_from_user+0x1c/0xb0 [ 288.796831][T15705] do_sock_getsockopt+0xf1/0x240 [ 288.796863][T15705] __x64_sys_getsockopt+0x11e/0x1a0 [ 288.796889][T15705] x64_sys_call+0x2bc6/0x2ff0 [ 288.796943][T15705] do_syscall_64+0xd2/0x200 [ 288.797009][T15705] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 288.797036][T15705] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 288.797067][T15705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.797096][T15705] RIP: 0033:0x7f2c3198ebe9 [ 288.797168][T15705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.797194][T15705] RSP: 002b:00007f2c303f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 288.797219][T15705] RAX: ffffffffffffffda RBX: 00007f2c31bb5fa0 RCX: 00007f2c3198ebe9 [ 288.797315][T15705] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 288.797329][T15705] RBP: 00007f2c303f7090 R08: 0000200000000180 R09: 0000000000000000 [ 288.797341][T15705] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 288.797355][T15705] R13: 00007f2c31bb6038 R14: 00007f2c31bb5fa0 R15: 00007ffde87e98d8 [ 288.797385][T15705] [ 288.986394][T15706] deleting an unspecified loop device is not supported. [ 289.086923][T15716] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.176134][T15716] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.226748][T11826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.244606][ T3288] udevd[3288]: symlink '../../loop6' '/dev/disk/by-diskseq/1325.tmp-b7:6' failed: Read-only file system [ 289.257024][T15716] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.306191][ T3288] udevd[3288]: symlink '../../loop1' '/dev/disk/by-diskseq/1328.tmp-b7:1' failed: Read-only file system [ 289.389719][T15739] loop6: detected capacity change from 0 to 1024 [ 289.410718][T15739] EXT4-fs: Ignoring removed orlov option [ 289.423174][ T3476] udevd[3476]: symlink '../../loop6' '/dev/disk/by-diskseq/1333.tmp-b7:6' failed: Read-only file system [ 289.423592][ T3288] udevd[3288]: symlink '../../loop1' '/dev/disk/by-diskseq/1328.tmp-b7:1' failed: Read-only file system [ 289.451993][ T3288] udevd[3288]: symlink '../../loop1' '/dev/disk/by-diskseq/1332.tmp-b7:1' failed: Read-only file system [ 289.466138][T15716] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.478237][ T3476] udevd[3476]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system [ 289.493017][T15739] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 289.507220][T15739] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 289.522311][ T3288] udevd[3288]: symlink '../../loop6' '/dev/disk/by-diskseq/1333.tmp-b7:6' failed: Read-only file system [ 289.541341][ T3288] udevd[3288]: symlink '../../loop6' '/dev/disk/by-diskseq/1333.tmp-b7:6' failed: Read-only file system [ 289.553011][ T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.565958][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.574426][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.582677][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.594013][ T3288] udevd[3288]: symlink '../../loop6' '/dev/disk/by-diskseq/1334.tmp-b7:6' failed: Read-only file system [ 289.973503][ T3288] udevd[3288]: symlink '../../loop2' '/dev/disk/by-diskseq/1331.tmp-b7:2' failed: Read-only file system [ 290.110422][T15762] loop2: detected capacity change from 0 to 512 [ 290.126772][T15762] EXT4-fs: Ignoring removed mblk_io_submit option [ 290.144959][T15762] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 290.172756][T15762] EXT4-fs (loop2): 1 truncate cleaned up [ 290.179418][T15762] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.208215][ T29] kauditd_printk_skb: 1120 callbacks suppressed [ 290.208230][ T29] audit: type=1326 audit(1755684973.241:24148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15767 comm="syz.1.3972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814283ebe9 code=0x7ffc0000 [ 290.317935][ T29] audit: type=1326 audit(1755684973.270:24149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15767 comm="syz.1.3972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814283ebe9 code=0x7ffc0000 [ 290.341653][ T29] audit: type=1326 audit(1755684973.270:24150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15767 comm="syz.1.3972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f814283ebe9 code=0x7ffc0000 [ 290.365592][ T29] audit: type=1326 audit(1755684973.270:24151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15767 comm="syz.1.3972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814283ebe9 code=0x7ffc0000 [ 290.365625][ T29] audit: type=1326 audit(1755684973.270:24152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15767 comm="syz.1.3972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814283ebe9 code=0x7ffc0000 [ 290.365737][ T29] audit: type=1326 audit(1755684973.270:24153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15767 comm="syz.1.3972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f814283ebe9 code=0x7ffc0000 [ 290.365772][ T29] audit: type=1326 audit(1755684973.270:24154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15767 comm="syz.1.3972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814283ebe9 code=0x7ffc0000 [ 290.365934][ T29] audit: type=1326 audit(1755684973.270:24155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15767 comm="syz.1.3972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f814283ebe9 code=0x7ffc0000 [ 290.366041][ T29] audit: type=1326 audit(1755684973.270:24156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15767 comm="syz.1.3972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814283ebe9 code=0x7ffc0000 [ 290.366076][ T29] audit: type=1326 audit(1755684973.270:24157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15767 comm="syz.1.3972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f814283ebe9 code=0x7ffc0000 [ 290.415303][T15775] netlink: 'syz.4.3973': attribute type 10 has an invalid length. [ 290.415324][T15775] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3973'. [ 290.639850][T15772] raw_sendmsg: syz.6.3971 forgot to set AF_INET. Fix it! [ 290.877801][ T3602] hid_parser_main: 118 callbacks suppressed [ 290.877828][ T3602] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 290.877853][ T3602] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 290.877936][ T3602] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 290.877966][ T3602] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 290.878025][ T3602] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 290.878052][ T3602] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 290.878074][ T3602] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 290.878095][ T3602] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 290.878175][ T3602] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 290.878204][ T3602] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 290.878906][ T3602] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [sy] on syz0 [ 290.898543][T12621] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.040146][T15783] fido_id[15783]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 291.140913][T15791] loop6: detected capacity change from 0 to 512 [ 291.180141][T15791] ext4: Unknown parameter 'smackfsfloor' [ 291.214127][T15802] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3985'. [ 291.291024][T15800] loop2: detected capacity change from 0 to 512 [ 291.298936][T15800] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 291.317597][T15800] EXT4-fs (loop2): 1 truncate cleaned up [ 291.323918][T15800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.420785][T15818] loop6: detected capacity change from 0 to 512 [ 291.483193][T15818] EXT4-fs: Ignoring removed mblk_io_submit option [ 291.525014][T15818] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 291.548104][T15818] EXT4-fs (loop6): 1 truncate cleaned up [ 291.566907][T15818] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 291.583013][T12621] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.624699][T15820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3991'. [ 291.722019][ T3414] hid-generic 0000:0000:0000.0018: hidraw0: HID v0.00 Device [sy] on syz0 [ 291.775247][T15845] netlink: 'syz.2.3994': attribute type 10 has an invalid length. [ 291.783168][T15845] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3994'. [ 291.853401][T15845] siw: device registration error -23 [ 291.861720][T15851] loop4: detected capacity change from 0 to 512 [ 291.871214][T15851] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 291.892429][T15851] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 291.923778][T15851] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.991147][T15856] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4002'. [ 292.043554][T15856] infiniband syz!: set active [ 292.048345][T15856] infiniband syz!: added team_slave_0 [ 292.226441][T15856] RDS/IB: syz!: added [ 292.240623][T15856] smc: adding ib device syz! with port count 1 [ 292.247268][T15856] smc: ib device syz! port 1 has pnetid [ 292.257895][T13412] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 292.304452][T15867] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4008'. [ 292.357655][T15851] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 292.378466][T15851] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 9 with max blocks 2048 with error 28 [ 292.385965][T15867] netlink: 'syz.0.4008': attribute type 2 has an invalid length. [ 292.391150][T15851] EXT4-fs (loop4): This should not happen!! Data will be lost [ 292.391150][T15851] [ 292.409177][T15851] EXT4-fs (loop4): Total free blocks count 0 [ 292.415221][T15851] EXT4-fs (loop4): Free/Dirty block details [ 292.421128][T15851] EXT4-fs (loop4): free_blocks=39626 [ 292.426492][T15851] EXT4-fs (loop4): dirty_blocks=4096 [ 292.431821][T15851] EXT4-fs (loop4): Block reservation details [ 292.437849][T15851] EXT4-fs (loop4): i_reserved_data_blocks=4096 [ 292.463528][T15872] FAULT_INJECTION: forcing a failure. [ 292.463528][T15872] name failslab, interval 1, probability 0, space 0, times 0 [ 292.476644][T15872] CPU: 0 UID: 0 PID: 15872 Comm: syz.6.4009 Not tainted syzkaller #0 PREEMPT(voluntary) [ 292.476671][T15872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 292.476687][T15872] Call Trace: [ 292.476694][T15872] [ 292.476703][T15872] __dump_stack+0x1d/0x30 [ 292.476728][T15872] dump_stack_lvl+0xe8/0x140 [ 292.476752][T15872] dump_stack+0x15/0x1b [ 292.476854][T15872] should_fail_ex+0x265/0x280 [ 292.476881][T15872] should_failslab+0x8c/0xb0 [ 292.476912][T15872] __kmalloc_noprof+0xa5/0x3e0 [ 292.476945][T15872] ? alloc_pipe_info+0x1c9/0x350 [ 292.477039][T15872] alloc_pipe_info+0x1c9/0x350 [ 292.477070][T15872] splice_direct_to_actor+0x592/0x680 [ 292.477095][T15872] ? kstrtouint_from_user+0x9f/0xf0 [ 292.477172][T15872] ? __pfx_direct_splice_actor+0x10/0x10 [ 292.477239][T15872] ? __rcu_read_unlock+0x4f/0x70 [ 292.477265][T15872] ? get_pid_task+0x96/0xd0 [ 292.477289][T15872] ? avc_policy_seqno+0x15/0x30 [ 292.477412][T15872] ? selinux_file_permission+0x1e4/0x320 [ 292.477439][T15872] do_splice_direct+0xda/0x150 [ 292.477462][T15872] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 292.477570][T15872] do_sendfile+0x380/0x650 [ 292.477610][T15872] __x64_sys_sendfile64+0x105/0x150 [ 292.477646][T15872] x64_sys_call+0x2bb0/0x2ff0 [ 292.477669][T15872] do_syscall_64+0xd2/0x200 [ 292.477802][T15872] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 292.477832][T15872] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 292.477924][T15872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.477947][T15872] RIP: 0033:0x7fcfc7fbebe9 [ 292.478027][T15872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.478051][T15872] RSP: 002b:00007fcfc6a1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 292.478072][T15872] RAX: ffffffffffffffda RBX: 00007fcfc81e5fa0 RCX: 00007fcfc7fbebe9 [ 292.478129][T15872] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 292.478146][T15872] RBP: 00007fcfc6a1f090 R08: 0000000000000000 R09: 0000000000000000 [ 292.478160][T15872] R10: 00008000fffffffc R11: 0000000000000246 R12: 0000000000000001 [ 292.478172][T15872] R13: 00007fcfc81e6038 R14: 00007fcfc81e5fa0 R15: 00007fffa0ac92c8 [ 292.478196][T15872] [ 292.733229][ T1388] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 2058 with max blocks 2047 with error 28 [ 292.803500][T15880] atomic_op ffff88811a499528 conn xmit_atomic 0000000000000000 [ 292.878842][T15891] loop2: detected capacity change from 0 to 512 [ 292.887052][T15891] EXT4-fs: Ignoring removed mblk_io_submit option [ 292.893997][T15891] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 292.907989][T15891] EXT4-fs (loop2): 1 truncate cleaned up [ 292.924874][T15891] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 292.954365][T15900] program syz.0.4021 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 292.966007][T15900] FAULT_INJECTION: forcing a failure. [ 292.966007][T15900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 292.979342][T15900] CPU: 0 UID: 0 PID: 15900 Comm: syz.0.4021 Not tainted syzkaller #0 PREEMPT(voluntary) [ 292.979376][T15900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 292.979446][T15900] Call Trace: [ 292.979453][T15900] [ 292.979463][T15900] __dump_stack+0x1d/0x30 [ 292.979490][T15900] dump_stack_lvl+0xe8/0x140 [ 292.979514][T15900] dump_stack+0x15/0x1b [ 292.979596][T15900] should_fail_ex+0x265/0x280 [ 292.979623][T15900] should_fail+0xb/0x20 [ 292.979716][T15900] should_fail_usercopy+0x1a/0x20 [ 292.979750][T15900] _copy_from_user+0x1c/0xb0 [ 292.979786][T15900] scsi_ioctl+0x116f/0x14d0 [ 292.979811][T15900] ? avc_has_perm+0xf7/0x180 [ 292.979856][T15900] ? file_has_perm+0x324/0x370 [ 292.979899][T15900] ? do_vfs_ioctl+0x866/0xe10 [ 292.979920][T15900] sg_ioctl+0xdf6/0x1360 [ 292.979953][T15900] ? __pfx_sg_ioctl+0x10/0x10 [ 292.979991][T15900] __se_sys_ioctl+0xce/0x140 [ 292.980058][T15900] __x64_sys_ioctl+0x43/0x50 [ 292.980091][T15900] x64_sys_call+0x1816/0x2ff0 [ 292.980114][T15900] do_syscall_64+0xd2/0x200 [ 292.980141][T15900] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 292.980187][T15900] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 292.980239][T15900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.980261][T15900] RIP: 0033:0x7f2c3198ebe9 [ 292.980277][T15900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.980361][T15900] RSP: 002b:00007f2c303f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 292.980381][T15900] RAX: ffffffffffffffda RBX: 00007f2c31bb5fa0 RCX: 00007f2c3198ebe9 [ 292.980394][T15900] RDX: 00002000000000c0 RSI: 0000000000000001 RDI: 0000000000000006 [ 292.980407][T15900] RBP: 00007f2c303f7090 R08: 0000000000000000 R09: 0000000000000000 [ 292.980419][T15900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.980455][T15900] R13: 00007f2c31bb6038 R14: 00007f2c31bb5fa0 R15: 00007ffde87e98d8 [ 292.980475][T15900] [ 293.207718][T15905] program syz.4.4023 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 293.238606][T15909] loop6: detected capacity change from 0 to 1024 [ 293.263099][T15911] atomic_op ffff88811955c128 conn xmit_atomic 0000000000000000 [ 293.294543][T15913] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4027'. [ 293.336031][T15909] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.409570][T15920] atomic_op ffff88811955c128 conn xmit_atomic 0000000000000000 [ 293.410795][T15909] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4183: comm syz.6.4022: Allocating blocks 449-513 which overlap fs metadata [ 293.438026][T15908] EXT4-fs (loop6): pa ffff888106a71e00: logic 48, phys. 177, len 21 [ 293.446163][T15908] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 293.459554][T15922] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4031'. [ 293.486090][T15923] loop4: detected capacity change from 0 to 512 [ 293.495416][T15923] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 293.524630][T13412] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.533546][T15923] EXT4-fs error (device loop4): __ext4_iget:5464: inode #15: block 1803188595: comm syz.4.4030: invalid block [ 293.546175][T15923] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.4030: couldn't read orphan inode 15 (err -117) [ 293.559864][T15923] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.684944][T15935] FAULT_INJECTION: forcing a failure. [ 293.684944][T15935] name failslab, interval 1, probability 0, space 0, times 0 [ 293.697669][T15935] CPU: 1 UID: 0 PID: 15935 Comm: syz.6.4036 Not tainted syzkaller #0 PREEMPT(voluntary) [ 293.697775][T15935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 293.697792][T15935] Call Trace: [ 293.697800][T15935] [ 293.697809][T15935] __dump_stack+0x1d/0x30 [ 293.697836][T15935] dump_stack_lvl+0xe8/0x140 [ 293.697861][T15935] dump_stack+0x15/0x1b [ 293.697883][T15935] should_fail_ex+0x265/0x280 [ 293.697977][T15935] should_failslab+0x8c/0xb0 [ 293.698067][T15935] kmem_cache_alloc_node_noprof+0x57/0x320 [ 293.698102][T15935] ? __alloc_skb+0x101/0x320 [ 293.698134][T15935] __alloc_skb+0x101/0x320 [ 293.698235][T15935] netlink_alloc_large_skb+0xba/0xf0 [ 293.698325][T15935] netlink_sendmsg+0x3cf/0x6b0 [ 293.698350][T15935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 293.698377][T15935] __sock_sendmsg+0x142/0x180 [ 293.698414][T15935] ____sys_sendmsg+0x31e/0x4e0 [ 293.698475][T15935] ___sys_sendmsg+0x17b/0x1d0 [ 293.698521][T15935] __x64_sys_sendmsg+0xd4/0x160 [ 293.698623][T15935] x64_sys_call+0x191e/0x2ff0 [ 293.698727][T15935] do_syscall_64+0xd2/0x200 [ 293.698767][T15935] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 293.698832][T15935] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 293.698864][T15935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.698947][T15935] RIP: 0033:0x7fcfc7fbebe9 [ 293.698967][T15935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 293.698990][T15935] RSP: 002b:00007fcfc6a1f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 293.699014][T15935] RAX: ffffffffffffffda RBX: 00007fcfc81e5fa0 RCX: 00007fcfc7fbebe9 [ 293.699030][T15935] RDX: 0000000000048002 RSI: 0000200000000080 RDI: 0000000000000006 [ 293.699046][T15935] RBP: 00007fcfc6a1f090 R08: 0000000000000000 R09: 0000000000000000 [ 293.699061][T15935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 293.699154][T15935] R13: 00007fcfc81e6038 R14: 00007fcfc81e5fa0 R15: 00007fffa0ac92c8 [ 293.699178][T15935] [ 293.957826][T15943] loop6: detected capacity change from 0 to 512 [ 293.965307][T15943] ext4: Unknown parameter 'smackfsfloor' [ 294.002763][ T3602] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [sy] on syz0 [ 294.059317][T12621] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.080469][T15949] loop6: detected capacity change from 0 to 512 [ 294.089284][T15950] siw: device registration error -23 [ 294.096320][T15949] EXT4-fs: Ignoring removed mblk_io_submit option [ 294.123140][T15952] atomic_op ffff8881045c8128 conn xmit_atomic 0000000000000000 [ 294.145922][T15949] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 294.157395][T15950] loop1: detected capacity change from 0 to 512 [ 294.170264][T15949] EXT4-fs (loop6): 1 truncate cleaned up [ 294.177934][T15950] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 294.189154][T15949] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 294.212210][T15950] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #16: comm syz.1.4042: invalid indirect mapped block 4294967295 (level 0) [ 294.252997][T15950] EXT4-fs (loop1): Remounting filesystem read-only [ 294.277214][T15950] EXT4-fs (loop1): 1 orphan inode deleted [ 294.283174][T15950] EXT4-fs (loop1): 1 truncate cleaned up [ 294.292655][T15950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.314123][ T3288] udevd[3288]: symlink '../../loop2' '/dev/disk/by-diskseq/1352.tmp-b7:2' failed: Read-only file system [ 294.346996][T11006] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.361064][T11826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.407845][ T3288] udevd[3288]: symlink '../../loop4' '/dev/disk/by-diskseq/1347.tmp-b7:4' failed: Read-only file system [ 294.459786][ T3637] udevd[3637]: symlink '../../loop2' '/dev/disk/by-diskseq/1352.tmp-b7:2' failed: Read-only file system [ 294.472746][ T3476] udevd[3476]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system [ 294.473655][ T3288] udevd[3288]: symlink '../../loop4' '/dev/disk/by-diskseq/1347.tmp-b7:4' failed: Read-only file system [ 294.484606][T15970] loop2: detected capacity change from 0 to 1024 [ 294.518084][ T3288] udevd[3288]: symlink '../../loop4' '/dev/disk/by-diskseq/1354.tmp-b7:4' failed: Read-only file system [ 294.519791][ T3476] udevd[3476]: symlink '../../loop1' '/dev/disk/by-diskseq/1353.tmp-b7:1' failed: Read-only file system [ 294.538183][T15974] loop4: detected capacity change from 0 to 1024 [ 294.541725][T15975] FAULT_INJECTION: forcing a failure. [ 294.541725][T15975] name failslab, interval 1, probability 0, space 0, times 0 [ 294.559584][T15975] CPU: 1 UID: 0 PID: 15975 Comm: syz.0.4051 Not tainted syzkaller #0 PREEMPT(voluntary) [ 294.559616][T15975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 294.559641][T15975] Call Trace: [ 294.559650][T15975] [ 294.559660][T15975] __dump_stack+0x1d/0x30 [ 294.559710][T15975] dump_stack_lvl+0xe8/0x140 [ 294.559729][T15975] dump_stack+0x15/0x1b [ 294.559746][T15975] should_fail_ex+0x265/0x280 [ 294.559768][T15975] ? resv_map_alloc+0x32/0x190 [ 294.559794][T15975] should_failslab+0x8c/0xb0 [ 294.559868][T15975] __kmalloc_cache_noprof+0x4c/0x320 [ 294.559922][T15975] ? vfs_write+0x7e8/0x960 [ 294.559993][T15975] resv_map_alloc+0x32/0x190 [ 294.560029][T15975] hugetlbfs_get_inode+0x67/0x370 [ 294.560063][T15975] hugetlb_file_setup+0x192/0x3d0 [ 294.560094][T15975] ksys_mmap_pgoff+0x157/0x310 [ 294.560131][T15975] x64_sys_call+0x14a3/0x2ff0 [ 294.560156][T15975] do_syscall_64+0xd2/0x200 [ 294.560243][T15975] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 294.560316][T15975] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 294.560341][T15975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.560365][T15975] RIP: 0033:0x7f2c3198ebe9 [ 294.560390][T15975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.560439][T15975] RSP: 002b:00007f2c303f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 294.560489][T15975] RAX: ffffffffffffffda RBX: 00007f2c31bb5fa0 RCX: 00007f2c3198ebe9 [ 294.560505][T15975] RDX: 0000000000000000 RSI: 0000000001400000 RDI: 0000200000000000 [ 294.560520][T15975] RBP: 00007f2c303f7090 R08: ffffffffffffffff R09: 0000000000000000 [ 294.560536][T15975] R10: 00000000000c3072 R11: 0000000000000246 R12: 0000000000000001 [ 294.560590][T15975] R13: 00007f2c31bb6038 R14: 00007f2c31bb5fa0 R15: 00007ffde87e98d8 [ 294.560614][T15975] [ 294.570460][ T3288] udevd[3288]: symlink '../../loop4' '/dev/disk/by-diskseq/1354.tmp-b7:4' failed: Read-only file system [ 294.597982][ T3476] udevd[3476]: symlink '../../loop1' '/dev/disk/by-diskseq/1353.tmp-b7:1' failed: Read-only file system [ 294.612339][ T3637] udevd[3637]: symlink '../../loop2' '/dev/disk/by-diskseq/1356.tmp-b7:2' failed: Read-only file system [ 294.625855][T15970] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.673777][T15982] atomic_op ffff8881045c8128 conn xmit_atomic 0000000000000000 [ 294.790942][T15974] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.869541][T12621] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.930434][T15992] loop2: detected capacity change from 0 to 512 [ 294.957040][T15992] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 294.969344][T15992] EXT4-fs error (device loop2): __ext4_iget:5464: inode #15: block 1803188595: comm syz.2.4058: invalid block [ 294.990253][T15992] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.4058: couldn't read orphan inode 15 (err -117) [ 295.014244][T13412] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.085758][T15992] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.137028][T11006] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.138415][T15998] lo speed is unknown, defaulting to 1000 [ 295.173628][T16004] loop4: detected capacity change from 0 to 512 [ 295.185111][T16004] EXT4-fs: Ignoring removed mblk_io_submit option [ 295.203434][T16004] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 295.242425][T16008] loop1: detected capacity change from 0 to 128 [ 295.259814][T16008] FAT-fs (loop1): Directory bread(block 162) failed [ 295.280952][T16008] FAT-fs (loop1): Directory bread(block 163) failed [ 295.311301][T16004] EXT4-fs (loop4): 1 truncate cleaned up [ 295.322598][T16008] FAT-fs (loop1): Directory bread(block 164) failed [ 295.331048][T16004] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 295.368156][T16008] FAT-fs (loop1): Directory bread(block 165) failed [ 295.374825][T16008] FAT-fs (loop1): Directory bread(block 166) failed [ 295.571556][T16008] FAT-fs (loop1): Directory bread(block 167) failed [ 295.578349][T16008] FAT-fs (loop1): Directory bread(block 168) failed [ 295.585059][T16008] FAT-fs (loop1): Directory bread(block 169) failed [ 295.613466][T16008] FAT-fs (loop1): Directory bread(block 162) failed [ 295.633432][T16008] FAT-fs (loop1): Directory bread(block 163) failed [ 295.655397][T16012] FAULT_INJECTION: forcing a failure. [ 295.655397][T16012] name failslab, interval 1, probability 0, space 0, times 0 [ 295.668191][T16012] CPU: 0 UID: 0 PID: 16012 Comm: syz.6.4063 Not tainted syzkaller #0 PREEMPT(voluntary) [ 295.668223][T16012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 295.668239][T16012] Call Trace: [ 295.668249][T16012] [ 295.668260][T16012] __dump_stack+0x1d/0x30 [ 295.668311][T16012] dump_stack_lvl+0xe8/0x140 [ 295.668336][T16012] dump_stack+0x15/0x1b [ 295.668357][T16012] should_fail_ex+0x265/0x280 [ 295.668383][T16012] should_failslab+0x8c/0xb0 [ 295.668471][T16012] kmem_cache_alloc_noprof+0x50/0x310 [ 295.668506][T16012] ? getname_flags+0x80/0x3b0 [ 295.668536][T16012] getname_flags+0x80/0x3b0 [ 295.668572][T16012] do_sys_openat2+0x60/0x110 [ 295.668656][T16012] __x64_sys_openat+0xf2/0x120 [ 295.668698][T16012] x64_sys_call+0x2e9c/0x2ff0 [ 295.668779][T16012] do_syscall_64+0xd2/0x200 [ 295.668806][T16012] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 295.668835][T16012] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 295.668895][T16012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.668923][T16012] RIP: 0033:0x7fcfc7fbebe9 [ 295.668941][T16012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.669065][T16012] RSP: 002b:00007fcfc6a1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 295.669135][T16012] RAX: ffffffffffffffda RBX: 00007fcfc81e5fa0 RCX: 00007fcfc7fbebe9 [ 295.669148][T16012] RDX: 000000000004a101 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 295.669161][T16012] RBP: 00007fcfc6a1f090 R08: 0000000000000000 R09: 0000000000000000 [ 295.669173][T16012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 295.669187][T16012] R13: 00007fcfc81e6038 R14: 00007fcfc81e5fa0 R15: 00007fffa0ac92c8 [ 295.669211][T16012] [ 295.725656][T16008] syz.1.4062: attempt to access beyond end of device [ 295.725656][T16008] loop1: rw=3, sector=226, nr_sectors = 6 limit=128 [ 295.868862][T12621] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.910666][T16008] syz.1.4062: attempt to access beyond end of device [ 295.910666][T16008] loop1: rw=2051, sector=232, nr_sectors = 2 limit=128 [ 296.072090][ T3387] hid_parser_main: 86 callbacks suppressed [ 296.072111][ T3387] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 296.085731][ T3387] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 296.093338][ T3387] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 296.100823][ T3387] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 296.108358][ T3387] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 296.115835][ T3387] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 296.122142][ T29] kauditd_printk_skb: 381 callbacks suppressed [ 296.122206][ T29] audit: type=1326 audit(1755684979.150:24539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16020 comm="syz.1.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814283ebe9 code=0x7ffc0000 [ 296.123357][ T3387] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 296.131322][ T29] audit: type=1326 audit(1755684979.160:24540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16020 comm="syz.1.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814283ebe9 code=0x7ffc0000 [ 296.153380][ T3387] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 296.168977][T16022] netlink: 'syz.2.4064': attribute type 10 has an invalid length. [ 296.184548][ T3387] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 296.184581][ T3387] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 296.191984][T16022] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4064'. [ 296.232785][ T29] audit: type=1326 audit(1755684979.220:24541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16020 comm="syz.1.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f814283ebe9 code=0x7ffc0000 [ 296.256614][ T29] audit: type=1326 audit(1755684979.220:24542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16020 comm="syz.1.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814283ebe9 code=0x7ffc0000 [ 296.280715][T16018] loop6: detected capacity change from 0 to 1024 [ 296.280741][ T29] audit: type=1326 audit(1755684979.220:24543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16020 comm="syz.1.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814283ebe9 code=0x7ffc0000 [ 296.305256][ T29] audit: type=1326 audit(1755684979.310:24544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16020 comm="syz.1.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f814283ebe9 code=0x7ffc0000 [ 296.311577][T16018] EXT4-fs: Ignoring removed nomblk_io_submit option [ 296.334560][ T29] audit: type=1326 audit(1755684979.310:24545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16020 comm="syz.1.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814283ebe9 code=0x7ffc0000 [ 296.355492][T16022] siw: device registration error -23 [ 296.364889][ T29] audit: type=1326 audit(1755684979.310:24546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16020 comm="syz.1.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814283ebe9 code=0x7ffc0000 [ 296.393756][ T29] audit: type=1326 audit(1755684979.310:24547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16020 comm="syz.1.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f814283ebe9 code=0x7ffc0000 [ 296.417559][ T29] audit: type=1326 audit(1755684979.310:24548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16020 comm="syz.1.4067" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f814283ebe9 code=0x7ffc0000 [ 296.445845][ T3387] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [sy] on syz0 [ 296.496405][T16018] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 296.508907][T16004] Process accounting resumed [ 296.515746][T16024] atomic_op ffff88811955d128 conn xmit_atomic 0000000000000000 [ 296.524895][T11006] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.573076][T13412] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 296.576487][T16029] vhci_hcd: invalid port number 96 [ 296.587297][T16029] vhci_hcd: default hub control req: 0000 vfffc i0060 l0 [ 296.619061][T16034] vhci_hcd: invalid port number 96 [ 296.624252][T16034] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 296.625782][T16032] loop4: detected capacity change from 0 to 512 [ 296.678612][T16032] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 296.732823][T16032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.755967][T16032] ext4 filesystem being mounted at /315/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.821392][T16045] lo speed is unknown, defaulting to 1000 [ 296.842383][T16052] loop1: detected capacity change from 0 to 512 [ 296.903118][T16052] EXT4-fs: Ignoring removed mblk_io_submit option [ 296.941621][T16052] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 296.981163][T16052] EXT4-fs (loop1): 1 truncate cleaned up [ 296.998741][T16052] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.015559][T16059] loop2: detected capacity change from 0 to 128 [ 297.041025][T16059] FAT-fs (loop2): Directory bread(block 32) failed [ 297.068060][T16059] FAT-fs (loop2): Directory bread(block 33) failed [ 297.078946][T16062] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 297.085507][T16062] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 297.093037][T16062] vhci_hcd vhci_hcd.0: Device attached [ 297.101619][T16059] FAT-fs (loop2): Directory bread(block 34) failed [ 297.108805][T16059] FAT-fs (loop2): Directory bread(block 35) failed [ 297.119167][T16065] ================================================================== [ 297.123512][T16059] FAT-fs (loop2): Directory bread(block 36) failed [ 297.127296][T16065] BUG: KCSAN: data-race in filemap_splice_read / filemap_splice_read [ 297.127328][T16065] [ 297.127336][T16065] write to 0xffff888118c8bb28 of 8 bytes by task 16052 on cpu 0: [ 297.127356][T16065] filemap_splice_read+0x4f4/0x740 [ 297.157255][T16065] ext4_file_splice_read+0x8f/0xb0 [ 297.162412][T16065] splice_direct_to_actor+0x26f/0x680 [ 297.164174][T16059] FAT-fs (loop2): Directory bread(block 37) failed [ 297.167810][T16065] do_splice_direct+0xda/0x150 [ 297.167838][T16065] do_sendfile+0x380/0x650 [ 297.183704][T16065] __x64_sys_sendfile64+0x105/0x150 [ 297.188952][T16065] x64_sys_call+0x2bb0/0x2ff0 [ 297.193669][T16065] do_syscall_64+0xd2/0x200 [ 297.198213][T16065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.204157][T16065] [ 297.206521][T16065] write to 0xffff888118c8bb28 of 8 bytes by task 16065 on cpu 1: [ 297.214270][T16065] filemap_splice_read+0x4f4/0x740 [ 297.219412][T16065] ext4_file_splice_read+0x8f/0xb0 [ 297.224564][T16065] splice_direct_to_actor+0x26f/0x680 [ 297.229960][T16065] do_splice_direct+0xda/0x150 [ 297.234750][T16065] do_sendfile+0x380/0x650 [ 297.239213][T16065] __x64_sys_sendfile64+0x105/0x150 [ 297.244627][T16065] x64_sys_call+0x2bb0/0x2ff0 [ 297.249326][T16065] do_syscall_64+0xd2/0x200 [ 297.253868][T16065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.259790][T16065] [ 297.262135][T16065] value changed: 0x0000000000000450 -> 0x0000000000000480 [ 297.269308][T16065] [ 297.271665][T16065] Reported by Kernel Concurrency Sanitizer on: [ 297.277011][ T9] vhci_hcd: vhci_device speed not set [ 297.278011][T16065] CPU: 1 UID: 0 PID: 16065 Comm: syz.1.4078 Not tainted syzkaller #0 PREEMPT(voluntary) [ 297.293219][T16065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 297.303480][T16065] ================================================================== [ 297.325479][T16059] FAT-fs (loop2): Directory bread(block 38) failed [ 297.329480][T16062] veth0: entered promiscuous mode [ 297.340159][T16059] FAT-fs (loop2): Directory bread(block 39) failed [ 297.349200][T16059] FAT-fs (loop2): Directory bread(block 40) failed [ 297.364636][T16059] FAT-fs (loop2): Directory bread(block 41) failed [ 297.365540][ T9] usb 1-1: new full-speed USB device number 3 using vhci_hcd [ 297.410216][T16059] FAULT_INJECTION: forcing a failure. [ 297.410216][T16059] name failslab, interval 1, probability 0, space 0, times 0 [ 297.422944][T16059] CPU: 1 UID: 0 PID: 16059 Comm: syz.2.4080 Not tainted syzkaller #0 PREEMPT(voluntary) [ 297.422979][T16059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 297.422996][T16059] Call Trace: [ 297.423005][T16059] [ 297.423016][T16059] __dump_stack+0x1d/0x30 [ 297.423043][T16059] dump_stack_lvl+0xe8/0x140 [ 297.423068][T16059] dump_stack+0x15/0x1b [ 297.423093][T16059] should_fail_ex+0x265/0x280 [ 297.423114][T16059] should_failslab+0x8c/0xb0 [ 297.423141][T16059] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 297.423186][T16059] ? __d_alloc+0x3d/0x340 [ 297.423225][T16059] __d_alloc+0x3d/0x340 [ 297.423259][T16059] ? mpol_shared_policy_init+0xbd/0x4c0 [ 297.423337][T16059] d_alloc_pseudo+0x1e/0x80 [ 297.423371][T16059] alloc_file_pseudo+0x71/0x160 [ 297.423418][T16059] __shmem_file_setup+0x1de/0x210 [ 297.423460][T16059] shmem_file_setup+0x3b/0x50 [ 297.423557][T16059] __se_sys_memfd_create+0x2c3/0x590 [ 297.423580][T16059] __x64_sys_memfd_create+0x31/0x40 [ 297.423600][T16059] x64_sys_call+0x2abe/0x2ff0 [ 297.423647][T16059] do_syscall_64+0xd2/0x200 [ 297.423712][T16059] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 297.423744][T16059] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 297.423777][T16059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.423853][T16059] RIP: 0033:0x7ff552c2ebe9 [ 297.423870][T16059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.423893][T16059] RSP: 002b:00007ff55168ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 297.423991][T16059] RAX: ffffffffffffffda RBX: 0000000000001045 RCX: 00007ff552c2ebe9 [ 297.424007][T16059] RDX: 00007ff55168eef0 RSI: 0000000000000000 RDI: 00007ff552cb27e8 [ 297.424024][T16059] RBP: 0000200000001140 R08: 00007ff55168ebb7 R09: 00007ff55168ee40 [ 297.424039][T16059] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000010c0 [ 297.424051][T16059] R13: 00007ff55168eef0 R14: 00007ff55168eeb0 R15: 00002000000003c0 [ 297.424070][T16059] [ 297.627414][T16061] veth0: left promiscuous mode [ 297.633744][T16063] vhci_hcd: connection reset by peer [ 297.640549][ T12] vhci_hcd: stop threads [ 297.644850][ T12] vhci_hcd: release socket [ 297.649410][ T12] vhci_hcd: disconnect device [ 297.682071][T16032] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 297.698911][T16032] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 9 with max blocks 2048 with error 28 [ 297.699202][T11826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.711598][T16032] EXT4-fs (loop4): This should not happen!! Data will be lost [ 297.711598][T16032] [ 297.711617][T16032] EXT4-fs (loop4): Total free blocks count 0 [ 297.736347][T16032] EXT4-fs (loop4): Free/Dirty block details [ 297.742304][T16032] EXT4-fs (loop4): free_blocks=39626 [ 297.747661][T16032] EXT4-fs (loop4): dirty_blocks=3627 [ 297.752994][T16032] EXT4-fs (loop4): Block reservation details [ 297.759101][T16032] EXT4-fs (loop4): i_reserved_data_blocks=3627 [ 297.796573][ T52] EXT4-fs (loop4): Delayed block allocation failed for inode 16 at logical offset 2058 with max blocks 1577 with error 28 [ 302.466040][ T9] usb 1-1: enqueue for inactive port 0 [ 302.471789][ T9] usb 1-1: enqueue for inactive port 0 [ 302.546055][ T9] vhci_hcd: vhci_device speed not set