last executing test programs: 7m58.567600131s ago: executing program 4 (id=457): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b1300000000000028001280090001"], 0x48}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r5}, 0x18) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000101010100000000000000000a0000003c0001802c00018010000100fc02000000000000000000000000000014000400fc010000000000000000000000000000f6030280050001003a0000000c0019"], 0x5c}}, 0x0) 7m58.434044062s ago: executing program 4 (id=459): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0x97}, 0x18) add_key(&(0x7f00000001c0)='ceph\x00', 0x0, &(0x7f0000000840)='\x00\x00\x00\x00\x00\x00\x00\x00\x00*\x00\x00', 0xc, 0xffffffffffffffff) 7m58.433654392s ago: executing program 4 (id=460): socket(0x10, 0x803, 0x0) semtimedop(0x0, &(0x7f00000003c0)=[{0x4, 0x4, 0x1800}], 0x1, 0x0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0x0, 0x700, &(0x7f0000000a40)="$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") r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r1 = syz_io_uring_setup(0x49a, &(0x7f00000003c0)={0x0, 0x79ad, 0x3180, 0x7ffd, 0x32c, 0x0, r0}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r0, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r1, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x10) semop(0x0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) 7m57.559305087s ago: executing program 4 (id=468): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000c0004000000000040000000000000000000000000000000003e7c"], 0x48) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)='\x00', 0x1, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x80, 0x6, @broadcast}, 0x14) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0), 0xc, &(0x7f0000000500)={&(0x7f0000000ec0)={0x2b0, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_WOL_MODES={0xe0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xd4, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#%\f\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x26}, @ETHTOOL_A_BITSET_BIT_NAME={0x1c, 0x2, '[:-@-()-]\\-#-!/-%\'(]\xe8%+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '%$&\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x30000000}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}]}, @ETHTOOL_A_WOL_MODES={0xd4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xce, 0x5, "549778ab2b941e5ac847c6b005d5049af23b094f13383e889f470232f80363fe416de60d2b1b038f255e60e3029b67451e5bc7225bd295a261b36379679e60845614a20ffb8c344f633dfa80f28adee86c7e9ea5150014c038d0a11e6b75d0f5ea35706cdf35127c4145eda6aa2c851d30875b9201137067a65bbbe956be709544b8f7006633155492846f6ea8d35acc66faa63aeda0506bcb1e2e9a804ad9ab9e57d7c98ab4f3d80a17e0f8a21a3e56ec6b52a2a51c13c4834a9a60d4b29cecedbd9cadf4f6b33959c2"}]}, @ETHTOOL_A_WOL_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @ETHTOOL_A_WOL_SOPASS={0x31, 0x3, "d89855bc78d1ee02683cf62856d1da9aa03d344c9e1a56245f02803106ae7dfc16f6e80d51bea705b4ed45816a"}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x50}, 0x20040810) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000003080)=0x0) io_getevents(r3, 0x1, 0x1, &(0x7f0000000000)=[{}], 0x0) io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f0000001940)={0x0, 0x0, 0x0, 0x7, 0x2, r2, 0x0}]) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@ifindex, 0x37, 0x0, 0xffffff02, 0x0, 0xfffffffffffffeb9, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x2000, 0x4d) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x7a, 0x0, 0x0) syz_clone(0x43100000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r5}, 0x10) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000380), 0x40, 0x0) r6 = socket(0x10, 0x3, 0x0) write(r6, &(0x7f0000000080)="240000001a007f0214f9f407000904080a000000000000050002000008000f40fe00000e", 0x24) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x2, 0x7fff8000}]}) close_range(r7, 0xffffffffffffffff, 0x0) 7m57.273761449s ago: executing program 4 (id=479): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/unix\x00') mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000e, 0x204031, 0xffffffffffffffff, 0x5dd93000) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYBLOB="0000000000000000000800000000000000000000c341c365b7e14b8141ea28867fa813ebde4beba1c6df4380c25b6e1be2f63ed3b2b614fbc208a0fc8abfa38f318647445c", @ANYRES32=0x0, @ANYRES32, @ANYRES32=r0], 0x48) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = io_uring_setup(0x6c4, &(0x7f0000000080)={0x0, 0x4075, 0x18, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 7m56.838566022s ago: executing program 4 (id=488): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'batadv_slave_0\x00', 0x7}) r1 = accept4(r0, &(0x7f0000000040)=@in={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x80, 0x800) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r2, 0x2, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x8040) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000280)=""/76) r3 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x20101, 0x3) timerfd_settime(r3, 0x3, &(0x7f0000000340)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000380)) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f00000003c0), 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./file0\x00', r3}, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000005c0)={'gretap0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x8, 0x700, 0x2, 0x0, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x65, 0x0, 0x20, 0x29, 0x0, @broadcast, @empty, {[@cipso={0x86, 0x42, 0x3, [{0x2, 0x5, "d82c3f"}, {0x6, 0x10, "542d1b9bf2e0aa1e4bc98b160712"}, {0x0, 0xd, "f734dbb22996fbadd2f770"}, {0x1, 0x7, "eaf7c68cc6"}, {0x7, 0x3, '|'}, {0x2, 0x10, "6d260df7fa2d31708e6769c7fbda"}]}, @timestamp_prespec={0x44, 0xc, 0x53, 0x3, 0x8, [{@local, 0x80}]}, @cipso={0x86, 0x18, 0xffffffffffffffff, [{0x6, 0x12, "52d02a6b09822b5c5fc6362785d63a97"}]}, @timestamp_addr={0x44, 0x24, 0x2a, 0x1, 0x9, [{@empty, 0x6}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc0000}, {@empty, 0x8}]}, @ssrr={0x89, 0x1f, 0xd3, [@loopback, @dev={0xac, 0x14, 0x14, 0x21}, @local, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x13, 0x36, [@broadcast, @multicast2, @local, @multicast2]}, @end]}}}}}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x5, '\x00', r5, r3, 0x4, 0x0, 0x3}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl2\x00', r5, 0x4, 0x80, 0x5, 0xfffffe00, 0x50, @rand_addr=' \x01\x00', @empty, 0x8, 0x31, 0x4, 0x5}}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x8, 0x7, 0x81, 0x8200, r6, 0x6, '\x00', r7, r8, 0x4, 0x0, 0x5, 0xe, @value=r3}, 0x50) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000800)={0x1, 0xffffffffffff8000, 0x594}) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r9, 0xf50f, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), r1) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4424e000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xf0, r10, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4040050}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x28, 0x1412, 0x400, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x95) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000bc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, r11, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x0) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d00), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x50, r13, 0x400, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x10000}}]}, 0x50}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) close(r9) 7m56.838229082s ago: executing program 32 (id=488): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'batadv_slave_0\x00', 0x7}) r1 = accept4(r0, &(0x7f0000000040)=@in={0x2, 0x0, @empty}, &(0x7f00000000c0)=0x80, 0x800) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x44, r2, 0x2, 0x70bd29, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x8040) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000280)=""/76) r3 = openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x20101, 0x3) timerfd_settime(r3, 0x3, &(0x7f0000000340)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000380)) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f00000003c0), 0x4) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000440)=@o_path={&(0x7f0000000400)='./file0\x00', r3}, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r4) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f00000005c0)={'gretap0\x00', &(0x7f00000004c0)={'syztnl2\x00', 0x0, 0x8, 0x700, 0x2, 0x0, {{0x35, 0x4, 0x1, 0x1, 0xd4, 0x65, 0x0, 0x20, 0x29, 0x0, @broadcast, @empty, {[@cipso={0x86, 0x42, 0x3, [{0x2, 0x5, "d82c3f"}, {0x6, 0x10, "542d1b9bf2e0aa1e4bc98b160712"}, {0x0, 0xd, "f734dbb22996fbadd2f770"}, {0x1, 0x7, "eaf7c68cc6"}, {0x7, 0x3, '|'}, {0x2, 0x10, "6d260df7fa2d31708e6769c7fbda"}]}, @timestamp_prespec={0x44, 0xc, 0x53, 0x3, 0x8, [{@local, 0x80}]}, @cipso={0x86, 0x18, 0xffffffffffffffff, [{0x6, 0x12, "52d02a6b09822b5c5fc6362785d63a97"}]}, @timestamp_addr={0x44, 0x24, 0x2a, 0x1, 0x9, [{@empty, 0x6}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x7}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xc0000}, {@empty, 0x8}]}, @ssrr={0x89, 0x1f, 0xd3, [@loopback, @dev={0xac, 0x14, 0x14, 0x21}, @local, @multicast1, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x13, 0x36, [@broadcast, @multicast2, @local, @multicast2]}, @end]}}}}}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x5, '\x00', r5, r3, 0x4, 0x0, 0x3}, 0x50) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000680)={'syztnl2\x00', r5, 0x4, 0x80, 0x5, 0xfffffe00, 0x50, @rand_addr=' \x01\x00', @empty, 0x8, 0x31, 0x4, 0x5}}) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x8, 0x7, 0x81, 0x8200, r6, 0x6, '\x00', r7, r8, 0x4, 0x0, 0x5, 0xe, @value=r3}, 0x50) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000800)={0x1, 0xffffffffffff8000, 0x594}) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r9, 0xf50f, 0x0) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), r1) sendmsg$ETHTOOL_MSG_EEE_GET(r3, &(0x7f0000000a00)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x4424e000}, 0xc, &(0x7f00000009c0)={&(0x7f00000008c0)={0xf0, r10, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x4040050}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x28, 0x1412, 0x400, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x95) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), r3) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000bc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, r11, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x0) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000d00), r1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x50, r13, 0x400, 0x70bd2c, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x10000}}]}, 0x50}, 0x1, 0x0, 0x0, 0x44}, 0x4000000) close(r9) 7m56.070612956s ago: executing program 0 (id=492): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x24000081) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB="0002000000000000000600000000000010000000", @ANYRES32=0x0, @ANYRES16=r0, @ANYRES8=r0], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000600)=ANY=[@ANYRESOCT=r2, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r6}, 0x10) r8 = dup(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, 0x0, 0x4c015) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r12 = socket$netlink(0x10, 0x3, 0xe) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r12) r13 = accept(r7, &(0x7f0000000580)=@isdn, &(0x7f0000000200)=0x80) sendmsg$TIPC_CMD_GET_MAX_PORTS(r13, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xffffffffffffff84, &(0x7f0000000380)={0x0}}, 0x400d5) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYRESOCT=r9, @ANYRES32=0x0, @ANYBLOB], 0x40}}, 0x0) r14 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r14, 0x5607, 0x4) setsockopt$inet_mreq(r8, 0x0, 0x23, &(0x7f0000000500)={@remote, @multicast1}, 0x8) ioctl$VT_ACTIVATE(r14, 0x5606, 0x4) r15 = gettid() rt_sigqueueinfo(r15, 0xfffffffd, &(0x7f0000000300)={0x433, 0x8008a, 0x2}) ioctl$VT_RESIZEX(r0, 0x560a, 0x0) 7m55.952068977s ago: executing program 0 (id=494): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000600), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010c25bd7000ffdbdf251400000008001d00", @ANYRES32=r5, @ANYBLOB="08000300", @ANYRES32=r4], 0x24}, 0x1, 0x0, 0x0, 0x20040801}, 0x20000004) setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a0000000212a277", 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000ffff000000007200ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r6}, 0x10) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='hrtimer_start\x00', r11}, 0x3d) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000000000101480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002140000001000010000000000000000000084000a7679f531605d162195f4bce1c58d999f3da878c0af4ca91a4bb00d680572efe852a9eed9cc1339dd86688ffa6a260628b05fff30bcaf9bdecd50b2662b466f6f88ae47f8ffe055bbc453b85470c55df13c5d4e"], 0xf8}}, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000c10010000000000007000000180100002020742500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000007000000850000001700000085000000"], 0x0, 0xcdc4, 0x0, 0x0, 0x41000, 0x2}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$unix(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f0000000180)=@abs={0x1, 0x5c, 0x1}, 0x6e, 0x0}, 0x20000) ioctl$TUNGETVNETLE(r7, 0x40047451, &(0x7f0000000180)) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xa, @loopback}], 0x1c) 7m55.848534897s ago: executing program 0 (id=497): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_usbip_server_init(0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa54000085"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) close(r0) 7m55.248547871s ago: executing program 0 (id=503): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000c0004000000000040000000000000000000000000000000003e7c"], 0x48) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)='\x00', 0x1, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x80, 0x6, @broadcast}, 0x14) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000003c0), 0xc, &(0x7f0000000500)={&(0x7f0000000ec0)={0x2b0, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}]}, @ETHTOOL_A_WOL_MODES={0xe0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xd4, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '#%\f\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '&\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x26}, @ETHTOOL_A_BITSET_BIT_NAME={0x1c, 0x2, '[:-@-()-]\\-#-!/-%\'(]\xe8%+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '%$&\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x30000000}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}]}, @ETHTOOL_A_WOL_MODES={0xd4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xce, 0x5, "549778ab2b941e5ac847c6b005d5049af23b094f13383e889f470232f80363fe416de60d2b1b038f255e60e3029b67451e5bc7225bd295a261b36379679e60845614a20ffb8c344f633dfa80f28adee86c7e9ea5150014c038d0a11e6b75d0f5ea35706cdf35127c4145eda6aa2c851d30875b9201137067a65bbbe956be709544b8f7006633155492846f6ea8d35acc66faa63aeda0506bcb1e2e9a804ad9ab9e57d7c98ab4f3d80a17e0f8a21a3e56ec6b52a2a51c13c4834a9a60d4b29cecedbd9cadf4f6b33959c2"}]}, @ETHTOOL_A_WOL_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @ETHTOOL_A_WOL_SOPASS={0x31, 0x3, "d89855bc78d1ee02683cf62856d1da9aa03d344c9e1a56245f02803106ae7dfc16f6e80d51bea705b4ed45816a"}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x50}, 0x20040810) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) io_setup(0x9, &(0x7f0000003080)=0x0) io_getevents(r3, 0x1, 0x1, &(0x7f0000000000)=[{}], 0x0) io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f0000001940)={0x0, 0x0, 0x0, 0x7, 0x2, r2, 0x0}]) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@ifindex, 0x37, 0x0, 0xffffff02, 0x0, 0xfffffffffffffeb9, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x2000, 0x4d) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x7a, 0x0, 0x0) syz_clone(0x43100000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x10, 0x3, 0x0) write(r5, &(0x7f0000000080)="240000001a007f0214f9f407000904080a000000000000050002000008000f40fe00000e", 0x24) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x2, 0x7fff8000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 7m54.609535515s ago: executing program 0 (id=512): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) syz_usbip_server_init(0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa54000085"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x18) close(r0) 7m54.359489016s ago: executing program 0 (id=515): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x4db1, 0x2}, 0x0, 0x0) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000040)=@framed={{}, [@alu={0x4, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10}, @jmp={0x5, 0x0, 0x3}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0xfff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/9, 0x9}, {&(0x7f0000000600)=""/38, 0x26}, {&(0x7f0000000b40)=""/4096, 0x1000}, {0x0}, {&(0x7f00000006c0)=""/227, 0xe3}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/46, 0x2e}], 0x8) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000140)={0x1d, 0x5, 0xfefffff9}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r1}, 0x18) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x111900, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r3 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) fgetxattr(r3, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r4, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_FAMILY={0x5, 0xd, 0x9}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x24044000) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)={0x2, 0x7, 0x0, 0x5, 0x5, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_key={0x3, 0x8, 0x68, 0x0, "090ebfec9e2e3f6284fffc3a53"}]}, 0x28}}, 0x4040014) 7m54.303076457s ago: executing program 33 (id=515): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x4db1, 0x2}, 0x0, 0x0) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000040)=@framed={{}, [@alu={0x4, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10}, @jmp={0x5, 0x0, 0x3}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0xfff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/9, 0x9}, {&(0x7f0000000600)=""/38, 0x26}, {&(0x7f0000000b40)=""/4096, 0x1000}, {0x0}, {&(0x7f00000006c0)=""/227, 0xe3}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/46, 0x2e}], 0x8) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000140)={0x1d, 0x5, 0xfefffff9}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r1}, 0x18) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x111900, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r3 = open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) fgetxattr(r3, &(0x7f00000003c0)=@known='security.selinux\x00', 0x0, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000200)=0x14) sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, r4, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_FAMILY={0x5, 0xd, 0x9}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x24044000) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)={0x2, 0x7, 0x0, 0x5, 0x5, 0x0, 0x70bd2d, 0x25dfdbff, [@sadb_key={0x3, 0x8, 0x68, 0x0, "090ebfec9e2e3f6284fffc3a53"}]}, 0x28}}, 0x4040014) 5m53.582397253s ago: executing program 2 (id=2639): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x4db1, 0x2}, 0x0, 0x0) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000040)=@framed={{}, [@alu={0x4, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10}, @jmp={0x5, 0x0, 0x3}]}, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0xfff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000800)=[{&(0x7f00000005c0)=""/9, 0x9}, {&(0x7f0000000600)=""/38, 0x26}, {&(0x7f0000000b40)=""/4096, 0x1000}, {0x0}, {&(0x7f00000006c0)=""/227, 0xe3}, {&(0x7f00000008c0)=""/227, 0xe3}, {&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f00000007c0)=""/46, 0x2e}], 0x8) rt_tgsigqueueinfo(0x0, 0x0, 0x8, &(0x7f0000000140)={0x1d, 0x5, 0xfefffff9}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r1}, 0x18) syz_usb_connect(0x2, 0x0, 0x0, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000400)=""/181, &(0x7f0000000580)=0xb5) 5m53.048511787s ago: executing program 2 (id=2652): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000000000000085"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002b80)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) lchown(0x0, 0x0, 0x0) 5m53.021390957s ago: executing program 2 (id=2653): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r0}, 0x18) getdents(0xffffffffffffffff, 0x0, 0x2a) 5m52.967865487s ago: executing program 2 (id=2655): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000280)={[{@barrier}, {@usrjquota}, {@norecovery}, {@barrier}, {@noload}, {@orlov}]}, 0x1, 0x599, &(0x7f0000001280)="$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") syz_clone3(&(0x7f0000000080)={0x801400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x84, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfe}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040884) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=@delchain={0x34, 0x65, 0x430, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xd, 0x82bad145d35cdd3b}, {0x2, 0xa}, {0xffff, 0xa}}, [@TCA_CHAIN={0x8, 0xb, 0x1020000}, @TCA_RATE={0x6, 0x5, {0x7, 0x2}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc090}, 0x24004051) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r3, {0x3}}, './file0\x00'}) r8 = creat(&(0x7f0000000080)='./file1\x00', 0x10) recvfrom(r8, &(0x7f0000000100)=""/239, 0xef, 0x10142, &(0x7f0000000200)=@isdn={0x22, 0x10, 0x0, 0x7, 0x2}, 0x80) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0x3, 0x1) getdents64(r9, 0x0, 0x0) 5m52.858610778s ago: executing program 2 (id=2656): perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) 5m52.301571731s ago: executing program 2 (id=2660): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000f0ffffff0000000000000000000800000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000001"], 0x48) 5m52.301377431s ago: executing program 34 (id=2660): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000f0ffffff0000000000000000000800000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000001"], 0x48) 5m21.68922003s ago: executing program 3 (id=3180): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000001940)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000051401002dbd7000fbdbdf25080001000200000008000300012000003248ba96a83c6ba8297ad8de4f26a6485b002e549873096f8590d01997cc15ae94966b4e2aeec0534d2869a113c8c326cb6316d29e1cedb0ccccba655590"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x10080, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x2, @perf_bp={0x0, 0x2}, 0x14105, 0x32, 0xfffffbff, 0x3, 0x2, 0x0, 0xfffa, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x4000) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x50, r5, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@L2TP_ATTR_COOKIE={0xc, 0xf, 0xfffffffffffffffd}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xfe00}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYBLOB="100029bd7000ffdbdf250e000000340041090800080006000000060002004e200000080007000800000005000d0001000000080006"], 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e64000000001800028014"], 0x48}}, 0x0) sendmmsg$inet(r6, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) rt_sigsuspend(&(0x7f0000000000)={[0x1]}, 0x8) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$L2TP_CMD_TUNNEL_DELETE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}}, 0x40) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f0000002cbd7000fbdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af03000600000000000200010000000000000000000000000002000100000000000000070c01000000030005000000000002004e21ac1e01010000000000000000020013"], 0x78}, 0x1, 0x7}, 0x0) 5m20.462535807s ago: executing program 3 (id=3195): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x1, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r4, &(0x7f0000000140)={[{0x2b, 'cpu'}]}, 0x5) 5m20.232898369s ago: executing program 3 (id=3202): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001440)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 5m20.182908489s ago: executing program 3 (id=3204): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000000010000000000", @ANYRES64=0x0, @ANYRES8, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000050000000200"/28], 0x50) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000044, &(0x7f0000000400)={[{@init_itable_val={'init_itable', 0x3d, 0x5}}, {@nojournal_checksum}]}, 0x1, 0x55f, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdP91lUYQ0Wksgcnc+na+mOCyHwUHQ70fYb2roymy2jSsdaBG+JefBuCiAPxXd99HP4D/hUDHQwZRR98qdz0puvWpMm6dM2Wzwfudk7uTc/95tzv6bk9CQlgYI1m/xQiXoooRhJxMCL7r6EY+c7R1eOW712ZyrYkVlY++ztpHJfVmz+r+bz9eeXFiPj9m4hjhY3t1haXZsuVSjqf18fqcxfHaotLx8/PlWfSmfTCxOTkybcnJ957952exfrGmX9/+PTWRye/PbL8/a93XriRxKk4kO9bH8djuLq+Mhqj+WsyHKceOnC8B431k2SnT4AtGcrzfDiyMeBgDOVZDzz7voqIFWBAJfIfBlRzHtC8t+/RffBT4+6HqzdAG+Mvrv5tJPY07o32LScP3Bll97sjPWg/a+O3v27eyLbo3d8hADq6ei0iThSLG8e/JB//tu5EF8c83IbxD56cW9n8581W85/C2vwnWsx/9rfI3a3onP+FOz1opq1s/vd+y/nv2qLVyFBee64x5xtOzp2vpNnY9nxEHI3h3Vl9s/Wck8u3V9rtWz//y7as/eZcMD+PO8XdDz5nulwvP07M6929FvFyy/lvstb/SYv+z16PM122cTi9+Wq7fZ3j314rP0e83rL/769oJZuvT441roex5lWx0T/XD//Rrv2djj/r/32bxz+SrF+vrT16Gz/t+S9tt++B+KP7639X8nmjvCt/7HK5Xp8fj9iVfLLx8Yn7z23Wm8dn8R89svn41+r63xsRX3QZ//VDv7zSVfyd+n8bFlmz+Kcfqf8fvXD74y9/3Hr8Wf+/1SgdzR/pZvzr9gQf57UDAAAAAACAflOIiAORFEpr5UKhVFp9f8eh2FeoVGv1Y+eqCxemo/FZ2ZEYLjRXug+uez/EeP5+2GZ94qH65N7XPvg6Ir4b2tuol6aqlemdDh4AAAAAAAAAAAAAAAAAAAD6xP42n//P/Dm002cHbDtf+Q2Dq2P+9+KbnoC+5Pc/DC75D4NL/sPgkv8wuOQ/DC75D4NL/sPgkv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQU2dOn862leV7V6ay+vSlxYXZ6qXj02lttjS3MFWaqs5fLM1UqzOVtDRVnev08yrV6sXxiVi4PFZPa/Wx2uLS2bnqwoX62fNz5Zn0bDr8RKICAAAAAAAAAAAAAAAAAACAp0ttcWm2XKmk8woKWyoU++M0lmYj+uI0npXCTo9MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDf/wEAAP//bY03Mw==") r2 = openat(r1, &(0x7f0000000080)='./file1\x00', 0x22842, 0xf4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x21) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xfecc) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000040)={0x2, 0x2, "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"}) pipe2(&(0x7f0000000040), 0x80) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/netfilter\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x2, 0x80805, 0x0) pwrite64(r4, &(0x7f0000000600)="729e24b376c89829650312972a3139826ce851894c9138f61c4b5ea0e3af83ea9387b45cca81cce71fb02bccedc3202465252a0620affdf974e0511d2f4f553c6e07b8544b3a2aab4426e03ab5dae274101213d9b6a3553702371ff5e259822ae0c8e292ecf1eeb822c29a3f228fa870939b6aa6bc8c84e05f0a96fe8f771fd410303b62c0735a4dccd8263c0bf5e941fca27ecf", 0x94, 0x3) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r9 = gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='devlink_health_reporter_state_update\x00'}, 0x18) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYRESOCT, @ANYRES32=r2, @ANYRES32=r9], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) r10 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r8, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYBLOB="a1cacdf846241760000000e53e9d7840cdca9e429c493ed0c8b5eb38eb2d43957c0391bcb3cf5d55f951907e5179c69722b7bc0e08aa5341aad99a7daa11d60e68a5bdd479217b7c66cfbdc795d29e19c516", @ANYRES16=r10, @ANYBLOB="00022dbd7000fbdbdf2502000000080001000000000008000100000000000c00060000000000000000000c0008004c080000000000000c00040001000000000000000c000200ff010000000000000c0003000100000000000080"], 0x60}, 0x1, 0x0, 0x0, 0x4004044}, 0x240c5000) sendmsg$NBD_CMD_CONNECT(r7, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x64, r10, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xe3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xa}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x800000009}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1c40}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x775e}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x20008044}, 0x8804) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="06000000", @ANYRES16=r10, @ANYBLOB="080028bd7000fbdbdf25020000000800010000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmmsg$inet_sctp(r5, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0003}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) 5m19.727559082s ago: executing program 3 (id=3209): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000080), 0x6a2, 0x20000) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) r3 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) 5m19.419831513s ago: executing program 3 (id=3218): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0xd) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000081, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x4, 0x80400, 0x200000002006, 0x7fc}) 5m19.411485893s ago: executing program 35 (id=3218): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0xd) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000000000000081, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x4, 0x80400, 0x200000002006, 0x7fc}) 17.570123672s ago: executing program 6 (id=8271): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010000eeffffffffffff0b00000008"], 0x1c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003"], 0xfc}}, 0x0) 17.509644962s ago: executing program 6 (id=8274): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x2100, 0x0) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000001c0)=@keyring={'key_or_keyring:', r1}) 17.491091942s ago: executing program 6 (id=8276): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x84, 0xe9a, 0x0, 0x5, 0x9, 0xc, 0xfd, 0x0, 0x1}) 17.428080752s ago: executing program 6 (id=8277): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000700)={0x0}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001800)={r2, 0x9}) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x40000, 0x0) pivot_root(&(0x7f0000007b00)='./file0/../file0\x00', &(0x7f0000000280)='./file0\x00') syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000340)={[{@init_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x88}}, {@resuid}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@lazytime}, {@usrquota}, {@data_err_abort}, {@data_err_abort}]}, 0x1, 0x5d8, &(0x7f0000001200)="$eJzs3c9vVEUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aAAleTIwXY0w8eRD/CyVy5aQnD148GRKihqOJa952H3Tbty0tbV/lfT7JdufN7MvMY/l2ZqczbwOorMHsRy1id0RMp4j+dGXpCwbnn+7+/cnJ7JGiXn/jzxSpmZe/NDWf+7IfnRE9EfHzTyl2dSytd2bu0tnxqanJi83j4dlz08Mzc5f2nzk3fnry9OT50ZdGjxw+dPjIyIE1Xdflgrzj197/sP+zsbe/++afNPL9b2MpjsarzRcuvI71MhiDjX+TtLSo78h6V1aSjvm3Oha+xamzxAaxKvn71xURT0V/dMT9N68/Pn2t1MYBG6qeIupARSXxDxWVjwPyz/aLPwfXShmVAJvhzrH5CYCl8d85PzcYPY25ge13Uyyc1kkRsbaZuVY7IuLWzbFrp26OXYsNmocDil25GhFPF8V/asT/QPTEQCP+ay3xn40LTjSfs/zX11j/4qli8Q+bZz7+e5aN/2gT/+8siP9311j/4P3ke70t8d+71ksCAAAAAACAyrpxLCJeLPr7f+3e+p8oWP/TFxFH16H+wUXHS//+X7u9DtUABe4ci3ilcP1vLV/9O9DRTD3WWA/QlU6dmZo8EBGPR8S+6NqWHY8sU8f+z3d93a5ssLn+L39k9d9qrgVstuN257bWcybGZ8cf9rqBiDtXI54pXP+b7vX/qaD/z34fTD9gHbuev36iXdnK8Q9slPq3EXsL+//7d61Iy9+fY7gxHhjORwVLPfvxFz+0q3+t8e8WE/Dwsv5/+/LxP5AW3q9nZvV1HJzrrLcrW+v4vzu92bjlTHcz76Px2dmLIxHd6XhHltuSP7r6NsOjKI+HPF6y+N/33PLzf0Xj/96IWHSnsEh/te4pzj35b9/v7dpj/A/lyeJ/YlX9/+oTo9cHfmxX/4P1/4caff2+Zo75P5j3VR6m3a35BeHYWVS02e0FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEdBLSJ2RKoN3UvXakNDEX0R8URsr01dmJl94dSFD85PZGWN7/+v5d/02z9/nPLv/x9YcDy66PhgROyMiC87ehvHQycvTE2UffEAAAAAAAAAAAAAAAAAAACwRfS12f+f+aOj7NYBG66z7AYApSmI/1/KaAew+fT/UF3iH6pL/EN1iX+oLvEP1SX+obrEP1SX+AcAAAAAgEfKzj03fk0RceXl3sYj090s6yq1ZcBGq5XdAKA0bvED1WXpD1SXz/hAWqG8p+1JK525nOmTD3EyAAAAAAAAAAAAAFTO3t32/0NV2f8P1WX/P1RXvv9/T8ntADafz/hArLCTv3D//4pnAQAAAAAAAAAAAADraWbu0tnxqanJixJvbY1mbGaiXq9fzv4XbJX2/M8T+VL4rdKeRYl8r9+DnVXe7yQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDVfwEAAP//tsck3w==") r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) bind(r3, &(0x7f00000002c0)=@caif, 0x80) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c000280080005000100000014000700000000000000000500"], 0x74}}, 0x0) 17.219362744s ago: executing program 6 (id=8280): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 17.069121085s ago: executing program 6 (id=8282): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x11}, 0xc005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x9}, 0x32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) unlinkat(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x1000000}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) socket$netlink(0x10, 0x3, 0xc) mount$9p_rdma(&(0x7f0000000580), &(0x7f00000005c0)='./cgroup\x00', &(0x7f0000000600), 0x2800004, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=rdma,port=0x', @ANYRESOCT]) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0xfffe, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x1}, 0x865) setsockopt$sock_attach_bpf(r5, 0x84, 0x1e, &(0x7f0000000240), 0x4) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x80}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r6}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)={r6}) 17.047399345s ago: executing program 36 (id=8282): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x11}, 0xc005) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r0, 0x0, 0x9}, 0x32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xc369d000) unlinkat(0xffffffffffffff9c, 0x0, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x0) sendmmsg$inet(r1, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x1000000}], 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x1) socket$netlink(0x10, 0x3, 0xc) mount$9p_rdma(&(0x7f0000000580), &(0x7f00000005c0)='./cgroup\x00', &(0x7f0000000600), 0x2800004, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=rdma,port=0x', @ANYRESOCT]) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r4 = socket$kcm(0xa, 0x5, 0x0) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0xfffe, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x1}, 0x865) setsockopt$sock_attach_bpf(r5, 0x84, 0x1e, &(0x7f0000000240), 0x4) r6 = socket$kcm(0xa, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7, 0x0, 0x80}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r6}) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8936, &(0x7f0000000000)={r6}) 1.731690359s ago: executing program 1 (id=8534): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f0000000200)='./file1\x00', 0x2) socket(0x2a, 0x2, 0x0) setgroups(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r2, 0x1, 0x3b, 0x0, &(0x7f0000000100)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff47}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) socket$packet(0x11, 0x3, 0x300) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r6, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(r6, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000940)=ANY=[], 0xf0}}], 0x1, 0x24004c41) r7 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x2, 0x1}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) r8 = socket$unix(0x1, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x400, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r7]) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x654a, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x400, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) 1.62004304s ago: executing program 1 (id=8537): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=r2, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000780)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r4, &(0x7f0000000800)={0xa, 0x4, 0xfa00, {r5}}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r3, 0x0, 0x7}, 0x18) socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000080)="b1", 0xfffd, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r7, 0xf504, 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x9, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="008af8ff00000000bfa20000004a00000007020000f8ffffffb703000108000000b70400000000000085000000169199a5311fa29e20000000000000000000000000758707c0d1a53ffb"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x1954, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r9, 0x6e2, 0x3900, 0x3, 0x0, 0x0) clock_nanosleep(0x2, 0x1000000, &(0x7f0000000040)={0x77359400}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) 1.340082262s ago: executing program 7 (id=8544): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2d, 0x1, 0xfd, 0x0, 0x0, 0x4, 0x514, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x37}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0x0, 0x0, 0x4000, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x52b, &(0x7f0000000a00)="$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") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="e90500000400000000000000d7ffffffffffffff", @ANYRES32, @ANYBLOB="05000000000000000500"/28], 0x50) write$binfmt_register(r2, &(0x7f0000000440)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjquota=', 0x3a, '', 0x3a, './file2', 0x3a, [0x46]}, 0x32) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r0, 0x0, 0x200000000000006}, 0x18) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) io_submit(r4, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r3, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) 1.189670153s ago: executing program 9 (id=8547): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@deltaction={0x38, 0x18, 0x101, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) 1.166907193s ago: executing program 9 (id=8548): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f0000000040)={[{@nogrpid}]}, 0x2, 0x246, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x963cc2, 0x40) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x163242, 0x1b4) 1.103231253s ago: executing program 7 (id=8550): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) 1.066112414s ago: executing program 9 (id=8552): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x47, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) 1.065701914s ago: executing program 7 (id=8553): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000380), &(0x7f00000005c0)=r2}, 0x20) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001d80)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000c0], 0x11, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 1.049020694s ago: executing program 7 (id=8555): r0 = socket(0x10, 0x803, 0x0) semtimedop(0x0, &(0x7f00000003c0)=[{0x4, 0x4, 0x1800}], 0x1, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0x0, 0x700, &(0x7f0000000a40)="$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") r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f00000003c0)={0x0, 0x79ad, 0x3180, 0x7ffd, 0x32c, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r3, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) futimesat(r1, &(0x7f0000000000)='./file1\x00', 0x0) semop(0x0, &(0x7f00000000c0)=[{0x4}], 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, &(0x7f0000000140)) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000180)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x55}, 0x8, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0xa}) r6 = semget(0x1, 0x4, 0x39c) semop(r6, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='task_rename\x00', r8}, 0x18) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={&(0x7f0000000440)}, 0x8012, 0x10000, 0xfffffffe, 0x6, 0x8, 0x20009, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r10 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/cgroup.procs\x00', 0x40002, 0x128) bind$unix(r10, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendfile(r10, r10, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, r11, 0x25, 0x0, @void}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x6, 0x2000032b, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) semop(r6, &(0x7f00000000c0)=[{0x1, 0xbbdd, 0x1000}], 0x1) 1.021132464s ago: executing program 9 (id=8556): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") 847.223265ms ago: executing program 9 (id=8558): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) 837.926585ms ago: executing program 1 (id=8560): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 724.842406ms ago: executing program 1 (id=8564): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="180000006a0013ca25000000000000000000000702000000", 0x18}], 0x1}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kfree\x00', r2}, 0x18) syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$eJzs3V+P21gZBvDnJJkkk0JVAapWVbdzOmWlqRhSJ7NNFRUkjHOSMSRxZHtgRkJaFTqDRs0UaItEc9PODX+k5Qtwtzdc8CFW4oKr/RZwBdIKhIR2BUJGPraTTOJkJm3a2aXPb7Qb5/j18etjr896xj4GERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERQVgNw6gItO3uzq6czWq4Tif5ksXU/Ki2FdyMJm7OW+dKuF5AhP+gWMRbUfFbXxmFXA7/tY6r0berKIYfRQwuXL5098u5TLL8nIRfBBat8PHTwYN7/f7+ozPEZrFw9ecJmTMEtVTX9hy7Y7aUtD1H1ms149Z205NNu628Pc9XHWm5KuM7rtywbspKvb4lVXnP2em2GmZbJYV3vl41jJr8TiHa0QDKnrVtt9t2t6VjwtlhzB35/g+iAGV2pDw47O9vjeXzLK2Nw6BKSvKZ8eAwqHra5laNarVSqVYrtdv123cMIzdVYISEMYSpiKUftHSeMvHxusAiyzt5E72kjNX4j/FnAbRRRBc72IVM/bHQgAsHnRnzY0n//84tNXe94/1/0suvjGZfge7/r0Xfrs3q/2fkIiH1AmlzxIzyxX5WdEYSj/EUAzzAPfTRxz4eLaFuCbn20jXkjbgll5LPzJ8WFLqw4cGBjQ5MtPBFyLhEoo4aajDwHrbRhAeJJmy0oeBhDx58qPCIyoeZKpjw4cCFxAYs3IREBXXUsQUJhTL24GAHXbTQgIlPgiA4wKFu9604n+cpW40kqDJjIwrIJcfdPqpztnZW///DZ9HScf9vsP9/U0XHQSH6+GheDNFnQBBf/y9o7dVkQ0RERERERESvgtC/fRf6r/JvAwjQtNvKOBFTOLfsiIiIiIiIiGgZBIICrkJEd+XjbYjp638iIiIiIiIi+nwT+hk7AaCkb+oXo8elzvJLgOxrSJGIiIiIiIiIXpJ+8v9aHgj0Xf5rEAtd/xMRERERERHR58Cvx8bYz2XjMXaD5M/6GQBrfymID/9egLsijnu7XxVHZjjHPIpjpu4A8JtXxMV4oF79kQegv1nqqojXJoF/Jb99CH18kD7W//MgIoRwJxLIZ8crmJGACNdcy8Xf8D6uR4tcj8eZvz/IQM+JRhQuNe22KltO+24Fpnkx46td/+cPD38BuMPtPDjs75d/9JP+fZ3LcVh0fBRW+uxEOpn0xhjl8kSPt6CfuUgb3XgVzWSVv+l2SkKv10i2PwvzKDO+onk7oLYKRFv5S6xH+2w9iGJLg+GI+wJY04M/VMp6l53YendFjLKoTG552o6YseVFncWNKObGxo3oI2mTsJ6MKH4tC1TLk/sgTHQsi+p4Fqe3hfjHRPvPzwKiGLbFVpjFH8OKJtri+x9GC2/1dpPhMc6SxdRRQER0Xg5GvZAexHxqjP2ke0hOamfvd5AD4rPcjN59tJYg7j+S3v3J74Koh8oCufhvE+lrSfoVhGf0DaHryUcDuueupJzRjfKnQRCYF4sYP6P/NwiSDTIW6N2OgyCYPKP/YfQOpDjtqSz+HQTB3YruSX470at+EC7wwcz1eu1qFkUU8OTop/gkmb3/4/2H1epWzXjXMG5XsaL/VyH+yIJ9DxERTTn9HTs6IjMnQryL61Ed1+//7Z1o6kSP96X4lgLtFtDHfWwmrxBYS6+1hAN885/RbQib0VUrsF6KPksDefnS3fCqdhh7KHL6DS+bM6/qdGcZxerbG6rD2OS9Q5NXgKPYrVe8F4iIiF6v9Rn9MHCi/8fJ/r94ov/fxEYUsXEl9bq7NHZL4WZydTy8pB9cOE6NrZye/LeW3BhERERvCOV+LEr+r4Tr2r33KvV6xfS3lXQd67vStRstJe2ur1xr2+y2lOy5ju9YTlv2XBTsVeVJb6fXc1xfNh1X9hzP3tVvfpfxq9891TG7vm15vbYyPSUtp+ubli8btmfJ3s6327a3rVy9sNdTlt20LdO3na70nB3XUmUpPaXGAu2G6vp20w4nu7Ln2h3T3ZPfc9o7HSUbyrNcu+c7UYXJuuxu03E7utoygoVfdEhERPT/6PHTwYN7/f7+o8mJ1fDSPCo5xoyY6Yl8SoUcI4iIiOgzZtRdL7BQ8RUmREREREREREREREREREREREREREREREREU05/pG/BiZW0hwWBYcnPLsYleI7RI4ZT9Qi8bD6fun/SA/u9yOKZYYkAcIalkkciBg8+mhO8OixJmn885niRDHEJeOH2+esXgAu6BFFJbokHwPTzo0s/xtImvnEQteisGD0zdVZhuC9yy//PIZx4+PvpWSJs+SAIgvmLF062Yf7sx3MOwKP8nF2wesrx87rPRET0uv0vAAD//ySOL9Y=") chown(&(0x7f0000000040)='./file1\x00', 0x0, 0x0) 676.521296ms ago: executing program 1 (id=8565): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$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") 675.589466ms ago: executing program 9 (id=8568): r0 = socket(0x10, 0x803, 0x0) semtimedop(0x0, &(0x7f00000003c0)=[{0x4, 0x4, 0x1800}], 0x1, 0x0) r1 = syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x14806, &(0x7f0000000080)=ANY=[], 0x0, 0x700, &(0x7f0000000a40)="$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") r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000380)='/proc/vmstat\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f00000003c0)={0x0, 0x79ad, 0x3180, 0x7ffd, 0x32c, 0x0, r2}, &(0x7f0000000340)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r3, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) futimesat(r1, &(0x7f0000000000)='./file1\x00', 0x0) semop(0x0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0}, &(0x7f0000000140)=0xc) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000180)={{0x2, r7, 0x0, 0x0, 0x0, 0x2, 0x55}, 0x8, 0xfffffffffffffff9, 0x0, 0x0, 0x0, 0x0, 0xa}) r8 = semget(0x1, 0x4, 0x39c) semop(r8, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008000000"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='task_rename\x00', r10}, 0x18) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r12 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/cgroup.procs\x00', 0x40002, 0x128) bind$unix(r12, 0x0, 0x0) sendfile(r12, r12, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, r13, 0x25, 0x0, @void}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x6, 0x2000032b, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) semop(r8, &(0x7f00000000c0)=[{0x1, 0xbbdd, 0x1000}], 0x1) 638.639516ms ago: executing program 1 (id=8570): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r2, @ANYRES32=r2, @ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000007c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000780)={0xffffffffffffffff}, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r4, &(0x7f0000000800)={0xa, 0x4, 0xfa00, {r5}}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r3, 0x0, 0x7}, 0x18) socket$inet_sctp(0x2, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000080)="b1", 0xfffd, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r7, 0xf504, 0x0) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x9, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="008af8ff00000000bfa20000004a00000007020000f8ffffffb703000108000000b70400000000000085000000169199a5311fa29e20000000000000000000000000758707c0d1a53ffb"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x1954, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x49, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r9, 0x6e2, 0x3900, 0x3, 0x0, 0x0) clock_nanosleep(0x2, 0x1000000, &(0x7f0000000040)={0x77359400}, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) 633.943046ms ago: executing program 5 (id=8571): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@deltaction={0x38, 0x18, 0x101, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) 570.245516ms ago: executing program 5 (id=8573): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f00000002c0)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRESHEX=r0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) kexec_load(0x4, 0xa, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000811}, 0xe000000) r4 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r4, &(0x7f0000002000)=""/4096, 0x1000) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff3b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8a}, 0xffffff4b) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x69, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000c}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r6}, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="0102000a00ffffff000000003b2c701725ad45493ee531b4f4aafaf64a795e41555391f33e1fc6ff6ff2bdf6b1ebd8050d30bc02375923330000"], 0x14}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r9 = gettid() ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'dvmrp1\x00', 0x1}) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x589b}, 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r11}, 0x10) close(0xffffffffffffffff) ustat(0x3, &(0x7f0000000040)) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140a0703000000000000000002000b09080003400000000a0900010073797a30000000000c000640000008000000000214000000020a01"], 0x70}}, 0x0) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000ffdbdf251400009600"/26, @ANYRES32=r9, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) socket(0xa, 0xa, 0x3) 298.881328ms ago: executing program 5 (id=8577): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) 284.207868ms ago: executing program 8 (id=8578): sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r0 = syz_io_uring_setup(0x3a65, &(0x7f0000000700)={0x0, 0xb1b1, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB=';'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) r4 = syz_io_uring_setup(0x1108, &(0x7f0000000880)={0x0, 0x2, 0x80, 0x2, 0x21e}, &(0x7f00000003c0)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0, 0x200, 0x0, 0x0, {0x0, r7}}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000004000)={&(0x7f0000001880)=@llc={0x1a, 0x322, 0x5e, 0x23, 0x50, 0x8, @broadcast}, 0x80, &(0x7f0000001b40)=[{&(0x7f0000004040)="efcb1d57e8e7d2b3ae67e6b674729f88ce8a8575bb1dc04da5bf838d65d6c9579ad06489ef30948e82619456b15727d10ae876aadd44198d3b", 0x39}, {&(0x7f0000000500)="88916a5b03fa6ae01dc55a317135347ec983c9553accb6c0fc7f089572d47df47deeb77e9ba6031cd1", 0x29}, {&(0x7f0000001940)="9e155b9f9ab0693859a9ecb2d1e65dcfbdb9a3ce8c51132ee107f41d9b5a5f74b45035087db8ead6d55370d33750bda46dd9e05f4179890f5a0fe42b3233730b48e8a22535ceb094fc27a74f4b9b262d9cbfed312f5a205a1ed4f633a46a4a7b66a31f024bfc72f49a733345bc7ee2d8a2233c492080d546e288210c02269672069e02ad0c0a1e6006dedc6c8d8f6a8cef52944c3fafc30a9e1b727619176babbe46f12d38b7d54462bce9990a5917caaaffc54581b9", 0xb6}, {&(0x7f0000001a00)="7f2ef2cba5d3c37a6851a3ec7c287d1a619530829de320b9d3a26d9e5d85ad57d6e72128319fb8a687c3c7a3ae1a50f7a9969b8eb318e1d89291bb2da896111505e856995ba30154c7cd2df7b34b34bf5ea0d252f010ca6cd8fc87f70799e1021a8c2f0f1e2f4891daf5847fe8eae0e2019afe57a9f4196e2abc475467e9377479ade5d3fb51e481be3c67cc54dd78b64d5ad73f7a834409947c50e0b24c0e6d6429b033b3df367648c1ad1efd28f6fcb3af25901eee8fe2d7cb7060fc0faa2efd730a2a", 0xc4}, {&(0x7f0000001b00)="20984830e2b2d4ec9a024f40f1d0e266414eee142ca65807509cadc9", 0x1c}], 0x5, &(0x7f0000001bc0)=[{0x108, 0x3a, 0x400, "80ee42d38d746096dd78de60211869e4f89d4d13f5796bd687a6d6bb53871c4f57e14d8f7a0439886d41b5af39ad0101f1cbf9823413f49b78dd0c3b16776c44698bbd8101dc93aae21245e7091b14017e826167c748bf48052ecd30659c9a7aa37459a849c1d8553204c10be50423e89003e67e922b012faedf1fd8a4ca79c46a7428ac6b0f7b037d16ea43eddb4ce1b7c4b2db654ea3a986ca1ebd23042b3aaa65dc90c4b9ffb3b95584d3791eb96a2b6a5d3022596534160049eaa6b85917fa9691829def19174dfe312b09fdf0d14a7ff092a2df18e049284ad2e4fe9fd0ab5be7de42f500f78aa96cc22efc7e2e8173"}, {0x40, 0x10e, 0x7fe, "f7ebf965987c6fffd7429fcaa72bd85d89bb97eb39be39309363e1d9ebd3fa944bafa1768026b518b6b5f6087b1c9e"}, {0x18, 0x84, 0x1, "e694776016b617"}, {0x50, 0x109, 0x0, "da27a117da31eae35e81f7693f47cdc0e39ae88949c505ad0bd89a2b12c70e05c9bed798f5e5ca8c4548471c23b1127b41ae2c3e25479a546b2ee6063765cd6e"}, {0xf0, 0x183, 0xc96, "5fd62f612fd229ec81d30609dde58b862caa6da1b892d8bf8cbc1b7b279dfb56ed2b1d9a2becc145892619c5d91477e49e9635e8120d0a97ee28f4740901cd9c6034b11281465eab85a4a6accc60003268c4de87e4797c56566dfbf6a9e5bfcb3454d630eca8b959a71fac44cff2b7c185619df39e278c0dae4cb6dac8a111fc04c3dde99601f70756d9dc4b9c464d61e698a9dc68b7a02ae9192260de01e4071b133ad0686652c552e1dd52767083f718c7abe12aaa62246bd2a05584dd9fddaa39c2fa09a1b3aafd4a59eb8fa57d9d96ac9f7a2b201134226e92d8c2215c39"}, {0xc0, 0x108, 0x80000001, "1b192c00464cda477a459dbf1b27ab1c15bee69db556eb1339564f98f06bd1d2a5db733fe58da45fc7cc6ca38ff62dae529fbde1b9306c7886bdb5c0508fa29a0d529e2a04cc4bf53ef56686affe4fc531e88f7b62b58179d6ed5aec4fb3dad0d958a476222a526e3686719856ea8037718560b4ecbd48b1000332e782c1ca2c19024af3e1349ec0d7a402d0533eb02fe1be0ccf0e8393c9fc9b175d582e3c487da7b9f1452d0eb0cd94a1c8b2b1c1ba"}, {0x1010, 0x88, 0x4, "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"}, {0x70, 0x0, 0x3, "55b53d34a3e0dc7ab20793d67359d5235090973138064da2405bc71949009fca29effd2cd31a7551f67d22c805929e1ac8e6ad1950e2e301635ea8cbc7a55034bc82ac347d5dd974533cb13376a3c5dea5ebb763a2e2f797f8"}, {0x1010, 0x109, 0x10001, "bfe6967f4a2cbd0221ac98cc6ea5ff111c58ce9a58874b21f88b4bd2a2f16f7f67d9fc3dffea2e0692b3ec9f04a7823e95e8ab2c894a36373ccf558b4a6bcaebdb1450bcb2e71d7445a4b35ea1bb7a82b0ea66e893971c6465e3fb6eb28de5450ed44dff61dea52a2ccbb62e4bc1b9f1f4f84333d2cb6fbfb8365c2c284bb8e4867d4322dc386bb57052a88c6819cc3e2860a400a88174172364af5ad1ed4376bdd4528c0963b7a9dca39698743213d585579698314275d902b53737df65a93b510c756e598c04aa7a0a7f8b9aba80f9a50d0cf04a61ebc3f2a05598c2654b7c83cf1a5f5cee9ea302f657fed2f2f30aa2708e160c876e373c6ac45c650bfc1878a6c451151dec159fdc6d5db5ced0ff8a7756fccac1944b63230ac94f926fa2ae91c831ace2adbe7b3dd8c200815ede8020cb2fe0b8b7a8a1f216d4f0875bae10b38a173a93ef6d6b003cdfdb2ce689bdf33c63e0a91e364a4be24facc3ca2c34c70d7b86dbf63ca23f4f92c9bde01ac6bc2a0cfd99a58d5354b69453e392d0e383d32482bd3c0c1047ae6035da7d1481832d7a6e72930a8a29f8ae9c93cec6eeb4a8ac6bc3417a5663b75680e23d8f433aeed6970e4e8c62ac5fc2e0e88f027246b78a38d249aae37a94cbdeb115f0b60812db076639a8be27bb4ce54d4c1faffd5c4473c77e33b211f7ffd6a58e66a7801507b49ad973815b4c0c3b0795d4e61c2295aae3fac70c5fba55f4964303651be71f192f66ecb56a055c5be2a1ea75dc6ed31e93c726e97decf17668e25186aff527da78a9520eaff95a6f35ffbbb8f57308e1132f5b6d8097028b54293da5a7ac65d9eed62fdbda7ba6b3df23a6705473878f9eac3fe2e21851f4abd5e68403616502d1fdefc8ed12f184383c47f3c2f92af72b9f374040f3bb3cd62128b98faf5d6eb9f578dc66d3f9cb00c65928d240df618ce7d9ae3e87996a16167eb0559c3c448828a75e51d169e366274b63913950b53d387a5719daab8499da83fab67a8a56a79201e13fa6bc1796969c6efa2aef13721baafb66b32465b18c747f54fd05c5e8dfa297616bc8ec1a1c4b3bf90d1e6a6b43b51718f3c13f4edc1a2b7db554d81fbcfd7c43979abb9dd29510db8941ac1ddae1f634f5a017dcdb46f881cdb8350a57b9c73f15af57c2e46620a00f5215781bab4865aecb4c633fa22c460b7f904f4b6cc532ddfd0d886ca1e46af9c282c603760c4838317583deae1dc6503d4824e90f63edac68e3634e84784d340d47b08f782ca0b01273e217bd67bff2dae3aed3412a5614e442978431dc43a7eaf15e2660781846ae26b289834d6435218980c23125908d335d34424b46bed023173ac4cae6ade49b26c480ed078e9d37e95aca8cce0eae2e8e176abd06cedbfd4792b4a3498f9fdc9695ab171f9c759961a77ca6d3f3154fb734787a28280068c9076335054fb7ecab29aa5f8529d0a42cb9f7a66277dbd4a9ce504f61e308ed2721ca9f77100f754bd18e899d23b691a7e5c69808b280dbee63fb8b4355c64180b43d09cbbf3eec55e5288be735a8c3eceeec9d079572ead2e13826bf4edcb5628b1657cc8088d194518cd1bccb8a13f2e9b2b8e111a59313176e538a8b9a6fd10f4bd38d4fdf23d1c6b4d4336e740f86f1029e2826fb2048739ecfb2dbc7d3ed130a41c1c259a0386cd42ad989a981d8c88e013af4befa8d4958fad8c0ecc4bf36bfa5143ee281df321bc74ea823d3f4142a8cb8f89f68d3630b73b001b8956388920accc2c9ea04af40234db62b49b63c0a90091c886bdc5ceed3e95f7cd62549812be45a8d7f66ceb229cfc56445f0f1aec287d7b89b53d3740ef0bf7a85e265344fbf3c22606e84524b05dc6d5e94b923abde1ecc270ce26dfd83c812ca04c38fc2ffbcd6e68d7ad87bdf415a8c295f56d56a37882b0771316385f454132e30a404b6fb56b238affc63a374a3b4d51e88939b631b446f66e69dad460c3631cccaa9ecd6b2bc6fef5d67d55744cf7928c91312a3fe36e5b62cd57543c08987a19c4b04d7f148848716ca16be5a5723387fcf749ebf6629a40db894d34c2b47db3e9a4a7226347d6cf776c029fe34e9a9452293c1a6c5e52db6931483b66b83838d562d690b134bea207332a2db9c4336c9bc61e0a60c8289e01d67f4a01da8dc9d83a850cbae1d66e03b381e800556e87ba6bc718eeab3a919f9e7a0e87b80b5bc956f6b72df5fd3c07c9c8ef663e0adf1025d6d6bb077d8415919e0d9b5f1485c6d3b7efa63bcb7f98d9af8617472816a63b5150c8e1a06f500a3e0aa23938d945c2522243354b1d0b78d569980cc26d6067b92cfff8189fe5e47ac61cbd69fbe00a3abd96715fdef84c063d8b41cf865d35c6db2a0206b7ba1bd9b99c483b73194d25190531c0e41130b1d06ad78743ea4e077c1c42abcadd519f273bde239904c50fd7054b8b676ca841ee63f15fa941facef063a4becc082025b98d044347cd37272e5778b9902ea0288923c5c8622b57c288a5386e9bad34efa76c9af4d788b7fba81df7857b3baa7107578e536ded877674a58f87660b8fc24e3403c168d8fe59ef36d1dcf7067a10b74dc90aa42758e0ed445436b47717d552359ec72b7bdc527587060b8fb8f0f452a8ff2fbd96689c3e9d7bfaa8be2ec16cf86bdf3ac4ebd4394725ccd2fc5c607259b15424f1c33debe7706c9bfc17607db7be5007596439ef23d84d3d4043ab40af684f94a9c1e70d2e64983fb734cd32edc78acba659033533f1bf8e65ae31727c323da8d9ccc5a7c97c44e72c7075f3135dd1d78f59f3629f97426205049bda749dc6bcd2cb06c41dfba9e5423119154170be0a481f65eac7629a95496da462a11f80d478f7670a9cb2db86f772dc3121addf9d2268c6e710eda9cb3d091a95299022f1ded2a3f21ab83860f488df43cbd5424d0284b9d9bc8c5f0ec21e1fb59ccea813920518b64d89bd36384ea5777f8601d006fde99211f3063df7a1458f16790b62f199e6c33daf941d56384b063d26b8f7e81b75572073ea0e6c3016d1c266e389a68bf4b2e481c76c61765ae83a551d2d7bf87a6bd1e4bc7455c506d6abb28d603d304af4f6a15c52ceee5136afb3ee167851b19d38e9e4310956cae48a05ee30f707a9cc26e4510f9893b8d3bbb50b836b2bef08dd0499505ff1da0e0fe5bb323f3876e36aa83728567fdaa887de99a6b70d889d456ddaa231487e946710f71b401efa8ffcde1a44a1132730aaec92aa219e006c4c5d96fcb7a9533708b8e1c9db29d4d339bca8871cdc3056734d3937b6eea9a93d961fa509467733351b7e9437c1851d7e7b58573ee7c7acb9d006654ab933603ef729dbe650d7d93d37f82d37d9869eda809ea362d748a22a1b50941aed41f4bab31adfb7d73fa2848084a67f6e902ae6b7e9f59e3e8e5ad583cfcc87f07b3b94b178cdd6723da8b144f934766ce5cec00899238c2b174c7572ee094c9fa5c1faf2211553c340fa25cf71848f14904f093392926fcab3b3405940a31ccb30e0f1f3b75d5bf91602951fea0d46a907c67949a08577b06f91cc5ffd14a679279abba7e5776bf1c08a00c77343789e0aa6f1dd9d81e70e8b6c6bf1dcad6443542e81ac5c7ff2e2959362e8856c66e745d9e89134b37d3dac7684da806113ce9c747a7c2ead9ba8a6b4e439fa0bf2cdb2b794e78b51e6226bc8b3e325c6b3adbc5c80190091c4d35a78cc4ab48f6cb1c3c0131a8e215eb28209770cc51a960ec0a77c845bcbbc8d7c62324d0d2f66ceef6cbcf3141f58871afb77d6cd973b29485cb735b6ac03bde41b198da761d1a0b6b8b541f7a11c8be9ad3eb31500326fff07b1c64680d4c1ba3db570d5efa32352d3718f0f874d9ec97e20eec7699ff46bc0c2f3320ed276ac862a33e2e73f018e2572b95018d3b6e15067a23d6605c104e9ab25bdf65a7e971b5449c02a44e16e1e3c180ab465bd28604dfeedeba52a2b4390d61ea6e8a1e305624a22c3a50e0f7b12d2abf513abc651587e6be09845e022de71e194a5574bac5c400ccfa98aa2072ca1a4752d66512e837de0a1097b5af8256f89ccaa64b6c2d9bb0e65d5ae3da92aaa6db1b4ec1405555ee4e62d7d1e102dba1735cab1f98ab258d6a0347ae20a54250b78a7fcd3efbf6b74c41e00681d02cca82d65cfba4016f67b0558b046c6c80f9cf593db5a9dfb2fe2f21b0500f5bfef1dee01e45526e526e05ce9c8fec9985079b9681d63e4490604e0dcf5280d969c5ec75e7d315e0eb58536d8302f4288bce8c03d50c18209f9f07ae7aa4d12d6eb77368b115f929560e6a3c2eb8fc4f244494a2171bb0c8e42531cc9eab359006d2d5e87a6b75e2fbf736cf03579347733787e61ac65336eb2fd3f8ed5fef17eca3ff7fe29be5b61328ba289901c696c8f07695514e9080c4954a348c1256daf12291066ede051e606b1694f14225cd5c2f160db35c122c4a65862a929dcbf55772a50944a7f86eddacb4bdd634706a1627d847377288e5542c9ea6ed0ff5c8682d297214ea1b829b9777781c0c80cf49e2e8e5fc1986e333cbd2ea3150cd6dfc8a151c8ee4416d8bfbf5fa3eed524003e007c9083eddc23ba31765bba606b5de42c3636d48fa62156357bbfbc51d500aabbb74e7978a934cc4cc060108cd6784f58ec8e217beb0fa15bc21b9e52f254de9c83c274ce8e45ba611913b1e3419b48c51e1bebaf708d5421f6301cce24e81ff47afd4124d83cf72913615c064c27b9324ae51e228f6741aa2c411cfb71baced313aedf8a160dae9881639e89b78f2a7551e7ec303d51dc73a994a6ef6175b9c69ecd9f4e2e50d3e266837a57c332e469da12be3b336ce769fd70a8a4ef91f17c3e0c5a9bd7f559cb5391cd96257892f722ebbf2374de6202737510d81c0e3af7fffd726d35361a6a80f2ecc8ed7c8e5ad8e316846229319292ccd0be27713d7a563dece39965cda5dcccc1fef2ee2773db2e9a1ea0350a5a75f13dc4c490595cc4230ac44f11a61a537c27c954a1a8d8118708b98fafafd1a570b6d744d61534fcb7d8cf771af29376d72c8402e172bc9e78279ba3a526175ae2028b8b9204f23d3b8fcff8868244feeb682a54b146d752e82eaf238dc22df14380ae8ef910897f9bb6902c8967bc81d68e3fd26d22056e250e622f86e4525b6cf3537c0bd874a6c3a2e8be7fa4e93d94480fffce93184e4584ed7dedc430e29c0cbedef6ab52db7677f199e65a26f8d37faa13a9c1f96a67cab60d0a710c54f3be2702a4700c4c37c4c73fce23154b349a7e872e374b6eddddd4533bf773a99515399eb07dff260eb439590871943bbc999013ae9b9e0ea0bd63d1743119734003c8a0555bbbe752472873e2fef4c946e09a5b4762e07e02d4c2ee08891dac143434cdf2d02727d31f76ecbc6cce84ba8d8db71d8766fdeb0bffa826ca424765ac509440f1ef5d2255f3cf5de6ac6315526dd96fbe3b3901cb25f14ebc0df4bb4d3d2b0f7d0e25cc50d7d3ffda829e11d06726ce51fd079117a19fddd539d820398094b0f9b5c7e2e39ca7e9f80d661d5034feb4c0f6809273136612a1ab294a527cf80fc30e059f6a5d2a6506e7a24ea248e68838f647e9990768eb90867805dee154e28ce5a839e1e0b3aba3027fe37d75b62d29c1e4287802190c31dcb9f2140be430f4c6090e2c0c25272e5df723fce86c731a4801e449e79630726f14e4617922052ac99a694c85692b3f84bb40d63931434c7e97a675cbf6d5f56269da2efc98864f62edf06"}, {0x30, 0x114, 0x1, "14c5da91a3e6781902e4eff9b6578b4fee487ed94eadea56565d"}], 0x2420}, 0x0, 0x100, 0x1, {0x0, r7}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r8, 0x0, 0x5}, 0x18) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r9, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r9, 0x84, 0x17, &(0x7f0000000800)=ANY=[], 0x9) io_uring_enter(r0, 0x5d62, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r10, @ANYBLOB], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r11, 0x0, 0x2}, 0x18) r12 = socket$inet_udp(0x2, 0x2, 0x0) r13 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x0, 0x10) finit_module(r13, 0x0, 0x7) r14 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3, 0x1}}, @volatile={0x8}, @float={0x4, 0x0, 0x0, 0x10, 0x10}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x3d, 0x0, 0x2, 0x4}, @enum={0xd, 0x2, 0x0, 0x6, 0x4, [{0x3, 0xff}, {0x9, 0x7}]}, @ptr={0xe, 0x0, 0x0, 0x2, 0x1}, @restrict={0x5, 0x0, 0x0, 0xb, 0x1}, @enum={0x8, 0x2, 0x0, 0x6, 0x4, [{0xf, 0x9}, {0x8, 0xa79}]}, @enum={0x7, 0x6, 0x0, 0x6, 0x4, [{0x2, 0x8001}, {0xe, 0x9}, {0x10, 0x698}, {0x9, 0x62}, {0x5, 0x80}, {0x0, 0x9}]}]}, {0x0, [0x2e]}}, &(0x7f0000000880)=""/4096, 0xe7, 0x1000, 0x0, 0x6, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0xb, &(0x7f0000000000)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r13}}, @jmp={0x5, 0x0, 0x6, 0x8, 0x0, 0x50, 0x8}, @call={0x85, 0x0, 0x0, 0x10}, @map_idx={0x18, 0xc, 0x5, 0x0, 0xf}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f00000000c0)='syzkaller\x00', 0x3f, 0x7f, &(0x7f0000000100)=""/127, 0x40f00, 0x22, '\x00', 0x0, 0x25, r14, 0x8, &(0x7f0000000300)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x2, 0x3, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r12, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x90, 0x11, 0x148, 0x218, 0x0, 0x218, 0x2a8, 0x2a8, 0x218, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@addrtype={{0x30}, {0x10, 0xa, 0x3}}, @common=@unspec=@cluster={{0x30}, {0x20, 0xfff, 0x2}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x0, 0xfffffffc, 0x19ecd463}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) 224.165469ms ago: executing program 8 (id=8579): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) 217.119768ms ago: executing program 8 (id=8580): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@orlov}, {@abort}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x50a, &(0x7f0000000940)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") 212.634538ms ago: executing program 5 (id=8581): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r6}, &(0x7f0000000380), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r7, 0x0, 0x6}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800001, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x1f00, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0x3, 0x6}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 201.465139ms ago: executing program 7 (id=8582): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x47, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRESOCT], 0x5c}}, 0x0) 112.967409ms ago: executing program 8 (id=8583): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x800, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200a}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@deltaction={0x38, 0x18, 0x101, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x24, 0x1, [{0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x44000}, 0x8000) 96.817959ms ago: executing program 8 (id=8584): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffff"], 0x48) signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0x5]}, 0x8) r0 = dup(0xffffffffffffffff) bind$unix(r0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0, r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r3, 0x0, 0xf7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x800) brk(0x200000ffc000) 81.317459ms ago: executing program 8 (id=8585): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SG_BLKSECTGET(r0, 0x1267, &(0x7f0000000280)) r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$KDSKBENT(r1, 0x4b47, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, 0x0, 0x0, 0x0) preadv2(r2, &(0x7f00000055c0)=[{&(0x7f0000005300)=""/66, 0x42}], 0x1, 0x7, 0x5, 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r3}, &(0x7f0000000900), &(0x7f0000000940)}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f687372"], 0xfc}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x4, 0x553, &(0x7f0000001080)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) write(r8, &(0x7f00000001c0)="f1", 0x1) sendfile(r8, r6, 0x0, 0x40001) sendfile(r8, r7, 0x0, 0x7ffff000) creat(&(0x7f00000000c0)='./bus\x00', 0x182) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r9}, 0x18) 65.40465ms ago: executing program 5 (id=8586): mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0x4000) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='rxrpc_client\x00', r3, 0x0, 0x3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000004c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r7 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r7, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r7, 0x0, 0x0, 0x2, 0x0) 64.68713ms ago: executing program 7 (id=8587): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r2, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '\xd0\xae\xde\xc1\xaa \xff\xd8\x1d\x1b\xf8\x93)!|\xb0X\xa3\x96\xed\xa2\xab@\xa2m\x93\xdd\b<\x00t\xdc\xabl\xab!\xae\x16\xc4\xcd\xf9{\xdc5_;A\xd2{eC\x014\\\xb3\xc4\xce\xc3yS2-\x01\xbe\xaarW\x96O\xd3\x0f\xe2\xd7/\x17\x1d\xa7.8\x9f8-\xea<\x8d\x91\x90j\xea\xd5\xd5\xae\xcc\xc0\x97\xef\x10\x92\xea\x98|+\x00\x00\x00\x00\x00\x00\x00\x00'}}]}}) 0s ago: executing program 5 (id=8588): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000880)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) kernel console output (not intermixed with test programs): aaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 512.144755][ T29] kauditd_printk_skb: 465 callbacks suppressed [ 512.144770][ T29] audit: type=1400 audit(1761902587.130:109739): avc: denied { create } for pid=2900 comm="syz.6.8011" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 512.347893][ T2918] loop5: detected capacity change from 0 to 512 [ 512.355519][ T2918] EXT4-fs (loop5): orphan cleanup on readonly fs [ 512.362620][ T2918] EXT4-fs error (device loop5): ext4_quota_enable:7136: comm syz.5.8017: inode #218103808: comm syz.5.8017: iget: illegal inode # [ 512.376322][ T2918] EXT4-fs error (device loop5): ext4_quota_enable:7139: comm syz.5.8017: Bad quota inode: 218103808, type: 2 [ 512.388669][ T2918] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 512.414211][ T2918] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 512.440402][ T2918] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.8017: deleted inode referenced: 12 [ 512.468275][ T2918] EXT4-fs error (device loop5): ext4_lookup:1791: inode #2: comm syz.5.8017: deleted inode referenced: 12 [ 512.489242][ T2926] loop8: detected capacity change from 0 to 1024 [ 512.496557][ T2918] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 512.505997][ T2926] EXT4-fs: Ignoring removed oldalloc option [ 512.512045][ T2926] EXT4-fs: Ignoring removed bh option [ 512.552567][ T2928] __nla_validate_parse: 1 callbacks suppressed [ 512.552587][ T2928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8021'. [ 512.554617][T28056] Bluetooth: hci0: Frame reassembly failed (-90) [ 512.585349][ T2935] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2935 comm=syz.7.8024 [ 512.609499][ T2935] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8024'. [ 512.638166][ T2935] IPv6: NLM_F_CREATE should be specified when creating new route [ 512.675131][ T2943] loop7: detected capacity change from 0 to 512 [ 512.689071][ T2943] EXT4-fs (loop7): orphan cleanup on readonly fs [ 512.695640][ T2945] loop5: detected capacity change from 0 to 2048 [ 512.696464][ T2943] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.8027: bad orphan inode 13 [ 512.712596][ T2943] ext4_test_bit(bit=12, block=18) = 1 [ 512.717980][ T2943] is_bad_inode(inode)=0 [ 512.722191][ T2943] NEXT_ORPHAN(inode)=2130706432 [ 512.727035][ T2943] max_ino=32 [ 512.730289][ T2943] i_nlink=1 [ 512.737048][ T2943] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 512.747994][ T2943] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.8027: bg 0: block 248: padding at end of block bitmap is not set [ 512.763620][ T2943] Quota error (device loop7): write_blk: dquota write failed [ 512.771196][ T2943] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 512.774444][ T2945] loop5: unable to read partition table [ 512.781265][ T2943] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.8027: Failed to acquire dquot type 1 [ 512.788711][ T2951] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8027'. [ 512.798433][ T2945] loop5: partition table beyond EOD, truncated [ 512.807338][ T2951] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8027'. [ 512.813498][ T2945] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 512.823928][ T2943] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 512.881737][ T2954] macvtap0: entered promiscuous mode [ 512.887552][ T2954] macvtap0: left promiscuous mode [ 512.936851][ T2959] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8031'. [ 512.988936][ T2963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=2963 comm=syz.5.8033 [ 513.031438][ T29] audit: type=1326 audit(1761902588.065:109740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2965 comm="syz.7.8035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18fe7efc9 code=0x7ffc0000 [ 513.056222][ T29] audit: type=1326 audit(1761902588.065:109741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2965 comm="syz.7.8035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18fe7efc9 code=0x7ffc0000 [ 513.080193][ T29] audit: type=1326 audit(1761902588.096:109742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2965 comm="syz.7.8035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fa18fe7efc9 code=0x7ffc0000 [ 513.103863][ T29] audit: type=1326 audit(1761902588.096:109743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2965 comm="syz.7.8035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18fe7efc9 code=0x7ffc0000 [ 513.127525][ T29] audit: type=1326 audit(1761902588.096:109744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2965 comm="syz.7.8035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18fe7efc9 code=0x7ffc0000 [ 513.151096][ T29] audit: type=1326 audit(1761902588.096:109745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2965 comm="syz.7.8035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa18fe7efc9 code=0x7ffc0000 [ 513.174749][ T29] audit: type=1326 audit(1761902588.096:109746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2965 comm="syz.7.8035" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa18fe7efc9 code=0x7ffc0000 [ 513.333628][ T2982] blktrace: Concurrent blktraces are not allowed on sg0 [ 513.343525][ T2982] loop5: detected capacity change from 0 to 512 [ 513.350374][ T2982] EXT4-fs: Ignoring removed orlov option [ 513.357082][ T2982] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 513.366310][ T2982] EXT4-fs (loop5): orphan cleanup on readonly fs [ 513.373387][ T2982] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.8038: bg 0: block 248: padding at end of block bitmap is not set [ 513.387931][ T2982] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.8038: Failed to acquire dquot type 1 [ 513.399609][ T2982] EXT4-fs (loop5): 1 truncate cleaned up [ 513.451185][ T2992] FAULT_INJECTION: forcing a failure. [ 513.451185][ T2992] name failslab, interval 1, probability 0, space 0, times 0 [ 513.463876][ T2992] CPU: 1 UID: 0 PID: 2992 Comm: syz.5.8041 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 513.463993][ T2992] Tainted: [W]=WARN [ 513.464001][ T2992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 513.464016][ T2992] Call Trace: [ 513.464024][ T2992] [ 513.464040][ T2992] __dump_stack+0x1d/0x30 [ 513.464062][ T2992] dump_stack_lvl+0xe8/0x140 [ 513.464082][ T2992] dump_stack+0x15/0x1b [ 513.464099][ T2992] should_fail_ex+0x265/0x280 [ 513.464119][ T2992] should_failslab+0x8c/0xb0 [ 513.464221][ T2992] kmem_cache_alloc_noprof+0x50/0x480 [ 513.464256][ T2992] ? locks_get_lock_context+0x89/0x210 [ 513.464289][ T2992] ? avc_has_perm_noaudit+0x1b1/0x200 [ 513.464312][ T2992] locks_get_lock_context+0x89/0x210 [ 513.464378][ T2992] flock_lock_inode+0x55/0xf60 [ 513.464416][ T2992] ? file_has_perm+0x35c/0x3a0 [ 513.464435][ T2992] locks_lock_inode_wait+0x6f/0x2a0 [ 513.464451][ T2992] ? selinux_file_lock+0x38/0x50 [ 513.464495][ T2992] __se_sys_flock+0x2f1/0x3b0 [ 513.464515][ T2992] __x64_sys_flock+0x31/0x40 [ 513.464530][ T2992] x64_sys_call+0x1e5a/0x3000 [ 513.464610][ T2992] do_syscall_64+0xd2/0x200 [ 513.464702][ T2992] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 513.464759][ T2992] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 513.464814][ T2992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 513.464839][ T2992] RIP: 0033:0x7f3c104aefc9 [ 513.464856][ T2992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 513.464876][ T2992] RSP: 002b:00007f3c0ef17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000049 [ 513.464960][ T2992] RAX: ffffffffffffffda RBX: 00007f3c10705fa0 RCX: 00007f3c104aefc9 [ 513.464968][ T2992] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000003 [ 513.464976][ T2992] RBP: 00007f3c0ef17090 R08: 0000000000000000 R09: 0000000000000000 [ 513.464983][ T2992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 513.464991][ T2992] R13: 00007f3c10706038 R14: 00007f3c10705fa0 R15: 00007ffe24c3e018 [ 513.465040][ T2992] [ 513.692257][ T2996] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8042'. [ 513.701408][ T2996] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8042'. [ 513.712795][ T2996] loop5: detected capacity change from 0 to 512 [ 513.719527][ T2996] EXT4-fs: Ignoring removed bh option [ 513.725695][ T2996] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 513.734862][ T2996] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 513.743865][ T2996] EXT4-fs (loop5): warning: mounting unchecked fs, running e2fsck is recommended [ 513.753157][ T2996] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 513.763249][ T2996] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 513.774465][ T2996] netlink: 'syz.5.8042': attribute type 7 has an invalid length. [ 513.782331][ T2996] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8042'. [ 513.960044][ T3006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=3006 comm=syz.7.8044 [ 514.038281][ T3009] loop6: detected capacity change from 0 to 512 [ 514.072589][ T3014] loop8: detected capacity change from 0 to 2048 [ 514.083835][ T3009] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 514.095457][ T3009] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 514.105585][ T3009] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.8046: Corrupt directory, running e2fsck is recommended [ 514.122331][ T3009] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 514.132185][ T3009] EXT4-fs error (device loop6): ext4_iget_extra_inode:5075: inode #15: comm syz.6.8046: corrupted in-inode xattr: invalid ea_ino [ 514.146330][ T3009] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.8046: couldn't read orphan inode 15 (err -117) [ 514.172650][ T3009] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 514.184256][ T3009] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 514.187675][ T3014] loop8: unable to read partition table [ 514.194411][ T3009] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.8046: Corrupt directory, running e2fsck is recommended [ 514.213033][ T3014] loop8: partition table beyond EOD, truncated [ 514.219308][ T3014] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 514.223235][ T3009] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 514.239088][ T3009] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 514.249304][ T3009] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.8046: Corrupt directory, running e2fsck is recommended [ 514.255169][ T3019] loop7: detected capacity change from 0 to 512 [ 514.285857][ T3019] EXT4-fs (loop7): orphan cleanup on readonly fs [ 514.292792][ T3020] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 514.304302][ T3020] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it [ 514.308927][ T3019] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.8050: bad orphan inode 13 [ 514.314536][ T3020] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.8046: Corrupt directory, running e2fsck is recommended [ 514.340251][ T3009] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 514.351788][ T3019] ext4_test_bit(bit=12, block=18) = 1 [ 514.351805][ T3019] is_bad_inode(inode)=0 [ 514.351813][ T3019] NEXT_ORPHAN(inode)=2130706432 [ 514.351822][ T3019] max_ino=32 [ 514.351829][ T3019] i_nlink=1 [ 514.384128][ T3019] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 514.405694][ T3019] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.8050: bg 0: block 248: padding at end of block bitmap is not set [ 514.408096][ T3027] netlink: 'syz.8.8053': attribute type 29 has an invalid length. [ 514.420869][ T3019] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.8050: Failed to acquire dquot type 1 [ 514.427929][ T3027] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8053'. [ 514.450163][ T3019] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 514.481702][ T3032] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8050'. [ 514.491228][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 514.509155][ T3025] lo speed is unknown, defaulting to 1000 [ 514.719005][ T3070] macvtap0: entered promiscuous mode [ 514.724974][ T3070] macvtap0: left promiscuous mode [ 514.934164][ T3079] loop7: detected capacity change from 0 to 1024 [ 514.941008][ T3079] EXT4-fs: Ignoring removed oldalloc option [ 514.947002][ T3079] EXT4-fs: Ignoring removed bh option [ 514.962885][ T3081] loop5: detected capacity change from 0 to 512 [ 514.969698][ T3081] EXT4-fs: Ignoring removed orlov option [ 514.976468][ T3081] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 514.989505][ T3081] EXT4-fs (loop5): orphan cleanup on readonly fs [ 515.006207][ T3081] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.8069: bg 0: block 248: padding at end of block bitmap is not set [ 515.021171][ T3081] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.8069: Failed to acquire dquot type 1 [ 515.056588][ T3081] EXT4-fs (loop5): 1 truncate cleaned up [ 515.112675][ T3096] loop7: detected capacity change from 0 to 164 [ 515.120024][ T3096] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 515.181899][ T3103] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 515.196371][ T3102] loop5: detected capacity change from 0 to 1024 [ 515.213214][ T3102] EXT4-fs: Ignoring removed oldalloc option [ 515.219282][ T3102] EXT4-fs: Ignoring removed bh option [ 515.224988][ T3103] Symlink component flag not implemented [ 515.230666][ T3103] Symlink component flag not implemented [ 515.265250][ T3103] Symlink component flag not implemented (7) [ 515.271349][ T3103] Symlink component flag not implemented (116) [ 515.299371][ T3111] loop6: detected capacity change from 0 to 512 [ 515.310423][ T3111] EXT4-fs (loop6): orphan cleanup on readonly fs [ 515.337299][ T3111] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.8078: bad orphan inode 13 [ 515.356539][ T3111] ext4_test_bit(bit=12, block=18) = 1 [ 515.361997][ T3111] is_bad_inode(inode)=0 [ 515.366145][ T3111] NEXT_ORPHAN(inode)=2130706432 [ 515.371027][ T3111] max_ino=32 [ 515.374222][ T3111] i_nlink=1 [ 515.388484][ T3111] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 515.405750][ T3111] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 515.457490][ T3120] loop5: detected capacity change from 0 to 1024 [ 515.464903][ T3120] EXT4-fs: Ignoring removed oldalloc option [ 515.470832][ T3120] EXT4-fs: Ignoring removed bh option [ 515.544312][ T3132] loop8: detected capacity change from 0 to 512 [ 515.551224][ T3132] EXT4-fs: Ignoring removed orlov option [ 515.557556][ T3132] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 515.566948][ T3132] EXT4-fs (loop8): orphan cleanup on readonly fs [ 515.573761][ T3132] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.8084: bg 0: block 248: padding at end of block bitmap is not set [ 515.588558][ T3132] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.8084: Failed to acquire dquot type 1 [ 515.600649][ T3132] EXT4-fs (loop8): 1 truncate cleaned up [ 515.632574][ T3137] FAULT_INJECTION: forcing a failure. [ 515.632574][ T3137] name failslab, interval 1, probability 0, space 0, times 0 [ 515.645397][ T3137] CPU: 0 UID: 0 PID: 3137 Comm: syz.8.8085 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 515.645436][ T3137] Tainted: [W]=WARN [ 515.645445][ T3137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 515.645459][ T3137] Call Trace: [ 515.645467][ T3137] [ 515.645526][ T3137] __dump_stack+0x1d/0x30 [ 515.645550][ T3137] dump_stack_lvl+0xe8/0x140 [ 515.645571][ T3137] dump_stack+0x15/0x1b [ 515.645589][ T3137] should_fail_ex+0x265/0x280 [ 515.645609][ T3137] should_failslab+0x8c/0xb0 [ 515.645713][ T3137] kmem_cache_alloc_noprof+0x50/0x480 [ 515.645747][ T3137] ? getname_flags+0x80/0x3b0 [ 515.645782][ T3137] getname_flags+0x80/0x3b0 [ 515.645830][ T3137] __x64_sys_symlink+0x33/0x60 [ 515.645861][ T3137] x64_sys_call+0x23d0/0x3000 [ 515.645925][ T3137] do_syscall_64+0xd2/0x200 [ 515.645947][ T3137] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 515.645981][ T3137] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 515.646019][ T3137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.646069][ T3137] RIP: 0033:0x7f1eb904efc9 [ 515.646085][ T3137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.646169][ T3137] RSP: 002b:00007f1eb7aaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 515.646192][ T3137] RAX: ffffffffffffffda RBX: 00007f1eb92a5fa0 RCX: 00007f1eb904efc9 [ 515.646207][ T3137] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 515.646221][ T3137] RBP: 00007f1eb7aaf090 R08: 0000000000000000 R09: 0000000000000000 [ 515.646235][ T3137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.646248][ T3137] R13: 00007f1eb92a6038 R14: 00007f1eb92a5fa0 R15: 00007ffc22074138 [ 515.646267][ T3137] [ 515.888580][ T3150] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3150 comm=syz.8.8090 [ 515.920120][ T3150] IPv6: NLM_F_CREATE should be specified when creating new route [ 515.935662][ T3154] loop7: detected capacity change from 0 to 164 [ 515.977918][ T3154] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 515.988176][ T3158] ------------[ cut here ]------------ [ 515.993667][ T3158] verifier bug: REG INVARIANTS VIOLATION (false_reg1): range bounds violation u64=[0xfffffffefffff630, 0xffffffff00000000] s64=[0xfffffffefffff630, 0xffffffff00000000] u32=[0x30, 0x8000050] s32=[0x30, 0x0] var_off=(0xfffffffe00000030, 0x10fffffc0) [ 516.017711][ T3158] WARNING: CPU: 0 PID: 3158 at kernel/bpf/verifier.c:2721 reg_bounds_sanity_check+0x673/0x680 [ 516.028125][ T3158] Modules linked in: [ 516.032025][ T3158] CPU: 0 UID: 0 PID: 3158 Comm: syz.8.8093 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 516.043422][ T3158] Tainted: [W]=WARN [ 516.047466][ T3158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 516.057647][ T3158] RIP: 0010:reg_bounds_sanity_check+0x673/0x680 [ 516.062959][ T3168] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 516.064052][ T3158] Code: 7c 24 18 41 ff 74 24 20 55 41 56 4d 89 ee 53 48 8b 5c 24 30 ff 74 24 40 ff 74 24 50 ff 74 24 30 e8 c2 f7 ba ff 48 83 c4 38 90 <0f> 0b 90 90 e9 02 fb ff ff 0f 1f 40 00 90 90 90 90 90 90 90 90 90 [ 516.091790][ T3158] RSP: 0018:ffffc90006ce3408 EFLAGS: 00010282 [ 516.097929][ T3158] RAX: 9692e361b2335900 RBX: ffff888108eed190 RCX: 0000000000080000 [ 516.106133][ T3158] RDX: ffffc9000cdd5000 RSI: 000000000001150b RDI: 000000000001150c [ 516.114508][ T3158] RBP: fffffffe00000030 R08: 0001c90006ce3257 R09: 0000000000000000 [ 516.122564][ T3158] R10: 00000000ffffffff R11: 0000000000000002 R12: ffff888108eed150 [ 516.130605][ T3158] R13: ffff888111d28000 R14: ffff888111d28000 R15: ffff888108eed188 [ 516.136250][ T3168] Symlink component flag not implemented [ 516.138709][ T3158] FS: 00007f1eb7aaf6c0(0000) GS:ffff8882aee13000(0000) knlGS:0000000000000000 [ 516.144359][ T3168] Symlink component flag not implemented [ 516.153355][ T3158] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 516.159317][ T3168] Symlink component flag not implemented (7) [ 516.165558][ T3158] CR2: 00007ffe24c3e298 CR3: 000000012dc9e000 CR4: 00000000003506f0 [ 516.165581][ T3158] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 516.171586][ T3168] Symlink component flag not implemented (116) [ 516.193878][ T3158] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 516.201951][ T3158] Call Trace: [ 516.205325][ T3158] [ 516.208274][ T3158] reg_set_min_max+0x215/0x260 [ 516.213070][ T3158] check_cond_jmp_op+0x1370/0x19e0 [ 516.218272][ T3158] do_check+0x3363/0x8460 [ 516.222711][ T3158] do_check_common+0xc5e/0x12b0 [ 516.227630][ T3158] bpf_check+0xaaae/0xd9d0 [ 516.232093][ T3158] ? __alloc_frozen_pages_noprof+0x188/0x360 [ 516.238190][ T3158] ? __vmap_pages_range_noflush+0xbc4/0xcf0 [ 516.244151][ T3158] ? pcpu_block_update+0x24e/0x3b0 [ 516.249274][ T3158] ? pcpu_block_refresh_hint+0x157/0x170 [ 516.255014][ T3158] ? pcpu_block_update_hint_alloc+0x63d/0x660 [ 516.261106][ T3158] ? css_rstat_updated+0xb7/0x240 [ 516.266387][ T3158] ? __rcu_read_unlock+0x4f/0x70 [ 516.271464][ T3158] ? pcpu_memcg_post_alloc_hook+0xf1/0x150 [ 516.277296][ T3158] ? bpf_prog_alloc+0x5b/0x150 [ 516.282082][ T3158] ? pcpu_alloc_noprof+0xd29/0x1250 [ 516.287351][ T3158] ? should_fail_ex+0x30/0x280 [ 516.292134][ T3158] ? should_failslab+0x8c/0xb0 [ 516.296961][ T3158] ? __kmalloc_noprof+0x2a2/0x570 [ 516.302468][ T3158] ? security_bpf_prog_load+0x60/0x140 [ 516.308057][ T3158] ? selinux_bpf_prog_load+0xad/0xd0 [ 516.313395][ T3158] ? security_bpf_prog_load+0x9e/0x140 [ 516.318929][ T3158] bpf_prog_load+0xf6e/0x1100 [ 516.323681][ T3158] ? security_bpf+0x2b/0x90 [ 516.328228][ T3158] __sys_bpf+0x469/0x7c0 [ 516.332591][ T3158] __x64_sys_bpf+0x41/0x50 [ 516.337049][ T3158] x64_sys_call+0x2aee/0x3000 [ 516.341787][ T3158] do_syscall_64+0xd2/0x200 [ 516.346320][ T3158] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 516.352460][ T3158] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 516.358218][ T3158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 516.364124][ T3158] RIP: 0033:0x7f1eb904efc9 [ 516.368592][ T3158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 516.388233][ T3158] RSP: 002b:00007f1eb7aaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 516.396655][ T3158] RAX: ffffffffffffffda RBX: 00007f1eb92a5fa0 RCX: 00007f1eb904efc9 [ 516.404626][ T3158] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 516.412689][ T3158] RBP: 00007f1eb90d1f91 R08: 0000000000000000 R09: 0000000000000000 [ 516.420773][ T3158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 516.428789][ T3158] R13: 00007f1eb92a6038 R14: 00007f1eb92a5fa0 R15: 00007ffc22074138 [ 516.436932][ T3158] [ 516.439954][ T3158] ---[ end trace 0000000000000000 ]--- [ 516.501917][ T3175] loop6: detected capacity change from 0 to 164 [ 516.532188][ T3175] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 516.594583][ T3179] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=3179 comm=syz.5.8099 [ 516.595659][ T3180] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 516.659064][ T3180] Symlink component flag not implemented [ 516.660831][ T3182] loop5: detected capacity change from 0 to 2048 [ 516.664755][ T3180] Symlink component flag not implemented [ 516.672418][ T3180] Symlink component flag not implemented (7) [ 516.682792][ T3180] Symlink component flag not implemented (116) [ 516.749644][ T3182] loop5: unable to read partition table [ 516.755360][ T3182] loop5: partition table beyond EOD, truncated [ 516.761589][ T3182] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 516.945319][ T29] kauditd_printk_skb: 1142 callbacks suppressed [ 516.945334][ T29] audit: type=1400 audit(1761902592.170:110881): avc: denied { read } for pid=3197 comm="syz.5.8106" name="event3" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 516.975097][ T29] audit: type=1400 audit(1761902592.170:110882): avc: denied { open } for pid=3197 comm="syz.5.8106" path="/dev/input/event3" dev="devtmpfs" ino=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 517.173921][ T3205] loop8: detected capacity change from 0 to 1024 [ 517.180726][ T3205] EXT4-fs: Ignoring removed oldalloc option [ 517.186863][ T3205] EXT4-fs: Ignoring removed bh option [ 517.253134][ T3198] loop5: detected capacity change from 0 to 8192 [ 517.363396][ T29] audit: type=1326 audit(1761902592.611:110883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3214 comm="syz.6.8110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa133b1efc9 code=0x7ffc0000 [ 517.401846][ T29] audit: type=1326 audit(1761902592.642:110884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3214 comm="syz.6.8110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa133b1efc9 code=0x7ffc0000 [ 517.425562][ T29] audit: type=1326 audit(1761902592.642:110885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3214 comm="syz.6.8110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7fa133b1efc9 code=0x7ffc0000 [ 517.449427][ T29] audit: type=1326 audit(1761902592.642:110886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3214 comm="syz.6.8110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa133b1efc9 code=0x7ffc0000 [ 517.473128][ T29] audit: type=1326 audit(1761902592.642:110887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3214 comm="syz.6.8110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fa133b1efc9 code=0x7ffc0000 [ 517.496670][ T29] audit: type=1326 audit(1761902592.642:110888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3214 comm="syz.6.8110" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa133b1efc9 code=0x7ffc0000 [ 517.511494][ T3217] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=3217 comm=syz.6.8111 [ 517.736781][ T3232] __nla_validate_parse: 8 callbacks suppressed [ 517.736800][ T3232] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8115'. [ 517.754120][ T3231] loop7: detected capacity change from 0 to 128 [ 517.779112][ T3231] ext4 filesystem being mounted at /487/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 517.783873][ T3236] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 518.067642][ T29] audit: type=1326 audit(1761902593.356:110889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3243 comm="syz.6.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa133b1efc9 code=0x7ffc0000 [ 518.091403][ T29] audit: type=1326 audit(1761902593.356:110890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3243 comm="syz.6.8121" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa133b1efc9 code=0x7ffc0000 [ 518.153535][ T3249] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=3249 comm=syz.8.8124 [ 518.191127][ T3256] loop6: detected capacity change from 0 to 128 [ 518.199203][ T3256] ext4 filesystem being mounted at /310/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 518.318047][ T3261] loop8: detected capacity change from 0 to 512 [ 518.324710][ T3261] EXT4-fs: Ignoring removed orlov option [ 518.330978][ T3261] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 518.341667][ T3261] EXT4-fs (loop8): orphan cleanup on readonly fs [ 518.355876][ T3261] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.8129: bg 0: block 248: padding at end of block bitmap is not set [ 518.394646][ T3261] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.8129: Failed to acquire dquot type 1 [ 518.396554][ T3266] macvtap0: entered promiscuous mode [ 518.418218][ T3268] loop5: detected capacity change from 0 to 1024 [ 518.425159][ T3268] EXT4-fs: Ignoring removed oldalloc option [ 518.431195][ T3268] EXT4-fs: Ignoring removed bh option [ 518.437294][ T3261] EXT4-fs (loop8): 1 truncate cleaned up [ 518.437721][ T3266] macvtap0: left promiscuous mode [ 518.556338][ T3284] loop7: detected capacity change from 0 to 512 [ 518.587728][ T3284] EXT4-fs (loop7): orphan cleanup on readonly fs [ 518.594972][ T3284] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.8136: bad orphan inode 13 [ 518.606589][ T3284] ext4_test_bit(bit=12, block=18) = 1 [ 518.612074][ T3284] is_bad_inode(inode)=0 [ 518.614344][ T3291] IPv6: NLM_F_CREATE should be specified when creating new route [ 518.616332][ T3284] NEXT_ORPHAN(inode)=2130706432 [ 518.616345][ T3284] max_ino=32 [ 518.616353][ T3284] i_nlink=1 [ 518.630783][ T3288] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=3288 comm=syz.6.8137 [ 518.648540][ T3284] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 518.662306][ T3284] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.8136: bg 0: block 248: padding at end of block bitmap is not set [ 518.685950][ T3284] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.8136: Failed to acquire dquot type 1 [ 518.705022][ T3305] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8136'. [ 518.711582][ T3308] 9pnet_fd: Insufficient options for proto=fd [ 518.714275][ T3305] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8136'. [ 518.731581][ T3284] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 518.788445][ T3314] macvtap0: entered promiscuous mode [ 518.794671][ T3312] loop5: detected capacity change from 0 to 2048 [ 518.802154][ T3314] macvtap0: left promiscuous mode [ 518.959959][ T3320] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8149'. [ 518.968988][ T3320] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8149'. [ 519.014058][ T3312] loop5: unable to read partition table [ 519.024123][ T3320] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8149'. [ 519.029883][ T3312] loop5: partition table beyond EOD, truncated [ 519.033130][ T3320] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8149'. [ 519.039289][ T3312] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 519.184955][ T3342] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8153'. [ 519.186049][ T3344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3344 comm=syz.6.8158 [ 519.210099][ T3346] macvtap0: entered promiscuous mode [ 519.216534][ T3346] macvtap0: left promiscuous mode [ 519.224943][ T3347] loop7: detected capacity change from 0 to 164 [ 519.257969][ T3347] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 519.267503][ T3344] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8158'. [ 519.335635][ T3354] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 519.364714][ T3354] Symlink component flag not implemented [ 519.370443][ T3354] Symlink component flag not implemented [ 519.397039][ T3359] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 519.407365][ T3354] Symlink component flag not implemented (7) [ 519.413453][ T3354] Symlink component flag not implemented (116) [ 519.421039][ T3362] loop5: detected capacity change from 0 to 2048 [ 519.531963][ T3369] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8166'. [ 519.553953][ T3362] loop5: unable to read partition table [ 519.559916][ T3362] loop5: partition table beyond EOD, truncated [ 519.566087][ T3362] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 519.660175][ T3376] macvtap0: entered promiscuous mode [ 519.669734][ T3379] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3379 comm=syz.5.8171 [ 519.672769][ T3376] macvtap0: left promiscuous mode [ 519.696812][ T3381] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3381 comm=syz.6.8172 [ 519.743422][ T3388] loop5: detected capacity change from 0 to 164 [ 519.752377][ T3388] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 519.781971][ T3392] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 519.816211][ T3397] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 519.828748][ T3396] macvtap0: entered promiscuous mode [ 519.838565][ T3396] macvtap0: left promiscuous mode [ 519.845739][ T3397] Symlink component flag not implemented [ 519.851384][ T3397] Symlink component flag not implemented [ 519.874248][ T3397] Symlink component flag not implemented (7) [ 519.880268][ T3397] Symlink component flag not implemented (116) [ 520.107845][ T3415] loop8: detected capacity change from 0 to 1024 [ 520.123207][ T3415] EXT4-fs mount: 51 callbacks suppressed [ 520.123226][ T3415] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 520.331075][ T3412] lo speed is unknown, defaulting to 1000 [ 520.545110][ T3426] loop6: detected capacity change from 0 to 164 [ 520.612825][ T3426] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 520.745353][ T3428] loop5: detected capacity change from 0 to 512 [ 520.785434][ T3428] EXT4-fs: Ignoring removed orlov option [ 520.793458][ T3430] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 520.817953][ T3428] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 520.860743][ T3428] EXT4-fs (loop5): orphan cleanup on readonly fs [ 520.890661][ T3428] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.8184: bg 0: block 248: padding at end of block bitmap is not set [ 520.915622][ T3430] Symlink component flag not implemented [ 520.921365][ T3430] Symlink component flag not implemented [ 520.939954][ T3435] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3435 comm=syz.1.8185 [ 520.956560][ T3428] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.8184: Failed to acquire dquot type 1 [ 520.997337][ T3428] EXT4-fs (loop5): 1 truncate cleaned up [ 521.011425][ T3430] Symlink component flag not implemented (7) [ 521.017500][ T3430] Symlink component flag not implemented (116) [ 521.026406][ T3435] IPv6: NLM_F_CREATE should be specified when creating new route [ 521.035300][ T3428] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 521.079769][ T3441] loop7: detected capacity change from 0 to 164 [ 521.114422][ T3443] macvtap0: entered promiscuous mode [ 521.123355][T31130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.134781][ T3441] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 521.167286][ T3443] macvtap0: left promiscuous mode [ 521.199330][ T3447] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 521.207839][ T3447] Symlink component flag not implemented [ 521.213642][ T3447] Symlink component flag not implemented [ 521.219661][ T3447] Symlink component flag not implemented (7) [ 521.225711][ T3447] Symlink component flag not implemented (116) [ 521.242619][ T3451] loop5: detected capacity change from 0 to 512 [ 521.339781][ T3451] EXT4-fs (loop5): orphan cleanup on readonly fs [ 521.346377][ T3451] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.8191: bad orphan inode 13 [ 521.364043][ T3451] ext4_test_bit(bit=12, block=18) = 1 [ 521.369481][ T3451] is_bad_inode(inode)=0 [ 521.373659][ T3451] NEXT_ORPHAN(inode)=2130706432 [ 521.378583][ T3451] max_ino=32 [ 521.381767][ T3451] i_nlink=1 [ 521.385892][ T3451] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 521.402255][ T3451] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 521.414694][ T3451] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 521.494940][T31130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.646625][T30337] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.660152][ T3465] loop5: detected capacity change from 0 to 164 [ 521.667517][ T3465] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 521.700588][ T3469] loop8: detected capacity change from 0 to 1024 [ 521.707428][ T3469] EXT4-fs: Ignoring removed oldalloc option [ 521.713411][ T3469] EXT4-fs: Ignoring removed bh option [ 521.728810][ T3470] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 521.737328][ T3470] Symlink component flag not implemented [ 521.739437][ T3469] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.743076][ T3470] Symlink component flag not implemented [ 521.761308][ T3470] Symlink component flag not implemented (7) [ 521.767396][ T3470] Symlink component flag not implemented (116) [ 521.789049][ T3474] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3474 comm=syz.6.8199 [ 521.812467][ T3474] IPv6: NLM_F_CREATE should be specified when creating new route [ 521.847307][ T3480] loop6: detected capacity change from 0 to 128 [ 521.882488][ T3480] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 521.911959][T30337] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 521.929220][ T3480] ext4 filesystem being mounted at /328/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 521.982603][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 521.982619][ T29] audit: type=1326 audit(1761902597.461:110929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3491 comm="syz.1.8207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cfa0efc9 code=0x7ffc0000 [ 522.012347][ T29] audit: type=1326 audit(1761902597.461:110930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3491 comm="syz.1.8207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f19cfa0efc9 code=0x7ffc0000 [ 522.036057][ T29] audit: type=1326 audit(1761902597.461:110931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3491 comm="syz.1.8207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cfa0efc9 code=0x7ffc0000 [ 522.059770][ T29] audit: type=1326 audit(1761902597.461:110932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3491 comm="syz.1.8207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f19cfa0efc9 code=0x7ffc0000 [ 522.083439][ T29] audit: type=1326 audit(1761902597.461:110933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3491 comm="syz.1.8207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cfa0efc9 code=0x7ffc0000 [ 522.179321][T30603] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 522.212282][ T3500] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3500 comm=syz.6.8209 [ 522.313337][ T3506] loop7: detected capacity change from 0 to 1024 [ 522.333929][ T3506] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 522.730214][ T3517] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3517 comm=syz.1.8216 [ 522.824454][ T3518] loop6: detected capacity change from 0 to 1024 [ 522.842548][ T3517] __nla_validate_parse: 12 callbacks suppressed [ 522.842565][ T3517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8216'. [ 522.914163][ T3520] loop8: detected capacity change from 0 to 1024 [ 522.923722][ T3518] EXT4-fs: Ignoring removed oldalloc option [ 522.929691][ T3518] EXT4-fs: Ignoring removed bh option [ 522.938084][ T3523] loop5: detected capacity change from 0 to 512 [ 522.944812][ T3520] EXT4-fs: Ignoring removed oldalloc option [ 522.950775][ T3520] EXT4-fs: Ignoring removed bh option [ 522.968433][ T3518] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.984103][ T3520] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 522.997178][ T3523] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 523.021347][ T3523] EXT4-fs (loop5): orphan cleanup on readonly fs [ 523.058100][ T3523] Quota error (device loop5): v2_read_file_info: Free block number 1 out of range (1, 6). [ 523.110600][ T3523] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 523.172701][ T3523] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 523.190824][T30603] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.209684][ T29] audit: type=1326 audit(1761902598.742:110934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3537 comm="syz.1.8220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cfa0efc9 code=0x7ffc0000 [ 523.233342][ T29] audit: type=1326 audit(1761902598.742:110935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3537 comm="syz.1.8220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=295 compat=0 ip=0x7f19cfa0efc9 code=0x7ffc0000 [ 523.256963][ T29] audit: type=1326 audit(1761902598.742:110936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3537 comm="syz.1.8220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cfa0efc9 code=0x7ffc0000 [ 523.280539][ T29] audit: type=1326 audit(1761902598.742:110937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3537 comm="syz.1.8220" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f19cfa0efc9 code=0x7ffc0000 [ 523.318297][ T3523] EXT4-fs (loop5): 1 truncate cleaned up [ 523.336412][T30337] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.346265][ T3523] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 523.367009][ T3523] sd 0:0:1:0: device reset [ 523.381294][ T3544] netlink: 48 bytes leftover after parsing attributes in process `syz.6.8221'. [ 523.444718][T31130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 523.472591][ T3552] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8226'. [ 523.487526][ T3554] macvtap0: entered promiscuous mode [ 523.493766][ T3554] macvtap0: left promiscuous mode [ 523.610110][ T3558] loop5: detected capacity change from 0 to 2048 [ 523.636409][ T3558] EXT4-fs: test_dummy_encryption option not supported [ 523.672151][ T3567] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=3567 comm=syz.6.8234 [ 523.710531][ T3569] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8235'. [ 523.719612][ T3569] netlink: 'syz.1.8235': attribute type 5 has an invalid length. [ 523.727330][ T3569] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8235'. [ 523.818250][ T3575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.826779][ T3569] FAULT_INJECTION: forcing a failure. [ 523.826779][ T3569] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 523.840081][ T3569] CPU: 1 UID: 0 PID: 3569 Comm: syz.1.8235 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 523.840136][ T3569] Tainted: [W]=WARN [ 523.840143][ T3569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 523.840157][ T3569] Call Trace: [ 523.840165][ T3569] [ 523.840175][ T3569] __dump_stack+0x1d/0x30 [ 523.840201][ T3569] dump_stack_lvl+0xe8/0x140 [ 523.840246][ T3569] dump_stack+0x15/0x1b [ 523.840266][ T3569] should_fail_ex+0x265/0x280 [ 523.840290][ T3569] should_fail_alloc_page+0xf2/0x100 [ 523.840327][ T3569] __alloc_frozen_pages_noprof+0xff/0x360 [ 523.840385][ T3569] alloc_pages_mpol+0xb3/0x260 [ 523.840407][ T3569] alloc_pages_noprof+0x90/0x130 [ 523.840466][ T3569] get_free_pages_noprof+0xc/0x40 [ 523.840486][ T3569] selinux_genfs_get_sid+0x33/0x180 [ 523.840509][ T3569] inode_doinit_with_dentry+0x5fe/0x7a0 [ 523.840541][ T3569] selinux_d_instantiate+0x27/0x40 [ 523.840576][ T3569] security_d_instantiate+0x7a/0xa0 [ 523.840602][ T3569] d_instantiate+0x3f/0x80 [ 523.840638][ T3569] __debugfs_create_file+0x1c1/0x330 [ 523.840693][ T3569] debugfs_create_file_full+0x3f/0x60 [ 523.840717][ T3569] ? __pfx_geneve_setup+0x10/0x10 [ 523.840804][ T3569] ref_tracker_dir_debugfs+0x100/0x1e0 [ 523.840912][ T3569] alloc_netdev_mqs+0x1a7/0xa50 [ 523.840936][ T3569] rtnl_create_link+0x239/0x710 [ 523.840971][ T3569] rtnl_newlink_create+0x14c/0x620 [ 523.840999][ T3569] ? __schedule+0x6b9/0xb30 [ 523.841104][ T3569] rtnl_newlink+0xf29/0x12d0 [ 523.841133][ T3569] ? xas_load+0x413/0x430 [ 523.841198][ T3569] ? __rcu_read_unlock+0x4f/0x70 [ 523.841302][ T3569] ? xa_load+0xb1/0xe0 [ 523.841321][ T3569] ? __rcu_read_unlock+0x4f/0x70 [ 523.841346][ T3569] ? avc_has_perm_noaudit+0x1b1/0x200 [ 523.841367][ T3569] ? cred_has_capability+0x210/0x280 [ 523.841469][ T3569] ? selinux_capable+0x31/0x40 [ 523.841494][ T3569] ? security_capable+0x83/0x90 [ 523.841535][ T3569] ? ns_capable+0x7d/0xb0 [ 523.841567][ T3569] ? __pfx_rtnl_newlink+0x10/0x10 [ 523.841591][ T3569] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 523.841614][ T3569] ? avc_has_perm_noaudit+0x1b1/0x200 [ 523.841636][ T3569] netlink_rcv_skb+0x123/0x220 [ 523.841697][ T3569] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 523.841746][ T3569] rtnetlink_rcv+0x1c/0x30 [ 523.841793][ T3569] netlink_unicast+0x5c0/0x690 [ 523.841889][ T3569] netlink_sendmsg+0x58b/0x6b0 [ 523.841965][ T3569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 523.841989][ T3569] __sock_sendmsg+0x145/0x180 [ 523.842019][ T3569] ____sys_sendmsg+0x31e/0x4e0 [ 523.842098][ T3569] ___sys_sendmsg+0x17b/0x1d0 [ 523.842167][ T3569] __x64_sys_sendmsg+0xd4/0x160 [ 523.842254][ T3569] x64_sys_call+0x191e/0x3000 [ 523.842281][ T3569] do_syscall_64+0xd2/0x200 [ 523.842304][ T3569] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 523.842335][ T3569] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 523.842427][ T3569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.842453][ T3569] RIP: 0033:0x7f19cfa0efc9 [ 523.842470][ T3569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 523.842492][ T3569] RSP: 002b:00007f19ce477038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 523.842511][ T3569] RAX: ffffffffffffffda RBX: 00007f19cfc65fa0 RCX: 00007f19cfa0efc9 [ 523.842528][ T3569] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 523.842600][ T3569] RBP: 00007f19ce477090 R08: 0000000000000000 R09: 0000000000000000 [ 523.842615][ T3569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 523.842676][ T3569] R13: 00007f19cfc66038 R14: 00007f19cfc65fa0 R15: 00007ffc64a6c418 [ 523.842694][ T3569] [ 524.197671][ T3575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.215783][T28777] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.224991][ T3569] geneve3: entered promiscuous mode [ 524.230298][ T3569] geneve3: entered allmulticast mode [ 524.238212][T29161] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 524.251835][T29161] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 524.260463][T29161] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 524.269388][T29161] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 524.317877][ T3583] loop7: detected capacity change from 0 to 4096 [ 524.337092][ T3558] netlink: 'syz.5.8230': attribute type 1 has an invalid length. [ 524.344919][ T3558] netlink: 224 bytes leftover after parsing attributes in process `syz.5.8230'. [ 524.379720][ T3598] macvtap0: entered promiscuous mode [ 524.386741][ T3583] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.400089][ T3598] macvtap0: left promiscuous mode [ 524.422216][ T3600] loop8: detected capacity change from 0 to 1024 [ 524.423930][T28777] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.429135][ T3600] EXT4-fs: Ignoring removed oldalloc option [ 524.443588][ T3600] EXT4-fs: Ignoring removed bh option [ 524.463698][ T3600] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.480389][ T3607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=3607 comm=syz.1.8247 [ 524.512972][ T3609] netlink: 44 bytes leftover after parsing attributes in process `syz.1.8248'. [ 524.566631][ T3612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3612 comm=syz.7.8250 [ 524.598533][T30337] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 524.734768][ T3631] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8257'. [ 524.734820][ T3633] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=3633 comm=syz.8.8258 [ 524.743784][ T3631] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8257'. [ 524.771089][ T3631] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8257'. [ 524.859612][ T3643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3643 comm=syz.7.8263 [ 524.892559][ T3647] loop8: detected capacity change from 0 to 512 [ 524.906837][ T3647] EXT4-fs (loop8): orphan cleanup on readonly fs [ 524.927252][ T3647] EXT4-fs error (device loop8): ext4_quota_enable:7136: comm syz.8.8265: inode #218103808: comm syz.8.8265: iget: illegal inode # [ 524.973376][ T3647] EXT4-fs error (device loop8): ext4_quota_enable:7139: comm syz.8.8265: Bad quota inode: 218103808, type: 2 [ 524.988766][ T3647] EXT4-fs warning (device loop8): ext4_enable_quotas:7180: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 525.024244][ T3647] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 525.034740][ T3647] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 525.068513][ T3660] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=3660 comm=syz.7.8270 [ 525.102825][ T3647] EXT4-fs error (device loop8): ext4_lookup:1791: inode #2: comm syz.8.8265: deleted inode referenced: 12 [ 525.126523][ T3668] loop7: detected capacity change from 0 to 512 [ 525.136317][ T3670] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 525.158267][ T3668] EXT4-fs (loop7): orphan cleanup on readonly fs [ 525.166553][ T3668] EXT4-fs error (device loop7): ext4_quota_enable:7136: comm syz.7.8275: inode #218103808: comm syz.7.8275: iget: illegal inode # [ 525.185862][ T3668] EXT4-fs error (device loop7): ext4_quota_enable:7139: comm syz.7.8275: Bad quota inode: 218103808, type: 2 [ 525.186000][ T3676] loop6: detected capacity change from 0 to 1024 [ 525.200299][ T3668] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 525.219890][T30337] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.220611][ T3676] EXT4-fs (loop6): bad geometry: first data block is 0 with a 1k block and cluster size [ 525.238864][ T3668] EXT4-fs (loop7): Cannot turn on quotas: error -117 [ 525.258391][ T3680] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3680 comm=syz.8.8278 [ 525.267892][ T3676] netlink: 'syz.6.8277': attribute type 5 has an invalid length. [ 525.276551][ T3668] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 525.291899][ T3676] geneve3: entered promiscuous mode [ 525.297127][ T3676] geneve3: entered allmulticast mode [ 525.323448][T29161] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 525.331918][T29161] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 525.342324][ T3668] EXT4-fs error (device loop7): ext4_lookup:1791: inode #2: comm syz.7.8275: deleted inode referenced: 12 [ 525.362731][T29161] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 525.376008][T29161] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 525.530447][ T3690] EXT4-fs error (device loop7): ext4_lookup:1791: inode #2: comm syz.7.8275: deleted inode referenced: 12 [ 525.562405][ T412] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 525.618016][ T412] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 525.692518][ T412] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 525.777696][ T412] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 525.861495][ T3710] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=3710 comm=syz.5.8287 [ 525.939112][ T3717] loop5: detected capacity change from 0 to 512 [ 525.947179][ T3717] EXT4-fs (loop5): orphan cleanup on readonly fs [ 525.954143][ T3717] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.8290: bad orphan inode 13 [ 525.964599][ T3717] ext4_test_bit(bit=12, block=18) = 1 [ 525.970007][ T3717] is_bad_inode(inode)=0 [ 525.974309][ T3717] NEXT_ORPHAN(inode)=2130706432 [ 525.979237][ T3717] max_ino=32 [ 525.982503][ T3717] i_nlink=1 [ 525.987040][ T3717] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 526.044211][T28777] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.053331][ T3717] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 526.072489][ T3717] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.8290: bg 0: block 248: padding at end of block bitmap is not set [ 526.087168][ T3717] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.8290: Failed to acquire dquot type 1 [ 526.088481][ T412] $Hÿ (unregistering): Released all slaves [ 526.098934][ T3717] EXT4-fs warning (device loop5): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 526.124367][ T412] bond1 (unregistering): Released all slaves [ 526.134985][ T412] bond0 (unregistering): Released all slaves [ 526.145659][ T412] bond2 (unregistering): Released all slaves [ 526.155978][ T412] bond3 (unregistering): Released all slaves [ 526.166287][ T412] bond4 (unregistering): Released all slaves [ 526.263300][ T412] bond5 (unregistering): Released all slaves [ 526.304988][ T412] bond6 (unregistering): Released all slaves [ 526.436019][ T3693] lo speed is unknown, defaulting to 1000 [ 526.615834][ T412] hsr_slave_0: left promiscuous mode [ 526.650852][ T412] hsr_slave_1: left promiscuous mode [ 526.972930][T31130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.024255][ T3734] loop7: detected capacity change from 0 to 164 [ 527.041055][ T3734] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 527.122394][ T3740] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=3740 comm=syz.8.8300 [ 527.147806][ T3742] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 527.198366][ T3742] Symlink component flag not implemented [ 527.204079][ T3742] Symlink component flag not implemented [ 527.262554][ T3693] chnl_net:caif_netlink_parms(): no params data found [ 527.316172][ T3750] loop8: detected capacity change from 0 to 512 [ 527.328438][ T3742] Symlink component flag not implemented (7) [ 527.334560][ T3742] Symlink component flag not implemented (116) [ 527.344379][ T3750] EXT4-fs (loop8): orphan cleanup on readonly fs [ 527.351133][ T3750] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.8303: bad orphan inode 13 [ 527.368051][ T3750] ext4_test_bit(bit=12, block=18) = 1 [ 527.373458][ T3750] is_bad_inode(inode)=0 [ 527.377771][ T3750] NEXT_ORPHAN(inode)=2130706432 [ 527.382609][ T3750] max_ino=32 [ 527.385795][ T3750] i_nlink=1 [ 527.418725][ T3750] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 527.454744][ T3693] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.461876][ T3693] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.489849][ T3750] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 527.510560][ T3693] bridge_slave_0: entered allmulticast mode [ 527.518567][ T3759] loop5: detected capacity change from 0 to 164 [ 527.531853][ T3693] bridge_slave_0: entered promiscuous mode [ 527.540777][ T3750] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.8303: bg 0: block 248: padding at end of block bitmap is not set [ 527.556126][ T3759] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 527.566199][ T3693] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.573357][ T3693] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.587377][ T3750] __quota_error: 261 callbacks suppressed [ 527.587393][ T3750] Quota error (device loop8): write_blk: dquota write failed [ 527.600752][ T3750] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 527.610752][ T3750] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.8303: Failed to acquire dquot type 1 [ 527.632127][ T3762] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 527.643916][ T3693] bridge_slave_1: entered allmulticast mode [ 527.654312][ T3762] Symlink component flag not implemented [ 527.659998][ T3762] Symlink component flag not implemented [ 527.667708][ T3693] bridge_slave_1: entered promiscuous mode [ 527.680343][ T3760] __nla_validate_parse: 11 callbacks suppressed [ 527.680361][ T3760] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8303'. [ 527.695616][ T3760] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8303'. [ 527.714905][ T3762] Symlink component flag not implemented (7) [ 527.720959][ T3762] Symlink component flag not implemented (116) [ 527.751681][ T3693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.764301][ T3750] EXT4-fs warning (device loop8): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 527.789715][ T3693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.842921][ T3693] team0: Port device team_slave_0 added [ 527.849852][ T3693] team0: Port device team_slave_1 added [ 527.872670][ T3693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 527.879644][ T3693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.905680][ T3693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 527.918840][T30337] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.920204][ T3693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.934872][ T3693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.960891][ T3693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.992287][ T3773] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=3773 comm=syz.1.8311 [ 528.008493][ T3693] hsr_slave_0: entered promiscuous mode [ 528.014661][ T3693] hsr_slave_1: entered promiscuous mode [ 528.029943][ T3776] loop8: detected capacity change from 0 to 512 [ 528.036646][ T3693] debugfs: 'hsr0' already exists in 'hsr' [ 528.042381][ T3693] Cannot create hsr debugfs directory [ 528.055732][ T3776] EXT4-fs (loop8): orphan cleanup on readonly fs [ 528.062513][ T3776] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.8310: bad orphan inode 13 [ 528.074044][ T3776] ext4_test_bit(bit=12, block=18) = 1 [ 528.079450][ T3776] is_bad_inode(inode)=0 [ 528.083728][ T3776] NEXT_ORPHAN(inode)=2130706432 [ 528.088672][ T3776] max_ino=32 [ 528.091944][ T3776] i_nlink=1 [ 528.141572][ T3776] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 528.174358][ T3693] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 528.199894][ T3693] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 528.210944][ T3776] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 528.223896][ T3693] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 528.232450][ T3776] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 528.245080][ T3693] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 528.267022][T30337] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.280848][ T3693] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.287984][ T3693] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.295385][ T3693] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.302471][ T3693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.314265][ T29] audit: type=1326 audit(1761902604.118:111197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.8.8314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eb904efc9 code=0x7ffc0000 [ 528.358795][ T29] audit: type=1326 audit(1761902604.139:111198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.8.8314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f1eb904efc9 code=0x7ffc0000 [ 528.372801][ T3693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 528.382461][ T29] audit: type=1326 audit(1761902604.139:111199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.8.8314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eb904efc9 code=0x7ffc0000 [ 528.412754][ T29] audit: type=1326 audit(1761902604.139:111200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.8.8314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eb904efc9 code=0x7ffc0000 [ 528.436363][ T29] audit: type=1326 audit(1761902604.139:111201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.8.8314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f1eb904efc9 code=0x7ffc0000 [ 528.459995][ T29] audit: type=1326 audit(1761902604.139:111202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.8.8314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eb904efc9 code=0x7ffc0000 [ 528.483759][ T29] audit: type=1326 audit(1761902604.139:111203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.8.8314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1eb904efc9 code=0x7ffc0000 [ 528.507373][ T29] audit: type=1326 audit(1761902604.139:111204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3793 comm="syz.8.8314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f1eb904efc9 code=0x7ffc0000 [ 528.531434][T28041] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.539465][T28041] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.554726][ T3797] macvtap0: entered promiscuous mode [ 528.560605][ T3797] macvtap0: left promiscuous mode [ 528.569695][ T3799] macvtap0: entered promiscuous mode [ 528.575675][ T3799] macvtap0: left promiscuous mode [ 528.584109][ T3693] 8021q: adding VLAN 0 to HW filter on device team0 [ 528.595771][ T4144] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.602949][ T4144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 528.616463][ T412] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.623625][ T412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 528.674028][ T3808] loop8: detected capacity change from 0 to 164 [ 528.690181][ T3808] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 528.737265][ T3693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 528.765356][ T3824] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 528.775959][ T3823] loop5: detected capacity change from 0 to 164 [ 528.793438][ T3823] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 528.807924][ T3827] loop7: detected capacity change from 0 to 1024 [ 528.814740][ T3824] Symlink component flag not implemented [ 528.820466][ T3824] Symlink component flag not implemented [ 528.826945][ T3827] EXT4-fs: Ignoring removed oldalloc option [ 528.832953][ T3827] EXT4-fs: Ignoring removed bh option [ 528.854907][ T3827] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.868811][ T3824] Symlink component flag not implemented (7) [ 528.874910][ T3824] Symlink component flag not implemented (116) [ 528.901273][ T3839] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 528.931385][ T3839] Symlink component flag not implemented [ 528.937057][ T3839] Symlink component flag not implemented [ 528.990490][ T3693] veth0_vlan: entered promiscuous mode [ 528.999373][ T3839] Symlink component flag not implemented (7) [ 529.005425][ T3839] Symlink component flag not implemented (116) [ 529.014041][ T3693] veth1_vlan: entered promiscuous mode [ 529.032492][ T3693] veth0_macvtap: entered promiscuous mode [ 529.041668][ T3693] veth1_macvtap: entered promiscuous mode [ 529.052734][ T3693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 529.066372][ T3693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 529.079199][T28056] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.099787][T28041] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.122656][T28041] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.132351][T28777] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.136074][T28041] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.293567][ T3863] loop7: detected capacity change from 0 to 1024 [ 529.302636][ T3863] EXT4-fs: Ignoring removed oldalloc option [ 529.308657][ T3863] EXT4-fs: Ignoring removed bh option [ 529.323089][ T3863] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.453439][T28777] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.527838][ T3873] netlink: 'syz.8.8334': attribute type 1 has an invalid length. [ 529.545960][ T3873] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8334'. [ 529.556083][ T3873] 8021q: adding VLAN 0 to HW filter on device bond8 [ 529.568474][ T3873] 8021q: adding VLAN 0 to HW filter on device bond8 [ 529.578889][ T3873] bond8: (slave geneve3): making interface the new active one [ 529.587343][ T3873] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 529.596148][ T4144] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 529.606901][ T4144] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 529.616036][ T4144] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 529.624439][ T4144] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 529.912271][ T3880] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8335'. [ 529.988359][ T3892] FAULT_INJECTION: forcing a failure. [ 529.988359][ T3892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 530.001500][ T3892] CPU: 0 UID: 0 PID: 3892 Comm: syz.8.8337 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 530.001535][ T3892] Tainted: [W]=WARN [ 530.001543][ T3892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 530.001558][ T3892] Call Trace: [ 530.001566][ T3892] [ 530.001576][ T3892] __dump_stack+0x1d/0x30 [ 530.001683][ T3892] dump_stack_lvl+0xe8/0x140 [ 530.001703][ T3892] dump_stack+0x15/0x1b [ 530.001723][ T3892] should_fail_ex+0x265/0x280 [ 530.001747][ T3892] should_fail+0xb/0x20 [ 530.001838][ T3892] should_fail_usercopy+0x1a/0x20 [ 530.001940][ T3892] _copy_from_iter+0xd2/0xe80 [ 530.001962][ T3892] ? __build_skb_around+0x1ab/0x200 [ 530.001992][ T3892] ? __alloc_skb+0x223/0x320 [ 530.002025][ T3892] netlink_sendmsg+0x471/0x6b0 [ 530.002056][ T3892] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.002080][ T3892] __sock_sendmsg+0x145/0x180 [ 530.002175][ T3892] ____sys_sendmsg+0x31e/0x4e0 [ 530.002249][ T3892] ___sys_sendmsg+0x17b/0x1d0 [ 530.002369][ T3892] __x64_sys_sendmsg+0xd4/0x160 [ 530.002391][ T3892] x64_sys_call+0x191e/0x3000 [ 530.002531][ T3892] do_syscall_64+0xd2/0x200 [ 530.002554][ T3892] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 530.002588][ T3892] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 530.002646][ T3892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.002667][ T3892] RIP: 0033:0x7f1eb904efc9 [ 530.002686][ T3892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 530.002708][ T3892] RSP: 002b:00007f1eb7aaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 530.002731][ T3892] RAX: ffffffffffffffda RBX: 00007f1eb92a5fa0 RCX: 00007f1eb904efc9 [ 530.002745][ T3892] RDX: 0000000000000810 RSI: 0000200000000000 RDI: 000000000000000b [ 530.002758][ T3892] RBP: 00007f1eb7aaf090 R08: 0000000000000000 R09: 0000000000000000 [ 530.002818][ T3892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.002833][ T3892] R13: 00007f1eb92a6038 R14: 00007f1eb92a5fa0 R15: 00007ffc22074138 [ 530.002909][ T3892] [ 530.210020][ T3898] loop9: detected capacity change from 0 to 1024 [ 530.330818][ T3904] loop7: detected capacity change from 0 to 1024 [ 530.393050][ T3898] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 530.849214][ T3693] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.050132][ T3904] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.094025][ T3916] loop8: detected capacity change from 0 to 164 [ 531.135171][ T3916] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 531.153280][ T3915] binfmt_misc: register: failed to install interpreter file ./file2 [ 531.205266][ T3917] loop5: detected capacity change from 0 to 2048 [ 531.232961][ T3915] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8345'. [ 531.242347][ T3915] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8345'. [ 531.282919][ T3918] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 531.323866][ T3918] Symlink component flag not implemented [ 531.329625][ T3918] Symlink component flag not implemented [ 531.370020][ T3918] Symlink component flag not implemented (7) [ 531.376117][ T3918] Symlink component flag not implemented (116) [ 531.441523][ T3925] FAULT_INJECTION: forcing a failure. [ 531.441523][ T3925] name failslab, interval 1, probability 0, space 0, times 0 [ 531.454240][ T3925] CPU: 1 UID: 0 PID: 3925 Comm: syz.9.8348 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 531.454273][ T3925] Tainted: [W]=WARN [ 531.454280][ T3925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 531.454292][ T3925] Call Trace: [ 531.454301][ T3925] [ 531.454309][ T3925] __dump_stack+0x1d/0x30 [ 531.454360][ T3925] dump_stack_lvl+0xe8/0x140 [ 531.454383][ T3925] dump_stack+0x15/0x1b [ 531.454407][ T3925] should_fail_ex+0x265/0x280 [ 531.454431][ T3925] should_failslab+0x8c/0xb0 [ 531.454500][ T3925] __kmalloc_cache_node_noprof+0x54/0x4a0 [ 531.454534][ T3925] ? __get_vm_area_node+0x106/0x1d0 [ 531.454656][ T3925] __get_vm_area_node+0x106/0x1d0 [ 531.454687][ T3925] __vmalloc_node_range_noprof+0x28c/0xed0 [ 531.454775][ T3925] ? copy_process+0x399/0x2000 [ 531.454818][ T3925] ? obj_cgroup_charge_account+0xba/0x1a0 [ 531.454847][ T3925] __vmalloc_node_noprof+0x89/0xc0 [ 531.454921][ T3925] ? copy_process+0x399/0x2000 [ 531.454949][ T3925] ? copy_process+0x399/0x2000 [ 531.454977][ T3925] dup_task_struct+0x433/0x6b0 [ 531.455073][ T3925] copy_process+0x399/0x2000 [ 531.455101][ T3925] ? css_rstat_updated+0xb7/0x240 [ 531.455123][ T3925] ? should_fail_ex+0xdb/0x280 [ 531.455146][ T3925] ? __pfx_io_wq_worker+0x10/0x10 [ 531.455217][ T3925] create_io_thread+0x71/0xa0 [ 531.455251][ T3925] ? __pfx_io_wq_worker+0x10/0x10 [ 531.455289][ T3925] create_io_worker+0xe0/0x370 [ 531.455383][ T3925] io_wq_enqueue+0x2c1/0x3a0 [ 531.455416][ T3925] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 531.455451][ T3925] io_queue_iowq+0x201/0x2e0 [ 531.455480][ T3925] io_queue_sqe_fallback+0xe6/0x140 [ 531.455547][ T3925] io_submit_sqes+0xc2e/0x1060 [ 531.455584][ T3925] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 531.455750][ T3925] ? 0xffffffff81000000 [ 531.455763][ T3925] ? __rcu_read_unlock+0x4f/0x70 [ 531.455795][ T3925] ? get_pid_task+0x96/0xd0 [ 531.455829][ T3925] ? proc_fail_nth_write+0x13b/0x160 [ 531.455919][ T3925] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 531.455965][ T3925] ? vfs_write+0x7e8/0x960 [ 531.455995][ T3925] ? __rcu_read_unlock+0x4f/0x70 [ 531.456025][ T3925] ? __fget_files+0x184/0x1c0 [ 531.456075][ T3925] ? fput+0x8f/0xc0 [ 531.456093][ T3925] __x64_sys_io_uring_enter+0x78/0x90 [ 531.456130][ T3925] x64_sys_call+0x2df0/0x3000 [ 531.456181][ T3925] do_syscall_64+0xd2/0x200 [ 531.456200][ T3925] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 531.456233][ T3925] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 531.456272][ T3925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.456312][ T3925] RIP: 0033:0x7f731b99efc9 [ 531.456368][ T3925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.456419][ T3925] RSP: 002b:00007f731a3ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 531.456475][ T3925] RAX: ffffffffffffffda RBX: 00007f731bbf5fa0 RCX: 00007f731b99efc9 [ 531.456529][ T3925] RDX: 0000000000001e43 RSI: 00000000000047f8 RDI: 0000000000000003 [ 531.456623][ T3925] RBP: 00007f731a3ff090 R08: 0000000000000000 R09: 0000000000000000 [ 531.456635][ T3925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.456647][ T3925] R13: 00007f731bbf6038 R14: 00007f731bbf5fa0 R15: 00007fff78989138 [ 531.456665][ T3925] [ 531.456673][ T3925] syz.9.8348: vmalloc error: size 16384, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 531.490889][ T3929] 9pnet_fd: Insufficient options for proto=fd [ 531.492698][ T3925] ,cpuset=/,mems_allowed=0 [ 531.492733][ T3925] CPU: 1 UID: 0 PID: 3925 Comm: syz.9.8348 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 531.492762][ T3925] Tainted: [W]=WARN [ 531.492768][ T3925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 531.492839][ T3925] Call Trace: [ 531.492847][ T3925] [ 531.492856][ T3925] __dump_stack+0x1d/0x30 [ 531.492881][ T3925] dump_stack_lvl+0xe8/0x140 [ 531.492904][ T3925] dump_stack+0x15/0x1b [ 531.492923][ T3925] warn_alloc+0x12b/0x1a0 [ 531.492972][ T3925] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 531.493013][ T3925] ? obj_cgroup_charge_account+0xba/0x1a0 [ 531.493044][ T3925] __vmalloc_node_noprof+0x89/0xc0 [ 531.493126][ T3925] ? copy_process+0x399/0x2000 [ 531.493157][ T3925] ? copy_process+0x399/0x2000 [ 531.493188][ T3925] dup_task_struct+0x433/0x6b0 [ 531.493275][ T3925] copy_process+0x399/0x2000 [ 531.493306][ T3925] ? css_rstat_updated+0xb7/0x240 [ 531.493328][ T3925] ? should_fail_ex+0xdb/0x280 [ 531.493378][ T3925] ? __pfx_io_wq_worker+0x10/0x10 [ 531.493517][ T3925] create_io_thread+0x71/0xa0 [ 531.493553][ T3925] ? __pfx_io_wq_worker+0x10/0x10 [ 531.493588][ T3925] create_io_worker+0xe0/0x370 [ 531.493669][ T3925] io_wq_enqueue+0x2c1/0x3a0 [ 531.493700][ T3925] ? __pfx_io_wq_work_match_item+0x10/0x10 [ 531.493770][ T3925] io_queue_iowq+0x201/0x2e0 [ 531.493850][ T3925] io_queue_sqe_fallback+0xe6/0x140 [ 531.493954][ T3925] io_submit_sqes+0xc2e/0x1060 [ 531.494017][ T3925] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 531.494053][ T3925] ? 0xffffffff81000000 [ 531.494068][ T3925] ? __rcu_read_unlock+0x4f/0x70 [ 531.494097][ T3925] ? get_pid_task+0x96/0xd0 [ 531.494199][ T3925] ? proc_fail_nth_write+0x13b/0x160 [ 531.494234][ T3925] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 531.494287][ T3925] ? vfs_write+0x7e8/0x960 [ 531.494314][ T3925] ? __rcu_read_unlock+0x4f/0x70 [ 531.494342][ T3925] ? __fget_files+0x184/0x1c0 [ 531.494373][ T3925] ? fput+0x8f/0xc0 [ 531.494393][ T3925] __x64_sys_io_uring_enter+0x78/0x90 [ 531.494515][ T3925] x64_sys_call+0x2df0/0x3000 [ 531.494608][ T3925] do_syscall_64+0xd2/0x200 [ 531.494629][ T3925] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 531.494660][ T3925] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 531.494695][ T3925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.494760][ T3925] RIP: 0033:0x7f731b99efc9 [ 531.494781][ T3925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.494801][ T3925] RSP: 002b:00007f731a3ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 531.494821][ T3925] RAX: ffffffffffffffda RBX: 00007f731bbf5fa0 RCX: 00007f731b99efc9 [ 531.494835][ T3925] RDX: 0000000000001e43 RSI: 00000000000047f8 RDI: 0000000000000003 [ 531.494849][ T3925] RBP: 00007f731a3ff090 R08: 0000000000000000 R09: 0000000000000000 [ 531.494894][ T3925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.494977][ T3925] R13: 00007f731bbf6038 R14: 00007f731bbf5fa0 R15: 00007fff78989138 [ 531.495073][ T3925] [ 531.495080][ T3925] Mem-Info: [ 532.102104][ T3925] active_anon:11128 inactive_anon:16 isolated_anon:0 [ 532.102104][ T3925] active_file:28804 inactive_file:2805 isolated_file:0 [ 532.102104][ T3925] unevictable:0 dirty:371 writeback:0 [ 532.102104][ T3925] slab_reclaimable:3793 slab_unreclaimable:18762 [ 532.102104][ T3925] mapped:34268 shmem:5822 pagetables:1771 [ 532.102104][ T3925] sec_pagetables:0 bounce:0 [ 532.102104][ T3925] kernel_misc_reclaimable:0 [ 532.102104][ T3925] free:1844570 free_pcp:13079 free_cma:0 [ 532.147357][ T3925] Node 0 active_anon:44512kB inactive_anon:64kB active_file:115216kB inactive_file:11220kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:137072kB dirty:1484kB writeback:0kB shmem:23288kB kernel_stack:5440kB pagetables:7084kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 532.175045][ T3925] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 532.205273][ T3925] lowmem_reserve[]: 0 2881 7859 7859 [ 532.210608][ T3925] Node 0 DMA32 free:2946740kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950268kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:0kB free_cma:0kB [ 532.241709][ T3925] lowmem_reserve[]: 0 0 4978 4978 [ 532.246905][ T3925] Node 0 Normal free:4416180kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44512kB inactive_anon:64kB active_file:115216kB inactive_file:11220kB unevictable:0kB writepending:1484kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:48948kB local_pcp:25284kB free_cma:0kB [ 532.280371][ T3925] lowmem_reserve[]: 0 0 0 0 [ 532.284934][ T3925] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 532.297559][ T3925] Node 0 DMA32: 3*4kB (M) 3*8kB (M) 5*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946740kB [ 532.313822][ T3925] Node 0 Normal: 1195*4kB (UM) 552*8kB (UME) 249*16kB (UM) 533*32kB (UM) 420*64kB (UM) 279*128kB (UME) 234*256kB (UME) 171*512kB (UM) 84*1024kB (UME) 15*2048kB (UME) 991*4096kB (UM) = 4416156kB [ 532.333263][ T3925] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 532.342675][ T3925] 37405 total pagecache pages [ 532.347379][ T3925] 27 pages in swap cache [ 532.351703][ T3925] Free swap = 124888kB [ 532.355955][ T3925] Total swap = 124996kB [ 532.360217][ T3925] 2097051 pages RAM [ 532.364009][ T3925] 0 pages HighMem/MovableOnly [ 532.368759][ T3925] 81084 pages reserved [ 532.377699][T28777] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.478004][ T3940] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 532.497601][ T3942] loop5: detected capacity change from 0 to 164 [ 532.505053][ T3942] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 532.569572][ T3950] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 532.597893][ T3950] Symlink component flag not implemented [ 532.603592][ T3950] Symlink component flag not implemented [ 532.667087][ T3950] Symlink component flag not implemented (7) [ 532.673243][ T3950] Symlink component flag not implemented (116) [ 532.735271][ T29] kauditd_printk_skb: 97 callbacks suppressed [ 532.735288][ T29] audit: type=1326 audit(1761902608.748:111302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.1.8358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cfa0efc9 code=0x7ffc0000 [ 532.765174][ T29] audit: type=1326 audit(1761902608.748:111303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.1.8358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cfa0efc9 code=0x7ffc0000 [ 532.788795][ T29] audit: type=1326 audit(1761902608.748:111304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.1.8358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f19cfa0efc9 code=0x7ffc0000 [ 532.812636][ T29] audit: type=1326 audit(1761902608.748:111305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.1.8358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cfa0efc9 code=0x7ffc0000 [ 532.836239][ T29] audit: type=1326 audit(1761902608.748:111306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.1.8358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f19cfa0efc9 code=0x7ffc0000 [ 532.859944][ T29] audit: type=1326 audit(1761902608.748:111307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.1.8358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cfa0efc9 code=0x7ffc0000 [ 532.883612][ T29] audit: type=1326 audit(1761902608.748:111308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.1.8358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f19cfa0efc9 code=0x7ffc0000 [ 532.907644][ T29] audit: type=1326 audit(1761902608.748:111309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.1.8358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cfa0efc9 code=0x7ffc0000 [ 532.931406][ T29] audit: type=1326 audit(1761902608.748:111310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.1.8358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f19cfa0efc9 code=0x7ffc0000 [ 532.955076][ T29] audit: type=1326 audit(1761902608.748:111311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3953 comm="syz.1.8358" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cfa0efc9 code=0x7ffc0000 [ 533.106204][ T3965] loop9: detected capacity change from 0 to 164 [ 533.115669][ T3965] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 533.187780][ T3967] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 533.206412][ T3967] Symlink component flag not implemented [ 533.212085][ T3967] Symlink component flag not implemented [ 533.228147][ T3967] Symlink component flag not implemented (7) [ 533.234166][ T3967] Symlink component flag not implemented (116) [ 533.292961][ T3973] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2568 sclass=netlink_route_socket pid=3973 comm=syz.5.8366 [ 533.333944][ T3977] loop8: detected capacity change from 0 to 512 [ 533.336163][ T3979] loop5: detected capacity change from 0 to 2048 [ 533.349561][ T3977] EXT4-fs: Ignoring removed orlov option [ 533.357553][ T3977] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 533.366922][ T3977] EXT4-fs (loop8): orphan cleanup on readonly fs [ 533.373827][ T3977] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.8365: bg 0: block 248: padding at end of block bitmap is not set [ 533.388734][ T3977] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.8365: Failed to acquire dquot type 1 [ 533.403854][ T3977] EXT4-fs (loop8): 1 truncate cleaned up [ 533.410403][ T3977] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 533.460309][ T3979] loop5: unable to read partition table [ 533.467505][ T3982] 9pnet_fd: Insufficient options for proto=fd [ 533.474188][T30337] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.483252][ T3979] loop5: partition table beyond EOD, truncated [ 533.489648][ T3979] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 533.525010][ T3984] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8371'. [ 533.534063][ T3984] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8371'. [ 533.549265][ T3984] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8371'. [ 533.558287][ T3984] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8371'. [ 533.635298][ T4001] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 533.804821][ T4015] 9pnet_fd: Insufficient options for proto=fd [ 533.877011][ T4017] infiniband syz!: set down [ 533.881806][ T4017] infiniband syz!: added team_slave_0 [ 533.893454][ T4017] RDS/IB: syz!: added [ 533.898001][ T4017] smc: adding ib device syz! with port count 1 [ 533.904356][ T4017] smc: ib device syz! port 1 has no pnetid [ 533.990184][ T4028] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8387'. [ 533.999415][ T4028] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8387'. [ 534.009195][ T4028] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8387'. [ 534.018255][ T4028] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8387'. [ 534.095454][ T4032] lo speed is unknown, defaulting to 1000 [ 534.268675][ T4030] netlink: 'syz.9.8388': attribute type 5 has an invalid length. [ 534.288628][ T4030] loop9: detected capacity change from 0 to 512 [ 534.297950][ T4030] EXT4-fs (loop9): couldn't mount as ext2 due to feature incompatibilities [ 534.328117][ T4046] 9pnet_fd: Insufficient options for proto=fd [ 534.349793][ T4048] loop9: detected capacity change from 0 to 512 [ 534.361824][ T4048] EXT4-fs: Ignoring removed orlov option [ 534.370004][ T4048] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 534.379692][ T4048] EXT4-fs (loop9): orphan cleanup on readonly fs [ 534.386627][ T4048] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.8394: bg 0: block 248: padding at end of block bitmap is not set [ 534.401491][ T4048] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.8394: Failed to acquire dquot type 1 [ 534.421714][ T4048] EXT4-fs (loop9): 1 truncate cleaned up [ 534.428374][ T4048] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 534.432262][ T4054] veth2: entered promiscuous mode [ 534.445957][ T4054] veth2: entered allmulticast mode [ 534.469508][ T3693] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.644614][ T4066] loop5: detected capacity change from 0 to 1024 [ 534.660625][ T4066] EXT4-fs: Ignoring removed oldalloc option [ 534.666650][ T4066] EXT4-fs: Ignoring removed bh option [ 534.678553][ T4068] FAULT_INJECTION: forcing a failure. [ 534.678553][ T4068] name failslab, interval 1, probability 0, space 0, times 0 [ 534.691245][ T4068] CPU: 0 UID: 0 PID: 4068 Comm: syz.9.8404 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 534.691353][ T4068] Tainted: [W]=WARN [ 534.691359][ T4068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 534.691372][ T4068] Call Trace: [ 534.691379][ T4068] [ 534.691386][ T4068] __dump_stack+0x1d/0x30 [ 534.691411][ T4068] dump_stack_lvl+0xe8/0x140 [ 534.691434][ T4068] dump_stack+0x15/0x1b [ 534.691517][ T4068] should_fail_ex+0x265/0x280 [ 534.691610][ T4068] should_failslab+0x8c/0xb0 [ 534.691644][ T4068] kmem_cache_alloc_noprof+0x50/0x480 [ 534.691727][ T4068] ? __break_lease+0x78/0xe80 [ 534.691753][ T4068] __break_lease+0x78/0xe80 [ 534.691777][ T4068] ? may_link+0x2a5/0x2f0 [ 534.691814][ T4068] vfs_unlink+0x1d5/0x420 [ 534.691953][ T4068] do_unlinkat+0x24e/0x480 [ 534.691984][ T4068] __x64_sys_unlinkat+0x97/0xb0 [ 534.692051][ T4068] x64_sys_call+0x2eed/0x3000 [ 534.692074][ T4068] do_syscall_64+0xd2/0x200 [ 534.692133][ T4068] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 534.692165][ T4068] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 534.692200][ T4068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.692224][ T4068] RIP: 0033:0x7f731b99efc9 [ 534.692264][ T4068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.692337][ T4068] RSP: 002b:00007f731a3ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 534.692359][ T4068] RAX: ffffffffffffffda RBX: 00007f731bbf5fa0 RCX: 00007f731b99efc9 [ 534.692372][ T4068] RDX: 0000000000000000 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 534.692387][ T4068] RBP: 00007f731a3ff090 R08: 0000000000000000 R09: 0000000000000000 [ 534.692399][ T4068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 534.692411][ T4068] R13: 00007f731bbf6038 R14: 00007f731bbf5fa0 R15: 00007fff78989138 [ 534.692429][ T4068] [ 534.692987][ T4066] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 534.757250][ T4075] loop9: detected capacity change from 0 to 2048 [ 534.915423][ T4081] netlink: 4568 bytes leftover after parsing attributes in process `syz.1.8406'. [ 534.924661][ T4081] netlink: 4568 bytes leftover after parsing attributes in process `syz.1.8406'. [ 534.940850][ T4070] lo speed is unknown, defaulting to 1000 [ 534.947782][T31130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.994835][ T4075] loop9: unable to read partition table [ 535.009085][ T4075] loop9: partition table beyond EOD, truncated [ 535.015281][ T4075] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 535.026040][ T4081] lo speed is unknown, defaulting to 1000 [ 535.152944][ T4090] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.166326][ T4094] loop7: detected capacity change from 0 to 128 [ 535.181713][ T4094] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 535.204721][ T4090] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.215794][ T4094] ext4 filesystem being mounted at /541/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 535.264381][T28777] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 535.305407][ T4090] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.343905][ T4111] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 535.364315][ T4111] can0: slcan on ttyS3. [ 535.373741][ T4090] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.425143][ T412] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.436802][ T412] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.448841][ T412] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.472899][ T4111] can0 (unregistered): slcan off ttyS3. [ 535.491936][ T412] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.509914][ T4115] lo speed is unknown, defaulting to 1000 [ 535.551181][ T4126] loop9: detected capacity change from 0 to 128 [ 535.558775][ T4126] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 535.578563][ T4126] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 535.731959][ T3693] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 535.757904][ T4133] loop5: detected capacity change from 0 to 1024 [ 535.814223][ T4133] EXT4-fs: Ignoring removed orlov option [ 535.819994][ T4133] EXT4-fs: Ignoring removed nomblk_io_submit option [ 535.843986][ T4143] loop8: detected capacity change from 0 to 512 [ 535.864744][ T4143] EXT4-fs: Ignoring removed orlov option [ 535.870937][ T4143] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 535.875005][ T4147] FAULT_INJECTION: forcing a failure. [ 535.875005][ T4147] name failslab, interval 1, probability 0, space 0, times 0 [ 535.892315][ T4147] CPU: 0 UID: 0 PID: 4147 Comm: syz.1.8432 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 535.892389][ T4147] Tainted: [W]=WARN [ 535.892396][ T4147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 535.892434][ T4147] Call Trace: [ 535.892441][ T4147] [ 535.892449][ T4147] __dump_stack+0x1d/0x30 [ 535.892470][ T4147] dump_stack_lvl+0xe8/0x140 [ 535.892492][ T4147] dump_stack+0x15/0x1b [ 535.892513][ T4147] should_fail_ex+0x265/0x280 [ 535.892535][ T4147] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 535.892562][ T4147] should_failslab+0x8c/0xb0 [ 535.892590][ T4147] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 535.892685][ T4147] ? shmem_alloc_inode+0x34/0x50 [ 535.892711][ T4147] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 535.892736][ T4147] shmem_alloc_inode+0x34/0x50 [ 535.892761][ T4147] alloc_inode+0x40/0x170 [ 535.892820][ T4147] new_inode+0x1d/0xe0 [ 535.892851][ T4147] shmem_get_inode+0x244/0x750 [ 535.892874][ T4147] __shmem_file_setup+0x113/0x210 [ 535.892893][ T4147] shmem_file_setup+0x3b/0x50 [ 535.892956][ T4147] __se_sys_memfd_create+0x2c3/0x590 [ 535.892983][ T4147] __x64_sys_memfd_create+0x31/0x40 [ 535.893006][ T4147] x64_sys_call+0x2ac2/0x3000 [ 535.893029][ T4147] do_syscall_64+0xd2/0x200 [ 535.893091][ T4147] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 535.893123][ T4147] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 535.893163][ T4147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.893186][ T4147] RIP: 0033:0x7f19cfa0efc9 [ 535.893259][ T4147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.893277][ T4147] RSP: 002b:00007f19ce476e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 535.893296][ T4147] RAX: ffffffffffffffda RBX: 0000000000000519 RCX: 00007f19cfa0efc9 [ 535.893308][ T4147] RDX: 00007f19ce476ef0 RSI: 0000000000000000 RDI: 00007f19cfa92960 [ 535.893321][ T4147] RBP: 00002000000009c0 R08: 00007f19ce476bb7 R09: 00007f19ce476e40 [ 535.893336][ T4147] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000980 [ 535.893351][ T4147] R13: 00007f19ce476ef0 R14: 00007f19ce476eb0 R15: 0000200000000100 [ 535.893441][ T4147] [ 536.123270][ T4143] EXT4-fs (loop8): orphan cleanup on readonly fs [ 536.130488][ T4143] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.8431: bg 0: block 248: padding at end of block bitmap is not set [ 536.146328][ T4133] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.178153][ T4143] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.8431: Failed to acquire dquot type 1 [ 536.194151][ T4143] EXT4-fs (loop8): 1 truncate cleaned up [ 536.206851][ T4143] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 536.235553][T31130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.244935][T30337] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.270202][ T4162] 9pnet: Could not find request transport: tcp? [ 536.292144][ T4168] loop5: detected capacity change from 0 to 164 [ 536.305796][ T4162] 9pnet: Could not find request transport: tcp? [ 536.323457][ T4168] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 536.351095][ T4162] 9pnet: Could not find request transport: tcp? [ 536.382929][ T4162] 9pnet: Could not find request transport: tcp? [ 536.392435][ T4180] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 536.403154][ T4178] loop9: detected capacity change from 0 to 1024 [ 536.411950][ T4178] EXT4-fs: Ignoring removed oldalloc option [ 536.413109][ T4162] 9pnet: Could not find request transport: tcp? [ 536.417939][ T4178] EXT4-fs: Ignoring removed bh option [ 536.435243][ T4180] Symlink component flag not implemented [ 536.440909][ T4180] Symlink component flag not implemented [ 536.446758][ T4162] 9pnet: Could not find request transport: tcp? [ 536.456474][ T4180] Symlink component flag not implemented (7) [ 536.462469][ T4180] Symlink component flag not implemented (116) [ 536.471817][ T4178] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.489938][ T4162] 9pnet: Could not find request transport: tcp? [ 536.509190][ T4162] 9pnet: Could not find request transport: tcp? [ 536.540972][ T4195] loop7: detected capacity change from 0 to 128 [ 536.542925][ T4194] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 536.558821][ T4162] 9pnet: Could not find request transport: tcp? [ 536.573544][ T4162] 9pnet: Could not find request transport: tcp? [ 536.578028][ T4195] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 536.600754][ T4162] 9pnet: Could not find request transport: tcp? [ 536.615455][ T4162] 9pnet: Could not find request transport: tcp? [ 536.623131][ T4194] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 536.632120][ T4195] ext4 filesystem being mounted at /545/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 536.641702][ T4162] 9pnet: Could not find request transport: tcp? [ 536.690862][T28777] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 536.703382][ T4162] 9pnet: Could not find request transport: tcp? [ 536.721830][ T4194] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 536.724059][ T4162] 9pnet: Could not find request transport: tcp? [ 536.731702][ T4162] 9pnet: Could not find request transport: tcp? [ 536.748350][ T3693] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.759983][ T4194] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 536.767887][ T4162] 9pnet: Could not find request transport: tcp? [ 536.786275][ T4211] tipc: Enabling not permitted [ 536.786352][ T4211] tipc: Enabling of bearer rejected, failed to enable media [ 536.800308][ T4162] 9pnet: Could not find request transport: tcp? [ 536.822614][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 536.846469][ T4213] loop7: detected capacity change from 0 to 1024 [ 536.853867][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 536.889506][ T4162] 9pnet: Could not find request transport: tcp? [ 536.889595][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 536.903996][ T412] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 536.927886][ T4162] 9pnet: Could not find request transport: tcp? [ 536.941999][ T4162] 9pnet: Could not find request transport: tcp? [ 536.943197][ T4213] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.955207][ T4162] 9pnet: Could not find request transport: tcp? [ 537.055306][ T4162] 9pnet: Could not find request transport: tcp? [ 537.208747][ T4226] loop8: detected capacity change from 0 to 2048 [ 537.317206][ T4226] loop8: unable to read partition table [ 537.317339][ T4226] loop8: partition table beyond EOD, truncated [ 537.317357][ T4226] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 537.635707][T28777] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.682371][ T4249] 9pnet_fd: Insufficient options for proto=fd [ 537.733048][ T10] IPVS: starting estimator thread 0... [ 537.759678][ T4255] loop5: detected capacity change from 0 to 1024 [ 537.766505][ T4255] EXT4-fs: Ignoring removed oldalloc option [ 537.771960][ T4257] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 537.772479][ T4255] EXT4-fs: Ignoring removed bh option [ 537.788775][ T4255] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.816045][ T4254] IPVS: using max 2208 ests per chain, 110400 per kthread [ 537.846672][ T4250] loop9: detected capacity change from 0 to 1024 [ 537.853474][ T4263] 9pnet_fd: Insufficient options for proto=fd [ 537.864205][ T4250] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 537.903635][ T4250] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 537.914572][ T4250] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 537.938049][ T4268] loop8: detected capacity change from 0 to 128 [ 537.945850][ T4250] JBD2: no valid journal superblock found [ 537.951736][ T4250] EXT4-fs (loop9): Could not load journal inode [ 537.965564][T31130] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.982775][ T4268] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 537.996145][ T4268] ext4 filesystem being mounted at /481/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 538.062814][ T4276] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4276 comm=syz.9.8469 [ 538.090551][T30337] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 538.145430][ T4279] loop8: detected capacity change from 0 to 8192 [ 538.190610][ T4279] loop8: p1 p3 [ 538.194217][ T4279] loop8: p1 start 51314688 is beyond EOD, truncated [ 538.200911][ T4279] loop8: p3 start 65536 is beyond EOD, truncated [ 538.290347][ T4296] loop9: detected capacity change from 0 to 2048 [ 538.360394][ T4302] loop5: detected capacity change from 0 to 128 [ 538.377097][ T4302] ext4 filesystem being mounted at /354/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 538.409097][ T4296] loop9: unable to read partition table [ 538.418578][ T4296] loop9: partition table beyond EOD, truncated [ 538.424784][ T4296] loop_reread_partitions: partition scan of loop9 () failed (rc=-5) [ 538.468473][ T4307] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4307 comm=syz.7.8481 [ 538.506425][ T4309] loop9: detected capacity change from 0 to 512 [ 538.519825][ T4307] __nla_validate_parse: 5 callbacks suppressed [ 538.519841][ T4307] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8481'. [ 538.541926][ T4314] FAULT_INJECTION: forcing a failure. [ 538.541926][ T4314] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 538.555112][ T4314] CPU: 0 UID: 0 PID: 4314 Comm: syz.5.8483 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 538.555148][ T4314] Tainted: [W]=WARN [ 538.555155][ T4314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 538.555168][ T4314] Call Trace: [ 538.555174][ T4314] [ 538.555182][ T4314] __dump_stack+0x1d/0x30 [ 538.555218][ T4314] dump_stack_lvl+0xe8/0x140 [ 538.555238][ T4314] dump_stack+0x15/0x1b [ 538.555292][ T4314] should_fail_ex+0x265/0x280 [ 538.555371][ T4314] should_fail+0xb/0x20 [ 538.555391][ T4314] should_fail_usercopy+0x1a/0x20 [ 538.555415][ T4314] _copy_from_user+0x1c/0xb0 [ 538.555472][ T4314] ___sys_sendmsg+0xc1/0x1d0 [ 538.555517][ T4314] __x64_sys_sendmsg+0xd4/0x160 [ 538.555541][ T4314] x64_sys_call+0x191e/0x3000 [ 538.555616][ T4314] do_syscall_64+0xd2/0x200 [ 538.555637][ T4314] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 538.555729][ T4314] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 538.555766][ T4314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.555820][ T4314] RIP: 0033:0x7f3c104aefc9 [ 538.555905][ T4314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.555969][ T4314] RSP: 002b:00007f3c0ef17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 538.555991][ T4314] RAX: ffffffffffffffda RBX: 00007f3c10705fa0 RCX: 00007f3c104aefc9 [ 538.556007][ T4314] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 538.556022][ T4314] RBP: 00007f3c0ef17090 R08: 0000000000000000 R09: 0000000000000000 [ 538.556102][ T4314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.556114][ T4314] R13: 00007f3c10706038 R14: 00007f3c10705fa0 R15: 00007ffe24c3e018 [ 538.556132][ T4314] [ 538.556537][ T4309] EXT4-fs (loop9): orphan cleanup on readonly fs [ 538.629143][ T4279] loop8: detected capacity change from 0 to 32768 [ 538.730523][ T4309] EXT4-fs error (device loop9): ext4_quota_enable:7136: comm syz.9.8482: inode #218103808: comm syz.9.8482: iget: illegal inode # [ 538.760114][ T4309] EXT4-fs error (device loop9): ext4_quota_enable:7139: comm syz.9.8482: Bad quota inode: 218103808, type: 2 [ 538.771973][ T4309] EXT4-fs warning (device loop9): ext4_enable_quotas:7180: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 538.789537][ T4309] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 538.800537][ T4318] loop7: detected capacity change from 0 to 512 [ 538.808820][ T29] kauditd_printk_skb: 61 callbacks suppressed [ 538.808834][ T29] audit: type=1400 audit(1761902615.131:111367): avc: denied { mounton } for pid=4317 comm="syz.7.8484" path="/551/file0" dev="tmpfs" ino=3003 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 538.838492][ T4318] EXT4-fs: Ignoring removed orlov option [ 538.845246][ T4309] EXT4-fs error (device loop9): ext4_lookup:1791: inode #2: comm syz.9.8482: deleted inode referenced: 12 [ 538.858328][ T4279] loop8: p1 p2 p3 < p5 p6 > [ 538.864141][ T4279] loop8: p2 size 16775168 extends beyond EOD, truncated [ 538.871735][ T4318] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.8484: inode has both inline data and extents flags [ 538.877863][ T4279] loop8: p5 start 4294970168 is beyond EOD, truncated [ 538.893740][ T4318] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.8484: couldn't read orphan inode 15 (err -117) [ 538.922793][ T29] audit: type=1326 audit(1761902615.257:111368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.9.8486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731b99efc9 code=0x7ffc0000 [ 538.946915][ T29] audit: type=1326 audit(1761902615.257:111369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.9.8486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f731b99efc9 code=0x7ffc0000 [ 538.981381][ T4325] loop7: detected capacity change from 0 to 512 [ 539.005785][ T4325] ext4 filesystem being mounted at /551/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.023974][ T29] audit: type=1326 audit(1761902615.352:111370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.9.8486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731b99efc9 code=0x7ffc0000 [ 539.047844][ T29] audit: type=1326 audit(1761902615.352:111371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4323 comm="syz.9.8486" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f731b99efc9 code=0x7ffc0000 [ 539.108180][ T4336] 9pnet_fd: Insufficient options for proto=fd [ 539.116754][ T4339] loop8: detected capacity change from 0 to 164 [ 539.125422][ T4339] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 539.143513][ T4342] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 539.145008][ T4345] loop9: detected capacity change from 0 to 128 [ 539.163390][ T4345] ext4 filesystem being mounted at /35/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 539.206746][ T4349] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 539.247497][ T4349] Symlink component flag not implemented [ 539.253161][ T4349] Symlink component flag not implemented [ 539.293620][ T4349] Symlink component flag not implemented (7) [ 539.299728][ T4349] Symlink component flag not implemented (116) [ 539.544958][ T4370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8502'. [ 539.553997][ T4370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8502'. [ 539.565324][ T4370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8502'. [ 539.574452][ T4370] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8502'. [ 539.605493][ T29] audit: type=1326 audit(1761902615.961:111372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4371 comm="syz.7.8503" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa18fe7efc9 code=0x0 [ 539.646298][ T4374] 9pnet_fd: Insufficient options for proto=fd [ 539.813441][ T4391] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 539.908033][ T29] audit: type=1326 audit(1761902616.286:111373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.1.8512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cfa0efc9 code=0x7ffc0000 [ 539.937633][ T29] audit: type=1326 audit(1761902616.318:111374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.1.8512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f19cfa0efc9 code=0x7ffc0000 [ 539.961346][ T29] audit: type=1326 audit(1761902616.318:111375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.1.8512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cfa0efc9 code=0x7ffc0000 [ 539.984943][ T29] audit: type=1326 audit(1761902616.318:111376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4394 comm="syz.1.8512" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19cfa0efc9 code=0x7ffc0000 [ 540.059913][ T4407] 9pnet_fd: Insufficient options for proto=fd [ 540.096270][ T4412] loop8: detected capacity change from 0 to 2048 [ 540.108969][ T4410] loop5: detected capacity change from 0 to 8192 [ 540.149627][ T4410] loop5: p1 p3 [ 540.153529][ T4410] loop5: p1 start 51314688 is beyond EOD, truncated [ 540.160198][ T4410] loop5: p3 start 65536 is beyond EOD, truncated [ 540.192101][ T4414] loop9: detected capacity change from 0 to 512 [ 540.199116][ T4412] loop8: unable to read partition table [ 540.204781][ T4412] loop8: partition table beyond EOD, truncated [ 540.211050][ T4412] loop_reread_partitions: partition scan of loop8 () failed (rc=-5) [ 540.220735][ T4414] EXT4-fs (loop9): orphan cleanup on readonly fs [ 540.229447][ T4414] EXT4-fs error (device loop9): ext4_quota_enable:7136: comm syz.9.8519: inode #218103808: comm syz.9.8519: iget: illegal inode # [ 540.245072][ T4414] EXT4-fs error (device loop9): ext4_quota_enable:7139: comm syz.9.8519: Bad quota inode: 218103808, type: 2 [ 540.273506][ T4414] EXT4-fs warning (device loop9): ext4_enable_quotas:7180: Failed to enable quota tracking (type=2, err=-117, ino=218103808). Please run e2fsck to fix. [ 540.300504][ T4414] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 540.321575][ T4414] EXT4-fs error (device loop9): ext4_lookup:1791: inode #2: comm syz.9.8519: deleted inode referenced: 12 [ 540.389119][ T4421] netlink: 16 bytes leftover after parsing attributes in process `syz.9.8522'. [ 540.440306][ T4424] loop7: detected capacity change from 0 to 164 [ 540.460305][ T4410] loop5: detected capacity change from 0 to 32768 [ 540.461734][ T4424] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 540.484391][ T4426] loop9: detected capacity change from 0 to 164 [ 540.491596][ T4426] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 540.521226][ T4410] loop5: p1 p2 p3 < p5 p6 > [ 540.526326][ T4410] loop5: p2 size 16775168 extends beyond EOD, truncated [ 540.540962][ T4410] loop5: p5 start 4294970168 is beyond EOD, truncated [ 540.567830][ T4429] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 540.576369][ T4429] Symlink component flag not implemented [ 540.579117][ T4428] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 540.582053][ T4429] Symlink component flag not implemented [ 540.616560][ T4428] Symlink component flag not implemented [ 540.622314][ T4428] Symlink component flag not implemented [ 540.633671][ T4428] Symlink component flag not implemented (7) [ 540.639808][ T4428] Symlink component flag not implemented (116) [ 540.648030][ T4429] Symlink component flag not implemented (7) [ 540.654051][ T4429] Symlink component flag not implemented (116) [ 540.769241][ T4440] 9pnet_fd: Insufficient options for proto=fd [ 540.797421][ T4443] loop5: detected capacity change from 0 to 512 [ 540.804043][ T4443] EXT4-fs: Ignoring removed orlov option [ 540.813119][ T4443] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 540.823606][ T4443] EXT4-fs (loop5): orphan cleanup on readonly fs [ 540.845526][ T4443] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.8529: bg 0: block 248: padding at end of block bitmap is not set [ 540.864151][ T4443] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.8529: Failed to acquire dquot type 1 [ 540.877723][ T4443] EXT4-fs (loop5): 1 truncate cleaned up [ 540.885788][ T4451] loop8: detected capacity change from 0 to 164 [ 540.893837][ T4451] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 540.962391][ T4458] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 540.970850][ T4458] Symlink component flag not implemented [ 540.976501][ T4458] Symlink component flag not implemented [ 540.982984][ T4458] Symlink component flag not implemented (7) [ 540.989095][ T4458] Symlink component flag not implemented (116) [ 541.257121][ T4480] loop7: detected capacity change from 0 to 512 [ 541.264826][ T4480] EXT4-fs (loop7): orphan cleanup on readonly fs [ 541.271450][ T4480] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.8544: bad orphan inode 13 [ 541.300968][ T4480] ext4_test_bit(bit=12, block=18) = 1 [ 541.306425][ T4480] is_bad_inode(inode)=0 [ 541.310677][ T4480] NEXT_ORPHAN(inode)=2130706432 [ 541.315586][ T4480] max_ino=32 [ 541.318826][ T4480] i_nlink=1 [ 541.326330][ T4480] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 541.359877][ T4480] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.8544: bg 0: block 248: padding at end of block bitmap is not set [ 541.374836][ T4480] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.8544: Failed to acquire dquot type 1 [ 541.386634][ T4480] EXT4-fs warning (device loop7): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 541.398101][ T4486] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8544'. [ 541.410393][ T4486] netlink: 28 bytes leftover after parsing attributes in process `syz.7.8544'. [ 541.441625][ T4490] IPv6: NLM_F_CREATE should be specified when creating new route [ 541.464843][ T4492] loop9: detected capacity change from 0 to 128 [ 541.474711][ T4492] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 541.586739][ T4505] loop5: detected capacity change from 0 to 1024 [ 541.593955][ T4505] EXT4-fs: Ignoring removed oldalloc option [ 541.599987][ T4505] EXT4-fs: Ignoring removed bh option [ 541.609343][ T4509] loop7: detected capacity change from 0 to 164 [ 541.610423][ T4508] loop9: detected capacity change from 0 to 512 [ 541.622569][ T4509] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 541.631234][ T4508] EXT4-fs: Ignoring removed orlov option [ 541.637831][ T4508] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 541.647576][ T4508] EXT4-fs (loop9): orphan cleanup on readonly fs [ 541.658490][ T4508] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.8556: bg 0: block 248: padding at end of block bitmap is not set [ 541.691736][ T4508] EXT4-fs error (device loop9): ext4_acquire_dquot:6945: comm syz.9.8556: Failed to acquire dquot type 1 [ 541.704971][ T4508] EXT4-fs (loop9): 1 truncate cleaned up [ 541.807235][ T4517] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 541.824989][ T4517] Symlink component flag not implemented [ 541.830719][ T4517] Symlink component flag not implemented [ 541.875238][ T4517] Symlink component flag not implemented (7) [ 541.881257][ T4517] Symlink component flag not implemented (116) [ 541.960063][ T4540] loop9: detected capacity change from 0 to 164 [ 541.967236][ T4540] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 542.032776][ T4551] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 542.056346][ T4551] Symlink component flag not implemented [ 542.062108][ T4551] Symlink component flag not implemented [ 542.068007][ T4551] Symlink component flag not implemented (7) [ 542.074038][ T4551] Symlink component flag not implemented (116) [ 542.084899][ T4556] loop8: detected capacity change from 0 to 128 [ 542.092130][ T4556] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 542.104412][ T4554] infiniband syz0: set down [ 542.104536][ T4556] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 542.108990][ T4554] infiniband syz0: added bond_slave_0 [ 542.115879][ T4554] RDS/IB: syz0: added [ 542.128304][ T4554] smc: adding ib device syz0 with port count 1 [ 542.131759][ T412] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 542.134574][ T4554] smc: ib device syz0 port 1 has no pnetid [ 542.143852][ T4559] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8573'. [ 542.425475][ T4575] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8581'. [ 542.435011][ T4573] loop8: detected capacity change from 0 to 512 [ 542.442168][ T4573] EXT4-fs: Ignoring removed orlov option [ 542.449095][ T4573] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 542.458998][ T4573] EXT4-fs (loop8): orphan cleanup on readonly fs [ 542.466010][ T4573] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.8580: bg 0: block 248: padding at end of block bitmap is not set [ 542.481756][ T4573] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.8580: Failed to acquire dquot type 1 [ 542.493552][ T4573] EXT4-fs (loop8): 1 truncate cleaned up [ 542.576180][ T4585] loop8: detected capacity change from 0 to 1024 [ 542.583453][ T4585] EXT4-fs: Ignoring removed oldalloc option [ 542.589489][ T4585] EXT4-fs: Ignoring removed bh option [ 542.654715][ T4593] ================================================================== [ 542.662821][ T4593] BUG: KCSAN: data-race in __writeback_single_inode / xas_set_mark [ 542.670707][ T4593] [ 542.673021][ T4593] write to 0xffff88811e99b6ac of 4 bytes by task 4585 on cpu 1: [ 542.680623][ T4593] xas_set_mark+0x12b/0x140 [ 542.685102][ T4593] __folio_start_writeback+0x155/0x390 [ 542.690548][ T4593] ext4_bio_write_folio+0x5ad/0x9f0 [ 542.695735][ T4593] mpage_process_page_bufs+0x4a1/0x620 [ 542.701198][ T4593] mpage_prepare_extent_to_map+0x786/0xc00 [ 542.707092][ T4593] ext4_do_writepages+0xa05/0x2750 [ 542.712205][ T4593] ext4_writepages+0x176/0x300 [ 542.716979][ T4593] do_writepages+0x1c6/0x310 [ 542.721561][ T4593] file_write_and_wait_range+0x156/0x2c0 [ 542.727196][ T4593] generic_buffers_fsync_noflush+0x45/0x120 [ 542.733086][ T4593] ext4_sync_file+0x1ab/0x690 [ 542.737755][ T4593] vfs_fsync_range+0x10d/0x130 [ 542.742511][ T4593] ext4_buffered_write_iter+0x34f/0x3c0 [ 542.748046][ T4593] ext4_file_write_iter+0x387/0xf60 [ 542.753229][ T4593] iter_file_splice_write+0x666/0xa60 [ 542.758583][ T4593] direct_splice_actor+0x156/0x2a0 [ 542.763676][ T4593] splice_direct_to_actor+0x312/0x680 [ 542.769127][ T4593] do_splice_direct+0xda/0x150 [ 542.773918][ T4593] do_sendfile+0x380/0x650 [ 542.778343][ T4593] __x64_sys_sendfile64+0x105/0x150 [ 542.783529][ T4593] x64_sys_call+0x2bb4/0x3000 [ 542.788195][ T4593] do_syscall_64+0xd2/0x200 [ 542.792693][ T4593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.798658][ T4593] [ 542.800970][ T4593] read to 0xffff88811e99b6ac of 4 bytes by task 4593 on cpu 0: [ 542.808488][ T4593] __writeback_single_inode+0x1f9/0x7c0 [ 542.814028][ T4593] writeback_single_inode+0x16d/0x3f0 [ 542.819385][ T4593] sync_inode_metadata+0x5b/0x90 [ 542.824393][ T4593] generic_buffers_fsync_noflush+0xd9/0x120 [ 542.830269][ T4593] ext4_sync_file+0x1ab/0x690 [ 542.834936][ T4593] vfs_fsync_range+0x10d/0x130 [ 542.839683][ T4593] ext4_buffered_write_iter+0x34f/0x3c0 [ 542.845212][ T4593] ext4_file_write_iter+0x387/0xf60 [ 542.850401][ T4593] iter_file_splice_write+0x666/0xa60 [ 542.855764][ T4593] direct_splice_actor+0x156/0x2a0 [ 542.860885][ T4593] splice_direct_to_actor+0x312/0x680 [ 542.866243][ T4593] do_splice_direct+0xda/0x150 [ 542.870986][ T4593] do_sendfile+0x380/0x650 [ 542.875392][ T4593] __x64_sys_sendfile64+0x105/0x150 [ 542.880595][ T4593] x64_sys_call+0x2bb4/0x3000 [ 542.885271][ T4593] do_syscall_64+0xd2/0x200 [ 542.889753][ T4593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.895632][ T4593] [ 542.897933][ T4593] value changed: 0x0a000021 -> 0x04000021 [ 542.904145][ T4593] [ 542.906532][ T4593] Reported by Kernel Concurrency Sanitizer on: [ 542.912665][ T4593] CPU: 0 UID: 0 PID: 4593 Comm: syz.8.8585 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 542.924037][ T4593] Tainted: [W]=WARN [ 542.927859][ T4593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 542.937899][ T4593] ==================================================================