last executing test programs: 1m43.404324276s ago: executing program 4 (id=1777): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000050"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r0}, 0x18) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}, 0x1000000}], 0x2, 0x0) 1m43.3554061s ago: executing program 4 (id=1780): syz_emit_ethernet(0x52, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaa3df12158b1ee6aaf9bd686e13f892abdaaaaaaaaaaaaaaaa86dd604dc58c001c0600fe79000000000000000000000000001afe800000", @ANYRESHEX, @ANYRES8, @ANYBLOB="7002fffd9078000022065b6716240000"], 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2000) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0x8, 0xe, 0x9, 0x80000000, 0x1, 0xffffffffffffffff}) getuid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000680)) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000b80), &(0x7f0000000bc0)=0x10, 0x80800) stat(&(0x7f0000000c80)='./file0\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d40)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x78) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000002400)=0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, &(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRES32], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x40400) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x2, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @multicast}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x401, 0x9, 0x0, 'queue1\x00', 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x1ff}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/12, @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) 1m43.186637317s ago: executing program 4 (id=1783): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") (async) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x5, &(0x7f00000005c0)=0x1) 1m42.436218763s ago: executing program 4 (id=1786): r0 = socket$xdp(0x2c, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xab101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x1) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r6, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x4, r3, 0x30, r0}, 0x10) fchdir(0xffffffffffffffff) 1m41.709514676s ago: executing program 4 (id=1789): r0 = io_uring_setup(0x7d1, &(0x7f0000000580)={0x0, 0x9ca, 0x2, 0xfffffffe, 0x183}) close_range(r0, r0, 0x0) socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @empty}, 0x10, 0x0}, 0x30006041) close(0xffffffffffffffff) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mknod$loop(0x0, 0x6000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_STOP_AP(r1, &(0x7f00000003c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="01000000", @ANYRES16=0x0, @ANYBLOB="200c26bd7000fbdbdf251000000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004044) socket$nl_netfilter(0x10, 0x3, 0xc) 1m41.310796436s ago: executing program 4 (id=1794): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r5, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000004000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0, 0x157) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x80800) fcntl$setpipe(r6, 0x407, 0x176) 1m41.27158817s ago: executing program 32 (id=1794): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000020000000000000000000095"], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x406, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x31) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESDEC=0x0], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105142, 0x2c) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r5, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000004000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0, 0x157) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x80800) fcntl$setpipe(r6, 0x407, 0x176) 1m34.09259113s ago: executing program 3 (id=1893): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000780)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) io_setup(0x6, &(0x7f0000000300)=0x0) r4 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r4, &(0x7f0000001ec0)={&(0x7f0000000c00)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000c40)="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", 0x589}, {&(0x7f0000000300)="93f6678fba8725268500acd4325c61c4", 0x10}], 0x2, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xb}, @loopback}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@ra={0x94, 0x4}, @noop, @timestamp_prespec={0x44, 0x14, 0xf7, 0x3, 0x7, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x2cb5}, {@rand_addr=0x64010102, 0x5e}]}]}}}], 0x50}, 0x4) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x80000000}]) io_getevents(r3, 0x1, 0x1, &(0x7f0000001340)=[{}], 0x0) dup(0xffffffffffffffff) socket$can_raw(0x1d, 0x3, 0x1) eventfd(0x0) 1m34.002926139s ago: executing program 3 (id=1896): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000000), &(0x7f00000005c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r3}, 0x10) r4 = socket$inet6(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r7, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x70bd28, 0x3, {0x0, 0x0, 0x0, r7, 0x0, 0x1c05}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r5}, 0x10) sendto$inet6(r4, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r10}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) r12 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r12, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) write$P9_RLERRORu(r12, &(0x7f0000000080)={0x1e, 0x7, 0x2, {{0x11, '+\x0f\\:)\\\\+%)-!\')%$}'}, 0x10001}}, 0x1e) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r13}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 1m33.713553038s ago: executing program 3 (id=1899): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000050"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x1000000}], 0x2, 0x0) 1m33.667605272s ago: executing program 3 (id=1901): r0 = socket$xdp(0x2c, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xab101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x1) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r5, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) 1m33.602234219s ago: executing program 3 (id=1903): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r0, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) 1m33.601746979s ago: executing program 3 (id=1904): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x1, 0x0) 1m33.574753092s ago: executing program 33 (id=1904): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r4, 0x0, 0x1, 0x0) 1m30.366158193s ago: executing program 0 (id=1934): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000006800010003001000fdffef7f00000000000000000c00020001000000150000000c000c8006000110faff00000600030001"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) r4 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x9f4e, 0x10, 0x1, 0x144}, &(0x7f00000001c0)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0x7, &(0x7f00000000c0)=""/207, 0xcf, 0x10, 0x1}) io_uring_enter(r4, 0xfd0, 0x4c0, 0x43, 0x0, 0xf5) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01030000000000001c0012000c000100626f6e64000000000c000200080001000535cb791cf3e5b70232d790d9c04fe43a7bccf8c1da7ccaeb2139e26949091daef3a65ea915fa328ea3e70c9110ba58f2187888ae4d7776b4df2cbc2dc561eaad02975097e535fbd5a237175c2182cb970e188b27e6d601948c2d7647f30ac62ae107bffbd46fb6a6fd4ee99f79ae08ccfaad4753ddce7c44aa8dcefdfec4028ee61b21deb786b416246d65017099d8"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r7, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000280)=r2, 0x4) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x54, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0xff34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x9}}]}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0xfffffffffffffe6d, 0xa, r10}]}, 0x54}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1m30.065900024s ago: executing program 0 (id=1935): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x4, &(0x7f0000000280)=[{0x200000000006, 0x1, 0x18, 0x7ffc1fff}, {0x69c, 0xf, 0x8a, 0x8}, {0x6a42, 0x4, 0x14, 0xffffffff}, {0x7, 0x90, 0x10, 0x6}]}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000020000000000000000000000034000100fffffffc4a28dc4dfd285300"], &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYRES16, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = gettid() timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000000)={0x77359400}, 0xfffffffffffffffe) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000005c0)={'vxcan1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x18, 0x25, &(0x7f00000006c0)=ANY=[@ANYRES64=r5], 0x0, 0x2c, 0x0, 0x0, 0x40f00, 0xaf, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) sendmsg$can_j1939(r1, 0x0, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$TCFLSH(r6, 0x400455c8, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000040)=0x5) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000180)=0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$9p_rdma(0x0, &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f00000000c0)=ANY=[]) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000140)=0x3) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000400)=0x3) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000200)=0xa) 1m29.701583691s ago: executing program 1 (id=1938): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x4e4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000001340)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c0002"], 0xdc}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) move_pages(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000400)='itimer_state\x00', r5}, 0x18) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r6}, 0x10) setitimer(0x0, 0x0, 0x0) 1m29.362126924s ago: executing program 1 (id=1942): inotify_add_watch(0xffffffffffffffff, &(0x7f0000000340)='.\x00', 0xa50003d1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x20000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x32d5bb3934842c25, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e24, 0x5, @empty, 0x2800}}, 0xf, 0x0, 0x20000, 0x22, 0x2e, 0x0, 0x4}, 0x9c) 1m28.51161265s ago: executing program 1 (id=1946): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r2}, &(0x7f00000008c0), &(0x7f0000000880)=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0x6}}], 0x30, 0x45}, 0x0) 1m28.484322982s ago: executing program 1 (id=1947): r0 = socket$xdp(0x2c, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xab101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x1) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r4, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) 1m28.40849998s ago: executing program 1 (id=1948): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000200001000000000000000000020000000000000000000000080004"], 0x2c}}, 0x0) 1m28.353990946s ago: executing program 1 (id=1949): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000200001000000000000000000020000000000000000000000080004"], 0x2c}}, 0x0) (fail_nth: 2) 1m28.353679495s ago: executing program 34 (id=1949): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c000000200001000000000000000000020000000000000000000000080004"], 0x2c}}, 0x0) (fail_nth: 2) 1m27.921557069s ago: executing program 0 (id=1958): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00"/13], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) 1m27.90809708s ago: executing program 0 (id=1959): r0 = socket$xdp(0x2c, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xab101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x1) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000e868495fb58d00b6ad1f50ad32d6ad25dfd73a015e0ca6a0f68a7d007dc6751dfb265a0e3ccae669e173a64bc1cfd514600650a58f145ff1205fc9ddaa275e687d452d64e7cc957d77578f4c25235138d5521f9453559c35da860e8efbc64e57cbb7aee976f2b54421eed73d5661cfeecf9c66c54c3b3ffe1b4ce25d7c983cd44c05bd0a48dfe3e26e7a23129d6606ed28a69989d552af6d9a9df2c3af36e0360070011bbecc2f4a3799af2551ce935b0f327cb3f011a7d06602e2fd5234712596b696418f163d1a1a83109753f54b21cd027edd68149ee99eebc6f7d6dd4aed4af7588c8e1b44ccb19e810879b81a7000000e7ffffff00000000d7900a820b63278f4e9a217b98ef7042ad2a928903000000cbe43a1ed25268816b00000000000009d27d753a30a147b24a48435bd8a568669596e9e0867958e1dd7a0defb6670c06054002238260000000000040587c1ed797aa21a38e1e389f640a0b8b0000000000a835ad0f61ba739cd0c31b05c00fba8a4aee676d7caa2e53b91a68ff2e60da7b01a2e5785a238afa4aba70c08b0d71b6f72d6a8d87fb08533d97ad96d3943c4cc8306dac433a5cdf78b04963d679d5a5d07e618a1ef9057fec00f9e93021f5a8d30e716de8cde9c6000000000c3b64d10f0939b42b33ab2a8717096c58bb3bb1d457d8bb96870f5a7e2ba31fd69bb80235d957eaa9a40b764e5381ffa604aaafb76a980e72b408f686b185736693089213b4e140f8f38e5589663115093889deb646122a5dc5a9e5ba4d37749a36b880110e2bf524b79bc91105f1d3f7d0de694a9417d68694f17ba5e27ea1cec518b93fadcfe0de010ae9be3273ff73c34b5695080a35bfa5c69e3b533e1b939c81b3beda037b7191cb0000000000000000000010e5d683b8938db5c305cf7e6e62a6890ba9e1f4ee64f8202b59de5036569febfaa95f4633db108b2f786333ec7bacc927f4a1785165b5d2444b4c022bb5cff472e6a0c8ee9d6d8df83b704669147b732ac508c9b9f0ca0a1ce45319d43d4643eb285835daf2065b57bebd61ad6671296c27253a5f9688d57c91ccd40ffe2dbc5dd1613a2e6f5b363cc8d205ce6ef3c3c6ded7dd3dfdb39008d8997213f68cdc971c1d6fdacb7729a5560880a77525e9cfb94ef1735dfe74e6b948697f7e3580436b532a82e315d56b17a5dba98436cc24babaae409f0aab0b40af116001bc85492455956e853ead08b5793d4ecf72378a3dfd9cc837b1c66212d9a2be8fd6341c2f837c7fe09924a51ec42912856cce3d3b2d092c80813aad03e1e63a655f4138730f302df339f30a4fbd453c9a0fba381d071ad7cb80a52bec572e29b0b9b55c235806b97e166609f8083ce776075c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) r2 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r3, &(0x7f0000007700), 0x4000267, 0xfc0, 0x0) 1m27.553673866s ago: executing program 0 (id=1960): syz_emit_ethernet(0x52, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaa3df12158b1ee6aaf9bd686e13f892abdaaaaaaaaaaaaaaaa86dd604dc58c001c0600fe79000000000000000000000000001afe800000", @ANYRESHEX, @ANYRES8, @ANYBLOB="7002fffd9078000022065b6716240000"], 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x2000) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0x8, 0xe, 0x9, 0x80000000, 0x1, 0xffffffffffffffff}) getuid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000680)) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000b80), &(0x7f0000000bc0)=0x10, 0x80800) stat(&(0x7f0000000c80)='./file0\x00', 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000d40)) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x78) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x6}, 0x1c) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000002400)=0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, &(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRES32], 0x0, 0x10000000, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000008c0), 0x40400) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000100)={r4, 0x2, 0x6, @remote}, 0x10) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000000)={r4, 0x1, 0x6, @multicast}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000003c0)={0x401, 0x9, 0x0, 'queue1\x00', 0x2}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x1ff}}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) 1m27.362229145s ago: executing program 0 (id=1961): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000bc0)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095", @ANYBLOB="6a0746ffb3c51ae4dc0ef4a9f97f3db145543617ada97067b76b53007c26d5c03049317134df67c3c912eff2d9fccd9fa4529ec541b844e7e82d9f5bce3cce3d03cce3b03e8ede694f8412c740a8daaaf8b6e91e86eff9a8298965907ffc84b60e0dd23833c07ee1a3977d5741edc90a720f8ab4c99da94031dcf5a1bb336683697feec540be6a9d2134675427a822cc63a6538885504e8f71e6"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) sendto$inet6(r2, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5816}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) r9 = bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="05b94d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000000000000"], 0x50) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) close(r10) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @empty}}, [0x1000000001, 0x1006, 0x9, 0x0, 0x5, 0x0, 0x0, 0xcac4, 0xc2, 0x13, 0xd7, 0xc1b8511, 0x6, 0x10000001, 0x1]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={r11, 0x4, 0x10}, &(0x7f0000000180)=0xc) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r13 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/time_for_children\x00') sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r14 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x37, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018", @ANYRES32=r6, @ANYBLOB="0200000000000000b7080000800000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000004ac07000400000018120000", @ANYRES32=r5, @ANYBLOB="00000000c22d15a9a7f85200000000b703000000000000850000000c000000b7000000000000000bc40900b61ad9000000000000e64cd69df815b81d70b5a27101ca5adffbd29a6c8101b3fd9ead", @ANYRES64=r5, @ANYBLOB="000000000000000018120000", @ANYRESDEC=r13, @ANYRES32, @ANYRES32=r9, @ANYRES32=r12], &(0x7f0000000340)='GPL\x00', 0x6, 0x102, &(0x7f0000000d80)=""/258, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000a00)=[{0x3, 0x4, 0xa, 0x1}, {0x5, 0x3, 0x4, 0x6}, {0x0, 0x5, 0xe, 0x1}, {0x1, 0x4, 0xd, 0x7}, {0x1, 0x3, 0x7, 0x2}, {0x0, 0x5, 0x9, 0xc}, {0x3, 0x3, 0x7, 0x5}, {0x4, 0x2, 0x4, 0xa}, {0x2, 0x5, 0x2, 0x7}], 0x10, 0xc}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r14}, &(0x7f0000000200), &(0x7f0000000080)}, 0x20) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYRES16=r8], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x87}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000740)='kfree\x00', r15, 0x0, 0x40008003}, 0x18) io_uring_setup(0x3eac, &(0x7f0000000240)={0x0, 0x8517, 0x40, 0xffffffff, 0x12f}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400), 0x280040, 0x0) 1m27.361633695s ago: executing program 35 (id=1961): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x7, 0xc, &(0x7f0000000bc0)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007700000095", @ANYBLOB="6a0746ffb3c51ae4dc0ef4a9f97f3db145543617ada97067b76b53007c26d5c03049317134df67c3c912eff2d9fccd9fa4529ec541b844e7e82d9f5bce3cce3d03cce3b03e8ede694f8412c740a8daaaf8b6e91e86eff9a8298965907ffc84b60e0dd23833c07ee1a3977d5741edc90a720f8ab4c99da94031dcf5a1bb336683697feec540be6a9d2134675427a822cc63a6538885504e8f71e6"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) sendto$inet6(r2, &(0x7f0000000b80)="be", 0x1, 0x4008014, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, 0x7}, 0x1c) r3 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f00000001c0)=r3}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5816}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) r9 = bpf$MAP_CREATE(0x700000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="1d00000004000000020000000000000001020000", @ANYRES32, @ANYBLOB="05b94d00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000050000000000000000"], 0x50) r10 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r10, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) close(r10) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e21, @empty}}, [0x1000000001, 0x1006, 0x9, 0x0, 0x5, 0x0, 0x0, 0xcac4, 0xc2, 0x13, 0xd7, 0xc1b8511, 0x6, 0x10000001, 0x1]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={r11, 0x4, 0x10}, &(0x7f0000000180)=0xc) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r1) r13 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/time_for_children\x00') sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r14 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x37, &(0x7f0000000ec0)=ANY=[@ANYBLOB="1800000004000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018", @ANYRES32=r6, @ANYBLOB="0200000000000000b7080000800000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000004ac07000400000018120000", @ANYRES32=r5, @ANYBLOB="00000000c22d15a9a7f85200000000b703000000000000850000000c000000b7000000000000000bc40900b61ad9000000000000e64cd69df815b81d70b5a27101ca5adffbd29a6c8101b3fd9ead", @ANYRES64=r5, @ANYBLOB="000000000000000018120000", @ANYRESDEC=r13, @ANYRES32, @ANYRES32=r9, @ANYRES32=r12], &(0x7f0000000340)='GPL\x00', 0x6, 0x102, &(0x7f0000000d80)=""/258, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000a00)=[{0x3, 0x4, 0xa, 0x1}, {0x5, 0x3, 0x4, 0x6}, {0x0, 0x5, 0xe, 0x1}, {0x1, 0x4, 0xd, 0x7}, {0x1, 0x3, 0x7, 0x2}, {0x0, 0x5, 0x9, 0xc}, {0x3, 0x3, 0x7, 0x5}, {0x4, 0x2, 0x4, 0xa}, {0x2, 0x5, 0x2, 0x7}], 0x10, 0xc}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r14}, &(0x7f0000000200), &(0x7f0000000080)}, 0x20) r15 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYRES16=r8], &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x87}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000740)='kfree\x00', r15, 0x0, 0x40008003}, 0x18) io_uring_setup(0x3eac, &(0x7f0000000240)={0x0, 0x8517, 0x40, 0xffffffff, 0x12f}) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000400), 0x280040, 0x0) 2.959436653s ago: executing program 2 (id=2980): bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002080)={&(0x7f0000000300)='kfree\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) sendmsg$NFC_CMD_DEP_LINK_UP(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fbdbdf250400000005000a0000000000080001"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40) 2.896503599s ago: executing program 2 (id=2982): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a32"], 0x9c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 2.857927133s ago: executing program 2 (id=2983): r0 = syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x1010004, &(0x7f00000004c0)=ANY=[@ANYBLOB="696f636861727365743d69736f383835392d322c6372756674007362736563746f723d3078303030303030303030303030303030392c6d6f64653d30ab4036f0b4435e4db2b378303030303030303030303030303030302c73657373696f6e3d3078303030303030303030303030303033622c6e6f636f6d70726573734173686f776173736f632c636865636b3d7374726963742c00"], 0x80, 0x65c, &(0x7f0000000a00)="$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") perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xa, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYRESOCT=r2, @ANYRESOCT=r2], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="14"], 0xac}, 0x1, 0x0, 0x0, 0x4008805}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000ffff27bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="fda65f0500000000140012800c0001006d616376746170000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x308}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) r7 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000000200)) r8 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r8, 0x80000000004, 0x0) ioctl$USBDEVFS_IOCTL(r7, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x3, 0x1d459d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x183, 0x6}, 0x6025, 0x4005, 0xb, 0x0, 0x1, 0x1, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r9}, &(0x7f0000bbdffc)=0x0) timer_settime(r10, 0x0, &(0x7f0000000280)={{0x0, 0x989680}}, 0x0) r11 = mq_open(&(0x7f0000000080)='$@\x00', 0x40, 0xb4, 0x0) fcntl$setlease(r11, 0x400, 0x0) mq_open(&(0x7f0000000140)='$@\x00', 0x1, 0x0, 0x0) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f0000000000)=0x1) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r12}, 0x10) openat$ptmx(0xffffffffffffff9c, 0x0, 0x20000, 0x0) 1.827206737s ago: executing program 2 (id=2999): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x991, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r3}, 0x10, &(0x7f0000000040)={&(0x7f0000001100)=@can={{0x0, 0x0, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "0915193ac95f32ec"}, 0x10}}, 0x44001) recvmmsg(r2, &(0x7f0000000cc0), 0x2f, 0x2001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000001e0a01020000000000000000010000000900020073797a32000000003400038030000080090006400000000024000b802000018007000100637400001400028008000160ee00000000000040000000000900010073797a30"], 0xe4}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r6, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xffffffff}}}}}, 0x28}}, 0x0) 1.803199709s ago: executing program 2 (id=3000): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000005c0)={[{}, {@jqfmt_vfsold}, {@journal_path={'journal_path', 0x3d, './file0/../file0'}}, {@noquota}, {@nouid32}, {@journal_checksum}, {@data_err_abort}], [{@seclabel}]}, 0x3, 0x473, &(0x7f0000000640)="$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") bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 1.741881445s ago: executing program 2 (id=3004): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x2000000000000354, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) (async) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e88000085000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) (async) socket$packet(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0xb}, 0x94) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x3, &(0x7f0000000080)=0x8) r1 = getpid() (async, rerun: 32) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (rerun: 32) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000240)=@abs={0x0, 0x0, 0x100003}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/13], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./bus\x00', 0x101042, 0x0) add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) 1.669058833s ago: executing program 6 (id=3006): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00"/13], 0x50) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r1) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") 1.574775372s ago: executing program 6 (id=3008): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000100)='.\x02\x00') ioctl$PTP_ENABLE_PPS(0xffffffffffffffff, 0x40043d04, 0x0) 1.463753043s ago: executing program 6 (id=3009): syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='9p_protocol_dump\x00', r0}, 0x18) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x92, 0x92, 0x9, [@enum64={0x3, 0x2, 0x0, 0x13, 0x0, 0xe, [{0xd, 0x0, 0x2}, {0x4, 0x9, 0x7a}]}, @struct={0x10, 0x2, 0x0, 0x4, 0x1, 0x20400, [{0x3, 0x2, 0xf3e}, {0x9, 0x2, 0x400}]}, @const={0x6, 0x0, 0x0, 0xa, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x5}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x80000001}}, @datasec={0xa, 0x0, 0x0, 0xf, 0x2, [], "fee3"}]}, {0x0, [0x0, 0x0, 0x0, 0x61, 0x5f, 0x2e, 0x3e]}}, &(0x7f0000000740)=""/238, 0xb5, 0xee, 0x1, 0xffffff7a}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)={0x1b, 0x0, 0x0, 0x643, 0x0, 0xffffffffffffffff, 0x8, '\x00', 0x0, r3, 0x2, 0x3, 0x5}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005a00010000000000000000000000000008000180044dbdb1"], 0x1c}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x418, 0x0, 0x268, 0x311, 0x0, 0x268, 0x348, 0x460, 0x460, 0x348, 0x460, 0x9, 0x0, {[{{@uncond, 0x160, 0x230, 0x258, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x9}}}, @common=@unspec=@time={{0x38}, {0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x3}}]}, @common=@unspec=@NFQUEUE2={0x28}}, {{@ipv6={@local, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xff000000, 0xffffffff], [0xffffff00, 0xffffffff, 0xff000000], 'nicvf0\x00', 'veth0_to_bridge\x00', {0xff}, {}, 0x3a, 0x8, 0x0, 0x2}, 0x0, 0xd0, 0xf0, 0xe4030000, {}, [@common=@ipv6header={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6826b8d1d7fb627b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d000000"], &(0x7f0000000200)='GPL\x00', 0xf, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$pppl2tp(0x18, 0x1, 0x1) pipe2$9p(&(0x7f0000001900), 0x0) connect$pppl2tp(r6, &(0x7f0000001cc0)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2}}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00'}, 0x10) r7 = socket(0x1e, 0x4, 0x0) socket$key(0xf, 0x3, 0x2) recvmmsg$unix(r7, &(0x7f0000004100)=[{{0x0, 0x500, &(0x7f00000009c0)=[{&(0x7f0000000380)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r7, &(0x7f00000030c0)=[{{0x0, 0xa9cc703c, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) mount$9p_fd(0x3f00, &(0x7f0000000500)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000a40)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 1.403891559s ago: executing program 5 (id=3011): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x991, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r3}, 0x10, &(0x7f0000000040)={&(0x7f0000001100)=@can={{0x0, 0x0, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "0915193ac95f32ec"}, 0x10}}, 0x44001) recvmmsg(r2, &(0x7f0000000cc0), 0x2f, 0x2001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r5, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xffffffff}}}}}, 0x28}}, 0x0) 1.182667851s ago: executing program 5 (id=3014): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$tipc(0x1e, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) 1.125141507s ago: executing program 7 (id=3016): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000580), 0xffff, 0x2000) ioctl$BLKROGET(r0, 0x125e, 0x0) 1.072454503s ago: executing program 7 (id=3017): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r0, 0x0, 0x0) 1.072060982s ago: executing program 5 (id=3018): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$eJzs3E+LHEUYB+B315iNG/ePGqMJiIVe9NJk9+BFL4tsQDKgJFkhEYSO26vDtDPD9LAwIkZPXv0cIojgTRBvetmL30DwthePEcSWndEko5PDSEiH5Xku80LVb6jqphuq6erD1774sLNXZXv5MBYXFmKxH5FupUixGP/4NF5+9cefnrty7fqlrVZr+3JKF7eubrySUlp9/vt3Pv7qhR+Gp9/+dvW7pThYf/fwt81fD84enDv88+oH7Sq1q9TtDVOebvR6w/xGWaTddtXJUnqrLPKqSO1uVQym2vfKXr8/Snl3d2W5PyiqKuXdUeoUozTspeFglPL383Y3ZVmWVpaD+Z24Xe18eauu64i6fjRORl3X9WOxHKfj8ViJ1ViL9Xginoyn4kw8HWfjmXg2vvnl69FRAgAAAAAAAAAAAAAAAAAAALh/5t3/f27cq+lRAwAAAAAAAAAAAAAAAAAAwPFy5dr1S1ut1vbllE5FlJ/v7+zvTH4n7Vt70Y4yirgQa/FHjHf/T0zqi2+0ti+ksfX4rLz5d/7m/s4j0/mN8ecEZuY3Jvk0nV+K5bvzm7EWZ2bnN2fmT8VLL96Vz2Itfn4velHGbhxl7+Q/2Ujp9Tdb/8qfH/cDAACA4yBLt81cv2fZvdon+TmeD0ytr4+y5080OnUiohp91MnLshgoHvriZLPD+L2u6+YPQkPFva+UpYj43/+8EBEPxwT/UzR9Z+JBuHPSmx4JAAAAAAAAAAAA83gQrxM2PUcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YgeOBQAAAACE+Vun0bEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHwVAAD//+pd0x0=") r0 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYRES32=r0], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000d00)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) capget(&(0x7f0000000340)={0x20080522}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r3, &(0x7f00000004c0)="8cce8770c25862c449d91e97f6b2ecda2c4f01e1484338bf6ab755d57746684658c6abba6047eab42d626ca6cda0d1969fed9ce1fd5d00cc6a0a40fd37c4c9dfa5f176f13df9237c3863ff778d9050f4f9cd8a0d4c031802d1559067bda8a1cb7eb217b29feacb853ad88ff1cf6058d03ca1e917dd04cb58aca5f9e011acfcc21f29ccbab5e0fba7a5ece47955b1c25f986c34f233d74afac898b589db990d05d5c4c156f35504354476f9f3b7736cc063265790d91c6a56baf61375c725c83ac3875eb9180b0d8921b165e99e035a20"}, 0x20) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) madvise(&(0x7f000024a000/0x1000)=nil, 0x1000, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000010000000000000009500000000000000a6777edb68892a8e4419a72d5d5905bc008947d4a78e5afb39aaa23e3fb23d7f820dc38a67263a272e664ef65b810b76512a9f1b8b63511912ce7b7dce6671c80260c3d84af553c94dbad480f788d2c151fa365448af6fcc31633da8a3be30a52429f657ef831b4cd8c85fb450402866f5d3732efc7223c34169f5"], &(0x7f0000000780)='GPL\x00', 0x0, 0x49, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='timer_start\x00', r5}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000b40)={'tunl0\x00', &(0x7f0000000b00)={'ip_vti0\x00', 0x0, 0x7800, 0x8000, 0x6, 0x3, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x64, 0x0, 0xf, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000900000000000000ff03000018110000935317b8baed2608f8d69d4839b4d8d05f7a7cb5184ce719589a22236f6caa67402d7441407bb9128f72c08ee3450348ec2456264b2b8e23d926a585401d98654801424343804bad97cd9e03e1453c9d59e09d175d967ac56de70851bf0d35d5c79a1559ff1bdb09d19b51c5601adb14d9acededfca1fb32e758972d78f3a377d410e4c18e52e8f30390975c6c24", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='timer_start\x00', r7}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000940)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r8, &(0x7f0000000180), 0x40010) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) 1.071853102s ago: executing program 7 (id=3019): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@rights={{0x14, 0x1, 0x1, [r2]}}], 0x18, 0x5885}}], 0x1, 0x22000043) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x401}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20c1, 0x0) ioctl$TUNGETDEVNETNS(r4, 0x54e3, 0x0) 994.04252ms ago: executing program 7 (id=3020): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001dc0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_delete(r3) write$tcp_mem(r0, 0x0, 0x0) 993.58561ms ago: executing program 7 (id=3021): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000200)=ANY=[], 0xdb, 0x1226, &(0x7f0000003a80)="$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") 918.506438ms ago: executing program 5 (id=3022): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) r2 = syz_io_uring_setup(0x88e, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0x1f9}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r5 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000280)=0x60) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) recvfrom(r5, &(0x7f0000000340)=""/98, 0x62, 0x10020, &(0x7f00000003c0)=@nfc={0x27, 0x0, 0xffffffffffffffff}, 0x80) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r2, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x12345}) r6 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x61) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) sendfile(r7, r6, 0x0, 0x7ffff000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000000500)) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x300}]}}}}}}}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r2, 0x47f6, 0x0, 0x2000000, 0x0, 0x0) 505.904299ms ago: executing program 8 (id=3024): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x991, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r3}, 0x10, &(0x7f0000000040)={&(0x7f0000001100)=@can={{0x0, 0x0, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "0915193ac95f32ec"}, 0x10}}, 0x44001) recvmmsg(r2, &(0x7f0000000cc0), 0x2f, 0x2001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r5, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xffffffff}}}}}, 0x28}}, 0x0) 505.419969ms ago: executing program 6 (id=3025): bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a32"], 0x9c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 492.946771ms ago: executing program 8 (id=3026): fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000580), 0xffff, 0x2000) ioctl$BLKROGET(r0, 0x125e, 0x0) 459.272434ms ago: executing program 6 (id=3027): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$tipc(0x1e, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r2, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) 393.775911ms ago: executing program 8 (id=3028): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$tcp_mem(r0, 0x0, 0x0) (fail_nth: 2) 360.799524ms ago: executing program 8 (id=3029): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x991, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000440)={&(0x7f0000000780)={0x1d, r3}, 0x10, &(0x7f0000000040)={&(0x7f0000001100)=@can={{0x0, 0x0, 0x0, 0x1}, 0x1, 0x1, 0x0, 0x0, "0915193ac95f32ec"}, 0x10}}, 0x44001) recvmmsg(r2, &(0x7f0000000cc0), 0x2f, 0x2001, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000025000a20000000000a01030000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000003740000001e0a01020000000000000000010000000900020073797a32000000003400038030000080090006400000000024000b802000018007000100637400001400028008000160ee00000000000040000000000900010073797a30"], 0xe4}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x28, r6, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0xffffffff}}}}}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x60, r6, 0x800, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x7fffffff, 0x66}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x380}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x205}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1711}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0xc015}, 0x4000000) socket(0x1, 0x5, 0x0) epoll_create1(0x80000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) r8 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write$binfmt_aout(r8, &(0x7f00000000c0)=ANY=[], 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0000ee790000179c000000000000010000c567b7814d4d1dd0e600d01b00", @ANYRES32=r8, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32=r8, @ANYBLOB="01000000040000000500"/28], 0x50) creat(&(0x7f0000000180)='./file0\x00', 0x84) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r10, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 197.70624ms ago: executing program 6 (id=3030): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r1}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x183001, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001f80)=@newtaction={0x18, 0x76, 0x1, 0x6, 0x0, {0x0, 0x0, 0x300}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4c880}, 0x40000) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xb1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, 0x0, &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r7, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r7, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x885) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="280000001000010007ae69f7f6ad36991edadb00fadbdf2500000000466c819f79815ee53ef3f074468aebc1431258e2623240a58bbcc83d4d33091461c71ce00c6f969b26c430ba0d5e3b81341b77f594f09ecbe82821e25333397a5962302e0eeab8729cdf14e26a12d1ea810bb3494daf59a103b8ccb4c45599361eddbc555e486daaf6542a099bd03000b2292d0fd6385677f2eb2ad177c59d2633f6", @ANYRES32=0x0, @ANYBLOB="100804000000000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) r9 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r9, &(0x7f0000000140)={&(0x7f0000000080)=@in6={0xa, 0x4e26, 0x0, @initdev={0xfe, 0x88, '\x00', 0x2, 0x0}, 0x7}, 0x80, 0x0}, 0x20000010) sendmsg$kcm(r9, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0x4e23, 0xfac, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefce) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r7, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r7, 0x84, 0x78, &(0x7f0000000080), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r6}, 0x18) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x10, 0x0) r10 = socket(0x28, 0x801, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780), 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="7472f552133c67642c72667c138fc0", @ANYRESHEX, @ANYBLOB="ff0166646e6f3d", @ANYRESHEX=r10, @ANYBLOB=',\x00']) shutdown(r0, 0x1) 101.76548ms ago: executing program 5 (id=3031): r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000003c0), 0x80000, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r1 = creat(&(0x7f00000004c0)='./bus\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYRES32=r1], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000d00)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) r3 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) capget(&(0x7f0000000340)={0x20080522}, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r4, &(0x7f00000004c0)="8cce8770c25862c449d91e97f6b2ecda2c4f01e1484338bf6ab755d57746684658c6abba6047eab42d626ca6cda0d1969fed9ce1fd5d00cc6a0a40fd37c4c9dfa5f176f13df9237c3863ff778d9050f4f9cd8a0d4c031802d1559067bda8a1cb7eb217b29feacb853ad88ff1cf6058d03ca1e917dd04cb58aca5f9e011acfcc21f29ccbab5e0fba7a5ece47955b1c25f986c34f233d74afac898b589db990d05d5c4c156f35504354476f9f3b7736cc063265790d91c6a56baf61375c725c83ac3875eb9180b0d8921b165e99e035a20"}, 0x20) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) madvise(&(0x7f000024a000/0x1000)=nil, 0x1000, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000010000000000000009500000000000000a6777edb68892a8e4419a72d5d5905bc008947d4a78e5afb39aaa23e3fb23d7f820dc38a67263a272e664ef65b810b76512a9f1b8b63511912ce7b7dce6671c80260c3d84af553c94dbad480f788d2c151fa365448af6fcc31633da8a3be30a52429f657ef831b4cd8c85fb450402866f5d3732efc7223c34169f5"], &(0x7f0000000780)='GPL\x00', 0x0, 0x49, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='timer_start\x00', r6}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000b40)={'tunl0\x00', &(0x7f0000000b00)={'ip_vti0\x00', 0x0, 0x7800, 0x8000, 0x6, 0x3, {{0x5, 0x4, 0x0, 0x5, 0x14, 0x64, 0x0, 0xf, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000980)=ANY=[@ANYBLOB="180000000900000000000000ff03000018110000935317b8baed2608f8d69d4839b4d8d05f7a7cb5184ce719589a22236f6caa67402d7441407bb9128f72c08ee3450348ec2456264b2b8e23d926a585401d98654801424343804bad97cd9e03e1453c9d59e09d175d967ac56de70851bf0d35d5c79a1559ff1bdb09d19b51c5601adb14d9acededfca1fb32e758972d78f3a377d410e4c18e52e8f30390975c6c24", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000280)='timer_start\x00', r8}, 0x18) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000940)) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r9, &(0x7f0000000180), 0x40010) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) 88.621841ms ago: executing program 7 (id=3032): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000040)='fib6_table_lookup\x00', r0}, 0x10) socket(0xa, 0x2400000001, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYBLOB, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400080000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) rt_sigtimedwait(&(0x7f0000000100)={[0x4]}, &(0x7f00000001c0), &(0x7f0000000400)={r4, r5+60000000}, 0x8) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a310000000005000100ecffffff330007801800018014000240fe8000000000000080000000000000bb060004400e1f00000500070088000000060005404e"], 0x5c}, 0x1, 0x0, 0x0, 0x10000046}, 0x0) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="5c00000010000304f60300"/20, @ANYRES32=0x0, @ANYBLOB="4606090000000000300012800b00010062726964676500001f00028008000500", @ANYRES32=0x0, @ANYBLOB="04001400"], 0x5c}, 0x1, 0x0, 0x0, 0x600}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000900, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) 48.773425ms ago: executing program 8 (id=3033): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x4e4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) setitimer(0x0, 0x0, 0x0) 938.35µs ago: executing program 5 (id=3034): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00"/13], 0x50) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x2, 0x80805, 0x0) r1 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r1) getsockname$packet(r1, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4400000010000104001007fb5c360dff9fe30000", @ANYRES32=r2, @ANYBLOB="0100000000000000240012000c000100627269646765000e140002000800070005"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00'}, 0x9) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000c00)="$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") 0s ago: executing program 8 (id=3035): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r1 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7fffffffffffffff, 0x8000}, 0x11112, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000180)='cpu~=-!|!') perf_event_open(&(0x7f0000001040)={0x2, 0x80, 0x25, 0xfe, 0x0, 0x0, 0x0, 0x7, 0x80000, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffeffffe, 0x1, @perf_config_ext={0x9, 0x81}, 0x100f58, 0x3, 0x0, 0x1, 0xa, 0x21005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x1, r1, 0x3) perf_event_open(&(0x7f0000000040)={0x0, 0x80, 0x62, 0x0, 0x0, 0x0, 0x0, 0x4, 0x814c0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x8, 0x6}, 0x2424, 0x0, 0x800000, 0x6, 0x2, 0x200, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x1, 0xffffffffffffffff, 0x1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x31c0b4e, &(0x7f00000007c0)={[{@nouid32}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000200)='kfree\x00', r4, 0x0, 0x9}, 0x18) process_vm_writev(0x0, &(0x7f0000000080), 0x0, &(0x7f0000000500), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0xf3a, 0x0) write$binfmt_misc(r10, &(0x7f0000000980), 0xfdef) timer_settime(r8, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000000c0), 0x0) r11 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0xfd, 0x3, 0x2, 0x5c, @local, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7800, 0x40, 0x4, 0x4}}) kernel console output (not intermixed with test programs): ts going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 212.290881][T11058] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 212.311949][T11053] batman_adv: batadv0: Interface activated: macvtap6 [ 212.415485][ T9312] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.494998][T11059] hub 1-0:1.0: USB hub found [ 212.499744][T11059] hub 1-0:1.0: 8 ports detected [ 212.639527][T11068] loop7: detected capacity change from 0 to 8192 [ 212.942748][T11071] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2523'. [ 213.001327][T11075] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.017813][T11078] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2525'. [ 213.073204][T11075] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.097757][T11083] loop8: detected capacity change from 0 to 1024 [ 213.105026][T11083] EXT4-fs (loop8): filesystem is read-only [ 213.130410][T11083] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 213.140112][T11083] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 213.160409][T11083] EXT4-fs error (device loop8): ext4_get_journal_inode:5808: comm syz.8.2526: inode #1: comm syz.8.2526: iget: illegal inode # [ 213.189126][T11083] EXT4-fs (loop8): no journal found [ 213.192792][T11075] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.194411][T11083] EXT4-fs (loop8): can't get journal size [ 213.212952][ T8740] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.233196][T11083] EXT4-fs (loop8): failed to initialize system zone (-22) [ 213.250934][T11083] EXT4-fs (loop8): mount failed [ 213.258476][T11075] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.325933][ T37] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.341646][ T37] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.391441][ T37] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.399928][ T37] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.752285][T11108] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2536'. [ 213.792416][T11110] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 213.885081][T11101] loop2: detected capacity change from 0 to 2048 [ 213.940583][T11101] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #2: comm syz.2.2534: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 214.007185][T11101] EXT4-fs (loop2): get root inode failed [ 214.012954][T11101] EXT4-fs (loop2): mount failed [ 214.107674][T11123] loop8: detected capacity change from 0 to 8192 [ 214.175733][T11127] loop8: detected capacity change from 0 to 164 [ 214.229128][T11127] macvtap3: entered allmulticast mode [ 214.241868][T11127] batman_adv: batadv0: Adding interface: macvtap3 [ 214.248353][T11127] batman_adv: batadv0: The MTU of interface macvtap3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 214.277875][T11128] hub 1-0:1.0: USB hub found [ 214.282829][T11128] hub 1-0:1.0: 8 ports detected [ 214.285290][T11127] batman_adv: batadv0: Interface activated: macvtap3 [ 214.385007][T11132] loop7: detected capacity change from 0 to 512 [ 214.400941][T11130] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2544'. [ 214.411358][T11130] netlink: 256 bytes leftover after parsing attributes in process `syz.8.2544'. [ 214.458609][T11132] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.458687][T11136] loop8: detected capacity change from 0 to 512 [ 214.488098][T11136] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 214.723529][T11144] random: crng reseeded on system resumption [ 215.066285][T11094] loop5: detected capacity change from 0 to 2048 [ 215.082103][T11094] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #2: comm syz.5.2529: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 215.099851][T11094] EXT4-fs (loop5): get root inode failed [ 215.105622][T11094] EXT4-fs (loop5): mount failed [ 215.263163][ T9271] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.321981][T11150] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2547'. [ 215.344981][ T9312] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.355522][T11152] loop7: detected capacity change from 0 to 164 [ 215.367913][T11152] macvtap10: entered allmulticast mode [ 215.375258][T11152] batman_adv: batadv0: Adding interface: macvtap10 [ 215.381830][T11152] batman_adv: batadv0: The MTU of interface macvtap10 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.410039][T11152] batman_adv: batadv0: Interface activated: macvtap10 [ 215.430270][T11155] loop8: detected capacity change from 0 to 512 [ 215.452288][T11155] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 215.655347][T11160] random: crng reseeded on system resumption [ 215.666116][T11160] Restarting kernel threads ... [ 215.671269][T11160] Done restarting kernel threads. [ 215.701059][T11168] loop5: detected capacity change from 0 to 1024 [ 215.714785][T11168] EXT4-fs (loop5): filesystem is read-only [ 215.721596][ T29] kauditd_printk_skb: 292 callbacks suppressed [ 215.721613][ T29] audit: type=1326 audit(2000000029.170:70017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11169 comm="syz.2.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0f551f6c9 code=0x7ffc0000 [ 215.751925][ T29] audit: type=1326 audit(2000000029.170:70018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11169 comm="syz.2.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0f551f6c9 code=0x7ffc0000 [ 215.777274][T11168] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 215.789580][T11172] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2554'. [ 215.805845][T11173] macvtap4: entered allmulticast mode [ 215.812443][T11168] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 215.823654][T11173] batman_adv: batadv0: Adding interface: macvtap4 [ 215.830110][T11173] batman_adv: batadv0: The MTU of interface macvtap4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 215.830615][ T29] audit: type=1326 audit(2000000029.220:70019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11169 comm="syz.2.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd0f551f6c9 code=0x7ffc0000 [ 215.856020][T11168] EXT4-fs error (device loop5): ext4_get_journal_inode:5808: comm syz.5.2553: inode #1: comm syz.5.2553: iget: illegal inode # [ 215.893472][T11173] batman_adv: batadv0: Interface activated: macvtap4 [ 215.900681][T11168] EXT4-fs (loop5): no journal found [ 215.905943][T11168] EXT4-fs (loop5): can't get journal size [ 215.920982][T11168] EXT4-fs (loop5): failed to initialize system zone (-22) [ 215.930395][T11168] EXT4-fs (loop5): mount failed [ 215.956621][ T29] audit: type=1326 audit(2000000029.400:70020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11169 comm="syz.2.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0f551f6c9 code=0x7ffc0000 [ 215.980328][ T29] audit: type=1326 audit(2000000029.400:70021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11169 comm="syz.2.2554" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0f551f6c9 code=0x7ffc0000 [ 216.076195][T11184] loop5: detected capacity change from 0 to 512 [ 216.083250][T11184] journal_path: Lookup failure for './file0/../file0' [ 216.090048][T11184] EXT4-fs: error: could not find journal device path [ 216.132679][T11187] loop5: detected capacity change from 0 to 2048 [ 216.139969][T11187] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 216.155237][ T29] audit: type=1326 audit(2000000029.600:70022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11186 comm="syz.5.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11356df6c9 code=0x7ffc0000 [ 216.179766][T11187] loop5: detected capacity change from 0 to 1024 [ 216.188385][ T29] audit: type=1326 audit(2000000029.600:70023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11186 comm="syz.5.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11356df6c9 code=0x7ffc0000 [ 216.190807][T11187] EXT4-fs: Ignoring removed orlov option [ 216.212033][ T29] audit: type=1326 audit(2000000029.600:70024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11186 comm="syz.5.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f11356df6c9 code=0x7ffc0000 [ 216.224115][T11187] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.241883][ T29] audit: type=1326 audit(2000000029.600:70025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11186 comm="syz.5.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f11356df703 code=0x7ffc0000 [ 216.277685][ T29] audit: type=1326 audit(2000000029.600:70026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11186 comm="syz.5.2560" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f11356de17f code=0x7ffc0000 [ 216.352260][ T9312] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.434951][T11203] blktrace: Concurrent blktraces are not allowed on loop4 [ 216.465488][T11208] loop8: detected capacity change from 0 to 164 [ 216.496962][T11208] macvtap4: entered allmulticast mode [ 216.506913][T11208] batman_adv: batadv0: Adding interface: macvtap4 [ 216.513409][T11208] batman_adv: batadv0: The MTU of interface macvtap4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.538970][T11208] batman_adv: batadv0: Interface activated: macvtap4 [ 216.549301][T11210] hub 1-0:1.0: USB hub found [ 216.555280][T11210] hub 1-0:1.0: 8 ports detected [ 216.653573][T11213] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.708177][T11213] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.769263][T11211] loop7: detected capacity change from 0 to 8192 [ 216.781640][T11213] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.864795][T11213] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.908433][ T555] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.929160][ T555] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.939908][ T555] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.950745][ T555] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.005767][ T8740] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 217.191191][T11244] loop5: detected capacity change from 0 to 512 [ 217.205138][T11244] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 217.459740][T11256] random: crng reseeded on system resumption [ 217.469925][T11256] Restarting kernel threads ... [ 217.475066][T11256] Done restarting kernel threads. [ 217.861226][T11261] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 218.113753][T11268] loop5: detected capacity change from 0 to 512 [ 218.133173][T11271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.145285][T11268] ext4 filesystem being mounted at /160/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 218.177426][T11268] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.2587: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 218.222284][T11271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.247539][T11268] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 218.260749][T11268] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.2587: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 218.312415][T11278] SELinux: Context system_u:object_r:auditd_etc_t:s0 is not valid (left unmapped). [ 218.344571][T11268] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 218.375872][T11268] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2587: bg 0: block 18: invalid block bitmap [ 218.398201][T11275] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2590'. [ 218.399056][T11268] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.2587: Failed to acquire dquot type 1 [ 218.596829][T11289] blktrace: Concurrent blktraces are not allowed on loop16 [ 218.963255][T11299] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.012683][T11299] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.207865][T11299] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.255530][T11305] hub 6-0:1.0: USB hub found [ 219.260508][T11305] hub 6-0:1.0: 8 ports detected [ 219.359967][T11307] loop2: detected capacity change from 0 to 8192 [ 219.372404][T11299] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.414745][T11309] loop2: detected capacity change from 0 to 164 [ 219.428011][T11309] macvtap7: entered allmulticast mode [ 219.434881][T11309] batman_adv: batadv0: Adding interface: macvtap7 [ 219.441390][T11309] batman_adv: batadv0: The MTU of interface macvtap7 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.467135][T11309] batman_adv: batadv0: Interface activated: macvtap7 [ 219.473274][T11311] loop8: detected capacity change from 0 to 164 [ 219.486835][T11309] hub 1-0:1.0: USB hub found [ 219.492028][T11309] hub 1-0:1.0: 8 ports detected [ 219.493796][T11311] macvtap5: entered allmulticast mode [ 219.504810][T11311] batman_adv: batadv0: Adding interface: macvtap5 [ 219.511380][T11311] batman_adv: batadv0: The MTU of interface macvtap5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 219.538605][T11311] batman_adv: batadv0: Interface activated: macvtap5 [ 219.545582][ T37] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.565072][ T386] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.577118][ T386] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.584931][T11314] loop2: detected capacity change from 0 to 512 [ 219.592052][T11314] journal_path: Lookup failure for './file0/../file0' [ 219.595181][ T386] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.598843][T11314] EXT4-fs: error: could not find journal device path [ 219.618732][T11312] hub 1-0:1.0: USB hub found [ 219.626021][T11312] hub 1-0:1.0: 8 ports detected [ 219.784901][T11320] loop2: detected capacity change from 0 to 8192 [ 219.805676][T11318] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2605'. [ 219.875246][T11326] loop5: detected capacity change from 0 to 512 [ 219.882803][T11326] EXT4-fs: Ignoring removed nobh option [ 219.888722][T11326] EXT4-fs: old and new quota format mixing [ 219.897321][T11326] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2608'. [ 219.930195][T11329] loop2: detected capacity change from 0 to 1024 [ 219.937907][T11329] EXT4-fs: Ignoring removed orlov option [ 220.401696][T11341] loop2: detected capacity change from 0 to 164 [ 220.417869][T11343] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2614'. [ 220.429118][T11341] macvtap8: entered allmulticast mode [ 220.437547][T11341] batman_adv: batadv0: Adding interface: macvtap8 [ 220.444189][T11341] batman_adv: batadv0: The MTU of interface macvtap8 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 220.444486][T11345] loop5: detected capacity change from 0 to 512 [ 220.469803][T11341] batman_adv: batadv0: Interface activated: macvtap8 [ 220.476846][T11345] journal_path: Lookup failure for './file0/../file0' [ 220.489621][T11345] EXT4-fs: error: could not find journal device path [ 220.498153][T11341] hub 1-0:1.0: USB hub found [ 220.502940][T11341] hub 1-0:1.0: 8 ports detected [ 220.547875][T11353] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.599229][T11358] FAULT_INJECTION: forcing a failure. [ 220.599229][T11358] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 220.612545][T11358] CPU: 0 UID: 0 PID: 11358 Comm: syz.5.2616 Not tainted syzkaller #0 PREEMPT(voluntary) [ 220.612573][T11358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 220.612586][T11358] Call Trace: [ 220.612633][T11358] [ 220.612643][T11358] __dump_stack+0x1d/0x30 [ 220.612671][T11358] dump_stack_lvl+0xe8/0x140 [ 220.612719][T11358] dump_stack+0x15/0x1b [ 220.612742][T11358] should_fail_ex+0x265/0x280 [ 220.612776][T11358] should_fail+0xb/0x20 [ 220.612846][T11358] should_fail_usercopy+0x1a/0x20 [ 220.612869][T11358] _copy_from_user+0x1c/0xb0 [ 220.612893][T11358] ___sys_sendmsg+0xc1/0x1d0 [ 220.612932][T11358] __x64_sys_sendmsg+0xd4/0x160 [ 220.612957][T11358] x64_sys_call+0x191e/0x3000 [ 220.613021][T11358] do_syscall_64+0xd2/0x200 [ 220.613048][T11358] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 220.613084][T11358] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 220.613188][T11358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.613217][T11358] RIP: 0033:0x7f11356df6c9 [ 220.613236][T11358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.613257][T11358] RSP: 002b:00007f1134126038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.613276][T11358] RAX: ffffffffffffffda RBX: 00007f1135936090 RCX: 00007f11356df6c9 [ 220.613369][T11358] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 220.613396][T11358] RBP: 00007f1134126090 R08: 0000000000000000 R09: 0000000000000000 [ 220.613412][T11358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.613502][T11358] R13: 00007f1135936128 R14: 00007f1135936090 R15: 00007ffe2b11ddc8 [ 220.613526][T11358] [ 220.619746][T11359] loop2: detected capacity change from 0 to 1024 [ 220.799258][T11353] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.809357][T11359] EXT4-fs (loop2): filesystem is read-only [ 220.818625][T11359] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 220.828584][T11359] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 220.830353][ T29] kauditd_printk_skb: 233 callbacks suppressed [ 220.830419][ T29] audit: type=1326 audit(2000000034.270:70258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11361 comm="syz.8.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe96d3ff6c9 code=0x7ffc0000 [ 220.840522][T11359] EXT4-fs error (device loop2): ext4_get_journal_inode:5808: comm syz.2.2617: inode #1: comm syz.2.2617: iget: illegal inode # [ 220.845043][ T29] audit: type=1326 audit(2000000034.270:70259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11361 comm="syz.8.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe96d3ff6c9 code=0x7ffc0000 [ 220.869627][T11359] EXT4-fs (loop2): no journal found [ 220.893357][T11362] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2619'. [ 220.905531][T11359] EXT4-fs (loop2): can't get journal size [ 220.920607][ T29] audit: type=1326 audit(2000000034.330:70260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11361 comm="syz.8.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe96d3ff6c9 code=0x7ffc0000 [ 220.930840][T11359] EXT4-fs (loop2): failed to initialize system zone (-22) [ 220.949205][ T29] audit: type=1326 audit(2000000034.340:70261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11361 comm="syz.8.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe96d3ff6c9 code=0x7ffc0000 [ 220.956342][T11359] EXT4-fs (loop2): mount failed [ 220.979839][ T29] audit: type=1326 audit(2000000034.340:70262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11361 comm="syz.8.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe96d3ff6c9 code=0x7ffc0000 [ 221.008388][ T29] audit: type=1326 audit(2000000034.340:70263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11361 comm="syz.8.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe96d3ff6c9 code=0x7ffc0000 [ 221.032023][ T29] audit: type=1326 audit(2000000034.340:70264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11361 comm="syz.8.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe96d3ff6c9 code=0x7ffc0000 [ 221.055662][ T29] audit: type=1326 audit(2000000034.340:70265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11361 comm="syz.8.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe96d3ff6c9 code=0x7ffc0000 [ 221.079373][ T29] audit: type=1326 audit(2000000034.340:70266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11361 comm="syz.8.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe96d3fdf10 code=0x7ffc0000 [ 221.103305][ T29] audit: type=1326 audit(2000000034.340:70267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11361 comm="syz.8.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fe96d400ef7 code=0x7ffc0000 [ 221.132261][T11353] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.192670][T11353] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.223989][T11379] loop8: detected capacity change from 0 to 512 [ 221.230997][T11379] journal_path: Lookup failure for './file0/../file0' [ 221.237790][T11379] EXT4-fs: error: could not find journal device path [ 221.294346][T11382] loop8: detected capacity change from 0 to 164 [ 221.300608][T11380] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2625'. [ 221.309841][T11380] netlink: 15 bytes leftover after parsing attributes in process `syz.6.2625'. [ 221.383584][T11382] macvtap6: entered allmulticast mode [ 221.398118][T11382] batman_adv: batadv0: Adding interface: macvtap6 [ 221.398958][T11385] hub 1-0:1.0: USB hub found [ 221.404672][T11382] batman_adv: batadv0: The MTU of interface macvtap6 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.419226][T11385] hub 1-0:1.0: 8 ports detected [ 221.454243][T11382] batman_adv: batadv0: Interface activated: macvtap6 [ 221.475364][T11387] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2629'. [ 221.486834][T11387] netlink: 256 bytes leftover after parsing attributes in process `syz.7.2629'. [ 221.588649][T11392] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2631'. [ 221.597990][T11398] loop7: detected capacity change from 0 to 8192 [ 221.690555][T11411] loop7: detected capacity change from 0 to 128 [ 221.714289][T11413] loop8: detected capacity change from 0 to 512 [ 221.731270][T11413] journal_path: Lookup failure for './file0/../file0' [ 221.738141][T11413] EXT4-fs: error: could not find journal device path [ 221.785666][T11419] loop8: detected capacity change from 0 to 164 [ 221.805781][T11419] macvtap7: entered allmulticast mode [ 221.813078][T11419] batman_adv: batadv0: Adding interface: macvtap7 [ 221.819587][T11419] batman_adv: batadv0: The MTU of interface macvtap7 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.845274][T11419] batman_adv: batadv0: Interface activated: macvtap7 [ 221.866288][T11423] loop2: detected capacity change from 0 to 512 [ 221.874120][T11425] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2645'. [ 221.885226][T11423] EXT4-fs mount: 5 callbacks suppressed [ 221.885245][T11423] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.908750][T11419] hub 1-0:1.0: USB hub found [ 221.912838][T11430] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2646'. [ 221.913586][T11419] hub 1-0:1.0: 8 ports detected [ 222.189236][T11439] random: crng reseeded on system resumption [ 222.199701][T11439] Restarting kernel threads ... [ 222.204840][T11439] Done restarting kernel threads. [ 222.798625][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.855880][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2656'. [ 222.899991][T11459] blktrace: Concurrent blktraces are not allowed on loop14 [ 223.033338][T11474] netlink: 'syz.7.2663': attribute type 7 has an invalid length. [ 223.077356][T11474] loop7: detected capacity change from 0 to 1024 [ 223.084180][T11474] EXT4-fs: Ignoring removed bh option [ 223.084309][T11478] loop2: detected capacity change from 0 to 164 [ 223.089612][T11474] EXT4-fs: inline encryption not supported [ 223.111745][T11478] macvtap9: entered allmulticast mode [ 223.117777][T11474] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 223.129292][T11478] batman_adv: batadv0: Adding interface: macvtap9 [ 223.135779][T11478] batman_adv: batadv0: The MTU of interface macvtap9 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 223.162442][T11478] batman_adv: batadv0: Interface activated: macvtap9 [ 223.179853][T11474] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 223.189160][T11474] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.2663: lblock 2 mapped to illegal pblock 2 (length 1) [ 223.208835][T11474] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.2663: lblock 0 mapped to illegal pblock 48 (length 1) [ 223.223779][T11474] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.2663: Failed to acquire dquot type 0 [ 223.237051][T11474] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 223.245768][T11481] hub 1-0:1.0: USB hub found [ 223.247249][T11474] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.2663: mark_inode_dirty error [ 223.251965][T11481] hub 1-0:1.0: 8 ports detected [ 223.271862][T11474] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 223.282144][T11474] EXT4-fs (loop7): 1 orphan inode deleted [ 223.288349][T11474] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.302349][ T37] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 223.320379][ T37] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 0 [ 223.334218][T11474] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 223.356215][ T9271] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.756971][T11510] loop8: detected capacity change from 0 to 128 [ 224.024189][T11516] can0: slcan on ttyS3. [ 224.042218][T11524] syzkaller0: entered allmulticast mode [ 224.047948][T11524] syzkaller0: entered promiscuous mode [ 224.055491][T11524] syzkaller0 (unregistering): left allmulticast mode [ 224.062240][T11524] syzkaller0 (unregistering): left promiscuous mode [ 224.069027][T11515] can0 (unregistered): slcan off ttyS3. [ 224.134481][T11532] loop8: detected capacity change from 0 to 2048 [ 224.141661][T11532] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 224.161089][T11532] loop8: detected capacity change from 0 to 1024 [ 224.168250][T11532] EXT4-fs: Ignoring removed orlov option [ 224.174606][T11534] loop2: detected capacity change from 0 to 1024 [ 224.176843][T11532] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.181713][T11534] EXT4-fs (loop2): filesystem is read-only [ 224.199513][T11534] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 224.209497][T11534] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 224.264970][T11534] EXT4-fs error (device loop2): ext4_get_journal_inode:5808: comm gtp: inode #1: comm gtp: iget: illegal inode # [ 224.287660][T11534] EXT4-fs (loop2): no journal found [ 224.293064][T11534] EXT4-fs (loop2): can't get journal size [ 224.313175][T11534] EXT4-fs (loop2): failed to initialize system zone (-22) [ 224.320729][T11534] EXT4-fs (loop2): mount failed [ 224.335011][ T555] Bluetooth: hci0: Frame reassembly failed (-84) [ 224.342511][T11542] Bluetooth: hci0: Frame reassembly failed (-90) [ 224.366825][T11547] loop2: detected capacity change from 0 to 164 [ 224.396806][T11547] macvtap10: entered allmulticast mode [ 224.403286][T11547] batman_adv: batadv0: Adding interface: macvtap10 [ 224.409861][T11547] batman_adv: batadv0: The MTU of interface macvtap10 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.435766][T11547] batman_adv: batadv0: Interface activated: macvtap10 [ 224.443833][ T9312] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.475064][T11556] loop8: detected capacity change from 0 to 2048 [ 224.491928][T11556] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.515891][T11559] hub 1-0:1.0: USB hub found [ 224.521000][T11559] hub 1-0:1.0: 8 ports detected [ 224.671809][ T9312] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.729839][T11565] syzkaller0: entered allmulticast mode [ 224.735815][T11565] syzkaller0: entered promiscuous mode [ 224.743449][T11565] syzkaller0 (unregistering): left allmulticast mode [ 224.750194][T11565] syzkaller0 (unregistering): left promiscuous mode [ 224.900750][T11571] loop8: detected capacity change from 0 to 8192 [ 224.928970][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.947796][ T12] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.970185][ T12] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.986057][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.021820][T11577] loop5: detected capacity change from 0 to 512 [ 225.029806][T11577] journal_path: Lookup failure for './file0/../file0' [ 225.036797][T11577] EXT4-fs: error: could not find journal device path [ 225.184701][T11587] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 225.223610][T11589] loop5: detected capacity change from 0 to 512 [ 225.264067][T11589] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.312177][T11596] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.322466][T11589] random: crng reseeded on system resumption [ 225.332661][T11589] Restarting kernel threads ... [ 225.337836][T11589] Done restarting kernel threads. [ 225.356648][ T8740] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.371469][T11596] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.423216][T11604] syzkaller0: entered allmulticast mode [ 225.429086][T11601] loop2: detected capacity change from 0 to 8192 [ 225.434564][T11604] syzkaller0: entered promiscuous mode [ 225.456373][T11596] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.484055][T11604] syzkaller0 (unregistering): left allmulticast mode [ 225.490806][T11604] syzkaller0 (unregistering): left promiscuous mode [ 225.592682][T11596] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.630769][T11610] __nla_validate_parse: 10 callbacks suppressed [ 225.630861][T11610] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2714'. [ 225.741189][ T555] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.752742][T11606] loop2: detected capacity change from 0 to 8192 [ 225.754695][ T37] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.767978][ T37] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.780372][ T37] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.869132][T11618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2716'. [ 225.880180][T11621] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2717'. [ 225.902124][T11621] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2717'. [ 226.044896][T11635] loop2: detected capacity change from 0 to 512 [ 226.066205][T11635] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.092290][T11637] loop5: detected capacity change from 0 to 8192 [ 226.136814][T11635] random: crng reseeded on system resumption [ 226.147061][T11635] Restarting kernel threads ... [ 226.152418][T11635] Done restarting kernel threads. [ 226.170025][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.315765][T11648] loop5: detected capacity change from 0 to 512 [ 226.329968][T11648] EXT4-fs: Ignoring removed nobh option [ 226.345979][T11648] EXT4-fs: old and new quota format mixing [ 226.360501][ T4879] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 226.366670][ T44] Bluetooth: hci0: command 0x1003 tx timeout [ 226.403627][T11648] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2725'. [ 226.525852][ T29] kauditd_printk_skb: 203 callbacks suppressed [ 226.525870][ T29] audit: type=1326 audit(2000000039.970:70468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11651 comm="syz.5.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11356df6c9 code=0x7ffc0000 [ 226.555898][ T29] audit: type=1326 audit(2000000039.970:70469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11651 comm="syz.5.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11356df6c9 code=0x7ffc0000 [ 226.617684][T11650] loop7: detected capacity change from 0 to 8192 [ 226.720579][ T29] audit: type=1326 audit(2000000040.030:70470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11651 comm="syz.5.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f11356df6c9 code=0x7ffc0000 [ 226.787789][T11660] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2732'. [ 226.810626][T11662] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2733'. [ 226.829971][ T29] audit: type=1400 audit(2000000040.270:70471): avc: denied { create } for pid=11663 comm="syz.6.2734" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 226.897952][ T29] audit: type=1326 audit(2000000040.310:70472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11651 comm="syz.5.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11356df6c9 code=0x7ffc0000 [ 226.904230][T11669] loop2: detected capacity change from 0 to 128 [ 226.921784][ T29] audit: type=1326 audit(2000000040.310:70473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11651 comm="syz.5.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11356df6c9 code=0x7ffc0000 [ 227.023928][T11675] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2734'. [ 227.052663][ T29] audit: type=1326 audit(2000000040.370:70474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11651 comm="syz.5.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11356df6c9 code=0x7ffc0000 [ 227.070722][ T3400] IPVS: starting estimator thread 0... [ 227.076343][ T29] audit: type=1326 audit(2000000040.370:70475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11651 comm="syz.5.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11356df6c9 code=0x7ffc0000 [ 227.105676][ T29] audit: type=1326 audit(2000000040.370:70476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11651 comm="syz.5.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11356df6c9 code=0x7ffc0000 [ 227.129486][ T29] audit: type=1326 audit(2000000040.400:70477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11651 comm="syz.5.2728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11356df6c9 code=0x7ffc0000 [ 227.148108][T11680] loop5: detected capacity change from 0 to 512 [ 227.170298][T11678] IPVS: using max 2016 ests per chain, 100800 per kthread [ 227.200758][T11680] EXT4-fs: Ignoring removed nobh option [ 227.226394][T11680] EXT4-fs: old and new quota format mixing [ 227.256111][T11680] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2739'. [ 227.530972][T11697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2745'. [ 227.681284][T11703] loop7: detected capacity change from 0 to 512 [ 227.701751][T11703] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.835327][T11708] macvtap5: entered allmulticast mode [ 227.843833][T11708] batman_adv: batadv0: Adding interface: macvtap5 [ 227.850360][T11708] batman_adv: batadv0: The MTU of interface macvtap5 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 227.899918][T11708] batman_adv: batadv0: Interface activated: macvtap5 [ 227.969046][T11711] loop5: detected capacity change from 0 to 8192 [ 227.997284][T11713] random: crng reseeded on system resumption [ 228.007369][T11713] Restarting kernel threads ... [ 228.013121][T11713] Done restarting kernel threads. [ 228.057825][T11715] netlink: 'syz.5.2750': attribute type 16 has an invalid length. [ 228.113375][T11717] loop5: detected capacity change from 0 to 512 [ 228.132203][T11625] loop8: detected capacity change from 0 to 2048 [ 228.132642][T11717] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.181441][T11625] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #2: comm syz.8.2715: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 260(4), depth 0(0) [ 228.199384][T11717] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.221191][T11717] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.2751: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 228.286081][T11723] loop2: detected capacity change from 0 to 128 [ 228.292884][T11625] EXT4-fs (loop8): get root inode failed [ 228.298627][T11625] EXT4-fs (loop8): mount failed [ 228.303361][T11717] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 228.319370][T11717] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.2751: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 228.387106][T11717] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 228.412182][T11717] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.2751: bg 0: block 18: invalid block bitmap [ 228.441805][T11717] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.2751: Failed to acquire dquot type 1 [ 228.463971][T11725] loop2: detected capacity change from 0 to 512 [ 228.531150][T11725] EXT4-fs: Ignoring removed nobh option [ 228.537154][T11725] EXT4-fs: old and new quota format mixing [ 228.619137][ T8740] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.657058][T11730] netlink: 'syz.5.2754': attribute type 7 has an invalid length. [ 228.676605][T11731] loop2: detected capacity change from 0 to 1024 [ 228.696494][T11731] EXT4-fs: Ignoring removed bh option [ 228.703193][T11730] loop5: detected capacity change from 0 to 1024 [ 228.706342][T11731] EXT4-fs: inline encryption not supported [ 228.709884][T11730] EXT4-fs: Ignoring removed bh option [ 228.731459][T11731] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 228.742072][T11730] EXT4-fs: inline encryption not supported [ 228.748504][T11730] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 228.759266][T11731] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 228.769481][T11731] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.2755: lblock 2 mapped to illegal pblock 2 (length 1) [ 228.796686][T11730] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 228.804989][T11731] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.2755: lblock 0 mapped to illegal pblock 48 (length 1) [ 228.820803][T11730] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.2754: lblock 2 mapped to illegal pblock 2 (length 1) [ 228.843212][T11730] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.2754: lblock 0 mapped to illegal pblock 48 (length 1) [ 228.900407][T11730] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.2754: Failed to acquire dquot type 0 [ 228.911727][T11731] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2755: Failed to acquire dquot type 0 [ 228.923476][T11730] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 228.940701][T11731] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 228.970431][T11730] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.2754: mark_inode_dirty error [ 228.981794][T11731] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.2755: mark_inode_dirty error [ 229.002637][T11731] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 229.013097][T11730] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 229.019188][T11731] EXT4-fs (loop2): 1 orphan inode deleted [ 229.029916][T11731] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.042559][ T555] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 229.057084][ T555] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 0 [ 229.060366][T11730] EXT4-fs (loop5): 1 orphan inode deleted [ 229.078798][ T555] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 229.100685][ T555] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 0 [ 229.115186][T11730] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.155257][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.165980][ T3321] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 229.203255][ T3321] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 229.221931][ T8740] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.238269][ T8740] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 229.257206][ T3321] EXT4-fs error (device loop2): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 229.280589][ T8740] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 229.300441][ T8740] EXT4-fs error (device loop5): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 229.338591][T11740] loop8: detected capacity change from 0 to 8192 [ 229.431271][T11744] loop5: detected capacity change from 0 to 8192 [ 229.480615][T11744] loop5: p1 p2 p3 p4 [ 229.484862][T11744] loop5: p1 size 196608 extends beyond EOD, truncated [ 229.513544][T11744] loop5: p2 start 164919041 is beyond EOD, truncated [ 229.520341][T11744] loop5: p3 size 66846464 extends beyond EOD, truncated [ 229.536468][ T9271] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.546221][T11744] loop5: p4 size 37048832 extends beyond EOD, truncated [ 229.562021][T11750] loop8: detected capacity change from 0 to 1024 [ 229.593902][T11750] EXT4-fs: Ignoring removed orlov option [ 229.682291][T11750] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 229.712540][T11757] loop7: detected capacity change from 0 to 512 [ 229.751418][T11759] loop5: detected capacity change from 0 to 512 [ 229.759748][T11757] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.770819][T11759] EXT4-fs: Ignoring removed nobh option [ 229.777925][T11763] loop2: detected capacity change from 0 to 512 [ 229.784383][T11759] EXT4-fs: old and new quota format mixing [ 229.800471][T11757] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.826308][ T9312] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.842745][T11757] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.2765: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 229.864586][T11763] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.880120][T11757] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 229.889357][T11757] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.2765: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 229.909087][T11757] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 230.010918][T11757] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.2765: bg 0: block 18: invalid block bitmap [ 230.030317][T11757] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.2765: Failed to acquire dquot type 1 [ 230.062153][T11772] loop8: detected capacity change from 0 to 2048 [ 230.082680][T11772] EXT4-fs (loop8): couldn't mount as ext3 due to feature incompatibilities [ 230.092440][ T9271] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.163971][T11777] random: crng reseeded on system resumption [ 230.183050][T11772] loop8: detected capacity change from 0 to 1024 [ 230.205070][T11772] EXT4-fs: Ignoring removed orlov option [ 230.225796][T11769] loop5: detected capacity change from 0 to 1024 [ 230.232552][T11769] EXT4-fs: Ignoring removed bh option [ 230.238092][T11769] EXT4-fs: inline encryption not supported [ 230.254282][T11772] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.309312][T11769] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 230.389390][T11769] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 230.444663][T11769] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.2769: lblock 2 mapped to illegal pblock 2 (length 1) [ 230.578332][T11769] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.2769: lblock 0 mapped to illegal pblock 48 (length 1) [ 230.593325][T11769] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.2769: Failed to acquire dquot type 0 [ 230.604927][T11769] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 230.614654][T11769] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.2769: mark_inode_dirty error [ 230.646476][T11796] loop7: detected capacity change from 0 to 1024 [ 230.667381][T11796] EXT4-fs (loop7): filesystem is read-only [ 230.687080][T11796] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 230.705354][T11769] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 230.715789][T11796] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 230.734723][T11796] EXT4-fs error (device loop7): ext4_get_journal_inode:5808: comm gtp: inode #1: comm gtp: iget: illegal inode # [ 230.765285][T11769] EXT4-fs (loop5): 1 orphan inode deleted [ 230.773277][T11796] EXT4-fs (loop7): no journal found [ 230.778544][T11796] EXT4-fs (loop7): can't get journal size [ 230.792347][ T37] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 230.794243][T11796] EXT4-fs (loop7): failed to initialize system zone (-22) [ 230.811467][T11769] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.850366][ T37] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:2: Failed to release dquot type 0 [ 230.866303][T11796] EXT4-fs (loop7): mount failed [ 230.902437][T11769] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm syz.5.2769: lblock 1 mapped to illegal pblock 1 (length 1) [ 230.973813][ T9312] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.053877][ T8740] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.079278][ T8740] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 231.168925][ T8740] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 231.211610][ T8740] EXT4-fs error (device loop5): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 231.280186][T11802] loop8: detected capacity change from 0 to 8192 [ 231.421681][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.441207][T11807] loop5: detected capacity change from 0 to 1024 [ 231.461824][T11809] loop8: detected capacity change from 0 to 1024 [ 231.468440][T11807] EXT4-fs: Ignoring removed orlov option [ 231.486536][T11809] EXT4-fs: Ignoring removed orlov option [ 231.506778][T11807] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.529245][T11809] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.591350][ T8740] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.611676][ T9312] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.634448][ T29] kauditd_printk_skb: 220 callbacks suppressed [ 231.634467][ T29] audit: type=1400 audit(2000000045.080:70684): avc: denied { read } for pid=11818 comm="syz.8.2782" name="event3" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 231.664151][ T29] audit: type=1400 audit(2000000045.080:70685): avc: denied { open } for pid=11818 comm="syz.8.2782" path="/dev/input/event3" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 231.703045][ T29] audit: type=1400 audit(2000000045.150:70686): avc: denied { create } for pid=11818 comm="syz.8.2782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 231.754956][ T29] audit: type=1400 audit(2000000045.200:70687): avc: denied { ioctl } for pid=11818 comm="syz.8.2782" path="/dev/input/event3" dev="devtmpfs" ino=246 ioctlcmd=0x4591 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 231.780940][ T29] audit: type=1400 audit(2000000045.200:70688): avc: denied { write } for pid=11818 comm="syz.8.2782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 231.851278][T11821] loop5: detected capacity change from 0 to 8192 [ 231.907849][T11826] __nla_validate_parse: 13 callbacks suppressed [ 231.907870][T11826] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2784'. [ 232.013578][T11828] loop8: detected capacity change from 0 to 8192 [ 232.051395][T11834] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2788'. [ 232.061039][T11836] loop7: detected capacity change from 0 to 164 [ 232.078392][T11836] macvtap11: entered allmulticast mode [ 232.094240][ T29] audit: type=1326 audit(2000000045.510:70689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11833 comm="syz.6.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf81fef6c9 code=0x7ffc0000 [ 232.096708][T11836] batman_adv: batadv0: Adding interface: macvtap11 [ 232.118019][ T29] audit: type=1326 audit(2000000045.510:70690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11833 comm="syz.6.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=274 compat=0 ip=0x7fcf81fef6c9 code=0x7ffc0000 [ 232.118058][ T29] audit: type=1326 audit(2000000045.510:70691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11833 comm="syz.6.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf81fef6c9 code=0x7ffc0000 [ 232.124584][T11836] batman_adv: batadv0: The MTU of interface macvtap11 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 232.148263][ T29] audit: type=1326 audit(2000000045.510:70692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11833 comm="syz.6.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf81fef6c9 code=0x7ffc0000 [ 232.179187][T11836] batman_adv: batadv0: Interface activated: macvtap11 [ 232.197241][ T29] audit: type=1326 audit(2000000045.510:70693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11833 comm="syz.6.2788" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf81fef6c9 code=0x7ffc0000 [ 232.228007][T11839] loop2: detected capacity change from 0 to 164 [ 232.259241][T11840] loop8: detected capacity change from 0 to 2048 [ 232.269754][T11842] macvtap6: entered allmulticast mode [ 232.283230][T11840] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.339584][T11843] hub 1-0:1.0: USB hub found [ 232.344500][T11843] hub 1-0:1.0: 8 ports detected [ 232.370031][T11848] usb usb1: usbfs: interface 0 claimed by hub while 'syz.2.2791' sets config #1 [ 232.518404][ T9312] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.539051][T11851] netlink: 'syz.8.2793': attribute type 7 has an invalid length. [ 232.546969][T11851] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2793'. [ 232.568932][T11851] loop8: detected capacity change from 0 to 1024 [ 232.575728][T11851] EXT4-fs: Ignoring removed bh option [ 232.581437][T11851] EXT4-fs: inline encryption not supported [ 232.587900][T11851] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 232.599135][T11851] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 232.608451][T11851] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.2793: lblock 2 mapped to illegal pblock 2 (length 1) [ 232.622748][T11851] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.2793: lblock 0 mapped to illegal pblock 48 (length 1) [ 232.637171][T11851] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.2793: Failed to acquire dquot type 0 [ 232.648766][T11851] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 232.658371][T11851] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.2793: mark_inode_dirty error [ 232.670059][T11851] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 232.680428][T11851] EXT4-fs (loop8): 1 orphan inode deleted [ 232.686525][T11851] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 232.700340][ T386] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 232.714789][ T386] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0 [ 232.736261][ T9312] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.745981][ T9312] EXT4-fs error (device loop8): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 232.759006][ T9312] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 232.768800][ T9312] EXT4-fs error (device loop8): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 232.832981][T11859] Bluetooth: hci0: Frame reassembly failed (-90) [ 232.947665][T11866] loop7: detected capacity change from 0 to 2048 [ 232.972516][T11866] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 232.984765][T11868] loop2: detected capacity change from 0 to 8192 [ 233.103962][T11883] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2804'. [ 233.226560][ T9271] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.249604][T11887] loop7: detected capacity change from 0 to 512 [ 233.256704][T11887] journal_path: Lookup failure for './file0/../file0' [ 233.263557][T11887] EXT4-fs: error: could not find journal device path [ 233.286317][T11889] loop7: detected capacity change from 0 to 128 [ 233.448983][T11894] loop7: detected capacity change from 0 to 164 [ 233.515857][T11895] hub 1-0:1.0: USB hub found [ 233.520670][T11895] hub 1-0:1.0: 8 ports detected [ 233.702888][T11899] FAULT_INJECTION: forcing a failure. [ 233.702888][T11899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.716065][T11899] CPU: 0 UID: 0 PID: 11899 Comm: syz.8.2810 Not tainted syzkaller #0 PREEMPT(voluntary) [ 233.716098][T11899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 233.716110][T11899] Call Trace: [ 233.716186][T11899] [ 233.716195][T11899] __dump_stack+0x1d/0x30 [ 233.716267][T11899] dump_stack_lvl+0xe8/0x140 [ 233.716294][T11899] dump_stack+0x15/0x1b [ 233.716315][T11899] should_fail_ex+0x265/0x280 [ 233.716354][T11899] should_fail+0xb/0x20 [ 233.716395][T11899] should_fail_usercopy+0x1a/0x20 [ 233.716414][T11899] _copy_to_user+0x20/0xa0 [ 233.716437][T11899] simple_read_from_buffer+0xb5/0x130 [ 233.716459][T11899] proc_fail_nth_read+0x10e/0x150 [ 233.716565][T11899] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 233.716599][T11899] vfs_read+0x1a8/0x770 [ 233.716620][T11899] ? __rcu_read_unlock+0x4f/0x70 [ 233.716653][T11899] ? __fget_files+0x184/0x1c0 [ 233.716680][T11899] ksys_read+0xda/0x1a0 [ 233.716703][T11899] __x64_sys_read+0x40/0x50 [ 233.716726][T11899] x64_sys_call+0x27c0/0x3000 [ 233.716802][T11899] do_syscall_64+0xd2/0x200 [ 233.716821][T11899] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 233.716870][T11899] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 233.716899][T11899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.716971][T11899] RIP: 0033:0x7fe96d3fe0dc [ 233.716984][T11899] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 233.717008][T11899] RSP: 002b:00007fe96be5f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 233.717031][T11899] RAX: ffffffffffffffda RBX: 00007fe96d655fa0 RCX: 00007fe96d3fe0dc [ 233.717047][T11899] RDX: 000000000000000f RSI: 00007fe96be5f0a0 RDI: 0000000000000006 [ 233.717063][T11899] RBP: 00007fe96be5f090 R08: 0000000000000000 R09: 0000000000000000 [ 233.717075][T11899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.717172][T11899] R13: 00007fe96d656038 R14: 00007fe96d655fa0 R15: 00007ffc36d184f8 [ 233.717190][T11899] [ 233.971705][T11903] loop8: detected capacity change from 0 to 8192 [ 234.046544][T11911] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2815'. [ 234.057958][T11910] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2811'. [ 234.066989][T11910] netlink: 15 bytes leftover after parsing attributes in process `syz.2.2811'. [ 234.095977][T11913] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2816'. [ 234.110963][T11915] loop8: detected capacity change from 0 to 512 [ 234.117575][T11915] journal_path: Lookup failure for './file0/../file0' [ 234.124520][T11915] EXT4-fs: error: could not find journal device path [ 234.256763][T11923] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2818'. [ 234.267735][T11923] netlink: 256 bytes leftover after parsing attributes in process `syz.8.2818'. [ 234.408731][T11934] FAULT_INJECTION: forcing a failure. [ 234.408731][T11934] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.421951][T11934] CPU: 0 UID: 0 PID: 11934 Comm: syz.7.2822 Not tainted syzkaller #0 PREEMPT(voluntary) [ 234.421976][T11934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 234.422020][T11934] Call Trace: [ 234.422026][T11934] [ 234.422038][T11934] __dump_stack+0x1d/0x30 [ 234.422066][T11934] dump_stack_lvl+0xe8/0x140 [ 234.422092][T11934] dump_stack+0x15/0x1b [ 234.422111][T11934] should_fail_ex+0x265/0x280 [ 234.422189][T11934] should_fail+0xb/0x20 [ 234.422217][T11934] should_fail_usercopy+0x1a/0x20 [ 234.422235][T11934] _copy_from_user+0x1c/0xb0 [ 234.422257][T11934] ___sys_sendmsg+0xc1/0x1d0 [ 234.422316][T11934] __x64_sys_sendmsg+0xd4/0x160 [ 234.422337][T11934] x64_sys_call+0x191e/0x3000 [ 234.422357][T11934] do_syscall_64+0xd2/0x200 [ 234.422375][T11934] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 234.422400][T11934] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 234.422511][T11934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.422562][T11934] RIP: 0033:0x7f04e33ef6c9 [ 234.422576][T11934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.422591][T11934] RSP: 002b:00007f04e1e36038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 234.422608][T11934] RAX: ffffffffffffffda RBX: 00007f04e3646090 RCX: 00007f04e33ef6c9 [ 234.422619][T11934] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 000000000000000c [ 234.422636][T11934] RBP: 00007f04e1e36090 R08: 0000000000000000 R09: 0000000000000000 [ 234.422647][T11934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.422694][T11934] R13: 00007f04e3646128 R14: 00007f04e3646090 R15: 00007ffc339f9f38 [ 234.422711][T11934] [ 234.627509][T11936] loop7: detected capacity change from 0 to 2048 [ 234.641737][T11936] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.840258][ T4879] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 234.901209][ T9271] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.920423][T11944] loop5: detected capacity change from 0 to 8192 [ 235.362539][T11971] loop7: detected capacity change from 0 to 512 [ 235.383435][T11971] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.397055][T11973] Bluetooth: hci0: Frame reassembly failed (-90) [ 235.404156][ T386] Bluetooth: hci0: Frame reassembly failed (-84) [ 235.410384][T11971] ext4 filesystem being mounted at /186/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 235.423585][T11971] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #2: comm syz.7.2835: corrupted inode contents [ 235.435939][T11971] EXT4-fs error (device loop7): ext4_dirty_inode:6517: inode #2: comm syz.7.2835: mark_inode_dirty error [ 235.447896][T11971] EXT4-fs error (device loop7): ext4_do_update_inode:5632: inode #2: comm syz.7.2835: corrupted inode contents [ 235.460120][T11971] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.2835: mark_inode_dirty error [ 235.485181][ T9271] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.569995][T11980] loop7: detected capacity change from 0 to 8192 [ 235.649483][T11985] loop2: detected capacity change from 0 to 512 [ 235.672520][T11985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 235.688283][T11985] ext4 filesystem being mounted at /557/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 235.706714][T11991] loop7: detected capacity change from 0 to 256 [ 235.709045][T11985] FAULT_INJECTION: forcing a failure. [ 235.709045][T11985] name failslab, interval 1, probability 0, space 0, times 0 [ 235.725790][T11985] CPU: 0 UID: 0 PID: 11985 Comm: syz.2.2840 Not tainted syzkaller #0 PREEMPT(voluntary) [ 235.725887][T11985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 235.725903][T11985] Call Trace: [ 235.725909][T11985] [ 235.725919][T11985] __dump_stack+0x1d/0x30 [ 235.725946][T11985] dump_stack_lvl+0xe8/0x140 [ 235.725969][T11985] dump_stack+0x15/0x1b [ 235.726043][T11985] should_fail_ex+0x265/0x280 [ 235.726083][T11985] should_failslab+0x8c/0xb0 [ 235.726161][T11985] kmem_cache_alloc_noprof+0x50/0x480 [ 235.726198][T11985] ? getname_flags+0x80/0x3b0 [ 235.726239][T11985] getname_flags+0x80/0x3b0 [ 235.726353][T11985] do_sys_openat2+0x60/0x110 [ 235.726451][T11985] __x64_sys_openat+0xf2/0x120 [ 235.726478][T11985] x64_sys_call+0x2eab/0x3000 [ 235.726534][T11985] do_syscall_64+0xd2/0x200 [ 235.726560][T11985] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 235.726595][T11985] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 235.726639][T11985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.726735][T11985] RIP: 0033:0x7fd0f551f6c9 [ 235.726755][T11985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.726779][T11985] RSP: 002b:00007fd0f3f87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 235.726802][T11985] RAX: ffffffffffffffda RBX: 00007fd0f5775fa0 RCX: 00007fd0f551f6c9 [ 235.726818][T11985] RDX: 000000000000275a RSI: 0000200000000100 RDI: ffffffffffffff9c [ 235.726832][T11985] RBP: 00007fd0f3f87090 R08: 0000000000000000 R09: 0000000000000000 [ 235.726853][T11985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.726865][T11985] R13: 00007fd0f5776038 R14: 00007fd0f5775fa0 R15: 00007ffec1c25cf8 [ 235.726885][T11985] [ 235.935270][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.950614][T11994] loop7: detected capacity change from 0 to 512 [ 235.957403][T11994] journal_path: Lookup failure for './file0/../file0' [ 235.964407][T11994] EXT4-fs: error: could not find journal device path [ 235.997539][T12000] loop2: detected capacity change from 0 to 128 [ 236.058478][T12004] loop7: detected capacity change from 0 to 1024 [ 236.069148][T12004] EXT4-fs: Ignoring removed orlov option [ 236.180382][T12004] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.221700][ T9271] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.230828][T12008] loop2: detected capacity change from 0 to 8192 [ 236.316683][T12016] loop7: detected capacity change from 0 to 8192 [ 236.355890][T12025] loop2: detected capacity change from 0 to 1024 [ 236.390539][T12025] EXT4-fs: Ignoring removed orlov option [ 236.416637][T12025] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.453673][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.490285][T12036] loop2: detected capacity change from 0 to 2048 [ 236.564858][T12036] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.665446][ T29] kauditd_printk_skb: 90 callbacks suppressed [ 236.665463][ T29] audit: type=1326 audit(2000000050.110:70781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12052 comm="syz.6.2862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf81fef6c9 code=0x7ffc0000 [ 236.723031][ T29] audit: type=1326 audit(2000000050.140:70782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12052 comm="syz.6.2862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fcf81fef6c9 code=0x7ffc0000 [ 236.746712][ T29] audit: type=1326 audit(2000000050.140:70783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12052 comm="syz.6.2862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf81fef6c9 code=0x7ffc0000 [ 236.770480][ T29] audit: type=1326 audit(2000000050.140:70784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12052 comm="syz.6.2862" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf81fef6c9 code=0x7ffc0000 [ 236.817571][ T29] audit: type=1326 audit(2000000050.260:70785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12054 comm="syz.6.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf81fef6c9 code=0x7ffc0000 [ 236.860828][ T29] audit: type=1326 audit(2000000050.290:70786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12054 comm="syz.6.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf81fef6c9 code=0x7ffc0000 [ 236.884568][ T29] audit: type=1326 audit(2000000050.290:70787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12054 comm="syz.6.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf81fef6c9 code=0x7ffc0000 [ 236.908304][ T29] audit: type=1326 audit(2000000050.290:70788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12054 comm="syz.6.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf81fef6c9 code=0x7ffc0000 [ 236.931905][ T29] audit: type=1326 audit(2000000050.290:70789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12054 comm="syz.6.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf81fef6c9 code=0x7ffc0000 [ 236.955530][ T29] audit: type=1326 audit(2000000050.290:70790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12054 comm="syz.6.2863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf81fef6c9 code=0x7ffc0000 [ 236.995557][T12056] __nla_validate_parse: 11 callbacks suppressed [ 236.995575][T12056] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2863'. [ 237.042899][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.069657][T12058] : renamed from bond_slave_0 [ 237.213825][T12067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2865'. [ 237.223934][T12067] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2865'. [ 237.261177][T12071] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2868'. [ 237.293282][ T555] Bluetooth: hci1: Frame reassembly failed (-84) [ 237.300069][T12073] Bluetooth: hci1: Frame reassembly failed (-90) [ 237.349819][T12076] loop5: detected capacity change from 0 to 512 [ 237.356529][T12076] EXT4-fs: Ignoring removed nobh option [ 237.362478][T12076] EXT4-fs: old and new quota format mixing [ 237.370603][T12076] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2870'. [ 237.405664][T12080] delete_channel: no stack [ 237.480459][ T4879] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 237.504264][T12087] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 237.535673][T12089] loop8: detected capacity change from 0 to 512 [ 237.551989][T12089] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.565135][T12089] ext4 filesystem being mounted at /167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.588960][ T9312] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.598224][T12090] loop5: detected capacity change from 0 to 1024 [ 237.605279][T12090] EXT4-fs: Ignoring removed bh option [ 237.610980][T12090] EXT4-fs: inline encryption not supported [ 237.619467][T12090] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 237.630860][T12090] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 237.639840][T12090] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.2873: lblock 2 mapped to illegal pblock 2 (length 1) [ 237.657213][T12090] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.2873: lblock 0 mapped to illegal pblock 48 (length 1) [ 237.673627][T12090] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.2873: Failed to acquire dquot type 0 [ 237.687070][T12090] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 237.696745][T12090] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.2873: mark_inode_dirty error [ 237.708432][T12090] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 237.719589][T12090] EXT4-fs (loop5): 1 orphan inode deleted [ 237.727204][T12090] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.728136][T12097] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.740358][ T386] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 237.768924][ T386] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0 [ 237.780518][T12090] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm syz.5.2873: lblock 1 mapped to illegal pblock 1 (length 1) [ 237.832067][T12097] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.892622][T12097] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.932583][T12097] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.962303][T12101] loop2: detected capacity change from 0 to 128 [ 237.999075][ T12] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.017429][ T12] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.026882][ T12] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.035440][ T12] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.062234][T12105] blktrace: Concurrent blktraces are not allowed on loop12 [ 238.102997][T12111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2883'. [ 238.122452][ T12] Bluetooth: hci0: Frame reassembly failed (-90) [ 238.150800][T12116] loop2: detected capacity change from 0 to 164 [ 238.163128][T12116] macvtap11: entered allmulticast mode [ 238.169163][T12116] batman_adv: batadv0: Adding interface: macvtap11 [ 238.175764][T12116] batman_adv: batadv0: The MTU of interface macvtap11 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.201460][T12116] batman_adv: batadv0: Interface activated: macvtap11 [ 238.318507][ T8740] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.327973][ T8740] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 238.341166][ T8740] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 238.350955][ T8740] EXT4-fs error (device loop5): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 238.386218][T12121] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2887'. [ 238.508929][T12126] loop5: detected capacity change from 0 to 1024 [ 238.515763][T12126] EXT4-fs: Ignoring removed bh option [ 238.521582][T12126] EXT4-fs: inline encryption not supported [ 238.528012][T12126] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 238.539159][T12126] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 238.548428][T12126] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.2888: lblock 2 mapped to illegal pblock 2 (length 1) [ 238.562831][T12126] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.2888: lblock 0 mapped to illegal pblock 48 (length 1) [ 238.577151][T12126] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.2888: Failed to acquire dquot type 0 [ 238.588642][T12126] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 238.598246][T12126] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.2888: mark_inode_dirty error [ 238.609950][T12126] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 238.620375][T12126] EXT4-fs (loop5): 1 orphan inode deleted [ 238.626538][T12126] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.640190][T12126] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm syz.5.2888: lblock 1 mapped to illegal pblock 1 (length 1) [ 238.654592][ T12] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 238.669086][ T12] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:0: Failed to release dquot type 0 [ 239.102535][T12133] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 239.109999][T12133] vhci_hcd: invalid port number 96 [ 239.115246][T12133] vhci_hcd: default hub control req: 0311 v0005 i0060 l7 [ 239.142709][T12135] syzkaller0: entered allmulticast mode [ 239.148464][T12135] syzkaller0: entered promiscuous mode [ 239.155226][T12135] syzkaller0 (unregistering): left allmulticast mode [ 239.161977][T12135] syzkaller0 (unregistering): left promiscuous mode [ 239.300425][ T8740] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.309772][ T8740] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 239.323291][ T8740] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 239.330429][ T44] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 239.333564][ T8740] EXT4-fs error (device loop5): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 239.431620][T12148] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2896'. [ 239.500125][T12152] loop5: detected capacity change from 0 to 512 [ 239.521710][T12152] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.556349][T12160] loop2: detected capacity change from 0 to 512 [ 239.566026][T12160] journal_path: Lookup failure for './file0/../file0' [ 239.572986][T12160] EXT4-fs: error: could not find journal device path [ 239.604183][T12164] syzkaller0: entered allmulticast mode [ 239.609950][T12164] syzkaller0: entered promiscuous mode [ 239.617972][T12164] syzkaller0 (unregistering): left allmulticast mode [ 239.624816][T12164] syzkaller0 (unregistering): left promiscuous mode [ 239.818835][T12174] random: crng reseeded on system resumption [ 239.829833][T12174] Restarting kernel threads ... [ 239.857045][T12174] Done restarting kernel threads. [ 239.875238][T12171] loop2: detected capacity change from 0 to 8192 [ 240.063807][T12178] loop2: detected capacity change from 0 to 8192 [ 240.169961][T12180] loop2: detected capacity change from 0 to 128 [ 240.200399][ T4879] Bluetooth: hci0: command 0x1003 tx timeout [ 240.206614][T12074] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 240.247574][T12182] loop2: detected capacity change from 0 to 1024 [ 240.287460][T12182] EXT4-fs (loop2): filesystem is read-only [ 240.300045][T12182] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 240.302094][T12186] loop8: detected capacity change from 0 to 1024 [ 240.316279][T12182] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 240.340509][T12182] EXT4-fs error (device loop2): ext4_get_journal_inode:5808: comm gtp: inode #1: comm gtp: iget: illegal inode # [ 240.353441][T12186] EXT4-fs: Ignoring removed nomblk_io_submit option [ 240.370637][T12182] EXT4-fs (loop2): no journal found [ 240.375908][T12182] EXT4-fs (loop2): can't get journal size [ 240.402726][T12190] loop7: detected capacity change from 0 to 512 [ 240.411525][T12186] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 240.423745][T12182] EXT4-fs (loop2): failed to initialize system zone (-22) [ 240.431595][T12190] journal_path: Lookup failure for './file0/../file0' [ 240.438436][T12190] EXT4-fs: error: could not find journal device path [ 240.445393][T12182] EXT4-fs (loop2): mount failed [ 240.451242][T12186] FAULT_INJECTION: forcing a failure. [ 240.451242][T12186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.464414][T12186] CPU: 1 UID: 0 PID: 12186 Comm: syz.8.2910 Not tainted syzkaller #0 PREEMPT(voluntary) [ 240.464449][T12186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 240.464478][T12186] Call Trace: [ 240.464486][T12186] [ 240.464495][T12186] __dump_stack+0x1d/0x30 [ 240.464524][T12186] dump_stack_lvl+0xe8/0x140 [ 240.464562][T12186] dump_stack+0x15/0x1b [ 240.464579][T12186] should_fail_ex+0x265/0x280 [ 240.464663][T12186] should_fail+0xb/0x20 [ 240.464718][T12186] should_fail_usercopy+0x1a/0x20 [ 240.464745][T12186] strncpy_from_user+0x25/0x230 [ 240.464830][T12186] ? kmem_cache_alloc_noprof+0x242/0x480 [ 240.464862][T12186] ? getname_flags+0x80/0x3b0 [ 240.464904][T12186] getname_flags+0xae/0x3b0 [ 240.465001][T12186] path_removexattrat+0xf5/0x570 [ 240.465056][T12186] __x64_sys_removexattr+0x38/0x50 [ 240.465090][T12186] x64_sys_call+0x2433/0x3000 [ 240.465127][T12186] do_syscall_64+0xd2/0x200 [ 240.465167][T12186] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 240.465203][T12186] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 240.465254][T12186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.465278][T12186] RIP: 0033:0x7fe96d3ff6c9 [ 240.465298][T12186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.465322][T12186] RSP: 002b:00007fe96be5f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 240.465390][T12186] RAX: ffffffffffffffda RBX: 00007fe96d655fa0 RCX: 00007fe96d3ff6c9 [ 240.465407][T12186] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000200000000080 [ 240.465423][T12186] RBP: 00007fe96be5f090 R08: 0000000000000000 R09: 0000000000000000 [ 240.465439][T12186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.465498][T12186] R13: 00007fe96d656038 R14: 00007fe96d655fa0 R15: 00007ffc36d184f8 [ 240.465518][T12186] [ 240.673823][T12195] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2913'. [ 240.704530][ T9312] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.717932][T12197] syzkaller0: entered allmulticast mode [ 240.731651][T12197] syzkaller0: entered promiscuous mode [ 240.747745][T12197] syzkaller0 (unregistering): left allmulticast mode [ 240.754585][T12197] syzkaller0 (unregistering): left promiscuous mode [ 240.769974][T12201] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2915'. [ 240.802528][T12204] loop7: detected capacity change from 0 to 1024 [ 240.821636][T12204] EXT4-fs (loop7): filesystem is read-only [ 240.841040][T12204] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 240.849836][T12207] loop8: detected capacity change from 0 to 164 [ 240.860350][T12204] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 240.880509][T12204] EXT4-fs error (device loop7): ext4_get_journal_inode:5808: comm syz.7.2916: inode #1: comm syz.7.2916: iget: illegal inode # [ 240.908643][T12204] EXT4-fs (loop7): no journal found [ 240.913961][T12204] EXT4-fs (loop7): can't get journal size [ 240.916504][T12207] macvtap8: entered allmulticast mode [ 240.936766][T12204] EXT4-fs (loop7): failed to initialize system zone (-22) [ 240.944904][T12207] batman_adv: batadv0: Adding interface: macvtap8 [ 240.951528][T12207] batman_adv: batadv0: The MTU of interface macvtap8 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 240.982562][T12209] Bluetooth: hci0: Frame reassembly failed (-90) [ 240.999145][T12204] EXT4-fs (loop7): mount failed [ 241.012762][T12207] batman_adv: batadv0: Interface activated: macvtap8 [ 241.035340][ T8740] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.055354][T12214] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 241.079588][T12207] hub 1-0:1.0: USB hub found [ 241.084512][T12207] hub 1-0:1.0: 8 ports detected [ 241.088762][T12216] blktrace: Concurrent blktraces are not allowed on loop10 [ 241.685944][T12224] loop7: detected capacity change from 0 to 1024 [ 241.692844][T12224] EXT4-fs: Ignoring removed bh option [ 241.698270][T12224] EXT4-fs: inline encryption not supported [ 241.704748][T12224] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 241.715920][T12224] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 241.731411][T12224] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.2923: lblock 2 mapped to illegal pblock 2 (length 1) [ 241.745710][T12224] __quota_error: 401 callbacks suppressed [ 241.745736][T12224] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 241.751937][T12227] loop8: detected capacity change from 0 to 512 [ 241.760041][T12224] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.2923: lblock 0 mapped to illegal pblock 48 (length 1) [ 241.766605][T12227] journal_path: Lookup failure for './file0/../file0' [ 241.785128][T12224] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 241.787002][T12227] EXT4-fs: error: could not find journal device path [ 241.802789][T12224] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.2923: Failed to acquire dquot type 0 [ 241.814462][T12224] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 241.824052][T12224] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.2923: mark_inode_dirty error [ 241.835589][T12224] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 241.845992][T12224] EXT4-fs (loop7): 1 orphan inode deleted [ 241.852363][T12224] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 241.857945][T12229] loop8: detected capacity change from 0 to 8192 [ 241.871467][ T555] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 241.887129][ T555] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 241.895639][ T555] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 0 [ 241.908374][T12224] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm syz.7.2923: lblock 1 mapped to illegal pblock 1 (length 1) [ 241.915905][ T29] audit: type=1326 audit(2000000055.360:71184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12230 comm="syz.8.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe96d3ff6c9 code=0x7ffc0000 [ 241.923254][T12224] Quota error (device loop7): find_next_id: Can't read quota tree block 1 [ 241.967468][ T29] audit: type=1326 audit(2000000055.410:71185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12230 comm="syz.8.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe96d3ff6c9 code=0x7ffc0000 [ 241.991440][ T29] audit: type=1326 audit(2000000055.420:71186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12230 comm="syz.8.2926" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe96d3ff6c9 code=0x7ffc0000 [ 242.031478][T12235] loop5: detected capacity change from 0 to 2048 [ 242.038804][T12235] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 242.052922][ T29] audit: type=1326 audit(2000000055.500:71187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12234 comm="syz.5.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11356df6c9 code=0x7ffc0000 [ 242.059295][T12235] loop5: detected capacity change from 0 to 1024 [ 242.083806][T12235] EXT4-fs: Ignoring removed orlov option [ 242.091729][T12235] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.099354][ T29] audit: type=1326 audit(2000000055.500:71188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12234 comm="syz.5.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11356df6c9 code=0x7ffc0000 [ 242.128011][ T29] audit: type=1326 audit(2000000055.500:71189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12234 comm="syz.5.2928" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f11356df6c9 code=0x7ffc0000 [ 242.290831][T12241] syzkaller0: entered allmulticast mode [ 242.296783][T12241] syzkaller0: entered promiscuous mode [ 242.304573][T12241] syzkaller0 (unregistering): left allmulticast mode [ 242.311463][T12241] syzkaller0 (unregistering): left promiscuous mode [ 242.424101][T12244] loop8: detected capacity change from 0 to 2048 [ 242.451104][ T9271] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 242.568489][ T9271] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 242.581000][ T9271] EXT4-fs error (device loop7): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 242.663884][T12250] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 243.000301][T12074] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 243.006591][ T4879] Bluetooth: hci0: command 0x1003 tx timeout [ 243.025048][T12259] loop5: detected capacity change from 0 to 8192 [ 243.061098][T12267] loop2: detected capacity change from 0 to 1024 [ 243.068153][T12267] EXT4-fs (loop2): filesystem is read-only [ 243.074261][T12267] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 243.084159][T12267] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 243.094575][T12267] EXT4-fs error (device loop2): ext4_get_journal_inode:5808: comm gtp: inode #1: comm gtp: iget: illegal inode # [ 243.106727][T12267] EXT4-fs (loop2): no journal found [ 243.112279][T12267] EXT4-fs (loop2): can't get journal size [ 243.128615][T12267] EXT4-fs (loop2): failed to initialize system zone (-22) [ 243.170258][T12267] EXT4-fs (loop2): mount failed [ 243.196386][T12272] loop7: detected capacity change from 0 to 164 [ 243.215417][T12265] loop8: detected capacity change from 0 to 8192 [ 243.294694][T12278] hub 1-0:1.0: USB hub found [ 243.299410][T12278] hub 1-0:1.0: 8 ports detected [ 243.314833][T12277] syzkaller0: entered allmulticast mode [ 243.344191][T12277] syzkaller0: entered promiscuous mode [ 243.367016][T12277] syzkaller0 (unregistering): left allmulticast mode [ 243.373893][T12277] syzkaller0 (unregistering): left promiscuous mode [ 243.390963][T12280] loop8: detected capacity change from 0 to 1024 [ 243.399565][T12280] EXT4-fs: Ignoring removed orlov option [ 243.473893][T12285] __nla_validate_parse: 1 callbacks suppressed [ 243.473911][T12285] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2942'. [ 243.550976][T12287] loop2: detected capacity change from 0 to 2048 [ 243.665635][T12305] loop5: detected capacity change from 0 to 1024 [ 243.672804][T12305] EXT4-fs: Ignoring removed bh option [ 243.678426][T12305] EXT4-fs: inline encryption not supported [ 243.686118][T12305] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 243.707617][T12305] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 243.721605][T12305] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.2948: lblock 2 mapped to illegal pblock 2 (length 1) [ 243.740400][T12305] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.2948: lblock 0 mapped to illegal pblock 48 (length 1) [ 243.795880][T12305] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.2948: Failed to acquire dquot type 0 [ 243.807639][T12305] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 243.820446][T12305] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.2948: mark_inode_dirty error [ 243.834867][T12305] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 243.847925][T12305] EXT4-fs (loop5): 1 orphan inode deleted [ 243.862287][ T386] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 243.898530][ T386] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0 [ 243.910302][T12305] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm syz.5.2948: lblock 1 mapped to illegal pblock 1 (length 1) [ 243.943341][ T8740] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 243.975231][T12313] blktrace: Concurrent blktraces are not allowed on loop12 [ 243.983362][ T8740] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 243.993523][ T8740] EXT4-fs error (device loop5): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 244.045426][T12318] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2953'. [ 244.078601][T12323] loop5: detected capacity change from 0 to 164 [ 244.091332][T12323] macvtap3: entered allmulticast mode [ 244.098238][T12323] batman_adv: batadv0: Adding interface: macvtap3 [ 244.104789][T12323] batman_adv: batadv0: The MTU of interface macvtap3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 244.132940][T12323] batman_adv: batadv0: Interface activated: macvtap3 [ 244.197787][T12325] hub 1-0:1.0: USB hub found [ 244.205877][T12325] hub 1-0:1.0: 8 ports detected [ 244.259696][T12330] loop2: detected capacity change from 0 to 1024 [ 244.266404][T12330] EXT4-fs: Ignoring removed orlov option [ 244.528184][T12335] loop8: detected capacity change from 0 to 1024 [ 244.558856][T12335] EXT4-fs: Ignoring removed orlov option [ 244.727943][T12340] ip6t_srh: unknown srh match flags 4000 [ 244.775731][T12340] loop8: detected capacity change from 0 to 8192 [ 244.820571][T12340] loop8: p1 p2 p3 p4 [ 244.826423][T12340] loop8: p1 size 196608 extends beyond EOD, truncated [ 244.833663][T12342] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2960'. [ 244.839209][T12340] loop8: p2 start 164919041 is beyond EOD, truncated [ 244.849568][T12340] loop8: p3 size 66846464 extends beyond EOD, truncated [ 244.857177][T12340] loop8: p4 size 37048832 extends beyond EOD, truncated [ 245.036660][T12353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2965'. [ 245.052960][T12355] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2966'. [ 245.088698][T12359] FAULT_INJECTION: forcing a failure. [ 245.088698][T12359] name failslab, interval 1, probability 0, space 0, times 0 [ 245.101506][T12359] CPU: 0 UID: 0 PID: 12359 Comm: **&.( Not tainted syzkaller #0 PREEMPT(voluntary) [ 245.101543][T12359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 245.101560][T12359] Call Trace: [ 245.101568][T12359] [ 245.101578][T12359] __dump_stack+0x1d/0x30 [ 245.101669][T12359] dump_stack_lvl+0xe8/0x140 [ 245.101696][T12359] dump_stack+0x15/0x1b [ 245.101730][T12359] should_fail_ex+0x265/0x280 [ 245.101775][T12359] should_failslab+0x8c/0xb0 [ 245.101812][T12359] __kmalloc_cache_node_noprof+0x54/0x4a0 [ 245.101895][T12359] ? __get_vm_area_node+0x106/0x1d0 [ 245.101934][T12359] __get_vm_area_node+0x106/0x1d0 [ 245.101968][T12359] __vmalloc_node_range_noprof+0x28c/0xed0 [ 245.102008][T12359] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 245.102047][T12359] ? _parse_integer+0x27/0x40 [ 245.102081][T12359] ? __rcu_read_unlock+0x4f/0x70 [ 245.102145][T12359] ? avc_has_perm_noaudit+0x1b1/0x200 [ 245.102232][T12359] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 245.102348][T12359] __vmalloc_noprof+0x83/0xc0 [ 245.102381][T12359] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 245.102539][T12359] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 245.102649][T12359] ? bpf_prog_alloc+0x2a/0x150 [ 245.102682][T12359] bpf_prog_alloc+0x3c/0x150 [ 245.102724][T12359] bpf_prog_create_from_user+0x7d/0x260 [ 245.102781][T12359] ? __pfx_seccomp_check_filter+0x10/0x10 [ 245.102882][T12359] do_seccomp+0x5ef/0xa40 [ 245.102913][T12359] __x64_sys_seccomp+0x40/0x50 [ 245.102943][T12359] x64_sys_call+0x2ad8/0x3000 [ 245.102969][T12359] do_syscall_64+0xd2/0x200 [ 245.103073][T12359] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 245.103102][T12359] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 245.103137][T12359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.103173][T12359] RIP: 0033:0x7fe96d3ff6c9 [ 245.103189][T12359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.103209][T12359] RSP: 002b:00007fe96be5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 245.103229][T12359] RAX: ffffffffffffffda RBX: 00007fe96d655fa0 RCX: 00007fe96d3ff6c9 [ 245.103302][T12359] RDX: 0000200000000040 RSI: 000000000000000a RDI: 0000000000000001 [ 245.103315][T12359] RBP: 00007fe96be5f090 R08: 0000000000000000 R09: 0000000000000000 [ 245.103386][T12359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.103399][T12359] R13: 00007fe96d656038 R14: 00007fe96d655fa0 R15: 00007ffc36d184f8 [ 245.103449][T12359] [ 245.103495][T12359] **&.(: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null) [ 245.108173][T12364] blktrace: Concurrent blktraces are not allowed on loop10 [ 245.113077][T12359] ,cpuset= [ 245.151721][T12366] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2964'. [ 245.151945][T12359] /,mems_allowed=0 [ 245.383605][T12359] CPU: 0 UID: 0 PID: 12359 Comm: **&.( Not tainted syzkaller #0 PREEMPT(voluntary) [ 245.383693][T12359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 245.383704][T12359] Call Trace: [ 245.383710][T12359] [ 245.383718][T12359] __dump_stack+0x1d/0x30 [ 245.383738][T12359] dump_stack_lvl+0xe8/0x140 [ 245.383801][T12359] dump_stack+0x15/0x1b [ 245.383890][T12359] warn_alloc+0x12b/0x1a0 [ 245.384041][T12359] __vmalloc_node_range_noprof+0x2b1/0xed0 [ 245.384144][T12359] ? _parse_integer+0x27/0x40 [ 245.384208][T12359] ? __rcu_read_unlock+0x4f/0x70 [ 245.384248][T12359] ? avc_has_perm_noaudit+0x1b1/0x200 [ 245.384272][T12359] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 245.384303][T12359] __vmalloc_noprof+0x83/0xc0 [ 245.384330][T12359] ? bpf_prog_alloc_no_stats+0x47/0x3b0 [ 245.384380][T12359] bpf_prog_alloc_no_stats+0x47/0x3b0 [ 245.384426][T12359] ? bpf_prog_alloc+0x2a/0x150 [ 245.384454][T12359] bpf_prog_alloc+0x3c/0x150 [ 245.384483][T12359] bpf_prog_create_from_user+0x7d/0x260 [ 245.384529][T12359] ? __pfx_seccomp_check_filter+0x10/0x10 [ 245.384558][T12359] do_seccomp+0x5ef/0xa40 [ 245.384652][T12359] __x64_sys_seccomp+0x40/0x50 [ 245.384678][T12359] x64_sys_call+0x2ad8/0x3000 [ 245.384759][T12359] do_syscall_64+0xd2/0x200 [ 245.384803][T12359] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 245.384828][T12359] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 245.384859][T12359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.384949][T12359] RIP: 0033:0x7fe96d3ff6c9 [ 245.384963][T12359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.384979][T12359] RSP: 002b:00007fe96be5f038 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 245.384997][T12359] RAX: ffffffffffffffda RBX: 00007fe96d655fa0 RCX: 00007fe96d3ff6c9 [ 245.385008][T12359] RDX: 0000200000000040 RSI: 000000000000000a RDI: 0000000000000001 [ 245.385019][T12359] RBP: 00007fe96be5f090 R08: 0000000000000000 R09: 0000000000000000 [ 245.385050][T12359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.385061][T12359] R13: 00007fe96d656038 R14: 00007fe96d655fa0 R15: 00007ffc36d184f8 [ 245.385081][T12359] [ 245.385098][T12359] Mem-Info: [ 245.605663][T12359] active_anon:3569 inactive_anon:8 isolated_anon:0 [ 245.605663][T12359] active_file:17709 inactive_file:2627 isolated_file:0 [ 245.605663][T12359] unevictable:0 dirty:457 writeback:0 [ 245.605663][T12359] slab_reclaimable:3777 slab_unreclaimable:21743 [ 245.605663][T12359] mapped:29295 shmem:240 pagetables:2007 [ 245.605663][T12359] sec_pagetables:0 bounce:0 [ 245.605663][T12359] kernel_misc_reclaimable:0 [ 245.605663][T12359] free:1512705 free_pcp:17997 free_cma:0 [ 245.650552][T12359] Node 0 active_anon:14276kB inactive_anon:32kB active_file:70836kB inactive_file:10508kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117180kB dirty:1828kB writeback:0kB shmem:960kB kernel_stack:7216kB pagetables:8028kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 245.677897][T12359] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 245.707583][T12359] lowmem_reserve[]: 0 2881 7859 7859 [ 245.713065][T12359] Node 0 DMA32 free:2946728kB boost:0kB min:4132kB low:7060kB high:9988kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2950256kB mlocked:0kB bounce:0kB free_pcp:3528kB local_pcp:3528kB free_cma:0kB [ 245.744454][T12359] lowmem_reserve[]: 0 0 4978 4978 [ 245.749586][T12359] Node 0 Normal free:3088796kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14256kB inactive_anon:32kB active_file:70836kB inactive_file:10460kB unevictable:0kB writepending:1832kB zspages:0kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:68460kB local_pcp:44516kB free_cma:0kB [ 245.782815][T12359] lowmem_reserve[]: 0 0 0 0 [ 245.787430][T12359] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 245.800182][T12359] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 2*128kB (M) 2*256kB (M) 3*512kB (M) 3*1024kB (M) 2*2048kB (M) 717*4096kB (M) = 2946728kB [ 245.816522][T12359] Node 0 Normal: 3*4kB (UME) 0*8kB 15*16kB (UME) 11*32kB (UME) 9*64kB (UE) 58*128kB (ME) 222*256kB (UME) 429*512kB (UME) 312*1024kB (UME) 75*2048kB (UME) 569*4096kB (UM) = 3088796kB [ 245.834951][T12359] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 245.844293][T12359] 20567 total pagecache pages [ 245.849290][T12359] 13 pages in swap cache [ 245.853630][T12359] Free swap = 124576kB [ 245.858034][T12359] Total swap = 124996kB [ 245.862229][T12359] 2097051 pages RAM [ 245.866073][T12359] 0 pages HighMem/MovableOnly [ 245.870777][T12359] 81087 pages reserved [ 245.898040][T12377] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2973'. [ 245.963282][T12387] loop5: detected capacity change from 0 to 164 [ 246.000362][T12387] macvtap4: entered allmulticast mode [ 246.015828][T12390] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2979'. [ 246.022029][T12387] batman_adv: batadv0: Adding interface: macvtap4 [ 246.031228][T12387] batman_adv: batadv0: The MTU of interface macvtap4 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.067949][T12379] loop8: detected capacity change from 0 to 8192 [ 246.075615][T12387] batman_adv: batadv0: Interface activated: macvtap4 [ 246.097311][T12393] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2980'. [ 246.112130][T12387] hub 1-0:1.0: USB hub found [ 246.116956][T12387] hub 1-0:1.0: 8 ports detected [ 246.156586][T12397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2982'. [ 246.184135][T12399] loop2: detected capacity change from 0 to 164 [ 246.197306][T12399] macvtap12: entered allmulticast mode [ 246.205356][T12399] batman_adv: batadv0: Adding interface: macvtap12 [ 246.211955][T12399] batman_adv: batadv0: The MTU of interface macvtap12 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.237578][T12399] batman_adv: batadv0: Interface activated: macvtap12 [ 246.306076][T12404] hub 1-0:1.0: USB hub found [ 246.311125][T12404] hub 1-0:1.0: 8 ports detected [ 246.480737][T12418] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 246.812112][T12421] loop7: detected capacity change from 0 to 8192 [ 246.856266][ T29] kauditd_printk_skb: 323 callbacks suppressed [ 246.856283][ T29] audit: type=1400 audit(2000000060.300:71509): avc: denied { execute } for pid=12424 comm="syz.7.2993" name="file0" dev="tmpfs" ino=1200 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 246.925928][ T29] audit: type=1326 audit(2000000060.370:71510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12422 comm="syz.5.2992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11356df6c9 code=0x7ffc0000 [ 246.949755][ T29] audit: type=1326 audit(2000000060.370:71511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12422 comm="syz.5.2992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11356df6c9 code=0x7ffc0000 [ 246.973696][ T29] audit: type=1326 audit(2000000060.370:71512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12422 comm="syz.5.2992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11356df6c9 code=0x7ffc0000 [ 246.997489][ T29] audit: type=1326 audit(2000000060.370:71513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12422 comm="syz.5.2992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11356df6c9 code=0x7ffc0000 [ 247.021467][ T29] audit: type=1326 audit(2000000060.370:71514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12422 comm="syz.5.2992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11356df6c9 code=0x7ffc0000 [ 247.045334][ T29] audit: type=1326 audit(2000000060.370:71515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12422 comm="syz.5.2992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11356df6c9 code=0x7ffc0000 [ 247.045485][T12435] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 247.069038][ T29] audit: type=1326 audit(2000000060.370:71516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12422 comm="syz.5.2992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f11356ddf10 code=0x7ffc0000 [ 247.100046][ T29] audit: type=1326 audit(2000000060.370:71517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12422 comm="syz.5.2992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11356df6c9 code=0x7ffc0000 [ 247.123730][ T29] audit: type=1326 audit(2000000060.370:71518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12422 comm="syz.5.2992" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f11356df6c9 code=0x7ffc0000 [ 247.148531][T12435] vhci_hcd: invalid port number 96 [ 247.153748][T12435] vhci_hcd: default hub control req: 0311 v0005 i0060 l7 [ 247.239648][T12443] loop7: detected capacity change from 0 to 8192 [ 247.242460][T12449] loop2: detected capacity change from 0 to 512 [ 247.253918][T12449] journal_path: Lookup failure for './file0/../file0' [ 247.260881][T12449] EXT4-fs: error: could not find journal device path [ 247.322869][T12455] loop8: detected capacity change from 0 to 164 [ 247.357211][T12461] netlink: 'syz.6.3006': attribute type 7 has an invalid length. [ 247.360299][T12455] macvtap9: entered allmulticast mode [ 247.374687][T12455] batman_adv: batadv0: Adding interface: macvtap9 [ 247.381206][T12455] batman_adv: batadv0: The MTU of interface macvtap9 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 247.406842][T12453] loop5: detected capacity change from 0 to 8192 [ 247.407091][T12455] batman_adv: batadv0: Interface activated: macvtap9 [ 247.470878][T12470] loop5: detected capacity change from 0 to 1024 [ 247.477894][T12470] EXT4-fs (loop5): filesystem is read-only [ 247.485347][T12470] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869) [ 247.498796][T12470] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 247.503362][T12455] hub 1-0:1.0: USB hub found [ 247.513154][T12470] EXT4-fs error (device loop5): ext4_get_journal_inode:5808: comm syz.5.3007: inode #1: comm syz.5.3007: iget: illegal inode # [ 247.513681][T12455] hub 1-0:1.0: 8 ports detected [ 247.527102][T12470] EXT4-fs (loop5): no journal found [ 247.536787][T12470] EXT4-fs (loop5): can't get journal size [ 247.549652][T12470] EXT4-fs (loop5): failed to initialize system zone (-22) [ 247.557140][T12470] EXT4-fs (loop5): mount failed [ 247.578289][T12474] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 247.581105][T12476] FAULT_INJECTION: forcing a failure. [ 247.581105][T12476] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 247.599853][T12476] CPU: 0 UID: 0 PID: 12476 Comm: syz.7.3010 Not tainted syzkaller #0 PREEMPT(voluntary) [ 247.599889][T12476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 247.599906][T12476] Call Trace: [ 247.599975][T12476] [ 247.599985][T12476] __dump_stack+0x1d/0x30 [ 247.600014][T12476] dump_stack_lvl+0xe8/0x140 [ 247.600041][T12476] dump_stack+0x15/0x1b [ 247.600065][T12476] should_fail_ex+0x265/0x280 [ 247.600142][T12476] should_fail+0xb/0x20 [ 247.600178][T12476] should_fail_usercopy+0x1a/0x20 [ 247.600208][T12476] _copy_to_user+0x20/0xa0 [ 247.600241][T12476] simple_read_from_buffer+0xb5/0x130 [ 247.600327][T12476] proc_fail_nth_read+0x10e/0x150 [ 247.600368][T12476] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 247.600516][T12476] vfs_read+0x1a8/0x770 [ 247.600541][T12476] ? __rcu_read_unlock+0x4f/0x70 [ 247.600571][T12476] ? __fget_files+0x184/0x1c0 [ 247.600609][T12476] ksys_read+0xda/0x1a0 [ 247.600672][T12476] __x64_sys_read+0x40/0x50 [ 247.600703][T12476] x64_sys_call+0x27c0/0x3000 [ 247.600730][T12476] do_syscall_64+0xd2/0x200 [ 247.600754][T12476] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 247.600867][T12476] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 247.601002][T12476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.601030][T12476] RIP: 0033:0x7f04e33ee0dc [ 247.601063][T12476] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 247.601084][T12476] RSP: 002b:00007f04e1e57030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 247.601108][T12476] RAX: ffffffffffffffda RBX: 00007f04e3645fa0 RCX: 00007f04e33ee0dc [ 247.601155][T12476] RDX: 000000000000000f RSI: 00007f04e1e570a0 RDI: 0000000000000004 [ 247.601173][T12476] RBP: 00007f04e1e57090 R08: 0000000000000000 R09: 0000000000000000 [ 247.601190][T12476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.601262][T12476] R13: 00007f04e3646038 R14: 00007f04e3645fa0 R15: 00007ffc339f9f38 [ 247.601283][T12476] [ 247.822589][T12481] loop7: detected capacity change from 0 to 512 [ 247.829474][T12481] EXT4-fs: Ignoring removed nobh option [ 247.838061][T12481] EXT4-fs: old and new quota format mixing [ 247.997089][T12497] loop5: detected capacity change from 0 to 8192 [ 248.088721][T12487] chnl_net:caif_netlink_parms(): no params data found [ 248.149665][T12487] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.156960][T12487] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.164470][T12487] bridge_slave_0: entered allmulticast mode [ 248.210850][T12510] loop7: detected capacity change from 0 to 8192 [ 248.219516][T12487] bridge_slave_0: entered promiscuous mode [ 248.226754][T12487] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.233955][T12487] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.241260][T12487] bridge_slave_1: entered allmulticast mode [ 248.247765][T12487] bridge_slave_1: entered promiscuous mode [ 248.255557][T12517] FAULT_INJECTION: forcing a failure. [ 248.255557][T12517] name failslab, interval 1, probability 0, space 0, times 0 [ 248.268304][T12517] CPU: 1 UID: 0 PID: 12517 Comm: syz.8.3023 Not tainted syzkaller #0 PREEMPT(voluntary) [ 248.268339][T12517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 248.268418][T12517] Call Trace: [ 248.268425][T12517] [ 248.268433][T12517] __dump_stack+0x1d/0x30 [ 248.268522][T12517] dump_stack_lvl+0xe8/0x140 [ 248.268542][T12517] dump_stack+0x15/0x1b [ 248.268563][T12517] should_fail_ex+0x265/0x280 [ 248.268650][T12517] ? vt_do_kdsk_ioctl+0x3e7/0x720 [ 248.268744][T12517] should_failslab+0x8c/0xb0 [ 248.268780][T12517] __kmalloc_cache_noprof+0x4c/0x4a0 [ 248.268822][T12517] vt_do_kdsk_ioctl+0x3e7/0x720 [ 248.268878][T12517] ? security_capable+0x83/0x90 [ 248.268976][T12517] vt_ioctl+0x8e8/0x18a0 [ 248.269005][T12517] ? tty_jobctrl_ioctl+0x29e/0x810 [ 248.269057][T12517] tty_ioctl+0x7d8/0xb80 [ 248.269080][T12517] ? __pfx_tty_ioctl+0x10/0x10 [ 248.269108][T12517] __se_sys_ioctl+0xce/0x140 [ 248.269199][T12517] __x64_sys_ioctl+0x43/0x50 [ 248.269224][T12517] x64_sys_call+0x1816/0x3000 [ 248.269293][T12517] do_syscall_64+0xd2/0x200 [ 248.269325][T12517] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 248.269361][T12517] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 248.269403][T12517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.269506][T12517] RIP: 0033:0x7fe96d3ff6c9 [ 248.269525][T12517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.269588][T12517] RSP: 002b:00007fe96be5f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.269606][T12517] RAX: ffffffffffffffda RBX: 00007fe96d655fa0 RCX: 00007fe96d3ff6c9 [ 248.269663][T12517] RDX: 0000200000000240 RSI: 0000000000004b47 RDI: 0000000000000003 [ 248.269680][T12517] RBP: 00007fe96be5f090 R08: 0000000000000000 R09: 0000000000000000 [ 248.269696][T12517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.269712][T12517] R13: 00007fe96d656038 R14: 00007fe96d655fa0 R15: 00007ffc36d184f8 [ 248.269737][T12517] [ 248.497248][T12487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.518168][T12487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.546003][T12522] __nla_validate_parse: 8 callbacks suppressed [ 248.546022][T12522] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3025'. [ 248.576877][T12487] team0: Port device team_slave_0 added [ 248.590946][T12528] FAULT_INJECTION: forcing a failure. [ 248.590946][T12528] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.591570][T12487] team0: Port device team_slave_1 added [ 248.604062][T12528] CPU: 1 UID: 0 PID: 12528 Comm: syz.8.3028 Not tainted syzkaller #0 PREEMPT(voluntary) [ 248.604147][T12528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 248.604248][T12528] Call Trace: [ 248.604257][T12528] [ 248.604296][T12528] __dump_stack+0x1d/0x30 [ 248.604328][T12528] dump_stack_lvl+0xe8/0x140 [ 248.604366][T12528] dump_stack+0x15/0x1b [ 248.604403][T12528] should_fail_ex+0x265/0x280 [ 248.604452][T12528] should_fail+0xb/0x20 [ 248.604495][T12528] should_fail_usercopy+0x1a/0x20 [ 248.604525][T12528] _copy_to_user+0x20/0xa0 [ 248.604603][T12528] simple_read_from_buffer+0xb5/0x130 [ 248.604638][T12528] proc_fail_nth_read+0x10e/0x150 [ 248.604683][T12528] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 248.604727][T12528] vfs_read+0x1a8/0x770 [ 248.604784][T12528] ? __rcu_read_unlock+0x4f/0x70 [ 248.604820][T12528] ? __fget_files+0x184/0x1c0 [ 248.604934][T12528] ksys_read+0xda/0x1a0 [ 248.605039][T12528] __x64_sys_read+0x40/0x50 [ 248.605085][T12528] x64_sys_call+0x27c0/0x3000 [ 248.605116][T12528] do_syscall_64+0xd2/0x200 [ 248.605211][T12528] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 248.605248][T12528] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 248.605296][T12528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.605390][T12528] RIP: 0033:0x7fe96d3fe0dc [ 248.605473][T12528] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 248.605498][T12528] RSP: 002b:00007fe96be5f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 248.605524][T12528] RAX: ffffffffffffffda RBX: 00007fe96d655fa0 RCX: 00007fe96d3fe0dc [ 248.605588][T12528] RDX: 000000000000000f RSI: 00007fe96be5f0a0 RDI: 0000000000000004 [ 248.605704][T12528] RBP: 00007fe96be5f090 R08: 0000000000000000 R09: 0000000000000000 [ 248.605738][T12528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.605756][T12528] R13: 00007fe96d656038 R14: 00007fe96d655fa0 R15: 00007ffc36d184f8 [ 248.605796][T12528] [ 248.814572][T12531] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3029'. [ 248.843080][T12487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.850070][T12487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.876074][T12487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.908172][T12487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.915215][T12487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 248.941193][T12487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.998608][T12537] loop5: detected capacity change from 0 to 8192 [ 249.006168][T12543] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3030'. [ 249.009485][T12487] hsr_slave_0: entered promiscuous mode [ 249.029227][T12487] hsr_slave_1: entered promiscuous mode [ 249.057566][T12487] debugfs: 'hsr0' already exists in 'hsr' [ 249.063406][T12487] Cannot create hsr debugfs directory [ 249.074454][T12548] netlink: 'syz.5.3034': attribute type 7 has an invalid length. [ 249.082312][T12548] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3034'. [ 249.092753][T12550] loop7: detected capacity change from 0 to 1024 [ 249.099680][T12550] EXT4-fs: Ignoring removed bh option [ 249.105213][T12550] EXT4-fs: inline encryption not supported [ 249.105282][T12547] loop8: detected capacity change from 0 to 512 [ 249.122516][T12550] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 249.139742][T12550] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 249.151278][T12548] loop5: detected capacity change from 0 to 1024 [ 249.157988][T12548] EXT4-fs: Ignoring removed bh option [ 249.158632][T12550] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.3032: lblock 2 mapped to illegal pblock 2 (length 1) [ 249.166090][T12548] EXT4-fs: inline encryption not supported [ 249.182499][T12550] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.3032: lblock 0 mapped to illegal pblock 48 (length 1) [ 249.184093][T12548] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 249.208351][T12550] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.3032: Failed to acquire dquot type 0 [ 249.220315][T12548] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 249.228599][T12548] ================================================================== [ 249.228962][T12550] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 249.236706][T12548] BUG: KCSAN: data-race in console_flush_all / console_flush_all [ 249.246434][T12550] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.3032: mark_inode_dirty error [ 249.253863][T12548] [ 249.253873][T12548] write to 0xffffffff86a24018 of 8 bytes by task 12550 on cpu 0: [ 249.253894][T12548] console_flush_all+0x35b/0x6a0 [ 249.265637][T12550] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 249.267415][T12548] console_unlock+0xa1/0x2e0 [ 249.275260][T12550] EXT4-fs (loop7): 1 orphan inode deleted [ 249.280080][T12548] vprintk_emit+0x3b5/0x580 [ 249.280112][T12548] vprintk_default+0x26/0x30 [ 249.293344][ T555] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 249.294847][T12548] vprintk+0x1d/0x30 [ 249.301589][ T555] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:6: Failed to release dquot type 0 [ 249.305079][T12548] _printk+0x79/0xa0 [ 249.342929][T12548] __ext4_msg+0x18f/0x1a0 [ 249.347312][T12548] ext4_process_orphan+0x18e/0x1c0 [ 249.352465][T12548] ext4_orphan_cleanup+0x6a8/0xa00 [ 249.357619][T12548] ext4_fill_super+0x3483/0x3810 [ 249.362608][T12548] get_tree_bdev_flags+0x291/0x300 [ 249.364715][T12544] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm syz.7.3032: lblock 1 mapped to illegal pblock 1 (length 1) [ 249.367760][T12548] get_tree_bdev+0x1f/0x30 [ 249.386168][T12548] ext4_get_tree+0x1c/0x30 [ 249.390600][T12548] vfs_get_tree+0x57/0x1d0 [ 249.395032][T12548] do_new_mount+0x24d/0x660 [ 249.399543][T12548] path_mount+0x4a5/0xb70 [ 249.404313][T12548] __se_sys_mount+0x28c/0x2e0 [ 249.409002][T12548] __x64_sys_mount+0x67/0x80 [ 249.413600][T12548] x64_sys_call+0x2b51/0x3000 [ 249.418338][T12548] do_syscall_64+0xd2/0x200 [ 249.422948][T12548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.428879][T12548] [ 249.431208][T12548] read to 0xffffffff86a24018 of 8 bytes by task 12548 on cpu 1: [ 249.438924][T12548] console_flush_all+0x528/0x6a0 [ 249.443884][T12548] console_unlock+0xa1/0x2e0 [ 249.448531][T12548] vprintk_emit+0x3b5/0x580 [ 249.453044][T12548] vprintk_default+0x26/0x30 [ 249.457650][T12548] vprintk+0x1d/0x30 [ 249.461569][T12548] _printk+0x79/0xa0 [ 249.465482][T12548] ext4_setup_super+0x572/0x580 [ 249.470343][T12548] ext4_fill_super+0x2a7e/0x3810 [ 249.475310][T12548] get_tree_bdev_flags+0x291/0x300 [ 249.480436][T12548] get_tree_bdev+0x1f/0x30 [ 249.484880][T12548] ext4_get_tree+0x1c/0x30 [ 249.489303][T12548] vfs_get_tree+0x57/0x1d0 [ 249.493728][T12548] do_new_mount+0x24d/0x660 [ 249.498235][T12548] path_mount+0x4a5/0xb70 [ 249.502571][T12548] __se_sys_mount+0x28c/0x2e0 [ 249.507258][T12548] __x64_sys_mount+0x67/0x80 [ 249.511869][T12548] x64_sys_call+0x2b51/0x3000 [ 249.516564][T12548] do_syscall_64+0xd2/0x200 [ 249.521078][T12548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.526979][T12548] [ 249.529297][T12548] value changed: 0x00000000000021e1 -> 0x00000000000021e2 [ 249.536400][T12548] [ 249.538725][T12548] Reported by Kernel Concurrency Sanitizer on: [ 249.544877][T12548] CPU: 1 UID: 0 PID: 12548 Comm: syz.5.3034 Not tainted syzkaller #0 PREEMPT(voluntary) [ 249.554717][T12548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 249.564778][T12548] ================================================================== [ 249.574274][T12548] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.3034: lblock 2 mapped to illegal pblock 2 (length 1) [ 249.589102][T12548] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.3034: lblock 0 mapped to illegal pblock 48 (length 1) [ 249.603663][T12548] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.3034: Failed to acquire dquot type 0 [ 249.615183][T12548] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 249.624736][T12548] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.3034: mark_inode_dirty error [ 249.636283][T12548] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 249.646552][T12548] EXT4-fs (loop5): 1 orphan inode deleted [ 249.660477][ T52] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 249.674804][ T52] EXT4-fs error (device loop5): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 0 [ 249.689786][ T8740] EXT4-fs error (device loop5): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 249.702868][ T8740] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 249.712512][ T8740] EXT4-fs error (device loop5): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 249.821334][ T9271] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 249.834513][ T9271] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 249.844179][ T9271] EXT4-fs error (device loop7): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 249.872409][T12487] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 249.881429][T12487] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 249.890663][T12487] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 249.899438][T12487] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 249.942772][T12487] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.955212][T12487] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.965311][ T555] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.972450][ T555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.983534][ T3455] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.990636][ T3455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.057352][T12487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.124143][T12487] veth0_vlan: entered promiscuous mode [ 250.132856][T12487] veth1_vlan: entered promiscuous mode [ 250.151105][T12487] veth0_macvtap: entered promiscuous mode [ 250.159208][T12487] veth1_macvtap: entered promiscuous mode [ 250.171555][T12487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.183454][T12487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.194845][ T3455] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.206434][ T3455] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.215494][ T3455] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.224794][ T3455] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0