last executing test programs: 7m59.49561651s ago: executing program 32 (id=409): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r3, 0x227b, &(0x7f00000001c0)=0x2001) r4 = fcntl$dupfd(r3, 0x0, r3) readv(r4, &(0x7f0000000840)=[{&(0x7f0000000200)=""/243, 0xf3}], 0x1) write$sndseq(r4, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x8, {0x1}, {0x0, 0x4}, @ext={0x0, 0x0}}, {0x33, 0x0, 0xff, 0x3, @time={0xe, 0x5}, {0x0, 0x31}, {0x8, 0xfc}, @result={0x0, 0x4}}], 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_usbip_server_init(0x5) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7020000111e6ca5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r6}, 0x10) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r9 = dup(r8) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[{@msize={'msize', 0x3d, 0x1000}}], [], 0x6b}}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r10, 0x0, 0x8000000000000}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) readahead(0xffffffffffffffff, 0x0, 0x101) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x5, 0xfffffffa, 0x1, 0xb3a}, 0xb6, 0x1, 0xffff, 0x2, 0x508, 0x10, 0x1e, 0x1d, 0x5, 0xff, {0x6, 0x9c22, 0x9, 0x4, 0x4, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40008d1}, 0x0) 5m6.934987036s ago: executing program 33 (id=1682): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'gre0\x00', 0x0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r4 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) r5 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r5, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r5, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) socket$key(0xf, 0x3, 0x2) io_uring_setup(0x25f1, &(0x7f0000000300)={0x0, 0x2603, 0x40, 0x3, 0x3d7}) r6 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x0, 0x2}, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r7, 0x4004550d, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r8}, 0x10) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r7, 0x8010671f, &(0x7f0000000440)={&(0x7f00000003c0)=""/7, 0x7}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x2c, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}]}, 0x2c}}, 0x4048000) 5m5.481964394s ago: executing program 34 (id=1690): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r0}, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'gre0\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000001c0)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) r4 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r4, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r4, 0x0) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) socket$key(0xf, 0x3, 0x2) io_uring_setup(0x25f1, &(0x7f0000000300)={0x0, 0x2603, 0x40, 0x3, 0x3d7}) r5 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$usbfs(&(0x7f0000002000), 0xd, 0x20041) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000000)={0x80, 0x0, 0x0, 0x0, 0x2}, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4004550d, 0x0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@nolazytime}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noquota}, {@nodioread_nolock}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x3, 0x473, &(0x7f0000000640)="$eJzs3M1vG0UbAPBn7Tht+pW8Vd9CP4AgQJQCSZOW0gMXEEgcQEKCQzmGJK1K0wY1QSJVBQGhckSVOHFBHJH4CzjBBcENiQsHuKNKFeqlhZPRZncT2zhpmjpepf79pHVndtedeTwz9uxO7AB61nD6kETsiojfI2IwyzafMJz9c/vmlcm/b16ZTKJef/OvpC89fOvmlcXi1OJ5O4tMX0Tl0yQOtSl3buHy+YmZmelLeX50/sJ7o3MLl589d2Hi7PTZ6Yvjp06dOD72/Mnx5zoSZxrXrYMfzh4+8Orb116fPH3tnZ+/TYr4szgmO1LQiuG1Dj5Rr3e4uHLtbkhnPYOtoJoN06gtjf/BqMZK4w3GK5+UWjlgU9Xr9fr+5Vyt9fBiHbiPJVF2DYByFB/06fVvsXVx+lG6Gy9mF0Bp3LfzLTvSF5X8nFrL9W0nDUfE6cV/vkq32Jz7EAAATb5P5z/PtJv/VWJ/w3l78jWUoYj4X0TsjYiTEbEvIv4fsXTuAxHx4F2W37pIkpU/0LCncn2jsa1HOv97IV/bap7/FbO/GKrmud1L8deSM+dmpo/lr8mRqG1L82NrlPHDy79+vtqxxvlfuqXlF3PBvB7X+7Y1P2dqYn7iXmJudOPjiIN97eJPllcCkog4EBEHN1jGuaPfHF7t2J3jX0MH1pnqX0c8mbX/YrTEX0jWXp8c3R4z08dGi17Rxi9X31it/HuKvwPS9t/Rtv8vxz+UNK7Xzt3N//7lU+nj1T8+W/WaZqP9vz95q2nfBxPz85fGIvqT17JKN+4fbzlvfOX8NP4jj7Uf/3tj5ZU4FBFpJ34oIh6OiEfyuj/62547vgo/vfT4uy27qivxD5Te/lPrb//6YETRERb6I08s72mfqJ7/8bumQodWko3tv2fV9j+xlDqS71nP+9966nW3vRkAAAC2qkpE7IqkMrKcrlRGRrK/4d8XOyozs3PzT5+Zff/iVPYdgaGoVYo7XYMN90PH8sv6Ij/ekj+e3zf+ojqwlB+ZnJ2ZKjt46HE7Vxn/qT+zu5Tbyq0hsKl8Xwt6l/EPvcv4h9713/G/vTlb6V5dgO5q8/k/UEY9gO5rHv/Zj4B8tJ4n7tqc+gDd0/L5Xy2rHkD3uf8HvWsj4997Btwf+tb6yeb+rlYF6J65gbjzl+QltlKiWK3djCJqaW85GhELl6NSeqQSm5go+50JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgM/4NAAD//55o4Oc=") ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r6, 0x8010671f, &(0x7f0000000440)={&(0x7f00000003c0)=""/7, 0x7}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) sendmsg$nl_route_sched(r1, 0x0, 0x4048000) 2m4.724125542s ago: executing program 5 (id=4286): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$pppl2tp(r1, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r1, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)}], 0x1}}], 0x1, 0x8040) 2m4.677379315s ago: executing program 5 (id=4287): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1, 0x0, 0x0, 0x8040}], 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {0x0}], 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000b0000000000000000000000000000000000000003f0b571be4b285837898cc65dba", @ANYRES32=0x0], 0x30}], 0x1, 0x0) 2m4.676943185s ago: executing program 5 (id=4288): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x9, 0x4, 0x8, 0x10}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r2) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000001000000000300000018000180100001006574683a73797a5f74756e"], 0x2c}}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b000000", 0x18}, {&(0x7f00000000c0)="bc588bb49cff7d081d465efc09c57bbfb7b83fa6366c", 0x16}], 0x2}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) 2m4.303396895s ago: executing program 5 (id=4291): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x12800, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") setresuid(0xee01, 0x0, 0xffffffffffffffff) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r1, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000003, 0x12, r2, 0x0) perf_event_open(&(0x7f00000002c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0xb, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, 0x0, 0x80000}, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x2008002, &(0x7f0000000080)={[{@errors_remount}]}, 0x4, 0x54e, &(0x7f0000000fc0)="$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") quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0xfffffffffffffffe, 0xffff, 0x0, 0x7}) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xb}, 0x0, 0x0, 0x0, 0x9, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) syz_clone(0x40100000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r6, 0x0, 0x3}, 0x18) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x5, &(0x7f0000000100)) 2m3.597011272s ago: executing program 5 (id=4304): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000ac0)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x1}, 0x18) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000340)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x2c}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1c, 0x14, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRESHEX=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x1000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x20280, 0x0) ioctl$IMADDTIMER(r6, 0x80044940, &(0x7f0000000080)=0x14) unshare(0x62040200) close(r6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) r7 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r7, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10) close(r7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r8, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x400000000008}) fcntl$lock(r8, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x4, 0x1fd}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00', 0x2}}, 0x5, 0x12, 0x40, 0x3}, 0x9c) r9 = syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r12, &(0x7f00000001c0)=ANY=[], 0x118) sendmsg$NFT_BATCH(r12, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000002900)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWFLOWTABLE={0x28, 0x16, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSET={0x10c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_USERDATA={0xe5, 0xd, 0x1, 0x0, "b5c64ddf35af5e49a556c3abf0f9c7d5eaa777dc0ac9ea471a338eb0beec8c2c06dfa909ea67e4515f2cbfd63f0d278fac51c313c13d0ec21cbb18fa13588fd3ba3de095ad820b0f95406e395b17de2b24e768ca0f34a8e9b1b5133e53b2d5d1d0698debda4bc717df28dbf56b0788683a7e9581bf20294ada2d346e1ea026e37da78b6812c13a8c8d5bc8a2a3da6e90381c881255a31c0b5951cd1f472c120b7e97148a532ec467bfed6da3671bb1a6ea33ff6d9fb33ea8ce35ff6932b5cffd9d45e5392e80aa0791b9ede194749f9038724c322716c8a68ea9b5eed58287aec6"}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x3d}]}, @NFT_MSG_DELRULE={0x344, 0x8, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0x22c, 0x4, 0x0, 0x1, [{0x1d0, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x1c0, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0xb2, 0x3, "3e674d666857fa96b42d74b944b77264f3fe17f0af026ffc2854c57f10c5c5ca550421ac124862b30ef567e0d9deaa92276950f6f058e436fa47665e69b647b56fcbd8001cba297ebaf49056d71e01af99a664a444bec8139f39048420b2c25f43a12d3e4ca84df7c71cb078e20396b035713597c95563b9ad821c342abfad48a1dc4b0da432c20d0642bf2e746c22e63cadca279e0916295689dea200effd8882c3e39c642f954725f35f1bd6fe"}, @NFTA_MATCH_NAME={0x9, 0x1, 'dscp\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_INFO={0xe2, 0x3, "d2a6817b9e15b079710bed319219fcc9a0dc898efe947c42cc405ce02b317e46e374ab4646c20082ae9456d154cc4454052b74cc0b8c0765dec84262942ac2f8f519bb51449b1e2dba2f7319a0deb8bafbceb103be6229ca15b00888dfce3240613a470a170746a705ef81fd62f3b2cce1cdd7f5fe52616c93164aa150b707ddc5e0f9171f6b6eb1f41a0ebc2009683aa080993f3aac62a07ac651d91e4bbf134779aa8c9f984b5af6e43325d40305c1b109173bdcb4157037044c2621ec83296dde44b391a7166c702c6a4e3eb938be514456f3ad780c98635f020e9166"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x1c, 0x1, 0x0, 0x1, @masq={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x3c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_NG_TYPE={0x8}]}}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x11, 0x7, 0x1, 0x0, "abf5033166e77333da0d911029"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0xba, 0x7, 0x1, 0x0, "2bcb70c6bdfa8756cea3f87a2ff368201be43138b6cc1c62b0c249e8a6b5f35eca6abcaafe7bd825b1d4fa6bca49d21bf54a16afde4e8a3d791ac6c27baed80e75d5277420bd0a9239db0b6dd5ada20862708160b1a838ca1346c9316fefd23a6ed00e5be574d62affb0787b68508c8212c7844beb2993234d74f3c0b79e5e162ee3b892c5a75973bf76a24a286b61410666913b8810d9879aa7905f28125b402343e520a0fab3efdbc2ee81e78bae1d08eb9ef22d77"}]}, @NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x1}, @NFTA_SET_GC_INTERVAL={0x8}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x184, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_USERDATA={0x4a, 0x7, 0x1, 0x0, "ccedba1885ff5cc3ea0a53ffaefc9a63b9ecb90df12da5077facef6a1caa3eaf0b95b7ff965667025a14dee2e61d8a0390e4e39529254533b9754ba88110428328c25a7efc68"}, @NFTA_RULE_USERDATA={0xf6, 0x7, 0x1, 0x0, "3b2d315304342fe97998db09c8b3581c66fcba1714ab6cd7adbc912cb9a7525fb5cb875b4e06d07fdf18c403cc96f7a178f9a46668a0cdee7fdb920403e0f95efc0b9cbcc916559dbb18c0093277f1b925939ebe2792141c2d02e265d6fa07ce03590df70a75f612cffa9ed5bb5d88fb2e6e50094f0932040964cb0565e16e01b3f59c4ecf2aa0c06c0155a10990fbd90ae1c42430383eb2c0dd6fcc69584239faf90ad1477b94b600fdfcd0cca439d67058bc410fbbe8e2b83dde603cf2319df194890555e9e06756f5dbbdbe651fa259f19d9420d32d40cb3b3717a8a56feb6f54f543dff0f98c832e0e1d3b6b76299748"}]}, @NFT_MSG_NEWSETELEM={0x1724, 0xc, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1708, 0x3, 0x0, 0x1, [{0x1b0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_KEY_END={0x13c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x60, 0x1, "47d0c6f3f9f71427d757ee34562a6d2aa0afcf6fc4db1219f4cf71a14499a9da6a25c71a4805b892215c3672d0cb986bdcab17ae8a2cc8bac838859bc87d3c375b230a13bba73f7b77d6258d9966e5313dc689cf1c50858f71401fe4"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VALUE={0x87, 0x1, "fe0c6005fed984ebc8b47cf797db88e5c7ab743ef5dd2af7d2a1c7ee3b4777fe12661f718a605c2d9d03a294fdbf3e915fd2903d286d375c43d8f8147079fe27f8220218ae7445085fc9bf84a60af4dcae16aa19c5dfafa769e767dc88c68a4f5e1781ec35d11b73b571bb85926498e92045d3691a192354dc2d022c804617b050c91e"}]}, @NFTA_SET_ELEM_USERDATA={0x61, 0x6, 0x1, 0x0, "479804c5a4c390ebddb72f7af74f70ce77eb6964d0a7307e77ed4e316d8c8ccd5a4ffc684a923ed7178541e3e19c3e8211c59ae71ea70e3c5eecf0d5de930298c50edf6c7051f5bb14aa413e96d0f5f52a7adc98d82d8b74ff0c643c5c"}]}, {0x118, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xcc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc7, 0x1, "412a25526a55fb7b5b5aa8f17a0be56adcd8d9e06c1b6756ca858453ad6996f9b28ecc8dd8ad2fd68d48c23778dd96371625f0dd720f69cffe78fb0e37ec15c437cc855a44b24fe6a1f6cf3e33cd2f5a0a29f0ccde4efe50e1551dd3e0c17ecd179ff9fc5edf58d34ac018e62e53be35ca1ffc5e2b47cd82520e7e6c35bd57acfab3bb0be51227708118dd0871070e592ac68003e264a5a8e176c95f2493a9becbe11091b6bce38e50a72f32793823e807f08bc1c81564c86e00903b289665d4a25b79"}]}, @NFTA_SET_ELEM_USERDATA={0x22, 0x6, 0x1, 0x0, "04e01bb12f1c4d066358ca177e2c097ade810d2a845bb18aabb123f1d79a"}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @notrack={{0xc}, @void}}]}, {0x1280, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x1268, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe3, 0x1, "99d9341eb01262db8b8bab7acd4796d05ab2a4a9a19af0ee0bde6c831178b06f1bf71965327758bd41028ce2c699037232107b392d8c4b8d09a02ac76b74432fa8543e4e463b09945816d4df617dd9df9a02b8df5376f4f6bae0b9126b8c242330e92c9cc0c34c678e448064749dddc01db4d998b65e9fe2d16501e0eb6e469a7545b66d9f791852dea3d0d999cc78d207eec62baad0155dc7d86bfebdda4c3f18d28f70d8f39e51dbef18cc1711285e67814758cc3457afc0947b55a6e8c6341d036f8d5c1e7a87a9707b67484b1b2de5fb18234e1a9269f24927b77b5ec6"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x94, 0x1, "5ffb38b6c0f3b06f06a6c28a3e85ca09fd4314fba09a6b18ea1e3d52e505f3e23f728fe51986bb045c3f04246f285c55c2370749fe856b4465e9f25635743aa08c97e2460964fbd2b9e67f2899852d172eb35670eb239b58330fe76fd94c91856d2b2323cc48297b49e36aba5b470e1d7933d3b6368cbc7c73ab8af38455815ff2fa10efc8725cd01f1e3b76f4806ea6"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "821d1120572d8e47b50bf179dd665f9181d771dd7881844498680a26bb88efc61e9272064e93f4ced678ed6d7cf94d9796eb4013150b931e32d51bf2cfe4c567578f4f636d282c2f72e3f29a9bc1460f5d904cf98607c61902cda4dd29908fe2fc979e69a0cae042217df6331f5d1a2f0238cb3af4f95385b275ad4194d2f014b9c36f8316771ebc03008faeeb3d881a90f23ac845624ee4ca33ceb5e24312202e779f5a6a865a28fa58ffe1361cff6a4dea24041008105ef4a17fb24f1c6bc8b055937234170dec33e4f9ea61039318e4212399c8a4b3661a44b56969aa9161c3006480113f3fe7b3b2dc87f9c9629e4e6441ae313634afbc0c2c11326df8b95e698d0bbc9a12fc2849c52e0ac12b3f96fe73b8081d62ac4b25984d9857ee0801fd3fba2993ae6940b08b59404df2e10f464aed641527a8178a85cc3587829f8ab021cc1256395e258e6c7b15d5d5ad17628963eed5c386f1d0735196d47807020dff529f4992049ecdd7a2213e8c2f7d68b08987de1cc547156035a6ae4333b5bd3d287af81ec2ae0eca6f789b1cee992508d46c08cd54303ea01b46cd84917e8bc5f3aec58be76af84afd6838b4fe44cad0d26a51f533748bdd6c0c5a40cbb276666ee77bc36ba602bef9e522d3a2556dd1071dbe0b9242b543ece572f25c8b40f242b8031aa7e688ebefe731c13421bced11fb9f36df0641720490a93794b0e6e8259b5f41a892ae98fc166cd9cde85b00c7588b191d5e5c4c29df51404b824357d1d0f9f2f1f415152a8c1c771e93e942062608589a1a1dda405e17c3eb24009d34e2fcffa46450c9547313f6d35f7e5b9280a7fd3acc8764d6f794d757cb2882e1907d1c7891e34a51b8f565f9de74ea78d3248e2a6ca9f3922a1004abc2ef6efe1c7cacf33e3483dc2ff445d91ef6d052330d175098c9019a543d03737ee88876fd99383f3723d83bdc8cdce122cb854cfb75de8eb50fd6748ef71bb095e233709d4a9317b16bbffcca278942037eb15a673b0075e0534352cbd5368c65c4f0e87e3c7b0f92d1632e2a6d8c824fc50838a406e8e5dbb53dcd32f952f0abc017589855c730370623a9208f14847ed4eaf92eabbd354a1261e718813489227ccd34df65784d015747ad2d736a246da5dc207683600c35a97f7fd41d7d3b1ff869544665f00c4cf7a4d409c1b5124f65afcf6b16abbcb19162fbc16ccd543ded89172d92a3258392b66f9823d46e563fe18bfef329689e2930e3a9a6fd67f71e2e140b828dcedbf80233e01df213f10cdcd3134425c47dc301b864b193d08a3fc3e3a86c6b3cde0544177029eb1bd5084b774bc01f2a10aa756e0f5493dfef211d25968e797d5b8db1f7b21a279919456bba4fb910db2d11a165ab0d5a3f0040a62b5385feae83abc2bceee7c4d0b26e985df14c90ab4d32eca9fcaefe0a0e15b8b7fd30ee53dd26b2a606e6f796ba7b9382aa8e883cbc15723003605bc7fbe442d275f1166338080b460aeb238af6f483ebf3eaf7ba0244432c1f1fd0f56560e79423902b4694219966b195519ef80c0a65f37d44f74ebefb357d405565f8388b4a2eadbf3d6b498d78679b3ab6b03db4e1a347af0181d0bb96c1d86f56b1ae11b284f0e41e7eb453bcff21c491503a25551d641ca8ebb638614ba40816148f41bfcf13e88a14461775cc5a84f34fe6d2438aa5a737c442dc3cab4881b74457e9dcf46839b00d5afc2d63754e7254da99f14924b8e6274e1fdc08b7c5ea8887448737fcad4e10b0eed059f0e77936d192da386ad59678854517f9f25b42b83be495f6298bc7cf256ec936d99020d69362b42cdcbea362b39a409d22978d78eeeb31cc3ea539a77c113d578da35e45ac3faa0d7566f7b77c5bd71c4178894ee7dc02276ef9898b66736e9aaba220ba6d988c9b0c7607fbd2efcb600386fc5f1064a2babaae7cfd72671cc592c5d43ae332b9f5ebe20950cc31a5f99c245c337d7293471b94b159c97de80a2bfddcfb8ece8736e5fd1ac8fd3328d97c5ce389ba8e6cba0d71689f908a412300b6587cc35eacd67bcf9a1b7642d9e19aafc2e0d9fdffd52dcb2bc97ab1745f80b6d7f625e3e8cf1ed0d7da3e3da5d361dd469083eea574d7f294de298200f9facab6f7655b57cb5cc02a1111695281edc172b8f9b43b47a3a7b49bbc9cb541e50d314b04b22f5615539c7244947d1dcab98042f4b8f842a659193114ab4d5ac5bbb0d3e3a93beadd19d24b48e1bc4ab1cda39eecd792300c24eaa27a384abfe1112af8e744cd4eb81a46bc7710701d99b6b135732595bd895f542dad78f5b258994177f3920e3043f66b916fa26b7c2059c0b87db5a7aa0c4f1b125b133c911d261b50b769657d3ed697f59df69d08da21633ce323f118612b923c6163e4be2b1b54f0931f81e9ff04c0279ac508827965ae90070e8d5995b93ae3a8eea9741b515fff95bba146852f4dfb8510724dced6688507d768d9b43c4e8b2efa3dc698f22d80b6d80b0a907fde4a168bcda40211df4638252b6bb4e6d471298635ac06e111588b3d3ee1eedb6bf777f848fec29c528934e0a6988fc661f66e71f8f36c3c0d5adce5021dfa8c806851f1b3041faf4438176be037972c2a8339183bad322a047431c60ffd06a39c6fe891323c1b24ca65dc7d3af7da80e96c2a414749aeba8d44972751717b2dc207c8ee161849e5122f63245e4dd57d9de7a3acf9f9207f9e6cf727c31d100307976e332f7d09a775022db991d376c861fe690b9049abfadbd1d470befe8e6927642b2cc4e844277b655535da3b977c01328fb68b9a484da092c3c004793c9f0906154ee846997884dd712802bddb368916796e1a9e4baad2f6538e0d4dd6cf044bbf57d4b9237b7ce80f2293197cf91f6ed558afce5b5a8ea3a5e5fba63a4f014bb40368d05bc8c2ea568a126cac1aa5e6a9ec57c8b49a92776c1db0c56867a19f3414455ad0b2cd9149825ad9108f6baaeb51ebaecfd6a6a9936f373cf8c23d3cec8b9a286fa4e3fe296d0eb3a4ba3f590c9ed2174a4c6fce170cd3504b76f22d01a85e11022efd81fd9069f8cb955ed6b31648dbd3fab8f5d89e0f3c66a8c8e6c960f7aac6c31d8a448a57cf42faa681cfb8f3108e339f5c47fb084aedbd85d90ed9282a005c304ff66a2d475de296d5dd21df1c81859e6ff764651e32030d71d4fa33abf309061d476b6a10c857b2641951e0066db4c93b47d7a64193732c260c1776f5bfaee7b51945a66f78680b65afa41500d5786c0f08900b931d3c20ba34dddb28340aeb95b1323f905f7433aa395e778421bbc857a5f7d1989bf9152af71c39269f1c20994fd4f66401b6f2d09a71dadd4dfd338469558dea59eeda8236b9f6edbfae1ddfcebedaec23cd3467c22238a00980fc6e3b674efc8e10b1b751549c95b39dd5a4aebea46317ac6d619ff99bcb4e1089d966ffad64854bfeafc8661a688a1732d061b8d6a768912c02fe040d2ad5ca384f5154875e73df6a8e1202f50e3558987cd982f3e2cad729af1a5523d6e48da1c77648dca87420ea5fc3f339280194b4029456b13b9bd0eab01ecdf4532a9175fe440a897b14cfef209849cee9ade2b7f7f4d8aa1d0af47195329d6121f09b7fbb25d84435d9a0cd3692748c592751ddc145e2cca30f1f6fb071bf772476d49cae56b5ab7c30687b48f922a410fca598397fa8b4adce240f8f9812ba85d1711373285d21cc330602b2276e2bfe59c9e642a6fd6e09e4785dafdbe58751474d51c2c4ca65143b2518e86a2bf29369cc6b52f94ed4fb1634f75aa3a91d502f461542c15e830dcab94ba275e4546b7e1ca1d25cc1d9bdf4f0f6e900b315ea3e31c1c53f98f5cf6aa6cd188d992d7dceb8c861bc5f072c18b238762ce519405aa426b089add23e59bd052b5879672605e10e9e57e040a73ed2f69d750bcf0d22ba898da1a39218e464b6b3111678ba17481cba889cdacb76ba51bfd88b5a5d1d4d3ffff2fd2298da8fce806f5ac7617e20ea7525531fa2176f75aa5771900edec6c0d425ab01ffa61d9143aba46b6b2d7cf1e31ac1c674d3e2cd959ad92811c5c6e0df1126ea4720fa4b1ca60f077a33b8262db9cfcd9a353f6cb2563c6e0176c5d8eed3b2908c460532918cb60dbb5c32e303f4045bc4896ed05247e2b0144f3123114acae66ff42c5eee77ddd0bc6d50e06416b7c385c4bd89e51350c2a169b1a00b28e9ac32acce732ca2f7a1d4995c1090841a84189c9f0e903bc53937fecb2603c90b5c963dca698acbc87accdd3048d56f2d10eaeac71ea424f344b6368ebb759e0544c5f23c81bf048f745925558beb45774afaa91167b5b71f404d854f986e0e10fa4daae04864c1ce998fb6b6ca1881e5e0ed6f043fe8d69331abef1fe861bd01fb94c201ce389e909a92a293c8542bd7e79dcf91ceaf119ff896fda37b36eea33dda44c30266de68c3d6f47dbdd5b8bc43f43c92907db90731f815b3744c05fd04a63a0275ff26e296965253861dd19f559fabb5b5a35104da848ff8e139b8a0808b2d04b6c975ebf3acbae76ba3b9fe78b49404bbf7013162a12d80c308c23784f68cc76fb1543f4e1b6a4ff3460896f290aa097d4e112949e822ea1ed55ae92fbf3db58778bb2e59a3036a1e1f529d0673ca34250d33e919aa13f2720a34f23bdba336699489795fc2d2d761173677c338b6e8268272197ab28be61bcb833b47b5a17629f54ee59c0e064eb155ce153c1300e3577549da0ef434dd6653c6542439aa752f98623db9368dfebd4041fea93a67b99f44446d9dbd4c2c206af8bdefcb028544dfc58a5a10df1a5d03d3c96eb3959682dbf139c6e024337cb0d3db541d840a1200d88069af18ff299a9f259f1b16b0adcd70b6f1755d1328acc8d29efcbd3df96048bc6f080180dcfbfb7e15546efb9a50a39dfdb9729ac77cc9a44698afe021620608ab965a54ae7dd78fd2ba35f879c6eec340c5e0433ec7f898233895dd9b0a041fe4a51b05ee13d9b6aeb82e0d08ce5b6b42a8d4267b68ea380dfb9f29239cea03a686faf35788c2f778ff982d1b7de44b1ac87472e28901e3a970072915c87a13ee130e9c779fe50853e354af0765bb881c9bda2d527b602bac7add696d233dc4a7ec257db3d581d63e0e00c819548ba6f3efc449745c4586c39c76e978a3d4b8c7c313d71766e243b898dc693bfcfe06d7df5f77886b14cd161994ddfa44aa8bc97d96ee4cfd95b3c8c421c4f3e993092c59ce0061e69c9bba621de4e94b5d0b48930826675383af6f6e8d8bec0aff41526cab7cb7ca9e38595a17716178b96674f136307080380c98832b405dda6a3700c149cea0b37bdc350cbcabf7a0a98459931967600f664e38cfed4b80ec0fdfa3749efc3fa6b45941dbbde5d77dba4e18fc903fca356762eda2005b2024cd4da5d306befb19c047ee04c608de6fbc3366841868b9ea20f3735379857726f2c3fc10fe2d71d28914c89198dc28c293142b2005f84da418679e76ae0276a00d566fbade9787e7c8bcb2e1446a5ca3cdea69c6c72660abd308bf79849c6beabd4e6b52a92ea39ba129f8590f065e89e19b15de2d11cd578151e116fceb52441fb980fd5afd411252baec723a515c55264d3fb9578c40a2e545d5211bbc292db8fbc995bf29905f11737b71f3d26ab2945951328708808a940debeef09a4c53b280479825b3e0435b8d2a1d8d3e41355bd3e719c072693fd91bf74bbc6a7868579afab6a6411329e2054af50ce6abc9a87fe7a4f47af8"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x60, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x5c, 0x7, 0x0, 0x1, @redir={{0xa}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x31}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5b}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}}}]}, {0xa0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x9c, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, {0x58, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}]}, {0xbc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_KEY={0x80, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x10, 0x1, "6a4705963d46a46a9f3e40b8"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x40}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x200}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x1dfc}, 0x1, 0x0, 0x0, 0x10}, 0x40) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r12, 0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x40, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}) io_uring_enter(r9, 0x92c, 0x59f0, 0x44, 0x0, 0x0) 2m3.296376667s ago: executing program 5 (id=4310): r0 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x3352, 0x1, 0x3, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r9, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r7], 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010008000036fb1fd8d001"], 0x4b}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0xe, 0x2004, @fd_index=0x5, 0x7, 0x2, 0x72, 0x1a, 0x1, {0x3}}) 2m3.268539909s ago: executing program 35 (id=4310): r0 = syz_io_uring_setup(0x10b, &(0x7f0000000140)={0x0, 0x3352, 0x1, 0x3, 0x800}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000540)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000000)=0x930d, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f80)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r9, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r5, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r7], 0x4) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r10}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010008000036fb1fd8d001"], 0x4b}}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0xe, 0x2004, @fd_index=0x5, 0x7, 0x2, 0x72, 0x1a, 0x1, {0x3}}) 1m36.8424743s ago: executing program 8 (id=4742): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000680)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) 1m36.812293482s ago: executing program 8 (id=4743): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x3b52, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x5, 0x1c2}, &(0x7f0000000040)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r1, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) 1m36.601938269s ago: executing program 8 (id=4748): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003740)=ANY=[@ANYBLOB="380000001e000100fcffffff000000000a000000", @ANYRES32=0x0, @ANYBLOB="000000001400010020010000001000000000fcffffffffff050005"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x44010) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xe, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800001200000000000000000000000000000000f785c2c8bb49d5e408021f66f5d31001babd22b601cdb9dbc84d", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000001600)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@quota}, {@resuid}, {@lazytime}, {@inlinecrypt}, {@usrquota}]}, 0x1, 0x443, &(0x7f0000001040)="$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") shmget$private(0x0, 0x2000, 0xc4, &(0x7f0000ffc000/0x2000)=nil) quotactl$Q_SETINFO(0xffffffff80000601, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) io_setup(0x8, &(0x7f00000002c0)=0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000009000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000004}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) io_cancel(0x0, 0x0, 0x0) r4 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) io_submit(r1, 0x2, &(0x7f0000000140)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x1000}, 0x0]) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x159e82, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f0000000240), 0x0}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18) 1m36.34565991s ago: executing program 8 (id=4753): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x12800, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") setresuid(0xee01, 0x0, 0xffffffffffffffff) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r1, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0xfffffffffffffffe, 0xffff, 0x0, 0x7}) 1m36.120428738s ago: executing program 8 (id=4755): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) io_setup(0x3, &(0x7f0000000340)) 1m35.917433584s ago: executing program 6 (id=4761): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r1], 0x4) 1m35.917023954s ago: executing program 6 (id=4762): r0 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r0, &(0x7f0000000600)="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", 0xfd1, 0x6, 0x0) mq_timedreceive(r0, &(0x7f000001d600)=""/102389, 0x18ff5, 0x0, 0x0) 1m35.906609146s ago: executing program 6 (id=4763): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a99985000000040000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x6}, 0x18) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1, 0x0, 0x0, 0x8040}], 0x1, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000300)="359c", 0x2}], 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000b0000000000000000000000000000000000000003f0b571be4b285837898cc65dba", @ANYRES32=0x0], 0x30}], 0x1, 0x0) 1m35.882796127s ago: executing program 8 (id=4764): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8f) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) read(r1, &(0x7f0000000240)=""/104, 0x68) 1m35.882284217s ago: executing program 6 (id=4765): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x12800, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") setresuid(0xee01, 0x0, 0xffffffffffffffff) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp(r1, r0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000140)={0xfffffffffffffffe, 0xffff, 0x0, 0x7}) 1m35.871117008s ago: executing program 36 (id=4764): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8f) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) read(r1, &(0x7f0000000240)=""/104, 0x68) 1m35.60592872s ago: executing program 6 (id=4768): r0 = socket(0x11, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c30000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='kmem_cache_free\x00', r2, 0x0, 0x200000000000006}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r4}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x64) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88"], 0xdd12}], 0x1}, 0x0) 1m35.433981803s ago: executing program 6 (id=4769): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a017f7f00000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000000d00"], 0xac}, 0x1, 0x0, 0x0, 0xc0c1}, 0x0) 1m35.409450455s ago: executing program 37 (id=4769): ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a017f7f00000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000328000480080002400000001208000140000000000d00"], 0xac}, 0x1, 0x0, 0x0, 0xc0c1}, 0x0) 1m11.213193247s ago: executing program 9 (id=5235): ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001840)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) unshare(0x2a020400) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)='=', 0x1}], 0x1, 0x0) 1m11.110019055s ago: executing program 9 (id=5240): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000680)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) 1m11.109382495s ago: executing program 9 (id=5241): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/75, 0x4b}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 1m10.886562793s ago: executing program 9 (id=5246): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x12800, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") setresuid(0xee01, 0x0, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 1m10.206219478s ago: executing program 9 (id=5253): r0 = socket(0x11, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r2, 0x0, 0x200000000000006}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000180)={0x11, 0x0, r4}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x64) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="02017d29012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88"], 0xdd12}], 0x1}, 0x0) 1m9.579047569s ago: executing program 9 (id=5267): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) close(r2) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (fail_nth: 7) 1m9.527919223s ago: executing program 38 (id=5267): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) close(r2) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (fail_nth: 7) 50.180915713s ago: executing program 3 (id=5532): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) 50.115692649s ago: executing program 3 (id=5533): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x120) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000021c0)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f00000011c0)={{r0}, r2, 0x8, @unused=[0x9, 0x3, 0x4, 0x7ff], @name="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"}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r5 = socket(0x2, 0x80805, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r6, &(0x7f0000000000), 0x2a979d) shutdown(0xffffffffffffffff, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="150000001c37432e70cd6146e7530347fd55324ed2c3ee5e0070f5ca5664d7afd40df3facf194dbb4aad8c96bf6b3f6294492506aa7e1461c878a9a34ab2ec8b5956313d55d8d2edd80b632c8a7129f0c07dd4c90e01ed256d556cf9db7056586bda62a7c976828fdb36840542b5368a1cca4319af329db478f3acbe9228fec8d37d6bb7c15a1a3add91279a0c2f86dc447647d5a0b1f4326c45f27b8114591e5798321bef9b3f29fda1f56e135a722a7dc965f02377779d811b06c4a5cb4beddf54e32fb1f6d90df88bfb560d104c5c2950e2e4515ae1ce5ccb3717e22194eb31cb19df6e396a45444e8475211d30a82dfec0b44b26e43f63d3967ef98f7cd0c218", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fedbdf250600000008001100000000000800110001000000"], 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x80) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r7, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)="b25b365c0254a7c6fc7ea6155a71b613b02d1645aab67271075189c3540c4dd19ebfb3c4acf87f2eeb258e62cc6ae96db360d874500cb86b4185ee533bf708", 0xffffff8f}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62071e7ec69f658d5a52d7eb7ea31db43f8cf570f335a80860ac4cc240dc149d8468493db8aad089f590d62e0bcb9d1dcee636ee311ee51839b7201745baef82209b2ab741dc5ea481ae9dcebe39b1101a42a8c82de46107541c240ad0d9ee4a9340cffd72aaea692a60993637c81d23a0d0ebbae66f1eb2771df2482c043d8715ae788b56cc91eaa4d6bbdec82d8f91eb822d0b5f3ebd86", 0xa5}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f0000002b40)='-', 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdbcfb8a86a74f6799f98c36e23e210f053830ac8e978a0785884001a7099c4b9016f1a65a57390caf78c272cbf9711f94505dd525af1ff7d013438df5b844226f41b81e58eb73366", 0x4b}, {&(0x7f00000007c0)="f2e659a0b00d26c2ee15bbdf21c625bd1e67dee03c0d5862d425c076b8577bb0b50607802b1c3ab21a39c9eb5b6ca033319be5ed6e5d21f0f39fee6a8c98dc0bc39a76bf896971072aec737f00aee7ead58ba42e1f7efe0c445b1d1d5de272c3d774e063c4ade85dd1cf6c8c85472590721bb64c154d689cec735b3ac1b8f96dedff166668803830d4d526e16c68", 0xa}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1"}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd16e01d56b414499264923beda58d7da0313c1ccafe53965750f25bdaa6b56a87307ec23d48b6f35ce49a813a2bc3cb23fdf42826bdc16788ff466919594de5bf8a1fa5d825947271ade4a95efeb170c", 0x53}, {&(0x7f0000000580)="b8a2f681134502fe2f602543e7bf1919be9eb6378d8fc15ac1699c0c424dc215b3ec95771fb5a5fa942353cba2caf2acea06b89d8425f97404638b33f24a9b32ab61cd414aa8acaa07ba1b0ea45b2361f8442e6af44fa5e9f10de0aa6dc5d9a9a43a20771650db53f5432f5abd100417", 0x1}, {&(0x7f0000000500)="01", 0x1}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)}, {&(0x7f0000000340)='\x00', 0x1}, {&(0x7f0000000880)="87141af223663a746046bdc339de81564cdbc76b336cf021dc7c2550b78b77295a37c903f475800f412569837c24ddf6b71979c1b606045926349dcd37c3077cb901d70a559c57ff65222c60c7bb8241d643c290505f23e07dc853"}, {&(0x7f0000000900)="11e08017bdf05fba2a819e173635d3d3e587f540a7622b34ab1069b87bf90bd82a92f94be0630ec07478c68309574d4fb0b1cb100d7d7a2461a1b6ec9df5e794356055d324ef4b72a433640925616bb2bd694ad8453d43bbbb91f97aa18dd52c9372c785e178180fe94fe7cac6ac486e131d1da39a4bab332c8a634ea393612b1be8d2b7d6dece01f6d5891bcf73f2d902c003facf086a1d84c11781cbb3ec57798068f71764c936cd63"}, {&(0x7f00000009c0)="c71924d7ea9bc5971a0c58640e8be19cab192cbcc2e315e72c441a5b0c0bb0fa1728e32d3bd7cd210bc2e5abeba55e9d8626bc0e11a884d140c83c4d40f46ea66a5bdab9888ffe03d639b5c19ae7243b451e6572bacf66051d51b9fb2f22ca8b69f8a53f890035bcb884820df6246909e21fda8c820c1a3a1b678ebfdf"}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r7, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) write$P9_RGETLOCK(r4, &(0x7f00000000c0)=ANY=[], 0xffffff6a) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) tee(r3, r8, 0xfffffffffffffc01, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) 49.237514859s ago: executing program 3 (id=5543): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) 49.11101884s ago: executing program 3 (id=5546): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x12800, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") setresuid(0xee01, 0x0, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) quotactl$Q_SETINFO(0xffffffff80000600, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 48.774870877s ago: executing program 3 (id=5550): ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001840)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) syz_usb_connect$hid(0x4, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c05, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x10, 0x10, 0x10, [{{0x9, 0x4, 0x0, 0x11, 0x2, 0x3, 0x1, 0x3, 0x81, {0x9, 0x21, 0x86, 0x9, 0x1, {0x22, 0xc4f}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0x5, 0x6}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0xb3, 0xf8, 0x2}}]}}}]}}]}}, &(0x7f0000000b00)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x201, 0x1, 0x1, 0xe, 0x40, 0x7}, 0xfa, &(0x7f0000000780)={0x5, 0xf, 0xfa, 0x6, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x1, 0x3, 0x7}, @ssp_cap={0xc, 0x10, 0xa, 0x6, 0x0, 0x5, 0x0, 0x4}, @generic={0x24, 0x10, 0x3, "1b2b3dad36a39dba1e949cdf0a19edf413db38d5e1f7945a49d03668b3e5a27200"}, @ptm_cap={0x3}, @generic={0x9c, 0x10, 0x2, "2c086fdcf5c0b42a18987eab4d6136b33f9f64e1aa129c1f8b137161d0afe8d0fb4d6104ba1218c613e9360dcce09b1e328696b5aa271c377b3b49a288f27e8c8be2b3ea8f30177f67c4044c8335d18c5d937ef980572f457a151c2d8e4c080b1b700680c9512c066f6b56d4ed465ef01a9c6cf312525da93da3cd7e71b72d15f743dc9cd33af72e8da556b803fdac0a700d1e9ec19c067c29"}, @ssp_cap={0x1c, 0x10, 0xa, 0x9, 0x4, 0x7, 0xf0f, 0x6, [0x30, 0x2e, 0xffff30, 0x0]}]}, 0x7, [{0xaf, &(0x7f0000000880)=ANY=[@ANYBLOB="af03b2a423cf87de19f8276f69a3020147e6c5a26b9caff801378abb2aaedf8129c047a720df8f6ce91b95cdb06ea9d021ae2ae25d3ceb653d33363fd7c0a9468e9496b76d65356ff18d038c40387603f7ed9154189dca6fc9e0086066a9e1144130a56ea8973a9079fd998229d34a2c76b78b92571efccb201812101270c78cace7bafc0026edf898751a5b83ef20e64798386cec0810475374357b0fc6bef2a2bc9e879e68a9449dbcddf41f1865"]}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0x43f}}, {0xdb, &(0x7f0000000380)=@string={0xdb, 0x3, "0185e48ca8e763fa882ed284248999d23d4ad79e46f0f2ef9d2aa1491e47678583309b49eafae55d4b62affedf0c5ab9cbee6d6dbe80fedd64102be09b26010a00abf80e85bc810bfce1d74db04193252d380c1217f9f8119c54a89623ce52f58d6fd2ff13907af6e18ec19a4e5625b804089ee19e9f215e797b0b53ac6fbf8756bd8752fc927947916ae1471b2ffeac215de01c0da17ae39aa21db832aa90ec884ce1d56aad6aad2a4019a0081d8fc1e1ccd98a8b86a0da109bd7ebba0c842d60fc68a99139142f711e3ad1c5bf84e034a2d2e92ae4f5b0a1"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x443}}, {0x3f, &(0x7f0000000a80)=@string={0x3f, 0x3, "ad0933f7822a66e776e958e7ffd85331368ef6c09d29e1b6b22991bde4ee196ec5dbc4e8decd1374356a6f11758dd04672694394aad8ba5d00a4d8cd44"}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x416}}]}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0005}]}) unshare(0x2a020400) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)='=', 0x1}], 0x1, 0x0) 47.907976677s ago: executing program 3 (id=5559): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES32], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x2c, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ff7f0000000000000100000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500ce414700a2a1000083000000bf090000000000659668ca00000000009500000000000000155fe0ff1f00000085100000f9ffffff54020200ffffffff180100002020352500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600", @ANYRES8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b70800000c0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x8eb, 0x6f, &(0x7f0000000300)=""/111, 0x41000, 0x18, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000000)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x4, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000440)=[r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000540)=[{0x1, 0x4, 0x6, 0xa}, {0x4, 0x1, 0x5, 0x1}, {0x4, 0x5, 0xf, 0x5}], 0x10, 0x679d}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000580)='nilfs2_segment_usage_check\x00', r2}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0xcd8) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) close(r3) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x3) 47.844249172s ago: executing program 39 (id=5559): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES32], &(0x7f00000001c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x2c, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000ff7f0000000000000100000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500ce414700a2a1000083000000bf090000000000659668ca00000000009500000000000000155fe0ff1f00000085100000f9ffffff54020200ffffffff180100002020352500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600", @ANYRES8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b70800000c0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x8eb, 0x6f, &(0x7f0000000300)=""/111, 0x41000, 0x18, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000000)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x4, 0x1, 0x1}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000440)=[r0, r0, r0, r0, r0, r0, r0], &(0x7f0000000540)=[{0x1, 0x4, 0x6, 0xa}, {0x4, 0x1, 0x5, 0x1}, {0x4, 0x5, 0xf, 0x5}], 0x10, 0x679d}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000580)='nilfs2_segment_usage_check\x00', r2}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0xcd8) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) close(r3) lsetxattr$security_selinux(&(0x7f0000000900)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x3) 2.929622854s ago: executing program 4 (id=6248): creat(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.86021316s ago: executing program 4 (id=6250): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r3}, 0x10) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 2.786066626s ago: executing program 4 (id=6252): socket(0x10, 0x803, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x10024, 0x10000, 0x1, 0x1, 0xa, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3f7, &(0x7f00000004c0)="$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") r1 = open(&(0x7f0000000080)='./file1\x00', 0xe4802, 0x86) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 2.417603405s ago: executing program 2 (id=6258): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x18) pipe2$9p(&(0x7f0000001900), 0x4000000000000000) 2.400627797s ago: executing program 2 (id=6259): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r4 = dup3(r3, r2, 0x0) recvmmsg(r4, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/75, 0x4b}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 2.279872776s ago: executing program 4 (id=6261): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00"/13], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) memfd_create(0x0, 0xe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) socket(0x28, 0x5, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) fremovexattr(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = socket$pptp(0x18, 0x1, 0x2) r3 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) (fail_nth: 4) ioctl$MON_IOCX_MFETCH(r3, 0xc0109207, &(0x7f0000000c40)={0x0, 0xfe72}) ioctl$MON_IOCX_GETX(r3, 0x80089203, &(0x7f0000000a40)={0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x0) 2.277310647s ago: executing program 2 (id=6262): setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000ea0300000008020086a000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000003c0)=0x11) ioctl$TIOCVHANGUP(r2, 0x5437, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r7, &(0x7f0000000740)='|', 0x1, 0x0, &(0x7f00000007c0)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) shutdown(r7, 0x1) setsockopt(r7, 0x84, 0x80, &(0x7f0000000080)="1a4f30d089f5bd5b", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x1, @mcast2, 0x235}}}, 0x84) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d3000009a4e2c9bb9aaba27242385862811afb25fd7804c56d69b6aceacbed7e055a9147fdc70ef618741d097d22333e65c5cd70e32de7948437649286ee227a9ab15a9cf1842000000000000008efc9fc70b4c6f793b3ad79c95dd85d081"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000002000000000000000000001811a6f16d9bec9c6dec64110000", @ANYRES8=r8, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r8, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kmem_cache_free\x00', r9}, 0x18) lgetxattr(&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=ANY=[@ANYBLOB="62b066732ea00000000000000000"], &(0x7f0000000380)=""/229, 0xe5) 1.964865922s ago: executing program 2 (id=6263): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000"], 0x48) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3f7, &(0x7f00000004c0)="$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") getdents(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000001811", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x27, &(0x7f0000000b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x4, 0x0, 0xd, 0x3, 0x8, 0x18, 0x8}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x93}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7c}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000008c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000900)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x3, 0xe, 0xe2b, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000cc0)=[r1, r1, r0], &(0x7f0000000d00)=[{0x1, 0x2, 0xb, 0x1}, {0x5, 0x4, 0x9, 0x6}, {0x1, 0x2, 0xb, 0xb}, {0x0, 0x3, 0x6, 0xc}, {0x3, 0x1, 0xd, 0x4}], 0x10, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000021000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64}, {@in, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x2c}, {}, {0x0, 0x0, 0x8000000, 0x200}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0xa, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x0, 0x0, 0x0, 0x70bd28}}, @algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}, 0x0, 0x18}}]}, 0x1a0}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r4, &(0x7f0000000740)="cc", 0x1) sendfile(r4, r3, 0x0, 0x3ffff) sendfile(r4, r3, 0x0, 0x7fffeffd) 1.354739811s ago: executing program 4 (id=6279): bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4c000) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000740)={0x0}, &(0x7f00000007c0)=0xc) sched_setscheduler(r0, 0x1, &(0x7f0000000780)=0x5) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x20, &(0x7f0000000000)=0x7ffffffd, 0x4) write$binfmt_script(r2, 0x0, 0x6f4000) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x67709000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) pipe2$9p(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[], 0x15) r8 = dup(r7) write$cgroup_devices(r8, &(0x7f0000000000)={'b', ' *:* ', 'rwm\x00'}, 0xa) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000880)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x7}, [@exit]}, &(0x7f0000000000)='GPL\x00'}, 0x94) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x28, 0x2, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_FILTER={0x14, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x148}, @CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x60}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4005}, 0x90) 1.134714459s ago: executing program 0 (id=6283): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) readahead(0xffffffffffffffff, 0x92e, 0x6b1) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) socket(0xa, 0x3, 0xff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@empty, 0xe, 0x0, 0x0, 0x3}, 0x20) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setsig(0x4203, r3, 0x2fb, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = getpid() kcmp(r3, r4, 0x0, r0, r1) 1.107401791s ago: executing program 0 (id=6285): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6, 0xe7fd}, 0x100002, 0x3, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x3, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf2, 0x0, 0x0, 0x0, 0x9}}, &(0x7f0000000680)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fffffff}, 0x94) 1.103655311s ago: executing program 2 (id=6286): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000fecd230fc0002000080000000000000070000005d0000000000952d62bb00080f8f6a7b9404d7156d247f3e66fde658dbe17d9d78090cf4a5b1a8e35cedee4be5e9dfaf36f7d07e7e06525223d7bd463f9c84d522ef51cefda38bcf5fdae77681be4fd083f06c106503"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x5, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="185200000f000000000000000000000018450000ffffffff000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c00163f5c000d64a5d2fc4d22130000b700000000000009918af0ffffffffff182b0000", @ANYRES32=r1, @ANYBLOB="00000000020000008520000003000000487b4000f0ffffff"], &(0x7f0000000200)='GPL\x00', 0xa, 0x5d, &(0x7f0000001500)=""/93, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x4, 0x10, 0x80, 0x2e0}, 0x10, 0xffffffffffffffff, r0, 0x1, 0x0, &(0x7f0000001580)=[{0x2, 0x1, 0xd, 0x8}], 0x10, 0x6}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0xd, &(0x7f00000029c0)=ANY=[@ANYRES64=r1, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64=r0, @ANYRESOCT=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000002c0)='mem_connect\x00', r5}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) socket(0x200000000000011, 0x2, 0x0) unshare(0x6a040000) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r8 = gettid() r9 = eventfd2(0x0, 0x0) write$eventfd(r9, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r9, &(0x7f0000000040)=0x8, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$inet6(0xa, 0x1, 0x8010000000000084) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$pppl2tp(r7, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r7, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r3}, 0x18) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) 1.080595113s ago: executing program 0 (id=6287): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) r2 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = dup3(r2, r1, 0x0) recvmmsg(r3, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/75, 0x4b}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 943.098924ms ago: executing program 0 (id=6291): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x2}]}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000000), &(0x7f00000005c0)=r4}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r6}, 0x10) sendmsg$TIPC_CMD_GET_MAX_PORTS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c}, 0x1c}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000010000107000000000000fd000a0000000600010013"], 0x1c}}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 834.495793ms ago: executing program 7 (id=6293): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 805.815135ms ago: executing program 7 (id=6294): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1af94000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500020000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000210018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) readahead(0xffffffffffffffff, 0x92e, 0x6b1) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x3a, &(0x7f0000000040)=0xfffffffa, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@empty, 0xe, 0x0, 0x0, 0x3}, 0x20) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) recvmmsg(r1, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000440)}, 0x8185}], 0x1, 0x40010142, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) read$char_usb(r4, &(0x7f0000000180)=""/133, 0xfdef) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0xa0001, 0x0) ioctl$PPPIOCSPASS(r5, 0x40107447, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{0x5, 0x6, 0x6, 0x9}, {0x2, 0xf0, 0x5, 0x689}]}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setsig(0x4203, r6, 0x2fb, 0x0) getpid() bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 674.711336ms ago: executing program 7 (id=6295): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) readahead(0xffffffffffffffff, 0x92e, 0x6b1) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) socket(0xa, 0x3, 0xff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@empty, 0xe, 0x0, 0x0, 0x3}, 0x20) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setsig(0x4203, r3, 0x2fb, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = getpid() kcmp(r3, r4, 0x0, r0, r1) 647.624649ms ago: executing program 7 (id=6296): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000100), 0x1, 0x4c4, &(0x7f0000000f40)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) 576.450714ms ago: executing program 1 (id=6297): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='./file0\x00') 537.694527ms ago: executing program 1 (id=6298): mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00', r3}, 0x10) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[], [], 0x6b}}) 517.416469ms ago: executing program 7 (id=6299): socket(0x10, 0x803, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x10024, 0x10000, 0x1, 0x1, 0xa, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3f7, &(0x7f00000004c0)="$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") r1 = open(&(0x7f0000000080)='./file1\x00', 0xe4802, 0x86) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x7800, 0x0, 0x3) 510.140679ms ago: executing program 4 (id=6300): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000fecd230fc0002000080000000000000070000005d0000000000952d62bb00080f8f6a7b9404d7156d247f3e66fde658dbe17d9d78090cf4a5b1a8e35cedee4be5e9dfaf36f7d07e7e06525223d7bd463f9c84d522ef51cefda38bcf5fdae77681be4fd083f06c106503"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x5, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="185200000f000000000000000000000018450000ffffffff000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c00163f5c000d64a5d2fc4d22130000b700000000000009918af0ffffffffff182b0000", @ANYRES32=r1, @ANYBLOB="00000000020000008520000003000000487b4000f0ffffff"], &(0x7f0000000200)='GPL\x00', 0xa, 0x5d, &(0x7f0000001500)=""/93, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x4, 0x10, 0x80, 0x2e0}, 0x10, 0xffffffffffffffff, r0, 0x1, 0x0, &(0x7f0000001580)=[{0x2, 0x1, 0xd, 0x8}], 0x10, 0x6}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0xd, &(0x7f00000029c0)=ANY=[@ANYRES64=r1, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64=r0, @ANYRESOCT=r2], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000002c0)='mem_connect\x00', r5}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000007940)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x33f}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) socket(0x200000000000011, 0x2, 0x0) unshare(0x6a040000) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r8 = gettid() r9 = eventfd2(0x0, 0x0) write$eventfd(r9, &(0x7f0000000140)=0xfffffffffffffff8, 0x8) write$eventfd(r9, &(0x7f0000000040)=0x8, 0x8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r10 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r10, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x2}, 0x1c, &(0x7f00000001c0)}}], 0x1, 0x8081) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$pppl2tp(r7, &(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x1, @remote}, 0xa}}, 0x26) sendmmsg$inet(r7, &(0x7f0000005f80)=[{{0x0, 0x0, &(0x7f0000005dc0)=[{&(0x7f00000010c0)="7d5107673289eeae3f806c5c62db497a0299399ab6101c3b", 0x1}], 0x1}}], 0x4000000000001ce, 0x8040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r11) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000000000001801", @ANYRES32=r3, @ANYRES16=r3], &(0x7f0000000240)='GPL\x00', 0xfffffa0b, 0x0, 0x0, 0x61980, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r12, 0x0, 0x5}, 0x18) 464.205393ms ago: executing program 1 (id=6301): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 390.669919ms ago: executing program 1 (id=6302): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000380)=[{0x200000000006, 0x1, 0x7, 0x7ffc1ffb}]}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0}, 0x10024, 0x10000, 0x1, 0x1, 0xa, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 189.526465ms ago: executing program 2 (id=6303): mlockall(0x6) prctl$PR_SET_NAME(0xf, &(0x7f00000001c0)='w\xde\xa3\x05\xff\a\x00\x00\x00\x00\x00\x00\x8f\xc0\x9b\x86\xef\\\xc0\x89\av\x9f\xd6\xd1\x98,\xc8\x18E/\x8c\x1a\xe3\xbd') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./bus\x00', 0x0, &(0x7f0000000000)={[{@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@rodir}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x2}}]}, 0x1, 0x21b, &(0x7f0000000300)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) write(r3, &(0x7f00000001c0)="f14a", 0x2) sendfile(r3, r1, 0x0, 0x40001) sendfile(r3, r2, 0x0, 0x7ffff000) 123.96594ms ago: executing program 1 (id=6304): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r1}, 0x10) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 71.912965ms ago: executing program 1 (id=6305): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2d, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r3, 0x40047451, &(0x7f0000000180)) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00'}, 0x10) r7 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[], [], 0x6b}}) 26.771578ms ago: executing program 0 (id=6306): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) readahead(0xffffffffffffffff, 0x92e, 0x6b1) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) socket(0xa, 0x3, 0xff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@empty, 0xe, 0x0, 0x0, 0x3}, 0x20) syz_emit_ethernet(0x4e, &(0x7f00000020c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c8900182b01fe800000000000000000000000000025fe8000000000000000000000000000aaff"], 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setsig(0x4203, r3, 0x2fb, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = getpid() kcmp(r3, r4, 0x0, r0, r1) 17.554609ms ago: executing program 7 (id=6307): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000050000000004000009006a0001"], 0x48) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3f7, &(0x7f00000004c0)="$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") getdents(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x10000, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x27, &(0x7f0000000b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@alu={0x4, 0x0, 0xd, 0x3, 0x8, 0x18, 0x8}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x93}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0x7c}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000008c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000900)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000940)={0x3, 0xe, 0xe2b, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000cc0)=[r1, r1, r0], &(0x7f0000000d00)=[{0x1, 0x2, 0xb, 0x1}, {0x5, 0x4, 0x9, 0x6}, {0x1, 0x2, 0xb, 0xb}, {0x0, 0x3, 0x6, 0xc}, {0x3, 0x1, 0xd, 0x4}], 0x10, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r2}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000100)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x7, 0x4, 0x208, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r5, &(0x7f0000000740)="cc", 0x1) sendfile(r5, r4, 0x0, 0x3ffff) 0s ago: executing program 0 (id=6308): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000400)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2d, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x40047451, &(0x7f0000000180)) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000500)='9p_client_req\x00'}, 0x10) r8 = dup(r7) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}, 0x2c, {[], [], 0x6b}}) kernel console output (not intermixed with test programs): 55] ? clear_bhb_loop+0x40/0x90 [ 532.141002][T22455] ? clear_bhb_loop+0x40/0x90 [ 532.141023][T22455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.141103][T22455] RIP: 0033:0x7f3eeb1c014a [ 532.141118][T22455] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.141136][T22455] RSP: 002b:00007f3ee981ee68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 532.141178][T22455] RAX: ffffffffffffffda RBX: 00007f3ee981eef0 RCX: 00007f3eeb1c014a [ 532.141191][T22455] RDX: 0000200000000f40 RSI: 0000200000000f00 RDI: 0000000000000000 [ 532.141204][T22455] RBP: 0000200000000f40 R08: 00007f3ee981eef0 R09: 0000000001a4a438 [ 532.141278][T22455] R10: 0000000001a4a438 R11: 0000000000000246 R12: 0000200000000f00 [ 532.141290][T22455] R13: 00007f3ee981eeb0 R14: 0000000000000000 R15: 00002000000008c0 [ 532.141309][T22455] [ 532.334682][T21089] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.345260][ T2120] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 532.403205][T22453] EXT4-fs (loop7): 1 orphan inode deleted [ 532.411445][T22453] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.515148][T22468] lo speed is unknown, defaulting to 1000 [ 532.533747][T19213] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.671880][T22473] loop7: detected capacity change from 0 to 512 [ 532.711267][T22473] EXT4-fs (loop7): mounted filesystem 00000000-0004-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.730375][T22473] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 532.756881][T22473] EXT4-fs error (device loop7): ext4_add_entry:2417: inode #2: comm syz.7.5672: Directory hole found for htree leaf block 0 [ 532.794033][T19213] EXT4-fs (loop7): unmounting filesystem 00000000-0004-0000-0000-000000000000. [ 532.812844][T22485] loop2: detected capacity change from 0 to 128 [ 532.827289][T22487] loop1: detected capacity change from 0 to 512 [ 532.829540][T22485] 9pnet_fd: Insufficient options for proto=fd [ 532.872178][T22495] loop2: detected capacity change from 0 to 512 [ 532.887130][T22496] loop7: detected capacity change from 0 to 1024 [ 532.894039][T22496] EXT4-fs: Ignoring removed mblk_io_submit option [ 532.903233][T22496] EXT4-fs: Ignoring removed nobh option [ 532.908828][T22496] EXT4-fs: Ignoring removed bh option [ 533.085700][ T29] kauditd_printk_skb: 392 callbacks suppressed [ 533.085735][ T29] audit: type=1326 audit(1753838547.575:7348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22494 comm="syz.7.5682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6446b6e9a9 code=0x7ffc0000 [ 533.129087][ T29] audit: type=1326 audit(1753838547.605:7349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22494 comm="syz.7.5682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6446b6e9a9 code=0x7ffc0000 [ 533.152631][ T29] audit: type=1326 audit(1753838547.605:7350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22494 comm="syz.7.5682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6446b6e9a9 code=0x7ffc0000 [ 533.176157][ T29] audit: type=1326 audit(1753838547.605:7351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22494 comm="syz.7.5682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6446b6e9a9 code=0x7ffc0000 [ 533.209323][ T29] audit: type=1326 audit(1753838547.695:7352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22494 comm="syz.7.5682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6446b6e9a9 code=0x7ffc0000 [ 533.232960][ T29] audit: type=1326 audit(1753838547.695:7353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22494 comm="syz.7.5682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6446b6e9a9 code=0x7ffc0000 [ 533.256497][ T29] audit: type=1326 audit(1753838547.695:7354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22494 comm="syz.7.5682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6446b6e9a9 code=0x7ffc0000 [ 533.280109][ T29] audit: type=1326 audit(1753838547.695:7355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22494 comm="syz.7.5682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6446b6e9a9 code=0x7ffc0000 [ 533.303593][ T29] audit: type=1326 audit(1753838547.695:7356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22494 comm="syz.7.5682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6446b6e9a9 code=0x7ffc0000 [ 533.327215][ T29] audit: type=1326 audit(1753838547.695:7357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22494 comm="syz.7.5682" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6446b6e9a9 code=0x7ffc0000 [ 533.536966][T22516] loop4: detected capacity change from 0 to 512 [ 533.559573][T22516] ext4 filesystem being mounted at /558/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 533.579307][T22516] EXT4-fs error (device loop4): ext4_add_entry:2417: inode #2: comm syz.4.5689: Directory hole found for htree leaf block 0 [ 533.598075][T22522] loop7: detected capacity change from 0 to 512 [ 533.605272][T22522] ext4: Bad value for 'errors' [ 533.634421][T22524] siw: device registration error -23 [ 533.643281][T22524] loop7: detected capacity change from 0 to 512 [ 533.650234][T22524] EXT4-fs: Ignoring removed orlov option [ 533.656097][T22524] EXT4-fs: Ignoring removed nomblk_io_submit option [ 533.686972][T22524] ext4: Unknown parameter 'fsname' [ 533.710545][T22524] loop7: detected capacity change from 0 to 1024 [ 533.717569][T22524] ext4: Unknown parameter 'smackfshat' [ 533.739623][T22530] FAULT_INJECTION: forcing a failure. [ 533.739623][T22530] name failslab, interval 1, probability 0, space 0, times 0 [ 533.752284][T22530] CPU: 0 UID: 0 PID: 22530 Comm: syz.0.5696 Not tainted 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 533.752312][T22530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 533.752373][T22530] Call Trace: [ 533.752380][T22530] [ 533.752388][T22530] __dump_stack+0x1d/0x30 [ 533.752410][T22530] dump_stack_lvl+0xe8/0x140 [ 533.752427][T22530] dump_stack+0x15/0x1b [ 533.752443][T22530] should_fail_ex+0x265/0x280 [ 533.752468][T22530] should_failslab+0x8c/0xb0 [ 533.752509][T22530] kmem_cache_alloc_noprof+0x50/0x310 [ 533.752558][T22530] ? security_file_alloc+0x32/0x100 [ 533.752594][T22530] security_file_alloc+0x32/0x100 [ 533.752615][T22530] init_file+0x5c/0x1d0 [ 533.752635][T22530] alloc_empty_file+0x8b/0x200 [ 533.752656][T22530] alloc_file_pseudo+0xc6/0x160 [ 533.752683][T22530] __shmem_file_setup+0x1de/0x210 [ 533.752739][T22530] shmem_file_setup+0x3b/0x50 [ 533.752767][T22530] __se_sys_memfd_create+0x2c3/0x590 [ 533.752800][T22530] __x64_sys_memfd_create+0x31/0x40 [ 533.752828][T22530] x64_sys_call+0x2abe/0x2ff0 [ 533.752966][T22530] do_syscall_64+0xd2/0x200 [ 533.752989][T22530] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 533.753011][T22530] ? clear_bhb_loop+0x40/0x90 [ 533.753106][T22530] ? clear_bhb_loop+0x40/0x90 [ 533.753129][T22530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.753149][T22530] RIP: 0033:0x7f3eeb1be9a9 [ 533.753165][T22530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.753215][T22530] RSP: 002b:00007f3ee981ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 533.753231][T22530] RAX: ffffffffffffffda RBX: 0000000000000623 RCX: 00007f3eeb1be9a9 [ 533.753242][T22530] RDX: 00007f3ee981eef0 RSI: 0000000000000000 RDI: 00007f3eeb2416fc [ 533.753255][T22530] RBP: 0000200000001fc0 R08: 00007f3ee981ebb7 R09: 00007f3ee981ee40 [ 533.753268][T22530] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000040 [ 533.753279][T22530] R13: 00007f3ee981eef0 R14: 00007f3ee981eeb0 R15: 00002000000001c0 [ 533.753338][T22530] [ 533.979033][T22524] loop7: detected capacity change from 0 to 512 [ 533.985595][T22524] EXT4-fs: Ignoring removed nobh option [ 533.997571][T22533] netlink: 'syz.1.5694': attribute type 5 has an invalid length. [ 534.029859][T22533] loop1: detected capacity change from 0 to 512 [ 534.036825][T22533] EXT4-fs: inline encryption not supported [ 534.043331][T22533] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 534.055917][T22533] EXT4-fs (loop1): 1 truncate cleaned up [ 534.136668][T22547] loop2: detected capacity change from 0 to 512 [ 534.143532][T22547] ext4: Bad value for 'errors' [ 534.158557][T22552] loop7: detected capacity change from 0 to 512 [ 534.192861][T22557] lo speed is unknown, defaulting to 1000 [ 534.274798][T22568] netlink: 'syz.2.5712': attribute type 5 has an invalid length. [ 534.292242][T22568] loop2: detected capacity change from 0 to 512 [ 534.310611][T22568] EXT4-fs: inline encryption not supported [ 534.316855][T22568] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 534.328454][T22568] EXT4-fs (loop2): 1 truncate cleaned up [ 534.420524][T22575] siw: device registration error -23 [ 534.433704][T22575] loop1: detected capacity change from 0 to 512 [ 534.440280][T22575] EXT4-fs: Ignoring removed orlov option [ 534.446076][T22575] EXT4-fs: Ignoring removed nomblk_io_submit option [ 534.452955][T22575] ext4: Unknown parameter 'fsname' [ 534.464646][T22574] loop1: detected capacity change from 0 to 1024 [ 534.471533][T22574] ext4: Unknown parameter 'smackfshat' [ 534.483348][T22574] loop1: detected capacity change from 0 to 512 [ 534.490048][T22574] EXT4-fs: Ignoring removed nobh option [ 534.560578][T22582] loop2: detected capacity change from 0 to 1024 [ 534.567444][T22582] EXT4-fs: Ignoring removed nomblk_io_submit option [ 534.611795][T22587] loop1: detected capacity change from 0 to 512 [ 534.620921][T22587] ext4: Bad value for 'errors' [ 534.648686][T22589] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 534.671709][T22589] loop4: detected capacity change from 0 to 512 [ 534.712853][T22589] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.5720: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 534.734026][T22597] loop2: detected capacity change from 0 to 1024 [ 534.741862][T22597] EXT4-fs: Ignoring removed nomblk_io_submit option [ 534.749840][T22589] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.5720: Bad quota inode: 3, type: 0 [ 534.761374][T22589] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 534.778359][T22589] EXT4-fs (loop4): mount failed [ 534.794383][T22589] loop4: detected capacity change from 0 to 128 [ 534.808637][T22589] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 534.825750][T22589] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 534.871944][T22611] siw: device registration error -23 [ 534.880913][T22611] loop2: detected capacity change from 0 to 512 [ 534.887582][T22611] EXT4-fs: Ignoring removed orlov option [ 534.893745][ T3445] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 534.903720][T22611] EXT4-fs: Ignoring removed nomblk_io_submit option [ 534.910605][T22611] ext4: Unknown parameter 'fsname' [ 534.935500][T22613] loop4: detected capacity change from 0 to 1024 [ 534.942786][T22611] loop2: detected capacity change from 0 to 1024 [ 534.943386][T22613] EXT4-fs: Ignoring removed nomblk_io_submit option [ 534.949881][T22611] ext4: Unknown parameter 'smackfshat' [ 534.967602][T22611] loop2: detected capacity change from 0 to 512 [ 534.974533][T22611] EXT4-fs: Ignoring removed nobh option [ 535.050576][T22623] loop7: detected capacity change from 0 to 512 [ 535.060756][T22623] ext4: Bad value for 'errors' [ 535.086516][T22629] loop2: detected capacity change from 0 to 512 [ 535.091384][T22631] loop7: detected capacity change from 0 to 736 [ 535.113911][T22631] rock: directory entry would overflow storage [ 535.120184][T22631] rock: sig=0x3b10, size=4, remaining=3 [ 535.220518][T22641] lo speed is unknown, defaulting to 1000 [ 535.325731][T22648] loop0: detected capacity change from 0 to 1024 [ 535.332872][T22648] EXT4-fs: Ignoring removed nomblk_io_submit option [ 535.453266][T22653] loop0: detected capacity change from 0 to 512 [ 535.467114][T22653] netlink: 87 bytes leftover after parsing attributes in process `syz.0.5743'. [ 535.527239][T22660] siw: device registration error -23 [ 535.536851][T22660] loop1: detected capacity change from 0 to 512 [ 535.545269][T22660] EXT4-fs: Ignoring removed orlov option [ 535.552454][T22660] EXT4-fs: Ignoring removed nomblk_io_submit option [ 535.559221][T22660] ext4: Unknown parameter 'fsname' [ 535.571001][T22660] loop1: detected capacity change from 0 to 1024 [ 535.578007][T22660] ext4: Unknown parameter 'smackfshat' [ 535.588331][T22660] loop1: detected capacity change from 0 to 512 [ 535.595346][T22660] EXT4-fs: Ignoring removed nobh option [ 535.773958][T22667] netlink: 'syz.1.5747': attribute type 10 has an invalid length. [ 535.781836][T22667] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5747'. [ 535.798363][T22667] dummy0: entered promiscuous mode [ 535.804926][T22667] bridge0: port 3(dummy0) entered blocking state [ 535.811358][T22667] bridge0: port 3(dummy0) entered disabled state [ 535.819544][T22667] dummy0: entered allmulticast mode [ 535.834324][T22667] bridge0: port 3(dummy0) entered blocking state [ 535.840728][T22667] bridge0: port 3(dummy0) entered forwarding state [ 535.902818][T22669] loop1: detected capacity change from 0 to 736 [ 535.936896][T22669] rock: directory entry would overflow storage [ 535.943531][T22669] rock: sig=0x3b10, size=4, remaining=3 [ 535.998255][T22673] lo speed is unknown, defaulting to 1000 [ 536.243616][T22695] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 536.254517][T22695] loop7: detected capacity change from 0 to 512 [ 536.280744][T22695] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #3: comm syz.7.5759: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 536.323958][T22695] EXT4-fs error (device loop7): ext4_quota_enable:7127: comm syz.7.5759: Bad quota inode: 3, type: 0 [ 536.335465][T22695] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 536.350630][T22695] EXT4-fs (loop7): mount failed [ 536.373557][T22703] loop1: detected capacity change from 0 to 512 [ 536.383526][T22695] loop7: detected capacity change from 0 to 128 [ 536.395580][T22695] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 536.418107][T22703] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 536.442921][T22703] EXT4-fs error (device loop1): ext4_add_entry:2417: inode #2: comm syz.1.5762: Directory hole found for htree leaf block 0 [ 536.457661][T22695] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 536.472209][T22710] lo speed is unknown, defaulting to 1000 [ 536.516832][ T2120] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 536.675108][T22729] loop2: detected capacity change from 0 to 512 [ 536.682008][T22729] ext4: Bad value for 'errors' [ 536.699799][T22733] netlink: 'syz.7.5773': attribute type 10 has an invalid length. [ 536.707705][T22733] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5773'. [ 536.716766][T22733] dummy0: entered promiscuous mode [ 536.727293][T22733] bond0: (slave dummy0): Releasing backup interface [ 536.742878][T22733] bridge0: port 3(dummy0) entered blocking state [ 536.749401][T22733] bridge0: port 3(dummy0) entered disabled state [ 536.755875][T22733] dummy0: entered allmulticast mode [ 536.791418][T22743] loop7: detected capacity change from 0 to 512 [ 536.814450][T22743] ext4 filesystem being mounted at /170/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 536.893950][T22743] EXT4-fs error (device loop7): ext4_add_entry:2417: inode #2: comm syz.7.5778: Directory hole found for htree leaf block 0 [ 537.184965][T22763] loop4: detected capacity change from 0 to 512 [ 537.715129][T22775] siw: device registration error -23 [ 537.723585][T22775] loop2: detected capacity change from 0 to 512 [ 537.731021][T22775] EXT4-fs: Ignoring removed orlov option [ 537.737278][T22775] EXT4-fs: Ignoring removed nomblk_io_submit option [ 537.744609][T22775] ext4: Unknown parameter 'fsname' [ 537.757505][T22775] loop2: detected capacity change from 0 to 1024 [ 537.773653][T22777] loop0: detected capacity change from 0 to 1024 [ 537.781153][T22777] EXT4-fs: Ignoring removed nomblk_io_submit option [ 537.788527][T22775] ext4: Unknown parameter 'smackfshat' [ 537.952115][T22775] loop2: detected capacity change from 0 to 512 [ 537.963432][T22781] lo speed is unknown, defaulting to 1000 [ 537.970597][T22775] EXT4-fs: Ignoring removed nobh option [ 538.042963][T22784] loop7: detected capacity change from 0 to 512 [ 538.078311][T22784] ext4: Bad value for 'errors' [ 538.115678][T22787] loop2: detected capacity change from 0 to 512 [ 538.129309][T22787] ext4: Bad value for 'errors' [ 538.227997][T22795] lo speed is unknown, defaulting to 1000 [ 538.382426][ T29] kauditd_printk_skb: 284 callbacks suppressed [ 538.382438][ T29] audit: type=1326 audit(1753838552.875:7642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22792 comm="syz.2.5796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7deacae9a9 code=0x7ffc0000 [ 538.432397][ T29] audit: type=1326 audit(1753838552.875:7643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22792 comm="syz.2.5796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7deacae9a9 code=0x7ffc0000 [ 538.456017][ T29] audit: type=1326 audit(1753838552.905:7644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22792 comm="syz.2.5796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f7deacae9a9 code=0x7ffc0000 [ 538.479518][ T29] audit: type=1326 audit(1753838552.905:7645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22792 comm="syz.2.5796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7deacae9a9 code=0x7ffc0000 [ 538.503163][ T29] audit: type=1326 audit(1753838552.905:7646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22792 comm="syz.2.5796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7deacae9a9 code=0x7ffc0000 [ 538.526751][ T29] audit: type=1326 audit(1753838552.905:7647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22792 comm="syz.2.5796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7deacae9a9 code=0x7ffc0000 [ 538.550285][ T29] audit: type=1326 audit(1753838552.905:7648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22792 comm="syz.2.5796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7deacae9a9 code=0x7ffc0000 [ 538.573776][ T29] audit: type=1326 audit(1753838552.905:7649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22792 comm="syz.2.5796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7deacae9a9 code=0x7ffc0000 [ 538.597417][ T29] audit: type=1326 audit(1753838552.915:7650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22792 comm="syz.2.5796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7deacae9a9 code=0x7ffc0000 [ 538.620862][ T29] audit: type=1326 audit(1753838552.915:7651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22792 comm="syz.2.5796" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7deacae9a9 code=0x7ffc0000 [ 539.061846][T22810] loop2: detected capacity change from 0 to 512 [ 539.139397][T22810] netlink: 87 bytes leftover after parsing attributes in process `syz.2.5799'. [ 539.550582][T22823] loop0: detected capacity change from 0 to 1024 [ 539.557418][T22823] EXT4-fs: Ignoring removed nomblk_io_submit option [ 539.823490][T22819] loop7: detected capacity change from 0 to 512 [ 539.855939][T22834] netlink: 'syz.0.5808': attribute type 5 has an invalid length. [ 539.894409][T22834] loop0: detected capacity change from 0 to 512 [ 539.928324][T22837] lo speed is unknown, defaulting to 1000 [ 539.938485][T22834] EXT4-fs: inline encryption not supported [ 539.952875][T22834] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 540.010115][T22834] EXT4-fs (loop0): 1 truncate cleaned up [ 540.179561][T22844] netlink: 'syz.7.5811': attribute type 5 has an invalid length. [ 540.208090][T22844] loop7: detected capacity change from 0 to 512 [ 540.228955][T22844] EXT4-fs: inline encryption not supported [ 540.249930][T22844] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 540.271362][T22844] EXT4-fs (loop7): 1 truncate cleaned up [ 540.390371][T22850] siw: device registration error -23 [ 540.402247][T22850] loop0: detected capacity change from 0 to 512 [ 540.429508][T22850] EXT4-fs: Ignoring removed orlov option [ 540.439902][T22850] EXT4-fs: Ignoring removed nomblk_io_submit option [ 540.446687][T22850] ext4: Unknown parameter 'fsname' [ 540.475268][T22850] loop0: detected capacity change from 0 to 1024 [ 540.489487][T22850] ext4: Unknown parameter 'smackfshat' [ 540.510889][T22850] loop0: detected capacity change from 0 to 512 [ 540.527464][T22850] EXT4-fs: Ignoring removed nobh option [ 540.659998][T22857] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 540.681493][T22857] loop0: detected capacity change from 0 to 512 [ 540.699719][T22857] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.5816: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 540.729284][T22857] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.5816: Bad quota inode: 3, type: 0 [ 540.740721][T22857] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 540.757262][T22857] EXT4-fs (loop0): mount failed [ 540.777562][T22857] loop0: detected capacity change from 0 to 128 [ 540.790056][T22857] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 540.820246][T22857] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 540.908388][ T4322] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 540.920356][T22864] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 540.987455][T22863] loop2: detected capacity change from 0 to 512 [ 541.016157][T22863] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.5818: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 541.060198][T22863] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.5818: Bad quota inode: 3, type: 0 [ 541.079157][T22863] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 541.115112][T22863] EXT4-fs (loop2): mount failed [ 541.168552][T22863] loop2: detected capacity change from 0 to 128 [ 541.186153][T22863] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 541.208233][T22863] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 541.277942][ T2120] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 541.340423][T22876] loop2: detected capacity change from 0 to 2048 [ 541.441110][T22880] 9pnet_fd: Insufficient options for proto=fd [ 541.632682][T22886] lo speed is unknown, defaulting to 1000 [ 541.668283][T22890] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 541.686506][T22888] loop2: detected capacity change from 0 to 1024 [ 541.697195][T22890] loop0: detected capacity change from 0 to 512 [ 541.708043][T22888] EXT4-fs: Ignoring removed mblk_io_submit option [ 541.715255][T22888] EXT4-fs: Ignoring removed nobh option [ 541.720874][T22888] EXT4-fs: Ignoring removed bh option [ 541.729218][T22890] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.5829: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 541.754370][T22890] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.5829: Bad quota inode: 3, type: 0 [ 541.768958][T22890] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 541.784145][T22890] EXT4-fs (loop0): mount failed [ 541.813609][T22890] loop0: detected capacity change from 0 to 128 [ 541.829958][T22890] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 541.847024][T22890] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 541.972550][ T2120] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 542.045872][T22899] loop0: detected capacity change from 0 to 2048 [ 542.518013][T22905] lo speed is unknown, defaulting to 1000 [ 542.535594][T22917] loop0: detected capacity change from 0 to 1024 [ 542.558292][T22917] EXT4-fs: Ignoring removed nomblk_io_submit option [ 542.683191][T22924] loop7: detected capacity change from 0 to 512 [ 542.704028][ T2120] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.732031][T22905] chnl_net:caif_netlink_parms(): no params data found [ 542.811666][ T2120] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.877080][ T2120] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.940735][T22905] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.947836][T22905] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.965242][T22905] bridge_slave_0: entered allmulticast mode [ 543.011863][T22905] bridge_slave_0: entered promiscuous mode [ 543.019336][ T2120] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.030315][T22905] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.037480][T22905] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.065647][T22905] bridge_slave_1: entered allmulticast mode [ 543.072203][T22905] bridge_slave_1: entered promiscuous mode [ 543.110308][T22905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 543.151930][T22905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.161732][ T2120] dummy0: left allmulticast mode [ 543.169130][ T2120] bridge0: port 1(dummy0) entered disabled state [ 543.341025][ T2120] bond0 (unregistering): Released all slaves [ 543.360374][ T2120] bond1 (unregistering): Released all slaves [ 543.467915][T22905] team0: Port device team_slave_0 added [ 543.474596][T22905] team0: Port device team_slave_1 added [ 543.513098][T22905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 543.520303][T22905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.546390][T22905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 543.567976][T22905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 543.575060][T22905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 543.601095][T22905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 543.635245][ T2120] hsr_slave_0: left promiscuous mode [ 543.645088][ T2120] hsr_slave_1: left promiscuous mode [ 543.666012][ T2120] veth1_macvtap: left promiscuous mode [ 543.681070][ T2120] veth0_macvtap: left promiscuous mode [ 543.703648][ T29] kauditd_printk_skb: 256 callbacks suppressed [ 543.703662][ T29] audit: type=1326 audit(1753838558.195:7908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22951 comm="syz.1.5845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e483e9a9 code=0x7ffc0000 [ 543.733575][ T29] audit: type=1326 audit(1753838558.195:7909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22951 comm="syz.1.5845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e483e9a9 code=0x7ffc0000 [ 543.739066][ T2120] veth1_vlan: left promiscuous mode [ 543.781532][ T29] audit: type=1326 audit(1753838558.195:7910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22951 comm="syz.1.5845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f30e483e9a9 code=0x7ffc0000 [ 543.805104][ T29] audit: type=1326 audit(1753838558.195:7911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22951 comm="syz.1.5845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e483e9a9 code=0x7ffc0000 [ 543.805111][ T2120] veth0_vlan: left promiscuous mode [ 543.805191][ T29] audit: type=1326 audit(1753838558.195:7912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22951 comm="syz.1.5845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e483e9a9 code=0x7ffc0000 [ 543.857281][ T29] audit: type=1326 audit(1753838558.195:7913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22951 comm="syz.1.5845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f30e483e9a9 code=0x7ffc0000 [ 543.951407][ T29] audit: type=1326 audit(1753838558.385:7914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22951 comm="syz.1.5845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e483e9a9 code=0x7ffc0000 [ 543.975017][ T29] audit: type=1326 audit(1753838558.385:7915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22951 comm="syz.1.5845" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e483e9a9 code=0x7ffc0000 [ 544.038533][T22967] loop1: detected capacity change from 0 to 512 [ 544.045289][T22967] EXT4-fs: Ignoring removed orlov option [ 544.052608][T22967] EXT4-fs: Ignoring removed nomblk_io_submit option [ 544.060090][T22967] ext4: Unknown parameter 'fsname' [ 544.072123][T22967] loop1: detected capacity change from 0 to 1024 [ 544.078827][T22967] ext4: Unknown parameter 'smackfshat' [ 544.088760][T22967] loop1: detected capacity change from 0 to 512 [ 544.096507][T22967] EXT4-fs: Ignoring removed nobh option [ 544.128331][T22971] loop0: detected capacity change from 0 to 512 [ 544.165458][T22971] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0 [ 544.175763][T22971] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 544.207276][T22971] EXT4-fs (loop0): mount failed [ 544.215061][T22905] hsr_slave_0: entered promiscuous mode [ 544.221250][T22905] hsr_slave_1: entered promiscuous mode [ 544.239139][T22981] loop1: detected capacity change from 0 to 512 [ 544.252548][T22979] netlink: 'syz.7.5857': attribute type 5 has an invalid length. [ 544.286786][T22979] loop7: detected capacity change from 0 to 512 [ 544.312929][T22979] EXT4-fs: inline encryption not supported [ 544.335907][T22979] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 544.360324][T22981] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 544.376517][T22981] EXT4-fs error (device loop1): ext4_add_entry:2417: inode #2: comm syz.1.5856: Directory hole found for htree leaf block 0 [ 544.404427][T22979] EXT4-fs (loop7): 1 truncate cleaned up [ 544.424786][T22990] loop0: detected capacity change from 0 to 512 [ 544.439455][T22990] ext4: Bad value for 'errors' [ 544.497914][ T29] audit: type=1326 audit(1753838558.985:7916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22996 comm="syz.0.5862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eeb1be9a9 code=0x7ffc0000 [ 544.605771][T23003] loop0: detected capacity change from 0 to 512 [ 544.613771][T23003] EXT4-fs: Ignoring removed orlov option [ 544.629929][T23003] EXT4-fs: Ignoring removed nomblk_io_submit option [ 544.641329][T23003] ext4: Unknown parameter 'fsname' [ 544.653233][T23003] loop0: detected capacity change from 0 to 1024 [ 544.660343][T23003] ext4: Unknown parameter 'smackfshat' [ 544.673250][T23003] loop0: detected capacity change from 0 to 512 [ 544.679862][T23003] EXT4-fs: Ignoring removed nobh option [ 544.717343][T23007] FAULT_INJECTION: forcing a failure. [ 544.717343][T23007] name failslab, interval 1, probability 0, space 0, times 0 [ 544.730029][T23007] CPU: 1 UID: 0 PID: 23007 Comm: syz.7.5866 Not tainted 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 544.730110][T23007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 544.730120][T23007] Call Trace: [ 544.730125][T23007] [ 544.730175][T23007] __dump_stack+0x1d/0x30 [ 544.730195][T23007] dump_stack_lvl+0xe8/0x140 [ 544.730210][T23007] dump_stack+0x15/0x1b [ 544.730224][T23007] should_fail_ex+0x265/0x280 [ 544.730244][T23007] should_failslab+0x8c/0xb0 [ 544.730266][T23007] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 544.730317][T23007] ? sidtab_sid2str_get+0xa0/0x130 [ 544.730400][T23007] kmemdup_noprof+0x2b/0x70 [ 544.730423][T23007] sidtab_sid2str_get+0xa0/0x130 [ 544.730529][T23007] security_sid_to_context_core+0x1eb/0x2e0 [ 544.730554][T23007] security_sid_to_context+0x27/0x40 [ 544.730577][T23007] selinux_lsmprop_to_secctx+0x67/0xf0 [ 544.730611][T23007] security_lsmprop_to_secctx+0x43/0x80 [ 544.730644][T23007] audit_log_task_context+0x77/0x190 [ 544.730756][T23007] audit_log_task+0xf4/0x250 [ 544.730864][T23007] audit_seccomp+0x61/0x100 [ 544.730890][T23007] ? __seccomp_filter+0x68c/0x10d0 [ 544.730975][T23007] __seccomp_filter+0x69d/0x10d0 [ 544.730998][T23007] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 544.731018][T23007] ? vfs_write+0x75e/0x8e0 [ 544.731067][T23007] ? __rcu_read_unlock+0x4f/0x70 [ 544.731089][T23007] ? __fget_files+0x184/0x1c0 [ 544.731112][T23007] __secure_computing+0x82/0x150 [ 544.731134][T23007] syscall_trace_enter+0xcf/0x1e0 [ 544.731154][T23007] do_syscall_64+0xac/0x200 [ 544.731220][T23007] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 544.731243][T23007] ? clear_bhb_loop+0x40/0x90 [ 544.731264][T23007] ? clear_bhb_loop+0x40/0x90 [ 544.731282][T23007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.731345][T23007] RIP: 0033:0x7f6446b6e9a9 [ 544.731361][T23007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.731379][T23007] RSP: 002b:00007f64451cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000000d [ 544.731408][T23007] RAX: ffffffffffffffda RBX: 00007f6446d95fa0 RCX: 00007f6446b6e9a9 [ 544.731422][T23007] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000019 [ 544.731435][T23007] RBP: 00007f64451cf090 R08: 0000200000000440 R09: 0000000000000000 [ 544.731448][T23007] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 544.731461][T23007] R13: 0000000000000000 R14: 00007f6446d95fa0 R15: 00007fff3b6f0d48 [ 544.731481][T23007] [ 545.013267][T22905] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 545.022417][T23009] loop7: detected capacity change from 0 to 1024 [ 545.037094][T23009] EXT4-fs: Ignoring removed nomblk_io_submit option [ 545.100125][T22905] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 545.109506][T23016] loop0: detected capacity change from 0 to 128 [ 545.116269][T23016] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 545.131151][T22905] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 545.146787][T22905] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 545.153637][T23016] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 545.180908][T23018] loop7: detected capacity change from 0 to 512 [ 545.201550][T23018] ext4 filesystem being mounted at /192/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 545.212102][ T51] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 545.224366][T23018] EXT4-fs error (device loop7): ext4_add_entry:2417: inode #2: comm syz.7.5870: Directory hole found for htree leaf block 0 [ 545.248553][T22905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.297333][T22905] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.310451][T23032] loop0: detected capacity change from 0 to 512 [ 545.319616][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.326729][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.338823][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.345923][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.497577][T22905] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 545.507988][T22905] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 545.658629][T23049] loop7: detected capacity change from 0 to 1024 [ 545.666281][T23049] EXT4-fs: Ignoring removed nomblk_io_submit option [ 545.748592][T22905] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 545.828325][T23060] 9pnet_fd: Insufficient options for proto=fd [ 545.919978][T23070] loop1: detected capacity change from 0 to 1024 [ 545.926850][T23070] EXT4-fs: Ignoring removed nomblk_io_submit option [ 545.951183][T22905] veth0_vlan: entered promiscuous mode [ 545.982602][T22905] veth1_vlan: entered promiscuous mode [ 546.047557][T22905] veth0_macvtap: entered promiscuous mode [ 546.054942][T22905] veth1_macvtap: entered promiscuous mode [ 546.078530][T22905] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 546.095994][T22905] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.145001][T22905] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.153777][T22905] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.162515][T22905] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.171230][T22905] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.281322][T23089] netlink: 'syz.0.5889': attribute type 5 has an invalid length. [ 546.296943][T23086] loop1: detected capacity change from 0 to 1024 [ 546.317277][T23089] loop0: detected capacity change from 0 to 512 [ 546.329294][T23086] EXT4-fs: Ignoring removed nomblk_io_submit option [ 546.338639][T23089] EXT4-fs: inline encryption not supported [ 546.343332][T23090] loop2: detected capacity change from 0 to 512 [ 546.352853][T23089] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 546.384239][T23090] netlink: 87 bytes leftover after parsing attributes in process `syz.2.5832'. [ 546.405045][T23089] EXT4-fs (loop0): 1 truncate cleaned up [ 546.428662][T23096] loop1: detected capacity change from 0 to 512 [ 546.637715][T23099] 9pnet_fd: Insufficient options for proto=fd [ 546.719758][T23105] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 546.743126][T23105] loop7: detected capacity change from 0 to 512 [ 546.832288][T23105] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #3: comm syz.7.5894: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 546.875192][T23105] EXT4-fs error (device loop7): ext4_quota_enable:7127: comm syz.7.5894: Bad quota inode: 3, type: 0 [ 546.901743][T23111] loop0: detected capacity change from 0 to 512 [ 546.908242][T23105] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 546.944536][T23111] ext4 filesystem being mounted at /177/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 546.958126][T23105] EXT4-fs (loop7): mount failed [ 546.965575][T23111] EXT4-fs error (device loop0): ext4_add_entry:2417: inode #2: comm syz.0.5897: Directory hole found for htree leaf block 0 [ 546.983692][T23105] loop7: detected capacity change from 0 to 128 [ 546.996035][T23105] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 547.008676][T23105] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 547.257378][T23126] netlink: 'syz.0.5902': attribute type 5 has an invalid length. [ 547.279634][T23128] netlink: 'syz.7.5903': attribute type 5 has an invalid length. [ 547.302229][T23128] loop7: detected capacity change from 0 to 512 [ 547.309061][T23128] EXT4-fs: inline encryption not supported [ 547.315206][T23128] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 547.328047][T23126] loop0: detected capacity change from 0 to 512 [ 547.334999][T23126] EXT4-fs: inline encryption not supported [ 547.343448][T23126] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 547.354626][T23128] EXT4-fs (loop7): 1 truncate cleaned up [ 547.381909][T23126] EXT4-fs (loop0): 1 truncate cleaned up [ 547.547308][T23134] 9pnet_fd: Insufficient options for proto=fd [ 547.654569][T23142] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 547.669364][T23142] loop1: detected capacity change from 0 to 512 [ 547.685890][T23142] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #3: comm syz.1.5908: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 547.706242][T23146] netlink: 'syz.7.5909': attribute type 5 has an invalid length. [ 547.716643][T23142] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.5908: Bad quota inode: 3, type: 0 [ 547.728789][T23142] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 547.743832][T23142] EXT4-fs (loop1): mount failed [ 547.754529][T23146] loop7: detected capacity change from 0 to 512 [ 547.761470][T23146] EXT4-fs: inline encryption not supported [ 547.819145][T23146] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 547.862824][T23146] EXT4-fs (loop7): 1 truncate cleaned up [ 547.941356][T23138] loop0: detected capacity change from 0 to 32768 [ 547.994655][T23138] loop0: p1 p2 p3 < p5 p6 > [ 547.999392][T23138] loop0: p1 size 242222080 extends beyond EOD, truncated [ 548.012237][T23138] loop0: p2 start 4294967295 is beyond EOD, truncated [ 548.125398][T23151] loop2: detected capacity change from 0 to 1024 [ 548.163647][T23151] EXT4-fs: Ignoring removed nomblk_io_submit option [ 548.185113][T23157] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 548.197154][T23157] loop0: detected capacity change from 0 to 512 [ 548.224879][T23161] loop1: detected capacity change from 0 to 512 [ 548.241883][T23161] ext4: Bad value for 'errors' [ 548.275284][T23157] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.5910: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 548.304257][T23166] netlink: 'syz.1.5915': attribute type 5 has an invalid length. [ 548.322102][T22905] EXT4-fs unmount: 101 callbacks suppressed [ 548.322118][T22905] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.347573][T23166] loop1: detected capacity change from 0 to 512 [ 548.364186][T23157] EXT4-fs error (device loop0): ext4_quota_enable:7127: comm syz.0.5910: Bad quota inode: 3, type: 0 [ 548.375669][T23166] EXT4-fs: inline encryption not supported [ 548.399219][T23166] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 548.409095][T23157] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 548.450830][T23157] EXT4-fs (loop0): mount failed [ 548.481114][T23166] EXT4-fs (loop1): 1 truncate cleaned up [ 548.489728][T23166] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.711361][T22135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.816783][T23191] netlink: 'syz.1.5923': attribute type 5 has an invalid length. [ 548.844455][T23191] loop1: detected capacity change from 0 to 512 [ 548.861260][T23191] EXT4-fs: inline encryption not supported [ 548.874548][T23191] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 548.886717][T23191] EXT4-fs (loop1): 1 truncate cleaned up [ 548.893323][T23191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 548.953874][T23194] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 548.964926][T23194] loop2: detected capacity change from 0 to 512 [ 548.975946][T23194] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.5924: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 548.994286][T23194] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.5924: Bad quota inode: 3, type: 0 [ 549.017056][T23194] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 549.027007][T23198] loop7: detected capacity change from 0 to 512 [ 549.033027][T23194] EXT4-fs (loop2): mount failed [ 549.038806][T23198] ext4: Bad value for 'errors' [ 549.057348][ T29] kauditd_printk_skb: 117 callbacks suppressed [ 549.057362][ T29] audit: type=1326 audit(1754362851.509:8033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23193 comm="syz.2.5924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ff4ffe9a9 code=0x7ffc0000 [ 549.102973][T22135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.107623][ T29] audit: type=1326 audit(1754362851.538:8034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23193 comm="syz.2.5924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ff4ffe9a9 code=0x7ffc0000 [ 549.135468][ T29] audit: type=1326 audit(1754362851.538:8035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23193 comm="syz.2.5924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ff4ffe9a9 code=0x7ffc0000 [ 549.159108][ T29] audit: type=1326 audit(1754362851.538:8036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23193 comm="syz.2.5924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ff4ffe9a9 code=0x7ffc0000 [ 549.182744][ T29] audit: type=1326 audit(1754362851.548:8037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23193 comm="syz.2.5924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ff4ffe9a9 code=0x7ffc0000 [ 549.206465][ T29] audit: type=1326 audit(1754362851.548:8038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23193 comm="syz.2.5924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ff4ffe9a9 code=0x7ffc0000 [ 549.230059][ T29] audit: type=1326 audit(1754362851.548:8039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23193 comm="syz.2.5924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ff4ffe9a9 code=0x7ffc0000 [ 549.253727][ T29] audit: type=1326 audit(1754362851.548:8040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23193 comm="syz.2.5924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f4ff4ffe9a9 code=0x7ffc0000 [ 549.278858][ T29] audit: type=1326 audit(1754362851.548:8041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23193 comm="syz.2.5924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ff4ffe9a9 code=0x7ffc0000 [ 549.302368][ T29] audit: type=1326 audit(1754362851.548:8042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23193 comm="syz.2.5924" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ff4ffe9a9 code=0x7ffc0000 [ 549.335969][T23206] netlink: 'syz.2.5930': attribute type 21 has an invalid length. [ 549.343194][T23207] lo speed is unknown, defaulting to 1000 [ 549.343899][T23206] netlink: 'syz.2.5930': attribute type 1 has an invalid length. [ 549.357398][T23206] netlink: 144 bytes leftover after parsing attributes in process `syz.2.5930'. [ 549.385930][T23212] netlink: 'syz.4.5931': attribute type 10 has an invalid length. [ 549.464001][T23221] loop0: detected capacity change from 0 to 512 [ 549.490673][T23217] netlink: 'syz.2.5932': attribute type 10 has an invalid length. [ 549.513681][T23221] EXT4-fs (loop0): mounted filesystem 00000000-0004-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.527205][T23221] ext4 filesystem being mounted at /185/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 549.540262][T23221] EXT4-fs error (device loop0): ext4_add_entry:2417: inode #2: comm syz.0.5934: Directory hole found for htree leaf block 0 [ 549.566077][T21089] EXT4-fs (loop0): unmounting filesystem 00000000-0004-0000-0000-000000000000. [ 549.617687][T23227] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5928'. [ 549.775689][T23234] loop2: detected capacity change from 0 to 512 [ 549.783959][T23234] ext4: Bad value for 'errors' [ 550.008205][T23241] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 550.027327][T23241] loop2: detected capacity change from 0 to 512 [ 550.046829][T23241] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.5941: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 550.084073][T23241] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.5941: Bad quota inode: 3, type: 0 [ 550.128151][T23241] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 550.182968][T23241] EXT4-fs (loop2): mount failed [ 550.404364][T23252] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 550.451825][T23252] loop7: detected capacity change from 0 to 512 [ 550.499302][T23252] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #3: comm syz.7.5944: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 550.526334][T23265] loop0: detected capacity change from 0 to 512 [ 550.532653][T23252] EXT4-fs error (device loop7): ext4_quota_enable:7127: comm syz.7.5944: Bad quota inode: 3, type: 0 [ 550.545081][T23252] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 550.568352][T23265] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8840c118, mo2=0006] [ 550.569201][T23252] EXT4-fs (loop7): mount failed [ 550.582274][T23265] EXT4-fs error (device loop0): ext4_read_inode_bitmap:139: comm syz.0.5948: Invalid inode bitmap blk 4 in block_group 0 [ 550.598439][T23265] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 550.652639][T23265] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters [ 550.671349][T23272] siw: device registration error -23 [ 550.680398][T23272] loop1: detected capacity change from 0 to 512 [ 550.703588][T23272] EXT4-fs: Ignoring removed orlov option [ 550.709464][T23272] EXT4-fs: Ignoring removed nomblk_io_submit option [ 550.721219][T23275] loop7: detected capacity change from 0 to 512 [ 550.728852][T23272] ext4: Unknown parameter 'fsname' [ 550.749680][T23272] loop1: detected capacity change from 0 to 1024 [ 550.767078][T23275] EXT4-fs: inline encryption not supported [ 550.776882][T23272] ext4: Unknown parameter 'smackfshat' [ 550.783484][T23275] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 550.796576][T23272] loop1: detected capacity change from 0 to 512 [ 550.803116][T23272] EXT4-fs: Ignoring removed nobh option [ 550.828818][T23272] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.846992][T23275] EXT4-fs (loop7): 1 truncate cleaned up [ 550.853455][T21089] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.857249][T23275] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.896696][T23284] loop2: detected capacity change from 0 to 1024 [ 550.904303][T23284] EXT4-fs: Ignoring removed nomblk_io_submit option [ 550.940451][T22135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 550.950499][T23284] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 551.006285][T23294] loop1: detected capacity change from 0 to 512 [ 551.026762][T23290] loop4: detected capacity change from 0 to 512 [ 551.028000][T23294] EXT4-fs: inline encryption not supported [ 551.039552][T23294] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 551.050613][T22905] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.078960][T23294] EXT4-fs (loop1): 1 truncate cleaned up [ 551.080362][T19213] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.085336][T23294] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.095319][T23290] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 551.176617][T23290] netlink: 87 bytes leftover after parsing attributes in process `syz.4.5955'. [ 551.212263][T23308] loop7: detected capacity change from 0 to 1024 [ 551.219108][T23308] EXT4-fs: Ignoring removed mblk_io_submit option [ 551.225809][T23308] EXT4-fs: Ignoring removed nobh option [ 551.231443][T23308] EXT4-fs: Ignoring removed bh option [ 551.244804][ T9] IPVS: starting estimator thread 0... [ 551.252989][T23308] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.298666][T22135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.323439][T19213] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.334620][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 551.349097][T23311] IPVS: using max 2736 ests per chain, 136800 per kthread [ 551.372791][T23320] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 551.399658][T23320] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 551.629252][T23331] FAULT_INJECTION: forcing a failure. [ 551.629252][T23331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.642509][T23331] CPU: 1 UID: 0 PID: 23331 Comm: syz.7.5967 Not tainted 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 551.642665][T23331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 551.642706][T23331] Call Trace: [ 551.642787][T23331] [ 551.642794][T23331] __dump_stack+0x1d/0x30 [ 551.642814][T23331] dump_stack_lvl+0xe8/0x140 [ 551.642835][T23331] dump_stack+0x15/0x1b [ 551.642852][T23331] should_fail_ex+0x265/0x280 [ 551.642933][T23331] should_fail+0xb/0x20 [ 551.642949][T23331] should_fail_usercopy+0x1a/0x20 [ 551.642971][T23331] _copy_from_user+0x1c/0xb0 [ 551.643020][T23331] do_ipt_set_ctl+0x3a0/0x820 [ 551.643042][T23331] ? _raw_spin_unlock_bh+0x36/0x40 [ 551.643069][T23331] ? tcp_release_cb+0xf1/0x370 [ 551.643148][T23331] nf_setsockopt+0x196/0x1b0 [ 551.643177][T23331] ip_setsockopt+0x102/0x110 [ 551.643198][T23331] tcp_setsockopt+0x95/0xb0 [ 551.643219][T23331] sock_common_setsockopt+0x66/0x80 [ 551.643313][T23331] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 551.643346][T23331] __sys_setsockopt+0x181/0x200 [ 551.643372][T23331] __x64_sys_setsockopt+0x64/0x80 [ 551.643392][T23331] x64_sys_call+0x20ec/0x2ff0 [ 551.643460][T23331] do_syscall_64+0xd2/0x200 [ 551.643514][T23331] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 551.643695][T23331] ? clear_bhb_loop+0x40/0x90 [ 551.643716][T23331] ? clear_bhb_loop+0x40/0x90 [ 551.643736][T23331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.643756][T23331] RIP: 0033:0x7f6446b6e9a9 [ 551.643772][T23331] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.643846][T23331] RSP: 002b:00007f64451cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 551.643864][T23331] RAX: ffffffffffffffda RBX: 00007f6446d95fa0 RCX: 00007f6446b6e9a9 [ 551.643877][T23331] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 000000000000000a [ 551.643890][T23331] RBP: 00007f64451cf090 R08: 0000000000000570 R09: 0000000000000000 [ 551.643903][T23331] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000001 [ 551.643916][T23331] R13: 0000000000000000 R14: 00007f6446d95fa0 R15: 00007fff3b6f0d48 [ 551.643989][T23331] [ 551.917911][T23341] loop2: detected capacity change from 0 to 512 [ 551.929254][T23339] loop7: detected capacity change from 0 to 128 [ 551.938508][T23339] gtp: attempt to access beyond end of device [ 551.938508][T23339] loop7: rw=0, sector=2071, nr_sectors = 1 limit=128 [ 551.940443][T23343] loop1: detected capacity change from 0 to 512 [ 551.953374][T14937] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.960150][T23341] EXT4-fs (loop2): mounted filesystem 00000000-0004-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 551.979394][T23341] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 551.980365][T23343] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 552.003950][T23341] EXT4-fs error (device loop2): ext4_add_entry:2417: inode #2: comm syz.2.5974: Directory hole found for htree leaf block 0 [ 552.025437][T23339] xt_SECMARK: invalid security context 'system_u:object_r:dbusd_etc_t:s0' [ 552.073518][T23350] lo speed is unknown, defaulting to 1000 [ 552.146693][T23361] loop0: detected capacity change from 0 to 512 [ 552.163565][T22905] EXT4-fs (loop2): unmounting filesystem 00000000-0004-0000-0000-000000000000. [ 552.175594][T23361] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 552.219724][T23367] loop2: detected capacity change from 0 to 1024 [ 552.229245][T23367] EXT4-fs: Ignoring removed nomblk_io_submit option [ 552.247170][T23369] loop4: detected capacity change from 0 to 1024 [ 552.254014][T23369] EXT4-fs: Ignoring removed nomblk_io_submit option [ 552.274981][T23369] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 552.275427][T23367] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 552.313153][T14937] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.397257][ T4170] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 552.408943][T22905] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.475570][T23379] lo speed is unknown, defaulting to 1000 [ 552.814209][T22135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 552.834836][T23383] loop1: detected capacity change from 0 to 512 [ 552.843343][T23383] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 553.119548][T23390] loop7: detected capacity change from 0 to 512 [ 553.127184][T23390] ext4: Bad value for 'errors' [ 553.138010][T21089] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.192319][T23394] loop0: detected capacity change from 0 to 1024 [ 553.199873][T23394] EXT4-fs: Ignoring removed nomblk_io_submit option [ 553.212062][T23396] loop7: detected capacity change from 0 to 512 [ 553.228423][T23394] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 553.259653][T23396] EXT4-fs (loop7): mounted filesystem 00000000-0004-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 553.276323][T23396] ext4 filesystem being mounted at /225/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 553.303663][T21089] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.343681][T23396] EXT4-fs error (device loop7): ext4_add_entry:2417: inode #2: comm syz.7.5993: Directory hole found for htree leaf block 0 [ 553.435848][T23408] validate_nla: 2 callbacks suppressed [ 553.435864][T23408] netlink: 'syz.4.5997': attribute type 10 has an invalid length. [ 553.449319][T23408] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5997'. [ 553.471621][ T4170] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 553.502141][T23404] loop2: detected capacity change from 0 to 512 [ 553.502741][T19213] EXT4-fs (loop7): unmounting filesystem 00000000-0004-0000-0000-000000000000. [ 553.509901][T23410] lo speed is unknown, defaulting to 1000 [ 553.536630][T23404] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 553.572828][T23404] netlink: 87 bytes leftover after parsing attributes in process `syz.2.5996'. [ 553.596225][T23417] netlink: 'syz.7.5999': attribute type 10 has an invalid length. [ 553.798715][T22135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.995658][T23432] lo speed is unknown, defaulting to 1000 [ 554.025569][T23428] loop4: detected capacity change from 0 to 512 [ 554.080106][T23428] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 554.218340][T14937] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.257806][T23440] FAULT_INJECTION: forcing a failure. [ 554.257806][T23440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.271022][T23440] CPU: 1 UID: 0 PID: 23440 Comm: syz.1.6009 Not tainted 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 554.271051][T23440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 554.271062][T23440] Call Trace: [ 554.271069][T23440] [ 554.271098][T23440] __dump_stack+0x1d/0x30 [ 554.271118][T23440] dump_stack_lvl+0xe8/0x140 [ 554.271139][T23440] dump_stack+0x15/0x1b [ 554.271152][T23440] should_fail_ex+0x265/0x280 [ 554.271173][T23440] should_fail+0xb/0x20 [ 554.271236][T23440] should_fail_usercopy+0x1a/0x20 [ 554.271260][T23440] _copy_from_user+0x1c/0xb0 [ 554.271289][T23440] ___sys_sendmsg+0xc1/0x1d0 [ 554.271331][T23440] __x64_sys_sendmsg+0xd4/0x160 [ 554.271368][T23440] x64_sys_call+0x191e/0x2ff0 [ 554.271390][T23440] do_syscall_64+0xd2/0x200 [ 554.271412][T23440] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 554.271538][T23440] ? clear_bhb_loop+0x40/0x90 [ 554.271559][T23440] ? clear_bhb_loop+0x40/0x90 [ 554.271595][T23440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.271613][T23440] RIP: 0033:0x7f30e483e9a9 [ 554.271628][T23440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.271705][T23440] RSP: 002b:00007f30e2e9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 554.271724][T23440] RAX: ffffffffffffffda RBX: 00007f30e4a65fa0 RCX: 00007f30e483e9a9 [ 554.271738][T23440] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000006 [ 554.271751][T23440] RBP: 00007f30e2e9f090 R08: 0000000000000000 R09: 0000000000000000 [ 554.271763][T23440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 554.271854][T23440] R13: 0000000000000000 R14: 00007f30e4a65fa0 R15: 00007ffe1f473308 [ 554.271871][T23440] [ 554.458901][T23443] netlink: 'syz.4.6010': attribute type 10 has an invalid length. [ 554.466945][T23443] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6010'. [ 554.477949][T22905] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.504117][ T29] kauditd_printk_skb: 283 callbacks suppressed [ 554.504131][ T29] audit: type=1326 audit(1754362856.814:8326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23447 comm="syz.0.6014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eeb1be9a9 code=0x7ffc0000 [ 554.535703][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 554.557090][ T29] audit: type=1326 audit(1754362856.814:8327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23447 comm="syz.0.6014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3eeb1be9a9 code=0x7ffc0000 [ 554.580742][ T29] audit: type=1326 audit(1754362856.814:8328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23447 comm="syz.0.6014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eeb1be9a9 code=0x7ffc0000 [ 554.604338][ T29] audit: type=1326 audit(1754362856.814:8329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23447 comm="syz.0.6014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eeb1be9a9 code=0x7ffc0000 [ 554.627915][ T29] audit: type=1326 audit(1754362856.814:8330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23447 comm="syz.0.6014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3eeb1be9a9 code=0x7ffc0000 [ 554.651471][ T29] audit: type=1326 audit(1754362856.814:8331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23447 comm="syz.0.6014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eeb1be9a9 code=0x7ffc0000 [ 554.675061][ T29] audit: type=1326 audit(1754362856.814:8332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23447 comm="syz.0.6014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3eeb1be9a9 code=0x7ffc0000 [ 554.686348][T10039] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 554.699058][ T29] audit: type=1326 audit(1754362856.814:8333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23447 comm="syz.0.6014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eeb1be9a9 code=0x7ffc0000 [ 554.732926][ T29] audit: type=1326 audit(1754362856.814:8334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23447 comm="syz.0.6014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3eeb1be9a9 code=0x7ffc0000 [ 554.756463][ T29] audit: type=1326 audit(1754362856.843:8335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23447 comm="syz.0.6014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eeb1be9a9 code=0x7ffc0000 [ 554.806602][T23462] loop1: detected capacity change from 0 to 1024 [ 554.813490][T23462] EXT4-fs: Ignoring removed mblk_io_submit option [ 554.820260][T23462] EXT4-fs: Ignoring removed nobh option [ 554.825857][T23462] EXT4-fs: Ignoring removed bh option [ 554.876908][T23466] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 554.888557][T23466] loop7: detected capacity change from 0 to 512 [ 554.906138][T23466] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #3: comm syz.7.6020: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 554.906696][T23462] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.925091][T23466] EXT4-fs error (device loop7): ext4_quota_enable:7127: comm syz.7.6020: Bad quota inode: 3, type: 0 [ 554.976167][T23473] netlink: 'syz.4.6022': attribute type 12 has an invalid length. [ 555.000995][T23466] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 555.017650][T23466] EXT4-fs (loop7): mount failed [ 555.138043][T23475] loop2: detected capacity change from 0 to 512 [ 555.158940][T22135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.171373][T23475] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 555.195162][T23475] netlink: 87 bytes leftover after parsing attributes in process `syz.2.6023'. [ 555.352943][T23480] lo speed is unknown, defaulting to 1000 [ 555.495447][T23486] netlink: 'syz.1.6025': attribute type 5 has an invalid length. [ 555.506996][T23486] loop1: detected capacity change from 0 to 512 [ 555.513741][T23486] EXT4-fs: inline encryption not supported [ 555.520337][T23486] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 555.583988][T23486] EXT4-fs (loop1): 1 truncate cleaned up [ 555.585284][ T3407] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 555.589992][T23486] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 555.706107][T23493] loop0: detected capacity change from 0 to 2048 [ 555.742690][T23499] lo speed is unknown, defaulting to 1000 [ 555.748599][T23493] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 555.776840][T23493] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6028: bg 0: block 120: padding at end of block bitmap is not set [ 555.797673][T22135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.814878][T23493] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6028'. [ 555.823944][T23493] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6028'. [ 555.902710][T22905] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.930152][T23504] loop2: detected capacity change from 0 to 1024 [ 555.937154][T23504] EXT4-fs: Ignoring removed mblk_io_submit option [ 555.943815][T23504] EXT4-fs: Ignoring removed nobh option [ 555.949488][T23504] EXT4-fs: Ignoring removed bh option [ 555.972786][T21089] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 555.983256][T23504] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 556.042983][T22905] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.078022][T23510] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 556.158579][T23512] loop7: detected capacity change from 0 to 1024 [ 556.191398][T23512] EXT4-fs: Ignoring removed mblk_io_submit option [ 556.198781][T23512] EXT4-fs: Ignoring removed nobh option [ 556.204409][T23512] EXT4-fs: Ignoring removed bh option [ 556.220871][T23516] loop0: detected capacity change from 0 to 1024 [ 556.228298][T23516] EXT4-fs: Ignoring removed nomblk_io_submit option [ 556.230860][T23512] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 556.260716][T23516] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 556.286284][T19213] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.328172][T23524] netlink: 'syz.7.6039': attribute type 10 has an invalid length. [ 556.329109][T21089] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.377432][T23532] netlink: 'syz.0.6041': attribute type 5 has an invalid length. [ 556.394996][T23532] loop0: detected capacity change from 0 to 512 [ 556.412121][T23532] EXT4-fs: inline encryption not supported [ 556.423302][T23532] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 556.443298][T23532] EXT4-fs (loop0): 1 truncate cleaned up [ 556.450906][T23532] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 556.490057][T23540] lo speed is unknown, defaulting to 1000 [ 556.499557][T23542] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 556.511820][T23528] loop2: detected capacity change from 0 to 512 [ 556.521880][T23528] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 556.681039][ T3407] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 556.698057][T22905] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.708847][T21089] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.805391][T23556] loop4: detected capacity change from 0 to 1024 [ 556.813749][T23556] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 556.824707][T23556] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 556.835475][T23556] EXT4-fs (loop4): invalid journal inode [ 556.841180][T23556] EXT4-fs (loop4): can't get journal size [ 556.849905][T23556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 556.981513][T23559] loop0: detected capacity change from 0 to 512 [ 557.114150][T23559] EXT4-fs (loop0): mounted filesystem 00000000-0004-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 557.148176][T23559] ext4 filesystem being mounted at /206/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 557.162006][T23564] loop2: detected capacity change from 0 to 1024 [ 557.170093][T23564] EXT4-fs: Ignoring removed nomblk_io_submit option [ 557.180381][T23559] EXT4-fs error (device loop0): ext4_add_entry:2417: inode #2: comm syz.0.6051: Directory hole found for htree leaf block 0 [ 557.206348][T23564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 557.232506][T21089] EXT4-fs (loop0): unmounting filesystem 00000000-0004-0000-0000-000000000000. [ 557.313440][T22905] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.429727][T23572] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 557.633587][T23576] loop7: detected capacity change from 0 to 1024 [ 557.645008][T23576] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 557.656111][T23576] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (30349!=20869) [ 557.666694][T23576] EXT4-fs (loop7): invalid journal inode [ 557.672376][T23576] EXT4-fs (loop7): can't get journal size [ 557.697469][T23583] netlink: 'syz.0.6053': attribute type 10 has an invalid length. [ 557.762314][ T3407] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 557.780676][T23594] lo speed is unknown, defaulting to 1000 [ 557.802606][T23596] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 557.815034][T23596] loop1: detected capacity change from 0 to 512 [ 557.825290][T23596] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #3: comm syz.1.6063: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 557.843479][T23596] EXT4-fs error (device loop1): ext4_quota_enable:7127: comm syz.1.6063: Bad quota inode: 3, type: 0 [ 557.855251][T23596] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 557.871088][T23596] EXT4-fs (loop1): mount failed [ 557.928303][T23604] loop1: detected capacity change from 0 to 512 [ 557.946637][ T3407] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 557.958986][T23604] ext4: Bad value for 'errors' [ 558.009268][T23608] netlink: 'syz.0.6070': attribute type 5 has an invalid length. [ 558.025613][T23608] loop0: detected capacity change from 0 to 512 [ 558.033434][T23608] EXT4-fs: inline encryption not supported [ 558.040803][T23608] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 558.058339][T23608] EXT4-fs (loop0): 1 truncate cleaned up [ 558.066288][T23611] loop1: detected capacity change from 0 to 512 [ 558.087084][T23611] EXT4-fs: Ignoring removed i_version option [ 558.093241][T23611] EXT4-fs: Ignoring removed mblk_io_submit option [ 558.103960][T23611] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 558.127794][T23605] lo speed is unknown, defaulting to 1000 [ 558.144628][T23611] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 558.186905][T23623] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 558.201248][T23605] chnl_net:caif_netlink_parms(): no params data found [ 558.243691][T23605] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.250870][T23605] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.258566][T23605] bridge_slave_0: entered allmulticast mode [ 558.265228][T23605] bridge_slave_0: entered promiscuous mode [ 558.275969][T23605] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.283052][T23605] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.290283][T23605] bridge_slave_1: entered allmulticast mode [ 558.296889][T23605] bridge_slave_1: entered promiscuous mode [ 558.322662][T23605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 558.335319][T23605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.358384][T23605] team0: Port device team_slave_0 added [ 558.366150][T23605] team0: Port device team_slave_1 added [ 558.383859][T23640] netlink: 'syz.0.6077': attribute type 10 has an invalid length. [ 558.395603][T23605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.402681][T23605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.428722][T23605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.450783][T23605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.457805][T23605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.483807][T23605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.496251][ T4317] dummy0: left allmulticast mode [ 558.503426][T23644] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 558.504396][ T4317] bridge0: port 3(dummy0) entered disabled state [ 558.522848][ T4317] bridge_slave_1: left allmulticast mode [ 558.528608][ T4317] bridge_slave_1: left promiscuous mode [ 558.534292][ T4317] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.542983][ T4317] bridge_slave_0: left allmulticast mode [ 558.543703][T23647] siw: device registration error -23 [ 558.548733][ T4317] bridge_slave_0: left promiscuous mode [ 558.559579][T23647] loop0: detected capacity change from 0 to 512 [ 558.559691][ T4317] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.566383][T23647] EXT4-fs: Ignoring removed orlov option [ 558.578782][T23647] EXT4-fs: Ignoring removed nomblk_io_submit option [ 558.585463][T23647] ext4: Unknown parameter 'fsname' [ 558.600737][T23647] loop0: detected capacity change from 0 to 1024 [ 558.608416][T23647] ext4: Unknown parameter 'smackfshat' [ 558.630443][T23647] loop0: detected capacity change from 0 to 512 [ 558.637009][T23647] EXT4-fs: Ignoring removed nobh option [ 558.691481][T23656] siw: device registration error -23 [ 558.700035][T23656] loop1: detected capacity change from 0 to 512 [ 558.706791][T23656] EXT4-fs: Ignoring removed orlov option [ 558.713694][T23656] EXT4-fs: Ignoring removed nomblk_io_submit option [ 558.721171][T23656] ext4: Unknown parameter 'fsname' [ 558.734122][ T4317] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.747938][T23656] loop1: detected capacity change from 0 to 1024 [ 558.754846][ T4317] bond_slave_0: left promiscuous mode [ 558.754945][T23656] ext4: Unknown parameter 'smackfshat' [ 558.778247][T23656] loop1: detected capacity change from 0 to 512 [ 558.785177][ T4317] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.792784][T23661] loop7: detected capacity change from 0 to 512 [ 558.806023][ T4317] bond_slave_1: left promiscuous mode [ 558.809580][T23656] EXT4-fs: Ignoring removed nobh option [ 558.813119][ T4317] $Hÿ (unregistering): Released all slaves [ 558.840542][ T3407] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 558.840568][T23661] ext4 filesystem being mounted at /244/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 558.853380][T23664] loop0: detected capacity change from 0 to 1024 [ 558.868381][T23664] EXT4-fs: Ignoring removed mblk_io_submit option [ 558.874985][T23664] EXT4-fs: Ignoring removed nobh option [ 558.880691][T23664] EXT4-fs: Ignoring removed bh option [ 558.892175][T23661] EXT4-fs error (device loop7): ext4_add_entry:2417: inode #2: comm syz.7.6086: Directory hole found for htree leaf block 0 [ 558.914459][T23605] hsr_slave_0: entered promiscuous mode [ 558.954660][T23605] hsr_slave_1: entered promiscuous mode [ 558.960689][T23605] debugfs: 'hsr0' already exists in 'hsr' [ 558.966678][T23605] Cannot create hsr debugfs directory [ 558.993547][ T4317] hsr_slave_0: left promiscuous mode [ 558.999333][ T4317] hsr_slave_1: left promiscuous mode [ 559.006509][ T4317] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.015516][ T4317] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 559.044933][T23683] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 559.065470][ T4317] team0 (unregistering): Port device team_slave_1 removed [ 559.075050][ T4317] team0 (unregistering): Port device team_slave_0 removed [ 559.082456][T23686] netlink: 'syz.2.6093': attribute type 10 has an invalid length. [ 559.201972][T23695] loop2: detected capacity change from 0 to 512 [ 559.222726][T23697] lo speed is unknown, defaulting to 1000 [ 559.231012][T23697] lo speed is unknown, defaulting to 1000 [ 559.237500][T23697] lo speed is unknown, defaulting to 1000 [ 559.247861][T23697] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 559.263871][T23695] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 559.267804][T23697] lo speed is unknown, defaulting to 1000 [ 559.280800][T23697] lo speed is unknown, defaulting to 1000 [ 559.287608][T23697] lo speed is unknown, defaulting to 1000 [ 559.287716][T23695] EXT4-fs error (device loop2): ext4_add_entry:2417: inode #2: comm syz.2.6099: Directory hole found for htree leaf block 0 [ 559.293815][T23697] lo speed is unknown, defaulting to 1000 [ 559.316330][T23697] lo speed is unknown, defaulting to 1000 [ 559.323408][T23697] lo speed is unknown, defaulting to 1000 [ 559.329553][T23697] lo speed is unknown, defaulting to 1000 [ 559.329604][T23700] loop0: detected capacity change from 0 to 512 [ 559.343015][T23700] EXT4-fs: Ignoring removed orlov option [ 559.349184][T23700] EXT4-fs: Ignoring removed nomblk_io_submit option [ 559.355912][T23700] ext4: Unknown parameter 'fsname' [ 559.373799][T23697] loop0: detected capacity change from 0 to 1024 [ 559.380778][T23697] ext4: Unknown parameter 'smackfshat' [ 559.386357][T23701] loop7: detected capacity change from 0 to 512 [ 559.395825][T23701] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 559.407443][T23697] loop0: detected capacity change from 0 to 512 [ 559.414903][T23697] EXT4-fs: Ignoring removed nobh option [ 559.420415][T23705] loop2: detected capacity change from 0 to 1024 [ 559.427534][T23705] EXT4-fs: Ignoring removed nobh option [ 559.428667][T23701] EXT4-fs (loop7): 1 truncate cleaned up [ 559.433281][T23705] EXT4-fs: Ignoring removed bh option [ 559.468157][T23714] FAULT_INJECTION: forcing a failure. [ 559.468157][T23714] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.481349][T23714] CPU: 0 UID: 0 PID: 23714 Comm: syz.2.6102 Not tainted 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 559.481374][T23714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 559.481385][T23714] Call Trace: [ 559.481390][T23714] [ 559.481396][T23714] __dump_stack+0x1d/0x30 [ 559.481450][T23714] dump_stack_lvl+0xe8/0x140 [ 559.481469][T23714] dump_stack+0x15/0x1b [ 559.481486][T23714] should_fail_ex+0x265/0x280 [ 559.481549][T23714] should_fail+0xb/0x20 [ 559.481582][T23714] should_fail_usercopy+0x1a/0x20 [ 559.481602][T23714] _copy_from_user+0x1c/0xb0 [ 559.481665][T23714] ___sys_sendmsg+0xc1/0x1d0 [ 559.481697][T23714] __x64_sys_sendmsg+0xd4/0x160 [ 559.481721][T23714] x64_sys_call+0x191e/0x2ff0 [ 559.481766][T23714] do_syscall_64+0xd2/0x200 [ 559.481786][T23714] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 559.481814][T23714] ? clear_bhb_loop+0x40/0x90 [ 559.481880][T23714] ? clear_bhb_loop+0x40/0x90 [ 559.481898][T23714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.481914][T23714] RIP: 0033:0x7f4ff4ffe9a9 [ 559.481950][T23714] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.481965][T23714] RSP: 002b:00007f4ff3667038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 559.481982][T23714] RAX: ffffffffffffffda RBX: 00007f4ff5225fa0 RCX: 00007f4ff4ffe9a9 [ 559.482070][T23714] RDX: 0000000000000040 RSI: 0000200000000080 RDI: 0000000000000003 [ 559.482080][T23714] RBP: 00007f4ff3667090 R08: 0000000000000000 R09: 0000000000000000 [ 559.482090][T23714] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.482101][T23714] R13: 0000000000000000 R14: 00007f4ff5225fa0 R15: 00007ffddaf74a28 [ 559.482117][T23714] [ 559.667916][T23716] netlink: 'syz.2.6103': attribute type 10 has an invalid length. [ 559.675756][T23716] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6103'. [ 559.684710][T23716] dummy0: entered promiscuous mode [ 559.690400][T23716] bridge0: port 3(dummy0) entered blocking state [ 559.696792][T23716] bridge0: port 3(dummy0) entered disabled state [ 559.703235][T23716] dummy0: entered allmulticast mode [ 559.709775][T23716] bridge0: port 3(dummy0) entered blocking state [ 559.716194][T23716] bridge0: port 3(dummy0) entered forwarding state [ 559.778326][T23605] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 559.792157][T23605] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 559.800347][T23726] netlink: 'syz.0.6108': attribute type 5 has an invalid length. [ 559.808176][T23605] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 559.814985][T23726] loop0: detected capacity change from 0 to 512 [ 559.821651][T23726] EXT4-fs: inline encryption not supported [ 559.823189][T23605] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 559.835179][T23726] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 559.847347][T23726] EXT4-fs (loop0): 1 truncate cleaned up [ 559.877471][T23735] netlink: 'syz.2.6109': attribute type 12 has an invalid length. [ 559.897699][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 559.909571][T23605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.926667][T23605] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.928711][T23737] loop1: detected capacity change from 0 to 1024 [ 559.938052][ T2120] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.946741][ T2120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.948839][T23737] EXT4-fs: Ignoring removed nomblk_io_submit option [ 559.962115][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.969230][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 560.078300][T23605] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 560.088706][T23605] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 560.127748][T23746] siw: device registration error -23 [ 560.138490][T23746] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6113'. [ 560.151484][T23750] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 560.240070][T23765] siw: device registration error -23 [ 560.274355][T23605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 560.355609][T23765] loop1: detected capacity change from 0 to 512 [ 560.365421][T23765] EXT4-fs: Ignoring removed orlov option [ 560.371162][T23765] EXT4-fs: Ignoring removed nomblk_io_submit option [ 560.387633][T23776] lo speed is unknown, defaulting to 1000 [ 560.394406][T23765] ext4: Unknown parameter 'fsname' [ 560.418357][T23757] loop1: detected capacity change from 0 to 1024 [ 560.419273][T23770] netlink: 'syz.7.6115': attribute type 10 has an invalid length. [ 560.425479][T23757] ext4: Unknown parameter 'smackfshat' [ 560.432537][T23770] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6115'. [ 560.465189][T23757] loop1: detected capacity change from 0 to 512 [ 560.471889][T23757] EXT4-fs: Ignoring removed nobh option [ 560.485236][T23770] bridge0: port 3(dummy0) entered blocking state [ 560.491609][T23770] bridge0: port 3(dummy0) entered forwarding state [ 560.540317][T23784] netlink: 'syz.7.6120': attribute type 5 has an invalid length. [ 560.551458][T23786] netlink: 'syz.1.6121': attribute type 5 has an invalid length. [ 560.559349][T23784] loop7: detected capacity change from 0 to 512 [ 560.566122][T23784] EXT4-fs: inline encryption not supported [ 560.579335][T23784] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 560.591787][T23605] veth0_vlan: entered promiscuous mode [ 560.600575][T23786] loop1: detected capacity change from 0 to 512 [ 560.605700][T23605] veth1_vlan: entered promiscuous mode [ 560.607411][T23786] EXT4-fs: inline encryption not supported [ 560.620590][T23786] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 560.628080][T23784] EXT4-fs (loop7): 1 truncate cleaned up [ 560.632697][T23605] veth0_macvtap: entered promiscuous mode [ 560.643391][T23605] veth1_macvtap: entered promiscuous mode [ 560.649796][T23786] EXT4-fs (loop1): 1 truncate cleaned up [ 560.668885][T23605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 560.698608][T23605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 560.707872][T23605] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.716794][T23605] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.725515][T23605] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.734305][T23605] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 560.758461][T23793] loop2: detected capacity change from 0 to 512 [ 560.774450][T23793] netlink: 87 bytes leftover after parsing attributes in process `syz.2.6123'. [ 560.840111][T23801] loop4: detected capacity change from 0 to 512 [ 560.863193][T23801] netlink: 87 bytes leftover after parsing attributes in process `syz.4.6068'. [ 560.923590][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 560.923603][ T29] audit: type=1326 audit(1754362863.124:8475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23805 comm="syz.7.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6446b6e9a9 code=0x7ffc0000 [ 560.962070][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 560.987849][ T29] audit: type=1326 audit(1754362863.164:8476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23805 comm="syz.7.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6446b6e9a9 code=0x7ffc0000 [ 561.011516][ T29] audit: type=1326 audit(1754362863.164:8477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23805 comm="syz.7.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6446b6e9a9 code=0x7ffc0000 [ 561.035234][ T29] audit: type=1326 audit(1754362863.164:8478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23805 comm="syz.7.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6446b6e9a9 code=0x7ffc0000 [ 561.058721][ T29] audit: type=1326 audit(1754362863.164:8479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23805 comm="syz.7.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6446b6e9a9 code=0x7ffc0000 [ 561.082346][ T29] audit: type=1326 audit(1754362863.164:8480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23805 comm="syz.7.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6446b6e9a9 code=0x7ffc0000 [ 561.105978][ T29] audit: type=1326 audit(1754362863.164:8481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23805 comm="syz.7.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6446b6e9a9 code=0x7ffc0000 [ 561.129474][ T29] audit: type=1326 audit(1754362863.164:8482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23805 comm="syz.7.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6446b6e9a9 code=0x7ffc0000 [ 561.153033][ T29] audit: type=1326 audit(1754362863.164:8483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23805 comm="syz.7.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6446b6e9a9 code=0x7ffc0000 [ 561.176734][ T29] audit: type=1326 audit(1754362863.164:8484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23805 comm="syz.7.6125" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6446b6e9a9 code=0x7ffc0000 [ 561.204050][T23811] FAULT_INJECTION: forcing a failure. [ 561.204050][T23811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.217215][T23811] CPU: 1 UID: 0 PID: 23811 Comm: syz.1.6126 Not tainted 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 561.217241][T23811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 561.217253][T23811] Call Trace: [ 561.217259][T23811] [ 561.217267][T23811] __dump_stack+0x1d/0x30 [ 561.217302][T23811] dump_stack_lvl+0xe8/0x140 [ 561.217319][T23811] dump_stack+0x15/0x1b [ 561.217333][T23811] should_fail_ex+0x265/0x280 [ 561.217353][T23811] should_fail+0xb/0x20 [ 561.217371][T23811] should_fail_usercopy+0x1a/0x20 [ 561.217471][T23811] _copy_from_user+0x1c/0xb0 [ 561.217500][T23811] ___sys_sendmsg+0xc1/0x1d0 [ 561.217538][T23811] __x64_sys_sendmsg+0xd4/0x160 [ 561.217566][T23811] x64_sys_call+0x191e/0x2ff0 [ 561.217630][T23811] do_syscall_64+0xd2/0x200 [ 561.217650][T23811] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 561.217673][T23811] ? clear_bhb_loop+0x40/0x90 [ 561.217734][T23811] ? clear_bhb_loop+0x40/0x90 [ 561.217751][T23811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.217769][T23811] RIP: 0033:0x7f30e483e9a9 [ 561.217784][T23811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.217802][T23811] RSP: 002b:00007f30e2e9f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 561.217821][T23811] RAX: ffffffffffffffda RBX: 00007f30e4a65fa0 RCX: 00007f30e483e9a9 [ 561.217857][T23811] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006 [ 561.217869][T23811] RBP: 00007f30e2e9f090 R08: 0000000000000000 R09: 0000000000000000 [ 561.217880][T23811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.217890][T23811] R13: 0000000000000000 R14: 00007f30e4a65fa0 R15: 00007ffe1f473308 [ 561.217910][T23811] [ 561.219775][T23811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6126'. [ 561.458189][T23817] siw: device registration error -23 [ 561.473351][T23817] loop1: detected capacity change from 0 to 512 [ 561.480024][T23817] EXT4-fs: Ignoring removed orlov option [ 561.485801][T23817] EXT4-fs: Ignoring removed nomblk_io_submit option [ 561.492979][T23817] ext4: Unknown parameter 'fsname' [ 561.504193][T23817] loop1: detected capacity change from 0 to 1024 [ 561.511122][T23817] ext4: Unknown parameter 'smackfshat' [ 561.525814][T23817] loop1: detected capacity change from 0 to 512 [ 561.532472][T23817] EXT4-fs: Ignoring removed nobh option [ 561.551276][T23819] netlink: 'syz.0.6132': attribute type 12 has an invalid length. [ 561.582044][T23821] netlink: 'syz.7.6130': attribute type 10 has an invalid length. [ 561.589873][T23821] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6130'. [ 561.612900][T23824] FAULT_INJECTION: forcing a failure. [ 561.612900][T23824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.626009][T23824] CPU: 0 UID: 0 PID: 23824 Comm: syz.2.6133 Not tainted 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 561.626036][T23824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 561.626048][T23824] Call Trace: [ 561.626054][T23824] [ 561.626125][T23824] __dump_stack+0x1d/0x30 [ 561.626146][T23824] dump_stack_lvl+0xe8/0x140 [ 561.626165][T23824] dump_stack+0x15/0x1b [ 561.626181][T23824] should_fail_ex+0x265/0x280 [ 561.626207][T23824] should_fail+0xb/0x20 [ 561.626228][T23824] should_fail_usercopy+0x1a/0x20 [ 561.626324][T23824] _copy_from_user+0x1c/0xb0 [ 561.626354][T23824] ___sys_sendmsg+0xc1/0x1d0 [ 561.626395][T23824] __x64_sys_sendmsg+0xd4/0x160 [ 561.626450][T23824] x64_sys_call+0x191e/0x2ff0 [ 561.626505][T23824] do_syscall_64+0xd2/0x200 [ 561.626599][T23824] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 561.626625][T23824] ? clear_bhb_loop+0x40/0x90 [ 561.626646][T23824] ? clear_bhb_loop+0x40/0x90 [ 561.626668][T23824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.626688][T23824] RIP: 0033:0x7f4ff4ffe9a9 [ 561.626779][T23824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.626795][T23824] RSP: 002b:00007f4ff3667038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 561.626820][T23824] RAX: ffffffffffffffda RBX: 00007f4ff5225fa0 RCX: 00007f4ff4ffe9a9 [ 561.626869][T23824] RDX: 0000000044004811 RSI: 0000200000000240 RDI: 0000000000000004 [ 561.626882][T23824] RBP: 00007f4ff3667090 R08: 0000000000000000 R09: 0000000000000000 [ 561.626894][T23824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.626906][T23824] R13: 0000000000000000 R14: 00007f4ff5225fa0 R15: 00007ffddaf74a28 [ 561.626926][T23824] [ 561.808818][T23826] netlink: 'syz.7.6134': attribute type 5 has an invalid length. [ 561.887514][T23826] loop7: detected capacity change from 0 to 512 [ 561.943081][T23826] EXT4-fs: inline encryption not supported [ 561.963208][T23826] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 562.016303][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 562.029629][T23826] EXT4-fs (loop7): 1 truncate cleaned up [ 562.250470][T23840] lo speed is unknown, defaulting to 1000 [ 562.264629][T23841] loop2: detected capacity change from 0 to 512 [ 562.290668][T23843] lo speed is unknown, defaulting to 1000 [ 562.321275][T23841] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 562.410376][T23841] EXT4-fs (loop2): 1 truncate cleaned up [ 562.457331][T23851] loop0: detected capacity change from 0 to 1024 [ 562.469483][T23851] EXT4-fs: Ignoring removed nomblk_io_submit option [ 562.587630][T23862] siw: device registration error -23 [ 562.599745][T23862] loop1: detected capacity change from 0 to 512 [ 562.606425][T23862] EXT4-fs: Ignoring removed orlov option [ 562.612349][T23862] EXT4-fs: Ignoring removed nomblk_io_submit option [ 562.619179][T23862] ext4: Unknown parameter 'fsname' [ 562.633370][T23862] loop1: detected capacity change from 0 to 1024 [ 562.640308][T23862] ext4: Unknown parameter 'smackfshat' [ 562.651456][T23862] loop1: detected capacity change from 0 to 512 [ 562.659984][T23862] EXT4-fs: Ignoring removed nobh option [ 562.733014][T23865] tipc: Can't bind to reserved service type 2 [ 562.980483][T23865] ref_ctr_offset mismatch. inode: 0x4fc offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x12 [ 562.996888][T23873] loop1: detected capacity change from 0 to 512 [ 563.011829][T23873] netlink: 87 bytes leftover after parsing attributes in process `syz.1.6148'. [ 563.059000][ T4170] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 563.092776][T23878] loop4: detected capacity change from 0 to 512 [ 563.124059][T23878] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 563.158011][T23878] EXT4-fs error (device loop4): ext4_add_entry:2417: inode #2: comm syz.4.6149: Directory hole found for htree leaf block 0 [ 563.591953][T23902] loop7: detected capacity change from 0 to 1024 [ 563.599619][T23902] EXT4-fs: Ignoring removed nomblk_io_submit option [ 563.696834][T23908] lo speed is unknown, defaulting to 1000 [ 563.792056][T23912] lo speed is unknown, defaulting to 1000 [ 563.801872][T23916] loop2: detected capacity change from 0 to 1024 [ 563.809088][T23916] EXT4-fs: Ignoring removed mblk_io_submit option [ 563.815761][T23916] EXT4-fs: Ignoring removed nobh option [ 563.816751][T23914] loop0: detected capacity change from 0 to 2048 [ 563.821510][T23916] EXT4-fs: Ignoring removed bh option [ 563.952424][T23927] loop1: detected capacity change from 0 to 512 [ 563.968133][T23927] netlink: 87 bytes leftover after parsing attributes in process `syz.1.6163'. [ 563.996861][T23934] loop2: detected capacity change from 0 to 512 [ 564.067346][T23940] loop0: detected capacity change from 0 to 512 [ 564.112716][ T4170] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 564.444925][T10039] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 564.455668][ T3515] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 564.709647][T23945] loop4: detected capacity change from 0 to 512 [ 564.787164][T23957] loop1: detected capacity change from 0 to 1024 [ 564.794018][T23957] EXT4-fs: Ignoring removed mblk_io_submit option [ 564.800752][T23957] EXT4-fs: Ignoring removed nobh option [ 564.806471][T23957] EXT4-fs: Ignoring removed bh option [ 564.911802][T23965] validate_nla: 3 callbacks suppressed [ 564.911845][T23965] netlink: 'syz.4.6178': attribute type 5 has an invalid length. [ 564.931730][T23961] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 564.955407][T23967] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6179'. [ 564.967205][T23961] loop2: detected capacity change from 0 to 512 [ 564.979879][T23965] loop4: detected capacity change from 0 to 512 [ 564.997200][T23961] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.6176: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 565.015640][T23965] EXT4-fs: inline encryption not supported [ 565.022128][T23970] loop1: detected capacity change from 0 to 2048 [ 565.022578][T23961] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.6176: Bad quota inode: 3, type: 0 [ 565.041852][T23965] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 565.054757][T23965] EXT4-fs (loop4): 1 truncate cleaned up [ 565.061283][T23961] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 565.085435][ T4170] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 565.132433][T23977] loop7: detected capacity change from 0 to 1024 [ 565.139170][T23977] EXT4-fs: Ignoring removed nomblk_io_submit option [ 565.162568][ T3407] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 565.201640][T23961] EXT4-fs (loop2): mount failed [ 565.231759][T23981] loop0: detected capacity change from 0 to 512 [ 565.242799][T23981] netlink: 87 bytes leftover after parsing attributes in process `syz.0.6183'. [ 565.352955][T23993] loop2: detected capacity change from 0 to 1024 [ 565.359774][T23993] EXT4-fs: Ignoring removed mblk_io_submit option [ 565.366397][T23993] EXT4-fs: Ignoring removed nobh option [ 565.371980][T23993] EXT4-fs: Ignoring removed bh option [ 565.372098][T23995] loop1: detected capacity change from 0 to 512 [ 565.383948][T23986] loop7: detected capacity change from 0 to 512 [ 565.441642][T23986] netlink: 87 bytes leftover after parsing attributes in process `syz.7.6184'. [ 565.704436][T24018] loop4: detected capacity change from 0 to 1024 [ 565.719631][T24018] EXT4-fs: Ignoring removed nomblk_io_submit option [ 565.729954][T10039] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 565.804649][T24023] netlink: 'syz.4.6196': attribute type 5 has an invalid length. [ 565.847027][T24025] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 565.857274][T24025] loop2: detected capacity change from 0 to 512 [ 565.864641][T24023] loop4: detected capacity change from 0 to 512 [ 565.871886][T24023] EXT4-fs: inline encryption not supported [ 565.878126][T24023] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 565.894186][T24023] EXT4-fs (loop4): 1 truncate cleaned up [ 565.900170][T24025] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #3: comm syz.2.6197: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 565.931929][T24025] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.6197: Bad quota inode: 3, type: 0 [ 565.955515][T24025] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 565.970803][T24025] EXT4-fs (loop2): mount failed [ 566.009126][ T29] kauditd_printk_skb: 196 callbacks suppressed [ 566.009141][ T29] audit: type=1326 audit(1754362868.144:8681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24024 comm="syz.2.6197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ff4ffe9a9 code=0x7ffc0000 [ 566.050667][ T29] audit: type=1326 audit(1754362868.144:8682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24024 comm="syz.2.6197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ff4ffe9a9 code=0x7ffc0000 [ 566.074372][ T29] audit: type=1326 audit(1754362868.144:8683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24024 comm="syz.2.6197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f4ff4ffe9a9 code=0x7ffc0000 [ 566.097850][ T29] audit: type=1326 audit(1754362868.144:8684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24024 comm="syz.2.6197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ff4ffe9a9 code=0x7ffc0000 [ 566.121433][ T29] audit: type=1326 audit(1754362868.164:8685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24024 comm="syz.2.6197" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ff4ffe9a9 code=0x7ffc0000 [ 566.174067][ T29] audit: type=1326 audit(1754362868.322:8686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24030 comm="syz.2.6199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ff4ffe9a9 code=0x7ffc0000 [ 566.213819][ T4170] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 566.234148][ T29] audit: type=1326 audit(1754362868.342:8687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24030 comm="syz.2.6199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4ff4ffe9a9 code=0x7ffc0000 [ 566.257866][ T29] audit: type=1326 audit(1754362868.342:8688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24030 comm="syz.2.6199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ff4ffe9a9 code=0x7ffc0000 [ 566.281393][ T29] audit: type=1326 audit(1754362868.352:8689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24030 comm="syz.2.6199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=332 compat=0 ip=0x7f4ff4ffe9a9 code=0x7ffc0000 [ 566.305058][ T29] audit: type=1326 audit(1754362868.352:8690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24030 comm="syz.2.6199" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ff4ffe9a9 code=0x7ffc0000 [ 566.309159][T24033] netlink: 'syz.0.6198': attribute type 5 has an invalid length. [ 566.352852][T24038] loop7: detected capacity change from 0 to 1024 [ 566.353017][T24033] loop0: detected capacity change from 0 to 512 [ 566.366122][T24033] EXT4-fs: inline encryption not supported [ 566.372292][T24033] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 566.395026][T24039] loop2: detected capacity change from 0 to 512 [ 566.403126][T24038] EXT4-fs: Ignoring removed mblk_io_submit option [ 566.410103][T24039] ext4: Bad value for 'errors' [ 566.416017][T24038] EXT4-fs: Ignoring removed nobh option [ 566.421613][T24038] EXT4-fs: Ignoring removed bh option [ 566.439272][T24033] EXT4-fs (loop0): 1 truncate cleaned up [ 566.500728][T24051] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6207'. [ 566.520903][ T3515] hid-generic 0005:0000:0000.0001: unknown main item tag 0x0 [ 566.528443][ T3515] hid-generic 0005:0000:0000.0001: unknown main item tag 0x0 [ 566.535822][ T3515] hid-generic 0005:0000:0000.0001: unknown main item tag 0x0 [ 566.543306][ T3515] hid-generic 0005:0000:0000.0001: unknown main item tag 0x0 [ 566.543515][T24055] loop2: detected capacity change from 0 to 1024 [ 566.550878][ T3515] hid-generic 0005:0000:0000.0001: unknown main item tag 0x0 [ 566.559337][T24055] EXT4-fs: Ignoring removed nomblk_io_submit option [ 566.564496][ T3515] hid-generic 0005:0000:0000.0001: unknown main item tag 0x0 [ 566.578492][ T3515] hid-generic 0005:0000:0000.0001: item fetching failed at offset 8/43 [ 566.603910][T24056] lo speed is unknown, defaulting to 1000 [ 566.631978][T24051] lo speed is unknown, defaulting to 1000 [ 566.640665][ T3515] hid-generic 0005:0000:0000.0001: probe with driver hid-generic failed with error -22 [ 566.654155][T24064] vhci_hcd: default hub control req: 0000 v0000 i0000 l31125 [ 566.694855][T24064] loop4: detected capacity change from 0 to 512 [ 566.706828][T24071] netlink: 'syz.0.6212': attribute type 12 has an invalid length. [ 566.721577][T24073] loop7: detected capacity change from 0 to 512 [ 566.747467][T24069] loop2: detected capacity change from 0 to 512 [ 566.758859][T24069] netlink: 87 bytes leftover after parsing attributes in process `syz.2.6211'. [ 566.764431][T24064] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #3: comm syz.4.6210: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 566.786702][T24064] EXT4-fs error (device loop4): ext4_quota_enable:7127: comm syz.4.6210: Bad quota inode: 3, type: 0 [ 566.797800][T24064] EXT4-fs warning (device loop4): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 566.812983][T24064] EXT4-fs (loop4): mount failed [ 566.950755][T24082] netlink: 'syz.4.6215': attribute type 12 has an invalid length. [ 567.067532][T24085] loop2: detected capacity change from 0 to 512 [ 567.137902][T24085] ext4: Bad value for 'errors' [ 567.197032][T24087] loop2: detected capacity change from 0 to 1024 [ 567.265961][T24087] EXT4-fs: Ignoring removed nomblk_io_submit option [ 567.268615][ T4170] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 567.337462][T24090] can0: slcan on ttyS3. [ 567.495679][T24090] can0 (unregistered): slcan off ttyS3. [ 567.580898][T24098] loop2: detected capacity change from 0 to 1024 [ 567.594235][T24098] EXT4-fs: Ignoring removed mblk_io_submit option [ 567.599299][T24100] loop1: detected capacity change from 0 to 1024 [ 567.607721][T24098] EXT4-fs: Ignoring removed nobh option [ 567.608650][T24100] EXT4-fs: Ignoring removed nomblk_io_submit option [ 567.613775][T24098] EXT4-fs: Ignoring removed bh option [ 567.641974][T24105] loop7: detected capacity change from 0 to 1024 [ 567.649042][T24105] EXT4-fs: Ignoring removed nomblk_io_submit option [ 567.716179][T24109] loop4: detected capacity change from 0 to 512 [ 567.755811][T24109] netlink: 87 bytes leftover after parsing attributes in process `syz.4.6224'. [ 567.798639][T24129] loop0: detected capacity change from 0 to 512 [ 567.805308][T24129] EXT4-fs: Ignoring removed orlov option [ 567.812662][T24129] EXT4-fs: Ignoring removed nomblk_io_submit option [ 567.848347][T24129] ext4: Unknown parameter 'fsname' [ 567.857131][T24133] netlink: 'syz.4.6232': attribute type 12 has an invalid length. [ 567.860750][T24129] loop0: detected capacity change from 0 to 1024 [ 567.872976][T24129] ext4: Unknown parameter 'smackfshat' [ 567.893308][T24129] loop0: detected capacity change from 0 to 512 [ 567.909526][T24129] EXT4-fs: Ignoring removed nobh option [ 567.971594][T24125] loop1: detected capacity change from 0 to 512 [ 568.003903][T24138] loop7: detected capacity change from 0 to 1024 [ 568.031194][T24138] EXT4-fs: Ignoring removed nomblk_io_submit option [ 568.118907][T24134] loop2: detected capacity change from 0 to 512 [ 568.344837][ T4170] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 568.456802][T24150] loop7: detected capacity change from 0 to 512 [ 568.464979][T24161] loop0: detected capacity change from 0 to 128 [ 568.534014][T24175] loop2: detected capacity change from 0 to 1024 [ 568.541113][T24175] EXT4-fs: Ignoring removed nomblk_io_submit option [ 568.587286][T24181] siw: device registration error -23 [ 568.595665][T24181] loop2: detected capacity change from 0 to 512 [ 568.604111][T24181] EXT4-fs: Ignoring removed orlov option [ 568.610569][T24181] EXT4-fs: Ignoring removed nomblk_io_submit option [ 568.618012][T24181] ext4: Unknown parameter 'fsname' [ 568.629251][T24185] loop0: detected capacity change from 0 to 512 [ 568.629773][T24181] loop2: detected capacity change from 0 to 1024 [ 568.642473][T24181] ext4: Unknown parameter 'smackfshat' [ 568.660289][T24181] loop2: detected capacity change from 0 to 512 [ 568.670564][T24181] EXT4-fs: Ignoring removed nobh option [ 568.688686][T24185] ext4 filesystem being mounted at /247/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 568.701643][T24185] EXT4-fs error (device loop0): ext4_add_entry:2417: inode #2: comm syz.0.6249: Directory hole found for htree leaf block 0 [ 568.748203][T24192] loop7: detected capacity change from 0 to 2048 [ 568.788714][T24196] netlink: 'syz.0.6253': attribute type 12 has an invalid length. [ 568.877879][T24194] loop4: detected capacity change from 0 to 512 [ 568.936460][T24208] loop7: detected capacity change from 0 to 1024 [ 568.955571][T24208] EXT4-fs: Ignoring removed nomblk_io_submit option [ 568.962566][ T3515] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 569.213949][T24219] lo speed is unknown, defaulting to 1000 [ 569.253862][T24222] can0: slcan on ttyS3. [ 569.265902][T24223] FAULT_INJECTION: forcing a failure. [ 569.265902][T24223] name failslab, interval 1, probability 0, space 0, times 0 [ 569.278611][T24223] CPU: 1 UID: 0 PID: 24223 Comm: syz.4.6261 Not tainted 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 569.278674][T24223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 569.278719][T24223] Call Trace: [ 569.278724][T24223] [ 569.278731][T24223] __dump_stack+0x1d/0x30 [ 569.278767][T24223] dump_stack_lvl+0xe8/0x140 [ 569.278788][T24223] dump_stack+0x15/0x1b [ 569.278805][T24223] should_fail_ex+0x265/0x280 [ 569.278830][T24223] ? percpu_ref_init+0x9c/0x250 [ 569.278868][T24223] should_failslab+0x8c/0xb0 [ 569.278890][T24223] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 569.278940][T24223] __kmalloc_cache_noprof+0x4c/0x320 [ 569.278963][T24223] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 569.279018][T24223] percpu_ref_init+0x9c/0x250 [ 569.279046][T24223] io_ring_ctx_alloc+0x1aa/0x6a0 [ 569.279074][T24223] io_uring_create+0x10f/0x610 [ 569.279137][T24223] __se_sys_io_uring_setup+0x1f7/0x210 [ 569.279169][T24223] __x64_sys_io_uring_setup+0x31/0x40 [ 569.279189][T24223] x64_sys_call+0x2b21/0x2ff0 [ 569.279227][T24223] do_syscall_64+0xd2/0x200 [ 569.279251][T24223] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 569.279328][T24223] ? clear_bhb_loop+0x40/0x90 [ 569.279345][T24223] ? clear_bhb_loop+0x40/0x90 [ 569.279363][T24223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.279385][T24223] RIP: 0033:0x7f5182e9e9a9 [ 569.279401][T24223] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.279484][T24223] RSP: 002b:00007f5181507038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 569.279505][T24223] RAX: ffffffffffffffda RBX: 00007f51830c5fa0 RCX: 00007f5182e9e9a9 [ 569.279581][T24223] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000001de0 [ 569.279594][T24223] RBP: 00007f5181507090 R08: 0000000000000000 R09: 0000000000000000 [ 569.279608][T24223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.279622][T24223] R13: 0000000000000000 R14: 00007f51830c5fa0 R15: 00007ffed61083c8 [ 569.279642][T24223] [ 569.492598][T24222] can0 (unregistered): slcan off ttyS3. [ 569.493056][ T4170] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 569.532356][T24230] loop1: detected capacity change from 0 to 512 [ 569.538701][T24228] loop2: detected capacity change from 0 to 512 [ 569.555557][T24230] ext4 filesystem being mounted at /134/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 569.569862][T24230] EXT4-fs error (device loop1): ext4_add_entry:2417: inode #2: comm syz.1.6264: Directory hole found for htree leaf block 0 [ 569.704011][T24244] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24244 comm=syz.0.6269 [ 569.748692][T24249] loop0: detected capacity change from 0 to 1024 [ 569.765461][T24249] EXT4-fs: Ignoring removed nomblk_io_submit option [ 569.777910][T24246] lo speed is unknown, defaulting to 1000 [ 569.917073][T24254] loop0: detected capacity change from 0 to 1024 [ 569.923914][T24254] EXT4-fs: Ignoring removed nomblk_io_submit option [ 569.980745][T24260] loop0: detected capacity change from 0 to 1024 [ 569.987578][T24260] EXT4-fs: Ignoring removed nomblk_io_submit option [ 570.074616][T24271] loop1: detected capacity change from 0 to 512 [ 570.232110][T24280] netlink: 'syz.7.6280': attribute type 10 has an invalid length. [ 570.240010][T24280] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6280'. [ 570.277596][T24282] loop7: detected capacity change from 0 to 512 [ 570.301997][T24282] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #3: comm syz.7.6281: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 570.325441][T24282] EXT4-fs error (device loop7): ext4_quota_enable:7127: comm syz.7.6281: Bad quota inode: 3, type: 0 [ 570.338556][T24282] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 570.353683][T24282] EXT4-fs (loop7): mount failed [ 570.444447][T24295] lo speed is unknown, defaulting to 1000 [ 570.570898][ T3407] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 570.650726][T24309] netlink: 'syz.7.6292': attribute type 10 has an invalid length. [ 570.658610][T24309] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6292'. [ 570.876120][T24321] loop7: detected capacity change from 0 to 512 [ 570.905969][T24321] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #3: comm syz.7.6296: pblk 24 bad header/extent: invalid extent entries - magic f30a, entries 3, max 4(4), depth 0(0) [ 570.925175][T24321] EXT4-fs error (device loop7): ext4_quota_enable:7127: comm syz.7.6296: Bad quota inode: 3, type: 0 [ 570.936574][T24321] EXT4-fs warning (device loop7): ext4_enable_quotas:7168: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 570.951544][T24321] EXT4-fs (loop7): mount failed [ 571.038497][T24331] lo speed is unknown, defaulting to 1000 [ 571.084243][ T29] kauditd_printk_skb: 462 callbacks suppressed [ 571.084258][ T29] audit: type=1326 audit(1754362873.181:9153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24335 comm="syz.1.6302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e483e9a9 code=0x7ffc0000 [ 571.114517][ T29] audit: type=1326 audit(1754362873.181:9154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24335 comm="syz.1.6302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e483e9a9 code=0x7ffc0000 [ 571.138176][ T29] audit: type=1326 audit(1754362873.181:9155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24335 comm="syz.1.6302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f30e483e9a9 code=0x7ffc0000 [ 571.161822][ T29] audit: type=1326 audit(1754362873.181:9156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24335 comm="syz.1.6302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e483e9a9 code=0x7ffc0000 [ 571.185476][ T29] audit: type=1326 audit(1754362873.181:9157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24335 comm="syz.1.6302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e483e9a9 code=0x7ffc0000 [ 571.188038][T24337] loop7: detected capacity change from 0 to 512 [ 571.209018][ T29] audit: type=1326 audit(1754362873.181:9158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24335 comm="syz.1.6302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f30e483e9a9 code=0x7ffc0000 [ 571.238826][ T29] audit: type=1326 audit(1754362873.220:9159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24335 comm="syz.1.6302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e483e9a9 code=0x7ffc0000 [ 571.275895][ T29] audit: type=1326 audit(1754362873.220:9160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24335 comm="syz.1.6302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30e483e9a9 code=0x7ffc0000 [ 571.299556][ T29] audit: type=1326 audit(1754362873.220:9161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24335 comm="syz.1.6302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30e483e9a9 code=0x7ffc0000 [ 571.302419][T24340] loop2: detected capacity change from 0 to 128 [ 571.323153][ T29] audit: type=1326 audit(1754362873.220:9162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24335 comm="syz.1.6302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30e483e9a9 code=0x7ffc0000 [ 571.333699][T24340] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 571.396205][T24342] netlink: 'syz.1.6304': attribute type 10 has an invalid length. [ 571.404155][T24342] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6304'. [ 571.514918][T24350] loop7: detected capacity change from 0 to 512 [ 571.527876][T24343] ================================================================== [ 571.535991][T24343] BUG: KCSAN: data-race in __mark_inode_dirty / __mark_inode_dirty [ 571.543894][T24343] [ 571.546215][T24343] write to 0xffff888106fc6228 of 4 bytes by task 24340 on cpu 1: [ 571.553930][T24343] __mark_inode_dirty+0x240/0x760 [ 571.558966][T24343] fat_update_time+0x1ec/0x200 [ 571.563748][T24343] file_update_time+0x1fc/0x2b0 [ 571.568613][T24343] __generic_file_write_iter+0x4e/0x120 [ 571.574157][T24343] generic_file_write_iter+0x8d/0x2f0 [ 571.579527][T24343] iter_file_splice_write+0x5ef/0x970 [ 571.584907][T24343] direct_splice_actor+0x153/0x2a0 [ 571.590025][T24343] splice_direct_to_actor+0x30f/0x680 [ 571.595418][T24343] do_splice_direct+0xda/0x150 [ 571.600193][T24343] do_sendfile+0x380/0x650 [ 571.604617][T24343] __x64_sys_sendfile64+0x105/0x150 [ 571.609818][T24343] x64_sys_call+0x2bb0/0x2ff0 [ 571.614493][T24343] do_syscall_64+0xd2/0x200 [ 571.619007][T24343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.624909][T24343] [ 571.627231][T24343] read to 0xffff888106fc6228 of 4 bytes by task 24343 on cpu 0: [ 571.634862][T24343] __mark_inode_dirty+0x18e/0x760 [ 571.639888][T24343] fat_update_time+0x1ec/0x200 [ 571.644666][T24343] touch_atime+0x145/0x340 [ 571.649097][T24343] filemap_splice_read+0x629/0x6b0 [ 571.654217][T24343] splice_direct_to_actor+0x26f/0x680 [ 571.659600][T24343] do_splice_direct+0xda/0x150 [ 571.664370][T24343] do_sendfile+0x380/0x650 [ 571.669835][T24343] __x64_sys_sendfile64+0x105/0x150 [ 571.675049][T24343] x64_sys_call+0x2bb0/0x2ff0 [ 571.679729][T24343] do_syscall_64+0xd2/0x200 [ 571.684257][T24343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.690157][T24343] [ 571.692477][T24343] value changed: 0x00000000 -> 0x00000038 [ 571.698194][T24343] [ 571.700521][T24343] Reported by Kernel Concurrency Sanitizer on: [ 571.706679][T24343] CPU: 0 UID: 0 PID: 24343 Comm: syz.2.6303 Not tainted 6.16.0-syzkaller-03556-g0919a5b3b11c #0 PREEMPT(voluntary) [ 571.718924][T24343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 571.728979][T24343] ================================================================== [ 571.739420][ T4170] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 572.182696][ T4170] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 572.827362][ T4170] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 573.873348][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 574.920079][ T4170] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 575.965643][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 577.011111][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 578.055413][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 578.618659][ T3515] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 579.110035][ T10] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 579.260773][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 580.144541][ T3407] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 581.188980][ T31] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 581.199694][ T3407] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration