last executing test programs: 5m50.299748985s ago: executing program 32 (id=2131): openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x410, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000004200), 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3ffff) 5m40.620937383s ago: executing program 5 (id=2379): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='sys_enter\x00', r1, 0x0, 0x7}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) r6 = getpid() r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) time(0x0) r9 = syz_pidfd_open(r6, 0x0) pidfd_getfd(r9, r0, 0x0) r10 = gettid() r11 = gettid() tkill(r10, 0x12) tkill(r10, 0x1) tkill(r11, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) syz_io_uring_setup(0x88f, &(0x7f00000000c0)={0x0, 0xaec6, 0x80, 0x1, 0x2f0}, &(0x7f0000000380), &(0x7f0000000180)) 5m40.579630247s ago: executing program 5 (id=2381): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000001, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xae) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r4, &(0x7f00000005c0)={&(0x7f00000001c0)=@nfc, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/38, 0x26}, {&(0x7f0000000380)=""/147, 0x93}, {&(0x7f00000004c0)=""/255, 0xff}, {&(0x7f0000000240)=""/5, 0x5}], 0x4, &(0x7f0000000300)=""/63, 0x3f}, 0x40000000) getpid() move_mount(0xffffffffffffffff, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, 0x0, 0x154) r5 = socket$packet(0x11, 0x3, 0x300) r6 = syz_open_procfs(0x0, &(0x7f00000005c0)='cgroup\x00') r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES16=r6, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000041000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000009583e940c6450d1ab0000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r8, 0x0, 0x5}, 0x18) lseek(r6, 0x10001, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x1a, r9, 0x1, 0x8, 0x6, @broadcast}, 0x14) r10 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) r11 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r11, 0x8916, &(0x7f0000005b80)={@loopback, 0x33}) 5m39.701191101s ago: executing program 5 (id=2398): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000800)='./file0\x00', 0x800, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"/269], 0x2, 0x6b4, &(0x7f00000024c0)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000006000000000500000a2c000000180a0500000000000000000001ffffed0900010073797a30000000000900111b0100000a0000000000000000fa6d"], 0x54}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000828bd7000fbdbdf250e00000008000300", @ANYRES32, @ANYBLOB="0c0006000100000001000000"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) 5m39.552976955s ago: executing program 5 (id=2400): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r2, 0x0, 0x5}, 0x18) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000005c0)={[{@uni_xlateno}, {@shortname_lower}, {@numtail}, {@rodir}, {@shortname_lower}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortname_mixed}, {@shortname_mixed}, {@shortname_win95}, {@fat=@usefree}, {@shortname_lower}, {@shortname_mixed}, {@numtail}, {@numtail}, {@uni_xlate}, {@nonumtail}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}], [{@permit_directio}, {@subj_type={'subj_type', 0x3d, '\x00'}}]}, 0x1, 0x36b, &(0x7f0000000a00)="$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") setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x288, 0xffffffff, 0xffffffff, 0x288, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0x0, 0x0, 0xff], [0xffffffff, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) readv(r4, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r2, 0x0, 0x5}, 0x18) (async) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000005c0)={[{@uni_xlateno}, {@shortname_lower}, {@numtail}, {@rodir}, {@shortname_lower}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@shortname_mixed}, {@shortname_mixed}, {@shortname_win95}, {@fat=@usefree}, {@shortname_lower}, {@shortname_mixed}, {@numtail}, {@numtail}, {@uni_xlate}, {@nonumtail}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@numtail}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}], [{@permit_directio}, {@subj_type={'subj_type', 0x3d, '\x00'}}]}, 0x1, 0x36b, &(0x7f0000000a00)="$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") (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x260, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x288, 0xffffffff, 0xffffffff, 0x288, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@remote, @loopback, [0xff, 0x0, 0x0, 0xff], [0xffffffff, 0xff, 0xff], 'team_slave_0\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x3, 0x0, 0x60}, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2c0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x2) (async) readv(r4, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0x940}], 0x1) (async) 5m39.387601191s ago: executing program 5 (id=2403): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x2000c044) 5m39.139445555s ago: executing program 5 (id=2414): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x700, 0x7}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}]}) 5m39.134828065s ago: executing program 33 (id=2414): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{0x0, 0x0, 0x700, 0x7}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x40000000000000}]}) 3m39.73067958s ago: executing program 2 (id=5325): r0 = socket(0x15, 0x4, 0x4) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa01"], 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) shutdown(r2, 0x2) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000180)={0xd5, 0x8, 0x4, 0x7}, &(0x7f00000001c0)=0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/if_inet6\x00') pread64(r3, &(0x7f00000029c0)=""/4096, 0x1000, 0xd36) setsockopt$MRT6_INIT(r0, 0x29, 0xc8, &(0x7f0000000340), 0x4) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r0, 0x8002f515, &(0x7f0000000100)) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x8, 0x4, 0x4, @vifc_lcl_addr=@loopback, @local}, 0x10) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x0, 0x1}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x52, 0x1, 0x0, 0x0, 0x0, 0x7fef, 0x82, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7d, 0x1, @perf_config_ext={0x407fff, 0xaea}, 0x14105, 0x2e, 0xfffffbff, 0x3, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xa9e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8946, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, 0x0, 0x0) bind$can_raw(r5, &(0x7f0000000200)={0x1d, r7}, 0x10) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r7, {0x1}, {0xffff, 0xa}, {0x1}}}, 0x24}}, 0x80) 3m39.163629874s ago: executing program 2 (id=5332): r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) unshare(0x2a020480) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448d4, &(0x7f0000000040)={0xfffc, 0x200, '@\x00V', 0x1, 0xf}) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@mcast2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@private}}, &(0x7f0000000080)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4={'\x00', '\xff\xff', @empty}, @in=@broadcast, 0x4e24, 0x8, 0x4e23, 0xee7, 0x2, 0x80, 0x0, 0x67, 0x0, r4}, {0x7, 0x2, 0x8, 0xffff, 0x81, 0x2, 0x0, 0x3ff}, {0x0, 0xefaa, 0x80000000000001, 0x9}, 0xc, 0x6e6bbc, 0x2, 0x0, 0x2, 0x3}, {{@in=@loopback, 0x4d6, 0x2b}, 0x2, @in=@multicast1, 0x3504, 0x2, 0x3, 0xcb, 0x4, 0x2, 0x9}}, 0xe8) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r8}, 0x18) mkdir(&(0x7f0000000540)='./file0\x00', 0x0) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x1000) faccessat(r9, &(0x7f0000000000)='./file0\x00', 0x5) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="a183000000000000000005"], 0x28}}, 0x0) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f00000008c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={0xa4, r11, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TWT_RESPONDER={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xf8}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x3}, @NL80211_ATTR_HE_OBSS_PD={0x70, 0x117, 0x0, 0x1, [@NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x5}, @NL80211_HE_OBSS_PD_ATTR_PARTIAL_BSSID_BITMAP={0xc, 0x5, "a6d76e3263a0d5b2"}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0xb}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x3}, @NL80211_HE_OBSS_PD_ATTR_MIN_OFFSET={0x5, 0x1, 0x8}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0xc}, @NL80211_HE_OBSS_PD_ATTR_NON_SRG_MAX_OFFSET={0x5, 0x3, 0x1}, @NL80211_HE_OBSS_PD_ATTR_MAX_OFFSET={0x5, 0x2, 0x11}, @NL80211_HE_OBSS_PD_ATTR_SR_CTRL={0x5, 0x6, 0xe}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4}, 0x40014) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r6}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r12 = socket$nl_generic(0x10, 0x3, 0x10) nanosleep(&(0x7f00000004c0)={0x77359400}, &(0x7f0000000500)) sendmsg$nl_generic(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000006e00)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000040270001e8957dbd1d30cf0027bd7000fddbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x2000c810}, 0x8000) pread64(r0, &(0x7f0000000480), 0x1, 0x2) r13 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_RM_DEV(r12, 0x5000940b, &(0x7f00000013c0)={{r13}, "93da1945003da528b438333c72142fe1e7e209188967c4cb17246fc301c963cf5173fd2faad77352ec160d5f9a6b425f742c349a9bff59fce3319c7f465d5b4e0fe7e1d4cf440056f51131069a8ef201fd4be2fb9ff507d6d0d66197dffc319b9ca14d313d42a92f302a1f420f4cd0ae5517e1f7be70e1e9bf8a7cb4ee052ee55fcf0687472b7155351901af583d925f672c0688119d272497d7cfae44d65366e8124a020f9b80590400a7d1a271e2f1fa7ba594909a12b15af7a2dd3643eea4eb51fed6e71da2dda0fd30713f86f6c9b4cfe51fa76698c5d8f3d839d75488dcee67d0a5dae280f12b3c327416e1b689eea7bd313abd3a6ad531a537cb08120ca6479fbe38ddff90b164586ac07a17d97c0c11579ee0a104d01f2c8d377d7d2ce91d062a31bde1151365540cee2fa7456c1ccfc5406d99aaae5de338708b41db834bdb83fe076cb33ebd892dd05be6efafce8c7ddb10a657ba018a6ecd8de10f81d241febac2443470c9a31d37abf259bd7b61ebf405b31000cce767787be8e8770444d461f43a86b8082faf8949d923f689219d8c2580eea16461d5706d198db6b7c79ed27c2ed20cc1436c39b55f27dd3b0f60381afda74d04e501fe022e51f1b0b78ed4515511928081774eae948d1ba9174f4c58bd667a72afd279f343dea375aff7a7eb1ef7a3f140f387a40df46309281d648ad89cc28dca75df480c9bd1a89e309123a148c02c4d07807d971d3a70efe2a4eb33ec82dfe5df60783ef692208394616a1745bf005d5005ad6eed44e96af045d7d7b89b774eea8aab4dd81575a74df7b790381d52eca49d6eaa746740740045638fc3138e91b81a995c79c9c8138cbb80385a8fed3dfc83fd6ec8f18aebca657f8e5b59df8ca4e69a7b43ccbaaa0cc36757a0270e2c82d2badb5d14ac9fe0d3baf01eb75587760ce598e80bd85ef1e18d7b7500d26bfb64626e16d899b36794da52fea96d5922686b50fcc92a6d4da3e2492ed26c47f54ecfb08469d3a875feb53b159b0e346f7d7d93f45d22305e7abeadf37f7c21080f0c52aa0ba9fec095ce0fb6ce72a084cada0af606ae0c38b9e5e4dd9c6a5f6ce7c1390716763d2ecaa4d5fb406309834a6f21836e3947d7ff46c8d4e9b25025665742f2c5773f2bfafa30f039983a34a48e895d54148e45d2c5c802f5ceeb64cc41353b7fd2a7e10a31226669c289b8adb07a50bc06ffacde45f341276bf851323273d886db1fb26d5c85087abc7a757a012958e6f7b51c874794a2c1adec7bd38edfe8609b80eb795c1205fd0a479d0d13955ea8ef2f9de73f6d2fdb408358d1f2d447b79756390187e436778a4139884571f0e91a976e2ad80ec2c84c8b90ce5bc40d782a16615256f34afbbad3bf7137b72889ada7096a383cf41dcbbdbeb856a18a7e7fc0bc83fbad4e57e151927529990962d348d03cc3a01b7812deda3a2a01e732160f4452b68c31e1826c5e6f16122bb8ce04118020b6677cc1da5832dffd3d2c85899330bdad42469984c918a936e568746fe71619f1d3e27a8cc1d9b282ec677c32f2d0ab618b90bf44cbacd9dc06e41d023905ab79e292b7ca0a3545cdb5c1ace8a397123176200d4b59ca702805f80a6f811c85a24409d70d8022e9ee6e4150e7faf45fff30190f9876272066f55d08e877a20a952f58eaafe50bb887fc9e1cf07400770380bd6cf89df22e6c9e10cb2411ba39e27323b487c436f70e637ad4e4fdedb93467a255f0722a499f90c82236dac9aaf61a59273ca5794c94ccd5288d7bc35b57f34aa541caa3503fac62dd70a14aff71ae21c2ddb5f4e43f72a3153bdcaa8fc24989d13447458a26ca129f63b2279ce55f9d2977ba2d1f9b7bfe604402c7bb355276b03158d6c5d45b5f5de40352deb02dbe68a194d56b54428f663404b526cfc04582ff569ce3a8899b73b5ebd8b488fef5ef2c2b8ce6e0f37c214ccddddba7ba459c3b147957c93cee0884e8ea60e61b287133b2b10d63ee7d3835697b4c75dcdd430cb10eac464283cf95bac0bd61f5ff057464b75c5ce6c705eaf3a8c470fff2e1a25d95860844039dc9cfbaf4b82becb6be2bd06507f379307d916e3f425c309e2a01c5604ff45a2ff16c44825bf5158fd0c4000a32ff2c490db037dbb0f425a0c44ab90eaa3dbc04c675bb318b3234cdfe13bd7898f644b91771292e35e83862fb66fb66d4298c3b8465b4b9528a96156103a20a989ef52900b5091ae7e01971e8e8f2e4482429a56aae3b03b0521d346eeaaf775052da201a67ff002d070f10fa17bd6f75b615d73671c7564248d2235d39809ecbda9faab807a264e56a80624d9b429e1299c18133cced9343237c20f56df37794f6c1779cb4a598a32db5ac3b4b5be8f2cc62ec1f4c826d1f57566905e5639199adbfb5c265652248f2b543d0213d94624104ca3ef09f22a703b6bcecd8a2633bcaf0ec4161e1eb6ad9383810899bf86a00fde8b2991710844c343d1f4deab4cf9144422ae6cb44b37505ae05f7e567ff900815c0afbbcc0a08ded585d002410b4959ad79c6edbeb2489f2c6bf0422916a8c268cad1ab0ca2599dc026325d09c94ffe7139711ee820f4e086888c4d419b60c12c03ca5f003440085517623486b11d4cb6212d0992f7faf85ffe123bef24b3304ac2646771ae4ecaecc6effcfce119cc50b4e0018a9fcb19066ba2c3a769dd79025cdfa487c48393f71d7bbbdd1a10f90584fb8823e5bad4ad79cb32c7d2f453a57bee9255c56295574010b7af2a823297f1d572522d64da55bfa2c90c1b342174a09a19ee203ee1e16f5c071e87df6350971bcb46dded9ff1d1652f6b9f29d274d42bc1c807934b6beac296ffe6e83932522de58ced619040ef2ef931f65260dafdeaa32d3ab27a7913bd53424dc795f20869742cccfde981321b560b850fe7237c33bba5e99eff5e573b55491d8fd93ffa3811ed68d2f7c8c2ec92adfd247fefde7df37ade3683b04b88977f41c7aacfdc3aa50ff45ae0cd9fd071dfc36d22122cdc5f94c52bc8f673bc8bd3e5686c47bbec929c59e7b0c653c155d1256e5450b66999531435e17b090dad5c455e077ab865f98b68ddf47cdf0f60040143b664b4bfff387603ee43982843821aac146d0d7befbf5dd572906ffd802d663f596809b82bb49bff88378e404094e6baded97b42ffff58a0a12f7db1fb19b74960961c85af0f6a590d945fc5ddc36161a16e2879c365f5bd3f86b746aa89cb49d5597ed49a05e443ca952653bf93dfb5072340630cec1feff54b9a5051b6835191d3e3a78c1b2f83b9d65ad47e91d576fb28855d1f267f22d710e8f334c04a1a788bd8114995399d101715ada0613e4266aad6a9c2a7efe3e589a830f0970f49dd6a7f9807b017d32f669da2127c281d1a9cd9199b11dd655833e6b5e6a27ca7d0361966f835f5f7a7d7f8b1ca1e2023df8dc1d551ba48f5bc6908564e48bc078a0a4417662ecb70320bde149611224efad791bd52f6336e63ed55d31767364af7d6d174ec9d0e27c1387f6bfa614632900d490a42cb80b406f3da52e7a97260bd3bb920cac382eb98beab398e162ab14ee592a5a895c93e06875f918dafb8b4061d5dbbcf89c78b1480976ff6d40bfee1c62ef127c769bf998a37ef5fdac70029a8be5a512d2b01d164a8a26fd995e6a229efafee6908cf758b3b89401dbba7ead054462527b9ca8ec1d27ef31ba9834dcab8be9e36f7caddff450fde97b49f1d649479d7fd59695cf847fb723d5ea43ce5d4f3c4d4ad01556281f3ad988b0f4196d095bf85b0ddc3af6e3cff033255e7cb6f2a546108edbf6ac48a5ec843a013bd0bb54f30f1cca508f2a0d58f1066d66745ea275a89ac3dd2dc4ff3597f446027b4f1521722fb64d6a9e1a7fdcfa292b2c264114584beed15fad43c20cf9b824776e35e570162300f0188ae2d0779da76a1b3ab32a0766778cd0b3d905ae01503a591dd1e98b7819fb0a214a75bcc2214984c7b2c5e391b837e179c5c146467ea7f5aa5c2c7f2f727ca78844595a6d9a5ebbe59a9cecc314f16a3bc2722f67dbfaf9fbe58c31663d450194da27e5d15134a18ab1be4f95045087c07bf647edccc9f53c3827ac25f035205a2bd4dbbc35dc7a166f6ec4fb5f74998b2f68ff078208c610ef45767d7af37ff85830e8738c6f4efbb3fa787edaba3a3fc4a1daae1c0dcb9bf8efe1805d51765ec9d0baa4ae967ce5c3e14d6554d38e237e5d9edd155ff4c9a3f2eb912db75eecb1b7799e13a414f02307c7a2f4b8c8f8324a5a0d9ab19bb99063d2c96e6c6c5f35d44af29441cc89ea64cbecb396650d06b3492841f8e07e277a3d382468c631d5fde55b7a7c1f788118dfca5d772c80a4af252a3f48984e9895420729bef7878e38ea472b1f5c1252677cde6d27ab121f7a553e193c5b581dc95668adc88a4bae6d871db0f6458348796c99dc366ddc80556857a73ce19a273a7f979e7b5fe5012bd46450bbdc71b2d42134c97f3b1e06abd776381b818cf92f8beb45d99b87147dc311a67cf7acb17c3cdf21338771d412af8578d0d1a17750a3549c02a97bea5cd6b74997f7af0b658db184ae4f6fca03d290edf633ecbb6a870ce9c49ab20968916d2a649c4204840831b94ce2386572bb830b1cf01d5b20e402a9e888c93b57a8d6b49d56e1ca2f4fd965a71258e37fd586d35f96bf99072f2c6bed93ce0e0d20bf9c90ab5626b23e1a65e957fbd9ca43f7c6c98130faa0df2d24fb81ac5d9ed850566599aca6d4842356c702c99487e11ece99453192688a8dde85a28df287180c9834671e82252fdde58e8c53414c6ee7480a14276cd3f18694d667b8524d2799912bf4a4600adc37df7ff525a64772431c465638ae320393b170f77f77611971d4e3f12c29d5f290dca0155df933e5af0c9068dd38e2d27a2432c86199b9e400ca1a5b936fc6e5a7b513c31562324aa3714ed42fd6a79b8df6b5087b4495c0087d580ca35b8055d681735fba2b08701365f0757b878b01832529454a694df647f25a18b407c3afbeccd4184d6b05f5b4d470295fc1abaf9d2aebf5dc299e14842d40356aa0d67c740fea01121b9cea461f915a5f4902436bc1c4c619b35368579bdbc9b448c243c3d5fdf3c3f6b7ac6301f21f3a1079ade28fc326489ddf8a85508b233f966e453e143382a9413bbf5a0578a28e88bf6d4436bbc052512697e9635782a5303c9e4efdc1570c67776766e2296a8d49b211f5e6c707735e909ead526868b8902b0070bb5c9306e9dc9f32be204c1ee5703ea06956ebb3cb8051a6a55213b156958cbea0820f58c702018b4dbbb472cddf6e742314f8d44146969b5f4db09703f7dc54fd21d30f271c1c0823fee4f5c2e76babb02d0a7437fe2a16905dad36e7c46a32c6bcab195d18d36f18c3fb8014ab283bc1665ff2aa31cd4f5ccc2f24c55f6d344b6a4bcfe00c2f027a613cf0d527e36648aaac1a7abd0a04aaabd36ed35133fcb8b3fd3b8c7ee663749bf914e52cd4fdac5eb72f1b9f8e50f068d3d95950430399a21c09b873565dd4f73abc46c58ab12bb80180b661fb4beaa0dec930c6c9d32d8ea79a1ca52e6eb2f4987d460f69c34a8f6db4ab3fd7cdcc7bd60161cde578ccf9909c0b4fbf5d36a7a9fb211aa8def66dea859df1d93767154ece44155e142ee5ba3d002a6799a0c9798085482c1185083a5195eeaba2b73250248d9a073df4283aaf2bb399a2e1b5765ec9179b9dc5f4a14a60309de0fc251b1ecbb5783"}) 3m38.26834732s ago: executing program 2 (id=5347): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='sys_enter\x00', r1, 0x0, 0x7}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) r6 = getpid() r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) time(0x0) r8 = syz_pidfd_open(r6, 0x0) pidfd_getfd(r8, r0, 0x0) r9 = gettid() r10 = gettid() tkill(r9, 0x12) tkill(r9, 0x1) tkill(r10, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) syz_io_uring_setup(0x88f, &(0x7f00000000c0)={0x0, 0xaec6, 0x80, 0x1, 0x2f0}, &(0x7f0000000380), &(0x7f0000000180)) 3m38.123212394s ago: executing program 2 (id=5351): futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f00000000c0)='./file0\x00', 0x10, &(0x7f0000000000)={[{@session={'session', 0x3d, 0x21}}, {@unhide}, {@gid}]}, 0x13, 0x557, &(0x7f0000000540)="$eJzs3EFv29YdAPBHR049DwsKFGtSNwc23SEDVldSFgdGgQEcTdlsZVEg6SI5DcViF8bsbmg7YM0tl2wD9iWK3fYJdto3KnbcsQNFqU0TS46TtA7S3w+w3xP553v/RwvvgTKeAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQonSr2+1FYZiP9m7H86VbZbG74PysvX9/p1jQbwhR8xNWVsKV9tCV1749/fPm17VwuX11Oaw0xUq499PXX33vtc7S7PoFCf0AlqfJHu1/ujgwCl9HP1RS34+dk251J97ORnlV5LvJdhbnVRFvbmx0390ZVPEgH2bVnarOduO0E5K6KOPr6S/j3ubmjThbv1Psjba3kmE2O3jrnX63uxG/vz7OkrIqRu++v16lO/lwmI+2JzHN6SbmVvNG/CCv4zpLduP44PBo/8ZpuTdBvScJ6p8W1O/2+71ev9/buLl581a323nsQPcR4bGI837Tct6e4+wNz2a2/gMAAAAvr2jyGXvz/L88+Rw+CoN8mHXPOy0AAADgOZr85//yP6Pm+T+EcCVEnv8BAADgZfO3U/fYVeNXov/8N5TlcnR/fPsX0XHSxCXHF9rrLjzaYj3oRJemjUyKjc70VZpdjd5og96YRX81LQ5OyyM6QwJrcxII/whrbcza3ba8OzvT9rI6yIfZeloM3+uFJLm0VGe36z9/cviXMBn+30e7l6JwcHi0v/77Px7dneRyv2nl/vF0A8Vj+ygW5PL5N/seHxnxl21Ty00u0bTf1bbf7sPjX2ovXzpDnw/Cm23Mm6ttufrd8a80ffbW541+NfrZZDPdM478Qbjaxly9/nZTvH39hCz6J2Vxcdr4ZLfew1k81b14gixuLLgX4eDwlRDCE2Xxk3lZAJyXg3mr0Dfr/6Prbucp5tpvV/fffI+r+4PwVhvz1tpkYu2snTCjdxfP6LM19v7Fp13d/hWutTHXZsHz1tim3/DqrN92VZ0s/l/O7bca9qPmD3Xh8+M/hdc/++LeO4fHH328//H+J/3+jY3ur7vdm/2wPBnGtFiQKQA/Xln5VbRa/zUqy3z8u97mZi+pd7K4LNIP4jLf2s7ifFRnZbqTjLazeFwWdZEWw6byYb6VVXG1Nx4XZR0PijIeF1V+e/LNL/H0q1+qLPxqVOdpNR5mSZXFaTGqk7SOt/Iqjcd7vx3m1U5WTi6uxlmaD/I0qfNiFHeKvTLN1uO4yrKHAvOtbFTng7ypjuJxme8m5Z34w2K4t5vFW1mVlvm4LtoGZ33lo0FR7iZ1fiGsn/fNBoAXxGdf3PvDR0dH+58+YeV/X7fOctXjvV48j6ECAFOLVmkAAAAAAAAAAAAAAODFcNb9f8+xsjxN4Xx6V1E5tbL0zO10XoBRzK3MJoETY85vTgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAef4fAAD//1ZMmf8=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) getdents64(r1, &(0x7f0000000040)=""/225, 0xe1) r2 = creat(&(0x7f0000000140)='./file0/file1\x00', 0x90) write$cgroup_type(r2, &(0x7f00000009c0), 0xd4ba0ff) unlink(&(0x7f0000000100)='./file0/file1\x00') mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004111}, 0x20000050) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX=r0, @ANYRES32=0xee00, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000feffffffffffffff0000000000000000cbfbffffffffffff00000000000000000000000000000000000000ecffffff000000000000000000000200000000000000000000000000000000030000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x4880}, 0x20040041) 3m38.024161893s ago: executing program 2 (id=5356): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180900000020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00'}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x0, 0x40000000, 0x0, 0x3}, 0x8}) 3m37.797918465s ago: executing program 2 (id=5361): sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x18) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x101042, 0x8) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2, 0x0, 0x0, 0xffffffffffff}) 3m37.797619295s ago: executing program 34 (id=5361): sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x18) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) open(&(0x7f0000000280)='.\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x42, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x101042, 0x8) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x2, 0x0, 0x0, 0xffffffffffff}) 2m53.662282425s ago: executing program 7 (id=6170): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x400) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x2, 0xffff0000, 0x1, 'queue0\x00', 0x3}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d01000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) close(r0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/notes', 0x2, 0x1a2) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x111, 0x9}}, 0x20) pipe2$9p(0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='qdisc_create\x00', 0xffffffffffffffff, 0x0, 0x5bf8f9c2}, 0x4f) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000031401002abd7000fedbdf250900020073017a31000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) r7 = socket$kcm(0x2, 0x0, 0x84) sendmsg$inet(r7, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, 0x0}, 0x240448c4) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') acct(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00') socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SNDRV_TIMER_IOCTL_CREATE(r4, 0xc02054a5, &(0x7f00000002c0)={0x10000, r6, 'id1\x00'}) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$PIO_CMAP(r8, 0x4b71, &(0x7f0000000240)={0x1ff, 0x2, 0x1543, 0x7fffffffffffffff, 0x2, 0x2}) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x9}}, 0x20) 2m53.30349157s ago: executing program 7 (id=6175): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_type(r2, &(0x7f0000000280), 0x9) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) r4 = syz_clone(0xc920000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r4, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x40, 0x40, 0x41}, 0x50) r6 = openat$cgroup_subtree(r5, &(0x7f0000000140), 0x2, 0x0) syz_clone(0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000002c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) kexec_load(0x0, 0x0, 0x0, 0x3e00) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x8, 0x3, 0x298, 0xd0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1c8, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x60030000, {0x0, 0xff000000}}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e21, 0x4e21], [0x4e23, 0x4e24], 0x0, 0x80, 0x20, 0x8}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) 2m53.104687919s ago: executing program 0 (id=6177): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000200)={0xe, {0x8, 0x4, 0x8, 0x78, "179771944207860d372b66f13a1c68acbf5f0c047ec3787e9b076e2d175c2c211f30ee0c4a3b9dc4740bfe97ccf80a217c665afcf83b4cd73f264e77194d0c91ffedc222cadf0e2e64b19fdf537081384b28fccc1eac0b7cf22d55fe983d30a82d700231a346d9ec9be07a6b33879a97ca60b1ffd2e36339"}}, 0x84) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) tgkill(r1, r1, 0x1a) 2m53.057992783s ago: executing program 7 (id=6180): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) getpriority(0x0, 0x0) pipe(0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000200)=0x4) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000000880), 0x0, 0x0) mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x10, &(0x7f0000000300)={0x0, 0x1, 0x3}) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000340)='kfree\x00', r3, 0x0, 0x81}, 0x18) r4 = socket(0x1e, 0x4, 0x0) dup3(0xffffffffffffffff, r4, 0x0) 2m53.015862457s ago: executing program 0 (id=6181): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) sync() sync() sync() r2 = fsmount(0xffffffffffffffff, 0x1, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0x5, 0x7ff, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}, @remote, 0x8000, 0x8000, 0x3273, 0x6}}) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x1}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f00000005c0)={r3, 0x9, 0x1, [0x2, 0x2, 0x1000, 0x2d43, 0x1], [0x2, 0x2, 0x401, 0x6, 0x7fffffff, 0xb5f, 0x7, 0x9, 0xffff, 0xf9, 0x41, 0x1, 0x0, 0x1, 0x8001, 0x6000000, 0xc0e, 0x17e7, 0x7, 0x1, 0x100000001, 0x4, 0x3, 0x3, 0x0, 0x2, 0x4, 0x2, 0x9, 0x800, 0x8, 0x69a, 0x800, 0x1, 0x7, 0x8, 0x7, 0x43f, 0xec0, 0x5521d8c0, 0x40, 0x100, 0x2, 0x2, 0xfffffffffffffff9, 0x5, 0x1, 0x2, 0x7fff, 0x63, 0xffffffffffffffff, 0x101, 0x7746, 0x5, 0x6, 0xffffffffffffff20, 0x9, 0xffffffffffffffff, 0xffffffff, 0x6bd721c8, 0xfffffffffffffffb, 0x8000000000000001, 0x1000, 0x7, 0x4, 0x3, 0x2, 0x1, 0x7fff, 0x7f, 0xfffffffffffffffe, 0x0, 0x8001, 0xfffffffffffffffd, 0x6, 0x8000, 0x6, 0x100000001, 0x8000000000000000, 0xb, 0x0, 0xbe, 0x9, 0x5e75, 0x8, 0x4c, 0x9, 0x7fffffff, 0x7fff, 0x7fff, 0x4, 0x15c, 0x6, 0x6404, 0x6, 0x10, 0x0, 0x800, 0x8, 0x6, 0x8, 0xadba, 0x0, 0xba, 0x1, 0x8, 0x9, 0x9, 0x6, 0xe, 0x9, 0x9, 0x100000000, 0xc2, 0xe3e2, 0x10, 0x256, 0xdd, 0x200, 0x9, 0xcf]}) 2m53.005944468s ago: executing program 7 (id=6182): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x0, 0x1170, 0x1170, 0x0, 0x1170, 0x298, 0x1398, 0x1398, 0x298, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x2e, 0x0, 0x0, 0x46}, 0x0, 0x188, 0x1a8, 0x0, {}, [@common=@inet=@socket2={{0x28}, 0x1}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@loopback, [0x0, 0xff000000, 0xffffff00, 0xff], @ipv6=@private1, [0xffffff00, 0xff000000, 0xffffffff, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xffffff00], @ipv4=@local, [0xffffffff, 0xffffff00, 0x0, 0xffff00], 0x0, 0x8, 0x8, 0x4e22, 0x4e21, 0x4e23, 0x4e20, 0x100, 0x1240}, 0x81, 0x41}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0af30100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c0000800800034000000002140000001100010000000000000000000100000a"], 0xb0}}, 0x40) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x490, &(0x7f0000000580)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x42, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x101042, 0x8) socketpair(0x22, 0x5, 0x8, &(0x7f0000000000)) ioctl$EXT4_IOC_MOVE_EXT(r6, 0xc028660f, &(0x7f0000000040)={0x0, r5, 0x2, 0x0, 0x0, 0xffffffffffff}) close_range(r3, 0xffffffffffffffff, 0x0) 2m52.957889403s ago: executing program 0 (id=6185): unshare(0x6a040000) r0 = socket(0x2, 0x80805, 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, &(0x7f0000001080)) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @multicast1}, &(0x7f0000000180)=0xc) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x10) finit_module(r2, 0x0, 0x3) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRES8=0xffffffffffffffff, @ANYRES16], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000007d0000009500040000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000009c0)=ANY=[@ANYRESHEX=r3, @ANYRES64=r4, @ANYBLOB="0000000000000000b70800008e0000007b8af8ff00000000bfa200000000000d49220c990007020000f8ffffffb703000008000000b704000000000000850000008200000095f0230de90edac0a10473f39b3a1690a8678f982c852d5f91122137516a61a294d0d65797c13588c62b186e112854d135afe676522fa21a4eaa45a390854282e863ef4e16d217d2ab4cefb8fa00e66f6e84da38aa106b14a15a58bd4cc1e9fbd811450409cb0d95b7b41cbcedb0883fd0"], 0x0, 0x0, 0xffffffffffffff5a, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x19, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r7}, 0x10) clock_nanosleep(0x9, 0x0, &(0x7f0000000080)={0x0, 0x3938700}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYRESHEX=r8], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r9}, 0x10) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) syz_emit_ethernet(0x45, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x2, 0x37, 0x0, 0xe000, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0xff}, @remote, {[@generic={0x94, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}, {"b3a7e3a7ca615ecc2f83ac"}}}}}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 2m52.581887148s ago: executing program 7 (id=6193): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) (fail_nth: 1) 2m52.57222325s ago: executing program 0 (id=6194): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r2, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)=ANY=[], 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 32) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) (rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', r5, 0x0, 0x5}, 0x18) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) (async) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r3, 0x0, 0x0) (async) r6 = fcntl$dupfd(r3, 0x0, r3) sendmsg$IPVS_CMD_GET_CONFIG(r6, 0x0, 0x4000) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x2b08}}, 0x4000806) (async) ioctl$HIDIOCGCOLLECTIONINFO(r6, 0xc0104811, &(0x7f0000000040)={0x2, 0x9, 0x8, 0x4}) (async) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001000010025bd7000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000300000008001b000000000008000d0003"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) (async, rerun: 32) r7 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x40003}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x10000}]}, 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x24040040) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$netlink(0x10, 0x3, 0x4) capset(&(0x7f0000000300)={0x19980330}, &(0x7f0000000440)) (async, rerun: 32) write(r8, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) (async, rerun: 32) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000006800e92a3806d29d0552b5f9a725d67800000000ffdbdf25", @ANYRES32=r11, @ANYBLOB], 0x20}}, 0x0) 2m52.497126057s ago: executing program 0 (id=6195): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x6, 0x0, &(0x7f0000000000)="b9fd03076804", 0x0, 0x40400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'nr0\x00', 0x6132}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000100)={@rand_addr=0x64010100, @multicast1, @multicast1}, 0xc) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe3a) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49, 0x0}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000600)=ANY=[@ANYRESHEX=r2], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) timer_settime(0x0, 0x1, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000130000005d0000000000000095000000000000000a621cf434b9eaafdc0a00e9bfde908990817b364e51afe9c81a97f0570759f1cae63487ff68fffffffffffe8e3932e2b7185a25a4cf8a9456aa8a701c318c67edb6e9330b53c0eeba8644311ba75411890700000000000000d8e5b1dc91c5499bea0977"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000400)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x0, 0xd00, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x1200}, 0x28) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x140070, 0x0) socket$inet6(0xa, 0x800, 0x5) 2m52.231922432s ago: executing program 7 (id=6196): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400b595000000fc007340000a000000", @ANYRES32=r1, @ANYBLOB="14000100fc"], 0x40}}, 0x4000) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @empty}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000380)={0x0, 0xe4ff, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 2m52.066617469s ago: executing program 0 (id=6197): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) socket$packet(0x11, 0x3, 0x300) ioperm(0x0, 0xd, 0x4000000000000020) ioperm(0x0, 0x40, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0010a6", 0x14, 0x4, 0x0, @empty, @mcast2, {[], "223427d5c9a46b9fa14172170a013589317d2af3"}}}}}, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030000000903000038000000fcffffff0e000000418020000100050000080000000000000300000004000000f30000007f00000004000000040020000c00000000040000"], 0x58) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, 0x1403, 0x300, 0x70bd2d, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macsec0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) writev(r3, &(0x7f0000000340)=[{0x0}, {&(0x7f00000002c0)="a395d1", 0x3}], 0x2) close(r2) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) renameat2(r7, &(0x7f0000000200)='./file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x2) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x8800) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000440)={'erspan0\x00', r10, 0x8000, 0x1, 0x9, 0x6, {{0x15, 0x4, 0x2, 0x33, 0x54, 0x64, 0x0, 0x8, 0x4, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0xb, 0x78, [@dev={0xac, 0x14, 0x14, 0x32}, @multicast1]}, @noop, @generic={0x89, 0x4, "3a9a"}, @rr={0x7, 0x27, 0x66, [@loopback, @dev={0xac, 0x14, 0x14, 0x2d}, @private=0xa010101, @private=0xa010101, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @broadcast, @local]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000680)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) preadv2(r12, &(0x7f0000000880)=[{&(0x7f00000006c0)=""/77, 0x4d}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000000740)=""/200, 0xc8}, {&(0x7f0000000840)=""/41, 0x29}], 0x4, 0xfffffff7, 0x7, 0x5) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="30000a8080030201ff095550ce0408000300"/32, @ANYRES32=r10, @ANYBLOB="0c00090001010407", @ANYRES32=r11, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x20040004}, 0x1) 2m37.186102155s ago: executing program 35 (id=6196): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r0 = socket(0x1, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="400000001400b595000000fc007340000a000000", @ANYRES32=r1, @ANYBLOB="14000100fc"], 0x40}}, 0x4000) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0xfffffffe, @empty}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000380)={0x0, 0xe4ff, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 2m36.992740443s ago: executing program 36 (id=6197): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) socket$packet(0x11, 0x3, 0x300) ioperm(0x0, 0xd, 0x4000000000000020) ioperm(0x0, 0x40, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000001180)={@local, @multicast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0010a6", 0x14, 0x4, 0x0, @empty, @mcast2, {[], "223427d5c9a46b9fa14172170a013589317d2af3"}}}}}, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300030000000903000038000000fcffffff0e000000418020000100050000080000000000000300000004000000f30000007f00000004000000040020000c00000000040000"], 0x58) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x8, 0x0, 0x1003, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x60, 0x1403, 0x300, 0x70bd2d, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'macsec0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) writev(r3, &(0x7f0000000340)=[{0x0}, {&(0x7f00000002c0)="a395d1", 0x3}], 0x2) close(r2) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) renameat2(r7, &(0x7f0000000200)='./file0\x00', r2, &(0x7f00000004c0)='./file0\x00', 0x2) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r8}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x8800) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000440)={'erspan0\x00', r10, 0x8000, 0x1, 0x9, 0x6, {{0x15, 0x4, 0x2, 0x33, 0x54, 0x64, 0x0, 0x8, 0x4, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0xb, 0x78, [@dev={0xac, 0x14, 0x14, 0x32}, @multicast1]}, @noop, @generic={0x89, 0x4, "3a9a"}, @rr={0x7, 0x27, 0x66, [@loopback, @dev={0xac, 0x14, 0x14, 0x2d}, @private=0xa010101, @private=0xa010101, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @broadcast, @local]}, @ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000680)={{0x1, 0x1, 0x18, r2, {0x5}}, './file0\x00'}) preadv2(r12, &(0x7f0000000880)=[{&(0x7f00000006c0)=""/77, 0x4d}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000000740)=""/200, 0xc8}, {&(0x7f0000000840)=""/41, 0x29}], 0x4, 0xfffffff7, 0x7, 0x5) sendmsg$nl_route(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="30000a8080030201ff095550ce0408000300"/32, @ANYRES32=r10, @ANYBLOB="0c00090001010407", @ANYRES32=r11, @ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0x20040004}, 0x1) 1m21.559418523s ago: executing program 4 (id=8169): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x74}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r2, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7fff}, 0x18) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4004000) 1m21.3901069s ago: executing program 4 (id=8175): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r3 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x47}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) io_uring_enter(r3, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r7}, &(0x7f0000000180), &(0x7f00000001c0)=r6}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) dup3(r3, r1, 0x80000) 1m20.817389294s ago: executing program 4 (id=8181): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000200)="911b79417890", 0x6) tee(r1, r3, 0x8f5, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 1m20.735897282s ago: executing program 4 (id=8182): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB="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"]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x499, &(0x7f0000000400)={0x0, 0xd146, 0x0, 0x3, 0x288}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='0'], 0x30}}) io_uring_enter(r4, 0x3516, 0xddd3, 0x4, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r10}, &(0x7f00000006c0), &(0x7f0000000380)=r9}, 0x20) recvmsg$unix(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000009c0)=""/181, 0xb5}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) shutdown(r8, 0x0) shutdown(r2, 0x1) syz_mount_image$ext4(&(0x7f0000000840)='ext4\x00', &(0x7f0000000800)='./file1\x00', 0x40, &(0x7f00000000c0)={[{@user_xattr}, {@nodioread_nolock}]}, 0x1, 0x576, &(0x7f0000000140)="$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") bind$802154_raw(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) getuid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='oom_score_adj_update\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, 0x0) chdir(&(0x7f0000000000)='./file0\x00') 1m19.824607919s ago: executing program 4 (id=8194): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11c167, 0x0, 0xfffffffa, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0x2000000000000242, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) perf_event_open(&(0x7f0000004cc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0x6, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x1, @perf_config_ext={0xff, 0x4}, 0x100410, 0x200, 0x2, 0x1, 0x9, 0x1000009, 0x8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x49, 0x1, 0x0, 0x0, 0x0, 0x0, 0x82240, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x8}, 0x2, 0x0, 0x0, 0x8, 0x43fe, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x3ffffffe}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @generic={0xc6, 0x8}, @initr0, @exit, @exit]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000370403000000ffffffff00000000", @ANYRES32=r5, @ANYBLOB="0b1b050000000000440012800b00010069703667726500003400028008000100", @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x48810}, 0x4000010) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x11000000, 0x8, {r5, @empty, @multicast1}}}], 0x20, 0x3f}}], 0x1, 0xc0) 1m19.231164976s ago: executing program 4 (id=8201): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f00000000c0)=""/55, 0x37) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x2, 0x571, &(0x7f0000000780)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x14, &(0x7f0000000ec0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b06f8ff00000000bfa100e265d9518fc1ee0dceafd02f8fa1bcf14722af663a1cf06c6c1568000000000007010000f8ffffffb702000008000000b70300004431eb3a0a60ff44b6e6c616c23e6319dcbe0368fdda0b8597bbcc676bcb3d9536d6c0c12bd3bebf6f878c0c62569baf14ea52f78ce6d50d01e1c30fbc3e38955510b7ade7ac6030", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x4, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r4, 0x0, 0x10000001}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x3000) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mlockall(0x7) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) io_setup(0x3, &(0x7f0000002400)) 1m19.230871426s ago: executing program 37 (id=8201): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r1, &(0x7f00000000c0)=""/55, 0x37) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000000c0), 0x2, 0x571, &(0x7f0000000780)="$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") r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x14, &(0x7f0000000ec0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b06f8ff00000000bfa100e265d9518fc1ee0dceafd02f8fa1bcf14722af663a1cf06c6c1568000000000007010000f8ffffffb702000008000000b70300004431eb3a0a60ff44b6e6c616c23e6319dcbe0368fdda0b8597bbcc676bcb3d9536d6c0c12bd3bebf6f878c0c62569baf14ea52f78ce6d50d01e1c30fbc3e38955510b7ade7ac6030", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x4, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r4, 0x0, 0x10000001}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x3000) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mlockall(0x7) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) io_setup(0x3, &(0x7f0000002400)) 2.853126047s ago: executing program 3 (id=9365): seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5, 0x0, 0x0, @void, @value=r0}, 0xbee581e7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x6, 0x0, r6, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x0) 1.980782011s ago: executing program 3 (id=9372): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000980)='mm_compaction_begin\x00', r0, 0x0, 0x175}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000004000000080000000500000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fcffffff00000000000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000a40), &(0x7f0000000100)='./file1\x00', 0x9005a, &(0x7f0000000080)=ANY=[], 0x4, 0x740, &(0x7f0000000140)="$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") madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (fail_nth: 2) 1.712089026s ago: executing program 6 (id=9379): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x0, 0xfffff05b}) 1.711755716s ago: executing program 6 (id=9380): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400000004000000"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) fcntl$setlease(r1, 0x400, 0x2) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001a0001000000fbdbdf250a80801420"], 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r7, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="2800002c3ebcddcdf1cfd2fd581bbaf400d240", @ANYRES16=0x0, @ANYBLOB="00022bbd7000fcdbdf25240000000a0001007770616e3400000008000200", @ANYRES32=r8, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x91}, 0x1) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = accept(r3, 0x0, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r10}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0xfc, 0x7ffc1ffb}]}) getgroups(0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r5, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB="2c7766c4ae954105c4e5c3267fb602bbaf85646e6f3d", @ANYRESHEX, @ANYBLOB=',\x00']) 1.620152415s ago: executing program 1 (id=9381): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="07000000040000008001000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.580679599s ago: executing program 1 (id=9382): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4002, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f00000002c0), 0x220, 0x100, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f00000000c0)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000140)=0x28) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r4}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095c9c3c8742bb0a7c9a17928583752dbe87a14b9432cb472a390d1bb6b00d8a49a1883cfb390f84b6f65db0855c4b12c146ddf81762d03a5f383f3b1d6090cc030293d"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r4, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r6, 0x0, 0x7}, 0x18) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) 1.502178067s ago: executing program 1 (id=9383): seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5, 0x0, 0x0, @void, @value=r0}, 0xbee581e7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00'}, 0x10) r6 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x7fff, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x6, 0x0, r6, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r6, 0x627, 0x4c1, 0x43, 0x0, 0x0) 1.411193315s ago: executing program 9 (id=9385): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x401, 0x28}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7}, 0x18) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') 1.301468046s ago: executing program 9 (id=9386): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x7, 0x4, 0x100, 0x401, 0x28}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x7}, 0x18) creat(&(0x7f0000000080)='./bus\x00', 0x0) mount(&(0x7f0000000100), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='9p\x00', 0x8c, &(0x7f0000000300)='trans=rdma,') (fail_nth: 1) 1.269438749s ago: executing program 3 (id=9387): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000240)='kfree\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000094000000000000000095"], &(0x7f0000000580)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x21, 0x85, 0xcf, &(0x7f0000000000)="fae68670fef1c45ff0634fe72a6253b4357c978887379648e34b8e43761f35000437ab851cde4821ce97abc68f6a1c3593e2a7a267f78fff0e9e1743899a7dc5c1d2ecae353bd4bcdb61c053b1d7b1223331d664596d93a54d408700062455bf71027a99387a4c190aa0098ed6ed8951ff86c092399a8d11b76c5e00"/133, &(0x7f00000008c0)=""/206, 0x1000, 0x0, 0x1a, 0x64, 0xfffffffffffffffe, &(0x7f00000000c0)="d5231f25b5f85be12036902ce1a29123e3c1d41aa6d9c06ff230c473bf3c", 0x0, 0x8000}, 0x48) 1.230218342s ago: executing program 3 (id=9388): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 1.229968473s ago: executing program 9 (id=9389): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x80342, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0)={0x2, 0x0, 0x3, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0xe}, 0x0, &(0x7f0000000300)={0x3ff, 0x7e7, 0x0, 0x9, 0x0, 0x0, 0x8, 0x3f8}, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) read(r4, &(0x7f0000000180)=""/65, 0x41) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r4, 0x54a2) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r5}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wg1\x00', 0x20}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000f7000000009500"], &(0x7f0000000040)='GPL\x00', 0x3}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYRES32=r6, @ANYBLOB="110000000000000084"], 0x14) 1.229416383s ago: executing program 3 (id=9390): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet6(r0, &(0x7f0000000500)={&(0x7f0000000080)={0xa, 0x4e23, 0x81, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000000240)=[{&(0x7f00000000c0)="06", 0x1}], 0x1}, 0x80001) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x20}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @const={0x0, 0x0, 0x0, 0xa, 0x3}]}}, 0x0, 0x4e}, 0x28) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000540)={0x3, 0x4, 0x202, 0x17558e07, 0x90e, 0x7c26, 0xffffffff, 0x7, r2}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2) 1.092445196s ago: executing program 8 (id=9391): socket$kcm(0x2, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x74}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2c, r1, 0x301, 0x70bd26, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000003640)={0x2638, r2, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_MODES={0xd8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1ff}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_MASK={0xba, 0x5, "d46358c95d4a919cc28cd71c2e348d1c89c0ae90e3ba27d979b034e3d7c50655599fd11f0f31bad066cfe2ddbd4ccd55ef9a851aa90f4b7837a01de22e86e46d0a58496ad4bebcfaeb6921823d2fc630b9bd8b072edcec33dbbf75151e63b254921f1fb3bc0706d7e6440ba861773ef68e8f4bd91fa2c913442db04c41c68658ed3bb45aaea74e17c8f989505e15d53d12e84881a86350c68ff5a64c1c36ef0b548f48a1307bad54c57d954bedd7558e9ab2286ccf6e"}]}, @ETHTOOL_A_WOL_SOPASS={0xc8, 0x3, "d3a79e3fb17818afea3f62e660d30c327fc0325875f0477e429e403eb2ca4ddff1be997db274cc032b522d7bc778bacf50715a3fff89b7435bf2ac706adde562fff1910a5bc48db0be09ffc3910386327e2f3392525f003adff7f51b131d81d794486ce7448d62cf26c5a9d73bc79296eabf2188ef77026cb1944dd8b4979a1708be9f724d0c83c6cbda1feec3c732b8fc4053a9f404baebfed668770fd461e949eb5b1d7d643bd80dea2c526057c504240cd0de6e8a223a1e7cd18e8c34b92f5176d621"}, @ETHTOOL_A_WOL_MODES={0x10d4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_VALUE={0x33, 0x4, "3536cbaea194fc842114cfa30a21881d7f78e85d6d7e0fa6a24d73758c82beb4aa710e65518cddd7076a157874a68e"}, @ETHTOOL_A_BITSET_VALUE={0x40, 0x4, "81aabfcdf5cc94dea167f3d90ace994d7225550f71a38e8200cb4a355c72d6908780683b5bd7a37b46fe9aa83775353aa82aa01d9ceb95e6adaffe20"}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "69b7b45b11b276a48ee2088e464115c3c296612aaaaaa7e3b298dc99d115164c2611d9968671008f6e66f011f68b8d5954cdb895127693357d31ba6a5383509b020db2be4b6baf07ccb1ebfa45a8ce951471fbb1e88c60981d073e9556ad8aad85a543627d730a99eb00388b1452be1e1029255d1b5ec4def0ee9f45f2a1ee5faf4cd8020f1fecfcf1cac5786516dd0b8174e4712df33f05eb04f4f2c6990ab57ec250dbff5dc7ad904b5b651b392cf324c506ffc808aba27270b177e54b969786387fa80b0703f2674522e565b46932f700947b25811956c1a28158e56247fc75b42547e1a06b494df299ac3965862ecc85724be2f70b8f9fcb23e4c9fab83e758ef5f2792f99d61ccd8e0bd6c91a8582bb61792eb951b65507fab87986a3fb2396a294aa6bdc0058a3e05adb6f5554fef15eb987450a7d41e332f43c48b80821cc8887e684d0d23407e9fec54530c105dff315be3cfdba63913e9cb84ea8912718f72d2f17bff2ea7d0779744ea3a6c1a2261bf7c6dff1dd786307b1d9fb965ad8bcbb48da7f4cce67f10cf787eec61446e6f00acebe5e49fe4e8b434036ccce48a79d6e6d47e8faefbedff09c0281c553233a24eab8e42af486347205667f537b8a0a23d4d88a10fd92ec95621c2424baf2aefa82de25a8943102225353af9084c17d62e102498bf76e2ffa795fcb1d8a83c852032988c8c5dbf719b7752dd119f8e8d765b5bf3910d9883556d88f46e0a36e661fbebf56371fff475774d9537788f657d020459060d69405ecabf90b953a3017ab362735b416b7eb63efbd905ac80134ce43a5267858682fe5735926bdb71d6e9433cff233f574019ca29979ba3b05c834e08c9c6b1f85ddce126b278943a1d8d7fb728bc717d88e8b9bc9b89a38ad8cf7554e57ce8a59933f335064136ece31db0ffc7e89d1448f4823f1d4c605315cbad68b1035f9943411d64b3dc9f98f2ace0665ef3884158d7b49872609b6a1ad2e84a4e5637f9b86302476a878d9a668e7b3c979b042858d84c2cb71fdbd02cee67ed0f06e0c9619005ed52475f6ee70a1e6ed4e80ea34c9042fdd8d6e66822619b0bad4242af63046ab99f2d719c0f08307282feb87bfd4cced5ec8c588af756a122604791c85b3b08a6bdae7f3ae787126e1e711b9bbf74ce821ad30dd1cd182f4831ace614f1d7192bc4202a5abf8405de2714a5c2263e723e8e71cb0314d076a4f9d803ecb3e1b222555db336abf19ea36939723990b81c93501ca1eed0db4d754156c21f248e3e09abb1654c0f2977597318ac3c6a24c47541cec9b545202ae440467879789bf0929d1c8dbc36e5974391c4fd1b2e3dca3fd6334f729a7e9c1f1e2f7b1f86430220b2a4d24ad678d1f621d496b317482c67f4f64342180e83482306abd3a0d7c4bd61257edc7d08c45c7cf3efa50d74fcc2d1dcb13645cb78ae0dd0c60dbd0cb85f531b0a88a6cdefedaae5a589dfc97c5ff157de13c95c90d1825c2d81d22f0f11219ba748231548fbaba367b3fd907601af09c64558f7abbb2d95540b335561805ac30f92f1ffb0abc48f5c57b07929f63d63aea7d11aeff97f24bd292783b7769c88a8a17510bc6c087bd7f8623b3f5759dddd18b3adf5f7a976a2c2985b67ad5cb3cfa359843dc0c092b230d5638a170f48318888e353d9b1089f3f2ab15a56e12d40a09e886d1a077f9dc88332c5983e30ccea4f84ee511a53cd4af80f547cb87a6d6cf00a25c4cb8facf4083fffadaa663fab1a4bddb7730a7a2fe70a7d22b92bd3365fd8fe5b20b02af4d82306d209d18894a81a61755fcc8d32e61ad9a09f6175b3d32631d7a196121ed571a52acfee75256b9f183e43d2df6dfcd210e6e78ee234a24489286c8684766a2e4bc620fd6bc4269b0248028c7cd954037dc8490e68bd5f676680933c38a09b76534a57412b21f49cfb5dfe073ecf6c1b22c913beffbdb0018d72e837a0aa75f669a402f513900816331cb3aa4433337ad1fd05d908c49fc61c1468b502623766dd82805a858ccb88dc7f6db6a7b417fe8f4e3739a2f11c8ec18aee56cab57dacffe8d8ac206571153d66f21b6c41aa45652ae5e17768dbee28579a9c9d5df304a2a4995a594e384d8f772b9daec17236399b5f1fa23ed4919540d02f46e444bb7fcef172d118667abd3e9199299380c8b5a3ee879dbf7a3f6e034a4cd7ab60b05abfe3eee400226f4540071cb5a851e79257dfa2395b9e3d953a02da95e6a6194a05dd3ad10a43258cbc3f185a355e2edbbcfbafc9d8dcfaf78f3be2217a4e40c65fa50a34be88d81574515939e5ad53d5b66561c9d1ffe47aa63393910e88d87b2410f1c2c90a40e31fdf15b982d975078b3fba3d46b54111eec01b5e41c3b97c80f6cc1e51cc4b7139b9ccc035c7a8e738458ffd777c7c3490feba0e582d31e4ccb1e5e1840bfc8840afab8ff24925239c71814da5762d8145d2ca13ce7ce9acbef8c2fa2b16d1d5d1ce3d5f35a96ab1ff68590da2d2760e5009ddce74350c4d48e390983b12286b56496f6e61a5af1260ec42137fa0c394c4be2f61bcd65660f3d4bb71dd44689088570797dfbab52d032a415be41a583400dfa400bdd851954cce0f4d43a77be518448d0a7ce1234bf321b06120e34180bd6c6a0d22586500d58e743461f33e70574bc925179517f165b11abe07e4baafb71a73781f67428ea594da9725710812ce8912f18de099bf52b30336750d93694fa6639c13a1254b2878ab7e53e1c789146b3cf4a2454171c58f6f796dc932cc0465e26d6bbc1ae34e7960a1f20467ca22a83d796a735ffb087ba1a39185997f70785045f5f8a2d92681952155cbb94a34e026fd57395ed6a287f18799e122f64e96c09f869c86ed3259edd5c93baee56c06a191d672c44a84829681a4c9e3a359bd1424dc1e9587eb0d1ca78484ee2a86d01a711bf23b7146d54c244dbb7cc03b14e4659ad45d69b65d739f9421a9cf5f9e8e7582f411ece45c603e21e54cbcb5478b615f2860e23d7602d8c7ab90801256960d8dfb1e08ff6d1c33bea15131ba94236485c7efc7d554a51ae07729faa6c3d01bd9f6f9aa5e47ce363553064225991f09a7a72aaf9c8d840d79aa9a4fa867f098ea428cd236c842845b4ed946c5069ca732f31b9116cfc42df235deb72d6dafd81abf91d148b04342a1d68f0e0dc6493c0242ee841bfa4e6aade268a94e8621e32f7af02e08d0bedbe696ed981a504e68c100b5dfcd6ea65343d5626ca01b6706572f83cf32c247555235604fe4261509bf185780fc7a641a9da1422452f53d166e013222096c5ac22db206240d50e3e8fdf5aefa6a09cf774b2f814e8e78642a1ef5964cc20f5b26620a3ff9c93d6d02aa8f415ad084e49b505a50930624a5ed06fe4ac1de7f8972899b40553e41b842d3e45c01edaaeee9782741d998b23bf32f4af4e2f226a0893548ab3ada4ad49de42b9c36685d9511dda1482e86a2938bfacae32dd14cfeb4e0bb2b47ac026522e14f436250ab0cb47799bf20928e2bb44c5af47152217ddc02ace585c190d5bf3f5d3e3766234768b3b9f94d8720c7d71cac0241371f20b378315bb84fa212459444b62896b45f12cdae2ff2034744e0be02727b6f3ce8142c86a166d29278c2c27212d23893743959ca0f82f811af8f7d0f135ffcae1e05a02710b29cb34b230f00da68a39e9da08dd70c4b14345e3b224ccc41826b8159587e15cfd55f17fac695e2d8a6afe5145210ff9c007acf43756ed9d5ed67169965440daa402a59820bac8625deeb271df767c5d73558c2c4451f55a2d739df2c94e4f77cee8d27c6d77cb4ab4065c634aadf07fac958b0578206188092c89bb6f71a6e0d660203e2b46bbd10a3d415c660813b4dae320ff32dff4842df7cdecb55c8db79c4c5f2b17c2c12d9c5f74c6e432ca78c5991acafb639079c7f34597ccbb9fc1ee6a63a6f7e475b9ecebb2caa5e0280f410403afc881126fce0d938aa6196e4e5089ffe77e3c9a3993b235ada5a0b3dcec4827a938254436b927be6161fe8c81d49314db1c26b832f5a3b08cbf818d05f38ce967aadff2ee339627a74476b6f169b52ad2f3bd82c89b038ced53ecadac5eb3c657f2a4a55159aee053759c250d3c215747e5bccefd6505181a43aa76860af8d30b7834dde8f9239bd44d00d9bd3382941b0b9e419cfaca6a11a5c262385e552a736cc7dc986ba9b9c284edad8d138365b5ae6d360e9057763ec0147ad74321bff1ae0ff3d8b902d569f51a0e6798f5684e3d78a0125fdbe5646e297a2643bf0c9120c611f04f0767081a6fe5771c72e2f90db427f6fea0456372e13e872b17a22253a61752cebcd701d55895a3d0675732c4bdb838797fd8da03410c7877334543ad2d84af5cab90f5d873f90ff6faa31b9f0c08bb98ed9e499d009265f4e01086a5dc4bcca3e8afe710d43c120014b143abf5417b59798753812676d626de0435b31be538bc6984ceb6bd021bd58640f27e13d2c9db91f276ef1694558e57194f18d6f2cec747e5721cb5b6a0513fab04fc86da6821e2fea3b1bdc58a007866463fd76359c2b3df0098861f608d4fd4d6dccaf566036afbffe493e76d95bf779c0c9c0a94e401c10d9200ef1fd9e8b9e0ab767251c76b74b5e0717881bc2421ada032d2cd85fcceafb2bda1490e153c7a08eb11c5f7ab6ab1b50bef920da8775b1a6e3c3023875cb5d418c214e84c56ce690e78219010183d0ae90c6f87f1678912b841e52f476b8e3790f9a9c4d65f5d066e5b200ed1717428a3ebbea911c59f7e2f85d0afde856b053cc180cf5787086a1b9638b856b254c838e47e1603c479c5bd641089ec032d6cf075c76025c683714d5479ebf1172a6f699aef64fd2f7817c3498bf199f253747c9868e8a3323576d109e87278d3a4f4aabbaa2d3ba655e3ee740efe4889421968ae2e402a4a5904c1a0fe5c4ea133ec46337d1354a6c67b821c4f15e3be719b09a0248eec065d59db996f99fd1b05b70986fa17acf43214895f6b74623fc1b5b92eab0350402c4be1cfcc97f00d737115f6009f3988a841e5837d6fb16eef9f62980215725e26c8507ccc889ac61dc94fef0536a83d04de5ce73124657a0d581850a564ef3fa402b2cba0c115abdab8b2b73c69d0677f23185faa2776d98be40d1b08308c0bd253a5268471f442f74d43c4ec98727adaae826d65f48f5788ad5edcb4e66e3688377df5de9061c6076f7968ecfaa66973b1f5fdb0247be7f09d687990ea0818ce84207fe27990e38f5307e28d49f92ad812c19dadd02160e47930bcbbbfde7e524b256ace87869b0b69903fd40d455ffe75eafa5c68e11d57f0ef620803544625da4d4cf7e00859ae882f5f2f7ba83c1f344ba961b67f6f38ba6ea9d839c2b1f0b9eef1804e7206f17e7a442f2469978003af3a918077f0a6fa91758350730f6572364c86e76bb0528286d02dc18d0f6ac2d3e461ce49a7591eb96fc9edf088e97b50adaf9d981a5a7fd09a0dca869cdfd7d480519d8fc45e9859fbc651a54a706b35de575692278f96d4a028b0a8e8254190d6490bcda916100f58ac39ef41e3e927a3fe750ccc6171b9cd63a54df8484178632525fcf0fe9868222cc25a0370e20c160b8195f00f93892723a2afa797fd0af12ec1fefbe8cc1587b2e4d00295f3a8f955038376281d5dafd3bf83574310b036f4ba8bb408fbdf57a0fad3c8d14bca63e54d800b8dc08bdfc60532cc5ee923d93d91d25ccd2b219847d3adddb3f03d341bda8a"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10}, @ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '&&[\\)!]*\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_WOL_SOPASS={0x1004, 0x3, "5d5ee3d2eb736600148e5576f31f40d158c763f01a257ac25f3252e4f2fafa0d19243ad1d6a8b050a58bfd2ada278841b73e825b21d41daf9258afad82fb3d238e622303f6492b910220245faab117600eeee55b0b2386f9119541f50c8ec0058ec7568192248164cb5246644679c7487b87603570a9f6391cc9ce1e00517f680652cd7462b0d40daee141fd85f0748dea053d3a6e9d949f31d8b5923263ba4afb837665e31eb09902b6cab96d39863c001579fe789bcb4e3611de1f1d15d93386666ac354667bbb53260657e71eb4efbdf9fdce2209cd0c7ded4927d2dc8a645b0b9418ced84b59dea007f58bb697fb38218f3251fdc7ea12aa0e0f3ec0c3a1769ab9b817044ec25d9843aa7991845a1f2ba78b2b092dd5c9027edd5f6f70ed80f65f7e4a9af514cf2ab9efc4cace7a5fb6b3fe306f02ab16f630489a455c66990dd1a9eab8a8bed7430098d2c38b136d9a30cc1a0758833d3b0f664294d8ba5e83fab2bc7ddd545cb6e3393d4d07232ab4c3467f2b8da4908eac49d42885dd54fd1d504404321d5dbe7975b5fe5c7097c751c95c2fc55cc093b2439379996ee3ee88b3638bfb4472f05c0dd54313f13eb60f2b6edefd0739fc89928bb903e9214d95848b3927aa153c44aa7d0639b2711839c6917f87130327d3e40ad75ce80b98832232047fe6e391ce61bbb109875425e348372806f5df380fcb92cd5a459319423a0f3e2bd574eaa1499a264f4903e03f97047428f92178612e12bfedc7d87d15f6ea8daee15c3fe4a179d2492d0f92d3b94e5f4871b22d356cd885716f92a161b634a4fd5c4615d07ed5f0340fb5a1d25371dce77f747252cf494881e971516c1b4080076d1293b2038682653182c27315d7373f3c87af9bd634375b204864859aef307b322f8eb986705d6a3d1cd6583f2562b3c5750d6bfc70f222ead2baca481288c0c87ce4f25cf5aad9a75cc84994d6ea840cd9b4e5689c9648a2b89437a14ff042c9597f60d00c52017e718283062e82734374e35a44fcfc6f3f053e8c9b76668c36f5452559d47f6546ed48d2f1bfc6a4b0be982301c476fb050bcb8ac667e8c208aca9f27d0418095a5b0c17bbd6da8d62e75209be5e735ad6af6ea494fd7f307b1f27cf484dc7afabc0d64c3800b89a2bcfa666b77d0436a538a3aaa2929ab92712ba23c0227080a99122d3b3b4fc8e100755250f3f9992aaa96e5aea58bf9e4518b81ccb60cea2a11518dc97246d56d17090701272f670e527e140beafcd4b0e67409e60a002b2bad6fb63b609f1db912960d753cccdc4034aed8042f7cd208b0876a53dbffc058f840387e54f6b0bfe038c4b35f1cd64382a577a0611b33ee1c3bdee22b6a3ba73567cdab7cddc94d35806c935f89230567b8ed2c70a619fd001ed581043586c07075608e8cb3bc34dc9a789b8d26eed483576fb357cba0a16a01aa5f944d86839bc1af6f9a564effb04353c7d3607022ba8f191a3f4fd85a29e2bfd87c59726cbeee8343513859233a2f30cda20a9b0ba4343f87e3d7f9e7dbc9d072268878c8bca1bece2cb988f985f2285b58d7db513c3d35de2f1e0d102fba89fbf368fe2968ae9065e5f80b8bfbd79e62f8b4d957b1e2a0fc725d24eb3105532e9e4bc237f78fa9b8f1ef83efd3c9cac77e51272455b38b2985a074e22a7f9deac4400dc79a51d41f21edf4d94fd5b45ef8541e577e1f01ec76657d91e91b58fd1b856fee6fb9e6c513d51f0c6905f93225a11c402d8dc16c9e7480ec362118c399262cf4c2dd3cdf729be2615dd6ce9c90365433fc1d29e1b718b034031bc047e62ac154a117e0ad22001c7e4cb8682418f8d7a21cef4bc45e9e82e497b650648d0378673ad2bf7bf256840f985f970f98434d72b0a7a84aa9ca0bc8878c84ce15986f09d021635b845e1305d15e09fcc99648d975655e153ca8da03b41519f8ace97d81020da8f33bd7e42b8550467fd33906592042e7d04dd8ffcd8e78dc234f63af856516b620f7fc0fe1d59770cb0ed1b615c23239d2e2ad71f51b75f5ccfe766bb03672eeb6694e9175578cc091e45d6ab85e8ff0899b1bd24654d1a26a5bd28e2fa8fbd884335bc284aae01c702c7283c25c83c5d1c1e885f57072fbf34250dcb9bfe3c921fbbc3da37243965590657661a3aad16c5c54a492f8b82aaa9c609f5c74249b7ee867d8a07cc7df2f54bc7e540a18b851c855ee28ba2b9a939e54a01d09da8ab89217ebc864f449bfeda018e020280f30221c53842e7de0ab352f03bde81126350e65fed862f01801f4f47cf2514fe4cb27350f8d177bbd9e3a5019e4ab24c4e87b8ba89a5717eced592d0c28101b17d84314220e1e4528c2c95595c547b3964908970c39fcbf367e3dda6f43c994ae99f8e1e3dbbbb619975377aa62c77100568c6b9707f733d15ea4d9c797ed7c411dd4666ec12fe178b3fad286c366fee5e681a6a7ce2df3449b2f352a301259e85ae16836f399fe1ebacbeeba8b42064cb7b155d869bf4b4a6a546975226d3b0d4ed2609e6813102e6a959e3d00b387ba035a412df478ad17130ebac80d6b861101d45609b1bbd5c4eaa4b49ade0de0eddc26d762573ea35dc034aa94ddaadb37293d22f421e98dc7e2e61aa4dbbd5d0771dc047da16aed1a70d199530fdb0202dd5dbeaa01f42347fe2cb6591e0a41fd06cb43a35c357fafd69711f226c3e6f91386fe703050b77c69f0d184470adf971a3ec723ca6da544b10616c8566cf00e4013145f83c6718d5c169ce44f752cf022e81be7b539b5a2e33d9c511fc815963d0f667f5b2d012c7e38126ad9a5966f8ce5b881f41176515bfcf13ba7165ecf23cf71743636fa16840ececa9f46c88ad056e14a0c9b1ab91d8c82047ccd7bd92f65335ae3efb51838d0b029bba55bf1769d73d5e5e4d3a202c800568b90b411551f2c9782c61b1772f58cda70f9441a445da6eaa4a1d855e16d3886f761c3b2afc4bcdce2ca2aa69011116444b163fd22d56ac676658fe358485c7c48869ec953d670a776698597a6e160f5d7246670fb45266f26d9c3429cba9b1a5336c293b56ca96c5d77d0034e2b372f0bf15eaf8b2b62b6e5249a676a1a09b1a46f0a0fb926824b42484e4079e009d4a06793350ca611ecb283ee837250839f459f69e81757f798ff30e743ed334770fc449d0e01c8a800c67309fe759b444a7af4bd7ea29117c6a0393a392aa192c6735aac97d7cacbbb70e57d78546e7e128423f56283c23abd05c2a4b21c9536e4dbfdcdd2659afc3b4227b103bd12a8581727e669c5dcfc44f5c75d979ce54ed3bd7a769a930bc6fab5760ab636a82fcceccae1aefbbc94aa8492b08321d027c3c8fdbe8b74059d268c2e0484faf99633c18fceb2df9373d2e98693ea88f6756d3fc0409213a50465101370a89651a96e616d357855514ed81afc9ebdf75145791844149eca8cdf009b00c59047e8c004c9d73877dcbe2f94a062ec7d4d74bee57f01668bebcda423a62f52cf22134319bfb27a7082cb5013e0e5dbeca038a9a199978c70a35b0b43ce7ee0cddaff257e44d33da0950038d8518def73ef472f8b454a8bd7ad69b4e224457dfb3f4179e9237368ecbaec1a5f71f272d98ee142cd97a114185a9fb9fff6bb6587efa8e646bce1840ae1dc0a576843442f3bdf7d71fdad97734f8e6ee0667c28a9949e10f5fa0c49aa6a147ffd31bf9c8eb50572bf13b555c1f5ed06a1359f5bde1fa3e4a48144d6dde0a750810641464d55bb1341d92d813540536969b7cd3896a2894d00fde3d195b1404c873b3b2af3ae233c2a67b58789d5fc3bf379e352801b2fd83cdaec06c4538769b1cab5a765b1694d14c63dd45b5d4784a5fa304644c5a9f0f76c0ddaca526c751a9d3bb709a083092a3e262365c5a92a86eda43868974b430cd85c2b31dd5cc768bb9e822ee9122e217f9382c8dc07c71e0cebe5598df908c3fa5f5a44fe3fb4f72a6295e7eb49162a50c6a86592ccd8dce36075f52a0270985cf1993b704228b930edff42bb3729e29b49ff85d389dcc0ca7241c9ca8019f866bb2c3a0467550f19a0a5435b2754945096a4216525cff0e2bf27e0ed3317f6e30917d98430aa0c63ea4168634698b0924f274c68ece292a8b744f35ffe132a79cf8747124c986f311554c58bf16d0a8b648e6491783af20d35e161abcde028e5495483366a96c0863a76746042e3a13a89777ac9f0adf5efcf4aa26f579d1ea484e0a3eec12a6e3c8e2acf3b4b0720c7acafee7f56c1952e1de45d5b59e16a9773ae88b7048135838c622fc9ecb46b40eceaf5ceac5d6269813eda17b926e7f8a80b6f870b9c6780f96932ce3cde77d560db361292536b268d31b80b2e52d5dccb373b20f2d0b9c2bf4d163dd3b41a2fe9623c867b85e72811abda41e0a56ec5d8fa84961c622e5eb9e63110ea0b6f32f282c9a3c949795487abd484c5008817b9835f1d8f8541e35588a6d23ff0bfa8071162794e2090b7c9622111599d45a2165a091863444ae5fce680d2dd7000d80132d6d5812cfedb59cee9639ce75706d50ee88911756cb1a9b4a6671e7cf3de4b0b4a603d1bcc5fe208862844e764f6116768122a71a437260c906d72a9763c25ca30f7583ae22b6524dd58785bf5149942512ebbee0cc059018270977449101f0d7474f2f80b28d60c8d4fa2299f5747b14e7d386e282810e6f03364cdfd25ccf368a70ba186a7d73e3edccf344a85a03b2d9287acf096ed86d23b045890fc0030fce44b79ce6e0b27e46180d08c665b2b4f995dd43185ba4094fc600214f248a1c68c5d3a6f1a3403642a19ae05ce8d3780f958b073ebfa7f872daaef514eb01f161be66c78a2595aa2b952c85db1313281a491f7518eb71c2d583b3c289f91ac2d82f5340ecd37b6a100fcc5d6cbf43b473e2a9046af70ad2a00c83137fdbaf6641e4902581be98aa1e98f155ffcf6249f8b0a397fa6914a6bccb10579b41d5dd04504cd2a6b7c296c9e70ad1345c37cdc7d9fb76bf7802aa0cec572e769a30de3d969bdeb32b1cabd4060b06992749243ef0bb38e359f5a6cc033536428ceb27b3f1b2e5de762c34647d08362720670e239c179de14c2a66989e3effbe7259eaa84641cdb0e8b3ae23c2c7ee0149a88e8016580fd4ad02af1c115ec11795140e9fbf6b04db2c484684e13580abd0da828c218c4bb687376d1a0f891837699c34a135cc3e6f11da28ab57070cc1c85fb3018fca02f27ff7f88866d6ce837237dc90d3a892f732a915e0e0d99f1f18a263239f51382b8a368d79b1c5c08d95ecdef0077a3e4de4b5531ef114048e1711a03f3939ae5bd94906ce1ea3ebd571e589dddabaaf14918c25bb559f6b7901e167643895fb327420cfc4a0e818514889a425d9a9e92b5c6799e4da61c89bc788b86f54ec66f84f75821cbcd648ea4adcf0280fad803603e2572b1b7a849758026d495b0cf5583f3f320c8e156cf884c47784a64a3a53339900ee1d5d904953976bd566260ed34100dbb79a0659eff121efdeb0960b9c3575d7a93fab533592aafce126a1ed85ea9b4b7dd0c007dc7b0665f3473af6c9296b25390e5331723a1c755d1c05d5ac477ffed8f0e016ccc5d72df7b82bb1e2a5fd3d10956f9d33362630716d16c1ed9c3bf8dce10129c4aa340a28f64642dc6cc1782f149122a8600dfb747c0eb8fef5dc272dcde629f08f09725fa501c3d4f084749bfaa37effe99a00d3fd50d29a865462a86f18296493c3ba96b87981ceaedf30de90fe54d795"}, @ETHTOOL_A_WOL_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_WOL_MODES={0x370, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x90, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '@,[%/]!]]:.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/snd/seq\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_VALUE={0x3a, 0x4, "c52bd37b8f4705449b3442820f384107f7e75ae8f1a40b043b58e1a4508beac373ed05010e2bf797894df9b96c7cf8b5ec6d04d6afd5"}, @ETHTOOL_A_BITSET_VALUE={0xc2, 0x4, "f9e747fed671ae5b7bbc3a777065f3c2a7ec17a8d5993f53916026cdea9aa9022fb19252d47765fa6948671aefc3814d0ee89bb232a129eed73e29af720991b80b8cea5c293e6f8e1a1f7d47e9085c55640c45e28f03b8fa8964bfa3e52a8fddf1006cecbb0ed04d44384fdcf37d21210857653b37f92be2aebef7be3cad3dc8f8cfd381653208db5b6436d4bdfe59fac38c18dd4427ec91caf7dc89805f909b183e2900041f0866ab0b26363912e9dcea9e03a8bbf3cc361667c54ad7f5"}, @ETHTOOL_A_BITSET_VALUE={0xcc, 0x4, "7d3ac22edc8a994009f9a14a0ffc5d17673799ea3c7ce4403c771544acd3e2761220dda02bcd11cc7d6a6c73c6f9ebf7bfe86a14b90c20d4bfb61bdfe25d0c02274c12059a83c5cce233c2563cf8d0e2fea96eff2e16428ed919d50ceb0c80da626c51b9d45f0e06fdc92ba75706468f505b46430d4b7e9622952b6f2eb233c97dd0a1a25cfbcf23438c17a38e24d97e30ca0a1737056a28e50b44cf6b2a7a7be94d99e6ac367f96acff41ef27ba30be770c8eed57f78f2e82dfc36ef532d1970f396a70bde8ade3"}, @ETHTOOL_A_BITSET_BITS={0x94, 0x3, 0x0, 0x1, [{0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, 'lo\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x769}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '(&[\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '/^&!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, 'sched_switch\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\xdd$*\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x183}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '&(\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'queue0\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x63, 0x4, "df6e7b3241caba7d555c546e05e207e41b4e98ec2767203681a65078a46967ecf64a108bd622afefdf2685d3717cdb8ed9ceebbb82d24f1529a02a46d3046a30550270a0ba0d0435dc06f835bf117ff1032dd15690e50438382841aee6981f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x14, 0x5, "d307df1a72ed42db2d863dd5f32c445b"}]}]}, 0x2638}, 0x1, 0x0, 0x0, 0x4044}, 0x0) socket(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3, 0x0, 0xff}, 0x18) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue0\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000300)={0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x9}, 0x8}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') socket$nl_route(0x10, 0x3, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000035c0)="5c00000013006bcd9e3fe3dc4e48aa31086b8703340000001f00000000000000040014000d000a00140000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x240000c0) 1.000561775s ago: executing program 8 (id=9392): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x109}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000094000000000000000095"], &(0x7f0000000580)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r1, 0x21, 0x85, 0xcf, &(0x7f0000000000)="fae68670fef1c45ff0634fe72a6253b4357c978887379648e34b8e43761f35000437ab851cde4821ce97abc68f6a1c3593e2a7a267f78fff0e9e1743899a7dc5c1d2ecae353bd4bcdb61c053b1d7b1223331d664596d93a54d408700062455bf71027a99387a4c190aa0098ed6ed8951ff86c092399a8d11b76c5e00"/133, &(0x7f00000008c0)=""/206, 0x1000, 0x0, 0x1a, 0x64, 0xfffffffffffffffe, &(0x7f00000000c0)="d5231f25b5f85be12036902ce1a29123e3c1d41aa6d9c06ff230c473bf3c", 0x0, 0x8000}, 0x48) 965.831788ms ago: executing program 8 (id=9393): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x8, &(0x7f0000000080)=[{0x0}], 0x1, 0x0, 0x0, 0x5}, 0x2004c000) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 942.7087ms ago: executing program 8 (id=9394): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffbfffe}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x12, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{r0}, &(0x7f0000000bc0), &(0x7f0000000c00)=r1}, 0x20) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001a0001002bbd7000000000000a000000", @ANYRES32=0x0, @ANYBLOB="040000041400030007000000000000000000000000000000140001002001"], 0x44}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='kfree\x00', r3}, 0x10) gettid() r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, 0x0) fcntl$lock(r4, 0x6, &(0x7f0000000200)={0x1, 0x3, 0x2, 0x4}) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x3b}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xac1414aa, @in=@loopback, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@loopback, 0x3c, 0x4, 0x0, 0x0, 0x2, 0xa}, {@in=@private=0xa010101, @in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x19}, @in6=@private2, 0x3c, 0x4, 0x0, 0x0, 0x8, 0x8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 913.894493ms ago: executing program 8 (id=9395): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r0, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="440000001a0001000000fbdbdf250a80"], 0x44}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$inet(r3, 0x0, 0x0) r5 = accept(r1, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e000000850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x18) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 870.723587ms ago: executing program 6 (id=9396): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) io_setup(0x6, &(0x7f00000000c0)) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00'}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32=r3, @ANYBLOB="05002f00ff00001c"], 0x24}}, 0x18) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7, 0x2a4, 0x8, 0x0, 0x4000000000000005}) socket$kcm(0xa, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x65) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 682.561455ms ago: executing program 6 (id=9397): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000400000008000000d9"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000480)={0x2, 0x3, 0x0, 0x3, 0x13, 0x0, 0x4070bd2c, 0x25dfdbfc, [@sadb_key={0x3, 0x9, 0x80, 0x0, "1cdc0dca1d9f68846960e56de42944af"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0x7, @mcast1, 0x80000001}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x80000000}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e23, 0xff, @local, 0x1ff}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x70bd29, 0x3506}]}, 0x98}, 0x1, 0x7}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x1f, &(0x7f0000000000)={r9, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x600}, 0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000b00)={0x9, 0x8, 0x200, 0x9, 0x0, 0x80, 0x30, 0x2, 0x0}, &(0x7f0000000b40)=0x20) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000b80)={r9, 0x1000, 0xffff7fff, 0x4, 0x7, 0xffff, 0x9, 0x800, {r10, @in={{0x2, 0x4e23, @multicast1}}, 0x6, 0x8000, 0xf4, 0x0, 0x7ff}}, &(0x7f0000000c40)=0xb0) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f00000004c0)=0xae8, 0x518, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r2, @ANYRES8=r2], 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 377.598564ms ago: executing program 9 (id=9403): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) io_setup(0x6, &(0x7f00000000c0)) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32=r3, @ANYBLOB="05002f00ff00001c"], 0x24}}, 0x18) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7, 0x2a4, 0x8, 0x0, 0x4000000000000005}) socket$kcm(0xa, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x65) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 377.115194ms ago: executing program 3 (id=9404): seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5, 0x0, 0x0, @void, @value=r0}, 0xbee581e7) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r6}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1801000000000800000000005e002200850000006d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x707}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='kfree\x00', r9, 0x0, 0x20000000002}, 0x18) r10 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r10, 0x0, 0x0, 0x9c00, 0x80000000, 0x1b) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x6, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x0) 168.120005ms ago: executing program 9 (id=9405): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4002, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f00000002c0), 0x220, 0x100, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r0, 0x1, 0x53, &(0x7f00000000c0)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000140)=0x28) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2, 0x0, 0xfffffffffffffffe}, 0x18) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x200, 0x0, 0x11, 0x148, 0x340, 0x0, 0x450, 0x2a8, 0x2a8, 0x450, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x4f, 0x7, "72f6daeff0a9c6294e211d2d88fe6dcff5d0e552201da3b7a1fdb30dcb59"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x260) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r4}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095c9c3c8742bb0a7c9a17928583752dbe87a14b9432cb472a390d1bb6b00d8a49a1883cfb390f84b6f65db0855c4b12c146ddf81762d03a5f383f3b1d6090cc030293d"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r4, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) 56.074855ms ago: executing program 9 (id=9406): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f9cf02e, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) io_setup(0x6, &(0x7f00000000c0)) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00'}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7040010000000f00000008000300", @ANYRES32=r3, @ANYBLOB="05002f00ff00001c"], 0x24}}, 0x18) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000b40)={'\x00', 0x7, 0x2a4, 0x8, 0x0, 0x4000000000000005}) socket$kcm(0xa, 0x2, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x76, 0x103381) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x65) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r6, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) 0s ago: executing program 8 (id=9407): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0xb, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, @perf_config_ext={0xa, 0x6}, 0x104b0d, 0x6, 0x0, 0x1, 0x8, 0x20005, 0x9, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = gettid() perf_event_open(&(0x7f00000000c0)={0x4, 0x80, 0x9, 0x6, 0x6, 0x0, 0x0, 0x9, 0x80032, 0xd, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0xb80e, 0xcd0}, 0x1001, 0x3000, 0x100, 0x8, 0x9, 0x70, 0xf, 0x0, 0x8f5, 0x0, 0x9a}, r1, 0xb, r0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000040)=r2, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)) close_range(r4, 0xffffffffffffffff, 0x200000000000000) kernel console output (not intermixed with test programs): mblk_io_submit option [ 441.708119][T29146] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.831363][T29155] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 441.893160][T29158] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8935'. [ 441.954533][T29163] loop8: detected capacity change from 0 to 1024 [ 441.966659][T29163] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 441.977611][T29163] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 441.981226][T20240] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.996679][T29163] JBD2: no valid journal superblock found [ 442.002476][T29163] EXT4-fs (loop8): Could not load journal inode [ 442.011048][T29165] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 442.029704][T29163] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 442.050063][ T29] kauditd_printk_skb: 500 callbacks suppressed [ 442.050081][ T29] audit: type=1326 audit(22728.065:27751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29166 comm="syz.3.8939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c53b2efc9 code=0x7ffc0000 [ 442.086522][T29163] loop8: detected capacity change from 0 to 512 [ 442.093544][ T29] audit: type=1326 audit(22728.065:27752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29166 comm="syz.3.8939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f9c53b2efc9 code=0x7ffc0000 [ 442.117209][ T29] audit: type=1326 audit(22728.065:27753): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29166 comm="syz.3.8939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c53b2efc9 code=0x7ffc0000 [ 442.141273][ T29] audit: type=1326 audit(22728.065:27754): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29166 comm="syz.3.8939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9c53b2efc9 code=0x7ffc0000 [ 442.153016][T29169] loop9: detected capacity change from 0 to 1024 [ 442.172598][T29169] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 442.183653][T29169] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 442.200097][T29163] EXT4-fs (loop8): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 442.214335][T29169] JBD2: no valid journal superblock found [ 442.220322][T29169] EXT4-fs (loop9): Could not load journal inode [ 442.241061][T29163] EXT4-fs error (device loop8): ext4_quota_enable:7132: comm syz.8.8937: Bad quota inum: 2, type: 1 [ 442.243133][T29172] loop6: detected capacity change from 0 to 1024 [ 442.278412][ T29] audit: type=1326 audit(22728.285:27755): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29166 comm="syz.3.8939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c53b2efc9 code=0x7ffc0000 [ 442.302072][ T29] audit: type=1326 audit(22728.285:27756): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29166 comm="syz.3.8939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c53b2efc9 code=0x7ffc0000 [ 442.324930][T29169] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 442.339380][T29163] EXT4-fs warning (device loop8): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 442.339487][T29172] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 442.365027][T29172] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 442.375892][T29169] loop9: detected capacity change from 0 to 512 [ 442.384652][T29169] EXT4-fs (loop9): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 442.397987][T29172] JBD2: no valid journal superblock found [ 442.403779][T29172] EXT4-fs (loop6): Could not load journal inode [ 442.423301][T29172] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 442.436698][T29172] loop6: detected capacity change from 0 to 512 [ 442.443401][T29169] EXT4-fs error (device loop9): ext4_quota_enable:7132: comm syz.9.8940: Bad quota inum: 2, type: 1 [ 442.443596][ T29] audit: type=1326 audit(22728.425:27757): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29166 comm="syz.3.8939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c53b2efc9 code=0x7ffc0000 [ 442.477800][ T29] audit: type=1326 audit(22728.425:27758): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29166 comm="syz.3.8939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c53b2efc9 code=0x7ffc0000 [ 442.478509][T29178] loop1: detected capacity change from 0 to 2048 [ 442.501341][ T29] audit: type=1326 audit(22728.425:27759): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29166 comm="syz.3.8939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c53b2efc9 code=0x7ffc0000 [ 442.532160][ T29] audit: type=1326 audit(22728.425:27760): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29166 comm="syz.3.8939" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c53b2efc9 code=0x7ffc0000 [ 442.557802][T21357] EXT4-fs (loop8): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 442.566924][T29180] loop3: detected capacity change from 0 to 128 [ 442.568171][T29172] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 442.586126][T29169] EXT4-fs warning (device loop9): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 442.591047][T29178] Alternate GPT is invalid, using primary GPT. [ 442.607297][T29178] loop1: p1 p2 p3 [ 442.626459][T21377] EXT4-fs (loop9): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 442.638291][T29172] EXT4-fs error (device loop6): ext4_quota_enable:7132: comm syz.6.8941: Bad quota inum: 2, type: 1 [ 442.642905][T29184] rdma_rxe: rxe_newlink: failed to add lo [ 442.668162][T29187] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 442.678272][T29172] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 442.715457][T26219] EXT4-fs (loop6): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 442.732188][T29191] blktrace: Concurrent blktraces are not allowed on sg0 [ 442.744666][T29192] loop1: detected capacity change from 0 to 512 [ 442.790457][T29192] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.790779][T29198] netlink: '+}[@': attribute type 10 has an invalid length. [ 442.810372][T29198] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 442.842001][T29204] FAULT_INJECTION: forcing a failure. [ 442.842001][T29204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.855410][T29204] CPU: 0 UID: 0 PID: 29204 Comm: syz.9.8951 Not tainted syzkaller #0 PREEMPT(voluntary) [ 442.855439][T29204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 442.855452][T29204] Call Trace: [ 442.855459][T29204] [ 442.855466][T29204] __dump_stack+0x1d/0x30 [ 442.855490][T29204] dump_stack_lvl+0xe8/0x140 [ 442.855597][T29204] dump_stack+0x15/0x1b [ 442.855614][T29204] should_fail_ex+0x265/0x280 [ 442.855654][T29204] should_fail+0xb/0x20 [ 442.855673][T29204] should_fail_usercopy+0x1a/0x20 [ 442.855774][T29204] _copy_from_user+0x1c/0xb0 [ 442.855806][T29204] memdup_user+0x5e/0xd0 [ 442.855836][T29204] strndup_user+0x68/0xb0 [ 442.855925][T29204] __se_sys_request_key+0xea/0x290 [ 442.855964][T29204] ? fput+0x8f/0xc0 [ 442.855987][T29204] __x64_sys_request_key+0x55/0x70 [ 442.856046][T29204] x64_sys_call+0x1d98/0x3000 [ 442.856069][T29204] do_syscall_64+0xd2/0x200 [ 442.856086][T29204] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 442.856114][T29204] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 442.856221][T29204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.856249][T29204] RIP: 0033:0x7fa1eb16efc9 [ 442.856268][T29204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.856291][T29204] RSP: 002b:00007fa1e9bcf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 442.856315][T29204] RAX: ffffffffffffffda RBX: 00007fa1eb3c5fa0 RCX: 00007fa1eb16efc9 [ 442.856347][T29204] RDX: 0000000000000000 RSI: 0000200000001ffb RDI: 0000200000000040 [ 442.856424][T29204] RBP: 00007fa1e9bcf090 R08: 0000000000000000 R09: 0000000000000000 [ 442.856439][T29204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.856454][T29204] R13: 00007fa1eb3c6038 R14: 00007fa1eb3c5fa0 R15: 00007ffe72660e98 [ 442.856475][T29204] [ 443.104870][T26711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.266468][T29220] usb usb7: usbfs: process 29220 (syz.1.8958) did not claim interface 0 before use [ 443.277092][T29218] loop9: detected capacity change from 0 to 2048 [ 443.339760][T29218] Alternate GPT is invalid, using primary GPT. [ 443.346358][T29218] loop9: p1 p2 p3 [ 443.375757][T29227] loop1: detected capacity change from 0 to 1024 [ 443.389597][T29227] EXT4-fs: inline encryption not supported [ 443.396630][T29231] FAULT_INJECTION: forcing a failure. [ 443.396630][T29231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.410003][T29231] CPU: 1 UID: 0 PID: 29231 Comm: syz.8.8962 Not tainted syzkaller #0 PREEMPT(voluntary) [ 443.410030][T29231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 443.410043][T29231] Call Trace: [ 443.410050][T29231] [ 443.410059][T29231] __dump_stack+0x1d/0x30 [ 443.410104][T29231] dump_stack_lvl+0xe8/0x140 [ 443.410130][T29231] dump_stack+0x15/0x1b [ 443.410195][T29231] should_fail_ex+0x265/0x280 [ 443.410266][T29231] should_fail+0xb/0x20 [ 443.410286][T29231] should_fail_usercopy+0x1a/0x20 [ 443.410312][T29231] _copy_from_iter+0xd2/0xe80 [ 443.410395][T29231] ? __build_skb_around+0x1ab/0x200 [ 443.410428][T29231] ? __alloc_skb+0x223/0x320 [ 443.410512][T29231] netlink_sendmsg+0x471/0x6b0 [ 443.410557][T29231] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.410593][T29231] __sock_sendmsg+0x145/0x180 [ 443.410623][T29231] ____sys_sendmsg+0x31e/0x4e0 [ 443.410751][T29231] ___sys_sendmsg+0x17b/0x1d0 [ 443.410809][T29231] __x64_sys_sendmsg+0xd4/0x160 [ 443.410851][T29231] x64_sys_call+0x191e/0x3000 [ 443.410898][T29231] do_syscall_64+0xd2/0x200 [ 443.410921][T29231] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 443.411016][T29231] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 443.411052][T29231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.411090][T29231] RIP: 0033:0x7f38ebeaefc9 [ 443.411106][T29231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 443.411129][T29231] RSP: 002b:00007f38ea90f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.411153][T29231] RAX: ffffffffffffffda RBX: 00007f38ec105fa0 RCX: 00007f38ebeaefc9 [ 443.411170][T29231] RDX: 0000000004000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 443.411185][T29231] RBP: 00007f38ea90f090 R08: 0000000000000000 R09: 0000000000000000 [ 443.411256][T29231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 443.411272][T29231] R13: 00007f38ec106038 R14: 00007f38ec105fa0 R15: 00007fff268086a8 [ 443.411293][T29231] [ 443.613101][T29227] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 443.637114][T29229] loop9: detected capacity change from 0 to 1024 [ 443.649748][T29227] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.8960: lblock 2 mapped to illegal pblock 2 (length 1) [ 443.672764][T29229] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 443.681826][T29227] EXT4-fs (loop1): Remounting filesystem read-only [ 443.683814][T29229] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 443.702547][T29227] EXT4-fs (loop1): 1 orphan inode deleted [ 443.708858][T29227] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.721852][T29229] JBD2: no valid journal superblock found [ 443.727607][T29229] EXT4-fs (loop9): Could not load journal inode [ 443.745477][T29237] blktrace: Concurrent blktraces are not allowed on sg0 [ 443.752875][T29235] loop8: detected capacity change from 0 to 512 [ 443.762781][T29229] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 443.778408][T26711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.788708][T29237] tipc: Enabling of bearer rejected, already enabled [ 443.801676][T29229] loop9: detected capacity change from 0 to 512 [ 443.816928][T29235] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.870748][T21357] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.878060][T29229] EXT4-fs (loop9): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 443.931449][T29229] EXT4-fs error (device loop9): ext4_quota_enable:7132: comm syz.9.8961: Bad quota inum: 2, type: 1 [ 443.953726][T29229] EXT4-fs warning (device loop9): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 444.007790][T29253] loop6: detected capacity change from 0 to 2048 [ 444.029132][T21377] EXT4-fs (loop9): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 444.069766][T29253] Alternate GPT is invalid, using primary GPT. [ 444.076090][T29253] loop6: p1 p2 p3 [ 444.217307][T29271] loop9: detected capacity change from 0 to 512 [ 444.230767][T29271] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.332123][T29277] loop6: detected capacity change from 0 to 1024 [ 444.343529][T21377] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.357513][T29280] blktrace: Concurrent blktraces are not allowed on sg0 [ 444.367193][T29280] tipc: Enabling of bearer rejected, already enabled [ 444.419039][T29277] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 444.468775][T29286] loop9: detected capacity change from 0 to 1024 [ 444.475742][T29286] EXT4-fs: inline encryption not supported [ 444.482166][T29286] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 444.494531][T29286] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 2: comm syz.9.8981: lblock 2 mapped to illegal pblock 2 (length 1) [ 444.511033][T29286] EXT4-fs (loop9): Remounting filesystem read-only [ 444.517862][T29286] EXT4-fs (loop9): 1 orphan inode deleted [ 444.613335][T29296] loop9: detected capacity change from 0 to 2048 [ 444.659522][T29296] Alternate GPT is invalid, using primary GPT. [ 444.665983][T29296] loop9: p1 p2 p3 [ 444.720549][T29301] netlink: '+}[@': attribute type 10 has an invalid length. [ 444.723845][T29305] rdma_rxe: rxe_newlink: failed to add lo [ 444.727930][T29301] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 444.767445][T29309] loop9: detected capacity change from 0 to 512 [ 444.817779][T29317] blktrace: Concurrent blktraces are not allowed on sg0 [ 444.829884][T29317] tipc: Enabling of bearer rejected, already enabled [ 444.921396][T29323] loop1: detected capacity change from 0 to 1024 [ 444.921829][T29325] rdma_rxe: rxe_newlink: failed to add lo [ 444.928850][T29323] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 444.944595][T29323] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 444.971029][T29323] JBD2: no valid journal superblock found [ 444.976959][T29323] EXT4-fs (loop1): Could not load journal inode [ 444.988105][T29323] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 445.008454][T29329] loop8: detected capacity change from 0 to 1024 [ 445.015969][T29329] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 445.020093][T29333] loop3: detected capacity change from 0 to 2048 [ 445.027062][T29329] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 445.043231][T29323] loop1: detected capacity change from 0 to 512 [ 445.044602][T29329] JBD2: no valid journal superblock found [ 445.055423][T29329] EXT4-fs (loop8): Could not load journal inode [ 445.063814][T29333] Alternate GPT is invalid, using primary GPT. [ 445.070351][T29333] loop3: p1 p2 p3 [ 445.080269][T29329] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 445.093206][T29329] loop8: detected capacity change from 0 to 512 [ 445.101128][T29331] loop9: detected capacity change from 0 to 4096 [ 445.107882][T29331] EXT4-fs: Ignoring removed nomblk_io_submit option [ 445.118570][T29323] EXT4-fs error (device loop1): ext4_quota_enable:7132: comm syz.1.8996: Bad quota inum: 2, type: 1 [ 445.147239][T29323] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 445.156688][T29329] EXT4-fs error (device loop8): ext4_quota_enable:7132: comm syz.8.8998: Bad quota inum: 2, type: 1 [ 445.180665][T29343] rdma_rxe: rxe_newlink: failed to add lo [ 445.197075][T29329] EXT4-fs warning (device loop8): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 445.267069][T29353] loop6: detected capacity change from 0 to 512 [ 445.343156][T29361] loop3: detected capacity change from 0 to 512 [ 445.353131][T29361] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.9007: Parent and EA inode have the same ino 15 [ 445.366594][T29361] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: comm syz.3.9007: Parent and EA inode have the same ino 15 [ 445.382614][T29361] EXT4-fs (loop3): 1 orphan inode deleted [ 445.389945][T29361] FAULT_INJECTION: forcing a failure. [ 445.389945][T29361] name failslab, interval 1, probability 0, space 0, times 0 [ 445.402687][T29361] CPU: 1 UID: 0 PID: 29361 Comm: syz.3.9007 Not tainted syzkaller #0 PREEMPT(voluntary) [ 445.402722][T29361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 445.402739][T29361] Call Trace: [ 445.402747][T29361] [ 445.402757][T29361] __dump_stack+0x1d/0x30 [ 445.402784][T29361] dump_stack_lvl+0xe8/0x140 [ 445.402876][T29361] dump_stack+0x15/0x1b [ 445.402958][T29361] should_fail_ex+0x265/0x280 [ 445.403120][T29361] should_failslab+0x8c/0xb0 [ 445.403282][T29361] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 445.403328][T29361] ? __alloc_skb+0x101/0x320 [ 445.403360][T29361] __alloc_skb+0x101/0x320 [ 445.403387][T29361] netlink_alloc_large_skb+0xbf/0xf0 [ 445.403507][T29361] netlink_sendmsg+0x3cf/0x6b0 [ 445.403554][T29361] ? __pfx_netlink_sendmsg+0x10/0x10 [ 445.403588][T29361] __sock_sendmsg+0x145/0x180 [ 445.403612][T29361] ____sys_sendmsg+0x31e/0x4e0 [ 445.403654][T29361] ___sys_sendmsg+0x17b/0x1d0 [ 445.403717][T29361] __x64_sys_sendmsg+0xd4/0x160 [ 445.403808][T29361] x64_sys_call+0x191e/0x3000 [ 445.403832][T29361] do_syscall_64+0xd2/0x200 [ 445.403850][T29361] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 445.403877][T29361] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 445.403985][T29361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.404069][T29361] RIP: 0033:0x7f9c53b2efc9 [ 445.404087][T29361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 445.404110][T29361] RSP: 002b:00007f9c5258f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 445.404149][T29361] RAX: ffffffffffffffda RBX: 00007f9c53d85fa0 RCX: 00007f9c53b2efc9 [ 445.404164][T29361] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 445.404179][T29361] RBP: 00007f9c5258f090 R08: 0000000000000000 R09: 0000000000000000 [ 445.404194][T29361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.404209][T29361] R13: 00007f9c53d86038 R14: 00007f9c53d85fa0 R15: 00007ffef715a2f8 [ 445.404255][T29361] [ 445.639550][T29371] blktrace: Concurrent blktraces are not allowed on sg0 [ 445.672626][T29377] loop6: detected capacity change from 0 to 1024 [ 445.680023][T29377] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 445.682405][T29371] tipc: Enabling of bearer rejected, already enabled [ 445.690955][T29377] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 445.714961][T29377] JBD2: no valid journal superblock found [ 445.720946][T29377] EXT4-fs (loop6): Could not load journal inode [ 445.732394][T29377] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 445.746263][T29377] loop6: detected capacity change from 0 to 512 [ 445.759335][T29377] EXT4-fs error (device loop6): ext4_quota_enable:7132: comm syz.6.9013: Bad quota inum: 2, type: 1 [ 445.770732][T29377] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 445.831605][T29383] loop3: detected capacity change from 0 to 1024 [ 445.840234][T29383] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 445.851195][T29383] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 445.861709][T29383] JBD2: no valid journal superblock found [ 445.867546][T29383] EXT4-fs (loop3): Could not load journal inode [ 445.878017][T29383] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 445.892163][T29383] loop3: detected capacity change from 0 to 512 [ 445.919051][T29383] EXT4-fs error (device loop3): ext4_quota_enable:7132: comm syz.3.9015: Bad quota inum: 2, type: 1 [ 445.930384][T29383] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 445.959338][T29386] loop6: detected capacity change from 0 to 1024 [ 446.043411][T29396] loop3: detected capacity change from 0 to 128 [ 446.206094][T29402] 9pnet_virtio: no channels available for device /dev/sr0 [ 446.238730][T29404] tap0: tun_chr_ioctl cmd 1074025675 [ 446.244104][T29404] tap0: persist enabled [ 446.248754][T29404] tap0: tun_chr_ioctl cmd 1074025675 [ 446.254085][T29404] tap0: persist enabled [ 446.298545][T29406] loop8: detected capacity change from 0 to 512 [ 446.367991][T29410] FAULT_INJECTION: forcing a failure. [ 446.367991][T29410] name failslab, interval 1, probability 0, space 0, times 0 [ 446.380767][T29410] CPU: 1 UID: 0 PID: 29410 Comm: syz.1.9023 Not tainted syzkaller #0 PREEMPT(voluntary) [ 446.380822][T29410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 446.380835][T29410] Call Trace: [ 446.380842][T29410] [ 446.380870][T29410] __dump_stack+0x1d/0x30 [ 446.380894][T29410] dump_stack_lvl+0xe8/0x140 [ 446.380967][T29410] dump_stack+0x15/0x1b [ 446.380985][T29410] should_fail_ex+0x265/0x280 [ 446.381021][T29410] should_failslab+0x8c/0xb0 [ 446.381070][T29410] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 446.381161][T29410] ? __alloc_skb+0x101/0x320 [ 446.381194][T29410] __alloc_skb+0x101/0x320 [ 446.381220][T29410] ? audit_log_start+0x342/0x720 [ 446.381247][T29410] audit_log_start+0x3a0/0x720 [ 446.381294][T29410] ? kstrtouint+0x76/0xc0 [ 446.381332][T29410] audit_seccomp+0x48/0x100 [ 446.381370][T29410] ? __seccomp_filter+0x82d/0x1250 [ 446.381403][T29410] __seccomp_filter+0x83e/0x1250 [ 446.381510][T29410] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 446.381546][T29410] ? vfs_write+0x7e8/0x960 [ 446.381590][T29410] __secure_computing+0x82/0x150 [ 446.381624][T29410] syscall_trace_enter+0xcf/0x1e0 [ 446.381692][T29410] do_syscall_64+0xac/0x200 [ 446.381747][T29410] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 446.381775][T29410] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 446.381805][T29410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.381825][T29410] RIP: 0033:0x7fb67aacefc9 [ 446.381892][T29410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.381914][T29410] RSP: 002b:00007fb67952f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000023 [ 446.381932][T29410] RAX: ffffffffffffffda RBX: 00007fb67ad25fa0 RCX: 00007fb67aacefc9 [ 446.381944][T29410] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 446.381988][T29410] RBP: 00007fb67952f090 R08: 0000000000000000 R09: 0000000000000000 [ 446.382063][T29410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.382079][T29410] R13: 00007fb67ad26038 R14: 00007fb67ad25fa0 R15: 00007fff05d630f8 [ 446.382104][T29410] [ 446.623468][T29412] FAULT_INJECTION: forcing a failure. [ 446.623468][T29412] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 446.636684][T29412] CPU: 1 UID: 0 PID: 29412 Comm: syz.1.9024 Not tainted syzkaller #0 PREEMPT(voluntary) [ 446.636716][T29412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 446.636733][T29412] Call Trace: [ 446.636740][T29412] [ 446.636750][T29412] __dump_stack+0x1d/0x30 [ 446.636778][T29412] dump_stack_lvl+0xe8/0x140 [ 446.636841][T29412] dump_stack+0x15/0x1b [ 446.636863][T29412] should_fail_ex+0x265/0x280 [ 446.636908][T29412] should_fail+0xb/0x20 [ 446.636928][T29412] should_fail_usercopy+0x1a/0x20 [ 446.636983][T29412] _copy_to_user+0x20/0xa0 [ 446.637008][T29412] simple_read_from_buffer+0xb5/0x130 [ 446.637041][T29412] proc_fail_nth_read+0x10e/0x150 [ 446.637161][T29412] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 446.637241][T29412] vfs_read+0x1a8/0x770 [ 446.637264][T29412] ? __rcu_read_unlock+0x4f/0x70 [ 446.637342][T29412] ? __fget_files+0x184/0x1c0 [ 446.637380][T29412] ksys_read+0xda/0x1a0 [ 446.637483][T29412] __x64_sys_read+0x40/0x50 [ 446.637508][T29412] x64_sys_call+0x27c0/0x3000 [ 446.637537][T29412] do_syscall_64+0xd2/0x200 [ 446.637559][T29412] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 446.637605][T29412] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.637639][T29412] RIP: 0033:0x7fb67aacd9dc [ 446.637658][T29412] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 446.637677][T29412] RSP: 002b:00007fb67952f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 446.637696][T29412] RAX: ffffffffffffffda RBX: 00007fb67ad25fa0 RCX: 00007fb67aacd9dc [ 446.637733][T29412] RDX: 000000000000000f RSI: 00007fb67952f0a0 RDI: 0000000000000005 [ 446.637748][T29412] RBP: 00007fb67952f090 R08: 0000000000000000 R09: 0000000000000000 [ 446.637761][T29412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.637791][T29412] R13: 00007fb67ad26038 R14: 00007fb67ad25fa0 R15: 00007fff05d630f8 [ 446.637811][T29412] [ 446.846319][T29414] blktrace: Concurrent blktraces are not allowed on sg0 [ 446.871379][T29419] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 446.890925][T29414] tipc: Enabling of bearer rejected, already enabled [ 447.026236][T29432] FAULT_INJECTION: forcing a failure. [ 447.026236][T29432] name failslab, interval 1, probability 0, space 0, times 0 [ 447.038946][T29432] CPU: 1 UID: 0 PID: 29432 Comm: syz.1.9031 Not tainted syzkaller #0 PREEMPT(voluntary) [ 447.039006][T29432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 447.039022][T29432] Call Trace: [ 447.039030][T29432] [ 447.039039][T29432] __dump_stack+0x1d/0x30 [ 447.039068][T29432] dump_stack_lvl+0xe8/0x140 [ 447.039091][T29432] dump_stack+0x15/0x1b [ 447.039169][T29432] should_fail_ex+0x265/0x280 [ 447.039210][T29432] should_failslab+0x8c/0xb0 [ 447.039282][T29432] kmem_cache_alloc_noprof+0x50/0x480 [ 447.039323][T29432] ? getname_kernel+0x3c/0x1f0 [ 447.039366][T29432] ? should_fail_ex+0xdb/0x280 [ 447.039461][T29432] getname_kernel+0x3c/0x1f0 [ 447.039494][T29432] start_creating_path+0x25/0x130 [ 447.039517][T29432] unix_bind+0x1fd/0x920 [ 447.039551][T29432] __sys_bind+0x1d1/0x2a0 [ 447.039620][T29432] __x64_sys_bind+0x3f/0x50 [ 447.039645][T29432] x64_sys_call+0x2b72/0x3000 [ 447.039669][T29432] do_syscall_64+0xd2/0x200 [ 447.039723][T29432] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 447.039759][T29432] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 447.039875][T29432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.039911][T29432] RIP: 0033:0x7fb67aacefc9 [ 447.039926][T29432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 447.039959][T29432] RSP: 002b:00007fb67952f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 447.039988][T29432] RAX: ffffffffffffffda RBX: 00007fb67ad25fa0 RCX: 00007fb67aacefc9 [ 447.040005][T29432] RDX: 000000000000006e RSI: 0000200000000180 RDI: 0000000000000004 [ 447.040042][T29432] RBP: 00007fb67952f090 R08: 0000000000000000 R09: 0000000000000000 [ 447.040054][T29432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.040070][T29432] R13: 00007fb67ad26038 R14: 00007fb67ad25fa0 R15: 00007fff05d630f8 [ 447.040097][T29432] [ 447.269559][ T29] kauditd_printk_skb: 337 callbacks suppressed [ 447.269615][ T29] audit: type=1326 audit(22733.285:28092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29416 comm="syz.8.9027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ebeaefc9 code=0x7ffc0000 [ 447.312899][ T29] audit: type=1326 audit(22733.285:28093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29416 comm="syz.8.9027" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ebeaefc9 code=0x7ffc0000 [ 447.352270][T29439] netlink: 40 bytes leftover after parsing attributes in process `syz.9.9034'. [ 447.399248][T29445] loop1: detected capacity change from 0 to 512 [ 447.419530][ T29] audit: type=1326 audit(22733.436:28094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29438 comm="syz.9.9034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eb16efc9 code=0x7ffc0000 [ 447.426876][T29451] 9pnet_fd: Insufficient options for proto=fd [ 447.442824][ T29] audit: type=1326 audit(22733.436:28095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29438 comm="syz.9.9034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eb16efc9 code=0x7ffc0000 [ 447.450359][T29453] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 447.472156][ T29] audit: type=1326 audit(22733.436:28096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29438 comm="syz.9.9034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fa1eb16efc9 code=0x7ffc0000 [ 447.472210][ T29] audit: type=1326 audit(22733.436:28097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29438 comm="syz.9.9034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eb16efc9 code=0x7ffc0000 [ 447.472241][ T29] audit: type=1326 audit(22733.436:28098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29438 comm="syz.9.9034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa1eb16efc9 code=0x7ffc0000 [ 447.551434][ T29] audit: type=1326 audit(22733.436:28099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29438 comm="syz.9.9034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eb16efc9 code=0x7ffc0000 [ 447.574718][ T29] audit: type=1326 audit(22733.436:28100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29438 comm="syz.9.9034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fa1eb16efc9 code=0x7ffc0000 [ 447.597808][ T29] audit: type=1326 audit(22733.436:28101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29438 comm="syz.9.9034" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eb16efc9 code=0x7ffc0000 [ 447.697492][T29455] lo speed is unknown, defaulting to 1000 [ 447.706493][T29455] lo speed is unknown, defaulting to 1000 [ 447.713042][T29455] lo speed is unknown, defaulting to 1000 [ 447.783424][T29469] blktrace: Concurrent blktraces are not allowed on sg0 [ 447.852688][T29469] tipc: Enabling of bearer rejected, already enabled [ 447.909570][T29481] geneve0: entered allmulticast mode [ 447.935609][T29483] lo speed is unknown, defaulting to 1000 [ 447.950205][T29483] lo speed is unknown, defaulting to 1000 [ 447.950772][T29487] loop1: detected capacity change from 0 to 512 [ 447.966370][T29483] lo speed is unknown, defaulting to 1000 [ 448.036154][T29496] loop8: detected capacity change from 0 to 128 [ 448.149554][ T31] bond0 (unregistering): Released all slaves [ 448.157783][ T31] bond1 (unregistering): Released all slaves [ 448.166290][ T31] bond2 (unregistering): Released all slaves [ 448.177614][T29455] chnl_net:caif_netlink_parms(): no params data found [ 448.252110][T29507] netlink: 40 bytes leftover after parsing attributes in process `syz.9.9054'. [ 448.297812][T29499] siw: device registration error -23 [ 448.305753][T29455] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.313104][T29455] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.320787][T29455] bridge_slave_0: entered allmulticast mode [ 448.321459][T29511] 9pnet_fd: Insufficient options for proto=fd [ 448.327877][T29455] bridge_slave_0: entered promiscuous mode [ 448.339888][ T31] tipc: Disabling bearer [ 448.345254][ T31] tipc: Left network mode [ 448.345289][T29455] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.357042][T29455] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.364480][T29455] bridge_slave_1: entered allmulticast mode [ 448.371159][T29455] bridge_slave_1: entered promiscuous mode [ 448.414359][T29455] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.428316][T29455] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.477188][ T31] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 448.484677][ T31] batman_adv: batadv0: Removing interface: veth1_vlan [ 448.577057][T29455] team0: Port device team_slave_0 added [ 448.585659][T29455] team0: Port device team_slave_1 added [ 448.606944][T29455] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.614001][T29455] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.640132][T29455] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.640395][T29519] loop6: detected capacity change from 0 to 4096 [ 448.651938][T29455] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.664087][T29455] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.690513][T29455] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.690648][T29519] EXT4-fs: Ignoring removed nomblk_io_submit option [ 448.737551][T29455] hsr_slave_0: entered promiscuous mode [ 448.744418][T29455] hsr_slave_1: entered promiscuous mode [ 448.750932][T29455] debugfs: 'hsr0' already exists in 'hsr' [ 448.756712][T29455] Cannot create hsr debugfs directory [ 448.969689][T29528] loop8: detected capacity change from 0 to 512 [ 448.979133][T29531] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 448.980047][T29527] blktrace: Concurrent blktraces are not allowed on sg0 [ 448.997693][T29531] SELinux: failed to load policy [ 449.020570][T29527] tipc: Enabling of bearer rejected, already enabled [ 449.065105][T29536] lo speed is unknown, defaulting to 1000 [ 449.082427][T29536] lo speed is unknown, defaulting to 1000 [ 449.102643][T29536] lo speed is unknown, defaulting to 1000 [ 449.135528][T29547] FAULT_INJECTION: forcing a failure. [ 449.135528][T29547] name failslab, interval 1, probability 0, space 0, times 0 [ 449.148400][T29547] CPU: 0 UID: 0 PID: 29547 Comm: syz.9.9068 Not tainted syzkaller #0 PREEMPT(voluntary) [ 449.148432][T29547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 449.148448][T29547] Call Trace: [ 449.148456][T29547] [ 449.148466][T29547] __dump_stack+0x1d/0x30 [ 449.148571][T29547] dump_stack_lvl+0xe8/0x140 [ 449.148598][T29547] dump_stack+0x15/0x1b [ 449.148621][T29547] should_fail_ex+0x265/0x280 [ 449.148664][T29547] should_failslab+0x8c/0xb0 [ 449.148810][T29547] kmem_cache_alloc_noprof+0x50/0x480 [ 449.148880][T29547] ? getname_kernel+0x3c/0x1f0 [ 449.148945][T29547] ? should_fail_ex+0xdb/0x280 [ 449.148978][T29547] getname_kernel+0x3c/0x1f0 [ 449.149014][T29547] start_creating_path+0x25/0x130 [ 449.149092][T29547] unix_bind+0x1fd/0x920 [ 449.149124][T29547] __sys_bind+0x1d1/0x2a0 [ 449.149191][T29547] __x64_sys_bind+0x3f/0x50 [ 449.149219][T29547] x64_sys_call+0x2b72/0x3000 [ 449.149254][T29547] do_syscall_64+0xd2/0x200 [ 449.149274][T29547] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 449.149324][T29547] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 449.149362][T29547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.149397][T29547] RIP: 0033:0x7fa1eb16efc9 [ 449.149416][T29547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.149435][T29547] RSP: 002b:00007fa1e9bcf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 449.149454][T29547] RAX: ffffffffffffffda RBX: 00007fa1eb3c5fa0 RCX: 00007fa1eb16efc9 [ 449.149466][T29547] RDX: 000000000000006e RSI: 0000200000000180 RDI: 0000000000000004 [ 449.149482][T29547] RBP: 00007fa1e9bcf090 R08: 0000000000000000 R09: 0000000000000000 [ 449.149521][T29547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.149535][T29547] R13: 00007fa1eb3c6038 R14: 00007fa1eb3c5fa0 R15: 00007ffe72660e98 [ 449.149559][T29547] [ 449.153103][T29455] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 449.265841][T29551] loop8: detected capacity change from 0 to 1024 [ 449.356675][T29551] EXT4-fs: inline encryption not supported [ 449.358816][T29455] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 449.370264][T29551] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 449.383120][T29455] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 449.397061][T29551] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.9069: lblock 2 mapped to illegal pblock 2 (length 1) [ 449.420102][T29455] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 449.435898][T29551] EXT4-fs (loop8): Remounting filesystem read-only [ 449.444905][T29551] EXT4-fs (loop8): 1 orphan inode deleted [ 449.468730][T29556] loop1: detected capacity change from 0 to 1024 [ 449.483008][T29550] siw: device registration error -23 [ 449.498361][T29556] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 449.509325][T29556] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 449.519837][T29556] JBD2: no valid journal superblock found [ 449.525651][T29556] EXT4-fs (loop1): Could not load journal inode [ 449.540744][T29556] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 449.558853][T29455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 449.571893][T29556] loop1: detected capacity change from 0 to 512 [ 449.596360][T29455] 8021q: adding VLAN 0 to HW filter on device team0 [ 449.609399][T20525] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.616515][T20525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.628928][T29556] EXT4-fs error (device loop1): ext4_quota_enable:7132: comm syz.1.9071: Bad quota inum: 2, type: 1 [ 449.648494][T29556] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 449.668781][T20532] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.675982][T20532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.729250][T29573] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9075'. [ 449.738683][T29572] loop8: detected capacity change from 0 to 512 [ 449.779905][T29581] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 449.784830][T29455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.821118][T29583] 9pnet_fd: Insufficient options for proto=fd [ 449.867643][T29591] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.920054][T29591] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.942821][T29455] veth0_vlan: entered promiscuous mode [ 449.954285][T29455] veth1_vlan: entered promiscuous mode [ 449.964847][T29591] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.988209][T29455] veth0_macvtap: entered promiscuous mode [ 449.996076][T29455] veth1_macvtap: entered promiscuous mode [ 450.009378][T29455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 450.021432][T29455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 450.033147][T20542] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.044068][T29591] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.056990][T20542] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.073426][T20542] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.083720][T20542] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.107376][T20525] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.124205][T20525] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.137519][T20525] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.146146][T20525] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.172356][T29601] blktrace: Concurrent blktraces are not allowed on sg0 [ 450.188454][T29603] rdma_rxe: rxe_newlink: failed to add lo [ 450.210716][T29601] tipc: Enabling of bearer rejected, already enabled [ 450.246435][T29607] lo speed is unknown, defaulting to 1000 [ 450.252977][T29607] lo speed is unknown, defaulting to 1000 [ 450.259272][T29607] lo speed is unknown, defaulting to 1000 [ 450.366251][T29616] siw: device registration error -23 [ 450.378300][T29618] loop1: detected capacity change from 0 to 1024 [ 450.385298][T29618] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 450.396363][T29618] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 450.415176][T29618] JBD2: no valid journal superblock found [ 450.421065][T29618] EXT4-fs (loop1): Could not load journal inode [ 450.431718][T29618] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 450.445310][T29618] loop1: detected capacity change from 0 to 512 [ 450.448354][T29620] loop3: detected capacity change from 0 to 512 [ 450.469507][T29618] EXT4-fs error (device loop1): ext4_quota_enable:7132: comm syz.1.9085: Bad quota inum: 2, type: 1 [ 450.481782][T29618] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 450.589036][T29628] lo speed is unknown, defaulting to 1000 [ 450.595361][T29628] lo speed is unknown, defaulting to 1000 [ 450.602342][T29628] lo speed is unknown, defaulting to 1000 [ 450.633453][T29632] loop1: detected capacity change from 0 to 128 [ 450.675381][T29636] FAULT_INJECTION: forcing a failure. [ 450.675381][T29636] name failslab, interval 1, probability 0, space 0, times 0 [ 450.688111][T29636] CPU: 1 UID: 0 PID: 29636 Comm: syz.1.9090 Not tainted syzkaller #0 PREEMPT(voluntary) [ 450.688144][T29636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 450.688160][T29636] Call Trace: [ 450.688169][T29636] [ 450.688179][T29636] __dump_stack+0x1d/0x30 [ 450.688265][T29636] dump_stack_lvl+0xe8/0x140 [ 450.688286][T29636] dump_stack+0x15/0x1b [ 450.688306][T29636] should_fail_ex+0x265/0x280 [ 450.688339][T29636] should_failslab+0x8c/0xb0 [ 450.688490][T29636] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 450.688601][T29636] ? __alloc_skb+0x101/0x320 [ 450.688634][T29636] __alloc_skb+0x101/0x320 [ 450.688746][T29636] netlink_alloc_large_skb+0xbf/0xf0 [ 450.688833][T29636] netlink_sendmsg+0x3cf/0x6b0 [ 450.688922][T29636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 450.689011][T29636] __sock_sendmsg+0x145/0x180 [ 450.689158][T29636] ____sys_sendmsg+0x31e/0x4e0 [ 450.689194][T29636] ___sys_sendmsg+0x17b/0x1d0 [ 450.689259][T29636] __x64_sys_sendmsg+0xd4/0x160 [ 450.689370][T29636] x64_sys_call+0x191e/0x3000 [ 450.689470][T29636] do_syscall_64+0xd2/0x200 [ 450.689493][T29636] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 450.689596][T29636] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 450.689627][T29636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.689707][T29636] RIP: 0033:0x7fb67aacefc9 [ 450.689726][T29636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.689755][T29636] RSP: 002b:00007fb67952f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 450.689778][T29636] RAX: ffffffffffffffda RBX: 00007fb67ad25fa0 RCX: 00007fb67aacefc9 [ 450.689791][T29636] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 450.689802][T29636] RBP: 00007fb67952f090 R08: 0000000000000000 R09: 0000000000000000 [ 450.689814][T29636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.689868][T29636] R13: 00007fb67ad26038 R14: 00007fb67ad25fa0 R15: 00007fff05d630f8 [ 450.689892][T29636] [ 450.931082][T29639] vhci_hcd: invalid port number 96 [ 450.936244][T29639] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 451.008142][T29645] loop6: detected capacity change from 0 to 1024 [ 451.015172][T29645] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 451.026157][T29645] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 451.038713][T29645] JBD2: no valid journal superblock found [ 451.044479][T29645] EXT4-fs (loop6): Could not load journal inode [ 451.054997][T29645] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 451.069399][T29645] loop6: detected capacity change from 0 to 512 [ 451.088538][T29645] EXT4-fs error (device loop6): ext4_quota_enable:7132: comm syz.6.9093: Bad quota inum: 2, type: 1 [ 451.103235][T29645] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 451.126074][T29651] blktrace: Concurrent blktraces are not allowed on sg0 [ 451.160277][T29651] tipc: Enabling of bearer rejected, already enabled [ 451.247059][T29660] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9098'. [ 451.273161][T29662] netlink: 40 bytes leftover after parsing attributes in process `syz.9.9099'. [ 451.312796][T29663] 9pnet_fd: Insufficient options for proto=fd [ 451.336422][T29664] 9pnet_fd: Insufficient options for proto=fd [ 451.444187][T29671] vhci_hcd: invalid port number 96 [ 451.449425][T29671] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 451.832379][T29680] blktrace: Concurrent blktraces are not allowed on sg0 [ 451.921521][T29681] tipc: Enabling of bearer rejected, already enabled [ 452.103761][T29685] blktrace: Concurrent blktraces are not allowed on sg0 [ 452.227233][T29685] tipc: Enabling of bearer rejected, already enabled [ 452.274126][T29680] Set syz1 is full, maxelem 65536 reached [ 452.291665][ T29] kauditd_printk_skb: 192 callbacks suppressed [ 452.291685][ T29] audit: type=1326 audit(22738.306:28290): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29686 comm="syz.9.9107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eb16efc9 code=0x7ffc0000 [ 452.322018][ T29] audit: type=1326 audit(22738.306:28291): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29686 comm="syz.9.9107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eb16efc9 code=0x7ffc0000 [ 452.414534][ T29] audit: type=1326 audit(22738.396:28292): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29686 comm="syz.9.9107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fa1eb16efc9 code=0x7ffc0000 [ 452.469727][ T29] audit: type=1326 audit(22738.426:28293): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29686 comm="syz.9.9107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eb16efc9 code=0x7ffc0000 [ 452.493502][ T29] audit: type=1326 audit(22738.426:28294): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29686 comm="syz.9.9107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1eb16efc9 code=0x7ffc0000 [ 452.517458][ T29] audit: type=1326 audit(22738.426:28295): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29686 comm="syz.9.9107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eb16efc9 code=0x7ffc0000 [ 452.541280][ T29] audit: type=1326 audit(22738.426:28296): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29686 comm="syz.9.9107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1eb16efc9 code=0x7ffc0000 [ 452.565002][ T29] audit: type=1326 audit(22738.426:28297): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29686 comm="syz.9.9107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eb16efc9 code=0x7ffc0000 [ 452.588627][ T29] audit: type=1326 audit(22738.426:28298): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29686 comm="syz.9.9107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa1eb16efc9 code=0x7ffc0000 [ 452.612229][ T29] audit: type=1326 audit(22738.426:28299): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29686 comm="syz.9.9107" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa1eb16efc9 code=0x7ffc0000 [ 452.632988][T29701] netlink: '+}[@': attribute type 10 has an invalid length. [ 452.643299][T29701] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 452.681207][T29704] vhci_hcd: invalid port number 96 [ 452.686572][T29704] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 452.847142][T29715] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9117'. [ 452.876885][T29688] Set syz1 is full, maxelem 65536 reached [ 452.944377][T29722] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9118'. [ 452.953796][T29722] netlink: 8 bytes leftover after parsing attributes in process `syz.9.9118'. [ 452.972937][T29716] loop1: detected capacity change from 0 to 512 [ 453.006999][T29716] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 1024: comm syz.1.9111: invalid block [ 453.019423][T29716] EXT4-fs (loop1): Remounting filesystem read-only [ 453.026420][T29727] 9pnet_fd: Insufficient options for proto=fd [ 453.033152][T29716] EXT4-fs (loop1): 1 truncate cleaned up [ 453.102292][T29732] rdma_rxe: rxe_newlink: failed to add lo [ 453.113067][T29730] loop9: detected capacity change from 0 to 2048 [ 453.158124][T29730] Alternate GPT is invalid, using primary GPT. [ 453.164446][T29730] loop9: p1 p2 p3 [ 453.200544][T29738] vhci_hcd: invalid port number 96 [ 453.205735][T29738] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 453.311348][T29753] loop9: detected capacity change from 0 to 1024 [ 453.319494][T29753] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 453.330470][T29753] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 453.331163][T29752] loop6: detected capacity change from 0 to 2048 [ 453.341443][T29753] JBD2: no valid journal superblock found [ 453.352607][T29753] EXT4-fs (loop9): Could not load journal inode [ 453.363228][T29753] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 453.373067][T29757] netlink: 16 bytes leftover after parsing attributes in process `syz.8.9131'. [ 453.377039][T29753] loop9: detected capacity change from 0 to 512 [ 453.395902][T29757] loop8: detected capacity change from 0 to 512 [ 453.403275][T29752] Alternate GPT is invalid, using primary GPT. [ 453.403525][T29757] EXT4-fs: Ignoring removed nobh option [ 453.409839][T29752] loop6: p1 p2 p3 [ 453.437688][T29753] EXT4-fs error (device loop9): ext4_quota_enable:7132: comm syz.9.9129: Bad quota inum: 2, type: 1 [ 453.451241][T29753] EXT4-fs warning (device loop9): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 453.468603][T29757] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #3: comm syz.8.9131: corrupted inode contents [ 453.481281][T29757] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #3: comm syz.8.9131: mark_inode_dirty error [ 453.493694][T29757] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #3: comm syz.8.9131: corrupted inode contents [ 453.507097][T29757] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #3: comm syz.8.9131: mark_inode_dirty error [ 453.519582][T29757] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.9131: Failed to acquire dquot type 0 [ 453.563763][T29757] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.9131: corrupted inode contents [ 453.586673][T29757] EXT4-fs error (device loop8): ext4_dirty_inode:6517: inode #16: comm syz.8.9131: mark_inode_dirty error [ 453.602395][T29767] lo speed is unknown, defaulting to 1000 [ 453.608652][T29757] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.9131: corrupted inode contents [ 453.621129][T29767] lo speed is unknown, defaulting to 1000 [ 453.627180][T29757] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.9131: mark_inode_dirty error [ 453.639324][T29767] lo speed is unknown, defaulting to 1000 [ 453.645183][T29757] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.9131: corrupted inode contents [ 453.673474][T29757] EXT4-fs error (device loop8) in ext4_orphan_del:301: Corrupt filesystem [ 453.717646][T29757] EXT4-fs error (device loop8): ext4_do_update_inode:5632: inode #16: comm syz.8.9131: corrupted inode contents [ 453.742613][T29757] EXT4-fs error (device loop8): ext4_truncate:4637: inode #16: comm syz.8.9131: mark_inode_dirty error [ 453.761602][T29757] EXT4-fs error (device loop8) in ext4_process_orphan:343: Corrupt filesystem [ 453.771501][T29757] EXT4-fs (loop8): 1 truncate cleaned up [ 453.781577][T29757] netlink: 56 bytes leftover after parsing attributes in process `syz.8.9131'. [ 453.791649][T29757] netlink: 8 bytes leftover after parsing attributes in process `syz.8.9131'. [ 453.853770][T29773] siw: device registration error -23 [ 454.096170][T29784] lo speed is unknown, defaulting to 1000 [ 454.195293][T29784] lo speed is unknown, defaulting to 1000 [ 454.201962][T29784] lo speed is unknown, defaulting to 1000 [ 454.284486][T29787] loop1: detected capacity change from 0 to 512 [ 454.326992][T29787] EXT4-fs: Remounting fs w/o journal so ignoring data_err option [ 454.334840][T29787] EXT4-fs: Cannot change journaled quota options when quota turned on [ 454.346055][T29789] siw: device registration error -23 [ 454.393689][T29795] vhci_hcd: invalid port number 96 [ 454.398896][T29795] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 454.577882][T29805] loop9: detected capacity change from 0 to 2048 [ 454.618016][T29805] Alternate GPT is invalid, using primary GPT. [ 454.624385][T29805] loop9: p1 p2 p3 [ 454.640217][T29803] loop8: detected capacity change from 0 to 4096 [ 454.646921][T29803] EXT4-fs: Ignoring removed nomblk_io_submit option [ 454.685101][T29807] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9145'. [ 454.704804][T29811] loop1: detected capacity change from 0 to 1024 [ 454.719799][T29811] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 454.725792][T29807] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.730731][T29811] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 454.749831][T29811] JBD2: no valid journal superblock found [ 454.755592][T29811] EXT4-fs (loop1): Could not load journal inode [ 454.762761][T29807] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.780650][T29811] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 454.802665][T29811] loop1: detected capacity change from 0 to 512 [ 454.810104][T29815] rdma_rxe: rxe_newlink: failed to add lo [ 454.838669][T29811] EXT4-fs error (device loop1): ext4_quota_enable:7132: comm syz.1.9144: Bad quota inum: 2, type: 1 [ 454.853086][T29811] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 454.903179][T29823] loop8: detected capacity change from 0 to 1024 [ 454.904087][T29826] vhci_hcd: invalid port number 96 [ 454.911022][T29823] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 454.915271][T29826] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 454.926334][T29823] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 454.946913][T29823] JBD2: no valid journal superblock found [ 454.952813][T29823] EXT4-fs (loop8): Could not load journal inode [ 454.973397][T29823] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 454.985336][T29830] rdma_rxe: rxe_newlink: failed to add lo [ 455.009957][T29835] loop3: detected capacity change from 0 to 128 [ 455.017901][T29823] loop8: detected capacity change from 0 to 512 [ 455.060283][T29823] EXT4-fs error (device loop8): ext4_quota_enable:7132: comm syz.8.9149: Bad quota inum: 2, type: 1 [ 455.060731][T29841] netlink: 'syz.6.9154': attribute type 2 has an invalid length. [ 455.097035][T29823] EXT4-fs warning (device loop8): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 455.388832][T29860] loop1: detected capacity change from 0 to 1024 [ 455.399884][T29860] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 455.411009][T29860] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 455.450812][T29860] JBD2: no valid journal superblock found [ 455.456587][T29860] EXT4-fs (loop1): Could not load journal inode [ 455.477094][T29860] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 455.491546][T29860] loop1: detected capacity change from 0 to 512 [ 455.507527][T29860] EXT4-fs error (device loop1): ext4_quota_enable:7132: comm syz.1.9160: Bad quota inum: 2, type: 1 [ 455.519185][T29860] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 455.732702][T29867] loop9: detected capacity change from 0 to 1024 [ 455.740159][T29867] EXT4-fs: inline encryption not supported [ 455.746805][T29867] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 455.771129][T29867] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 2: comm syz.9.9162: lblock 2 mapped to illegal pblock 2 (length 1) [ 455.803842][T29867] EXT4-fs (loop9): Remounting filesystem read-only [ 455.818326][T29867] EXT4-fs (loop9): 1 orphan inode deleted [ 455.879112][T29872] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.918015][T29874] vhci_hcd: invalid port number 96 [ 455.923181][T29874] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 455.932492][T29872] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.999336][T29872] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.033998][T29881] lo speed is unknown, defaulting to 1000 [ 456.047942][T29881] lo speed is unknown, defaulting to 1000 [ 456.055092][T29872] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.067744][T29881] lo speed is unknown, defaulting to 1000 [ 456.079580][T29884] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 456.155498][T20540] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.176863][T20540] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.225369][T20540] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.260476][T20540] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.588616][T29906] loop1: detected capacity change from 0 to 1024 [ 456.595510][T29906] EXT4-fs: inline encryption not supported [ 456.617205][T29906] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 456.639452][T29906] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.9173: lblock 2 mapped to illegal pblock 2 (length 1) [ 456.667256][T29906] EXT4-fs (loop1): Remounting filesystem read-only [ 456.673942][T29906] EXT4-fs (loop1): 1 orphan inode deleted [ 456.777477][T29914] vhci_hcd: invalid port number 96 [ 456.782679][T29914] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 456.942202][T29926] lo speed is unknown, defaulting to 1000 [ 456.948762][T29926] lo speed is unknown, defaulting to 1000 [ 456.955043][T29926] lo speed is unknown, defaulting to 1000 [ 457.116886][T29931] siw: device registration error -23 [ 457.236822][T29938] loop6: detected capacity change from 0 to 4096 [ 457.251416][T29938] EXT4-fs: Ignoring removed nomblk_io_submit option [ 457.326843][T29943] loop9: detected capacity change from 0 to 1024 [ 457.342888][T29943] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 457.353941][T29943] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 457.376162][T29943] JBD2: no valid journal superblock found [ 457.382081][T29943] EXT4-fs (loop9): Could not load journal inode [ 457.406052][T29943] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 457.420521][T29948] lo speed is unknown, defaulting to 1000 [ 457.436313][T29948] lo speed is unknown, defaulting to 1000 [ 457.450325][T29943] loop9: detected capacity change from 0 to 512 [ 457.470929][T29948] lo speed is unknown, defaulting to 1000 [ 457.489082][T29943] EXT4-fs error (device loop9): ext4_quota_enable:7132: comm syz.9.9184: Bad quota inum: 2, type: 1 [ 457.503338][T29943] EXT4-fs warning (device loop9): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 457.588697][ T29] kauditd_printk_skb: 491 callbacks suppressed [ 457.588763][ T29] audit: type=1326 audit(22743.597:28785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29939 comm="syz.8.9183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ebeaefc9 code=0x7ffc0000 [ 457.618738][ T29] audit: type=1326 audit(22743.597:28786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29939 comm="syz.8.9183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f38ebeaefc9 code=0x7ffc0000 [ 457.642159][ T29] audit: type=1326 audit(22743.597:28787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29939 comm="syz.8.9183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38ebeaefc9 code=0x7ffc0000 [ 457.645421][T29955] siw: device registration error -23 [ 457.665665][ T29] audit: type=1326 audit(22743.597:28788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29939 comm="syz.8.9183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f38ebeaefc9 code=0x7ffc0000 [ 457.694146][T29956] loop8: detected capacity change from 0 to 512 [ 457.700774][ T29] audit: type=1326 audit(22743.597:28789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29939 comm="syz.8.9183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f38ebeaf003 code=0x7ffc0000 [ 457.703426][T29963] SELinux: Context system_u:object_r:init_var_run_t:s0 is not valid (left unmapped). [ 457.723971][ T29] audit: type=1326 audit(22743.607:28790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29939 comm="syz.8.9183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f38ebeada7f code=0x7ffc0000 [ 457.756310][ T29] audit: type=1326 audit(22743.607:28791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29939 comm="syz.8.9183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f38ebeaf057 code=0x7ffc0000 [ 457.779591][ T29] audit: type=1326 audit(22743.607:28792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29939 comm="syz.8.9183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f38ebead810 code=0x7ffc0000 [ 457.791275][T29965] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9193'. [ 457.803211][ T29] audit: type=1326 audit(22743.607:28793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29939 comm="syz.8.9183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f38ebeaebcb code=0x7ffc0000 [ 457.837864][T29956] EXT4-fs error (device loop8): ext4_get_branch:178: inode #13: block 1024: comm syz.8.9183: invalid block [ 457.840757][ T29] audit: type=1326 audit(22743.707:28794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29939 comm="syz.8.9183" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f38ebeadc2a code=0x7ffc0000 [ 457.878082][T29956] EXT4-fs (loop8): Remounting filesystem read-only [ 457.884914][T29956] EXT4-fs (loop8): 1 truncate cleaned up [ 457.905249][T29971] vhci_hcd: invalid port number 96 [ 457.910557][T29971] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 457.931840][T29965] 9pnet_fd: Insufficient options for proto=fd [ 458.057451][T29990] loop6: detected capacity change from 0 to 164 [ 458.184253][T29994] loop8: detected capacity change from 0 to 1024 [ 458.191613][T29994] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 458.202583][T29994] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 458.213151][T29994] JBD2: no valid journal superblock found [ 458.218981][T29994] EXT4-fs (loop8): Could not load journal inode [ 458.228084][T29994] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 458.241493][T29994] loop8: detected capacity change from 0 to 512 [ 458.257138][T29994] EXT4-fs error (device loop8): ext4_quota_enable:7132: comm syz.8.9200: Bad quota inum: 2, type: 1 [ 458.274874][T29994] EXT4-fs warning (device loop8): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 458.354534][T30001] loop8: detected capacity change from 0 to 2048 [ 458.397181][T30001] Alternate GPT is invalid, using primary GPT. [ 458.403684][T30001] loop8: p1 p2 p3 [ 458.690205][T30012] FAULT_INJECTION: forcing a failure. [ 458.690205][T30012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.703552][T30012] CPU: 0 UID: 0 PID: 30012 Comm: +}[@ Not tainted syzkaller #0 PREEMPT(voluntary) [ 458.703581][T30012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 458.703594][T30012] Call Trace: [ 458.703599][T30012] [ 458.703606][T30012] __dump_stack+0x1d/0x30 [ 458.703639][T30012] dump_stack_lvl+0xe8/0x140 [ 458.703665][T30012] dump_stack+0x15/0x1b [ 458.703687][T30012] should_fail_ex+0x265/0x280 [ 458.703761][T30012] should_fail+0xb/0x20 [ 458.703780][T30012] should_fail_usercopy+0x1a/0x20 [ 458.703882][T30012] _copy_from_user+0x1c/0xb0 [ 458.703907][T30012] memdup_user+0x5e/0xd0 [ 458.703937][T30012] strndup_user+0x68/0xb0 [ 458.704028][T30012] __se_sys_request_key+0xea/0x290 [ 458.704111][T30012] ? fput+0x8f/0xc0 [ 458.704129][T30012] __x64_sys_request_key+0x55/0x70 [ 458.704159][T30012] x64_sys_call+0x1d98/0x3000 [ 458.704179][T30012] do_syscall_64+0xd2/0x200 [ 458.704207][T30012] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 458.704299][T30012] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 458.704327][T30012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.704354][T30012] RIP: 0033:0x7f9febacefc9 [ 458.704368][T30012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 458.704384][T30012] RSP: 002b:00007f9fea537038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 458.704401][T30012] RAX: ffffffffffffffda RBX: 00007f9febd25fa0 RCX: 00007f9febacefc9 [ 458.704412][T30012] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 458.704423][T30012] RBP: 00007f9fea537090 R08: 0000000000000000 R09: 0000000000000000 [ 458.704434][T30012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.704506][T30012] R13: 00007f9febd26038 R14: 00007f9febd25fa0 R15: 00007ffe9644bf68 [ 458.704524][T30012] [ 458.888807][T30010] veth0_to_team: entered promiscuous mode [ 458.926034][T30016] vhci_hcd: invalid port number 96 [ 458.931267][T30016] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 459.001747][T30027] loop1: detected capacity change from 0 to 1024 [ 459.009687][T30027] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 459.020709][T30027] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 459.038003][T30027] JBD2: no valid journal superblock found [ 459.043825][T30027] EXT4-fs (loop1): Could not load journal inode [ 459.054262][T30027] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 459.068930][T30027] loop1: detected capacity change from 0 to 512 [ 459.086718][T30027] EXT4-fs error (device loop1): ext4_quota_enable:7132: comm syz.1.9212: Bad quota inum: 2, type: 1 [ 459.098397][T30027] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 459.145202][T30038] netlink: 40 bytes leftover after parsing attributes in process `syz.3.9215'. [ 459.229121][T30046] random: crng reseeded on system resumption [ 459.260534][T30049] 9pnet_fd: Insufficient options for proto=fd [ 459.369744][T30060] vhci_hcd: invalid port number 96 [ 459.374972][T30060] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 459.489972][T30072] loop1: detected capacity change from 0 to 1024 [ 459.497492][T30072] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 459.508453][T30072] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 459.564401][T30072] JBD2: no valid journal superblock found [ 459.570287][T30072] EXT4-fs (loop1): Could not load journal inode [ 459.581778][T30072] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 459.595600][T30072] loop1: detected capacity change from 0 to 512 [ 459.606878][T30072] EXT4-fs error (device loop1): ext4_quota_enable:7132: comm syz.1.9227: Bad quota inum: 2, type: 1 [ 459.618222][T30072] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 459.707650][T30084] loop1: detected capacity change from 0 to 128 [ 459.911165][T30086] loop9: detected capacity change from 0 to 128 [ 460.123250][T30091] lo speed is unknown, defaulting to 1000 [ 460.143859][T30091] lo speed is unknown, defaulting to 1000 [ 460.164593][T30091] lo speed is unknown, defaulting to 1000 [ 460.438277][T30096] siw: device registration error -23 [ 460.443863][T30097] lo speed is unknown, defaulting to 1000 [ 460.465628][T30097] lo speed is unknown, defaulting to 1000 [ 460.483107][T30097] lo speed is unknown, defaulting to 1000 [ 460.563909][T30109] blktrace: Concurrent blktraces are not allowed on sg0 [ 460.897022][T30097] chnl_net:caif_netlink_parms(): no params data found [ 460.959616][T30109] Set syz1 is full, maxelem 65536 reached [ 461.024355][T30097] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.031508][T30097] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.038974][T30097] bridge_slave_0: entered allmulticast mode [ 461.040226][T30131] netlink: '+}[@': attribute type 10 has an invalid length. [ 461.045828][T30097] bridge_slave_0: entered promiscuous mode [ 461.052337][T30131] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 461.063624][T30097] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.073813][T30097] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.081346][T30097] bridge_slave_1: entered allmulticast mode [ 461.088132][T30097] bridge_slave_1: entered promiscuous mode [ 461.095605][T30131] batman_adv: batadv0: Adding interface: veth1_vlan [ 461.102481][T30131] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.145958][T30131] batman_adv: batadv0: Interface activated: veth1_vlan [ 461.153889][T20542] bridge_slave_1: left allmulticast mode [ 461.159621][T20542] bridge_slave_1: left promiscuous mode [ 461.165592][T20542] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.188136][T20542] bridge_slave_0: left allmulticast mode [ 461.193887][T20542] bridge_slave_0: left promiscuous mode [ 461.199799][T20542] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.246690][T30136] loop3: detected capacity change from 0 to 1024 [ 461.264123][T30136] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 461.275106][T30136] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 461.289407][T20542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.298411][T30136] JBD2: no valid journal superblock found [ 461.304366][T30136] EXT4-fs (loop3): Could not load journal inode [ 461.313222][T20542] bond_slave_0: left allmulticast mode [ 461.319502][T20542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.329602][T20542] bond_slave_1: left allmulticast mode [ 461.335398][T20542] bond0 (unregistering): Released all slaves [ 461.337180][T30136] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 461.351933][T20542] bond1 (unregistering): Released all slaves [ 461.370072][T30136] loop3: detected capacity change from 0 to 512 [ 461.386944][T30097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 461.401529][T20542] tipc: Disabling bearer [ 461.406842][T20542] tipc: Left network mode [ 461.413242][T30097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 461.437983][T30136] EXT4-fs error (device loop3): ext4_quota_enable:7132: comm syz.3.9243: Bad quota inum: 2, type: 1 [ 461.452042][T30136] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 461.483807][T30097] team0: Port device team_slave_0 added [ 461.490927][T30097] team0: Port device team_slave_1 added [ 461.519262][T30097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.526367][T30097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.552491][T30097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.575100][T30097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.582288][T30097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.608312][T30097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.632774][T20542] hsr_slave_0: left promiscuous mode [ 461.639246][T20542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.647709][T20542] batman_adv: batadv0: Removing interface: veth1_vlan [ 461.691951][T20542] team0 (unregistering): Port device team_slave_1 removed [ 461.705038][T20542] team0 (unregistering): Port device team_slave_0 removed [ 461.767520][T30152] blktrace: Concurrent blktraces are not allowed on sg0 [ 461.795581][T30153] siw: device registration error -23 [ 461.807950][T30152] tipc: Enabling of bearer rejected, already enabled [ 461.819301][T30147] lo speed is unknown, defaulting to 1000 [ 461.825488][T30147] lo speed is unknown, defaulting to 1000 [ 461.834194][T30097] hsr_slave_0: entered promiscuous mode [ 461.840867][T30097] hsr_slave_1: entered promiscuous mode [ 461.847266][T30097] debugfs: 'hsr0' already exists in 'hsr' [ 461.853355][T30097] Cannot create hsr debugfs directory [ 461.858948][T30147] lo speed is unknown, defaulting to 1000 [ 462.056662][T30159] rdma_rxe: rxe_newlink: failed to add lo [ 462.092179][T30163] rdma_rxe: rxe_newlink: failed to add lo [ 462.156514][T30167] netlink: '+}[@': attribute type 10 has an invalid length. [ 462.163907][T30167] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 462.175145][T30170] blktrace: Concurrent blktraces are not allowed on sg0 [ 462.268924][T30174] loop9: detected capacity change from 0 to 256 [ 462.286903][T30174] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 462.313791][T30174] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 462.342453][T30097] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 462.378437][T30180] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 462.416157][T30184] blktrace: Concurrent blktraces are not allowed on sg0 [ 462.465088][T30097] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 462.478181][T30184] tipc: Enabling of bearer rejected, already enabled [ 462.486301][T30097] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 462.513165][T30097] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 462.590781][T30193] loop9: detected capacity change from 0 to 512 [ 462.604729][T30186] lo speed is unknown, defaulting to 1000 [ 462.621050][T30193] EXT4-fs: Ignoring removed mblk_io_submit option [ 462.627740][T30193] EXT4-fs: inline encryption not supported [ 462.659128][T30186] lo speed is unknown, defaulting to 1000 [ 462.661796][T30170] Set syz1 is full, maxelem 65536 reached [ 462.671043][T30193] EXT4-fs: test_dummy_encryption option not supported [ 462.681372][T30186] lo speed is unknown, defaulting to 1000 [ 462.689620][T30097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.707274][T30097] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.710982][ T29] kauditd_printk_skb: 246 callbacks suppressed [ 462.711002][ T29] audit: type=1400 audit(22748.728:29041): avc: denied { setopt } for pid=30194 comm="syz.6.9260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 462.742033][T20525] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.749168][T20525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.766750][T20525] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.773909][T20525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.920752][T30203] loop3: detected capacity change from 0 to 1024 [ 462.946277][T30203] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 462.957257][T30203] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 462.962364][T30097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.981485][ T29] audit: type=1326 audit(22748.988:29042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30212 comm="syz.1.9263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67aacefc9 code=0x7ffc0000 [ 463.005038][ T29] audit: type=1326 audit(22748.988:29043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30212 comm="syz.1.9263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67aacefc9 code=0x7ffc0000 [ 463.028481][ T29] audit: type=1326 audit(22748.988:29044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30212 comm="syz.1.9263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb67aacefc9 code=0x7ffc0000 [ 463.047077][T30203] JBD2: no valid journal superblock found [ 463.051737][ T29] audit: type=1326 audit(22748.988:29045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30212 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67aacefc9 code=0x7ffc0000 [ 463.057477][T30203] EXT4-fs (loop3): Could not load journal inode [ 463.079701][ T29] audit: type=1326 audit(22748.988:29046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30212 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67aacefc9 code=0x7ffc0000 [ 463.108590][ T29] audit: type=1326 audit(22748.988:29047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30212 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb67aacefc9 code=0x7ffc0000 [ 463.130988][ T29] audit: type=1326 audit(22748.988:29048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30212 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67aacefc9 code=0x7ffc0000 [ 463.153667][ T29] audit: type=1326 audit(22748.988:29049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30212 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb67aacefc9 code=0x7ffc0000 [ 463.176213][ T29] audit: type=1326 audit(22748.988:29050): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30212 comm="" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67aacefc9 code=0x7ffc0000 [ 463.204368][T30210] loop9: detected capacity change from 0 to 1024 [ 463.232570][T30210] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 463.243604][T30210] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 463.263011][T30203] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 463.285582][T30210] JBD2: no valid journal superblock found [ 463.291503][T30210] EXT4-fs (loop9): Could not load journal inode [ 463.301547][T30203] loop3: detected capacity change from 0 to 512 [ 463.324240][T30231] loop1: detected capacity change from 0 to 1024 [ 463.331170][T30231] EXT4-fs: inline encryption not supported [ 463.346234][T30231] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 463.362247][T30210] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 463.372348][T30097] veth0_vlan: entered promiscuous mode [ 463.381443][T30097] veth1_vlan: entered promiscuous mode [ 463.389275][T30203] EXT4-fs error (device loop3): ext4_quota_enable:7132: comm syz.3.9262: Bad quota inum: 2, type: 1 [ 463.390582][T30231] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.9267: lblock 2 mapped to illegal pblock 2 (length 1) [ 463.415089][T30203] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 463.425856][T30097] veth0_macvtap: entered promiscuous mode [ 463.436269][T30231] EXT4-fs (loop1): Remounting filesystem read-only [ 463.457356][T30210] loop9: detected capacity change from 0 to 512 [ 463.470948][T29455] EXT4-fs unmount: 78 callbacks suppressed [ 463.470970][T29455] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 463.493285][T30097] veth1_macvtap: entered promiscuous mode [ 463.500196][T30210] EXT4-fs (loop9): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 463.512790][T30231] EXT4-fs (loop1): 1 orphan inode deleted [ 463.524015][T30231] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 463.541144][T30097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.560618][T30097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.572409][T30210] EXT4-fs error (device loop9): ext4_quota_enable:7132: comm syz.9.9264: Bad quota inum: 2, type: 1 [ 463.603890][T30240] loop3: detected capacity change from 0 to 1024 [ 463.611460][T30210] EXT4-fs warning (device loop9): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 463.630957][T20532] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.640002][T20532] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.653859][T26711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.675838][T30240] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 463.687099][T30240] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 463.703749][T20532] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.708517][T30240] JBD2: no valid journal superblock found [ 463.718865][T30240] EXT4-fs (loop3): Could not load journal inode [ 463.725507][T20525] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.738205][T30242] blktrace: Concurrent blktraces are not allowed on sg0 [ 463.753272][T30240] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 463.761448][T30245] vhci_hcd: invalid port number 96 [ 463.768064][T30245] vhci_hcd: default hub control req: 2000 vfffc i0060 l7 [ 463.768290][T30240] loop3: detected capacity change from 0 to 512 [ 463.788307][T30242] tipc: Enabling of bearer rejected, already enabled [ 463.800569][T30240] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 463.825386][T21377] EXT4-fs (loop9): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 463.846323][T30250] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 463.859860][T30252] netdevsim netdevsim9 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.875942][T30240] EXT4-fs error (device loop3): ext4_quota_enable:7132: comm syz.3.9268: Bad quota inum: 2, type: 1 [ 463.887279][T30240] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 463.944766][T29455] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 463.957238][T30252] netdevsim netdevsim9 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.997217][T30252] netdevsim netdevsim9 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.086174][T30261] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9273'. [ 464.095205][T30261] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9273'. [ 464.111550][T30252] netdevsim netdevsim9 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.169483][T30265] loop3: detected capacity change from 0 to 1024 [ 464.176670][T30265] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 464.187803][T30265] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 464.206483][T30265] JBD2: no valid journal superblock found [ 464.212371][T30265] EXT4-fs (loop3): Could not load journal inode [ 464.221856][T20543] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.231229][T20543] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.240824][T30265] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 464.259646][T20543] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.269496][T20543] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 464.279196][T30270] loop1: detected capacity change from 0 to 1024 [ 464.292296][T30265] loop3: detected capacity change from 0 to 512 [ 464.296158][T30270] EXT4-fs: inline encryption not supported [ 464.307784][T30265] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 464.320346][T30270] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 464.343374][T30270] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.9278: lblock 2 mapped to illegal pblock 2 (length 1) [ 464.363507][T30265] EXT4-fs error (device loop3): ext4_quota_enable:7132: comm syz.3.9277: Bad quota inum: 2, type: 1 [ 464.374716][T30270] EXT4-fs (loop1): Remounting filesystem read-only [ 464.375171][T30265] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 464.384652][T30270] EXT4-fs (loop1): 1 orphan inode deleted [ 464.402025][T30270] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.435621][T26711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.468129][T29455] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 464.488051][T30282] netlink: '+}[@': attribute type 10 has an invalid length. [ 464.495495][T30282] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 464.530414][T30287] blktrace: Concurrent blktraces are not allowed on sg0 [ 464.560109][T30285] loop1: detected capacity change from 0 to 2048 [ 464.569566][T30287] tipc: Started in network mode [ 464.574538][T30287] tipc: Node identity ac14140f, cluster identity 4711 [ 464.581766][T30287] tipc: New replicast peer: 255.255.255.255 [ 464.588120][T30287] tipc: Enabled bearer , priority 10 [ 464.647518][T30293] rdma_rxe: rxe_newlink: failed to add lo [ 464.666832][T30285] loop1: unable to read partition table [ 464.679970][T30285] loop1: partition table beyond EOD, truncated [ 464.686354][T30285] loop_reread_partitions: partition scan of loop1 () failed (rc=-5) [ 464.750935][T30301] loop3: detected capacity change from 0 to 512 [ 464.758222][T30301] EXT4-fs: Ignoring removed oldalloc option [ 464.764476][T30301] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 464.778863][T30300] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 464.806609][T30301] EXT4-fs (loop3): 1 truncate cleaned up [ 464.812839][T30301] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.897995][T30301] FAULT_INJECTION: forcing a failure. [ 464.897995][T30301] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 464.911553][T30301] CPU: 1 UID: 0 PID: 30301 Comm: syz.3.9290 Not tainted syzkaller #0 PREEMPT(voluntary) [ 464.911642][T30301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 464.911658][T30301] Call Trace: [ 464.911665][T30301] [ 464.911675][T30301] __dump_stack+0x1d/0x30 [ 464.911700][T30301] dump_stack_lvl+0xe8/0x140 [ 464.911721][T30301] dump_stack+0x15/0x1b [ 464.911738][T30301] should_fail_ex+0x265/0x280 [ 464.911816][T30301] should_fail+0xb/0x20 [ 464.911833][T30301] should_fail_usercopy+0x1a/0x20 [ 464.911859][T30301] strncpy_from_user+0x25/0x230 [ 464.911888][T30301] ? kmem_cache_alloc_noprof+0x242/0x480 [ 464.911927][T30301] ? getname_flags+0x80/0x3b0 [ 464.912015][T30301] getname_flags+0xae/0x3b0 [ 464.912101][T30301] __x64_sys_rename+0x33/0x70 [ 464.912127][T30301] x64_sys_call+0x1f9/0x3000 [ 464.912150][T30301] do_syscall_64+0xd2/0x200 [ 464.912171][T30301] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 464.912239][T30301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.912266][T30301] RIP: 0033:0x7f9febacefc9 [ 464.912285][T30301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.912307][T30301] RSP: 002b:00007f9fea537038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 464.912325][T30301] RAX: ffffffffffffffda RBX: 00007f9febd25fa0 RCX: 00007f9febacefc9 [ 464.912402][T30301] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000000 [ 464.912415][T30301] RBP: 00007f9fea537090 R08: 0000000000000000 R09: 0000000000000000 [ 464.912431][T30301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.912475][T30301] R13: 00007f9febd26038 R14: 00007f9febd25fa0 R15: 00007ffe9644bf68 [ 464.912597][T30301] [ 465.090354][T30307] loop9: detected capacity change from 0 to 1024 [ 465.103080][T30307] EXT4-fs: inline encryption not supported [ 465.113872][T30307] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 465.158791][T30307] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 2: comm syz.9.9292: lblock 2 mapped to illegal pblock 2 (length 1) [ 465.173178][T30307] EXT4-fs (loop9): Remounting filesystem read-only [ 465.180257][T30307] EXT4-fs (loop9): 1 orphan inode deleted [ 465.186500][T30307] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.199746][T30310] loop1: detected capacity change from 0 to 1024 [ 465.208282][T30310] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 465.219392][T30310] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 465.234274][T29455] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.244592][T30310] JBD2: no valid journal superblock found [ 465.245821][T21377] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.250439][T30310] EXT4-fs (loop1): Could not load journal inode [ 465.270664][T30310] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 465.283950][T30310] loop1: detected capacity change from 0 to 512 [ 465.301004][T30310] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 465.319231][T30325] loop3: detected capacity change from 0 to 1024 [ 465.326530][T30325] EXT4-fs: Ignoring removed orlov option [ 465.342285][T30329] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=30329 comm=syz.8.9298 [ 465.355058][T30310] EXT4-fs error (device loop1): ext4_quota_enable:7132: comm syz.1.9293: Bad quota inum: 2, type: 1 [ 465.366355][T30310] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 465.369216][T30328] loop9: detected capacity change from 0 to 512 [ 465.390560][T30332] blktrace: Concurrent blktraces are not allowed on sg0 [ 465.398471][T30329] loop8: detected capacity change from 0 to 512 [ 465.406180][T30329] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 465.417073][T30325] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.419437][T30329] EXT4-fs (loop8): 1 truncate cleaned up [ 465.444625][T26711] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 465.454793][T30329] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.474901][T30328] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 465.530178][T29455] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.559950][T21377] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.571897][T30097] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.594077][T30343] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 465.682867][T30332] Set syz1 is full, maxelem 65536 reached [ 465.688731][ T3406] tipc: Node number set to 2886997007 [ 465.738044][T30352] loop3: detected capacity change from 0 to 512 [ 465.744950][T30352] EXT4-fs: Ignoring removed nobh option [ 465.767954][T30352] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.9301: corrupted inode contents [ 465.780003][T30352] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #3: comm syz.3.9301: mark_inode_dirty error [ 465.818258][T30352] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #3: comm syz.3.9301: corrupted inode contents [ 465.839844][T30352] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.9301: mark_inode_dirty error [ 465.868901][T30352] EXT4-fs error (device loop3): ext4_acquire_dquot:6945: comm syz.3.9301: Failed to acquire dquot type 0 [ 465.911434][T30352] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.9301: corrupted inode contents [ 465.941642][T30352] EXT4-fs error (device loop3): ext4_dirty_inode:6517: inode #16: comm syz.3.9301: mark_inode_dirty error [ 465.973404][T30352] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.9301: corrupted inode contents [ 465.998176][T30352] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.9301: mark_inode_dirty error [ 466.009901][T30352] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.9301: corrupted inode contents [ 466.040891][T30352] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem [ 466.067951][T30352] EXT4-fs error (device loop3): ext4_do_update_inode:5632: inode #16: comm syz.3.9301: corrupted inode contents [ 466.080366][T30352] EXT4-fs error (device loop3): ext4_truncate:4637: inode #16: comm syz.3.9301: mark_inode_dirty error [ 466.096578][T30352] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem [ 466.115264][T30352] EXT4-fs (loop3): 1 truncate cleaned up [ 466.121643][T30352] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.143136][T30352] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9301'. [ 466.152768][T30352] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9301'. [ 466.175846][T29455] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.203294][T30363] loop3: detected capacity change from 0 to 1024 [ 466.210685][T30363] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 466.221691][T30363] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 466.235266][T30363] JBD2: no valid journal superblock found [ 466.241214][T30363] EXT4-fs (loop3): Could not load journal inode [ 466.276211][T30363] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 466.289383][T30363] loop3: detected capacity change from 0 to 512 [ 466.297896][T30363] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 466.315623][T30363] EXT4-fs error (device loop3): ext4_quota_enable:7132: comm syz.3.9308: Bad quota inum: 2, type: 1 [ 466.326807][T30363] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 466.356305][T29455] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 466.608962][T30373] loop3: detected capacity change from 0 to 1024 [ 466.627283][T30373] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 466.638441][T30373] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 466.649816][T30377] netlink: 68 bytes leftover after parsing attributes in process `syz.8.9312'. [ 466.665958][T30376] loop8: detected capacity change from 0 to 1024 [ 466.672935][T30376] EXT4-fs: inline encryption not supported [ 466.676724][T30373] JBD2: no valid journal superblock found [ 466.679155][T30376] EXT4-fs: Ignoring removed i_version option [ 466.684623][T30373] EXT4-fs (loop3): Could not load journal inode [ 466.711436][T30373] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 466.722736][T30376] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 466.737508][T30373] loop3: detected capacity change from 0 to 512 [ 466.761595][T30376] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.9312: lblock 2 mapped to illegal pblock 2 (length 1) [ 466.777277][T30373] EXT4-fs (loop3): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 466.800039][T30383] loop9: detected capacity change from 0 to 512 [ 466.806802][T30376] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.9312: lblock 0 mapped to illegal pblock 48 (length 1) [ 466.825318][T30376] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.9312: Failed to acquire dquot type 0 [ 466.842905][T30376] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 466.854454][T30383] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.872554][T30376] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.9312: mark_inode_dirty error [ 466.885224][T30376] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 466.895730][T30376] EXT4-fs (loop8): 1 orphan inode deleted [ 466.901915][T30376] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.908832][T30373] EXT4-fs error (device loop3): ext4_quota_enable:7132: comm syz.3.9311: Bad quota inum: 2, type: 1 [ 466.925609][T20542] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:37: lblock 1 mapped to illegal pblock 1 (length 1) [ 466.957240][T20542] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:37: Failed to release dquot type 0 [ 466.969564][T30373] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 466.985424][T21377] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.987589][T30376] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.015308][T30376] EXT4-fs error (device loop8): __ext4_get_inode_loc:4832: comm syz.8.9312: Invalid inode table block 1 in block_group 0 [ 467.035359][T30376] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 467.045808][T29455] EXT4-fs (loop3): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 467.065054][T30376] EXT4-fs error (device loop8): ext4_quota_off:7229: inode #3: comm syz.8.9312: mark_inode_dirty error [ 467.134491][T30398] loop9: detected capacity change from 0 to 2048 [ 467.156601][T30396] xt_CT: No such helper "netbios-ns" [ 467.176012][T30401] loop8: detected capacity change from 0 to 512 [ 467.182692][T30401] EXT4-fs: Ignoring removed oldalloc option [ 467.196005][T30401] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 467.214598][T30398] Alternate GPT is invalid, using primary GPT. [ 467.221335][T30398] loop9: p2 p3 p7 [ 467.236648][T30401] EXT4-fs (loop8): 1 truncate cleaned up [ 467.247619][T30405] netlink: '+}[@': attribute type 10 has an invalid length. [ 467.255107][T30405] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 467.261385][T30401] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.318630][T30097] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.358338][T30419] loop3: detected capacity change from 0 to 512 [ 467.370069][T30417] loop9: detected capacity change from 0 to 2048 [ 467.379128][T30421] loop8: detected capacity change from 0 to 1024 [ 467.386691][T30421] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 467.397805][T30421] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 467.405023][T30423] loop1: detected capacity change from 0 to 1024 [ 467.410199][T30421] JBD2: no valid journal superblock found [ 467.415191][T30423] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 467.419638][T30421] EXT4-fs (loop8): Could not load journal inode [ 467.430567][T30423] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 467.438080][T30417] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 467.447741][T30423] JBD2: no valid journal superblock found [ 467.464189][T30423] EXT4-fs (loop1): Could not load journal inode [ 467.471879][T30419] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 467.489263][T30421] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 467.502713][T21377] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000900. [ 467.512072][T30423] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 467.531413][T30421] loop8: detected capacity change from 0 to 512 [ 467.540438][T29455] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.554625][T30423] loop1: detected capacity change from 0 to 512 [ 467.564958][T30429] loop9: detected capacity change from 0 to 164 [ 467.572495][T30423] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 467.588863][T30421] EXT4-fs (loop8): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 467.594894][T30429] bio_check_eod: 102 callbacks suppressed [ 467.594939][T30429] syz.9.9329: attempt to access beyond end of device [ 467.594939][T30429] loop9: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 467.612064][T30435] netlink: 'syz.3.9331': attribute type 3 has an invalid length. [ 467.621910][T30429] syz.9.9329: attempt to access beyond end of device [ 467.621910][T30429] loop9: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 467.655429][T30423] EXT4-fs error (device loop1): ext4_quota_enable:7132: comm syz.1.9328: Bad quota inum: 2, type: 1 [ 467.666876][T30421] EXT4-fs error (device loop8): ext4_quota_enable:7132: comm syz.8.9326: Bad quota inum: 2, type: 1 [ 467.667427][T30423] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 467.698050][T30421] EXT4-fs warning (device loop8): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 467.742412][T26711] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 467.766593][T30446] blktrace: Concurrent blktraces are not allowed on sg0 [ 467.771390][T30097] EXT4-fs (loop8): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 467.825168][ T29] kauditd_printk_skb: 218 callbacks suppressed [ 467.825186][ T29] audit: type=1400 audit(22753.849:29258): avc: denied { bind } for pid=30451 comm="syz.1.9338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 467.923115][ T29] audit: type=1400 audit(22753.889:29259): avc: denied { setopt } for pid=30451 comm="syz.1.9338" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 467.943578][ T29] audit: type=1326 audit(22753.889:29260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30451 comm="syz.1.9338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67aacefc9 code=0x7ffc0000 [ 467.967104][ T29] audit: type=1326 audit(22753.889:29261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30451 comm="syz.1.9338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fb67aacefc9 code=0x7ffc0000 [ 467.990398][ T29] audit: type=1326 audit(22753.889:29262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30451 comm="syz.1.9338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb67aacf003 code=0x7ffc0000 [ 468.013673][ T29] audit: type=1326 audit(22753.889:29263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30451 comm="syz.1.9338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fb67aacf003 code=0x7ffc0000 [ 468.019314][T30446] Set syz1 is full, maxelem 65536 reached [ 468.037554][ T29] audit: type=1326 audit(22753.889:29264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30451 comm="syz.1.9338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67aacefc9 code=0x7ffc0000 [ 468.066302][ T29] audit: type=1326 audit(22753.899:29265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30451 comm="syz.1.9338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67aacefc9 code=0x7ffc0000 [ 468.074348][T30462] netlink: 5 bytes leftover after parsing attributes in process `syz.9.9339'. [ 468.089642][ T29] audit: type=1326 audit(22753.899:29266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30451 comm="syz.1.9338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67aacefc9 code=0x7ffc0000 [ 468.089672][ T29] audit: type=1326 audit(22753.899:29267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30451 comm="syz.1.9338" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb67aacefc9 code=0x7ffc0000 [ 468.150615][T30462] 0ªî{X¹¦: renamed from gretap0 (while UP) [ 468.159733][T30462] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 468.285495][T30475] netlink: '+}[@': attribute type 10 has an invalid length. [ 468.293263][T30475] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 468.319823][T30478] netlink: 'syz.3.9344': attribute type 3 has an invalid length. [ 468.696474][T30490] loop1: detected capacity change from 0 to 1024 [ 468.703469][T30490] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 468.715046][T30490] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 468.725536][T30490] JBD2: no valid journal superblock found [ 468.731405][T30490] EXT4-fs (loop1): Could not load journal inode [ 468.740590][T30490] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 468.752609][T30490] loop1: detected capacity change from 0 to 512 [ 468.761017][T30490] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 468.779333][T30490] EXT4-fs error (device loop1): ext4_quota_enable:7132: comm syz.1.9347: Bad quota inum: 2, type: 1 [ 468.790828][T30490] EXT4-fs warning (device loop1): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 468.816938][T30494] loop8: detected capacity change from 0 to 1024 [ 468.823918][T26711] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 468.824036][T30494] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 468.844095][T30494] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 468.854716][T30494] JBD2: no valid journal superblock found [ 468.860475][T30494] EXT4-fs (loop8): Could not load journal inode [ 468.869952][T30494] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 468.882952][T30494] loop8: detected capacity change from 0 to 512 [ 468.891594][T30494] EXT4-fs (loop8): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 468.914998][T30494] EXT4-fs error (device loop8): ext4_quota_enable:7132: comm syz.8.9348: Bad quota inum: 2, type: 1 [ 468.926779][T30494] EXT4-fs warning (device loop8): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 468.953895][T30097] EXT4-fs (loop8): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 468.955539][T30502] loop1: detected capacity change from 0 to 128 [ 468.972730][T30502] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9351'. [ 469.018723][T30506] blktrace: Concurrent blktraces are not allowed on sg0 [ 469.030976][T30510] netlink: 'syz.8.9355': attribute type 3 has an invalid length. [ 469.041407][T30512] rdma_rxe: rxe_newlink: failed to add lo [ 469.135999][T30524] lo speed is unknown, defaulting to 1000 [ 469.142193][T30524] lo speed is unknown, defaulting to 1000 [ 469.154928][T30524] lo speed is unknown, defaulting to 1000 [ 469.286085][T30506] Set syz1 is full, maxelem 65536 reached [ 469.304900][T30528] blktrace: Concurrent blktraces are not allowed on sg0 [ 469.314871][T30528] tipc: Enabling of bearer rejected, already enabled [ 469.376874][T30539] loop8: detected capacity change from 0 to 1024 [ 469.384241][T30539] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 469.395344][T30539] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 469.396357][T30541] lo speed is unknown, defaulting to 1000 [ 469.409153][T30539] JBD2: no valid journal superblock found [ 469.411745][T30541] lo speed is unknown, defaulting to 1000 [ 469.416842][T30539] EXT4-fs (loop8): Could not load journal inode [ 469.423558][T30541] lo speed is unknown, defaulting to 1000 [ 469.440505][T30539] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 469.464131][T30539] loop8: detected capacity change from 0 to 512 [ 469.479443][T30539] EXT4-fs (loop8): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 469.515874][T30539] EXT4-fs error (device loop8): ext4_quota_enable:7132: comm syz.8.9362: Bad quota inum: 2, type: 1 [ 469.527074][T30539] EXT4-fs warning (device loop8): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 469.568081][T30097] EXT4-fs (loop8): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 469.995424][T30571] xt_CT: No such helper "pptp" [ 470.009565][T30571] loop1: detected capacity change from 0 to 512 [ 470.017562][T30571] EXT4-fs (loop1): external journal device major/minor numbers have changed [ 470.026417][T30571] EXT4-fs (loop1): failed to open journal device unknown-block(8,3) -6 [ 470.476699][T30580] FAULT_INJECTION: forcing a failure. [ 470.476699][T30580] name failslab, interval 1, probability 0, space 0, times 0 [ 470.489412][T30580] CPU: 1 UID: 0 PID: 30580 Comm: syz.6.9375 Not tainted syzkaller #0 PREEMPT(voluntary) [ 470.489441][T30580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 470.489458][T30580] Call Trace: [ 470.489467][T30580] [ 470.489477][T30580] __dump_stack+0x1d/0x30 [ 470.489565][T30580] dump_stack_lvl+0xe8/0x140 [ 470.489593][T30580] dump_stack+0x15/0x1b [ 470.489615][T30580] should_fail_ex+0x265/0x280 [ 470.489659][T30580] should_failslab+0x8c/0xb0 [ 470.489729][T30580] kmem_cache_alloc_noprof+0x50/0x480 [ 470.489762][T30580] ? __inet_bhash2_update_saddr+0x128/0xf70 [ 470.489786][T30580] __inet_bhash2_update_saddr+0x128/0xf70 [ 470.489808][T30580] ? tcp_chrono_stop+0x1f3/0x210 [ 470.489850][T30580] ? rb_first+0xd/0x40 [ 470.489879][T30580] ? tcp_write_queue_purge+0x6fc/0x720 [ 470.489950][T30580] inet_bhash2_reset_saddr+0x48/0x60 [ 470.489974][T30580] tcp_disconnect+0x51a/0xf50 [ 470.490053][T30580] __mptcp_close_ssk+0x285/0xa30 [ 470.490111][T30580] ? tcp_release_cb+0xf1/0x370 [ 470.490150][T30580] mptcp_destroy_common+0xfa/0x220 [ 470.490189][T30580] ? mptcp_pm_connection_closed+0x4d/0x60 [ 470.490218][T30580] mptcp_disconnect+0x1bd/0x3c0 [ 470.490289][T30580] mptcp_sendmsg_fastopen+0x244/0x320 [ 470.490323][T30580] mptcp_sendmsg+0xcf0/0xf50 [ 470.490347][T30580] ? avc_has_perm+0xf7/0x180 [ 470.490370][T30580] ? selinux_socket_sendmsg+0x175/0x1b0 [ 470.490401][T30580] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 470.490476][T30580] inet_sendmsg+0xc5/0xd0 [ 470.490501][T30580] __sock_sendmsg+0x102/0x180 [ 470.490552][T30580] ____sys_sendmsg+0x345/0x4e0 [ 470.490594][T30580] ___sys_sendmsg+0x17b/0x1d0 [ 470.490693][T30580] __sys_sendmmsg+0x178/0x300 [ 470.490746][T30580] __x64_sys_sendmmsg+0x57/0x70 [ 470.490857][T30580] x64_sys_call+0x1c4a/0x3000 [ 470.490883][T30580] do_syscall_64+0xd2/0x200 [ 470.490905][T30580] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 470.491056][T30580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.491083][T30580] RIP: 0033:0x7f6db332efc9 [ 470.491101][T30580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.491123][T30580] RSP: 002b:00007f6db1d8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 470.491146][T30580] RAX: ffffffffffffffda RBX: 00007f6db3585fa0 RCX: 00007f6db332efc9 [ 470.491219][T30580] RDX: 0000000000000001 RSI: 0000200000004980 RDI: 0000000000000005 [ 470.491234][T30580] RBP: 00007f6db1d8f090 R08: 0000000000000000 R09: 0000000000000000 [ 470.491249][T30580] R10: 0000000020000810 R11: 0000000000000246 R12: 0000000000000001 [ 470.491296][T30580] R13: 00007f6db3586038 R14: 00007f6db3585fa0 R15: 00007ffc88775888 [ 470.491319][T30580] [ 470.493539][T30581] loop3: detected capacity change from 0 to 764 [ 470.635001][T30591] __nla_validate_parse: 2 callbacks suppressed [ 470.635073][T30591] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9380'. [ 470.668808][T30574] FAULT_INJECTION: forcing a failure. [ 470.668808][T30574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.797999][T30574] CPU: 0 UID: 0 PID: 30574 Comm: syz.3.9372 Not tainted syzkaller #0 PREEMPT(voluntary) [ 470.798032][T30574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 470.798048][T30574] Call Trace: [ 470.798057][T30574] [ 470.798067][T30574] __dump_stack+0x1d/0x30 [ 470.798153][T30574] dump_stack_lvl+0xe8/0x140 [ 470.798179][T30574] dump_stack+0x15/0x1b [ 470.798207][T30574] should_fail_ex+0x265/0x280 [ 470.798248][T30574] should_fail+0xb/0x20 [ 470.798267][T30574] should_fail_usercopy+0x1a/0x20 [ 470.798297][T30574] _copy_to_user+0x20/0xa0 [ 470.798330][T30574] simple_read_from_buffer+0xb5/0x130 [ 470.798412][T30574] proc_fail_nth_read+0x10e/0x150 [ 470.798448][T30574] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 470.798480][T30574] vfs_read+0x1a8/0x770 [ 470.798505][T30574] ? __rcu_read_unlock+0x4f/0x70 [ 470.798548][T30574] ? __fget_files+0x184/0x1c0 [ 470.798579][T30574] ksys_read+0xda/0x1a0 [ 470.798636][T30574] __x64_sys_read+0x40/0x50 [ 470.798690][T30574] x64_sys_call+0x27c0/0x3000 [ 470.798713][T30574] do_syscall_64+0xd2/0x200 [ 470.798732][T30574] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 470.798761][T30574] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 470.798851][T30574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.798947][T30574] RIP: 0033:0x7f9febacd9dc [ 470.798962][T30574] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 470.798980][T30574] RSP: 002b:00007f9fea537030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 470.798999][T30574] RAX: ffffffffffffffda RBX: 00007f9febd25fa0 RCX: 00007f9febacd9dc [ 470.799012][T30574] RDX: 000000000000000f RSI: 00007f9fea5370a0 RDI: 0000000000000006 [ 470.799046][T30574] RBP: 00007f9fea537090 R08: 0000000000000000 R09: 0000000000000000 [ 470.799059][T30574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.799072][T30574] R13: 00007f9febd26038 R14: 00007f9febd25fa0 R15: 00007ffe9644bf68 [ 470.799095][T30574] [ 470.801889][T30596] 9pnet_fd: Insufficient options for proto=fd [ 471.016860][T30600] lo speed is unknown, defaulting to 1000 [ 471.023062][T30600] lo speed is unknown, defaulting to 1000 [ 471.034615][T30600] lo speed is unknown, defaulting to 1000 [ 471.176751][T30613] siw: device registration error -23 [ 471.274193][T30624] netlink: '+}[@': attribute type 10 has an invalid length. [ 471.281550][T30624] netlink: 40 bytes leftover after parsing attributes in process `+}[@'. [ 471.291972][T30624] batman_adv: batadv0: Adding interface: veth1_vlan [ 471.298671][T30624] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.324592][T30624] batman_adv: batadv0: Interface activated: veth1_vlan [ 471.411309][T30631] netlink: 'syz.8.9394': attribute type 3 has an invalid length. [ 471.484656][T30635] blktrace: Concurrent blktraces are not allowed on sg0 [ 471.517598][T30635] tipc: Enabling of bearer rejected, already enabled [ 471.677274][T30638] loop6: detected capacity change from 0 to 1024 [ 471.684279][T30638] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 471.695269][T30638] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 471.706070][T30638] JBD2: no valid journal superblock found [ 471.711825][T30638] EXT4-fs (loop6): Could not load journal inode [ 471.721238][T30638] SELinux: security_context_str_to_sid (Ð-šXܘ7.H\¹ÿ %ºu@) failed with errno=-22 [ 471.735743][T30638] loop6: detected capacity change from 0 to 512 [ 471.744110][T30638] EXT4-fs (loop6): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 471.754952][T30643] netlink: 'syz.1.9399': attribute type 12 has an invalid length. [ 471.787730][T30638] EXT4-fs error (device loop6): ext4_quota_enable:7132: comm syz.6.9397: Bad quota inum: 2, type: 1 [ 471.800247][T30638] EXT4-fs warning (device loop6): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 471.838548][T26219] EXT4-fs (loop6): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 472.018291][T30654] tipc: Enabling of bearer rejected, already enabled [ 472.059884][T30655] loop6: detected capacity change from 0 to 1024 [ 472.060290][T30655] EXT4-fs: Ignoring removed oldalloc option [ 472.060329][T30655] EXT4-fs: Ignoring removed bh option [ 472.060369][T30655] ext4: Bad value for 'min_batch_time' [ 472.325128][T30666] blktrace: Concurrent blktraces are not allowed on sg0 [ 472.376134][T30666] tipc: Enabling of bearer rejected, already enabled [ 472.376241][T30645] ================================================================== [ 472.392082][T30645] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 472.399144][T30645] [ 472.401493][T30645] write to 0xffffffff86915ab8 of 88 bytes by task 30666 on cpu 1: [ 472.409321][T30645] prb_reserve+0x695/0xaf0 [ 472.413770][T30645] vprintk_store+0x56d/0x860 [ 472.418385][T30645] vprintk_emit+0x10d/0x580 [ 472.422919][T30645] vprintk_default+0x26/0x30 [ 472.427547][T30645] vprintk+0x1d/0x30 [ 472.431485][T30645] _printk+0x79/0xa0 [ 472.435393][T30645] __tipc_nl_bearer_enable+0xc21/0xda0 [ 472.440943][T30645] tipc_nl_bearer_enable+0x22/0x40 [ 472.446079][T30645] genl_family_rcv_msg_doit+0x143/0x1b0 [ 472.451660][T30645] genl_rcv_msg+0x422/0x460 [ 472.456202][T30645] netlink_rcv_skb+0x123/0x220 [ 472.460985][T30645] genl_rcv+0x28/0x40 [ 472.464978][T30645] netlink_unicast+0x5c0/0x690 [ 472.469776][T30645] netlink_sendmsg+0x58b/0x6b0 [ 472.474564][T30645] __sock_sendmsg+0x145/0x180 [ 472.479253][T30645] ____sys_sendmsg+0x31e/0x4e0 [ 472.484045][T30645] ___sys_sendmsg+0x17b/0x1d0 [ 472.488752][T30645] __x64_sys_sendmsg+0xd4/0x160 [ 472.493622][T30645] x64_sys_call+0x191e/0x3000 [ 472.498346][T30645] do_syscall_64+0xd2/0x200 [ 472.502856][T30645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.508781][T30645] [ 472.511113][T30645] read to 0xffffffff86915ab8 of 8 bytes by task 30645 on cpu 0: [ 472.518751][T30645] _prb_read_valid+0x383/0x920 [ 472.523540][T30645] prb_read_valid+0x3c/0x60 [ 472.528065][T30645] console_unlock+0x164/0x2e0 [ 472.532757][T30645] do_con_write+0x28df/0x2940 [ 472.537453][T30645] con_write+0x24/0x40 [ 472.541547][T30645] n_tty_write+0x7ca/0xb40 [ 472.546003][T30645] file_tty_write+0x378/0x690 [ 472.550699][T30645] tty_write+0x25/0x30 [ 472.554779][T30645] vfs_write+0x52a/0x960 [ 472.559048][T30645] ksys_write+0xda/0x1a0 [ 472.563311][T30645] __x64_sys_write+0x40/0x50 [ 472.567912][T30645] x64_sys_call+0x2802/0x3000 [ 472.572599][T30645] do_syscall_64+0xd2/0x200 [ 472.577109][T30645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.583104][T30645] [ 472.585436][T30645] value changed: 0x00000000000036d3 -> 0x00000000000056d3 [ 472.592558][T30645] [ 472.594887][T30645] Reported by Kernel Concurrency Sanitizer on: [ 472.601044][T30645] CPU: 0 UID: 0 PID: 30645 Comm: syz.1.9400 Not tainted syzkaller #0 PREEMPT(voluntary) [ 472.610861][T30645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 472.620927][T30645] ================================================================== [ 475.105372][T20562] tipc: Disabling bearer [ 475.110684][T20562] tipc: Left network mode [ 475.162201][T20562] hsr_slave_0: left promiscuous mode [ 475.168356][T20562] hsr_slave_1: left promiscuous mode [ 475.174212][T20562] batman_adv: batadv0: Removing interface: veth1_vlan [ 475.456482][T20562] IPVS: stop unused estimator thread 0...