last executing test programs: 1m29.891234793s ago: executing program 1 (id=184): bind$netlink(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="18"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_elf64(r1, &(0x7f0000002600)=ANY=[], 0x1820) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7, 0x5], &(0x7f0000000240), 0x0, 0x12}}, 0x40) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="38010000100001002bbd700000000000fc0100000000000000000000000000000a0101000000000000000000000000000000ecdf000000000000b5a43b84f1c22edc7790e4b5f7db55363a2bba88e650c9f5a415b6edaa0b9f800fa69691d68ece052a58a9dcef6b491e1dd0b05298a77ab51e67d02b04efcfcd33dac43c7158", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000fc000000000000000000000000000000feffffffffffffff0000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff00000000000000000000000000000000000000000000000000084000000000000000000000000000000000000000000000100000000000000000000000000000000000000a0004002c0000000000000048000200636263286165732900"/240], 0x138}}, 0x4050) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000640)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e4000000000000000805000400030000000900020073797a3100000000050005000200000014000300686173683a69702c706f72742c6970000500010007"], 0x4c}, 0x1, 0x0, 0x0, 0x20044095}, 0x8042) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3410000008eab1f71616d1099ff01d40bb26e42ead8535514f4d55e1f7b5c8c9a28db035", @ANYRES16=0x0, @ANYBLOB="000425bd7000fcdbdf250700000008001900ffffffff0800090003000000060003008dff000006001b004e230000"], 0x34}, 0x1, 0x0, 0x0, 0x820}, 0x8000) close(0x4) r7 = socket$netlink(0x10, 0x3, 0x14) close_range(r7, 0xffffffffffffffff, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001480)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0xfff2, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40}, 0x44000) getpgid(0xffffffffffffffff) 1m29.205209173s ago: executing program 1 (id=195): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x26) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400fff800000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x915940ab3f6031c7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x3) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000040)=0x9, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, {}, {}, {0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40d5}, 0x0) 1m29.110786302s ago: executing program 1 (id=199): r0 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r0, 0x0, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9511, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1m28.987240943s ago: executing program 1 (id=200): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r3 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xadz\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, &(0x7f0000000580)=0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000440), 0x3) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x200000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {0x400}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x2000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r4, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) socket$key(0xf, 0x3, 0x2) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x3, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 1m26.671099808s ago: executing program 1 (id=221): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) nanosleep(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x4e24, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_usb_connect$hid(0x2, 0xfffffe85, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmmsg$sock(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="588addb04cdce416", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 1m26.625005093s ago: executing program 32 (id=221): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x10) nanosleep(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00@\x00', 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x4e24, 0x1, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_usb_connect$hid(0x2, 0xfffffe85, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmmsg$sock(r2, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000440)="588addb04cdce416", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) 1m18.889023669s ago: executing program 5 (id=294): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYRES8=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00'}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000d40)=@filter={'filter\x00', 0x2, 0x4, 0x4a8, 0xffffffff, 0x0, 0xf0, 0xf0, 0xfeffffff, 0xffffffff, 0x3d8, 0x3d8, 0x3d8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xff, 0xff, 0x0, 0xffffff00], [], 'pimreg0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x3}, 0x2f2, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@dev={0xac, 0x14, 0x14, 0x1d}, 'caif0\x00', {0x7}}}}, {{@ipv6={@mcast1, @loopback, [], [0x0, 0x0, 0xffffffff], 'netdevsim0\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f6531877000001e770b689f173dfa40b58c10327e3121114449fd20ba2be6eb0cde72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x602, 'system_u:object_r:boot_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x508) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x40, 0x9, 0x7ffc0002}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x1c, r3, 0x209, 0x40, 0x1000000, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e22}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4048080}, 0x10) 1m18.823030195s ago: executing program 5 (id=296): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x26) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r3) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400fff800000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x915940ab3f6031c7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x3) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000040)=0x9, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40d5}, 0x0) 1m18.487356174s ago: executing program 5 (id=301): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001680)=@newtaction={0x8c4, 0x30, 0xffff, 0x70bd27, 0xffffffff, {}, [{0x8b0, 0x1, [@m_police={0x8ac, 0x1, 0x0, 0x0, {{0xb}, {0x880, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x80}, @TCA_POLICE_RATE={0x404, 0x2, [0xc2b, 0x800, 0x10000, 0x8872, 0x3, 0x5, 0x2, 0x7aa, 0x4, 0x7, 0x3, 0x7fff, 0x6, 0x2, 0x3ff, 0x3, 0x3, 0x3, 0x400, 0x1, 0x3, 0xff, 0x91b, 0x7, 0x1, 0x8001, 0x2, 0x9, 0x5, 0x9, 0x6, 0x88, 0x4, 0x40, 0x7, 0x6, 0x2, 0x6, 0x7, 0x4, 0x4, 0x81, 0x2fc1, 0x0, 0x5, 0x3, 0x5, 0x9, 0x8, 0x0, 0x4, 0xffffff1f, 0x1, 0x3, 0x7, 0x7eee, 0x5, 0x58c5, 0x4, 0x8001, 0x5, 0x1000, 0x7ff, 0x2, 0x4e10, 0xfac9, 0x3, 0x1, 0x6, 0x40, 0x4, 0x3, 0x6, 0x10001, 0x6, 0x2, 0x5, 0x1, 0x8, 0x0, 0x8, 0x3, 0x7fff, 0x3, 0x5, 0xfffffffb, 0x6, 0x0, 0x5, 0xf1, 0x6bf, 0xf, 0x9, 0x3eae131e, 0x0, 0x8, 0xffffffc0, 0x4, 0x5, 0xaf1, 0x0, 0xff, 0x80000001, 0x1000, 0x1, 0x6, 0x0, 0x9, 0x8, 0xd53, 0x7, 0x8, 0x2, 0xfffffffb, 0x3, 0x1, 0xffffffae, 0x80, 0xffffbf09, 0x7, 0xb86e, 0x40, 0x6, 0x8, 0x3a7b16de, 0xe85, 0x3, 0x4, 0x9, 0x7, 0xfffffffa, 0x0, 0x0, 0x6, 0x7, 0xf, 0x4, 0xffffffff, 0x4, 0x4, 0x3, 0x34fc9882, 0x1, 0xffffff47, 0xff, 0x73, 0xe3, 0xffffffff, 0xfffffff9, 0xad, 0x1fb, 0x2, 0x3f, 0x7, 0xf, 0x3ff, 0xf, 0x1ff, 0xfffffffb, 0x1ff, 0xfffffff8, 0x7, 0x4c, 0x3, 0x9, 0x6, 0xffffb528, 0x3, 0x54, 0x4, 0x8, 0x3, 0x3, 0x9a, 0x2, 0x5, 0x8, 0x9, 0x28c, 0x4, 0x7, 0x8, 0x7f, 0x8, 0x3, 0x800, 0x8, 0x6, 0xa, 0x4, 0x4, 0x7, 0x7, 0xa698, 0xf, 0x7ff, 0x7f, 0x151, 0x1, 0x6, 0x7, 0x5, 0x6, 0x7, 0x4, 0x20, 0x5, 0x800, 0xe7, 0xbb11, 0x8, 0x2, 0x69100000, 0x6c, 0xffff, 0x7, 0x800, 0x8, 0x9, 0xc2, 0x2, 0xfff, 0x10000, 0x10001, 0xd2, 0x2, 0x200, 0x2, 0x0, 0x4, 0x10000, 0x6, 0x8, 0x0, 0xc0, 0x5, 0x9, 0x8, 0x0, 0x4, 0xc9c6, 0xff, 0x4, 0x6, 0x10000, 0x7, 0x6, 0x6, 0x1, 0x7f, 0x3, 0x9, 0x8, 0x3b1a, 0x80000000, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x0, 0x2, 0x2, 0x1ff, {0x6, 0x1, 0x9, 0xfe00, 0x800, 0xfffffff8}, {0x6, 0x2, 0x40, 0x6, 0x0, 0x1db}, 0x0, 0x5, 0xffffffff}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xe4}, @TCA_POLICE_RESULT={0x8, 0x5, 0x9}], [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x3, 0xda, 0x6, 0x3ff, 0x1, 0x7, 0x8, 0x1, 0x1, 0xc, 0x400, 0x0, 0x0, 0x1000, 0x3, 0xa9, 0x0, 0xb26f, 0x7, 0xd, 0x5, 0x2, 0x3, 0xf, 0x9c3, 0xf, 0xc8e, 0x4, 0x3, 0xe0, 0x8, 0xfc5, 0xb61, 0x8, 0x3, 0x8, 0x5e1c, 0xb, 0x7, 0x3, 0xd, 0x0, 0x20000000, 0x27, 0x6, 0x3, 0x7, 0x2ce, 0x1, 0x5, 0x1e77, 0xd0, 0x40, 0x1, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x97, 0xd, 0x8, 0x101, 0x0, 0x0, 0xb61, 0x1, 0x8, 0x6, 0x7, 0x0, 0x2cde, 0x9, 0x5, 0x8, 0x10, 0x7159, 0x5, 0x4, 0xbd, 0x5, 0x5, 0x80000000, 0x1820, 0x5, 0x4, 0x7, 0x7, 0x6, 0x4, 0x6, 0x9, 0xa, 0x6, 0x8, 0xd8e, 0x7, 0x3e28, 0x1, 0x1, 0x6, 0x9, 0x98, 0xd9c5, 0xffffffff, 0x5, 0x40, 0x7, 0x401, 0x401, 0x3, 0x4, 0x80000000, 0x6f, 0x9, 0x99, 0x2, 0xffff, 0x5, 0x8000, 0xff, 0x7f3, 0x7, 0x436b, 0x9, 0x3, 0x1, 0x7, 0x5, 0x8, 0x1, 0x24000000, 0x1000, 0xfffff556, 0x1ff, 0x8000, 0x9, 0xa, 0x8, 0xc, 0x2, 0x5, 0xff, 0xfffffffe, 0x1, 0x80000001, 0x10000, 0xffffffff, 0x7fff, 0x7, 0xc4, 0x4, 0x5, 0x2, 0x87fe, 0x5, 0x7bbb, 0x7fffffff, 0xf, 0x0, 0xfffffff6, 0xfffffff9, 0x0, 0x9, 0x40, 0x13e7, 0xdb61, 0x7e97, 0xfffffffa, 0x64, 0x2, 0x55c, 0x0, 0x9f94, 0x2, 0x2, 0x2, 0x2318, 0xffffeec6, 0x5, 0x8, 0x5, 0x4, 0x582, 0x771e, 0x27c11bb0, 0xfffffffb, 0x6, 0x8, 0x8, 0x4, 0x6, 0x7eb1, 0x7, 0xaa7, 0x8001, 0x8, 0xbaf, 0x6, 0xfffffffe, 0xfffffffb, 0x0, 0xfffffff9, 0x9c, 0x3, 0xffffdd87, 0x100, 0xa, 0x8001, 0x7, 0xa, 0x3, 0x8, 0x2, 0xb, 0xc54, 0x10001, 0x3, 0x1, 0x1, 0x7, 0x9a16, 0x0, 0x58, 0x7, 0x4, 0x4, 0x10001, 0x0, 0x1, 0x1, 0x200, 0xffff0000, 0x0, 0x1ff, 0x4c74, 0x1, 0x4, 0x80, 0x7, 0x7ff, 0x0, 0x6, 0x40000000, 0x7, 0x3, 0xfff, 0x10000, 0x8a4, 0x81, 0x2, 0x100, 0x1, 0x3]}, @TCA_POLICE_AVRATE={0x8}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c4}, 0x1, 0x0, 0x0, 0xe32fa770345bf4de}, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x180) r2 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000340)={0x0, 0x0, @b}, 0x48, 0xfffffffffffffffa) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f00000003c0)={@id={0x2, 0x0, @c}, 0x2, r2, '\x00', @auto=[0x3e, 0x3f]}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000001f80)=r3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, 0x94) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r7, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001300f5d10300"/20, @ANYRES32=r8, @ANYBLOB="000100000000000008000d0000000d"], 0x30}, 0x1, 0x0, 0x0, 0x20040010}, 0x0) 1m18.001064608s ago: executing program 5 (id=305): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x25, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r3}, 0x18) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000000020000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x7f, 0x0, 0x7ffc1ffb}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r6 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) kcmp(r6, r6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x30006041) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140), &(0x7f00000004c0), 0x7fff}, 0x38) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={0x0, 0x22c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x40}}, 0x0) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8) 1m17.775195818s ago: executing program 5 (id=310): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0xfffffffffffffd23}, 0x1, 0x0, 0x0, 0x20040845}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000026c0)=@newtfilter={0xd8, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xfffa}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_ACT={0x38, 0x3, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xf9, 0x4}}, @filter_kind_options=@f_cgroup={{0xb}, {0x58, 0x2, [@TCA_CGROUP_EMATCHES={0x4}, @TCA_CGROUP_POLICE={0x50, 0x2, [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_TBF={0x3c, 0x1, {0xffffffff, 0xfffffffffffffff9, 0x1, 0x80000000, 0x80000001, {0x80, 0x2, 0x2, 0xff, 0x1, 0xa}, {0x0, 0x1, 0x6, 0x4, 0x1, 0x6}, 0x4, 0x10001, 0x40}}]}]}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000004}, 0x24000000) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYBLOB="020000", @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) setfsgid(0xee01) ptrace(0x4206, r5) wait4(r5, 0x0, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='kfree\x00', r6, 0x0, 0x97a3}, 0x18) r7 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) ioctl$IMADDTIMER(r7, 0x80044940, &(0x7f0000000600)=0x14) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) unshare(0x62040200) close_range(r7, r7, 0x0) close(r7) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="680000000206010200000000000000000000000005f003000300000011000300686173683a6e65742c6e6574000000001c0007800800124000000004060004404e23000008000a400000387105000400000000000800020073797a30000000000500010007000000"], 0x68}}, 0x0) 1m17.511266761s ago: executing program 5 (id=313): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r0}, 0x18) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xfffffffffffffe4b}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r8}, 0x18) socket$inet_udplite(0x2, 0x2, 0x88) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) sendmsg$nl_route_sched(r9, 0x0, 0x40000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r2}, &(0x7f00000003c0), 0x0}, 0x20) recvmmsg(r9, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/156, 0x9c}, {&(0x7f0000000540)=""/193, 0xc1}, {&(0x7f0000000640)=""/82, 0x52}, {&(0x7f00000006c0)=""/76, 0x4c}], 0x4, &(0x7f0000000740)=""/46, 0x2e}, 0x1}, {{&(0x7f0000002e00)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000002ec0)=""/158, 0x9e}, {0x0}, {&(0x7f0000002fc0)=""/99, 0x63}, {0x0}, {0x0}, {&(0x7f0000003140)=""/234, 0xea}, {&(0x7f0000003240)=""/17, 0x11}, {&(0x7f0000003280)=""/68, 0x44}], 0x8, &(0x7f00000033c0)=""/28, 0x1c}, 0x1}], 0x2, 0x40000002, &(0x7f0000003dc0)={0x77359400}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nomblk_io_submit}, {@bh}]}, 0x1, 0x47a, &(0x7f0000000180)="$eJzs3M9vVEUcAPDv222L/LIV8QeIgqKRaGxpQeXgAYwmHjQx0QMe67YQpFBDqxFCtHrAoyHxbjya8Bd40otRTyZe9W5IiOECenrm7b7Xvl1217ZsXXA/n2TpzM5bZr7MTHfmDbsBDKx92R9JxLaI+C0iRhvZ5gv2NX7cvH6x9tf1i7Uk0vStP5P6dTeuX6wVlxav21pklpqfL1s4f+H09Nzc7Lk8P7F45v2JhfMXnjt1Zvrk7MnZs1NHjhw+NPniC1PP9yTOrE03dn88v2fXa+9cfqN2/PK7P11Jivib4viwJ/WV/uqyapF4qle13CG2l9LJUB8bwppkAzLrruH6/B+Naqx03mi8+llfGwdsqDRN002di5dS4H8siX63AOiP/H0+iViqZXvg8n5+EFw71tgAZXHfzB+NkqGo5NcMt+xveynbbR1f+vur7BEt91MAADbCd8caP4u138r6o9J0F/9ofjY0FhH3RcSOiLg/InZGxAMR8WBEPBQRD5de0+7cp1XrIcmt65/K1XUFtkrZ+u+l/Gyref1XrP5irJrnttfjH05OnJqbPRgR90bEgRjelOUnu9Tx/Su/ftGpbF9p/Zc9svqLtWDejqtDLTfoZqYXp28n5rJrn0bsHmoXf7J8EpD1466I2L13fXWceuabPZ3K/j3+LnpwzpR+HfF0o/+XoiX+QtL9fHLinpibPThRjIpb/fzLpTdL2dpoKXNb8fdA1v9b2o7/5fjHkvJ57cLa67j0++cd9zSrHP8j5ddk438kebueLgo+ml5cPDcZMZK8nj9/NH++ub76dVMr12fxH9jffv7viJV/iUciIhvEj0bEYxGxN2/74xHxRETs7xL/jy8/+d76499YWfwza+r/jonibPuWourpH76tlxSdNdYl/iTa9P/heupA/ky733+jzUMkurb03O2MZgAAALj7VCJiWySV8eV0pTI+3vj/8jtjS2VufmHx2RPzH5ydaXxGYCyGK8WdrtHl+6GxNJlv669UI7LyqTxf3C89lN83/rK6uZ4fr83PzfQ7eBhwWzvM/8wf1X63DthwPq8Fg2u98z9N00963BTgP+b9HwaX+Q+Dq83839yS7/IdAcDdrN37v409DAbrfxhc5j8MLvMfBpf5DwMp/yT80Go+4L9hiez3T/9qX3siTftU+0j/Y19ORKVvtUe/Y19bIsm/SyO9Q9qzukS9yU4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu94/AQAA//8QtN5n") capget(&(0x7f0000000240)={0x20080522}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 1m17.477235364s ago: executing program 33 (id=313): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x36e084fcb6392193, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={0x0, r0}, 0x18) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xfffffffffffffe4b}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r8}, 0x18) socket$inet_udplite(0x2, 0x2, 0x88) r9 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) sendmsg$nl_route_sched(r9, 0x0, 0x40000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r2}, &(0x7f00000003c0), 0x0}, 0x20) recvmmsg(r9, &(0x7f0000003c40)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/156, 0x9c}, {&(0x7f0000000540)=""/193, 0xc1}, {&(0x7f0000000640)=""/82, 0x52}, {&(0x7f00000006c0)=""/76, 0x4c}], 0x4, &(0x7f0000000740)=""/46, 0x2e}, 0x1}, {{&(0x7f0000002e00)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f0000003300)=[{&(0x7f0000002ec0)=""/158, 0x9e}, {0x0}, {&(0x7f0000002fc0)=""/99, 0x63}, {0x0}, {0x0}, {&(0x7f0000003140)=""/234, 0xea}, {&(0x7f0000003240)=""/17, 0x11}, {&(0x7f0000003280)=""/68, 0x44}], 0x8, &(0x7f00000033c0)=""/28, 0x1c}, 0x1}], 0x2, 0x40000002, &(0x7f0000003dc0)={0x77359400}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x4, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000)={[{@nomblk_io_submit}, {@bh}]}, 0x1, 0x47a, &(0x7f0000000180)="$eJzs3M9vVEUcAPDv222L/LIV8QeIgqKRaGxpQeXgAYwmHjQx0QMe67YQpFBDqxFCtHrAoyHxbjya8Bd40otRTyZe9W5IiOECenrm7b7Xvl1217ZsXXA/n2TpzM5bZr7MTHfmDbsBDKx92R9JxLaI+C0iRhvZ5gv2NX7cvH6x9tf1i7Uk0vStP5P6dTeuX6wVlxav21pklpqfL1s4f+H09Nzc7Lk8P7F45v2JhfMXnjt1Zvrk7MnZs1NHjhw+NPniC1PP9yTOrE03dn88v2fXa+9cfqN2/PK7P11Jivib4viwJ/WV/uqyapF4qle13CG2l9LJUB8bwppkAzLrruH6/B+Naqx03mi8+llfGwdsqDRN002di5dS4H8siX63AOiP/H0+iViqZXvg8n5+EFw71tgAZXHfzB+NkqGo5NcMt+xveynbbR1f+vur7BEt91MAADbCd8caP4u138r6o9J0F/9ofjY0FhH3RcSOiLg/InZGxAMR8WBEPBQRD5de0+7cp1XrIcmt65/K1XUFtkrZ+u+l/Gyref1XrP5irJrnttfjH05OnJqbPRgR90bEgRjelOUnu9Tx/Su/ftGpbF9p/Zc9svqLtWDejqtDLTfoZqYXp28n5rJrn0bsHmoXf7J8EpD1466I2L13fXWceuabPZ3K/j3+LnpwzpR+HfF0o/+XoiX+QtL9fHLinpibPThRjIpb/fzLpTdL2dpoKXNb8fdA1v9b2o7/5fjHkvJ57cLa67j0++cd9zSrHP8j5ddk438kebueLgo+ml5cPDcZMZK8nj9/NH++ub76dVMr12fxH9jffv7viJV/iUciIhvEj0bEYxGxN2/74xHxRETs7xL/jy8/+d76499YWfwza+r/jonibPuWourpH76tlxSdNdYl/iTa9P/heupA/ky733+jzUMkurb03O2MZgAAALj7VCJiWySV8eV0pTI+3vj/8jtjS2VufmHx2RPzH5ydaXxGYCyGK8WdrtHl+6GxNJlv669UI7LyqTxf3C89lN83/rK6uZ4fr83PzfQ7eBhwWzvM/8wf1X63DthwPq8Fg2u98z9N00963BTgP+b9HwaX+Q+Dq83839yS7/IdAcDdrN37v409DAbrfxhc5j8MLvMfBpf5DwMp/yT80Go+4L9hiez3T/9qX3siTftU+0j/Y19ORKVvtUe/Y19bIsm/SyO9Q9qzukS9yU4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu94/AQAA//8QtN5n") capget(&(0x7f0000000240)={0x20080522}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 26.357617071s ago: executing program 4 (id=897): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv2(r1, 0x0, 0x0, 0x867, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) r4 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x3}, 0x18) r8 = dup(r5) fsetxattr$trusted_overlay_upper(r8, &(0x7f0000000000), 0x0, 0x0, 0x2) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@multicast, @random="bdfec6d04adb", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) syz_emit_ethernet(0x82, &(0x7f00000006c0)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x4, 0x0, 0x67, 0x2cdf, 0x0, 0x2f, 0x9, @remote, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@empty, 0x6}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2, 0xfffffffe}, {@rand_addr=0x64010102}, {@local, 0x4}, {@remote, 0x40000000}]}]}}}}}}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001b00)=@newtfilter={0x13c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {}, {}, {0xe, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x108, 0x2, [@TCA_MATCHALL_ACT={0x104, 0x2, [@m_sample={0xc8, 0x4, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x7, 0x3, 0x408, 0x1}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3fa5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x40}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x101}]}, {0x51, 0x6, "ccb78c66676d4fb4e342d7051a76bcd000024c27827a57786aaf04fdf1454980a8e39c662ca0c63ba23b405a9d4847b30da70d175a0e5ada0b76df608edace269abac2d32f47096bb5b6e8c120"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0x38, 0x18, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xd}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x22, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5f073b80, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xf}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0xf, &(0x7f0000000340)=""/15, 0x40f00, 0x8, '\x00', r11, @fallback=0x23, r1, 0x8, &(0x7f0000000500)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x4, 0x8, 0xae63}, 0x10, 0x0, r2, 0x3, 0x0, &(0x7f0000000580)=[{0x1, 0x3, 0x1, 0x3}, {0x0, 0x4, 0x0, 0x4}, {0x5, 0x1, 0x0, 0x2}], 0x10, 0xfffffffa}, 0x94) r12 = syz_open_dev$usbfs(&(0x7f0000000000), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r12, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) close_range(r3, 0xffffffffffffffff, 0x0) 26.278357368s ago: executing program 4 (id=898): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") 25.865662295s ago: executing program 4 (id=901): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x6, 0x8604, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fef, 0x1, @perf_bp={0x0, 0x3}, 0x8000, 0x10000, 0x0, 0x4, 0x6916, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syslog(0x2, &(0x7f0000000640)=""/177, 0xb1) socket(0x1e, 0x805, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10208}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2840, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x2) readv(r5, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r5, 0x5437, 0x2) 25.065581466s ago: executing program 4 (id=912): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) pipe(&(0x7f0000000000)) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff0000000000000000850000007d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000080b703000000000000a50000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = dup(r2) getsockopt$inet_int(r3, 0x11, 0xe, 0x0, &(0x7f0000000400)=0xfffffe6f) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_drop_inode\x00', r4, 0x0, 0x9}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$eJzs28tvG1UXAPAzfrRfX19CVR59AIGCqHgkTVpKF2xAILEACQkWZRmStCp1G9QEiVYRBITKCqFK7BFLJP4CVrBBwAqJLexRpQpl08LKaOyZxHYcNzFOnOLfT5r23plr3XM8c+07c+MABtZI+k8SsTcifouIoXq1ucFI/b/bSwtTfy0tTCVRrb7xZ1Jrd2tpYSpvmr9uT14pRRQ+SeJwm37nrly9MFmpzFzO6mPzF98dm7ty9ZnzFyfPzZybuTRx+vTJE+PPnZp4tid5pnndOvTB7JGDr7x1/bWpM9ff/umbJM+/JY8eGel08PFqtcfd9de+hnJS6mMgbEixPkyjXBv/Q1GMlZM3FC9/3NfggE1VrVar9619eLEK/Icl0e8IgP7Iv+jT+99826Kpx7Zw84X6DVCa9+1sqx8pRSFrU265v+2lkYg4s/j3l+kWm/McAgCgyXfp/OfpdvO/QjQ+F/p/toYyHBH3RMT+iDgVEQci4t6IWtv7I+KBDfbfukiyev5TuNFVYuuUzv+ez9a2mud/+ewvhotZbV8t/3Jy9nxl5nj2nhyL8s60Pt6hj+9f+vXztY41zv/SLe0/nwtmcdwo7Wx+zfTk/GRziN27+VHEoVK7/JPllYAkIg5GxKEu+zj/5NdH1jp25/w76ME6U/WriCfq538xWvLPJZ3XJ8f+F5WZ42P5VbHaz79ce32t/v9V/j2Qnv/dba//5fyHk8b12rmN93Ht90/XvKfp9vrfkbzZtO/9yfn5y+MRO5JX60E37p9oaTex0j7N/9jR9uN/f6y8E4cjIr2IH4yIhyLi4Sz2RyLi0Yg42iH/H1987J3u899caf7TGzr/K4Ud0bqnfaF44Ydvmzod3kj+6fk/WSsdy/Ysf/51sJ64uruaAQAA4O5TiIi9kRRGl8uFwuho/W/4D8TuQmV2bv6ps7PvXZqu/0ZgOMqF/EnXUMPz0PHstj6vT7TUT2TPjb8o7qrVR6dmK9P9Th4G3J4otR3/qT+K/Y4O2HR+rwWDy/iHwWX8w+Ay/mFwtRn/u/oRB7D12n3/f9iHOICt1zL+LfvBAHH/D4PL+IfBZfzDQJrbFXf+kbyCwqpCFLZFGOssfFbeFmHcRYV+fzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0xj8BAAD//3g65pw=") unshare(0x20040600) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=ANY=[@ANYBLOB="4c0000000906010400000000000000000500ffff240007801800018014000240fe8000000000000000000000000000aa08000a40000000020900020073797a31000000000500010007"], 0x4c}}, 0x4000080) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000020000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40010) 24.883389312s ago: executing program 4 (id=915): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0xc, 0x0, 0x7ffc0002}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r2) sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="210026bd7000fddbdf2503000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9e87dc79f4c04982"}, 0x28) close(r4) 24.332075641s ago: executing program 4 (id=920): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) pipe2$9p(&(0x7f0000000240), 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x4, 0x7cc, &(0x7f0000002200)="$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") r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x172f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f00000008c0), &(0x7f0000000880)=r4}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r2, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x20100, 0x0) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) 24.247475728s ago: executing program 34 (id=920): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) pipe2$9p(&(0x7f0000000240), 0x0) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x4, 0x7cc, &(0x7f0000002200)="$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") r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x172f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r3}, &(0x7f00000008c0), &(0x7f0000000880)=r4}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c00028008000140000000080800034000000110"], 0xc4}}, 0x20050890) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r2, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x20100, 0x0) setsockopt$SO_J1939_FILTER(0xffffffffffffffff, 0x6b, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) 23.89604223s ago: executing program 3 (id=926): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv2(r1, 0x0, 0x0, 0x867, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) r4 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x3}, 0x18) r8 = dup(r5) fsetxattr$trusted_overlay_upper(r8, &(0x7f0000000000), 0x0, 0x0, 0x2) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@multicast, @random="bdfec6d04adb", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) syz_emit_ethernet(0x82, &(0x7f00000006c0)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x4, 0x0, 0x67, 0x2cdf, 0x0, 0x2f, 0x9, @remote, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@empty, 0x6}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2, 0xfffffffe}, {@rand_addr=0x64010102}, {@local, 0x4}, {@remote, 0x40000000}]}]}}}}}}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001b00)=@newtfilter={0x13c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {}, {}, {0xe, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x108, 0x2, [@TCA_MATCHALL_ACT={0x104, 0x2, [@m_sample={0xc8, 0x4, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x7, 0x3, 0x408, 0x1}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x3fa5}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x40}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x101}]}, {0x51, 0x6, "ccb78c66676d4fb4e342d7051a76bcd000024c27827a57786aaf04fdf1454980a8e39c662ca0c63ba23b405a9d4847b30da70d175a0e5ada0b76df608edace269abac2d32f47096bb5b6e8c120"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0x38, 0x18, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xb}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x22, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5f073b80, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xf}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0xf, &(0x7f0000000340)=""/15, 0x40f00, 0x8, '\x00', r11, @fallback=0x23, r1, 0x8, &(0x7f0000000500)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x4, 0x8, 0xae63}, 0x10, 0x0, r2, 0x3, 0x0, &(0x7f0000000580)=[{0x1, 0x3, 0x1, 0x3}, {0x0, 0x4, 0x0, 0x4}, {0x5, 0x1, 0x0, 0x2}], 0x10, 0xfffffffa}, 0x94) r12 = syz_open_dev$usbfs(&(0x7f0000000000), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r12, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) close_range(r3, 0xffffffffffffffff, 0x0) 23.716273326s ago: executing program 3 (id=928): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x1, 0x3, 0x8, 0x6, 0x3}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000009a4c0000000085000000a800000085000000d00000189500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'macvtap0\x00', &(0x7f0000000240)=@ethtool_per_queue_op={0x4b, 0x21, [0x8, 0x1, 0x2, 0xc, 0x9, 0xf94, 0x4000f1, 0x37, 0x409, 0x6, 0x1, 0x6, 0x1, 0x5, 0x7f, 0x2, 0x80000000, 0x2, 0x0, 0x9, 0x8, 0x5, 0x7, 0x2, 0x6, 0x1675, 0x1, 0xff, 0x4, 0x200, 0x3, 0x4107a2b1, 0x358827d1, 0x6, 0x2, 0x1, 0x80000001, 0xc0010, 0x9c, 0x4, 0x2, 0x7, 0x3, 0xfffffffc, 0x200, 0x5, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x4928, 0x3, 0xffffffff, 0x7, 0x4, 0x5, 0x80000004, 0x0, 0x9733, 0x6, 0x80000001, 0x8, 0x9fd8, 0x5, 0x9, 0x8, 0x8, 0x4, 0x101, 0x9, 0x71, 0x0, 0x6, 0x0, 0x3, 0x5, 0x165, 0x9, 0x6, 0x4, 0x9, 0x8, 0x40, 0x6, 0x5, 0x7, 0x0, 0x3, 0x2, 0x2, 0x0, 0xa, 0xffffffff, 0x471, 0x4, 0x0, 0x7, 0x3, 0x6, 0x1000, 0x3, 0x2, 0xb, 0xffff, 0x80, 0x4, 0x4, 0x2, 0x40, 0xb, 0xfffffffd, 0x5, 0x7, 0x4, 0x2, 0x2, 0x0, 0x7, 0x5, 0x8000, 0x1, 0xa, 0x200ffff, 0xa5, 0x2, 0x9]}}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, 0x0) 22.793787777s ago: executing program 3 (id=933): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = getpid() prlimit64(r0, 0xb, 0x0, &(0x7f00000001c0)) r1 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x5) fcntl$setstatus(r1, 0x4, 0x40800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x142, &(0x7f0000000380)={0x0, 0xc89f, 0x1, 0x2, 0xc3}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) fsmount(r3, 0x1, 0xf5) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x4000004, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2be, &(0x7f00000014c0)="$eJzs3MFrE1sUx/HzmrRJU9rkweOBgnrQjW6GNv4BGqQFMaDUpqgLYWonGjImZSZEImKzEbf+HcWlO0H9B7oRN+7dFUFw04U40plMm8S0pm3SxPb7gTJ3eu+vc9qm5dxC78adV4+LedfImxUZiauMiNRlUyS1NWr4p3Ed8cdj0qwulya+fz5z++69G5lsdnZedS6zcDmtqlPn3j159vr8h8rE4puptzFZT93f+Jb+sv7/+qmNnwuPCq4WXC2VK2rqUrlcMZdsS5cLbtFQvWVbpmtpoeRaTst83i6vrNTULC1PJlYcy3XVLNW0aNW0UtaKU1PzoVkoqWEYOpmQky3axZrc2vy8mdl12ov0tCL0Xqz1drzTGsfJ1DtP5tb6VRcAABhee/f/Qa+/e/+fXQyuPe7/Rej/+6TecveH/h/HguNkzETj57cV/T8AAAAAAAAAAAAAAAAAAAAAAH+DTc9Lep6XDK/hW0xE4iIS3g+6TvTHAb//VwZULnqs6R/34iL2y2qumguuwXwmLwWxxZJpScoP//XgRf3XRTCeu56dnVbfaONDbuVXq7mIfzaBnw+lgkwgzJ/9dybIq7zfylUb+VFJND8/LUn5r1M+O5veyYfHIaxWc2Ny8UJT3pCkfHwgZbFlua3+5zOq125m254/7q8DAAAAAOA4MHRbqnX/G5z9aPgL4uJv71vmg3ynvw+078+nO+7vo3K6myMqAQAAAADAobm1p0XTti3nAIOYiBwiflwHERmKMtoGV0VkCMo4qkFcRIL36EHiX7fjXaW8LtZERWTgX5Z9DAb9mwkAAABAr+00/fsIfXrRx4oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADh5uj0PLFz/21Q4sUe86XGRI/8EAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgCHyKwAA//9OCxaA") r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x82044, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r6, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), 0xffffffffffffffff, r5}}, 0x18) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7ffff000) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000300)=@sha1={0x1, "02ccfb93ddb01c7b6282ea7a7477fe612f3b330b"}, 0x15, 0x0) mbind(&(0x7f0000eab000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000340)=0x401, 0x90, 0x3) 22.374477594s ago: executing program 3 (id=936): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) pipe(&(0x7f0000000000)) connect$qrtr(0xffffffffffffffff, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff0000000000000000850000007d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000080b703000000000000a50000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = dup(r2) getsockopt$inet_int(r3, 0x11, 0xe, 0x0, &(0x7f0000000400)=0xfffffe6f) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='ext4_drop_inode\x00', r4, 0x0, 0x9}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") unshare(0x20040600) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = getpid() socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_clone3(&(0x7f00000004c0)={0x201080, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r5], 0x1}, 0x58) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000030605000000000020000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x24044091}, 0x40010) 22.142433835s ago: executing program 3 (id=939): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001b00)=@newtfilter={0x24, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 21.140310124s ago: executing program 3 (id=947): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = syz_io_uring_setup(0xc2, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0), &(0x7f0000000580)) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) 21.081378169s ago: executing program 35 (id=947): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r1 = syz_io_uring_setup(0xc2, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0), &(0x7f0000000580)) io_uring_enter(r1, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) 5.52326419s ago: executing program 7 (id=1120): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x1, 0x3, 0x8, 0x6, 0x3}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000009a4c0000000085000000a800000085000000d00000189500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'macvtap0\x00', &(0x7f0000000240)=@ethtool_per_queue_op={0x4b, 0x21, [0x8, 0x1, 0x2, 0xc, 0x9, 0xf94, 0x4000f1, 0x37, 0x409, 0x6, 0x1, 0x6, 0x1, 0x5, 0x7f, 0x2, 0x80000000, 0x2, 0x0, 0x9, 0x8, 0x5, 0x7, 0x2, 0x6, 0x1675, 0x1, 0xff, 0x4, 0x200, 0x3, 0x4107a2b1, 0x358827d1, 0x6, 0x2, 0x1, 0x80000001, 0xc0010, 0x9c, 0x4, 0x2, 0x7, 0x3, 0xfffffffc, 0x200, 0x5, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x4928, 0x3, 0xffffffff, 0x7, 0x4, 0x5, 0x80000004, 0x0, 0x9733, 0x6, 0x80000001, 0x8, 0x9fd8, 0x5, 0x9, 0x8, 0x8, 0x4, 0x101, 0x9, 0x71, 0x0, 0x6, 0x0, 0x3, 0x5, 0x165, 0x9, 0x6, 0x4, 0x9, 0x8, 0x40, 0x6, 0x5, 0x7, 0x0, 0x3, 0x2, 0x2, 0x0, 0xa, 0xffffffff, 0x471, 0x4, 0x0, 0x7, 0x3, 0x6, 0x1000, 0x3, 0x2, 0xb, 0xffff, 0x80, 0x4, 0x4, 0x2, 0x40, 0xb, 0xfffffffd, 0x5, 0x7, 0x4, 0x2, 0x2, 0x0, 0x7, 0x5, 0x8000, 0x1, 0xa, 0x200ffff, 0xa5, 0x2, 0x9]}}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1}, 0x0) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, 0x0) 4.299777468s ago: executing program 7 (id=1127): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = getpid() prlimit64(r0, 0xb, 0x0, &(0x7f00000001c0)) r1 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x5) fcntl$setstatus(r1, 0x4, 0x40800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x142, &(0x7f0000000380)={0x0, 0xc89f, 0x1, 0x2, 0xc3}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) fsmount(r3, 0x1, 0xf5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x4000004, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2be, &(0x7f00000014c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x82044, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), 0xffffffffffffffff, r6}}, 0x18) sendfile(r7, r6, 0x0, 0x3ffff) sendfile(r7, r6, 0x0, 0x7ffff000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x8002, &(0x7f0000000180)=0x3ff, 0xc, 0x0) mbind(&(0x7f0000eab000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000340)=0x401, 0x90, 0x3) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.580969353s ago: executing program 8 (id=1134): r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="10000000ffffff7fff0f000007000000402c0000", @ANYRESOCT=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES16=r0, @ANYBLOB="0000000000000000008000"/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r3}, &(0x7f0000000040), &(0x7f0000000080)='%pI4 \x00'}, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r5, 0xffffffffffffffff}, &(0x7f00000002c0), 0x0}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r8}, 0x18) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r4, @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x18) fcntl$lock(r4, 0x24, &(0x7f00000031c0)={0x3, 0x0, 0x200, 0x4}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/13, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10, 0x0, 0xfffffffffffffffe}, 0x18) r11 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32, @ANYRES16], 0x20) connect$inet6(r11, &(0x7f0000000700)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) connect$pppl2tp(r2, &(0x7f00000004c0)=@pppol2tpin6={0x18, 0x1, {0x0, r11, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}}}}, 0x32) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x180204}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x18, 0x11, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000080000000000000001000000186a0000080000000000000058ae0000852000000400000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000008500000086000000852000000300000018000000c0000000000000000700000018000000008000000000000009000000182a0000", @ANYRES32=r1, @ANYBLOB="000005000000950000000000000000003501a822421c62d36c52957576d9e8bd6599a0dfa8ba848d686b1aabd8198a436aea2659ea21bec9e486494cd2d2e08694e937aff0931677331fe0e555"], &(0x7f0000000500)='GPL\x00', 0x0, 0x3d, &(0x7f0000000580)=""/61, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0xf, 0x809, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000740)=[0xffffffffffffffff, 0xffffffffffffffff, r3, 0xffffffffffffffff, r6], &(0x7f00000008c0)=[{0x2, 0x2, 0x8, 0x1}, {0x3, 0x4, 0x6, 0x9}, {0x0, 0x5, 0xc, 0xa}, {0x0, 0x5, 0x2, 0xa}, {0x1, 0x4, 0xb, 0x3}], 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) 3.292177368s ago: executing program 8 (id=1138): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0xffff, 0xb7, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000080)=@gcm_128={{0x303}, "ba28597967d1b54c", "9712b0d86846b5ecc522bc6f13a6e30c", "ea0292da", "9e87dc79f4c04982"}, 0x28) close(r0) 3.256179281s ago: executing program 2 (id=1139): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1d, &(0x7f0000000080)=[{0xda, 0x4, 0x6, 0x5}, {0x8001, 0x40, 0x10, 0x8fd}, {0x8, 0xf6, 0x5, 0x9}, {0x4, 0x7, 0x3, 0x3}, {0x401, 0x3, 0x7}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x6}, 0x18) syz_clone(0xa5144411, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000001140)={0x1f, 0xfffc, 0x1}, 0x6) ioprio_set$pid(0x2, 0x0, 0x4007) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_io_uring_setup(0x7313, &(0x7f0000000340)={0x0, 0x3ee4, 0x4000, 0x1, 0x320, 0x0, r5}, &(0x7f00000003c0), &(0x7f0000000400)) ioctl$AUTOFS_DEV_IOCTL_FAIL(r5, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0xb0}}, './file0\x00'}) flistxattr(r0, 0x0, 0x0) 3.182330648s ago: executing program 8 (id=1140): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$netlink(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xc, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000004000000000000000000000200000000010000000000000e0300000000000000020000000000000f0200000002000000000000110300000000000000005f5f"], 0x0, 0x54}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000500)='./file0\x00', 0x40, &(0x7f0000000200)=ANY=[], 0x8, 0x25d, &(0x7f0000000f40)="$eJzs2s9rnEUcB+Dvm6a0pqQbf9uCOOhBvbw0OXtokBTEBUEboQrSt+aNLnndDXmXwIrYnBQ89ezJs3j0IAjSo5dc/As86CmXHHsQX0k2adMY0WKzG/R5Ljsw82HmnZkd5jBbr9z6aGV5MpaLfkxkWUxcjo24k8VMTMS+jXj5xWs/PvvWtXden2+3F95M6cr81dm5lNL5535495Nvnr/dP/f2t+e/PxObM+9tbc/9svnU5oWt369+2KlTp07dXj8V6Uav1y9uVGVa6tQreUq3qrKoy9Tp1uXaffXLVW91dZCK7tL01OpaWdep6A7SSjlI/V7qrw1S8UHR6aY8z9P0VPBvLH59p2liuzl9PZqmeeSrOHc7pn+OVmSPpuzxy9mT17OnN7IL203TGvdQORbW///twKF+NqL6fH1xfXH4O6yfX45OVFHGpWjFb7GzTfYMy1deay9cSrtm4rPq5l7+5vriqd38F/v52WjFzNH52WE+3Z8/E1MH+5/77rF44s/5X0+1F+aOzJ+Nl144kM+jFT+9H72oYil2svf6/3Q2pVffaB/KX9xtBwDwX5Onu468v+X5X9UP8w9wPzx0v5qMi5Pj/XYi6sHHK0VVlWsjKezsqX/QuDeC8WR7E/D3jZ+ZGNn8jKfw5ckYxjEVhudY3F3vh9zFQ/0Tnd7bkPsH4zinbgyHESN3b9HHPRIAAAAAAAAAAAAexKFHf63jeHI47m8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOtj8CAAD//13bww4=") bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r4 = syz_io_uring_setup(0xc2, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000440), 0x3) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {0x0, 0x0, 0x0, 0x0, 0x80000000}, {}, {}, {}, {}, {}, {}, {0xfffffffe}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x200000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x2}, {}, {}, {}, {0x400}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x2000000}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x10001}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, 0x0, 0x1, 0x40, 0x1}) io_uring_enter(r4, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) pause() bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) socket$key(0xf, 0x3, 0x2) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x128, 0x10, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x34}, [@coaddr={0x14, 0xe, @in6=@remote}, @lifetime_val={0x24, 0x9, {0x3, 0x8000000000000001, 0xb4, 0x5}}]}, 0x128}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 2.921202031s ago: executing program 7 (id=1143): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0x1f00) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) 2.900759903s ago: executing program 0 (id=1145): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0}, 0x94) r0 = semget(0x1, 0x4, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(r0, &(0x7f0000000380)=[{0x1, 0xbbdd, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000240)=[0x6, 0x7fff]) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) io_setup(0x8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20010014) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x600a4, 0x40}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x8001}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010828bd70000000000000000000", @ANYRES32=r2, @ANYBLOB="00000000042004001c002b"], 0x44}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r4 = creat(&(0x7f0000000180)='./file0\x00', 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r4, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x70, r6, 0x100, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x200008, 0x1d}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4000090) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)={0x84, r3, 0x300, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2bce, 0x7}}}}, [@NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x8}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xe, 0xbe, "0f855ab4416cc4c6711b"}, @NL80211_ATTR_STA_FLAGS={0x14, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x100, 0x3}}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x6}, @NL80211_ATTR_STA_TX_POWER={0x6}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.81434193s ago: executing program 6 (id=1147): openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) pwrite64(r0, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 2.672658113s ago: executing program 6 (id=1148): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00"/11], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000240)='kfree\x00', r1}, 0x18) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000001c0)={0x10, 0x5, 0x0, 'queue0\x00', 0x10000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000380)) 2.662705224s ago: executing program 6 (id=1149): r0 = socket(0x1e, 0x80004, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r4}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = dup3(r1, r0, 0x0) recvmmsg(r5, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 2.618121178s ago: executing program 0 (id=1150): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1, 0x0, 0x400000000}, 0x18) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) rmdir(&(0x7f0000000000)='./file0\x00') 2.617538048s ago: executing program 0 (id=1151): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x1, 0x3, 0x8, 0x6, 0x3}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000009a4c0000000085000000a800000085000000d00000189500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, 0x0) 2.542839365s ago: executing program 6 (id=1152): openat$dir(0xffffffffffffff9c, 0x0, 0x242, 0x18e) statx(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2000, 0x20, &(0x7f00000001c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100006b6c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ptrace$setregset(0x4205, r1, 0x2, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x40020480) 2.394090488s ago: executing program 2 (id=1153): bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsmount(0xffffffffffffffff, 0x0, 0x70) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000004a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="00000000140001"], 0x30}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x5) syz_open_dev$vcsa(&(0x7f0000001280), 0xff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0xc, &(0x7f0000001300)=ANY=[@ANYRESDEC=r4, @ANYRES64], &(0x7f00000012c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f600000085"], 0x0, 0x3, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) fallocate(r6, 0x0, 0x11, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree_skb\x00', r3}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x4, &(0x7f0000000000)={0x0, 0x1f, 0x1, @thr={&(0x7f0000000040)="894cdb494d86e14d34ed46ea514234b82b0a8775068e0369a2ec951499e6a5df960bd392fff3c0e12ace", &(0x7f0000000240)="b179f85304e3c84cf39eefadf0b621c9d12233ed9962085dec26451e90d4818ada0618"}}, &(0x7f0000000080)=0x0) timer_gettime(r7, &(0x7f0000000180)) 2.0265274s ago: executing program 8 (id=1154): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) unshare(0x62040200) socket$netlink(0x10, 0x3, 0x4) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4, 0x1, 0x3, 0x8, 0x6, 0x3}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000000c00078008000640000007010500050002000000050004000000000016000300686173683a6e65742c706f7274"], 0x5c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000ffff00000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000009a4c0000000085000000a800000085000000d00000189500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'macvtap0\x00', &(0x7f0000000240)=@ethtool_per_queue_op={0x4b, 0x21, [0x8, 0x1, 0x2, 0xc, 0x9, 0xf94, 0x4000f1, 0x37, 0x409, 0x6, 0x1, 0x6, 0x1, 0x5, 0x7f, 0x2, 0x80000000, 0x2, 0x0, 0x9, 0x8, 0x5, 0x7, 0x2, 0x6, 0x1675, 0x1, 0xff, 0x4, 0x200, 0x3, 0x4107a2b1, 0x358827d1, 0x6, 0x2, 0x1, 0x80000001, 0xc0010, 0x9c, 0x4, 0x2, 0x7, 0x3, 0xfffffffc, 0x200, 0x5, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x4928, 0x3, 0xffffffff, 0x7, 0x4, 0x5, 0x80000004, 0x0, 0x9733, 0x6, 0x80000001, 0x8, 0x9fd8, 0x5, 0x9, 0x8, 0x8, 0x4, 0x101, 0x9, 0x71, 0x0, 0x6, 0x0, 0x3, 0x5, 0x165, 0x9, 0x6, 0x4, 0x9, 0x8, 0x40, 0x6, 0x5, 0x7, 0x0, 0x3, 0x2, 0x2, 0x0, 0xa, 0xffffffff, 0x471, 0x4, 0x0, 0x7, 0x3, 0x6, 0x1000, 0x3, 0x2, 0xb, 0xffff, 0x80, 0x4, 0x4, 0x2, 0x40, 0xb, 0xfffffffd, 0x5, 0x7, 0x4, 0x2, 0x2, 0x0, 0x7, 0x5, 0x8000, 0x1, 0xa, 0x200ffff, 0xa5, 0x2, 0x9]}}) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) r7 = socket(0x2, 0x80805, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, 0x0) 1.986875984s ago: executing program 7 (id=1155): openat$dir(0xffffffffffffff9c, 0x0, 0x242, 0x18e) statx(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x2000, 0x20, &(0x7f00000001c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18) socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100006b6c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ptrace$setregset(0x4205, r1, 0x2, 0x0) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x40020480) 1.01583675s ago: executing program 6 (id=1156): syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x4, 0x7cc, &(0x7f0000002200)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x172f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r0}, &(0x7f00000008c0), &(0x7f0000000880)=r1}, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 729.227745ms ago: executing program 7 (id=1157): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = timerfd_create(0x0, 0x0) timerfd_settime(r3, 0x3, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000100)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@dioread_lock}, {@barrier}, {@bsdgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000}}]}, 0x1, 0x783, &(0x7f0000001340)="$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") fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x4) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000700), 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2840, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x2) readv(r4, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1) ioctl$TIOCVHANGUP(r4, 0x5437, 0x2) 577.655439ms ago: executing program 0 (id=1158): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r0, 0x0, 0x0, 0x9000) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000140)) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2141, 0x59) unshare(0x20060400) pwrite64(r4, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r4, 0x6609) 507.829345ms ago: executing program 2 (id=1159): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000000), 0x1, 0x4e9, &(0x7f00000000c0)="$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") 488.923637ms ago: executing program 6 (id=1160): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = getpid() prlimit64(r0, 0xb, 0x0, &(0x7f00000001c0)) r1 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xdam\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc2Gj+kV', 0x5) fcntl$setstatus(r1, 0x4, 0x40800) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x142, &(0x7f0000000380)={0x0, 0xc89f, 0x1, 0x2, 0xc3}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4000004, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2be, &(0x7f00000014c0)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x82044, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f00000002c0)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), 0xffffffffffffffff, r6}}, 0x18) sendfile(r7, r6, 0x0, 0x3ffff) sendfile(r7, r6, 0x0, 0x7ffff000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ff7000/0x2000)=nil, 0x2000, 0x8002, &(0x7f0000000180)=0x3ff, 0xc, 0x0) mbind(&(0x7f0000eab000/0x3000)=nil, 0x3000, 0x2, &(0x7f0000000340)=0x401, 0x90, 0x3) mlock(&(0x7f00007fe000/0x800000)=nil, 0x800000) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 334.919631ms ago: executing program 7 (id=1161): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 257.293177ms ago: executing program 2 (id=1162): r0 = socket(0x1e, 0x80004, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x7, 0x0, 0x1000004}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2, 0x4}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r4}, 0x10) sendmmsg(r2, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r5 = dup3(r1, r0, 0x0) recvmmsg(r5, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)=""/179, 0x3514}], 0x1}, 0xffffffff}], 0x1, 0x40000001, 0x0) 198.913652ms ago: executing program 0 (id=1163): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000280)='xprtrdma_prepsend_failed\x00', r0}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000580)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x4, 0x1, 0x1}}, {{0x3, 0x0, 0x1}, {0x1, 0x1, 0x0, 0x1}}, {{0x0, 0x1}, {0x3, 0x1}}], 0x20) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f00000004c0)=[{{0x3, 0x1, 0x1, 0x1}, {0x2, 0x1, 0x1, 0x1}}, {{0x0, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x1}}, {{0x2}, {0x2, 0x1, 0x0, 0x1}}, {{0x1, 0x0, 0x1, 0x1}, {0x1, 0x1, 0x1, 0x1}}, {{0x0, 0x1}, {0x2, 0x1, 0x1, 0x1}}, {{0x2, 0x1, 0x1, 0x1}, {0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x1, 0x1}}], 0x40) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f00000003c0)=ANY=[@ANYRES8=r3, @ANYBLOB="927c2d7a9e01cd88ee50d3bc09809fe61ff94c9896eed4b8c582ac761373afb2a6b394b97285f525c623b2d75a39ac5d655a7bd56b3eadafc9a72d0829f95b9fc1cf642ecdd3ebff2abab92a0ea6ac5b863d0cfff2c1890bf143", @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7}, 0x18) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r5}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x14, 0x22c7, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='alloc_extent_state\x00', r6, 0x0, 0x2}, 0x18) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000018c0)=ANY=[@ANYBLOB="0a000800d2cf00003d36000002"], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={r8, 0x0, 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r9}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000008, 0x4c831, r7, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$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") r10 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r10, 0x0, 0x0, 0x1000f4) munmap(&(0x7f0000003000/0x4000)=nil, 0x4000) 176.095075ms ago: executing program 8 (id=1164): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0xc, 0x0, 0x7ffc0002}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r1) sendmsg$NFC_CMD_DEV_DOWN(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="210026bd7000fddbdf2503000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 101.607281ms ago: executing program 2 (id=1165): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0xc, 0x0, 0x7ffc0002}]}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000500), r0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="210026bd7000fddbdf2503000000080001"], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 38.336427ms ago: executing program 0 (id=1166): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x26) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r2) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400fff800000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x915940ab3f6031c7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001240)="b9ff03076804268c989e14f088a8", 0x0, 0x4068, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x3) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000040)=0x9, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, 0x0, {}, {}, {0x6}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40d5}, 0x0) 37.464987ms ago: executing program 8 (id=1167): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/bus/input/handlers\x00', 0x0, 0x0) preadv2(r1, 0x0, 0x0, 0x867, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) r4 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r6, 0x0, 0x3}, 0x18) r8 = dup(r5) fsetxattr$trusted_overlay_upper(r8, &(0x7f0000000000), 0x0, 0x0, 0x2) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000300)={@multicast, @random="bdfec6d04adb", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) syz_emit_ethernet(0x82, &(0x7f00000006c0)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x61, 0x0, {0x16, 0x4, 0x0, 0x4, 0x0, 0x67, 0x2cdf, 0x0, 0x2f, 0x9, @remote, @remote, {[@timestamp_addr={0x44, 0x44, 0x0, 0x1, 0x0, [{@rand_addr=0x86dd}, {@empty, 0x6}, {@dev={0xac, 0x14, 0x14, 0x32}}, {@rand_addr, 0x4f}, {@multicast2, 0xfffffffe}, {@rand_addr=0x64010102}, {@local, 0x4}, {@remote, 0x40000000}]}]}}}}}}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001b00)=@newtfilter={0x13c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r11, {}, {}, {0xe, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x108, 0x2, [@TCA_MATCHALL_ACT={0x104, 0x2, [@m_sample={0xc0, 0x4, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x7, 0x3, 0x408, 0x1}}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x1}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x2}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x40}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x101}]}, {0x51, 0x6, "ccb78c66676d4fb4e342d7051a76bcd000024c27827a57786aaf04fdf1454980a8e39c662ca0c63ba23b405a9d4847b30da70d175a0e5ada0b76df608edace269abac2d32f47096bb5b6e8c120"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_sample={0x40, 0x18, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0xd}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xb}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0x22, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x4}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5f073b80, 0x0, 0x0, 0x0, 0x6}, @map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0xf}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0xf, &(0x7f0000000340)=""/15, 0x40f00, 0x8, '\x00', r11, @fallback=0x23, r1, 0x8, &(0x7f0000000500)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x4, 0x8, 0xae63}, 0x10, 0x0, r2, 0x3, 0x0, &(0x7f0000000580)=[{0x1, 0x3, 0x1, 0x3}, {0x0, 0x4, 0x0, 0x4}, {0x5, 0x1, 0x0, 0x2}], 0x10, 0xfffffffa}, 0x94) r12 = syz_open_dev$usbfs(&(0x7f0000000000), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r12, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) close_range(r3, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=1168): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000f00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kmem_cache_free\x00', r1}, 0x18) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x4, 0x7cc, &(0x7f0000002200)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) kernel console output (not intermixed with test programs): 91502][ T6201] name failslab, interval 1, probability 0, space 0, times 0 [ 101.704461][ T6201] CPU: 1 UID: 0 PID: 6201 Comm: syz.4.659 Not tainted syzkaller #0 PREEMPT(voluntary) [ 101.704556][ T6201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 101.704573][ T6201] Call Trace: [ 101.704582][ T6201] [ 101.704592][ T6201] __dump_stack+0x1d/0x30 [ 101.704624][ T6201] dump_stack_lvl+0x95/0xd0 [ 101.704653][ T6201] dump_stack+0x15/0x1b [ 101.704681][ T6201] should_fail_ex+0x265/0x280 [ 101.704766][ T6201] should_failslab+0x8c/0xb0 [ 101.704794][ T6201] kmem_cache_alloc_noprof+0x69/0x4b0 [ 101.704868][ T6201] ? audit_log_start+0x342/0x720 [ 101.704897][ T6201] audit_log_start+0x342/0x720 [ 101.704924][ T6201] ? kstrtouint+0x76/0xc0 [ 101.704950][ T6201] audit_seccomp+0x48/0x100 [ 101.704993][ T6201] ? __seccomp_filter+0x832/0x1260 [ 101.705036][ T6201] __seccomp_filter+0x843/0x1260 [ 101.705080][ T6201] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 101.705125][ T6201] ? vfs_write+0x7e8/0x960 [ 101.705170][ T6201] __secure_computing+0x82/0x150 [ 101.705205][ T6201] syscall_trace_enter+0xcf/0x1e0 [ 101.705235][ T6201] do_syscall_64+0xa4/0x2b0 [ 101.705290][ T6201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.705317][ T6201] RIP: 0033:0x7f110dd4f749 [ 101.705335][ T6201] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.705402][ T6201] RSP: 002b:00007f110c7b6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 101.705432][ T6201] RAX: ffffffffffffffda RBX: 0000000000000441 RCX: 00007f110dd4f749 [ 101.705449][ T6201] RDX: 00007f110c7b6ef0 RSI: 0000000000000000 RDI: 00007f110ddd4960 [ 101.705465][ T6201] RBP: 0000200000000440 R08: 00007f110c7b6bb7 R09: 00007f110c7b6e40 [ 101.705531][ T6201] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000001c0 [ 101.705548][ T6201] R13: 00007f110c7b6ef0 R14: 00007f110c7b6eb0 R15: 0000200000000200 [ 101.705575][ T6201] [ 101.895817][ T6077] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 101.908538][ T6201] set_capacity_and_notify: 8 callbacks suppressed [ 101.908554][ T6201] loop4: detected capacity change from 0 to 512 [ 101.982832][ T6201] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 102.019343][ T6211] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 102.032304][ T6201] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 102.081290][ T6215] loop2: detected capacity change from 0 to 512 [ 102.093096][ T6201] System zones: 1-12 [ 102.120927][ T6201] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 102.121348][ T6215] EXT4-fs error (device loop2): ext4_quota_enable:7173: comm syz.2.664: Bad quota inum: 1, type: 2 [ 102.151891][ T6201] EXT4-fs (loop4): 1 truncate cleaned up [ 102.173325][ T6204] loop0: detected capacity change from 0 to 2048 [ 102.189691][ T6221] netlink: 8 bytes leftover after parsing attributes in process `syz.6.661'. [ 102.206542][ T6201] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.225193][ T6221] syz_tun: entered promiscuous mode [ 102.239824][ T6215] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 102.267356][ T6204] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.279917][ T6215] EXT4-fs (loop2): mount failed [ 102.286211][ T6204] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.300901][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.315296][ T6221] syz_tun: refused to change device tx_queue_len [ 102.390837][ T6228] usb usb1: usbfs: process 6228 (syz.2.667) did not claim interface 0 before use [ 102.416665][ T6229] loop4: detected capacity change from 0 to 128 [ 102.451002][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.475667][ T6231] FAULT_INJECTION: forcing a failure. [ 102.475667][ T6231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.489326][ T6231] CPU: 1 UID: 0 PID: 6231 Comm: syz.2.669 Not tainted syzkaller #0 PREEMPT(voluntary) [ 102.489362][ T6231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 102.489380][ T6231] Call Trace: [ 102.489388][ T6231] [ 102.489472][ T6231] __dump_stack+0x1d/0x30 [ 102.489505][ T6231] dump_stack_lvl+0x95/0xd0 [ 102.489533][ T6231] dump_stack+0x15/0x1b [ 102.489560][ T6231] should_fail_ex+0x265/0x280 [ 102.489591][ T6231] should_fail+0xb/0x20 [ 102.489681][ T6231] should_fail_usercopy+0x1a/0x20 [ 102.489714][ T6231] _copy_from_user+0x1c/0xb0 [ 102.489771][ T6231] __sys_bpf+0x183/0x7c0 [ 102.489819][ T6231] __x64_sys_bpf+0x41/0x50 [ 102.489861][ T6231] x64_sys_call+0x28e1/0x3000 [ 102.489894][ T6231] do_syscall_64+0xca/0x2b0 [ 102.489940][ T6231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.489969][ T6231] RIP: 0033:0x7fbedf1af749 [ 102.489989][ T6231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.490053][ T6231] RSP: 002b:00007fbeddc17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 102.490079][ T6231] RAX: ffffffffffffffda RBX: 00007fbedf405fa0 RCX: 00007fbedf1af749 [ 102.490096][ T6231] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 102.490113][ T6231] RBP: 00007fbeddc17090 R08: 0000000000000000 R09: 0000000000000000 [ 102.490125][ T6231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.490138][ T6231] R13: 00007fbedf406038 R14: 00007fbedf405fa0 R15: 00007ffc5ee53668 [ 102.490164][ T6231] [ 102.671473][ T6224] loop3: detected capacity change from 0 to 2048 [ 102.697096][ T6224] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 102.752618][ T6224] ext4 filesystem being mounted at /154/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.783650][ T6240] netlink: '+}[@': attribute type 13 has an invalid length. [ 102.793045][ T6240] gretap0: refused to change device tx_queue_len [ 102.800358][ T6240] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 102.827217][ T6241] loop6: detected capacity change from 0 to 128 [ 102.833727][ T6220] serio: Serial port ttyS3 [ 102.863575][ T815] Bluetooth: hci0: Frame reassembly failed (-84) [ 103.001818][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.063696][ T6252] netlink: 12 bytes leftover after parsing attributes in process `syz.3.675'. [ 103.088685][ T6252] bridge_slave_0: left allmulticast mode [ 103.094447][ T6252] bridge_slave_0: left promiscuous mode [ 103.100179][ T6252] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.110332][ T6252] bridge_slave_1: left allmulticast mode [ 103.116180][ T6252] bridge_slave_1: left promiscuous mode [ 103.117016][ T6253] netlink: '+}[@': attribute type 13 has an invalid length. [ 103.122028][ T6252] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.139498][ T6252] bond0: (slave bond_slave_0): Releasing backup interface [ 103.149659][ T6252] bond0: (slave bond_slave_1): Releasing backup interface [ 103.164371][ T6254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.675'. [ 103.175186][ T6252] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 103.196867][ T6253] gretap0: refused to change device tx_queue_len [ 103.213760][ T6253] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 103.233859][ T6259] netlink: 12 bytes leftover after parsing attributes in process `syz.4.676'. [ 103.303538][ T6259] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 103.364597][ T6259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.676'. [ 103.508478][ T6266] loop2: detected capacity change from 0 to 128 [ 103.516317][ T6266] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 103.529545][ T6266] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 103.637822][ T6268] netlink: 12 bytes leftover after parsing attributes in process `syz.0.678'. [ 103.701888][ T6273] loop0: detected capacity change from 0 to 512 [ 103.722414][ T6273] EXT4-fs error (device loop0): ext4_quota_enable:7173: comm syz.0.680: Bad quota inum: 1, type: 2 [ 103.735684][ T6273] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 103.751001][ T6273] EXT4-fs (loop0): mount failed [ 103.788652][ T6279] loop0: detected capacity change from 0 to 1024 [ 103.795688][ T6279] EXT4-fs: inline encryption not supported [ 103.803578][ T6279] EXT4-fs (loop0): orphan cleanup on readonly fs [ 103.810614][ T6279] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.682: Failed to acquire dquot type 0 [ 103.822426][ T6279] EXT4-fs (loop0): 1 truncate cleaned up [ 103.828844][ T6279] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 103.851349][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.146550][ T6298] loop4: detected capacity change from 0 to 512 [ 104.165643][ T6298] ------------[ cut here ]------------ [ 104.171167][ T6298] EA inode 11 i_nlink=2 [ 104.171186][ T6298] WARNING: fs/ext4/xattr.c:1058 at ext4_xattr_inode_update_ref+0x2e6/0x320, CPU#1: syz.4.689/6298 [ 104.186174][ T6298] Modules linked in: [ 104.190117][ T6298] CPU: 1 UID: 0 PID: 6298 Comm: syz.4.689 Not tainted syzkaller #0 PREEMPT(voluntary) [ 104.199966][ T6298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.210096][ T6298] RIP: 0010:ext4_xattr_inode_update_ref+0x305/0x320 [ 104.216805][ T6298] Code: d1 e2 9c ff 4c 8d 2d 6a f0 20 05 49 8d 7e 40 e8 d1 6b b8 ff 49 8b 6e 40 4c 89 e7 e8 e5 66 b8 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 2b ff ff ff e8 ac ac ba 03 66 66 66 2e 0f 1f 84 [ 104.236647][ T6298] RSP: 0018:ffffc90002cab5a0 EFLAGS: 00010246 [ 104.242849][ T6298] RAX: ffff888103ae2b90 RBX: ffff888107696950 RCX: ffffffff81bb1d5b [ 104.250908][ T6298] RDX: 0000000000000002 RSI: 000000000000000b RDI: ffffffff86dc0db0 [ 104.258964][ T6298] RBP: 000000000000000b R08: 0001888107696903 R09: 0000000000000000 [ 104.267013][ T6298] R10: ffffc90002cab4d0 R11: 0001c90002cab4d0 R12: ffff888107696900 [ 104.275157][ T6298] R13: ffffffff86dc0db0 R14: ffff8881076968b8 R15: 0000000000000001 [ 104.283211][ T6298] FS: 00007f110c7b76c0(0000) GS:ffff8882aeec5000(0000) knlGS:0000000000000000 [ 104.292196][ T6298] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.298891][ T6298] CR2: ffffffffd88f0000 CR3: 000000010afa4000 CR4: 00000000003506f0 [ 104.306922][ T6298] Call Trace: [ 104.310227][ T6298] [ 104.313269][ T6298] ext4_xattr_set_entry+0x77f/0x1020 [ 104.318669][ T6298] ext4_xattr_ibody_set+0x184/0x3c0 [ 104.323928][ T6298] ext4_expand_extra_isize_ea+0xcbb/0x11f0 [ 104.329975][ T6298] __ext4_expand_extra_isize+0x246/0x280 [ 104.335667][ T6298] __ext4_mark_inode_dirty+0x29d/0x3f0 [ 104.341253][ T6298] ext4_evict_inode+0x7c4/0xd40 [ 104.346233][ T6298] ? __pfx_ext4_evict_inode+0x10/0x10 [ 104.351646][ T6298] evict+0x2af/0x510 [ 104.355636][ T6298] ? __dquot_initialize+0x146/0x7c0 [ 104.360909][ T6298] iput+0x4bd/0x650 [ 104.364772][ T6298] ext4_process_orphan+0x1a9/0x1c0 [ 104.370012][ T6298] ext4_orphan_cleanup+0x6a8/0xa00 [ 104.375192][ T6298] ext4_fill_super+0x3411/0x37a0 [ 104.380238][ T6298] ? set_blocksize+0x1a8/0x310 [ 104.385044][ T6298] ? sb_set_blocksize+0xfc/0x170 [ 104.390076][ T6298] ? setup_bdev_super+0x30e/0x370 [ 104.395224][ T6298] ? __pfx_ext4_fill_super+0x10/0x10 [ 104.400577][ T6298] get_tree_bdev_flags+0x291/0x300 [ 104.405814][ T6298] ? __pfx_ext4_fill_super+0x10/0x10 [ 104.411151][ T6298] get_tree_bdev+0x1f/0x30 [ 104.415690][ T6298] ext4_get_tree+0x1c/0x30 [ 104.420144][ T6298] vfs_get_tree+0x57/0x1d0 [ 104.424711][ T6298] do_new_mount+0x24d/0x6a0 [ 104.429365][ T6298] path_mount+0x4ab/0xb80 [ 104.433775][ T6298] ? user_path_at+0xbf/0x130 [ 104.438520][ T6298] __se_sys_mount+0x28c/0x2e0 [ 104.443243][ T6298] __x64_sys_mount+0x67/0x80 [ 104.447911][ T6298] x64_sys_call+0x2cca/0x3000 [ 104.452683][ T6298] do_syscall_64+0xca/0x2b0 [ 104.457287][ T6298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.463291][ T6298] RIP: 0033:0x7f110dd50eea [ 104.468035][ T6298] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.487877][ T6298] RSP: 002b:00007f110c7b6e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 104.496408][ T6298] RAX: ffffffffffffffda RBX: 00007f110c7b6ef0 RCX: 00007f110dd50eea [ 104.504489][ T6298] RDX: 0000200000000180 RSI: 00002000000001c0 RDI: 00007f110c7b6eb0 [ 104.512549][ T6298] RBP: 0000200000000180 R08: 00007f110c7b6ef0 R09: 0000000000800700 [ 104.520589][ T6298] R10: 0000000000800700 R11: 0000000000000246 R12: 00002000000001c0 [ 104.528632][ T6298] R13: 00007f110c7b6eb0 R14: 000000000000046f R15: 000000000000002c [ 104.536714][ T6298] [ 104.539778][ T6298] ---[ end trace 0000000000000000 ]--- [ 104.545812][ T6298] EXT4-fs error (device loop4): ext4_xattr_inode_iget:441: inode #18: comm syz.4.689: iget: bad extra_isize 90 (inode size 256) [ 104.559439][ T6298] EXT4-fs (loop4): Remounting filesystem read-only [ 104.566371][ T6298] EXT4-fs warning (device loop4): ext4_evict_inode:273: xattr delete (err -30) [ 104.575447][ T6298] EXT4-fs (loop4): 1 orphan inode deleted [ 104.581759][ T6298] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.617381][ T6298] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.875934][ T6322] EXT4-fs: inline encryption not supported [ 104.885439][ T3529] Bluetooth: hci0: command 0x1003 tx timeout [ 104.885577][ T6318] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.891480][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 104.918207][ T6324] netlink: 20 bytes leftover after parsing attributes in process `syz.2.695'. [ 104.928490][ T6322] EXT4-fs (loop0): orphan cleanup on readonly fs [ 104.948322][ T6322] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.694: Failed to acquire dquot type 0 [ 104.956658][ T6318] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 104.990310][ T6322] EXT4-fs (loop0): 1 truncate cleaned up [ 105.000082][ T6322] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.034397][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.044438][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.098372][ T6335] netlink: 12 bytes leftover after parsing attributes in process `syz.4.699'. [ 105.141500][ T6335] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 105.161556][ T6336] netlink: 72 bytes leftover after parsing attributes in process `syz.0.697'. [ 105.198405][ T6335] netlink: 4 bytes leftover after parsing attributes in process `syz.4.699'. [ 105.238152][ T6340] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.282211][ T6340] ext4 filesystem being mounted at /157/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 105.328576][ T6340] serio: Serial port ttyS3 [ 105.360364][ T6349] EXT4-fs: inline encryption not supported [ 105.380287][ T6349] EXT4-fs (loop3): orphan cleanup on readonly fs [ 105.390904][ T6349] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.703: Failed to acquire dquot type 0 [ 105.403309][ T6349] EXT4-fs (loop3): 1 truncate cleaned up [ 105.410580][ T6349] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 105.424122][ T6349] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.434233][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.464725][ T6353] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 105.480567][ T6353] EXT4-fs (loop2): 1 truncate cleaned up [ 105.493630][ T6353] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 105.757729][ T6241] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 105.767274][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.824262][ T29] kauditd_printk_skb: 647 callbacks suppressed [ 105.824280][ T29] audit: type=1326 audit(1767672380.871:5752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6366 comm="syz.2.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbedf1af749 code=0x7ffc0000 [ 105.856243][ T29] audit: type=1326 audit(1767672380.911:5753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6366 comm="syz.2.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbedf1af749 code=0x7ffc0000 [ 105.879586][ T29] audit: type=1326 audit(1767672380.911:5754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6366 comm="syz.2.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbedf1af749 code=0x7ffc0000 [ 105.903172][ T29] audit: type=1326 audit(1767672380.911:5755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6366 comm="syz.2.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbedf1af749 code=0x7ffc0000 [ 105.954913][ T6367] EXT4-fs error (device loop2): ext4_quota_enable:7173: comm syz.2.707: Bad quota inum: 1, type: 2 [ 105.985310][ T29] audit: type=1326 audit(1767672380.921:5756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6366 comm="syz.2.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbedf1af749 code=0x7ffc0000 [ 106.008933][ T29] audit: type=1326 audit(1767672380.921:5757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6366 comm="syz.2.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbedf1af749 code=0x7ffc0000 [ 106.032448][ T29] audit: type=1326 audit(1767672380.921:5758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6366 comm="syz.2.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbedf1af749 code=0x7ffc0000 [ 106.055866][ T29] audit: type=1326 audit(1767672380.921:5759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6366 comm="syz.2.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fbedf1af749 code=0x7ffc0000 [ 106.076619][ T6367] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 106.079265][ T29] audit: type=1326 audit(1767672380.921:5760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6366 comm="syz.2.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbedf1af749 code=0x7ffc0000 [ 106.098135][ T6367] EXT4-fs (loop2): mount failed [ 106.117139][ T29] audit: type=1326 audit(1767672380.931:5761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6366 comm="syz.2.707" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbedf1af749 code=0x7ffc0000 [ 106.446598][ T6395] EXT4-fs: inline encryption not supported [ 106.455976][ T6395] EXT4-fs (loop2): orphan cleanup on readonly fs [ 106.466067][ T6395] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.718: Failed to acquire dquot type 0 [ 106.490075][ T6395] EXT4-fs (loop2): 1 truncate cleaned up [ 106.496607][ T6395] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 106.509734][ T6395] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.741918][ T6408] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 106.755670][ T6408] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 106.869118][ T6418] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 106.872365][ T6408] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 106.895492][ T6418] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 107.173443][ T4561] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 107.207589][ T6432] netlink: 8 bytes leftover after parsing attributes in process `syz.4.730'. [ 107.296438][ T6434] set_capacity_and_notify: 10 callbacks suppressed [ 107.296461][ T6434] loop4: detected capacity change from 0 to 4096 [ 107.342681][ T6434] ext4: Unknown parameter 'obj_user' [ 107.358311][ T6435] loop3: detected capacity change from 0 to 2048 [ 107.378990][ T6435] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.379138][ T6435] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.517277][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.575117][ T6449] FAULT_INJECTION: forcing a failure. [ 107.575117][ T6449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 107.588522][ T6449] CPU: 1 UID: 0 PID: 6449 Comm: syz.3.736 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 107.588561][ T6449] Tainted: [W]=WARN [ 107.588570][ T6449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 107.588587][ T6449] Call Trace: [ 107.588596][ T6449] [ 107.588614][ T6449] __dump_stack+0x1d/0x30 [ 107.588645][ T6449] dump_stack_lvl+0x95/0xd0 [ 107.588730][ T6449] dump_stack+0x15/0x1b [ 107.588756][ T6449] should_fail_ex+0x265/0x280 [ 107.588787][ T6449] should_fail+0xb/0x20 [ 107.588812][ T6449] should_fail_usercopy+0x1a/0x20 [ 107.588889][ T6449] _copy_from_user+0x1c/0xb0 [ 107.588920][ T6449] io_submit_one+0x52/0x1210 [ 107.589026][ T6449] __se_sys_io_submit+0xfb/0x280 [ 107.589063][ T6449] __x64_sys_io_submit+0x43/0x50 [ 107.589096][ T6449] x64_sys_call+0x2e40/0x3000 [ 107.589124][ T6449] do_syscall_64+0xca/0x2b0 [ 107.589194][ T6449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.589297][ T6449] RIP: 0033:0x7f644eccf749 [ 107.589312][ T6449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.589330][ T6449] RSP: 002b:00007f644d72f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 107.589362][ T6449] RAX: ffffffffffffffda RBX: 00007f644ef25fa0 RCX: 00007f644eccf749 [ 107.589378][ T6449] RDX: 0000200000000a80 RSI: 0000000000000002 RDI: 00007f644fa62000 [ 107.589394][ T6449] RBP: 00007f644d72f090 R08: 0000000000000000 R09: 0000000000000000 [ 107.589409][ T6449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.589421][ T6449] R13: 00007f644ef26038 R14: 00007f644ef25fa0 R15: 00007ffce6e73d38 [ 107.589440][ T6449] [ 107.904407][ T6457] loop0: detected capacity change from 0 to 128 [ 107.915600][ T6457] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 107.946248][ T6457] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 108.022460][ T6463] loop3: detected capacity change from 0 to 128 [ 108.035963][ T6463] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 108.080904][ T6463] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 108.177944][ T6472] netlink: 12 bytes leftover after parsing attributes in process `syz.4.746'. [ 108.218024][ T6472] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 108.271540][ T6475] loop6: detected capacity change from 0 to 2048 [ 108.316528][ T6475] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.325250][ T6481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.746'. [ 108.395370][ T6475] ext4 filesystem being mounted at /65/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.440515][ T6484] netlink: '+}[@': attribute type 13 has an invalid length. [ 108.458081][ T6484] gretap0: refused to change device tx_queue_len [ 108.465079][ T6484] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 108.486967][ T6475] serio: Serial port ttyS3 [ 108.504142][ T4570] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 108.598435][ T6488] netlink: 4 bytes leftover after parsing attributes in process `syz.3.749'. [ 108.701507][ T4737] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 108.776400][ T6498] loop3: detected capacity change from 0 to 512 [ 108.849366][ T6498] EXT4-fs error (device loop3): ext4_quota_enable:7173: comm syz.3.753: Bad quota inum: 1, type: 2 [ 108.860561][ T6498] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 108.902679][ T6498] EXT4-fs (loop3): mount failed [ 108.965725][ T6507] loop2: detected capacity change from 0 to 512 [ 108.973256][ T6507] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 109.001454][ T6507] EXT4-fs (loop2): 1 truncate cleaned up [ 109.011215][ T6509] loop6: detected capacity change from 0 to 128 [ 109.019969][ T6507] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.122239][ T6519] loop3: detected capacity change from 0 to 164 [ 109.130047][ T6519] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 109.139031][ T6519] FAULT_INJECTION: forcing a failure. [ 109.139031][ T6519] name failslab, interval 1, probability 0, space 0, times 0 [ 109.151858][ T6519] CPU: 1 UID: 0 PID: 6519 Comm: syz.3.758 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 109.151920][ T6519] Tainted: [W]=WARN [ 109.151929][ T6519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 109.151946][ T6519] Call Trace: [ 109.151954][ T6519] [ 109.151964][ T6519] __dump_stack+0x1d/0x30 [ 109.152058][ T6519] dump_stack_lvl+0x95/0xd0 [ 109.152087][ T6519] dump_stack+0x15/0x1b [ 109.152115][ T6519] should_fail_ex+0x265/0x280 [ 109.152218][ T6519] should_failslab+0x8c/0xb0 [ 109.152248][ T6519] kmem_cache_alloc_noprof+0x69/0x4b0 [ 109.152276][ T6519] ? getname_flags+0x80/0x3b0 [ 109.152308][ T6519] getname_flags+0x80/0x3b0 [ 109.152403][ T6519] user_path_at+0x28/0x130 [ 109.152443][ T6519] do_fchownat+0xb0/0x210 [ 109.152497][ T6519] __x64_sys_chown+0x47/0x60 [ 109.152540][ T6519] x64_sys_call+0x2eb9/0x3000 [ 109.152570][ T6519] do_syscall_64+0xca/0x2b0 [ 109.152628][ T6519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.152656][ T6519] RIP: 0033:0x7f644eccf749 [ 109.152686][ T6519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.152716][ T6519] RSP: 002b:00007f644d72f038 EFLAGS: 00000246 ORIG_RAX: 000000000000005c [ 109.152778][ T6519] RAX: ffffffffffffffda RBX: 00007f644ef25fa0 RCX: 00007f644eccf749 [ 109.152794][ T6519] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 109.152809][ T6519] RBP: 00007f644d72f090 R08: 0000000000000000 R09: 0000000000000000 [ 109.152826][ T6519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.152841][ T6519] R13: 00007f644ef26038 R14: 00007f644ef25fa0 R15: 00007ffce6e73d38 [ 109.152868][ T6519] [ 109.373808][ T6516] loop4: detected capacity change from 0 to 2048 [ 109.395890][ T6516] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 109.438136][ T6524] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 109.499241][ T6516] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.512552][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.527348][ T6524] EXT4-fs (loop3): 1 truncate cleaned up [ 109.544324][ T6516] serio: Serial port ttyS3 [ 109.549357][ T6524] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.577341][ T6531] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 109.602798][ T6531] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 109.643778][ T6534] EXT4-fs: inline encryption not supported [ 109.651420][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.675697][ T6534] EXT4-fs (loop2): orphan cleanup on readonly fs [ 109.691137][ T6534] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.761: Failed to acquire dquot type 0 [ 109.730451][ T6534] EXT4-fs (loop2): 1 truncate cleaned up [ 109.745883][ T6534] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 109.771103][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.783248][ T6539] netlink: 4 bytes leftover after parsing attributes in process `syz.4.762'. [ 109.955493][ T6531] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 110.094105][ T3314] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.141736][ T6559] netlink: 24 bytes leftover after parsing attributes in process `syz.3.770'. [ 110.175570][ T6557] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 110.198227][ T6557] EXT4-fs (loop4): 1 truncate cleaned up [ 110.198927][ T6557] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.231225][ T6571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.767'. [ 110.242930][ T6569] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 110.292295][ T6571] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 110.314548][ T6571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.767'. [ 110.475075][ T6583] netlink: 'syz.6.775': attribute type 13 has an invalid length. [ 110.506431][ T6581] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.536834][ T6586] netlink: 40 bytes leftover after parsing attributes in process `syz.6.775'. [ 110.551962][ T6581] ext4 filesystem being mounted at /174/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 110.563643][ T6583] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.571098][ T6583] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.611220][ T6586] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 110.642635][ T6575] serio: Serial port ttyS3 [ 110.654988][ T6586] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.775: invalid indirect mapped block 4294967295 (level 0) [ 110.680324][ T6586] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #16: comm syz.6.775: invalid indirect mapped block 4294967295 (level 1) [ 110.704134][ T6586] EXT4-fs (loop6): 1 orphan inode deleted [ 110.709973][ T6586] EXT4-fs (loop6): 1 truncate cleaned up [ 110.718227][ T3321] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.722267][ T6586] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.757100][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.811198][ T37] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.839187][ T37] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.849594][ T37] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.865540][ T37] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.877363][ T29] kauditd_printk_skb: 464 callbacks suppressed [ 110.877379][ T29] audit: type=1400 audit(1767672385.931:6222): avc: denied { name_bind } for pid=6588 comm="syz.4.776" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 110.928171][ T29] audit: type=1326 audit(1767672385.971:6223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6594 comm="syz.2.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbedf1af749 code=0x7ffc0000 [ 110.951741][ T29] audit: type=1326 audit(1767672385.971:6224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6594 comm="syz.2.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbedf1af749 code=0x7ffc0000 [ 110.975164][ T29] audit: type=1326 audit(1767672385.971:6225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6594 comm="syz.2.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbedf1af749 code=0x7ffc0000 [ 110.998717][ T29] audit: type=1326 audit(1767672385.971:6226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6594 comm="syz.2.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbedf1af749 code=0x7ffc0000 [ 111.021996][ T29] audit: type=1326 audit(1767672385.971:6227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6594 comm="syz.2.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbedf1af749 code=0x7ffc0000 [ 111.045595][ T29] audit: type=1326 audit(1767672385.971:6228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6594 comm="syz.2.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fbedf1af749 code=0x7ffc0000 [ 111.069008][ T29] audit: type=1326 audit(1767672385.971:6229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6594 comm="syz.2.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbedf1af749 code=0x7ffc0000 [ 111.092664][ T29] audit: type=1326 audit(1767672385.971:6230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6594 comm="syz.2.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbedf1af749 code=0x7ffc0000 [ 111.116409][ T29] audit: type=1326 audit(1767672385.971:6231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6594 comm="syz.2.778" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbedf1af749 code=0x7ffc0000 [ 111.140272][ T6597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.776'. [ 111.165098][ T4737] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.174504][ T6597] syz_tun: refused to change device tx_queue_len [ 111.212788][ T6595] EXT4-fs error (device loop2): ext4_quota_enable:7173: comm syz.2.778: Bad quota inum: 1, type: 2 [ 111.215140][ T6603] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 111.241562][ T6595] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 111.265733][ T6595] EXT4-fs (loop2): mount failed [ 111.322138][ T6609] Symlink component flag not implemented [ 111.326681][ T6603] EXT4-fs (loop6): 1 truncate cleaned up [ 111.334098][ T6603] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.347771][ T6609] Symlink component flag not implemented (129) [ 111.360465][ T6609] rock: directory entry would overflow storage [ 111.366727][ T6609] rock: sig=0x4f50, size=4, remaining=3 [ 111.372332][ T6609] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 111.417032][ T6615] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 111.560940][ T6620] EXT4-fs: inline encryption not supported [ 111.601908][ T6620] EXT4-fs (loop2): orphan cleanup on readonly fs [ 111.610582][ T6620] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.786: Failed to acquire dquot type 0 [ 111.637119][ T6624] rock: directory entry would overflow storage [ 111.643379][ T6624] rock: sig=0x4f50, size=4, remaining=3 [ 111.649159][ T6624] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 111.678350][ T6620] EXT4-fs (loop2): 1 truncate cleaned up [ 111.684714][ T6620] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 111.722583][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.966504][ T4737] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.100755][ T130] Bluetooth: hci0: Frame reassembly failed (-84) [ 112.202157][ T6654] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 112.235824][ T6654] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 112.438020][ T6663] set_capacity_and_notify: 13 callbacks suppressed [ 112.438041][ T6663] loop3: detected capacity change from 0 to 128 [ 112.603943][ T4566] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 112.628095][ T6663] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 112.655092][ T6663] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 112.736002][ T3314] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 112.855001][ T6675] loop2: detected capacity change from 0 to 512 [ 112.879693][ T6675] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 112.909965][ T6675] EXT4-fs (loop2): 1 truncate cleaned up [ 112.961587][ T6679] netlink: 24 bytes leftover after parsing attributes in process `syz.3.801'. [ 113.006498][ T6681] loop4: detected capacity change from 0 to 1024 [ 113.020250][ T6682] loop0: detected capacity change from 0 to 2048 [ 113.032950][ T6681] EXT4-fs: inline encryption not supported [ 113.046329][ T6681] EXT4-fs (loop4): orphan cleanup on readonly fs [ 113.057690][ T6681] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.805: Failed to acquire dquot type 0 [ 113.112189][ T6682] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.135591][ T6681] EXT4-fs (loop4): 1 truncate cleaned up [ 113.362079][ T6699] loop2: detected capacity change from 0 to 128 [ 113.390653][ T6699] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 113.434361][ T6699] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 113.434941][ T6703] loop0: detected capacity change from 0 to 128 [ 113.455075][ T6703] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 113.467327][ T6703] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 113.539441][ T6708] loop4: detected capacity change from 0 to 128 [ 113.727521][ T6708] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.796696][ T2142] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 113.841066][ T4566] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 113.856357][ T6714] netlink: 4 bytes leftover after parsing attributes in process `syz.0.814'. [ 113.935083][ T6719] loop2: detected capacity change from 0 to 128 [ 114.006221][ T6719] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.030683][ T6724] loop4: detected capacity change from 0 to 1024 [ 114.040364][ T6727] loop3: detected capacity change from 0 to 512 [ 114.073777][ T6724] EXT4-fs: inline encryption not supported [ 114.085852][ T6727] EXT4-fs error (device loop3): ext4_quota_enable:7173: comm syz.3.818: Bad quota inum: 1, type: 2 [ 114.136051][ T6727] EXT4-fs warning (device loop3): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 114.142519][ T6721] ext4 filesystem being mounted at /155/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.161306][ T6724] EXT4-fs (loop4): orphan cleanup on readonly fs [ 114.162266][ T6724] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.817: Failed to acquire dquot type 0 [ 114.180377][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 114.185973][ T3529] Bluetooth: hci0: command 0x1003 tx timeout [ 114.217259][ T6724] EXT4-fs (loop4): 1 truncate cleaned up [ 114.219016][ T6727] EXT4-fs (loop3): mount failed [ 114.410750][ T6745] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 114.450344][ T6747] netlink: '+}[@': attribute type 13 has an invalid length. [ 114.472599][ T6747] gretap0: refused to change device tx_queue_len [ 114.479878][ T6745] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 114.496154][ T6747] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 114.609134][ T6756] Symlink component flag not implemented [ 114.614876][ T6756] Symlink component flag not implemented (129) [ 114.627281][ T4570] Bluetooth: hci0: Frame reassembly failed (-84) [ 114.697500][ T6756] rock: directory entry would overflow storage [ 114.703785][ T6756] rock: sig=0x4f50, size=4, remaining=3 [ 114.709445][ T6756] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 114.862796][ T6768] rock: directory entry would overflow storage [ 114.869083][ T6768] rock: sig=0x4f50, size=4, remaining=3 [ 114.874683][ T6768] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 114.917369][ T4570] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 114.959928][ T6770] netlink: 12 bytes leftover after parsing attributes in process `syz.6.829'. [ 114.990745][ T6770] bridge_slave_0: left allmulticast mode [ 114.996511][ T6770] bridge_slave_0: left promiscuous mode [ 115.002201][ T6770] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.027053][ T6770] bridge_slave_1: left allmulticast mode [ 115.032914][ T6770] bridge_slave_1: left promiscuous mode [ 115.038759][ T6770] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.047793][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.6.829'. [ 115.058097][ T6770] bond0: (slave bond_slave_0): Releasing backup interface [ 115.067009][ T6770] bond0: (slave bond_slave_1): Releasing backup interface [ 115.079199][ T6770] team0: Port device team_slave_0 removed [ 115.089822][ T6770] team0: Port device team_slave_1 removed [ 115.096563][ T6770] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 115.187143][ T6776] EXT4-fs error (device loop4): ext4_quota_enable:7173: comm syz.4.831: Bad quota inum: 1, type: 2 [ 115.200324][ T6776] EXT4-fs warning (device loop4): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 115.216687][ T6776] EXT4-fs (loop4): mount failed [ 115.252076][ T6780] EXT4-fs: inline encryption not supported [ 115.261130][ T6780] EXT4-fs (loop4): orphan cleanup on readonly fs [ 115.268435][ T6780] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.832: Failed to acquire dquot type 0 [ 115.280344][ T6780] EXT4-fs (loop4): 1 truncate cleaned up [ 115.504144][ T6785] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 115.622538][ T6798] serio: Serial port ttyS3 [ 115.792810][ T6808] netlink: 12 bytes leftover after parsing attributes in process `syz.4.842'. [ 115.837399][ T6810] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 115.865001][ T6810] EXT4-fs (loop6): 1 truncate cleaned up [ 115.899378][ T29] kauditd_printk_skb: 787 callbacks suppressed [ 115.899398][ T29] audit: type=1326 audit(1767672390.941:7011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.3.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f644eccf749 code=0x7ffc0000 [ 115.929066][ T29] audit: type=1326 audit(1767672390.941:7012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.3.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f644eccf783 code=0x7ffc0000 [ 115.967004][ T29] audit: type=1326 audit(1767672390.951:7013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.3.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f644ecce1ff code=0x7ffc0000 [ 115.990351][ T29] audit: type=1326 audit(1767672390.961:7014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.3.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f644eccf7d7 code=0x7ffc0000 [ 116.013908][ T29] audit: type=1326 audit(1767672390.991:7015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.3.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f644eccdf90 code=0x7ffc0000 [ 116.037319][ T29] audit: type=1326 audit(1767672390.991:7016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.3.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f644eccf34b code=0x7ffc0000 [ 116.060791][ T29] audit: type=1326 audit(1767672390.991:7017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.3.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f644ecce3aa code=0x7ffc0000 [ 116.084036][ T29] audit: type=1326 audit(1767672390.991:7018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.3.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f644ecce3aa code=0x7ffc0000 [ 116.107381][ T29] audit: type=1326 audit(1767672390.991:7019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.3.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f644eccde97 code=0x7ffc0000 [ 116.130773][ T29] audit: type=1326 audit(1767672390.991:7020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6799 comm="syz.3.840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f644ecd0eea code=0x7ffc0000 [ 116.159366][ T6802] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.181557][ T6819] netlink: 24 bytes leftover after parsing attributes in process `syz.4.846'. [ 116.294686][ T6827] netlink: 72 bytes leftover after parsing attributes in process `syz.4.848'. [ 116.606574][ T6837] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.632440][ T6837] serio: Serial port ttyS3 [ 116.645454][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 116.645865][ T3529] Bluetooth: hci0: command 0x1003 tx timeout [ 116.729057][ T6844] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 116.832022][ T6848] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 116.848427][ T6848] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 116.978145][ T6854] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.119177][ T6858] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.410217][ T2142] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 117.526938][ T6761] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 117.583035][ T6871] set_capacity_and_notify: 15 callbacks suppressed [ 117.583057][ T6871] loop3: detected capacity change from 0 to 128 [ 117.609323][ T6868] loop0: detected capacity change from 0 to 2048 [ 117.633022][ T6868] ext4 filesystem being mounted at /164/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.733285][ T6871] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.762035][ T6886] loop0: detected capacity change from 0 to 128 [ 117.769054][ T6886] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 117.797652][ T6886] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 117.813416][ T6888] loop2: detected capacity change from 0 to 512 [ 117.841083][ T6884] netlink: 4 bytes leftover after parsing attributes in process `syz.6.863'. [ 117.859320][ T6888] EXT4-fs error (device loop2): ext4_quota_enable:7173: comm syz.2.865: Bad quota inum: 1, type: 2 [ 117.875749][ T6888] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 117.937476][ T6888] EXT4-fs (loop2): mount failed [ 118.089479][ T6904] loop6: detected capacity change from 0 to 128 [ 118.126480][ T6904] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.140665][ T6907] loop4: detected capacity change from 0 to 2048 [ 118.210448][ T6912] loop3: detected capacity change from 0 to 128 [ 118.217462][ T6912] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 118.229723][ T6912] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 118.289878][ T2142] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 118.306640][ T6907] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.583400][ T6925] loop2: detected capacity change from 0 to 2048 [ 118.634937][ T6927] loop0: detected capacity change from 0 to 512 [ 118.672534][ T6927] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 118.683197][ T6925] ext4 filesystem being mounted at /195/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.700622][ T6927] EXT4-fs (loop0): 1 truncate cleaned up [ 118.933094][ T6943] loop6: detected capacity change from 0 to 164 [ 119.211565][ T6943] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 119.501092][ T6950] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 119.711623][ T6950] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 119.735103][ T815] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 119.814893][ T6954] EXT4-fs: inline encryption not supported [ 119.857970][ T6954] EXT4-fs (loop4): orphan cleanup on readonly fs [ 119.875354][ T6954] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.885: Failed to acquire dquot type 0 [ 119.887350][ T6954] EXT4-fs (loop4): 1 truncate cleaned up [ 120.129662][ T4563] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 120.146531][ T6977] netlink: '+}[@': attribute type 13 has an invalid length. [ 120.186881][ T6977] gretap0: refused to change device tx_queue_len [ 120.200653][ T6977] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 120.250902][ T6984] netlink: 4 bytes leftover after parsing attributes in process `syz.6.895'. [ 120.336257][ T6988] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 120.375213][ T6988] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 120.579173][ T6994] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.675202][ T130] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 120.752274][ T7000] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 120.780356][ T6999] EXT4-fs: inline encryption not supported [ 120.801948][ T7000] EXT4-fs (loop6): 1 truncate cleaned up [ 120.816544][ T6999] EXT4-fs (loop3): orphan cleanup on readonly fs [ 120.829528][ T6999] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.900: Failed to acquire dquot type 0 [ 120.875658][ T6999] EXT4-fs (loop3): 1 truncate cleaned up [ 120.906519][ T29] kauditd_printk_skb: 455 callbacks suppressed [ 120.906536][ T29] audit: type=1326 audit(1767672395.961:7472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6978 comm="syz.2.894" exe="/root/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7fbedf1af749 code=0x7ffc0000 [ 120.960812][ T29] audit: type=1326 audit(1767672395.991:7473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7006 comm="syz.4.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110dd4f749 code=0x7ffc0000 [ 120.984415][ T29] audit: type=1326 audit(1767672395.991:7474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7006 comm="syz.4.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f110dd4f749 code=0x7ffc0000 [ 121.007927][ T29] audit: type=1326 audit(1767672395.991:7475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7006 comm="syz.4.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110dd4f749 code=0x7ffc0000 [ 121.031463][ T29] audit: type=1326 audit(1767672395.991:7476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7006 comm="syz.4.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7f110dd4f749 code=0x7ffc0000 [ 121.054961][ T29] audit: type=1326 audit(1767672395.991:7477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7006 comm="syz.4.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110dd4f749 code=0x7ffc0000 [ 121.078505][ T29] audit: type=1326 audit(1767672395.991:7478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7006 comm="syz.4.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f110dd4f749 code=0x7ffc0000 [ 121.102021][ T29] audit: type=1326 audit(1767672395.991:7479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7006 comm="syz.4.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110dd4f749 code=0x7ffc0000 [ 121.125435][ T29] audit: type=1326 audit(1767672395.991:7480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7006 comm="syz.4.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f110dd4f749 code=0x7ffc0000 [ 121.148960][ T29] audit: type=1326 audit(1767672395.991:7481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7006 comm="syz.4.901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f110dd4f749 code=0x7ffc0000 [ 121.196058][ T7011] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 121.257752][ T7012] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 121.327503][ T7016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.906'. [ 121.379908][ T7024] netlink: 24 bytes leftover after parsing attributes in process `syz.2.908'. [ 121.417300][ T7012] serio: Serial port ttyS3 [ 121.464164][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.905'. [ 121.482555][ T7026] Symlink component flag not implemented [ 121.494028][ T7026] Symlink component flag not implemented (129) [ 121.514663][ T7026] rock: directory entry would overflow storage [ 121.520902][ T7026] rock: sig=0x4f50, size=4, remaining=3 [ 121.526582][ T7026] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 121.538231][ T7027] syz_tun: refused to change device tx_queue_len [ 121.648259][ T7033] EXT4-fs: inline encryption not supported [ 121.656443][ T7036] rock: directory entry would overflow storage [ 121.662647][ T7036] rock: sig=0x4f50, size=4, remaining=3 [ 121.668316][ T7036] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 121.688526][ T7033] EXT4-fs (loop3): orphan cleanup on readonly fs [ 121.699190][ T7035] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 121.710364][ T7033] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.911: Failed to acquire dquot type 0 [ 121.722373][ T7033] EXT4-fs (loop3): 1 truncate cleaned up [ 121.729543][ T7035] EXT4-fs (loop4): 1 truncate cleaned up [ 121.759402][ T7041] netlink: 72 bytes leftover after parsing attributes in process `syz.6.913'. [ 121.794823][ T3321] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 14: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 121.825552][ T3321] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #11: block 14: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 121.848818][ T3321] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 121.861185][ T3321] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 14: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 121.881891][ T3321] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #11: block 14: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 121.908122][ T3321] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 121.927908][ T3321] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 14: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 121.948899][ T3321] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #11: block 14: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 121.968679][ T3321] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 121.980623][ T3321] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 14: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 122.001142][ T3321] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #11: block 14: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 122.020338][ T3321] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 122.032295][ T3321] EXT4-fs error (device loop4): ext4_readdir:264: inode #11: block 14: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 122.053053][ T3321] EXT4-fs error (device loop4): ext4_empty_dir:3084: inode #11: block 14: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 122.072560][ T3321] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 122.084623][ T3321] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 122.096772][ T3321] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 122.113511][ T3321] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 122.127293][ T3321] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 122.146035][ T3321] EXT4-fs warning (device loop4): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 122.168646][ T7047] netlink: 8 bytes leftover after parsing attributes in process `syz.3.916'. [ 122.181053][ T7047] syz_tun: refused to change device tx_queue_len [ 122.195838][ T7049] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 122.259443][ T7051] netlink: 4 bytes leftover after parsing attributes in process `syz.0.918'. [ 122.305195][ T7053] Symlink component flag not implemented [ 122.311465][ T7053] Symlink component flag not implemented (129) [ 122.319218][ T7053] rock: directory entry would overflow storage [ 122.325496][ T7053] rock: sig=0x4f50, size=4, remaining=3 [ 122.331129][ T7053] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 122.349499][ T4570] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.399099][ T7055] EXT4-fs error (device loop6): ext4_quota_enable:7173: comm syz.6.921: Bad quota inum: 1, type: 2 [ 122.429872][ T7055] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 122.445123][ T7055] EXT4-fs (loop6): mount failed [ 122.458601][ T4570] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.553748][ T4570] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.600251][ T7067] set_capacity_and_notify: 15 callbacks suppressed [ 122.600284][ T7067] loop0: detected capacity change from 0 to 2048 [ 122.628579][ T4570] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.644573][ T7074] loop6: detected capacity change from 0 to 128 [ 122.656679][ T7067] ext4 filesystem being mounted at /177/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.674356][ T7067] serio: Serial port ttyS3 [ 122.888198][ T4570] bond0 (unregistering): Released all slaves [ 122.934368][ T7074] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.967842][ T4570] tipc: Disabling bearer [ 122.986816][ T4570] tipc: Left network mode [ 123.005390][ T4570] hsr_slave_0: left promiscuous mode [ 123.020478][ T4570] hsr_slave_1: left promiscuous mode [ 123.029233][ T4570] veth1_macvtap: left promiscuous mode [ 123.034779][ T4570] veth0_macvtap: left promiscuous mode [ 123.045480][ T7094] netlink: 4 bytes leftover after parsing attributes in process `syz.0.929'. [ 123.055409][ T4570] veth1_vlan: left promiscuous mode [ 123.060802][ T4570] veth0_vlan: left promiscuous mode [ 123.237790][ T7109] netlink: 24 bytes leftover after parsing attributes in process `syz.0.931'. [ 123.294657][ T7112] netlink: 72 bytes leftover after parsing attributes in process `syz.0.932'. [ 123.308911][ T7112] loop0: detected capacity change from 0 to 164 [ 123.350319][ T7114] loop6: detected capacity change from 0 to 164 [ 123.358369][ T7065] chnl_net:caif_netlink_parms(): no params data found [ 123.434504][ T7065] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.441768][ T7065] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.449479][ T7065] bridge_slave_0: entered allmulticast mode [ 123.457273][ T7065] bridge_slave_0: entered promiscuous mode [ 123.464664][ T7065] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.471864][ T7065] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.480037][ T7065] bridge_slave_1: entered allmulticast mode [ 123.487022][ T7065] bridge_slave_1: entered promiscuous mode [ 123.518579][ T7065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.529502][ T7065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.556816][ T7065] team0: Port device team_slave_0 added [ 123.563997][ T7065] team0: Port device team_slave_1 added [ 123.582870][ T7065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.589913][ T7065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.616312][ T7065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.628296][ T7065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.635246][ T7065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 123.661244][ T7065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.691239][ T7065] hsr_slave_0: entered promiscuous mode [ 123.697427][ T7065] hsr_slave_1: entered promiscuous mode [ 123.703413][ T7065] debugfs: 'hsr0' already exists in 'hsr' [ 123.709213][ T7065] Cannot create hsr debugfs directory [ 123.793257][ T7065] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 123.802895][ T7065] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 123.812717][ T7065] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 123.821679][ T7065] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 123.842417][ T7065] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.849575][ T7065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.857034][ T7065] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.864154][ T7065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.894464][ T7155] loop3: detected capacity change from 0 to 128 [ 123.903012][ T7155] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 123.919781][ T7155] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 123.988713][ T7065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.997974][ T7158] loop6: detected capacity change from 0 to 764 [ 124.027082][ T7158] Symlink component flag not implemented [ 124.045756][ T130] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.053709][ T130] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.062083][ T7158] Symlink component flag not implemented (129) [ 124.079179][ T7158] rock: directory entry would overflow storage [ 124.085427][ T7158] rock: sig=0x4f50, size=4, remaining=3 [ 124.091060][ T7158] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 124.101251][ T7065] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.114457][ T4563] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.121722][ T4563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.153334][ T4563] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.160491][ T4563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.244561][ T7158] rock: directory entry would overflow storage [ 124.250990][ T7158] rock: sig=0x4f50, size=4, remaining=3 [ 124.256603][ T7158] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 124.292108][ T2142] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 124.381992][ T7185] loop3: detected capacity change from 0 to 512 [ 124.391420][ T7065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.428693][ T7185] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 124.449985][ T7185] EXT4-fs (loop3): 1 truncate cleaned up [ 124.513393][ T3314] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 14: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 124.543601][ T7199] loop6: detected capacity change from 0 to 2048 [ 124.584713][ T3314] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #11: block 14: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 124.609982][ T3314] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 124.662695][ T7199] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.683030][ T3314] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 14: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 124.704159][ T3314] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #11: block 14: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 124.727105][ T7199] serio: Serial port ttyS3 [ 124.735615][ T3314] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 124.748862][ T3314] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 14: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 124.769320][ T3314] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #11: block 14: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 124.809823][ T3314] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 124.821538][ T3314] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 14: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 124.841930][ T3314] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #11: block 14: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 124.880883][ T3314] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 124.904328][ T7220] loop2: detected capacity change from 0 to 512 [ 124.911818][ T7220] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 124.935092][ T7065] veth0_vlan: entered promiscuous mode [ 124.940831][ T3314] EXT4-fs error (device loop3): ext4_readdir:264: inode #11: block 14: comm syz-executor: path (unknown): bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 124.964855][ T7065] veth1_vlan: entered promiscuous mode [ 124.978834][ T7220] EXT4-fs (loop2): 1 truncate cleaned up [ 124.992313][ T3314] EXT4-fs error (device loop3): ext4_empty_dir:3084: inode #11: block 14: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=262155, rec_len=12, size=1024 fake=1 [ 125.035914][ T3314] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 125.055981][ T7065] veth0_macvtap: entered promiscuous mode [ 125.070976][ T7065] veth1_macvtap: entered promiscuous mode [ 125.078021][ T3314] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 125.092350][ T3314] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 125.112617][ T3314] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 125.127854][ T7065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.131921][ T3314] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 125.149818][ T7229] loop6: detected capacity change from 0 to 128 [ 125.157021][ T7229] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 125.169217][ T7229] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 125.172934][ T7065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.186664][ T3314] EXT4-fs warning (device loop3): ext4_empty_dir:3087: inode #11: comm syz-executor: directory missing '.' [ 125.204251][ T1087] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.246024][ T1087] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.254899][ T1087] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.280043][ T1087] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.434378][ T7238] EXT4-fs error (device loop7): ext4_quota_enable:7173: comm syz.7.946: Bad quota inum: 1, type: 2 [ 125.470902][ T7238] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 125.486901][ T7238] EXT4-fs (loop7): mount failed [ 125.514800][ T4570] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.560363][ T4570] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.621627][ T4570] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.702318][ T4570] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.752682][ T4563] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 125.829249][ T7259] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 125.884709][ T7259] EXT4-fs (loop0): 1 truncate cleaned up [ 125.910995][ T4563] Bluetooth: hci0: Frame reassembly failed (-84) [ 125.920439][ T29] kauditd_printk_skb: 405 callbacks suppressed [ 125.920454][ T29] audit: type=1326 audit(1767672400.981:7886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.6.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d091f749 code=0x7ffc0000 [ 125.972835][ T29] audit: type=1326 audit(1767672400.961:7883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7255 comm="syz.2.952" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbedf1af749 code=0x7ffc0000 [ 125.996375][ T29] audit: type=1326 audit(1767672401.021:7887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.6.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0d091f749 code=0x7ffc0000 [ 126.019980][ T29] audit: type=1326 audit(1767672401.021:7888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.6.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d091f749 code=0x7ffc0000 [ 126.043375][ T29] audit: type=1326 audit(1767672401.021:7889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.6.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb0d091f749 code=0x7ffc0000 [ 126.090549][ T29] audit: type=1326 audit(1767672401.021:7890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.6.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d091f749 code=0x7ffc0000 [ 126.114318][ T29] audit: type=1326 audit(1767672401.051:7891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.6.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb0d091f749 code=0x7ffc0000 [ 126.137715][ T29] audit: type=1326 audit(1767672401.051:7892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.6.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d091f749 code=0x7ffc0000 [ 126.161313][ T29] audit: type=1326 audit(1767672401.051:7893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.6.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fb0d091f749 code=0x7ffc0000 [ 126.184834][ T29] audit: type=1326 audit(1767672401.051:7894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7256 comm="syz.6.951" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0d091f749 code=0x7ffc0000 [ 126.209577][ T7262] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 126.253816][ T4570] bond0 (unregistering): Released all slaves [ 126.280201][ T7271] EXT4-fs: inline encryption not supported [ 126.300608][ T7271] EXT4-fs (loop0): orphan cleanup on readonly fs [ 126.357167][ T7271] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.954: Failed to acquire dquot type 0 [ 126.378189][ T4570] hsr_slave_0: left promiscuous mode [ 126.393700][ T4570] hsr_slave_1: left promiscuous mode [ 126.419492][ T7271] EXT4-fs (loop0): 1 truncate cleaned up [ 126.444262][ T4570] veth1_macvtap: left promiscuous mode [ 126.457425][ T7278] __nla_validate_parse: 2 callbacks suppressed [ 126.457442][ T7278] netlink: 24 bytes leftover after parsing attributes in process `syz.7.956'. [ 126.485305][ T4570] veth0_macvtap: left promiscuous mode [ 126.491054][ T4570] veth1_vlan: left promiscuous mode [ 126.505226][ T4570] veth0_vlan: left promiscuous mode [ 126.573727][ T7295] Symlink component flag not implemented [ 126.588344][ T7295] Symlink component flag not implemented (129) [ 126.616949][ T7295] rock: directory entry would overflow storage [ 126.623288][ T7295] rock: sig=0x4f50, size=4, remaining=3 [ 126.628908][ T7295] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 126.712407][ T7304] netlink: 24 bytes leftover after parsing attributes in process `syz.7.961'. [ 126.861728][ T7309] netlink: 4 bytes leftover after parsing attributes in process `syz.6.963'. [ 126.936020][ T7247] chnl_net:caif_netlink_parms(): no params data found [ 127.062954][ T7300] ext4 filesystem being mounted at /185/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.169244][ T7247] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.176504][ T7247] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.184528][ T7247] bridge_slave_0: entered allmulticast mode [ 127.192065][ T7247] bridge_slave_0: entered promiscuous mode [ 127.216161][ T7247] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.223374][ T7247] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.232896][ T7247] bridge_slave_1: entered allmulticast mode [ 127.246652][ T7247] bridge_slave_1: entered promiscuous mode [ 127.281112][ T7247] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.298421][ T7247] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 127.338038][ T7247] team0: Port device team_slave_0 added [ 127.363066][ T7247] team0: Port device team_slave_1 added [ 127.418647][ T7247] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 127.425833][ T7247] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.451918][ T7247] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 127.467942][ T7247] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 127.475178][ T7247] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 127.501207][ T7247] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 127.550276][ T7247] hsr_slave_0: entered promiscuous mode [ 127.557115][ T7247] hsr_slave_1: entered promiscuous mode [ 127.563119][ T7247] debugfs: 'hsr0' already exists in 'hsr' [ 127.568914][ T7247] Cannot create hsr debugfs directory [ 127.656337][ T7368] set_capacity_and_notify: 7 callbacks suppressed [ 127.656372][ T7368] loop7: detected capacity change from 0 to 512 [ 127.710853][ T7368] EXT4-fs error (device loop7): ext4_quota_enable:7173: comm syz.7.969: Bad quota inum: 1, type: 2 [ 127.723463][ T7371] netlink: 4 bytes leftover after parsing attributes in process `syz.6.970'. [ 127.745477][ T7368] EXT4-fs warning (device loop7): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 127.800454][ T7368] EXT4-fs (loop7): mount failed [ 127.853471][ T7247] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 127.877381][ T7247] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 127.903375][ T7393] loop7: detected capacity change from 0 to 764 [ 127.910341][ T7247] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 127.925343][ T3529] Bluetooth: hci0: command 0x1003 tx timeout [ 127.928440][ T44] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 127.938776][ T7263] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 127.949739][ T7397] netlink: 24 bytes leftover after parsing attributes in process `syz.0.975'. [ 127.971025][ T7393] Symlink component flag not implemented [ 127.977807][ T7247] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 128.002621][ T7395] netlink: 4 bytes leftover after parsing attributes in process `syz.6.974'. [ 128.015642][ T7393] Symlink component flag not implemented (129) [ 128.023127][ T7393] rock: directory entry would overflow storage [ 128.029381][ T7393] rock: sig=0x4f50, size=4, remaining=3 [ 128.034967][ T7393] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 128.092386][ T7247] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.126804][ T7247] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.162525][ T7415] loop6: detected capacity change from 0 to 764 [ 128.185460][ T1087] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.192657][ T1087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.210546][ T7415] Symlink component flag not implemented [ 128.217362][ T7415] Symlink component flag not implemented (129) [ 128.232255][ T7415] rock: directory entry would overflow storage [ 128.238562][ T7415] rock: sig=0x4f50, size=4, remaining=3 [ 128.244183][ T7415] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 128.299007][ T4566] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.306180][ T4566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.377987][ T7247] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 128.442835][ T7415] rock: directory entry would overflow storage [ 128.449272][ T7415] rock: sig=0x4f50, size=4, remaining=3 [ 128.454866][ T7415] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 128.546025][ T7247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.707747][ T7247] veth0_vlan: entered promiscuous mode [ 128.716542][ T7247] veth1_vlan: entered promiscuous mode [ 128.735649][ T7247] veth0_macvtap: entered promiscuous mode [ 129.062381][ T7462] loop2: detected capacity change from 0 to 512 [ 129.133824][ T7462] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 129.197036][ T7468] FAULT_INJECTION: forcing a failure. [ 129.197036][ T7468] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.210316][ T7468] CPU: 1 UID: 0 PID: 7468 Comm: syz.0.989 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 129.210410][ T7468] Tainted: [W]=WARN [ 129.210419][ T7468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 129.210436][ T7468] Call Trace: [ 129.210443][ T7468] [ 129.210453][ T7468] __dump_stack+0x1d/0x30 [ 129.210490][ T7468] dump_stack_lvl+0x95/0xd0 [ 129.210512][ T7468] dump_stack+0x15/0x1b [ 129.210538][ T7468] should_fail_ex+0x265/0x280 [ 129.210567][ T7468] should_fail+0xb/0x20 [ 129.210591][ T7468] should_fail_usercopy+0x1a/0x20 [ 129.210651][ T7468] _copy_from_user+0x1c/0xb0 [ 129.210680][ T7468] ___sys_sendmsg+0xc1/0x1d0 [ 129.210784][ T7468] __sys_sendmmsg+0x178/0x300 [ 129.210833][ T7468] __x64_sys_sendmmsg+0x57/0x70 [ 129.210876][ T7468] x64_sys_call+0x1e28/0x3000 [ 129.211033][ T7468] do_syscall_64+0xca/0x2b0 [ 129.211069][ T7468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.211090][ T7468] RIP: 0033:0x7fcc0467f749 [ 129.211106][ T7468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.211131][ T7468] RSP: 002b:00007fcc030e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 129.211225][ T7468] RAX: ffffffffffffffda RBX: 00007fcc048d5fa0 RCX: 00007fcc0467f749 [ 129.211238][ T7468] RDX: 0000000000000002 RSI: 0000200000000000 RDI: 0000000000000006 [ 129.211250][ T7468] RBP: 00007fcc030e7090 R08: 0000000000000000 R09: 0000000000000000 [ 129.211263][ T7468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.211275][ T7468] R13: 00007fcc048d6038 R14: 00007fcc048d5fa0 R15: 00007ffcb9f20db8 [ 129.211294][ T7468] [ 129.496327][ T7462] EXT4-fs (loop2): 1 truncate cleaned up [ 129.502588][ T7462] EXT4-fs mount: 74 callbacks suppressed [ 129.502605][ T7462] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.536770][ T7247] veth1_macvtap: entered promiscuous mode [ 129.628384][ T7247] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.716431][ T7481] loop0: detected capacity change from 0 to 2048 [ 129.716548][ T7247] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.739371][ T815] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.749388][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.768406][ T815] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.783248][ T7481] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.816271][ T7491] loop7: detected capacity change from 0 to 128 [ 129.822731][ T4566] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.835677][ T7481] ext4 filesystem being mounted at /194/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.903275][ T4566] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.930301][ T7495] loop2: detected capacity change from 0 to 128 [ 129.941269][ T7495] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 129.944511][ T7496] netlink: 4 bytes leftover after parsing attributes in process `syz.6.996'. [ 129.994379][ T7495] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 130.140130][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.219741][ T7512] loop0: detected capacity change from 0 to 164 [ 130.273614][ T7514] loop6: detected capacity change from 0 to 512 [ 130.298683][ T7514] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 130.324763][ T7491] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 130.326092][ T7514] EXT4-fs (loop6): 1 truncate cleaned up [ 130.343111][ T7491] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.344092][ T7514] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.432381][ T815] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 130.478680][ T7065] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.585037][ T7525] loop7: detected capacity change from 0 to 128 [ 130.598150][ T7525] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 130.613198][ T7525] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 130.672634][ T7529] Symlink component flag not implemented [ 130.678605][ T7529] Symlink component flag not implemented (129) [ 130.680535][ T4737] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.696986][ T7529] rock: directory entry would overflow storage [ 130.703177][ T7529] rock: sig=0x4f50, size=4, remaining=3 [ 130.708885][ T7529] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 130.779443][ T7065] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 130.838188][ T7538] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 130.852691][ T7541] Symlink component flag not implemented [ 130.859867][ T7541] Symlink component flag not implemented (129) [ 130.867921][ T7538] EXT4-fs (loop2): 1 truncate cleaned up [ 130.875169][ T7541] rock: directory entry would overflow storage [ 130.881522][ T7541] rock: sig=0x4f50, size=4, remaining=3 [ 130.887198][ T7541] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 130.895296][ T7538] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 130.920832][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.996913][ T29] kauditd_printk_skb: 329 callbacks suppressed [ 130.996931][ T29] audit: type=1326 audit(1767672406.031:8222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7545 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae664f749 code=0x7ffc0000 [ 131.026163][ T29] audit: type=1326 audit(1767672406.031:8223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7545 comm="+}[@" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae664f749 code=0x7ffc0000 [ 131.072798][ T7548] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 131.086027][ T7548] EXT4-fs (loop2): 1 truncate cleaned up [ 131.092210][ T7548] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.108810][ T7551] EXT4-fs error (device loop8): ext4_quota_enable:7173: comm syz.8.1013: Bad quota inum: 1, type: 2 [ 131.119914][ T7551] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 131.135168][ T7551] EXT4-fs (loop8): mount failed [ 131.160160][ T7549] rock: directory entry would overflow storage [ 131.166478][ T7549] rock: sig=0x4f50, size=4, remaining=3 [ 131.172074][ T7549] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 131.314998][ T7559] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 131.355421][ T7559] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.400882][ T7561] netlink: 'syz.7.1008': attribute type 7 has an invalid length. [ 131.408829][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1008'. [ 131.474592][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.571868][ T7563] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 131.584498][ T7563] EXT4-fs (loop2): 1 truncate cleaned up [ 131.591022][ T7563] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.624904][ T7559] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 131.970646][ T7574] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 132.025657][ T7574] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 132.203114][ T29] audit: type=1326 audit(1767672407.061:8224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7570 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0467f749 code=0x7ffc0000 [ 132.226673][ T29] audit: type=1326 audit(1767672407.061:8225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7570 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7fcc0467f749 code=0x7ffc0000 [ 132.250163][ T29] audit: type=1326 audit(1767672407.061:8226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7570 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0467f749 code=0x7ffc0000 [ 132.273632][ T29] audit: type=1326 audit(1767672407.061:8227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7570 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=286 compat=0 ip=0x7fcc0467f749 code=0x7ffc0000 [ 132.297131][ T29] audit: type=1326 audit(1767672407.061:8228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7570 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0467f749 code=0x7ffc0000 [ 132.320631][ T29] audit: type=1326 audit(1767672407.061:8229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7570 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc0467f749 code=0x7ffc0000 [ 132.344081][ T29] audit: type=1326 audit(1767672407.061:8230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7570 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc0467f749 code=0x7ffc0000 [ 132.367526][ T29] audit: type=1326 audit(1767672407.071:8231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7570 comm="syz.0.1018" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fcc0467f749 code=0x7ffc0000 [ 132.408834][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.579574][ T7580] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 132.626805][ T7580] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.629629][ T7578] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.773683][ T7578] ext4 filesystem being mounted at /196/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.785000][ T3319] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 132.836820][ T37] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 132.852849][ T7590] set_capacity_and_notify: 10 callbacks suppressed [ 132.852869][ T7590] loop7: detected capacity change from 0 to 512 [ 132.872761][ T7592] loop2: detected capacity change from 0 to 512 [ 132.895170][ T7590] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 132.926022][ T7592] EXT4-fs error (device loop2): ext4_quota_enable:7173: comm syz.2.1021: Bad quota inum: 1, type: 2 [ 132.950473][ T7590] EXT4-fs (loop7): 1 truncate cleaned up [ 132.957078][ T7590] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.004576][ T7592] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 133.019850][ T3318] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.029964][ T7592] EXT4-fs (loop2): mount failed [ 133.083989][ T7603] loop8: detected capacity change from 0 to 128 [ 133.110010][ T7605] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1027'. [ 133.123369][ T7065] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.141852][ T7606] loop0: detected capacity change from 0 to 128 [ 133.155108][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1027'. [ 133.176164][ T7606] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 133.217677][ T7606] ext4 filesystem being mounted at /198/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.252589][ T7613] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1029'. [ 133.264020][ T7613] loop2: detected capacity change from 0 to 164 [ 133.396913][ T7606] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.413193][ T7603] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 133.432656][ T7603] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.620421][ T7247] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 133.638132][ T7623] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1032'. [ 133.679368][ T7623] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 133.717927][ T7623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1032'. [ 133.740071][ T7627] loop6: detected capacity change from 0 to 128 [ 133.747350][ T7627] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 133.776066][ T7627] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 133.987226][ T7646] loop7: detected capacity change from 0 to 128 [ 134.009951][ T7646] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 134.032524][ T7646] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.057288][ T7650] loop8: detected capacity change from 0 to 128 [ 134.091010][ T7650] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 134.097091][ T7065] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.105075][ T7650] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.145294][ T37] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 134.189148][ T7655] loop6: detected capacity change from 0 to 764 [ 134.209175][ T7247] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 134.221694][ T7655] Symlink component flag not implemented [ 134.227795][ T7655] Symlink component flag not implemented (129) [ 134.238142][ T7655] rock: directory entry would overflow storage [ 134.244387][ T7655] rock: sig=0x4f50, size=4, remaining=3 [ 134.250153][ T7655] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 134.271117][ T7655] rock: directory entry would overflow storage [ 134.277506][ T7655] rock: sig=0x4f50, size=4, remaining=3 [ 134.283155][ T7655] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 134.357578][ T7664] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1046'. [ 134.488205][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1047'. [ 134.505686][ T7674] syz_tun: refused to change device tx_queue_len [ 134.709676][ T7696] loop6: detected capacity change from 0 to 512 [ 134.780066][ T7696] EXT4-fs error (device loop6): ext4_quota_enable:7173: comm syz.6.1053: Bad quota inum: 1, type: 2 [ 134.812479][ T7696] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 134.866605][ T7711] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 134.900734][ T7696] EXT4-fs (loop6): mount failed [ 134.912048][ T7703] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 134.932889][ T7711] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 134.943240][ T7703] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.013668][ T7720] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1057'. [ 135.077551][ T7720] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 135.190253][ T7247] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 135.201573][ T7732] Symlink component flag not implemented [ 135.214815][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1057'. [ 135.232734][ T7732] Symlink component flag not implemented (129) [ 135.279842][ T7732] rock: directory entry would overflow storage [ 135.286312][ T7732] rock: sig=0x4f50, size=4, remaining=3 [ 135.292091][ T7732] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 135.495244][ T7742] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.507642][ T7742] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.543650][ T7742] serio: Serial port ttyS3 [ 135.685555][ T4737] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.724788][ T7765] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 135.755691][ T7765] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.1063: iget: bad i_size value: 38620345925642 [ 135.791383][ T7765] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.1063: couldn't read orphan inode 15 (err -117) [ 135.804213][ T7765] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.880411][ T7770] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1064'. [ 135.909027][ T7770] syz_tun: entered promiscuous mode [ 135.987690][ T2142] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 136.080314][ T7770] syz_tun: refused to change device tx_queue_len [ 136.351368][ T2142] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm kworker/u8:10: bg 0: block 5: invalid block bitmap [ 136.419152][ T2142] EXT4-fs (loop6): Delayed block allocation failed for inode 16 at logical offset 36 with max blocks 2048 with error 28 [ 136.431915][ T2142] EXT4-fs (loop6): This should not happen!! Data will be lost [ 136.431915][ T2142] [ 136.441664][ T2142] EXT4-fs (loop6): Total free blocks count 0 [ 136.447789][ T2142] EXT4-fs (loop6): Free/Dirty block details [ 136.453712][ T2142] EXT4-fs (loop6): free_blocks=0 [ 136.458761][ T2142] EXT4-fs (loop6): dirty_blocks=16000 [ 136.464216][ T2142] EXT4-fs (loop6): Block reservation details [ 136.470351][ T2142] EXT4-fs (loop6): i_reserved_data_blocks=16000 [ 136.518596][ T2142] EXT4-fs (loop6): Delayed block allocation failed for inode 16 at logical offset 2088 with max blocks 2048 with error 28 [ 136.542064][ T29] kauditd_printk_skb: 288 callbacks suppressed [ 136.542082][ T29] audit: type=1326 audit(1767672411.591:8520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.7.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ccedef749 code=0x7ffc0000 [ 136.572378][ T29] audit: type=1326 audit(1767672411.591:8521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.7.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9ccedef749 code=0x7ffc0000 [ 136.595857][ T29] audit: type=1326 audit(1767672411.591:8522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.7.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ccedef749 code=0x7ffc0000 [ 136.619818][ T29] audit: type=1326 audit(1767672411.591:8523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.7.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9ccedef749 code=0x7ffc0000 [ 136.643340][ T29] audit: type=1326 audit(1767672411.591:8524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.7.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9ccedef783 code=0x7ffc0000 [ 136.666638][ T29] audit: type=1326 audit(1767672411.591:8525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.7.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9ccedee1ff code=0x7ffc0000 [ 136.689939][ T29] audit: type=1326 audit(1767672411.591:8526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.7.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9ccedef7d7 code=0x7ffc0000 [ 136.713420][ T29] audit: type=1326 audit(1767672411.591:8527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.7.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9ccededf90 code=0x7ffc0000 [ 136.737010][ T29] audit: type=1326 audit(1767672411.591:8528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.7.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ccedef34b code=0x7ffc0000 [ 136.760501][ T29] audit: type=1326 audit(1767672411.591:8529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.7.1069" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9ccedee3aa code=0x7ffc0000 [ 137.049603][ T7793] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 137.070012][ T7793] ext4 filesystem being mounted at /231/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.145213][ T3319] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.187270][ T7798] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 137.269916][ T7798] ext4 filesystem being mounted at /136/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.408593][ T7820] Symlink component flag not implemented [ 137.414319][ T7820] Symlink component flag not implemented (129) [ 137.431900][ T7820] rock: directory entry would overflow storage [ 137.438311][ T7820] rock: sig=0x4f50, size=4, remaining=3 [ 137.443936][ T7820] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 137.453419][ T4737] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 137.597513][ T7836] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 137.656515][ T7836] ext4 filesystem being mounted at /208/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.775642][ T7842] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 137.788071][ T7842] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 137.935085][ T3318] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.052381][ T7852] set_capacity_and_notify: 14 callbacks suppressed [ 138.052399][ T7852] loop0: detected capacity change from 0 to 764 [ 138.116078][ T7852] Symlink component flag not implemented [ 138.135397][ T7852] Symlink component flag not implemented (129) [ 138.151158][ T7852] rock: directory entry would overflow storage [ 138.157398][ T7852] rock: sig=0x4f50, size=4, remaining=3 [ 138.163011][ T7852] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 138.292393][ T2142] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 138.328562][ T7860] loop8: detected capacity change from 0 to 128 [ 138.339179][ T7860] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 138.364091][ T7860] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.436080][ T7864] loop0: detected capacity change from 0 to 512 [ 138.473955][ T7864] EXT4-fs error (device loop0): ext4_quota_enable:7173: comm syz.0.1087: Bad quota inum: 1, type: 2 [ 138.506285][ T7864] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 138.574926][ T7875] FAULT_INJECTION: forcing a failure. [ 138.574926][ T7875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.588105][ T7875] CPU: 0 UID: 0 PID: 7875 Comm: syz.6.1091 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 138.588137][ T7875] Tainted: [W]=WARN [ 138.588145][ T7875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 138.588161][ T7875] Call Trace: [ 138.588172][ T7875] [ 138.588182][ T7875] __dump_stack+0x1d/0x30 [ 138.588209][ T7875] dump_stack_lvl+0x95/0xd0 [ 138.588297][ T7875] dump_stack+0x15/0x1b [ 138.588317][ T7875] should_fail_ex+0x265/0x280 [ 138.588345][ T7875] should_fail+0xb/0x20 [ 138.588370][ T7875] should_fail_usercopy+0x1a/0x20 [ 138.588408][ T7875] _copy_from_user+0x1c/0xb0 [ 138.588435][ T7875] ___sys_sendmsg+0xc1/0x1d0 [ 138.588512][ T7875] __x64_sys_sendmsg+0xd4/0x160 [ 138.588596][ T7875] x64_sys_call+0x17ba/0x3000 [ 138.588623][ T7875] do_syscall_64+0xca/0x2b0 [ 138.588667][ T7875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.588694][ T7875] RIP: 0033:0x7fb0d091f749 [ 138.588769][ T7875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.588793][ T7875] RSP: 002b:00007fb0cf387038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.588820][ T7875] RAX: ffffffffffffffda RBX: 00007fb0d0b75fa0 RCX: 00007fb0d091f749 [ 138.588837][ T7875] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 138.588853][ T7875] RBP: 00007fb0cf387090 R08: 0000000000000000 R09: 0000000000000000 [ 138.588869][ T7875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.588885][ T7875] R13: 00007fb0d0b76038 R14: 00007fb0d0b75fa0 R15: 00007ffca94a2828 [ 138.588998][ T7875] [ 138.592991][ T7247] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.771859][ T7880] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 138.797511][ T7864] EXT4-fs (loop0): mount failed [ 138.886193][ T7787] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 138.907963][ T7886] loop6: detected capacity change from 0 to 764 [ 138.946703][ T7886] Symlink component flag not implemented [ 138.952433][ T7886] Symlink component flag not implemented (129) [ 138.996646][ T7894] loop0: detected capacity change from 0 to 128 [ 139.021075][ T7898] loop7: detected capacity change from 0 to 128 [ 139.028474][ T7886] rock: directory entry would overflow storage [ 139.034734][ T7886] rock: sig=0x4f50, size=4, remaining=3 [ 139.040406][ T7886] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 139.052282][ T7898] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 139.067176][ T7894] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 139.082680][ T7898] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 139.143710][ T7894] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.220546][ T7905] loop6: detected capacity change from 0 to 764 [ 139.254406][ T7908] loop2: detected capacity change from 0 to 128 [ 139.276231][ T7905] rock: directory entry would overflow storage [ 139.282520][ T7905] rock: sig=0x4f50, size=4, remaining=3 [ 139.288281][ T7905] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 139.298772][ T7894] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 139.299340][ T7908] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 139.372697][ T7908] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.602489][ T7928] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 139.960101][ T3319] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.044109][ T7939] loop6: detected capacity change from 0 to 128 [ 140.112569][ T7939] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 140.224620][ T7939] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.500702][ T4737] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 140.523876][ T7949] loop2: detected capacity change from 0 to 512 [ 140.534489][ T7952] __nla_validate_parse: 4 callbacks suppressed [ 140.534510][ T7952] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1113'. [ 140.591776][ T7949] EXT4-fs error (device loop2): ext4_quota_enable:7173: comm syz.2.1108: Bad quota inum: 1, type: 2 [ 140.603326][ T4566] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 140.621284][ T7949] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 140.666854][ T7966] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 140.685638][ T7952] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 140.710960][ T7949] EXT4-fs (loop2): mount failed [ 140.727916][ T7966] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.758025][ T7974] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1113'. [ 140.770094][ T7970] rock: directory entry would overflow storage [ 140.776435][ T7970] rock: sig=0x4f50, size=4, remaining=3 [ 140.782085][ T7970] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 140.846580][ T7065] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.929789][ T8011] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 141.997616][ T8011] ext4 filesystem being mounted at /216/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.011344][ T29] kauditd_printk_skb: 194 callbacks suppressed [ 142.011478][ T29] audit: type=1326 audit(1767672417.061:8724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8013 comm="syz.2.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbedf1af749 code=0x7ffc0000 [ 142.065281][ T8011] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 142.072751][ T29] audit: type=1326 audit(1767672417.061:8725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8013 comm="syz.2.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbedf1af749 code=0x7ffc0000 [ 142.075563][ T8015] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 142.098046][ T29] audit: type=1326 audit(1767672417.061:8726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8013 comm="syz.2.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbedf1af749 code=0x7ffc0000 [ 142.133511][ T29] audit: type=1326 audit(1767672417.061:8727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8013 comm="syz.2.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbedf1af749 code=0x7ffc0000 [ 142.156981][ T29] audit: type=1326 audit(1767672417.061:8728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8013 comm="syz.2.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=84 compat=0 ip=0x7fbedf1af749 code=0x7ffc0000 [ 142.180907][ T29] audit: type=1326 audit(1767672417.061:8729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8013 comm="syz.2.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbedf1af749 code=0x7ffc0000 [ 142.204455][ T29] audit: type=1326 audit(1767672417.061:8730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8013 comm="syz.2.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbedf1af749 code=0x7ffc0000 [ 142.228908][ T29] audit: type=1326 audit(1767672417.061:8731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8013 comm="syz.2.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbedf1af749 code=0x7ffc0000 [ 142.238519][ T8015] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 142.253608][ T29] audit: type=1326 audit(1767672417.061:8732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8013 comm="syz.2.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fbedf1af749 code=0x7ffc0000 [ 142.253651][ T29] audit: type=1326 audit(1767672417.061:8733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8013 comm="syz.2.1123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fbedf1af749 code=0x7ffc0000 [ 142.402407][ T8029] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 142.415667][ T8029] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 142.529207][ T8036] EXT4-fs error (device loop8): ext4_quota_enable:7173: comm syz.8.1128: Bad quota inum: 1, type: 2 [ 142.540730][ T8036] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 142.562945][ T8036] EXT4-fs (loop8): mount failed [ 142.658924][ T8032] rock: directory entry would overflow storage [ 142.665156][ T8032] rock: sig=0x4f50, size=4, remaining=3 [ 142.670923][ T8032] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 142.827826][ T8050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.857518][ T8050] ext4 filesystem being mounted at /242/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 142.932780][ T8030] serio: Serial port ttyS3 [ 142.939278][ T8061] team0 (unregistering): Port device team_slave_0 removed [ 142.965050][ T8061] team0 (unregistering): Port device team_slave_1 removed [ 143.023242][ T130] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 143.078833][ T3319] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.132489][ T8069] set_capacity_and_notify: 8 callbacks suppressed [ 143.132506][ T8069] loop2: detected capacity change from 0 to 128 [ 143.150267][ T8069] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 143.266055][ T8069] ext4 filesystem being mounted at /243/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.335954][ T3319] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.408692][ T8078] loop6: detected capacity change from 0 to 128 [ 143.440394][ T8078] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 143.460312][ T8078] ext4 filesystem being mounted at /154/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.519343][ T8078] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 143.554525][ T8088] loop8: detected capacity change from 0 to 128 [ 143.670163][ T8093] loop0: detected capacity change from 0 to 764 [ 143.684458][ T8093] Symlink component flag not implemented [ 143.703337][ T8093] Symlink component flag not implemented (129) [ 143.710760][ T8093] rock: directory entry would overflow storage [ 143.717478][ T8093] rock: sig=0x4f50, size=4, remaining=3 [ 143.723538][ T8093] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 143.762770][ T63] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 143.832809][ T8103] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 143.870271][ T8107] loop6: detected capacity change from 0 to 128 [ 143.879309][ T8107] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 143.892868][ T8107] ext4 filesystem being mounted at /157/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.909898][ T8100] : renamed from erspan0 (while UP) [ 143.922470][ T8100] netlink: 'syz.0.1145': attribute type 1 has an invalid length. [ 143.930339][ T8100] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1145'. [ 143.939364][ T8100] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 143.972844][ T4737] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 144.305980][ T8124] loop2: detected capacity change from 0 to 128 [ 144.748401][ T8124] syz.2.1153: attempt to access beyond end of device [ 144.748401][ T8124] loop2: rw=2049, sector=169, nr_sectors = 72 limit=128 [ 144.974495][ T8124] syz.2.1153: attempt to access beyond end of device [ 144.974495][ T8124] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 145.861141][ T8124] syz.2.1153: attempt to access beyond end of device [ 145.861141][ T8124] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 145.874916][ T8124] syz.2.1153: attempt to access beyond end of device [ 145.874916][ T8124] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 145.910674][ T8139] loop6: detected capacity change from 0 to 764 [ 145.929890][ T8124] syz.2.1153: attempt to access beyond end of device [ 145.929890][ T8124] loop2: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 145.959606][ T8124] syz.2.1153: attempt to access beyond end of device [ 145.959606][ T8124] loop2: rw=2049, sector=313, nr_sectors = 8 limit=128 [ 145.986235][ T8139] Symlink component flag not implemented [ 145.992058][ T8139] Symlink component flag not implemented (129) [ 146.031651][ T8139] rock: directory entry would overflow storage [ 146.038015][ T8139] rock: sig=0x4f50, size=4, remaining=3 [ 146.043620][ T8139] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 146.047524][ T8124] syz.2.1153: attempt to access beyond end of device [ 146.047524][ T8124] loop2: rw=2049, sector=329, nr_sectors = 8 limit=128 [ 146.079604][ T8142] loop7: detected capacity change from 0 to 2048 [ 146.089125][ T8124] syz.2.1153: attempt to access beyond end of device [ 146.089125][ T8124] loop2: rw=2049, sector=345, nr_sectors = 8 limit=128 [ 146.112516][ T8124] syz.2.1153: attempt to access beyond end of device [ 146.112516][ T8124] loop2: rw=2049, sector=361, nr_sectors = 8 limit=128 [ 146.130142][ T8124] syz.2.1153: attempt to access beyond end of device [ 146.130142][ T8124] loop2: rw=2049, sector=377, nr_sectors = 8 limit=128 [ 146.131839][ T8142] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.172588][ T8144] loop0: detected capacity change from 0 to 128 [ 146.189960][ T8149] loop2: detected capacity change from 0 to 512 [ 146.221548][ T8149] EXT4-fs error (device loop2): ext4_quota_enable:7173: comm syz.2.1159: Bad quota inum: 1, type: 2 [ 146.224243][ T8144] ext4 filesystem being mounted at /223/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.254570][ T8142] serio: Serial port ttyS3 [ 146.268863][ T8154] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 146.275674][ T8149] EXT4-fs warning (device loop2): ext4_enable_quotas:7221: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 146.297317][ T8154] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 146.309073][ T8149] EXT4-fs (loop2): mount failed [ 146.524351][ T8164] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1164'. [ 146.627184][ T8169] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1165'. [ 146.673482][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1166'. [ 146.689429][ T8154] ================================================================== [ 146.698473][ T8154] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 146.707904][ T8154] [ 146.710271][ T8154] write to 0xffff888107688214 of 4 bytes by task 8159 on cpu 1: [ 146.718600][ T8154] xas_set_mark+0x12b/0x140 [ 146.726036][ T8154] tag_pages_for_writeback+0xc2/0x290 [ 146.731861][ T8154] writeback_iter+0x340/0x820 [ 146.737212][ T8154] mpage_writepages+0x87/0x1250 [ 146.743091][ T8154] fat_writepages+0x24/0x30 [ 146.748091][ T8154] do_writepages+0x1c6/0x310 [ 146.754198][ T8154] file_write_and_wait_range+0x156/0x2c0 [ 146.761018][ T8154] __generic_file_fsync+0x46/0x160 [ 146.766542][ T8154] fat_file_fsync+0x49/0x100 [ 146.772627][ T8154] vfs_fsync_range+0x10d/0x130 [ 146.778245][ T8154] generic_file_write_iter+0x1b8/0x2f0 [ 146.784296][ T8154] iter_file_splice_write+0x66b/0xa20 [ 146.789747][ T8154] direct_splice_actor+0x156/0x2a0 [ 146.794994][ T8154] splice_direct_to_actor+0x312/0x680 [ 146.800444][ T8154] do_splice_direct+0xda/0x150 [ 146.805262][ T8154] do_sendfile+0x380/0x650 [ 146.809986][ T8154] __x64_sys_sendfile64+0x105/0x150 [ 146.815316][ T8154] x64_sys_call+0x2db1/0x3000 [ 146.820046][ T8154] do_syscall_64+0xca/0x2b0 [ 146.824588][ T8154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.830625][ T8154] [ 146.833596][ T8154] read to 0xffff888107688214 of 4 bytes by task 8154 on cpu 0: [ 146.841179][ T8154] file_write_and_wait_range+0x10e/0x2c0 [ 146.847562][ T8154] __generic_file_fsync+0x46/0x160 [ 146.852807][ T8154] fat_file_fsync+0x49/0x100 [ 146.857446][ T8154] vfs_fsync_range+0x10d/0x130 [ 146.862253][ T8154] generic_file_write_iter+0x1b8/0x2f0 [ 146.869322][ T8154] iter_file_splice_write+0x66b/0xa20 [ 146.876712][ T8154] direct_splice_actor+0x156/0x2a0 [ 146.884742][ T8154] splice_direct_to_actor+0x312/0x680 [ 146.890515][ T8154] do_splice_direct+0xda/0x150 [ 146.895838][ T8154] do_sendfile+0x380/0x650 [ 146.900573][ T8154] __x64_sys_sendfile64+0x105/0x150 [ 146.906258][ T8154] x64_sys_call+0x2db1/0x3000 [ 146.910982][ T8154] do_syscall_64+0xca/0x2b0 [ 146.915625][ T8154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.921556][ T8154] [ 146.923951][ T8154] value changed: 0x02000021 -> 0x04000021 [ 146.930917][ T8154] [ 146.933333][ T8154] Reported by Kernel Concurrency Sanitizer on: [ 146.943295][ T8154] CPU: 0 UID: 0 PID: 8154 Comm: syz.6.1160 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 146.955316][ T8154] Tainted: [W]=WARN [ 146.959197][ T8154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 146.969825][ T8154] ================================================================== [ 147.018691][ T29] kauditd_printk_skb: 226 callbacks suppressed [ 147.018706][ T29] audit: type=1326 audit(1767672422.071:8960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8172 comm="syz.8.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae664f749 code=0x7ffc0000 [ 147.052859][ T29] audit: type=1326 audit(1767672422.071:8961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8172 comm="syz.8.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae664f749 code=0x7ffc0000 [ 147.087089][ T29] audit: type=1326 audit(1767672422.071:8962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8172 comm="syz.8.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f8ae664f749 code=0x7ffc0000 [ 147.118368][ T29] audit: type=1326 audit(1767672422.071:8963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8172 comm="syz.8.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae664f749 code=0x7ffc0000 [ 147.150183][ T29] audit: type=1326 audit(1767672422.071:8964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8172 comm="syz.8.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f8ae664f749 code=0x7ffc0000 [ 147.179570][ T29] audit: type=1326 audit(1767672422.071:8965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8172 comm="syz.8.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae664f749 code=0x7ffc0000 [ 147.208333][ T29] audit: type=1326 audit(1767672422.071:8966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8172 comm="syz.8.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f8ae664f749 code=0x7ffc0000 [ 147.236582][ T29] audit: type=1326 audit(1767672422.071:8967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8172 comm="syz.8.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae664f749 code=0x7ffc0000 [ 147.261386][ T29] audit: type=1326 audit(1767672422.071:8968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8172 comm="syz.8.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f8ae664f749 code=0x7ffc0000 [ 147.290565][ T29] audit: type=1326 audit(1767672422.071:8969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8172 comm="syz.8.1167" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ae664f749 code=0x7ffc0000 [ 147.349215][ T8176] rock: directory entry would overflow storage [ 147.356060][ T8176] rock: sig=0x4f50, size=4, remaining=3 [ 147.362322][ T8176] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 147.629018][ T130] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)