last executing test programs: 4m9.249882551s ago: executing program 1 (id=13688): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)="a80136bbf96f59c854f5dac4990dd9747a96bcbb2197ab003210ca05d9daf86ae1870a61c8ae2fc3519ad035b9e444cfbcc574fc0f9ed2964e7aece51ef9f1c31d066d293d62ab10d974d877e092b45b5d91aa4b766593ba0ddfe74cc5618547c476bb5a5fefc4057664dc", 0x6b}, {&(0x7f0000000580)="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", 0xfe}, {&(0x7f00000003c0)="78e52f79a36d959d949ff30097a0acd21dfc0a191af4520b4f54385653cf49c9c33b9875cfc9a4052a7216ca363f60fe8269fd8a76a0d18cb5fdbacf83e5af111c76a98452400e37e57e86fcd9a70514b1b654b87f2b2e677b7799e2ab58d36d03ae614d39d6e4d9f2e621072baa3bf66b55cc73c562", 0x76}], 0x3) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = syz_io_uring_setup(0x2e43, &(0x7f00000004c0)={0x0, 0x3165, 0x40, 0x0, 0x143}, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f0000000100), 0x100000000000001a) umount2(&(0x7f0000000bc0)='./file0\x00', 0xb) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000b80)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f0000000f80)=ANY=[@ANYBLOB="e8030000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0800030005000000080003000400000014000200776730000000000000000000000000001400020068737230000000000000000000000000740001801400020070696d36726567310000000000000000140002006970365f7674693000000000000000001400020076657468305f746f5f6873720000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300000000001400020076657468315f746f5f62726964676500080003000100000008000100", @ANYRES32=r4, @ANYBLOB="2e7c4b5618193a4aa920f273e9"], 0x3e8}, 0x1, 0x0, 0x0, 0x80}, 0xc051) mq_timedsend(r1, 0x0, 0x0, 0x9, 0x0) 4m9.191818337s ago: executing program 1 (id=13689): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000340), 0x1, 0x2000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) clock_gettime(0x1, &(0x7f0000000000)={0x0, 0x0}) clock_settime(0x0, &(0x7f0000000040)={r0, r1+10000000}) 4m9.176581638s ago: executing program 1 (id=13690): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10, &(0x7f0000000000), 0xfd, 0x244, &(0x7f0000000680)="$eJzs3T9oJFUcB/DvzO565m6RUxtB/AMiooFwdoJNbBQCEoKIoEJExEZJhJhgl1jZWGitksomiJ3RUtIEG0WwipoiNoIGC4OFFiu7k0hMVqNu3Dkynw9MZibz3vzesPN9u83sBmisq0mmk7SSTCbpJCmON7i7Wq4e7q5PbM8nvd4TPxWDdtV+5ajflSRrSR5KslUWeamdrGw+s/fLzmP3vbncuff9zacnxnqRh/b3dh8/eG/2jY9mHlz54qsfZotMp/un6zp/xZD/tYvklv+j2HWiaNc9Av6Judc+/Lqf+1uT3DPIfydlqhfvraUbtjp54N2/6vv2j1/ePs6xAuev1+v03wPXekDjlEm6KcqpJNV2WU5NVZ/hv2ldLl9eXHp18sXF5YUX6p6pgPPSTXYf/eTSx1dO5P/7VpV/4OLq5//JuY1v+9sHrbpHA4zFHdWqn//J51bvj/xD48g/NJf8Q3PJPzSX/ENzyT80l/zDBdb5+8PyD80l/9Bc8g/NdTz/AECz9C7V/QQyUJe65x8AAAAAAAAAAAAAAAAAAOC09Ynt+aNlXDU/eyfZfyRJe1j91uD3iJMbB38v/1z0m/2hqLqN5Nm7RjzBiD6o+enrm76rt/7nd9Zbf3UhWXs9ybV2+/T9Vxzef//dzWcc7zw/YoF/qTix//BT461/0m8b9daf2Uk+7c8/14bNP2VuG6yHzz/ds79i+Uyv/DriCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABib3wMAAP//+kBtTA==") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) 4m8.924062631s ago: executing program 1 (id=13694): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3200046, &(0x7f0000000080)={[{@delalloc}, {@nodelalloc}, {@noquota}, {@inlinecrypt}, {@data_err_ignore}, {@noinit_itable}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x5, 0x557, &(0x7f0000000fc0)="$eJzs3c+LG1UcAPDvZHf7W9tCKSoiCz1Yqc12d/1RwUM9ihYLeq9hM13KJk3ZZEt3Ldge7MWLFEHEgnjXu8fiP+BfUdBCkbLowUtkspNt2k266TZttubzgSnvZSZ5852Z7+ubvFkSwMiazP4pRLwcEd8kEfsjIsnXjUe+cnJtu9V7V+ayJYlm89O/ktZ2Wb39We337c0rL0XEb19FHCtsbLe+vLJQqlTSxbw+1ahenKovrxw/Xy3Np/PphZlm8+TbszPvvfvOwGJ948w/339y68OTXx9Z/e6XOwdvJHEq9uXrOuN4Alc7K5MxmR+TiTj10IbTA2hsO0mGvQNsyVie5xOR9QH7YyzPeuD/78uIaAIjKpH/MKLa44D2vf2A7oOfG3c/WLsB2hj/+Np3I7GrdW+0ZzV54M4ou989MID2szZ+/fPmjWyJwX0PAbCpq9ci4sT4+Mb+L8n7v6070cc2D7eh/4Nn51Y2/nmz2/insD7+iS7jn71dcncrNs//wp0BNNNTNv57v+v4d33S6sBYXnuhNeabSM6dr6RZ3/ZiRByNiZ1Z/VHzOSdXbzd7resc/2VL1n57LJjvx53xnQ++p1xqlJ4k5k53r0W80nX8m6yf/6TL+c+Ox5k+2zic3nyt17rN43+6mj9FvN71/N+f0Uq6zk/Ozubzk1Ot62GqfVVs9Pf1w7/3an/Y8Wfnf8+j4z+QdM7X1h+/jR93/Zv2WvdA/NH/9b8j+axV3pG/drnUaCxOR+xIPt74+sz997br7e2z+I8eeXT/1+363x0Rn/cZ//VDP7/aV/xDOv/lxzr/j1+4/dEXP/Rqv7/+761W6Wj+Sj/9X787+CTHDgAAAAAAALabQkTsi6RQXC8XCsXi2vMdh2JPoVKrN46dqy1dKMe1fWvPPxTaM937O56HmM6fh23XZx6qz0bEwYj4dmx3q16cq1XKww4eAAAAAAAAAAAAAAAAAAAAtom9Pf7+P/PH2LD3Dnjq/OQ3jK5N838Qv/QEbEv+/4fRJf9hdMl/GF3yH0aX/IfRJf9hdMl/GF3yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbqzOnT2dJcvXdlLquXLy0vLdQuHS+n9YVidWmuOFdbvFicr9XmK2lxrlbd7PMqtdrF6ZlYujzVSOuNqfryytlqbelC4+z5amk+PZtOPJOoAAAAAAAAAAAAAAAAAAAA4PlSX15ZKFUq6aKCwpYK49tjNxQGXBh2zwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9/0XAAD//zWdOco=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x100, 0x80) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='gadgetfs\x00', 0x10005, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89901) mount_setattr(r6, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x9, 0xd, 0x80000}, 0x20) r7 = syz_io_uring_setup(0x888, &(0x7f0000000140)={0x0, 0xaee2, 0x10000, 0x4, 0xbfe00000}, &(0x7f0000000000), &(0x7f0000000280)=0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_setup(0x62f7, &(0x7f0000000540)={0x0, 0x8f99, 0x10000, 0x2, 0x3a7, 0x0, r7}, &(0x7f0000000380)=0x0, &(0x7f00000005c0)) syz_io_uring_submit(r12, r8, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x14, 0x0, 0x0, 0x9, 0x0, 0x1, 0x8, 0x1, {0x0, r11}}) r13 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x8010, r0, 0x10000000) r14 = pidfd_getfd(r0, r3, 0x0) r15 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r12, r13, &(0x7f0000000280)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2004, @fd=r14, 0x100004, &(0x7f0000000180)=[{&(0x7f0000000340)=""/244, 0xf4}, {&(0x7f0000000580)=""/236, 0xec}, {&(0x7f0000000740)=""/240, 0xf0}], 0x3, 0x4, 0x1, {0x0, r15}}) r16 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x9, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES64=r12, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r16}, 0x10) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file1\x00', r14}, 0x18) write$cgroup_pid(r6, &(0x7f0000000140)=r4, 0x12) 4m8.60301174s ago: executing program 1 (id=13698): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) close(r0) 4m8.304555578s ago: executing program 1 (id=13702): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x42}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4m8.304355698s ago: executing program 32 (id=13702): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x0, 0x42}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3m28.073833296s ago: executing program 2 (id=14302): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r1, &(0x7f0000000000)="00308925f438bd96c0cf832d58ea0c008fec88ba5c1580abe8306c3ff633d50100000000", 0x24, 0x4050, 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000680), 0xb) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r2 = socket$netlink(0x10, 0x3, 0xf) r3 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r3, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4800000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=r2, @ANYBLOB="00030200ecfe0000"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x4040004) 3m28.049559139s ago: executing program 0 (id=14303): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000012c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r1, 0x0, 0x0) 3m27.984837815s ago: executing program 0 (id=14305): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r0}, &(0x7f0000000580), 0x0}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) 3m27.975049025s ago: executing program 2 (id=14306): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x7, 0x4, 0x208, 0xd9, 0x0, 0xffffffffffffffff, 0x8002}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'gre0\x00', 0x0}) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, r4}, 0x14) sendmsg$netlink(r2, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0xde2}}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x4) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) 3m27.967903636s ago: executing program 0 (id=14307): r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x20) symlinkat(&(0x7f0000000240)='./file0\x00', r1, &(0x7f0000000140)='./file0\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b'], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000003000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a}, 0x94) openat(r1, &(0x7f00000000c0)='./file0\x00', 0x515a02, 0x52abe154ad664fa4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCGIFNETMASK(r4, 0x891b, &(0x7f0000000000)={'veth1_to_team\x00', {0x2, 0x0, @private}}) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r5 = socket$netlink(0x10, 0x3, 0x0) writev(r5, &(0x7f00000003c0)=[{&(0x7f0000000380)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 3m27.885835003s ago: executing program 0 (id=14309): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000a00)=ANY=[@ANYBLOB="0a000000c0000000b30000007f"], 0x50) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000007}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x97}, 0x18) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) recvfrom$phonet(r2, &(0x7f00000008c0)=""/115, 0x73, 0x40, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) r4 = socket(0x2b, 0x5, 0xaf) getsockname$packet(r0, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0x14) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000140)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000700)=[{0xffffffffffffffff}, {&(0x7f0000000340)="a6789c898119c295e5eabc71cb376109f4139e7c408acc8cf50cfed7427c591af12fa12c5eb5aa95f879ec246e883742e11d4c7ac3914c8344faf0ca49e4856de30eac", 0x43}, {&(0x7f00000002c0)="06653a3c866cd739b2c628475814b2306a642d2a2d29c262f9430c6fa225cb", 0x1f}, {&(0x7f0000000ac0)="d5f568e40ba448d87adc522d7c2570bb22a7d5c9e4ab545c906801ebe3dff082d15d77a2676d6071145c893b65d62cbe909c2c4e199a11ee2752b23dae5cd0b7fa0d488ff833ab0408e872915c0187b6009cf0ee59c42e6186da576cf16d4ebeb612c6b927129d469538d94860a0267b7f9b930863b073808303a38077c4f5979dcc052303f77026d6d723027505abfd29f87fd2fa77a5a0e8983a375a695ea474bdb4aa1a8880f61c300d01da00aa72bb950046ed7cd6762b673c315f8c0aef4245230fef4da5d0b6219cb1913b8fd4cb32610f3135809bac30bf8fee10df129f085178c689476ff9f57e893df65eed3476a659a8c8ec25397e44faf46acb0b5aca4b315173c941a132e590b07fbc8f26f101aa2d025f4785fc6d2a2bcb8830773b5b7542b7d59d5021548b79326694cff0decfa3c7ed6c6420d61794a43ec187c4f97a0ee3cb650cc47b527e34b072d7c0bb29a49cb6f874bfe263cfe15a126f6feed83861fdd2529f5e47a7b96c80b98c3a6703192734983a469131c3dd80d8b03b22ec8e9c414844e918d7407ff8c085239a2f147478c07d9a6475ab4138d1974c30d9167f268f90dedc3dfc755a9546f5ffee433b3ec67b59ebcebcc5212cd3373ac76ae4e3d58ecfb0d49fedce0886b9b3dcbc5353492f1785cd94befb66d7552879587070010588ad83172168bbccf8b01b50cceee8967effa2ff8b43d7f0e872910ad2e038d7fb8485c1f6c01859a18daeab8dbb70425f43465a15b4091316703364444165d27631bc784ecc2a6706a559c724b8abfc151fab8097a0d1555cb609568d15b3bc348847fe086cebb4edbcdd0727d8d4aee9462e1d9686683fa5c6cdec7531d5c6ed5e89409d7cba4539d2838cbd8e3b538b4126983c3edd302ea1d5638b3b912276ac685e826d1c05ff55bcfd7cc494fa829875a7f77a0509151ccedb197c60330ef765fc6142d5c185a5f508770501e7fdcf4a8bba2b6d5cff1c128b89d077a0c4b98bf53744bcbfdb9aeb3aeb67e6790e4775c9378a9b0ea9bdaa4de22a2a6c318d8b7992e8f4e5a950a01ff958083b3de316e2bb9626707712399c46e81ff59758ff4d7147d9d737d5ef6780fe4874085a1190b038063b6890db547b44dd0df4f17ed62fe0e76a2248a5b3fff171246165419b8aeed57ce0cd2ea1371ead29865215096dcb1778af047ef67bc794f8b728f2120a633636e63f2fa649c90bb93f99c6ebacbc7869e9d2c92d34fa2d42f11929117014b815ba7c8958290eaf90de04738d2c0b2ebc00d269c2d0ef5b67390b50a620093116800d38886388880f4d00cd251ace3ac032b9b884d38d3c4396ddd9bf0ed1b2c399bd07f2dbc9a55f2ea489b70c74b7a7c303363ac0220bbd31f67d687510f4f8e1c729887b33acd092e687f5c2f710bfa8d9d21fc5a2a7c5d0a638cdb1637f401582661f4688e8e7187adf8b3d51dc1b70665674da0d6479e06614c56e9e1b1012fe40d34b568c1825ddf9ff5fb8bec0ee454c2fa7c573f492c2863cd295b73d929ba1152300f6f9d2e57c630446bacd2dfb1dfa901fb52c292851a14d45bcffeb400f51d6b39e8f7d3de9e8d322bcd8c495ebbd62ba0c6afd85f4dba0b5cf8fd91c360e6e9acda474ad9178dd9b7cbfba1444ae11d50bc5af8a850b2efe618b720a28f7d884ac90ef810959130bbe1fd25d146060373772557c1e63ac820edf8700a62db5a8542aa1201d763cc816ec961d4ac481161c30a1553cc5f5e9a4e6499867c176514482699954ffd69116f34d9ec5a54c102e2e69078e7f6fc70125db76b4eb9c26d5b5bc36a39a0f872504e60a8bdd254770e6b663069ab7aaaddc3782f1e04551ad28336c5b4c092b5df6abfe382b3a32d09a5f9ba6308afbc6687d99922f59d131a4821e3c1824c67a618d33bb9a6d2c3c33dce9c738f92ab632e0669764e2b0154c842975c3e9261df3d4daa8904f1f28a7ea8fce9921d95d2468a0e967013fc7005c7b5b23bc8820f2d77ed035ffdfbf2e09b5491c66b2175c8ce8b67bcdbffe9117c493f2d745761090f100a4be6c7c64b9e19314bc4942a55f02035e296bf1760c1b67ca2024ecf8b2512dda28e3eb4643cb318e8af5ddd168207674d330a6fb3415e269d124a6a5b9b35b38b1d2b87e8dba40740908a896008626282ed51f7b2f372da84eaa8833de93fb8779d86a6c9395f6b16cc24abec2edfd66a6caa79e8a3f1a120e6f5270e06dbdb102510fde1eb0d4d15dfd233ebed486b45fe7036380e79068289aba6f414fb858d20097024bbaebed7ba40790e4f3530123561355aebc750489d545269837da72714729f5b399eee46104372ff215aef3e6db374e84e38e2d52e09a4c6ab5cf912c74345ac2e2b82db974c5b38e7994f335f6d9911386194d6221804458a9e2479b82eb28ba6966e038934461509f42d7585dfcf9a1a2ca67367821073a4abf661835d6eefb01f70780efb3c614e85f9c75f6875ff3d5430f2906b498e5adcf8749def55585ba21106732af19afe1aa33bc5d62a80097135380c7277bf315e78760654874f74d9ad92b5c8a103485c1b130ce020b8cb10c337a82aee1dc0cb27e7cc3fa48f4c70510fcb3569c09472f330346d3787873b0ab6273f171dd837ad3c48d156c6b0e66003029bf95e6f63b547fa7b65339ee54fb74a0a8ee9a6fd17848933dc9b8b4572daf36b27da98a1720c31e6f5c610fe6f810bffbe22e2a40e925b77696e92b141828194917e5fde528635e19b678fefadcf433d553e64913021f722ab67bdbbe1278185361aaf00ec5f7b0cf7052302d4f065587193cf82f92f68005e6886f3cec41949d8aa824b1c0a5df35326a5725b38fa0e18b45e51d5f7c342491153cf1aac2406341809c289c4748700d1a19acf855dd433f0bb08569a038c21b8a94abcf9dc36c877df77310f251db54905f18bafd17543c616160ea941b1446d7be3f962858541601528086af23bf2f5ed631d634a2580f4f6580e005bcc56032b9e7b9b30b09f2f803aca8a8e40845a398b7b5aab85d9e29e17db42de9144ae92fa0c0bdbf5f6bdc98d57843ef32c809d3c6659c01a792eb663c1971d3fd8e0d36e043f633feb9b7b5df9fd0281bf67d7a933db3e3888b679e56b729fa61647064ec7580fbc4ba47394a365832c7d873f0df48e7bd3eec9985627f0d20a6820a40158f543e85792eeaec166d2dce89ca179d8fcddbe1084077b5dd35d93af8152284de2755536f04d9d8535556c538172e8a53cb4385bbeb63e3c41e33702b7681f9e48c993f94df4e87ddc69d3264be55fbe248becaa7d13d5d8b46c940d756876699aab1de6924c0fdd5e11c7b071b1bce699dddf03ac3d0d9ca65a47944e97fe69809e4bc07f1fa983c3e6864c5f7460d6781da86fc07df8a0c0ef05800923e72e21234c99124eb92ae8230f5a1fbf6621a436ba03b778f17523b3e38268f0ee4c218f39eb1da1a9a3f60444b7601bee143b6e7a5db3d3288a42ce5958605e47ac46773786e81a2f3d55fdf4e9a52c55f611629ea5f2918b293ca95fc7f8dca1e8e7e9a3be776b0a5269e7d7d0892f039254e4f21b3a46fd311cde3c3b8b5df30c6a816f2c60525a0193c4e8fb3f70fff7812fda83ab918dbf8c5800d4114d640026c1ea530abf929da75eda4c25ca4d1003a14b37b8d0ee07d5ecc84bbd4fb413c77e54972cb83fe026b7bfcaa2e7b3bf6398c3c234e42207a0906ae90440cc591a9001e71d6ec6c2112d6b2935d96783b764c24c7b7776339740084ee59a215aa2aed6204f47aef7d5dea45e95fabf96ffa66712af384d627ca9776cd603b8c8b739881a28df815c676fb6e97fdc0e519657102ed175afa9ffb26a47e2fe978954ebfd99ddee9db3188352b391fbc99247dc412a250ff5720bf732938caf2861c217695c6f7ff90f683fd5d06535430bb90262c264eb2ca16f99c0b8b3f72332f594c08d868840ea339e9da4132491ce3a930a159645bdcc9139db20017e4858074d6b7ef74034f342b8c598032f31e28c0aa0b3eb50e7936fb1c70ae037133253ebf8de16579244eaa2d554ed3718a0f1758ed89ea816033dca57411ccb359634b8dfc41fc279675d0cf3ec5bfcf6090d42fbc09d5b9b18b5483012915577b05d5b5e003153f552ad6a764434354855e69f5943341510635479ec19b71c544a421d8d095ebf159b743459e92e82ea52a6864d2457267c37a6bef3f5817e359eefd2178f3e7af96390860eb9cc53c51f970d5bce07c69f5e922e135bd77919fab594656368de3adda51b515252e2d0dca87c2b10d550e52cc35bc24ed15371749ae2ed80740e8f22b5b45120d4921b5e916fe27460bf1283b89cf6fdf26ac0d8357219f23fc58313ba9623705c676459caa5f35e108279719ca270ce64b50819dc2fb9281ef5b3517b37824039f3c9682745f723250398af2326ee50b2d033733260a1ef3ae8b9a9d826c586c21cc2c6b60f4c8b559d71f5bf6dd10539cffd1ccaf795f6803fe942679f9465dcde658b51988316e12f5bcb3f65a63383e8591fc43b26860b63f5472b14348ef16adbc7e305efb1fd80b6b62bdf1d5e39eadbf4e2b87d5a832df89d5501d839dee901fcf3b22e9306a4be90b398c4e453fdae77be7d2d9b15b6ce753d367cb946971019a12ca7149ba630a7771c7827561bbb8806209643f056bd5c8c7a35321aefa507dbab01cef613b88ee51ffc442f6c1b604a9ef9c062fe622b171b4088e9cbfd08a4869c4f0225378f0afd29a02f84d9267123f252ce0991d1a17282d5f3b7c0b12c3ef21e134b9722fb3bf046475d26cf0ce7d38dbb65fdcc4db0cb017544ae7e164c763834e8b54ae3a346c7050a64ca14118e43cb9a80c4ae84f5e4246ba289177bab814777c358f43eaa84acf000b9674a76a97e7374467e04ca936aac994a854313b52e117723018265415a37010080c2c9ff8466e813b32fcb794b2fe3d947de791aa62e36bde58524698f46a95f5851c26fe70bf75c0b39ecf929ac43850717b061a0262a22ef195033c5aad152272e3605d3a141b4ebc10596aa306e521e4354fd7a7c8e640b707fb6b0407e94e9e33a4049ff875904e3d9c897f47bb27d966d0187024d04492a67280203b6b2ad19e9f51d3cf2dc9a5c5f8c92f05171929c44c7b3b336652d73b15439752c5b9409cf662c927e4cd74c6cc4d852bbc82eef6c344ccdf9b66934becd6c461cd3e0304ea60db7fc7fe11723a33e69642f60076f9ec6350c2d672f536a992c857eb8d093ca770ac93e80867ed478766827ff6e7dabbd0722976d6c657d739e2fdbbb27324eade7cb4f49c719275e1cfdb70fcd4e1f9d066ca7719424f539484cbed0edd5094a9f60ae5d79eb0137e4c1faf7eb78a38f42c736c1b16d70e182bc07c02d9dcbc5957d454713a851aea162b45806e023868a677d84092f3f817635510a9badd81b7309e375d3aa4e9fb24d7247087630f4f8804ae1d9d82db6466c3a2f9b2172c855778a4ac5e3bdbf121d57ef442e75ab5de469f91273a5984e8867a238e0351e710fb2ef62b5cc43de7cf7f6a5c8b589e521535cd3908c30f3c2f66728afdf22bee900c1b9bda889694ec16a8c7f40db3547077d0ab74328078fd553525a3da85816bdafea05471259eda1bdaaeea7161e2db47a80ccc631af35651fc2fc2901bad36058386deab2120c3618316f67376332aef2909e1e31c2e701d88e0109ba2dcb0b3c77784950dbd1642a7c6f2c711de864dcf7fe87f148ae39457e8", 0x1000}, {&(0x7f0000000680)="389454b8c44c81d8add415ae3e2cbdd4cc88ec7ac64f288afa1e3872206748a7eae2a9d4f727a6f755f7d3f83a644065220ef689a4d3995391195d409786d3cfc549b74ded301ca09db6341effcd1a8e27856939af9b958907434861559f226ed02c03afeb92de606a0a6baf7265aa", 0x6f}], 0x5, &(0x7f0000000840)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @remote}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xfffffffe}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffc}}], 0x68}, 0x20008050) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000a10000000000000000000010851000000600000018180000", @ANYRES32=r3, @ANYBLOB="0000000000000000660000007fffffff18000000f8ffffff00000000100000009500000000000000360a00000000000018010000202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xe5, &(0x7f0000000580)=""/229, 0x0, 0x50}, 0x94) 3m27.885538303s ago: executing program 2 (id=14310): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000400)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001580)=ANY=[@ANYBLOB="1b0000000000000000000020f7ffffff00000000ec005c5ff8ae0742155670930fa538d90a089bb9b1c43058499503e4fcb989bfc59e646e4332ec9daec17d532500000000", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000010000000400"/28], 0x50) syz_open_dev$vcsa(&(0x7f0000000200), 0x20000000, 0xcc0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) getsockname$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001780)=0x14) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x3, 0x4}, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x10) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000000)={0x19, 0xdd, 0x479c28ea, 0x1, 0x4, 0xfffb}) syz_emit_ethernet(0x52, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x1c, 0x3a, 0xff, @remote, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x8c07, 0xe, @local, 0x1, 0x1, 0x4, 0x7}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) write$ppp(0xffffffffffffffff, &(0x7f00000019c0)="8fe99a4537b5e074713edf1deba5ad8943fad03ac6da41e74f87e7c379464d0c8b847beb6e0e38f188d40e9df789a6cca47cff72bf40a094cfccca0fb2a007437b77", 0x42) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="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", 0xfc) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r5, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 3m27.879202684s ago: executing program 0 (id=14311): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0), 0x2, 0x46b, &(0x7f0000000580)="$eJzs3M1vFOUfAPDvzLbw+/HWivgColaJsfGlpQWVgxeNJh4wmugB9VTbQgiFGloTIUSqMXgxMSR6Vo8m/gXevBj1ZGLiSe+GhCgX0FPNzM5Ad9ltt3TZrd3PJxl4nn2e7TzfPvPMPDPPbgPoWUPZP0nEtoj4LSIGqtnaCkPV/65dOTf595Vzk0ksLr72Z5LXu3rl3GRZtXzf1iIznEakHyXFTmrNnTl7YmJmZvp0kR+dP/nO6NyZs08ePzlxbPrY9KnxQ4cOHhh75unxp9oSZxbX1T3vz+7d/dIbF1+ePHLx7R+/ydq7rShfGsct2XTzS0NZ4H8t5urLHon/r2l36832Jemkr4sNYVUqEZF1V38+/geiEjc6byBe/LCrjQNuq+zatLl58cIisIEl0e0WAN1RXuiz+99y69DUY124/Fz1BiiL+1qxVUv6Ii3q9Nfd37bTUEQcWfjni2yLdjyHAABYwSeTnx+OJxrN/9K4e0m9HcUaymBE3BEROyPizojYFRF3ReR174mIe1e5//qloZvnP+mlWwqsRdn879libat2/lfO/mKwUuS25/H3J0ePz0zvL34nw9G/OcuPLbOP71745dNmZUvnf9mW7b+cCxbtuNRX94BuamJ+Ip+UtsHlDyL29DWKP7m+EpBExO6I2LO6H72jTBx/7Ou9zSqtHP8y2rDOtPhVxKPV/l+IuvhLyfLrk6P/i5np/aPlUXGzn36+8Gqz/a8p/jbI+n9L7fFflHx5pkgMvrV0vXYuVr1yeeH3j5ve09zq8b8peT0/H5XLru9NzM+fHovYlBzO8zWvj994b5kv62fxD+9rPP53Fu/J+v++iMgO4vsj4oGIeLBo+0MR8XBE7Fsm/h+eb162Hvp/quH57/rxP5jU9P/qE5UT33/bbP+t9f/BPDVcvJKf/1bQagPX8rsDAACA/4o0/wx8ko5cT6fpyEj1M/y7Yks6Mzs3//jR2XdPTVU/Kz8Y/Wn5pGtgyfPQsWSh+InV/HjxrLgsP1A8N/6sEnl+ZHJ2ZqrLsUOv29pk/Gf+qHS7dcBt12gdbbzBF9qAjad+/Ke12fOvdLIxQEf5vjb0rhXGf9qpdgCd5/oPvavR+D9fl7cWABuT6z/0LuMfepfxD72rbvxX4tdutQTooLV8r1+ilxORrotmtJRo/e9B3O7Em+ujGS0kun1mAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI9/AwAA//9sbvBf") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) 3m27.858074826s ago: executing program 0 (id=14312): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_io_uring_setup(0x315b, &(0x7f0000000140)={0x0, 0xc7ca, 0x42, 0x0, 0x7a}, &(0x7f0000000100), &(0x7f0000000000)) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300001c000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x2}, 0x18) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f00000001c0), 0x6a) recvmsg$can_raw(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@caif=@util, 0x80, &(0x7f0000000100)=[{&(0x7f0000000280)=""/222, 0xde}], 0x1, &(0x7f0000000380)=""/6, 0x6}, 0x0) (async, rerun: 64) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2d41, 0xd2) (rerun: 64) close(r4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f00000005c0)={&(0x7f0000000b40)=""/4096, 0x1000, 0x0, &(0x7f00000001c0)=""/6, 0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) (async, rerun: 32) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 32) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) sendto$inet6(r6, 0x0, 0x0, 0x40000, &(0x7f0000000140)={0xa, 0x4e23, 0xc37, @private2, 0x57fb}, 0x1c) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r8}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='io_uring_create\x00', r7}, 0x18) io_uring_setup(0x7ac9, &(0x7f00000000c0)={0x0, 0x45da, 0x0, 0xfffffffe}) (async) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x204000, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB="294e875db53239c58c232c00"]) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) open$dir(&(0x7f0000000000)='./file0\x00', 0x80000, 0xd0) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r12, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x2, 0x2000}}}}, 0x30}}, 0x0) 3m27.81309288s ago: executing program 2 (id=14313): ioprio_set$pid(0x2, 0x0, 0x4007) r0 = fsopen(&(0x7f00000014c0)='cgroup\x00', 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r2}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x80, 0x7ffc1ffb}]}) readlinkat(r3, &(0x7f0000000380)='./mnt\x00', &(0x7f0000000180)=""/1, 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source\x00\xb5a8\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1_\xa0u\xcd\x19\xbf\x114\x01=\x93\xf7\xf7Sn\xcb\xd5\xa7\xc9@D\x00\xff\xaar\t\xa9\x13\b\x9a\x8bF\v\x8a\x93F', &(0x7f0000000300)='.\n$)|-\x02\xcc\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6\xfa\xd5?\xa3\'\xca%\xae\x8fKAq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdc\n:/<\xf3\x96\xaf\b1\x1b48\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02af\xfc\xda\xaa\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc70]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xfe\x9f\x00MN#\x948O\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x0529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa5C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\xff\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\xda[\xef\x03\x90W% \xe6b\xa2+\x86\xac\xdax\x997AOJ\x1d\x99\xc6\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c.\"\xf9G}\x8bH\xf3\'\"@d\xb8\xff', 0xfeffffff00000000) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='source\x00\xb5\x838\x8d\xbd\xdf\xfe\x9a\xf2RM\xb6\xe0\xf9\xac\xa2\x06\x1cD\xe7C\xa5<\xd1_\xa0u\xcd\x19\xbf\x114\x01=\x93\xf7\xf7Sn\xcb\xd5\xa7\xc9@D\x81\xff\xaar\t\xa9\x13\b\x9a\x8bF\v\x8a\x93F', &(0x7f00000004c0)='.\n$)|-\x02\xcc\b\xb2f\xcd\x04\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\x06\x13o\xd6\xfa\xd5?\xa3\'\xca%\xae\x8fKAq\x89f\xbb\x9dC\xd6\xea\xa8\xc2z\xbfe\xadSb3L)Hy\xfao\b\xa4\xb6\xff\xff\xff\xff\xff\xff\xff\xf7\xc7\xa4\xdc\n:/<\xf3\x96\xaf\b1\x1b48\b\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495/\x00d\xd2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf0\xb7\x1e\xf7Ys#m\xd40\xceP\xdc\x15FI>\x01\xfa\x15\x93\x9a&\xb4):\xc7?\x8d\x8e\x02af\xfc\xda\xaa\x19\xd7\x82\x16\x94m\x0e\xb7$\x8c\xd76K\xdc\xd1;\\QPh@$\x06F\x81\xc9\xf8\xf8H\xb2\x85\xa8Cl\xa6\xcd\xb5\xf0\xd0\x1f\'\xc70]\xad7\x1eZA7\x89\xf5\x81b\r\xc1\x7f[\x84y\xac\x12\xaa\xa2-t\x16>V\xfc\xbf\xdb\xe4\x9a\x9eE^\x90oe\xc0\xd9\xc68\x0f\xd4\xcdKC\xfe\x9f\x00MN#\x948O\x89\x17i\x88\"\x8dQI\xed\x1d\xe1v\xe6&\xd3\x14\xe92\xca\x9dBe\\\x8f\xff\x9b\xc7Sd!\xf8(Z\xd42\xa2\xcdjjBP\xae3\xbd\xec\x8a\x8f:\xeb1\x1cK\xf2\x04s\b\xcb\xa9\x17\x0529\xd7`\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa5C\x81\xc8iy\xc4\xf7\x7f\x90\xf80\x18jT\xd45\xde\xd4\xb7o\x99\xf5\xdb\xf9\x99,+\xff\x17\xe4\xf4r}\xda\xf5\x12\x16\xb6g\x00\'(\xda[\xef\x03\x90W% \xe6b\xa2+\x86\xac\xdax\x997AOJ\x1d\x99\xc6\xe1/\n\xael\x15\xcfR\v\x0e\xbc!\xe8\x1cV-`\xf0$\xa6a \x93PV\x8dm@\x9c.\"\xf9G}\x8bH\xf3\'\"@d\xb8\xff', 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x21, &(0x7f0000000300)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @tail_call, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fff}, @func, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], &(0x7f0000000080)='syzkaller\x00', 0x83eb, 0x1c, &(0x7f0000000100)=""/28, 0x41000, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x1, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000180)=[{0x1, 0x4, 0x8, 0x5}], 0x10, 0x5}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b80)={r4, 0xe0, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8c, &(0x7f0000000500)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000540), &(0x7f0000000a00), 0x8, 0x6e, 0x8, 0x8, &(0x7f0000000a40)}}, 0x10) lstat(&(0x7f0000000c40)='./file1\x00', &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000d00)={[], [{@seclabel}, {@uid_gt={'uid>', r5}}, {@smackfsroot={'smackfsroot', 0x3d, '/s&'}}, {@euid_eq={'euid', 0x3d, r5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000bc0), 0x84400, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000e, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000ac0)="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", 0x26e}, {&(0x7f0000000900)="b0fef28adda62f55a00000595b1800000000001abe0a88f67472c3cd975c9884ae01084df2b71b56e2a043b74efe85a30267fae395e8a051934cefd1f2509f89180ab1fe20a7e4088d8a3f4304feafe592c403cb5d1991683fcbda9a1404998bc92cb28946223165c906e2", 0x6b}], 0x2}, 0x8000) recvmsg(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000002d00)=""/4080, 0xff0}, 0x0) close(r8) setsockopt$inet_int(r7, 0x0, 0x3, &(0x7f0000000c00)=0x5ae8, 0x4) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000e40)={'wlan1\x00', &(0x7f0000000d80)=@ethtool_rx_ntuple={0x35, {0xd, @usr_ip4_spec={@remote, @empty, 0xffff, 0x4, 0x1, 0x3d}, @esp_ip4_spec={@multicast1, @local, 0xa037, 0x93}, 0x5, 0x3, 0x6, 0x4, 0xfffffffffffffffe}}}) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20) 3m27.632752277s ago: executing program 2 (id=14317): capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x200000, 0x200000}) r0 = io_uring_setup(0x67de, &(0x7f0000000880)={0x0, 0xa793, 0x100, 0x3, 0x2c}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000140)='kfree\x00', r1, 0x0, 0x100000000002}, 0x18) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000002040)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x3}, 0x18) r4 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000040)) ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000000140)={'veth0_to_bond\x00', 0x4}) r5 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)=[{0x800000000}, {0x0, 0x0, 0x4}], 0x2, 0x100000c01, 0x38, 0x0, 0x62, 0x6e}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000010000003c000180060001000a000000080005000300e5ff0b00070000000000000000000800090043000000090006006e6f6e6500000000080008"], 0x50}}, 0x0) sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="200000001e6abd3e6a8a25f7a91440a1b3107e2af0220446580353405687fde8c8190d4fc2d9a1c56687c3c2e24498c65177555cd33227ba87b3e2d308bbeb3a6a99e0", @ANYRES16=r8, @ANYBLOB="00012dbd7000fbdbdf25020000000c000180060001000a0000000c0002800800070005000000080005000d0000003400028006000e004e2300000800030001000000060002004e2100000800050004000000080008000600000005000d000100000054000280140001000000000000000000000000000000000014000100ac1414aa000000000000000000000000060002004e23000008000600010000000800060007000000080007000100000006000b000a0000002c0001800c0007000000000010000000060001000a00000006000100020000000c00070014000000000000000c000380060007004e220000"], 0xf4}, 0x1, 0x0, 0x0, 0x8085}, 0x20000050) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2, 0x44) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0xc000) sendmsg$TIPC_NL_NET_SET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010021bd7000fcdbdf250f0000002c0007800c0004000200000009000000000000000800010006000000"], 0x40}, 0x1, 0x0, 0x0, 0x2004a884}, 0x80) r10 = socket$pppoe(0x18, 0x1, 0x0) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) connect$pppoe(r10, &(0x7f0000000000)={0x18, 0x0, {0x1, @empty, 'lo\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) sendmsg$TIPC_NL_LINK_SET(r9, &(0x7f0000000580)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000b40)={0x14, r7, 0x400, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) close(r10) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 3m27.404972917s ago: executing program 2 (id=14318): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/bus/input/handlers\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x7}, &(0x7f00000002c0)=0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}, 0x1, 0x0, 0x0, 0x85}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000080)={0xe, 0x43, 0x7ff, 0x0, 0x9, "0f973abe7b3fdddc6b2897aecd460b84e28b77"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='ext4_mb_discard_preallocations\x00'}, 0x18) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) 3m27.385807669s ago: executing program 33 (id=14318): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/bus/input/handlers\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x7}, &(0x7f00000002c0)=0x18) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r4, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}, 0x1, 0x0, 0x0, 0x85}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW(r6, 0x5403, &(0x7f0000000080)={0xe, 0x43, 0x7ff, 0x0, 0x9, "0f973abe7b3fdddc6b2897aecd460b84e28b77"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='ext4_mb_discard_preallocations\x00'}, 0x18) pivot_root(&(0x7f00000001c0)='./file0\x00', 0x0) 3m12.406022288s ago: executing program 34 (id=14312): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_io_uring_setup(0x315b, &(0x7f0000000140)={0x0, 0xc7ca, 0x42, 0x0, 0x7a}, &(0x7f0000000100), &(0x7f0000000000)) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70300001c000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kfree\x00', r3, 0x0, 0x2}, 0x18) io_uring_register$IORING_REGISTER_RESTRICTIONS(r1, 0xb, &(0x7f00000001c0), 0x6a) recvmsg$can_raw(r0, &(0x7f00000003c0)={&(0x7f0000000200)=@caif=@util, 0x80, &(0x7f0000000100)=[{&(0x7f0000000280)=""/222, 0xde}], 0x1, &(0x7f0000000380)=""/6, 0x6}, 0x0) (async, rerun: 64) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2d41, 0xd2) (rerun: 64) close(r4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f00000005c0)={&(0x7f0000000b40)=""/4096, 0x1000, 0x0, &(0x7f00000001c0)=""/6, 0x6}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) (async, rerun: 32) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) (async, rerun: 32) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) (async) sendto$inet6(r6, 0x0, 0x0, 0x40000, &(0x7f0000000140)={0xa, 0x4e23, 0xc37, @private2, 0x57fb}, 0x1c) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000400)='io_uring_create\x00', r8}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='io_uring_create\x00', r7}, 0x18) io_uring_setup(0x7ac9, &(0x7f00000000c0)={0x0, 0x45da, 0x0, 0xfffffffe}) (async) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x204000, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r9, @ANYBLOB="294e875db53239c58c232c00"]) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r10}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) open$dir(&(0x7f0000000000)='./file0\x00', 0x80000, 0xd0) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r12, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x1, 0x2, 0x2000}}}}, 0x30}}, 0x0) 1m47.304458078s ago: executing program 4 (id=16022): r0 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x0, 0x160) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) open_by_handle_at(r0, &(0x7f0000000180)=ANY=[@ANYBLOB='K\x00'], 0xf0ffffff7f0000) 1m47.251930822s ago: executing program 4 (id=16024): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0xe0880, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000040000000000000000040000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000018c0000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010200001800e000100636f6e6e6c696d69740000000c000280080001"], 0x110}}, 0x0) 1m47.16223816s ago: executing program 4 (id=16026): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000100000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059000000"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) waitid(0x2, 0x0, 0x0, 0x4, 0x0) 1m46.963926188s ago: executing program 4 (id=16031): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x420001}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r0, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x51}, @NL80211_ATTR_WDEV={0xc, 0x99, {0xd1, 0x2b}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x810) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x124, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x87}]}, @TIPC_NLA_SOCK={0x48, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb0a}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x10}, 0x80) ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000380)={0x0, "8005f8ad75822e73a34452703dbf102c"}) ioctl$BTRFS_IOC_RESIZE(r1, 0x50009403, &(0x7f0000001380)={{r1}, {@val={r3}, @actul_num={@val=0x2d, 0x9, 0x6b}}}) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f00000013c0)={0x6, 0x3, 0xe7b8}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x1c, r0, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [""]}, 0x1c}}, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001580), r1) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x2c, r5, 0x4ed656cceb3a6a16, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8008010}, 0x40000) r6 = syz_open_dev$evdev(&(0x7f0000001680), 0xb, 0x80040) ioctl$EVIOCGKEY(r6, 0x80404518, &(0x7f00000016c0)=""/4096) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002700), r1) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000002800)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000027c0)={&(0x7f0000002740)={0x54, r7, 0x4, 0x70bd29, 0x25dfdbff, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @remote}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x3}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_COOKIE={0xc, 0xf, 0x547}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'ip6erspan0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000002840)={@dev={0xac, 0x14, 0x14, 0x3f}, @rand_addr=0x64010100, 0x1, "89fd423dd2aeecf0d38a2e8b8f13822ffa0e048ad9126f7896b908f7cc373dc5", 0x88c, 0xfff, 0x7, 0xfffffffe}, 0x3c) socket$xdp(0x2c, 0x3, 0x0) sendto$unix(r1, &(0x7f0000002880)="9c7b1ce4600b3567ab211cdd721bbb9bce9899ed5f2c50efd9ab3be159feaab30803823c2b4498df0828fe8e25ebc338b1e5f642e9f57002cf8790a7110141fe79c344b85ae8b0370eca6653ed46f3f4248d49442f74ded71ebdcf939ddd2f75797e97bc4f41f92c40bc12d1ad14946b7ff4bebd890c62b218a78c5d2e3aa175fb0e6788608e756e628ad253753356db2922b74341478f7c7786b9963520c3716927777f1126ba245343bba92a9571200bb402a5ea8f9984c921b7fff1a649e75e5d7c8d", 0xc4, 0x4, &(0x7f0000002980)=@file={0x1, './file0\x00'}, 0x6e) r8 = ioctl$TIOCGPTPEER(r1, 0x5441, 0x9) ioctl$F2FS_IOC_GARBAGE_COLLECT(r8, 0x4004f506, &(0x7f0000002a00)=0x1) r9 = add_key$keyring(&(0x7f0000002a40), &(0x7f0000002a80)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$reject(0x13, r9, 0x5, 0x100, 0xfffffffffffffff9) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000002ac0)=0x1000, 0x4) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000002b40)={0x0, @qipcrtr={0x2a, 0xffffffffffffffff, 0x7ffe}, @ethernet={0x306, @local}, @phonet={0x23, 0xfd, 0x2, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000002b00)='veth1_to_bridge\x00', 0x2, 0x7fffffffffffffff, 0x5}) lsm_get_self_attr(0x65, &(0x7f0000002bc0)={0x0, 0x0, 0x104, 0xe4, ""/228}, &(0x7f0000002d00)=0x104, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002d80)={&(0x7f0000002d40)='fscache_access_volume\x00', r1, 0x0, 0x7}, 0x18) pipe2(&(0x7f0000002dc0)={0xffffffffffffffff}, 0x4080) ioctl$KDDISABIO(r10, 0x4b37) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000002f00)={&(0x7f0000002e00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x2c, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x8004) 1m46.883125976s ago: executing program 4 (id=16035): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x10) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000005c0)={0x0, 0xffffffffffffffff, 0x0, 0x31, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m46.521948499s ago: executing program 4 (id=16040): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000580)={[{@grpjquota}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000001480)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000180)={[{@sysvgroups}, {@noload}, {@nobh}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x6, 0x644, &(0x7f00000006c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) open_by_handle_at(r1, &(0x7f0000000080)=@shmem={0xc, 0x1, {0x20}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000003060500000000000000000000000000050001"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a007f0214f9f407000904080a000000000000050002000008000f40a600000e", 0x24) syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) 1m31.494410052s ago: executing program 35 (id=16040): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000580)={[{@grpjquota}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000001480)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000180)={[{@sysvgroups}, {@noload}, {@nobh}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x6, 0x644, &(0x7f00000006c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0) open_by_handle_at(r1, &(0x7f0000000080)=@shmem={0xc, 0x1, {0x20}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000003060500000000000000000000000000050001"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) write(0xffffffffffffffff, &(0x7f0000000080)="240000001a007f0214f9f407000904080a000000000000050002000008000f40a600000e", 0x24) syz_genetlink_get_family_id$team(&(0x7f0000000140), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x18) 2.726514403s ago: executing program 7 (id=17662): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) socket$kcm(0x10, 0x2, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x10, &(0x7f0000000600), 0x1, 0x59d, &(0x7f0000001100)="$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") 2.426455801s ago: executing program 7 (id=17669): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f0000000340), 0x1, 0x564, &(0x7f0000000c00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x101042, 0x84) mknod(&(0x7f0000000280)='./file0\x00', 0x1ffa, 0x0) set_mempolicy(0x3, &(0x7f0000000000)=0x4000000ffb, 0x8) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x14) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x6c75) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) write$vga_arbiter(r3, &(0x7f0000000080)=ANY=[@ANYBLOB='lock io'], 0xc) write$vga_arbiter(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='decodes none'], 0xd) close(r3) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r5) setsockopt$inet6_mtu(r5, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) dup(r4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x27, &(0x7f00000007c0)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="000000000018ddbdb70200001fa858ad8a5f8b771400008500000083000000bf090000000000005509010000002000950000000000000018110000698f4dff39e695e3a24aec7b3ce6683c8098a24a42bb2d950af59db875477d9c80753867f4df83508b0efa1132db4afff75590594da06b4d612a3e2dfebfd2443bee9672780b4b7d61fecc9d805aaa2d6ce1432a37cf86be4b639ad92dbabc5afe833e382898757a86dffe0370f25dfdf12a642f383a2a24a7ef7235359aae97aa41064df3e333aa5ed707afb6e62785c82b60ceeda8c156dd2f7adc782d606cf403ba8e0907477354691c0646ca423c10493d2e34d179ac", @ANYRESDEC, @ANYBLOB="0000000000000000b702000000000000850000008600000018500000020000000000000000000000cf44fffff0ffffffb7080000000000007b8af8ff00000000b7080000050000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000186100000f000000000000000500000018180000", @ANYRES32=r2, @ANYRESHEX=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) fsetxattr$security_selinux(r7, &(0x7f0000000240), &(0x7f00000002c0)='system_u:object_r:modules_dep_t:s0\x00', 0x23, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = epoll_create1(0x80000) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/power/wakeup_count', 0x0, 0x10) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f00000000c0)={0xe000001a}) read$char_usb(r9, &(0x7f0000000100)=""/177, 0x39) epoll_pwait(r8, &(0x7f00000001c0)=[{}], 0x1, 0x7, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x1c}, 0x1, 0x300000000000000, 0x0, 0x24048004}, 0x488d5) 2.178565203s ago: executing program 7 (id=17675): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x18, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_RADAR_DETECT(r3, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)={0x60, r4, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x195}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') r6 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000001380)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x99723000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(0xffffffffffffffff, 0xa) sendmmsg(r3, &(0x7f0000001b40)=[{{&(0x7f0000000680)=@in6={0xa, 0x4e21, 0x2, @empty, 0xfffffff8}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000700)="4e351e07898f50419d1eb043e481e0115cfff81a5f217e01d8328312b24842446bb4c8e09ecf1bd34c0a346fe040263a2c32bc0b83f25e378c9ea2d794ff4a9a306a664eeb8229ffc79bc8111579803369464660556b0053c0dc19a4d6157a42a569974548ca175ff080a0d4a49544b84dcad5f928794b6b87430e21518768bef44f0967da7ba6b78d29698a7c43d740e4096336587fe314c2e4ec68b32de7ab386fc05ea71437f900269193466ef46a185fd5105116e98b259dc8a31ed54485a6064b06da72758724dc5c8e52e175f213", 0xd1}], 0x1, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x210}}, {{&(0x7f0000000a80)=@isdn={0x22, 0xd, 0x9, 0x81, 0x9}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001140)="a8ecd15664744f4925a6bee78ba806723a87de2f804258eee5d28086520bd073b016e8a945848b9bf9f20e49d11d559531964c042f8bd475b93ef25345d437dd8875dc0ecf91cd319b64ce89a9cd778ae561501085b10c4c75eed072f004e0e42e7115e311e527da6e6019fcff960d4749102d7405d4c4f9f5349f95df9bc1fd5b5016549d2d4b6ecbaf6f5165ba14d88c474e3fcedf3dccb66c74955e186f9e2dc4cb1bfd5c81b8e9aa99c5d1882c9f81dc5c1d8099e8e2048f19cc85", 0xbd}, {&(0x7f0000001200)="f8264e88cf041390766cc47224c6a21786a5f814934efe1a5b806f7fc38860547db7c114a41b86792bc101e92194c836c853052568078d8d6ad38ff7ab23fbc22da339f34e03f5de00cb8210cfc8259f8157c91dfdeabd", 0x57}, {&(0x7f0000001280)="d99634d126472354d7424668a7a2dafb0f73a389ff13", 0x16}, {&(0x7f00000015c0)="2bbeefb4c12494a30ea3d2ce0de233", 0xf}], 0x4, &(0x7f0000001680)=[{0x50, 0x10b, 0x3ff, "2d6d74ee935882f3db74ea46cc2b6745a22a5d073714b38d233007b1590c220836d407f82e97aabaad67a3a1d15587962a8c24b56cdbabe432524cfcb8a0bc42"}], 0x50}}, {{&(0x7f0000001700)=@nfc_llcp={0x27, 0x0, 0x0, 0x6, 0x1, 0xff, "e27143d7a8b472ead57d16f30da4cb80079bdbf6f493b20e72e280f1e11dae020a04cd1d162fb62441e2086f543039f48d9366447a2ed4deb5a269fb118303", 0x21}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001780)="00a2b7a70bf355261541b0ab821f097f80181ae8f405551a8f63079f1a5675bebaeb7c4dd939ceec89793f145a5eb6d3f2c492708294e0eefa370842d0bbb9c22d20b17bac10c28cdec7ac02cf4b6a4aafbbd031b166c3a19701299d0f1184d1e93edc7d29b2c2ff924d3e66ee24d2aaa05f25fa860ea9821382ccbd39f1df1a8c83ca919cc8f639c0f766871de32ebbaf89e195e9d6859721349629311e715ef64cef6d48348c9475315e972a3e04aa8320065dfe718a17322187604e0f6c6786c065fc87fc6e436db6fcbbfa02f11bc7d29dc1b4", 0xd5}, {&(0x7f0000001880)="91b6910d5e88361e1f2d8b79b17a5533d72a07426b9022d74e92fcf0600129c55de9cc01a281be6658933cedaa2ec7cf31eb0317ec0ea15a6ee885bb3625c0db191098a8d2d1a8d98393a99054b97879e0327b8e44126b090db806d8cd48b99274e9cebccb1c735bee783ebd32837d0183c36dd095d6e022c9baae1b4f3b076eafd98ad9a5093fb94ea49ad0fc34769269bca0aaf4d82f81bca61279940248f7d1b89561bac66619134702fff595814c0b1295196b481c9e094045", 0xbb}, {0x0}, {&(0x7f0000001980)="14c33d93e58627a788a37d82f307f3", 0xf}, {&(0x7f00000019c0)="73d36fededb6ddf010f07c9c220f0689f3f5359162369036a29d08872f6a688fc6c68af82256f2e6b91e5eee056f84a3d5d8", 0x32}], 0x5, &(0x7f0000001a80)=[{0xc0, 0xca, 0xfffffffe, "946b348d33c049c8845f341785dff278d2bf312c3d6619d3205470abe0c58162b90fa4621daf60840cf9af88bfd1688c8fd6514e05f6715bba016997ea6d39f3ebb362eed17011ccf0c0719959dda5b88494d5837c84135466d4250b49bfbabbf1ffe9ccb561b791d494266b1ead8db1e7af47007a4d2cb366e9db717c9ececcf7950bbcb1209f0787c80cff3c6b07925aa12ab18cbe3dfc7d81763ca3e860af06e99f2860067b4b5b771341"}], 0xc0}}], 0x3, 0x4040000) write$cgroup_int(r5, &(0x7f0000000080)=0xfffffffffffffb2f, 0x12) r8 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xadz\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000340)="a80136bbf96f59c854f5dac4990dd9747a96bcbb2197ab003210ca05d9daf86ae1870a61c8ae2fc3519ad035b9e444cfbcc574fc0f9ed2964e7aece51ef9f1c31d066d293d62ab10d974d877e092b45b5d91aa4b766593ba0ddfe74cc5618547c476bb5a5fefc4057664", 0x6a}, {&(0x7f0000000580)="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", 0xfe}, {&(0x7f00000003c0)="78e52f79a36d959d949ff30097a0acd21dfc0a191af4520b4f54385653cf49c9c33b9875cfc9a4052a7216ca363f60fe8269fd8a76a0d18cb5fdbacf83e5af111c76a98452400e37e57e86fcd9a70514b1b654b87f2b2e677b7799e2ab58d36d03ae614d39d6e4d9f2e621072baa3bf66b55cc73c562", 0x76}], 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x50, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x5, 0x8, 0x6, 0x9}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = syz_io_uring_setup(0x2e43, &(0x7f00000004c0)={0x0, 0x3165, 0x40, 0x0, 0x143}, &(0x7f0000000080), &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f0000000100), 0x100000000000001a) umount2(&(0x7f0000000bc0)='./file0\x00', 0xb) mq_timedsend(r2, 0x0, 0x0, 0x9, 0x0) 1.536964242s ago: executing program 5 (id=17690): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8c) 1.471495457s ago: executing program 5 (id=17691): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8003}, 0x94) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000180)={@pppoe={0x18, 0x0, {0x4, @local, 'bond_slave_0\x00'}}, {&(0x7f00000000c0)=""/115, 0x73}, &(0x7f0000000140), 0x950b74d730582fe5}, 0xa0) r2 = msgget$private(0x0, 0x193) msgsnd(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="01"], 0x8, 0x0) msgrcv(r2, &(0x7f00000002c0), 0x8, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000440)=@framed={{}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0x5}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffff21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r3}, 0x10) execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r0, 0x0, 0x100000000}, 0x18) r4 = inotify_init() ioctl$SIOCPNENABLEPIPE(0xffffffffffffffff, 0x89ed, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x4000, 0x0) inotify_add_watch(r4, &(0x7f0000000340)='.\x00', 0xa50003d1) 702.679587ms ago: executing program 3 (id=17694): r0 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x4002, 0x0, 0x3, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000180)='cpu>=0|&!') 684.881259ms ago: executing program 6 (id=17695): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000001400000000000000ff000000850000000e0000008500000007000000"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x21, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kmem_cache_free\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="3700000013000318680907070000000f0000ff3f13000000170a001700000000040037000d00030001362564aa58b9a6c011f6bbf44dc4", 0x37}], 0x1) 663.929561ms ago: executing program 7 (id=17696): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b0000000700000001000100090000000100", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000013daca0c7e76000000ffffffff00"/25], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xd, 0xc, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500"], 0x0, 0x18, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x120a, &(0x7f0000002480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x40) syz_usbip_server_init(0x5) write$cgroup_subtree(r1, &(0x7f00000000c0)=ANY=[], 0x32600) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00'}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0x24, 0x60000000}, 0x2c) 624.418564ms ago: executing program 3 (id=17697): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESDEC=0x0, @ANYRESHEX], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x18, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r1, 0x0, 0x5}, 0x18) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x1}, 0x8) sendto$inet6(r2, 0x0, 0x0, 0x20000880, &(0x7f0000000240)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @rand_addr=' \x01\x00', 0xfffffffd}, 0x1c) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_RADAR_DETECT(r3, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000600)={0x60, r4, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x2, 0x53}}}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x195}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x17}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x8000) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='oom_adj\x00') r6 = syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000001380)="$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") r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x99723000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(0xffffffffffffffff, 0xa) sendmmsg(r3, &(0x7f0000001b40)=[{{&(0x7f0000000680)=@in6={0xa, 0x4e21, 0x2, @empty, 0xfffffff8}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000700)="4e351e07898f50419d1eb043e481e0115cfff81a5f217e01d8328312b24842446bb4c8e09ecf1bd34c0a346fe040263a2c32bc0b83f25e378c9ea2d794ff4a9a306a664eeb8229ffc79bc8111579803369464660556b0053c0dc19a4d6157a42a569974548ca175ff080a0d4a49544b84dcad5f928794b6b87430e21518768bef44f0967da7ba6b78d29698a7c43d740e4096336587fe314c2e4ec68b32de7ab386fc05ea71437f900269193466ef46a185fd5105116e98b259dc8a31ed54485a6064b06da72758724dc5c8e52e175f213", 0xd1}], 0x1, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x210}}, {{&(0x7f0000000a80)=@isdn={0x22, 0xd, 0x9, 0x81, 0x9}, 0x80, &(0x7f0000001600)=[{0x0}, {&(0x7f0000001140)="a8ecd15664744f4925a6bee78ba806723a87de2f804258eee5d28086520bd073b016e8a945848b9bf9f20e49d11d559531964c042f8bd475b93ef25345d437dd8875dc0ecf91cd319b64ce89a9cd778ae561501085b10c4c75eed072f004e0e42e7115e311e527da6e6019fcff960d4749102d7405d4c4f9f5349f95df9bc1fd5b5016549d2d4b6ecbaf6f5165ba14d88c474e3fcedf3dccb66c74955e186f9e2dc4cb1bfd5c81b8e9aa99c5d1882c9f81dc5c1d8099e8e2048f19cc85", 0xbd}, {&(0x7f0000001200)="f8264e88cf041390766cc47224c6a21786a5f814934efe1a5b806f7fc38860547db7c114a41b86792bc101e92194c836c853052568078d8d6ad38ff7ab23fbc22da339f34e03f5de00cb8210cfc8259f8157c91dfdeabd", 0x57}, {&(0x7f0000001280)="d99634d126472354d7424668a7a2dafb0f73a389ff13", 0x16}, {&(0x7f00000015c0)="2bbeefb4c12494a30ea3d2ce0de233", 0xf}], 0x5, &(0x7f0000001680)=[{0x50, 0x10b, 0x3ff, "2d6d74ee935882f3db74ea46cc2b6745a22a5d073714b38d233007b1590c220836d407f82e97aabaad67a3a1d15587962a8c24b56cdbabe432524cfcb8a0bc42"}], 0x50}}, {{&(0x7f0000001700)=@nfc_llcp={0x27, 0x0, 0x0, 0x6, 0x1, 0xff, "e27143d7a8b472ead57d16f30da4cb80079bdbf6f493b20e72e280f1e11dae020a04cd1d162fb62441e2086f543039f48d9366447a2ed4deb5a269fb118303", 0x21}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000001780)="00a2b7a70bf355261541b0ab821f097f80181ae8f405551a8f63079f1a5675bebaeb7c4dd939ceec89793f145a5eb6d3f2c492708294e0eefa370842d0bbb9c22d20b17bac10c28cdec7ac02cf4b6a4aafbbd031b166c3a19701299d0f1184d1e93edc7d29b2c2ff924d3e66ee24d2aaa05f25fa860ea9821382ccbd39f1df1a8c83ca919cc8f639c0f766871de32ebbaf89e195e9d6859721349629311e715ef64cef6d48348c9475315e972a3e04aa8320065dfe718a17322187604e0f6c6786c065fc87fc6e436db6fcbbfa02f11bc7d29dc1b4", 0xd5}, {&(0x7f0000001880)="91b6910d5e88361e1f2d8b79b17a5533d72a07426b9022d74e92fcf0600129c55de9cc01a281be6658933cedaa2ec7cf31eb0317ec0ea15a6ee885bb3625c0db191098a8d2d1a8d98393a99054b97879e0327b8e44126b090db806d8cd48b99274e9cebccb1c735bee783ebd32837d0183c36dd095d6e022c9baae1b4f3b076eafd98ad9a5093fb94ea49ad0fc34769269bca0aaf4d82f81bca61279940248f7d1b89561bac66619134702fff595814c0b1295196b481c9e094045", 0xbb}, {0x0}, {&(0x7f0000001980)="14c33d93e58627a788a37d82f307f3", 0xf}, {&(0x7f00000019c0)="73d36fededb6ddf010f07c9c220f0689f3f5359162369036a29d08872f6a688fc6c68af82256f2e6b91e5eee056f84a3d5d8", 0x32}], 0x5, &(0x7f0000001a80)=[{0xc0, 0xca, 0xfffffffe, "946b348d33c049c8845f341785dff278d2bf312c3d6619d3205470abe0c58162b90fa4621daf60840cf9af88bfd1688c8fd6514e05f6715bba016997ea6d39f3ebb362eed17011ccf0c0719959dda5b88494d5837c84135466d4250b49bfbabbf1ffe9ccb561b791d494266b1ead8db1e7af47007a4d2cb366e9db717c9ececcf7950bbcb1209f0787c80cff3c6b07925aa12ab18cbe3dfc7d81763ca3e860af06e99f2860067b4b5b771341"}], 0xc0}}], 0x3, 0x4040000) write$cgroup_int(r5, &(0x7f0000000080)=0xfffffffffffffb2f, 0x12) r8 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xadz\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r6, &(0x7f00000002c0)={&(0x7f0000000500)={0x1d, r7}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r6], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'dvmrp1\x00', 0x0}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000004c0)={r10, 0x3, 0x6, @random="5e1cf8b4c253"}, 0x10) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f00000000c0)={r10, 0x3, 0x6, @random="cea0300a1672"}, 0x10) dup2(r8, 0xffffffffffffffff) 530.907963ms ago: executing program 6 (id=17700): syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x201000a, &(0x7f0000000300)=ANY=[], 0x1, 0x236, &(0x7f0000000000)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$netlink(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000500), 0x20000, 0x0) ioctl$RTC_UIE_OFF(r1, 0x7004) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x24320, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000680), 0xd}, 0x4800, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r4}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r5}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000200040010000800014004000000", 0x58}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x95255000) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000640)={'syztnl1\x00', &(0x7f0000000540)={'sit0\x00', r8, 0x20, 0x40, 0x9, 0x9, {{0x29, 0x4, 0x1, 0x4, 0xa4, 0x65, 0x0, 0x9, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @rand_addr=0x64010102, {[@timestamp_prespec={0x44, 0x24, 0x69, 0x3, 0x9, [{@broadcast}, {@multicast2}, {@broadcast, 0x9}, {@multicast1, 0x3}]}, @timestamp_prespec={0x44, 0x24, 0xf0, 0x3, 0x2, [{@loopback, 0x8001}, {@rand_addr=0x64010101, 0x5}, {@multicast1, 0x5}, {@remote, 0x7}]}, @lsrr={0x83, 0x7, 0xa8, [@empty]}, @timestamp={0x44, 0x14, 0x2b, 0x0, 0x7, [0x0, 0x10000, 0x9, 0x9]}, @noop, @rr={0x7, 0x1b, 0xf4, [@multicast1, @loopback, @multicast1, @empty, @remote, @rand_addr=0x64010102]}, @generic={0x44, 0x11, "07acf348cbcc8ad336f3259a69c76f"}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x8, 0x11, r9, 0x0) ftruncate(r9, 0x51a9497) 420.763653ms ago: executing program 5 (id=17701): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8c) 411.302463ms ago: executing program 5 (id=17702): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)={0x48, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x2c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x48}}, 0x0) 391.656965ms ago: executing program 5 (id=17703): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='module_request\x00', r4, 0x0, 0x9}, 0x18) unshare(0x62040200) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000004700)) 342.60662ms ago: executing program 3 (id=17705): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x62, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a00)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008800}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r2 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000340)="a80136bbf96f59c854f5dac4990dd9747a96bcbb2197ab003210ca05d9daf86ae1870a61c8ae2fc3519ad035b9e444cfbcc574fc0f9ed2964e7aece51ef9f1c31d066d293d62ab10d974d877e092b45b5d91aa4b766593ba0ddfe74cc5618547c476bb5a5fefc4057664", 0x6a}, {&(0x7f0000000580)="d13759e3a3caecd56194b676399a0aece385daaca5b22e2bee44dc0a3dc474bbbb5b5378718fc79ab7b2c57766d9e5d180e547bf302185a179dc5f89cca79817d61f6b3ba9d95c305a65d17024d89db1d8189c03663147a48359e96c9b9a1d173085a6fba07a080d6cba2b97d42ad275a44b45e946c26ab2411cd6666740209fb31fc04e89aa0bb888fb6622a9a789dcc4a1c63ec105becacff5714297317bfde1125094802ebeddd548fcf24d1949d7043acfad8e59f9c48267830622f734aa15de0da688f3d86cd813424362a36fff5f54cfa69b201a0c7515eab51d6f6504b5e73606438ba939768103b7c9455306e9aa08fe39e42593b4d0467be94d", 0xfe}, {&(0x7f00000003c0)="78e52f79a36d959d949ff30097a0acd21dfc0a191af4520b4f54385653cf49c9c33b9875cfc9a4052a7216ca363f60fe8269fd8a76a0d18cb5fdbacf83e5af111c76a98452400e37e57e86fcd9a70514b1b654b87f2b2e677b7799e2ab58d36d03ae614d39d6e4d9f2e621072baa3bf66b55cc73c562", 0x76}], 0x3) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x50, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe, 0xd}}, [@TCA_INGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x5, 0x8, 0x6, 0x9}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) r5 = syz_io_uring_setup(0x2e43, &(0x7f00000004c0)={0x0, 0x3165, 0x40, 0x0, 0x143}, &(0x7f0000000080), &(0x7f00000000c0)) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(r5, 0xb, &(0x7f0000000100), 0x100000000000001a) umount2(&(0x7f0000000bc0)='./file0\x00', 0xb) mq_timedsend(r2, 0x0, 0x0, 0x9, 0x0) 280.765775ms ago: executing program 6 (id=17706): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x9, 0x1, 0x0, 'queue0\x00', 0x10000}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)) socket$inet_udp(0x2, 0x2, 0x0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x3c033, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x400000000, 0xffffffffffffffff, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) r5 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r6 = fcntl$dupfd(r5, 0x0, r5) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7a7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0x97}, 0x18) ioctl$USBDEVFS_SUBMITURB(r6, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) 280.331745ms ago: executing program 8 (id=17707): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2010846, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) preadv2(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2010846, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$eJzs3d9rU+cbAPDnpK2/v18riGxjjIIXczhT2+6Hg124y7HJhO3ehfZYpKmRJhXbCdOLebObIYMxJozdb/e7lP0D+yuETZAhZbvYTcZJT2q0SRNrtNF8PnDkfXNO+p4n73le35M3IQEMrYnsn0LEyxHxTRJxMCKSfN9o5Dsn1o9bu391NtuSqNc//StpHJfVm3+r+bz9eeWliPjtq4jjhc3tVldWF0rlcrqU1ydri5cmqyurJy4slubT+fTi9MzMqbdnpt97952+xfrG2X++/+T2h6e+Prr23S93D91M4nQcyPe1xvEErrVWJmIif03G4vQjB071obFBkuz0CbAtI3mej0U2BhyMkTzrgRfflxFRB4ZUIv9hSDXnAc17+z7dBz837n2wfgO0Of7R9fdGYk/j3mjfWvLQnVF2vzveh/azNn7989bNbIv+vQ8B0NW16xFxcnR08/iX5OPf9p3s4ZhH2zD+wbNzO5v/vNlu/lPYmP9Em/nP/ja5ux3d879wtw/NdJTN/95vO//dWLQaH8lr/2vM+caS8xfKaTa2/T8ijsXY7qy+1XrOqbU79U77Wud/2Za135wL5udxd3T3w8+ZK9VKTxJzq3vXI15pO/9NNvo/adP/2etxtsc2jqS3Xuu0r3v8T1f9p4jX2/b/gxWtZOv1ycnG9TDZvCo2+/vGkd87tb/T8Wf9v2/r+MeT1vXa6uO38eOef9NO+x6KP3q//nclnzXKu/LHrpRqtaWpiF3Jx5sfn37w3Ga9eXwW/7GjW49/7a7/vRHxeY/x3zj886s9xd+t/5/CImsW/9xj9f/jF+589MUP248/6/+3GqVj+SO9jH+9nuCTvHYAAAAAAAAwaAoRcSCSQnGjXCgUi+uf7zgc+wrlSrV2/Hxl+eJcNL4rOx5jheZK98GWz0NM5Z+HbdanH6nPRMShiPh2ZG+jXpytlOd2OngAAAAAAAAAAAAAAAAAAAAYEPs7fP8/88fITp8d8NT5yW8YXl3zvx+/9AQMJP//w/CS/zC85D8ML/kPw0v+w/CS/zC85D8ML/kPAAAAAAAAAAAAAAAAAAAAAAAAAAAAfXX2zJlsq6/dvzqb1ecurywvVC6fmEurC8XF5dnibGXpUnG+Upkvp8XZymK3v1euVC5NTcfylclaWq1NVldWzy1Wli/Wzl1YLM2n59KxZxIVAAAAAAAAAAAAAAAAAAAAPF+qK6sLpXI5XVJQ2FZhdDBOY3UhYiBO40Up7PTIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/BcAAP//8NI25Q==") (async) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) (async) pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) (async) preadv2(r0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000002200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) (async) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) 176.471125ms ago: executing program 8 (id=17708): syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51e}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100003}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000840)="ff", 0x1, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000340)=@chain={'key_or_keyring:', r2}) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r4}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r6, 0x0, 0x0) sendfile(r6, r5, 0x0, 0x3ffff) sendfile(r6, r5, 0x0, 0x7ffff000) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r7) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r7, 0xfe, 0xfffffffffffffffc}, 0x10) linkat(r6, &(0x7f0000000600)='./file0\x00', r7, 0x0, 0x1000) r8 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f0000000740)=@req={0x28, &(0x7f0000000700)={'veth1_virt_wifi\x00', @ifru_ivalue}}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) ioctl$USBDEVFS_SUBMITURB(r8, 0x8038550a, &(0x7f00000007c0)=@urb_type_iso={0x0, {0x1, 0x1}, 0xfff9, 0x40, 0x0, 0x0, 0x4, 0x5c0, 0x0, 0x1, 0x824f, 0x0}) 162.646316ms ago: executing program 8 (id=17709): write$P9_RMKDIR(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x49, 0x1, {0x80, 0x3, 0x3}}, 0x14) write$char_usb(0xffffffffffffffff, &(0x7f0000000040)="78463f7c34b75d7fddc461e846f2ec066cea4ea71aad2e078b1139754ad8c29621b439c8296ce979c8b69e59b693d4777cf25af149b53f9e06f9c93cfaa963e5cc1b497524100e0ca5bf819e3cecb6fae246b6775328234ddcf4cd883b30767559f4a1ee532870ac20527351931e7e56d1d938f74f6d2341ed7ff0af", 0x7c) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x185000, 0x0) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0xffff0001}}, './file0\x00'}) move_mount(r2, &(0x7f0000000140)='./file0\x00', r2, &(0x7f0000000180)='./file0\x00', 0x242) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r3, 0x8040942d, &(0x7f00000001c0)) getsockname$unix(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000280)=0x6e) sendmsg$NL80211_CMD_DISASSOCIATE(r2, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x38, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x23, 0x34, @random="903598de708930f4231d83c90cffce5d99e3fc21807a9bed46cb78607f065c"}]}, 0x38}, 0x1, 0x0, 0x0, 0x200080d0}, 0x20000045) ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f00000003c0)=0xfff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, r4, 0xc06, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "91a07603f0"}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) socket$xdp(0x2c, 0x3, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) write$P9_RUNLINKAT(r2, &(0x7f0000000580)={0x7, 0x4d, 0x2}, 0x7) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000600)=@security={'security\x00', 0xe, 0x4, 0x398, 0xffffffff, 0x120, 0x120, 0x120, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, &(0x7f00000005c0), {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffff00, 0x0, 0xffffff00, 0xff], [0xff000000, 0xffffffff, 0xffffffff, 0xffffffff], 'dummy0\x00', 'veth0_to_batadv\x00', {}, {}, 0x11, 0x5f, 0x2, 0x40}, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@dst={{0x48}, {0x1000, 0x2, 0x1, [0x7, 0x9, 0x3, 0x81, 0x3, 0x800, 0x4, 0x0, 0x32ea, 0x44, 0x5, 0x200, 0xd4a, 0x8, 0x1, 0x4], 0x6}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0x4, 0x7}, {0x1, 0x5, 0x1}, 0xb, 0xf}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x4, 0x101, 0x29aab01, 0x3}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) read$nci(r2, &(0x7f0000000a00)=""/165, 0xa5) r6 = socket$rds(0x15, 0x5, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r2, 0xc0189376, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, r6, {0x1}}, './file0/../file0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000b00), r2) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e00)={0x11, 0xd, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x97}}, @map_fd={0x18, 0xb, 0x1, 0x0, r7}]}, &(0x7f0000000c00)='GPL\x00', 0x2f5, 0x5b, &(0x7f0000000c40)=""/91, 0x41000, 0x31, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000cc0)={0x5, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000d00)=[r2, r2, r2, r7, r7, r7, r2, r7, r2], &(0x7f0000000d40)=[{0x2, 0x2, 0xcd51, 0xc}, {0x5, 0x5, 0x8, 0x9}, {0x0, 0x1, 0x3, 0x8}, {0x2, 0x3, 0x5}, {0x2, 0x1, 0x3, 0x3}, {0x3, 0x1, 0x9}, {0x3, 0x2, 0x2, 0x6}, {0x1, 0x5, 0x10, 0x8}, {0x0, 0x3, 0xa, 0x7}], 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000b40)='rtc_irq_set_state\x00', r8, 0x0, 0xa0}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000f00)={'netdevsim0\x00', 0x0}) socket$caif_stream(0x25, 0x1, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=@base={0x1f, 0x8, 0x3, 0xfffffc01, 0x1200, r7, 0x3, '\x00', r9, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) ioctl$EXT4_IOC_GROUP_EXTEND(r8, 0x40086607, &(0x7f0000000fc0)=0xfffffffffffffb1c) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x28, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xb3dc628d8979749d}, 0x40) 154.899286ms ago: executing program 6 (id=17710): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000400)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$vcsa(&(0x7f0000000200), 0x20000000, 0xcc0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa000000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110008", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockname$packet(0xffffffffffffffff, &(0x7f0000001740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001780)=0x14) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000180)={0x3, 0x4}, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x10) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000000)={0x19, 0xdd, 0x479c28ea, 0x1, 0x4, 0xfffb}) syz_emit_ethernet(0x52, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x1c, 0x3a, 0xff, @remote, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x8c07, 0xe, @local, 0x1, 0x1, 0x4, 0x7}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) write$ppp(0xffffffffffffffff, &(0x7f00000019c0)="8fe99a4537b5e074713edf1deba5ad8943fad03ac6da41e74f87e7c379464d0c8b847beb6e0e38f188d40e9df789a6cca47cff72bf40a094cfccca0fb2a007437b77", 0x42) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r5, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10) ioctl$sock_inet_SIOCSARP(r4, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) 128.403339ms ago: executing program 8 (id=17711): perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x83, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x4, 0x0, 0x0, 0x9, 0x0, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vcan0\x00'}}]}, 0x38}}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000000d1413043dbd7000fddbdf25"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1900000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00!\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r8 = io_uring_setup(0x641b, &(0x7f00000000c0)={0x0, 0x742a, 0x2, 0x3, 0x2ea}) io_uring_register$IORING_REGISTER_MEM_REGION(r8, 0x22, &(0x7f0000000140)={&(0x7f0000000040)={&(0x7f0000000740)="410ece9970270fbf253f8cafa1bead3e03c5504503d22922083bff8ec86c711c4e02df2699b4820fa031dc8213fbd984edb5e0b4769902dfaee8f6060840c28ae2114f5129bc13e019cda039dbca3faebe00c47b3484e78f329d69cbe2f9c658b17ddd25d282f22d601840aa332b39f421b14a7cbbfd93dfe5c18b36092f736b2b3b26b1d6a653a4bbf50d507dcb55d6be7877d16686bbc82957fa1d8d08fa0a5fa67e4732c14ec1cc5a97b446a5fec69d7499bc22a7cde3009421bff78597d23019742afa4afe6c6d269eaffaaf452daa70", 0xd2, 0x1, 0x4, 0x9}}, 0x1) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000240), &(0x7f00000006c0)}, 0x20) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_FLUSH(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b00)=ANY=[@ANYBLOB="c45820862ba47e0f22f68c465ab300e2c997854f1d94dad6b5b098dced97ab3ebc00f036577112bfe0c71c8c2641372b404f687e33aa3da9b5996d4a640c4a4113c540e733220cc3160bf681c6e5ac29f0bcffe0c5c2174a329269a1a5fc6406a35027fc43140e6861537a40816f9c4c38c988ceb9940b979e81454990f0badc26c14f38861a17db894247d689b772", @ANYRES16, @ANYRES32], 0xc4}}, 0x2400c880) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000ffdbdf250e0000000800060002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8}, 0x18) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)=@newqdisc={0x68, 0x10, 0x1, 0x70bd2b, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffe0}, {0x0, 0xc}, {0xe}}}, 0x68}}, 0x800) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000640)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14615, 0x10ed}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x8}]}}}]}, 0x3c}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r9, r5, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000440)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa050800450000300064000009029078ffffffffffffffff0b0090780098000045aa00010068000a64010003e00000a564010100"], 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000100)={0xac, 0x9, 0x2, 0x4, 0xf, "f600"}) sendmsg$nl_generic(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000140001"], 0x14}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000840)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000003a0004002abd7000fddbdf250a000100"], 0x14}, 0x1, 0x0, 0x0, 0x2004881}, 0x4) 118.86216ms ago: executing program 6 (id=17712): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="24000000031401002dbd7000ffdbdf250900020073797a3200000000080041"], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r0, @ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r4, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sync() 86.901193ms ago: executing program 8 (id=17713): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x8c) 42.791797ms ago: executing program 8 (id=17714): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) close(r1) 0s ago: executing program 7 (id=17715): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) io_setup(0x4082, &(0x7f0000000380)) syz_io_uring_setup(0x10029bf, &(0x7f0000001400)={0x0, 0x2000004, 0x8, 0xfffffffc, 0x13b}, &(0x7f0000000080), &(0x7f00000014c0)) kernel console output (not intermixed with test programs): running e2fsck is recommended [ 1186.755313][T22931] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.17184: Allocating blocks 41-42 which overlap fs metadata [ 1186.769643][T22931] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.17184: Allocating blocks 41-42 which overlap fs metadata [ 1186.786010][T22931] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.17184: Failed to acquire dquot type 1 [ 1186.798100][T22931] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 1186.812966][T22931] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.17184: corrupted inode contents [ 1186.827366][T22931] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #12: comm syz.5.17184: mark_inode_dirty error [ 1186.839425][T22931] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.17184: corrupted inode contents [ 1186.851756][T22931] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.17184: mark_inode_dirty error [ 1186.863565][T22931] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.17184: corrupted inode contents [ 1186.876213][T22931] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 1186.885400][T22931] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.17184: corrupted inode contents [ 1186.897796][T22931] EXT4-fs error (device loop5): ext4_truncate:4635: inode #12: comm syz.5.17184: mark_inode_dirty error [ 1186.897901][ T1599] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1186.909154][T22931] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 1186.926781][T22931] EXT4-fs (loop5): 1 truncate cleaned up [ 1186.933105][ T1599] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1186.942556][ T1599] .` (unregistering): Released all slaves [ 1186.951550][ T1599] bond0 (unregistering): Released all slaves [ 1186.960147][T22901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1186.967274][T22901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1186.993511][T22901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1187.006891][T22935] netlink: 'syz.7.17185': attribute type 12 has an invalid length. [ 1187.036918][T22943] rdma_rxe: rxe_newlink: failed to add vcan0 [ 1187.078112][ T1599] hsr_slave_0: left promiscuous mode [ 1187.094894][ T1599] hsr_slave_1: left promiscuous mode [ 1187.100689][ T1599] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1187.108221][ T1599] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1187.117129][ T1599] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1187.124705][ T1599] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1187.144947][ T1599] veth1_macvtap: left promiscuous mode [ 1187.150458][ T1599] veth0_macvtap: left promiscuous mode [ 1187.160498][ T1599] veth1_vlan: left promiscuous mode [ 1187.166775][ T1599] veth0_vlan: left promiscuous mode [ 1187.335659][ T1599] team0 (unregistering): Port device team_slave_1 removed [ 1187.345812][ T1599] team0 (unregistering): Port device team_slave_0 removed [ 1187.372867][T22097] smc: removing ib device syz1 [ 1187.382467][T22901] hsr_slave_0: entered promiscuous mode [ 1187.390239][T22901] hsr_slave_1: entered promiscuous mode [ 1187.401238][T16108] vcan0 speed is unknown, defaulting to 1000 [ 1187.407300][T16108] syz1: Port: 1 Link DOWN [ 1187.415157][T22961] syzkaller0: entered promiscuous mode [ 1187.420649][T22961] syzkaller0: entered allmulticast mode [ 1187.483326][T22955] tipc: Started in network mode [ 1187.488253][T22955] tipc: Node identity 6287f953fd5f, cluster identity 4711 [ 1187.496045][T22955] tipc: Enabled bearer , priority 0 [ 1187.506441][T22955] netlink: 'syz.8.17193': attribute type 1 has an invalid length. [ 1187.588577][T22970] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 1187.606272][ T1599] IPVS: stop unused estimator thread 0... [ 1187.847190][T22901] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1187.856115][T22901] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1187.864889][T22901] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1187.873473][T22901] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1187.906700][T22901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1187.919210][T22901] 8021q: adding VLAN 0 to HW filter on device team0 [ 1187.928717][ T1599] bridge0: port 1(bridge_slave_0) entered blocking state [ 1187.935818][ T1599] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1187.946790][ T1630] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.954071][ T1630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1188.024906][T22901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1188.121437][T22997] vcan0 speed is unknown, defaulting to 1000 [ 1188.128371][T22997] vcan0 speed is unknown, defaulting to 1000 [ 1188.135782][T22997] vcan0 speed is unknown, defaulting to 1000 [ 1188.175465][T22901] veth0_vlan: entered promiscuous mode [ 1188.181410][T23002] __nla_validate_parse: 4 callbacks suppressed [ 1188.181425][T23002] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17198'. [ 1188.182604][T22997] infiniband syz1: set active [ 1188.190209][T22901] veth1_vlan: entered promiscuous mode [ 1188.197031][T22997] infiniband syz1: added vcan0 [ 1188.211672][T22901] veth0_macvtap: entered promiscuous mode [ 1188.219304][T16108] vcan0 speed is unknown, defaulting to 1000 [ 1188.228324][T22901] veth1_macvtap: entered promiscuous mode [ 1188.233206][T22997] RDS/IB: syz1: added [ 1188.239568][T22901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1188.241810][T22997] smc: adding ib device syz1 with port count 1 [ 1188.249150][T22901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1188.260622][T22997] smc: ib device syz1 port 1 has no pnetid [ 1188.271007][ T3502] vcan0 speed is unknown, defaulting to 1000 [ 1188.278071][T22997] vcan0 speed is unknown, defaulting to 1000 [ 1188.289143][T22097] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.316550][T22097] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.325571][T22097] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.335109][T22097] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1188.358250][T22997] vcan0 speed is unknown, defaulting to 1000 [ 1188.396938][T22997] vcan0 speed is unknown, defaulting to 1000 [ 1188.424427][T23009] netlink: ',&#^%': attribute type 4 has an invalid length. [ 1188.439181][T22997] vcan0 speed is unknown, defaulting to 1000 [ 1188.446950][T23009] netlink: ',&#^%': attribute type 4 has an invalid length. [ 1188.492518][T22997] vcan0 speed is unknown, defaulting to 1000 [ 1188.613008][T16108] tipc: Node number set to 2681796947 [ 1188.642517][T23015] netlink: 'syz.3.17202': attribute type 1 has an invalid length. [ 1188.650395][T23015] netlink: 224 bytes leftover after parsing attributes in process `syz.3.17202'. [ 1188.935700][T23030] netlink: 'syz.6.17205': attribute type 12 has an invalid length. [ 1188.993681][T23033] vcan0 speed is unknown, defaulting to 1000 [ 1189.058161][T23036] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.116009][T23036] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.176961][T23036] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.248665][T23036] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1189.360296][T23039] set_capacity_and_notify: 5 callbacks suppressed [ 1189.360311][T23039] loop5: detected capacity change from 0 to 512 [ 1189.373683][T23039] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1189.386924][T23039] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.17208: bg 0: block 5: invalid block bitmap [ 1189.400374][T23039] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1189.409371][T23039] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.17208: invalid indirect mapped block 3 (level 2) [ 1189.427151][T23039] EXT4-fs (loop5): 2 truncates cleaned up [ 1189.491921][T23043] loop5: detected capacity change from 0 to 8192 [ 1189.533065][T23043] loop5: p1 p2[DM] p4 [ 1189.537227][T23043] loop5: p1 size 196608 extends beyond EOD, truncated [ 1189.544839][T23043] loop5: p2 start 4292936063 is beyond EOD, truncated [ 1189.551638][T23043] loop5: p4 size 50331648 extends beyond EOD, truncated [ 1189.556131][T23045] loop7: detected capacity change from 0 to 512 [ 1189.565674][T23045] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1189.574509][T23045] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.17210: bg 0: block 5: invalid block bitmap [ 1189.587472][T23045] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1189.596605][T23045] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.17210: invalid indirect mapped block 3 (level 2) [ 1189.610673][T23045] EXT4-fs (loop7): 2 truncates cleaned up [ 1189.637865][ T29] kauditd_printk_skb: 1909 callbacks suppressed [ 1189.637878][ T29] audit: type=1326 audit(1190.619:247023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23049 comm="syz.7.17212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8bd5f749 code=0x7ffc0000 [ 1189.668032][ T29] audit: type=1326 audit(1190.619:247024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23049 comm="syz.7.17212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8bd5f749 code=0x7ffc0000 [ 1189.691458][ T29] audit: type=1326 audit(1190.629:247025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23049 comm="syz.7.17212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8bd5f749 code=0x7ffc0000 [ 1189.715419][ T29] audit: type=1326 audit(1190.629:247026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23049 comm="syz.7.17212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d8bd5f749 code=0x7ffc0000 [ 1189.732508][T23052] vcan0 speed is unknown, defaulting to 1000 [ 1189.738920][ T29] audit: type=1326 audit(1190.629:247027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23049 comm="syz.7.17212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8bd5f749 code=0x7ffc0000 [ 1189.768526][ T29] audit: type=1326 audit(1190.629:247028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23049 comm="syz.7.17212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8bd5f749 code=0x7ffc0000 [ 1189.774947][T23053] loop5: detected capacity change from 0 to 512 [ 1189.791937][ T29] audit: type=1326 audit(1190.629:247029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23049 comm="syz.7.17212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8bd5f749 code=0x7ffc0000 [ 1189.821561][ T29] audit: type=1326 audit(1190.629:247030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23049 comm="syz.7.17212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8bd5f749 code=0x7ffc0000 [ 1189.826695][T23053] EXT4-fs: Ignoring removed nobh option [ 1189.844859][ T29] audit: type=1326 audit(1190.629:247031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23049 comm="syz.7.17212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0d8bd5f749 code=0x7ffc0000 [ 1189.873825][ T29] audit: type=1326 audit(1190.629:247032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23049 comm="syz.7.17212" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0d8bd5f749 code=0x7ffc0000 [ 1189.893616][T23053] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e118, mo2=0002] [ 1189.907265][T23053] System zones: 1-12 [ 1189.911563][T23053] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1189.920281][T23053] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.17213: corrupted inode contents [ 1189.933830][T23053] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #15: comm syz.5.17213: mark_inode_dirty error [ 1189.959593][T23053] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.17213: corrupted inode contents [ 1189.972102][T23053] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3000: inode #15: comm syz.5.17213: mark_inode_dirty error [ 1189.990675][T23053] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3003: inode #15: comm syz.5.17213: mark inode dirty (error -117) [ 1190.004913][T23053] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 1190.018295][T23053] EXT4-fs (loop5): 1 orphan inode deleted [ 1190.089155][T23061] loop5: detected capacity change from 0 to 512 [ 1190.097473][T23061] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.17216: inode has both inline data and extents flags [ 1190.123250][T23061] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.17216: couldn't read orphan inode 15 (err -117) [ 1190.174622][T23064] netlink: 'syz.5.17217': attribute type 12 has an invalid length. [ 1190.235194][T22954] tipc: Resetting bearer [ 1190.245585][T22954] tipc: Disabling bearer [ 1190.300658][T23071] netlink: 40 bytes leftover after parsing attributes in process `syz.8.17220'. [ 1190.322699][T23073] netlink: 24 bytes leftover after parsing attributes in process `syz.3.17221'. [ 1190.773666][T23080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1190.782230][T23080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1190.829657][T23085] loop8: detected capacity change from 0 to 1024 [ 1190.843101][T23085] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 1191.017832][T23092] loop8: detected capacity change from 0 to 8192 [ 1191.032885][T23092] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(7) [ 1191.039512][T23092] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1191.047210][T23092] vhci_hcd vhci_hcd.0: Device attached [ 1191.053674][T23092] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1191.062493][T23092] FAT-fs (loop8): Filesystem has been set read-only [ 1191.069426][T23092] FAT-fs (loop8): error, fat_free: invalid cluster chain (i_pos 1046) [ 1191.080966][T23093] vhci_hcd: connection closed [ 1191.081259][ T42] vhci_hcd vhci_hcd.8: stop threads [ 1191.091368][ T42] vhci_hcd vhci_hcd.8: release socket [ 1191.096872][ T42] vhci_hcd vhci_hcd.8: disconnect device [ 1191.400397][T23101] netlink: 24 bytes leftover after parsing attributes in process `syz.7.17232'. [ 1191.416472][T23103] netlink: 3 bytes leftover after parsing attributes in process `syz.5.17230'. [ 1191.425675][T23103] 0ªX¹¦À: renamed from 61ªX¹¦À [ 1191.432274][T23103] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1191.469622][T23108] netlink: 'syz.5.17234': attribute type 12 has an invalid length. [ 1191.501525][T23112] loop5: detected capacity change from 0 to 512 [ 1191.508798][T23112] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1191.517291][T23112] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.17236: bg 0: block 5: invalid block bitmap [ 1191.530068][T23112] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1191.539503][T23112] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.17236: invalid indirect mapped block 3 (level 2) [ 1191.553202][T23112] EXT4-fs (loop5): 2 truncates cleaned up [ 1191.624747][T23118] loop5: detected capacity change from 0 to 1024 [ 1191.638630][T23118] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.17238: Failed to acquire dquot type 0 [ 1191.650890][T23118] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1191.665635][T23120] loop8: detected capacity change from 0 to 128 [ 1191.673453][T23118] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.17238: corrupted inode contents [ 1191.683191][T23120] bio_check_eod: 230 callbacks suppressed [ 1191.683207][T23120] syz.8.17239: attempt to access beyond end of device [ 1191.683207][T23120] loop8: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 1191.686468][T23118] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #13: comm syz.5.17238: mark_inode_dirty error [ 1191.691986][T23120] syz.8.17239: attempt to access beyond end of device [ 1191.691986][T23120] loop8: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 1191.723207][T23118] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.17238: corrupted inode contents [ 1191.731776][T23120] syz.8.17239: attempt to access beyond end of device [ 1191.731776][T23120] loop8: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 1191.757358][T23120] buffer_io_error: 146 callbacks suppressed [ 1191.757373][T23120] Buffer I/O error on dev loop8, logical block 75, lost async page write [ 1191.771893][T23120] syz.8.17239: attempt to access beyond end of device [ 1191.771893][T23120] loop8: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 1191.785722][T23120] Buffer I/O error on dev loop8, logical block 76, lost async page write [ 1191.794525][T23118] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.17238: mark_inode_dirty error [ 1191.794894][T23120] syz.8.17239: attempt to access beyond end of device [ 1191.794894][T23120] loop8: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 1191.820492][T23120] syz.8.17239: attempt to access beyond end of device [ 1191.820492][T23120] loop8: rw=8390657, sector=174, nr_sectors = 2 limit=128 [ 1191.830984][T23118] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.17238: corrupted inode contents [ 1191.834272][T23120] Buffer I/O error on dev loop8, logical block 87, lost async page write [ 1191.848009][T23118] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 1191.855021][T23120] syz.8.17239: attempt to access beyond end of device [ 1191.855021][T23120] loop8: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 1191.877575][T23120] Buffer I/O error on dev loop8, logical block 88, lost async page write [ 1191.883105][T23118] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.17238: corrupted inode contents [ 1191.886631][T23120] syz.8.17239: attempt to access beyond end of device [ 1191.886631][T23120] loop8: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 1191.912405][T23120] syz.8.17239: attempt to access beyond end of device [ 1191.912405][T23120] loop8: rw=8390657, sector=182, nr_sectors = 2 limit=128 [ 1191.924671][T23118] EXT4-fs error (device loop5): ext4_truncate:4635: inode #13: comm syz.5.17238: mark_inode_dirty error [ 1191.926187][T23120] Buffer I/O error on dev loop8, logical block 91, lost async page write [ 1191.945973][T23120] syz.8.17239: attempt to access beyond end of device [ 1191.945973][T23120] loop8: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 1191.959759][T23120] Buffer I/O error on dev loop8, logical block 92, lost async page write [ 1191.968769][T23118] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 1191.969540][T23120] Buffer I/O error on dev loop8, logical block 103, lost async page write [ 1191.978182][T23118] EXT4-fs (loop5): 1 truncate cleaned up [ 1191.993132][T23120] Buffer I/O error on dev loop8, logical block 104, lost async page write [ 1192.002504][T23120] Buffer I/O error on dev loop8, logical block 107, lost async page write [ 1192.011464][T23120] Buffer I/O error on dev loop8, logical block 108, lost async page write [ 1192.241838][T23132] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17244'. [ 1192.359676][ T42] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.391320][ T42] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.422968][ T42] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.445782][T23135] netlink: 3 bytes leftover after parsing attributes in process `syz.7.17245'. [ 1192.454854][ T42] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1192.463285][T23135] 0ªX¹¦À: renamed from caif0 [ 1192.471163][T23135] 0ªX¹¦À: entered allmulticast mode [ 1192.476496][T23135] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1192.527017][T23142] netlink: 'syz.6.17248': attribute type 1 has an invalid length. [ 1192.535030][T23142] netlink: 224 bytes leftover after parsing attributes in process `syz.6.17248'. [ 1192.553675][T23144] netlink: 'syz.7.17250': attribute type 1 has an invalid length. [ 1192.561516][T23144] netlink: 224 bytes leftover after parsing attributes in process `syz.7.17250'. [ 1192.777416][T23167] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1192.786481][T23167] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.17257: bg 0: block 5: invalid block bitmap [ 1192.801472][T23167] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1192.810488][T23167] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.17257: invalid indirect mapped block 3 (level 2) [ 1192.833129][T23167] EXT4-fs (loop3): 2 truncates cleaned up [ 1192.938833][T23184] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1192.947170][T23184] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.17265: bg 0: block 5: invalid block bitmap [ 1192.960403][T23184] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1192.969404][T23184] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.17265: invalid indirect mapped block 3 (level 2) [ 1192.983356][T23184] EXT4-fs (loop3): 2 truncates cleaned up [ 1193.062479][T23187] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1193.069010][T23187] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1193.076841][T23187] vhci_hcd vhci_hcd.0: Device attached [ 1193.086694][T23187] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1193.095561][T23187] FAT-fs (loop3): Filesystem has been set read-only [ 1193.103377][T23187] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 1046) [ 1193.114054][T23192] netlink: 'syz.5.17267': attribute type 1 has an invalid length. [ 1193.120260][T23189] vhci_hcd: connection closed [ 1193.122255][ T42] vhci_hcd vhci_hcd.3: stop threads [ 1193.132260][ T42] vhci_hcd vhci_hcd.3: release socket [ 1193.137681][ T42] vhci_hcd vhci_hcd.3: disconnect device [ 1193.241123][T23202] __nla_validate_parse: 3 callbacks suppressed [ 1193.241134][T23202] netlink: 24 bytes leftover after parsing attributes in process `syz.5.17271'. [ 1193.548075][T23215] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 1193.570317][T23215] vcan0 speed is unknown, defaulting to 1000 [ 1193.665416][T23223] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17277'. [ 1193.830462][T23232] netlink: 3 bytes leftover after parsing attributes in process `syz.8.17281'. [ 1193.839744][T23232] 0ªX¹¦À: renamed from caif0 [ 1193.846145][T23232] 0ªX¹¦À: entered allmulticast mode [ 1193.851372][T23232] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1194.039670][T23242] veth10: entered allmulticast mode [ 1194.375422][T23246] set_capacity_and_notify: 7 callbacks suppressed [ 1194.375439][T23246] loop5: detected capacity change from 0 to 8192 [ 1194.421170][T23246] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1194.427760][T23246] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1194.435546][T23246] vhci_hcd vhci_hcd.0: Device attached [ 1194.446124][T23246] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1194.455091][T23246] FAT-fs (loop5): Filesystem has been set read-only [ 1194.464341][T23246] FAT-fs (loop5): error, fat_free: invalid cluster chain (i_pos 1046) [ 1194.480901][T23247] vhci_hcd: connection closed [ 1194.480998][T22097] vhci_hcd vhci_hcd.5: stop threads [ 1194.491050][T22097] vhci_hcd vhci_hcd.5: release socket [ 1194.496489][T22097] vhci_hcd vhci_hcd.5: disconnect device [ 1194.549103][T23255] netlink: 24 bytes leftover after parsing attributes in process `syz.7.17290'. [ 1194.623768][T23261] loop3: detected capacity change from 0 to 512 [ 1194.643085][ T29] kauditd_printk_skb: 3673 callbacks suppressed [ 1194.643100][ T29] audit: type=1326 audit(1195.629:250704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23235 comm="syz.8.17283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f499d702005 code=0x7ffc0000 [ 1194.643182][T23261] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1194.651557][ T29] audit: type=1326 audit(1195.629:250705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23235 comm="syz.8.17283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f499d702005 code=0x7ffc0000 [ 1194.702558][ T29] audit: type=1326 audit(1195.629:250706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23235 comm="syz.8.17283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f499d702005 code=0x7ffc0000 [ 1194.702972][T23261] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1194.739972][ T29] audit: type=1326 audit(1195.709:250707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23235 comm="syz.8.17283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f499d702005 code=0x7ffc0000 [ 1194.763277][ T29] audit: type=1326 audit(1195.719:250708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23235 comm="syz.8.17283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f499d6cf749 code=0x7ffc0000 [ 1194.786762][ T29] audit: type=1326 audit(1195.719:250709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23235 comm="syz.8.17283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f499d6cf749 code=0x7ffc0000 [ 1194.810057][ T29] audit: type=1326 audit(1195.729:250710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23233 comm="syz.6.17282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca862f749 code=0x7ffc0000 [ 1194.812947][T23261] EXT4-fs (loop3): 1 truncate cleaned up [ 1194.833444][ T29] audit: type=1326 audit(1195.729:250711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23233 comm="syz.6.17282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca862f749 code=0x7ffc0000 [ 1194.873640][T23261] FAULT_INJECTION: forcing a failure. [ 1194.873640][T23261] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1194.887079][T23261] CPU: 1 UID: 0 PID: 23261 Comm: syz.3.17293 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1194.887175][T23261] Tainted: [W]=WARN [ 1194.887183][T23261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1194.887194][T23261] Call Trace: [ 1194.887199][T23261] [ 1194.887207][T23261] __dump_stack+0x1d/0x30 [ 1194.887308][T23261] dump_stack_lvl+0x95/0xd0 [ 1194.887330][T23261] dump_stack+0x15/0x1b [ 1194.887378][T23261] should_fail_ex+0x265/0x280 [ 1194.887404][T23261] should_fail_alloc_page+0xf2/0x100 [ 1194.887507][T23261] __alloc_frozen_pages_noprof+0x109/0x360 [ 1194.887559][T23261] alloc_pages_mpol+0xb3/0x260 [ 1194.887624][T23261] folio_alloc_noprof+0x97/0x150 [ 1194.887648][T23261] filemap_alloc_folio_noprof+0x93/0x230 [ 1194.887668][T23261] __filemap_get_folio_mpol+0x295/0x650 [ 1194.887756][T23261] ext4_mb_init_group+0xbb/0x580 [ 1194.887779][T23261] ? ext4_get_group_desc+0x16b/0x190 [ 1194.887859][T23261] ext4_mb_scan_group+0x5f4/0xf10 [ 1194.887883][T23261] ext4_mb_regular_allocator+0x70a/0x15e0 [ 1194.887909][T23261] ? __ext4_mark_inode_dirty+0x2fe/0x3f0 [ 1194.887967][T23261] ext4_mb_new_blocks+0x800/0x2080 [ 1194.888068][T23261] ? folio_mark_accessed+0x240/0x3a0 [ 1194.888092][T23261] ? ext4_ind_map_blocks+0x838/0x14f0 [ 1194.888109][T23261] ? ext4_get_branch+0x321/0x3a0 [ 1194.888159][T23261] ext4_ind_map_blocks+0xb86/0x14f0 [ 1194.888192][T23261] ext4_map_blocks+0x5e3/0xd20 [ 1194.888219][T23261] _ext4_get_block+0x10a/0x350 [ 1194.888252][T23261] ? folio_alloc_buffers+0x2e5/0x310 [ 1194.888387][T23261] ? _raw_spin_lock+0x52/0xa0 [ 1194.888407][T23261] ext4_get_block+0x39/0x50 [ 1194.888429][T23261] ext4_block_write_begin+0x650/0xcf0 [ 1194.888533][T23261] ? __pfx_ext4_get_block+0x10/0x10 [ 1194.888558][T23261] ext4_convert_inline_data_to_extent+0x3e2/0x7d0 [ 1194.888585][T23261] ext4_try_to_write_inline_data+0x54/0x90 [ 1194.888658][T23261] ext4_write_begin+0x1a3/0xe90 [ 1194.888685][T23261] ? inode_to_bdi+0x47/0xa0 [ 1194.888703][T23261] ? inode_to_bdi+0x47/0xa0 [ 1194.888718][T23261] ? balance_dirty_pages_ratelimited_flags+0x40b/0x5e0 [ 1194.888810][T23261] generic_perform_write+0x184/0x490 [ 1194.888869][T23261] ext4_buffered_write_iter+0x1ee/0x3c0 [ 1194.888899][T23261] ext4_file_write_iter+0x387/0xf60 [ 1194.889002][T23261] ? copy_from_user_nofault+0xa2/0x120 [ 1194.889023][T23261] ? rep_movs_alternative+0x1e/0x90 [ 1194.889042][T23261] ? avc_policy_seqno+0x15/0x30 [ 1194.889085][T23261] ? selinux_file_permission+0x1e2/0x320 [ 1194.889117][T23261] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 1194.889147][T23261] vfs_write+0x52a/0x960 [ 1194.889171][T23261] __x64_sys_pwrite64+0xfd/0x150 [ 1194.889231][T23261] x64_sys_call+0x9f7/0x3000 [ 1194.889323][T23261] do_syscall_64+0xca/0x2b0 [ 1194.889357][T23261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.889380][T23261] RIP: 0033:0x7ff534eff749 [ 1194.889402][T23261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1194.889469][T23261] RSP: 002b:00007ff53395f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1194.889490][T23261] RAX: ffffffffffffffda RBX: 00007ff535155fa0 RCX: 00007ff534eff749 [ 1194.889504][T23261] RDX: 00000000200000c1 RSI: 00002000000000c0 RDI: 0000000000000009 [ 1194.889518][T23261] RBP: 00007ff53395f090 R08: 0000000000000000 R09: 0000000000000000 [ 1194.889532][T23261] R10: 0000000000009000 R11: 0000000000000246 R12: 0000000000000001 [ 1194.889546][T23261] R13: 00007ff535156038 R14: 00007ff535155fa0 R15: 00007ffdce711078 [ 1194.889566][T23261] [ 1195.256471][T23275] netlink: 'syz.8.17296': attribute type 1 has an invalid length. [ 1195.264592][T23275] netlink: 224 bytes leftover after parsing attributes in process `syz.8.17296'. [ 1195.303852][T23285] loop6: detected capacity change from 0 to 512 [ 1195.312140][T23275] loop8: detected capacity change from 0 to 1764 [ 1195.321019][T23285] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1195.341580][T23291] rdma_rxe: rxe_newlink: failed to add vcan0 [ 1195.345625][T23285] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.17298: bg 0: block 5: invalid block bitmap [ 1195.348365][T23291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17299'. [ 1195.373537][T23285] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1195.382508][T23285] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.17298: invalid indirect mapped block 3 (level 2) [ 1195.396355][T23285] EXT4-fs (loop6): 2 truncates cleaned up [ 1195.433472][ T29] audit: type=1326 audit(1196.419:250712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23299 comm="syz.6.17303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca862f749 code=0x7ffc0000 [ 1195.457906][ T3513] usb usb8-port7: attempt power cycle [ 1195.478149][T23300] loop5: detected capacity change from 0 to 1024 [ 1195.503527][T23300] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 1195.520187][T23306] netlink: 'syz.3.17305': attribute type 12 has an invalid length. [ 1195.541552][ T29] audit: type=1326 audit(1196.419:250713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23299 comm="syz.6.17303" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca862f749 code=0x7ffc0000 [ 1195.544258][T23309] loop7: detected capacity change from 0 to 1024 [ 1195.596825][T23309] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.17306: Failed to acquire dquot type 0 [ 1195.598043][T23316] loop5: detected capacity change from 0 to 512 [ 1195.617598][T23316] EXT4-fs: Ignoring removed bh option [ 1195.623308][T23309] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1195.638253][T23316] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1195.642456][T23309] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #13: comm syz.7.17306: corrupted inode contents [ 1195.662167][T23318] netlink: 'syz.3.17310': attribute type 12 has an invalid length. [ 1195.670413][T23309] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #13: comm syz.7.17306: mark_inode_dirty error [ 1195.689143][T23309] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #13: comm syz.7.17306: corrupted inode contents [ 1195.701824][T23309] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #13: comm syz.7.17306: mark_inode_dirty error [ 1195.713684][T23309] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #13: comm syz.7.17306: corrupted inode contents [ 1195.726114][T23309] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 1195.735273][T23309] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #13: comm syz.7.17306: corrupted inode contents [ 1195.747906][T23309] EXT4-fs error (device loop7): ext4_truncate:4635: inode #13: comm syz.7.17306: mark_inode_dirty error [ 1195.759622][T23309] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 1195.768941][T23309] EXT4-fs (loop7): 1 truncate cleaned up [ 1195.777553][T23316] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 1195.829272][T23316] netlink: 12 bytes leftover after parsing attributes in process `syz.5.17309'. [ 1195.844438][T23322] loop3: detected capacity change from 0 to 8192 [ 1195.856037][T23322] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1195.862609][T23322] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1195.870366][T23322] vhci_hcd vhci_hcd.0: Device attached [ 1195.891675][T23322] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1195.900614][T23322] FAT-fs (loop3): Filesystem has been set read-only [ 1195.907841][T23322] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 1046) [ 1195.919250][T23325] vhci_hcd: connection closed [ 1195.919383][T22097] vhci_hcd vhci_hcd.3: stop threads [ 1195.929323][T22097] vhci_hcd vhci_hcd.3: release socket [ 1195.934806][T22097] vhci_hcd vhci_hcd.3: disconnect device [ 1196.092684][T23330] vcan0 speed is unknown, defaulting to 1000 [ 1196.125868][T15400] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.184526][T15400] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.197709][T23330] chnl_net:caif_netlink_parms(): no params data found [ 1196.241553][T23330] bridge0: port 1(bridge_slave_0) entered blocking state [ 1196.248769][T23330] bridge0: port 1(bridge_slave_0) entered disabled state [ 1196.256904][T23330] bridge_slave_0: entered allmulticast mode [ 1196.263659][T23330] bridge_slave_0: entered promiscuous mode [ 1196.274630][T23330] bridge0: port 2(bridge_slave_1) entered blocking state [ 1196.281814][T23330] bridge0: port 2(bridge_slave_1) entered disabled state [ 1196.305757][T23330] bridge_slave_1: entered allmulticast mode [ 1196.323614][T23330] bridge_slave_1: entered promiscuous mode [ 1196.334821][T15400] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.375408][T23330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1196.387941][T15400] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1196.398418][T23346] rdma_rxe: rxe_newlink: failed to add vcan0 [ 1196.405038][T23346] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17315'. [ 1196.416544][T23330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1196.449457][T23330] team0: Port device team_slave_0 added [ 1196.466804][T23330] team0: Port device team_slave_1 added [ 1196.500865][T23353] loop3: detected capacity change from 0 to 1024 [ 1196.519278][T23330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1196.526299][T23330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1196.552215][T23330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1196.564444][T23353] EXT4-fs error (device loop3): ext4_acquire_dquot:6986: comm syz.3.17318: Failed to acquire dquot type 0 [ 1196.576570][T23353] EXT4-fs error (device loop3): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1196.592903][T23353] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.17318: corrupted inode contents [ 1196.598693][T23330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1196.611823][T23330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1196.637994][T23330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1196.648225][T23353] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #13: comm syz.3.17318: mark_inode_dirty error [ 1196.690576][T23353] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.17318: corrupted inode contents [ 1196.736674][T23353] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #13: comm syz.3.17318: mark_inode_dirty error [ 1196.783805][T23353] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.17318: corrupted inode contents [ 1196.803105][T23353] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 1196.828950][T23353] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #13: comm syz.3.17318: corrupted inode contents [ 1196.844856][T15400] .` (unregistering): Released all slaves [ 1196.861150][T23353] EXT4-fs error (device loop3): ext4_truncate:4635: inode #13: comm syz.3.17318: mark_inode_dirty error [ 1196.879004][T23359] loop5: detected capacity change from 0 to 1024 [ 1196.882884][T23353] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 1196.894679][T23353] EXT4-fs (loop3): 1 truncate cleaned up [ 1196.906354][T23359] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 1196.930507][T23330] hsr_slave_0: entered promiscuous mode [ 1196.954397][T23330] hsr_slave_1: entered promiscuous mode [ 1196.964000][T23359] netlink: 'syz.5.17321': attribute type 1 has an invalid length. [ 1196.983433][T23330] debugfs: 'hsr0' already exists in 'hsr' [ 1196.989180][T23330] Cannot create hsr debugfs directory [ 1197.006973][T23366] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.17324: inode has both inline data and extents flags [ 1197.022271][T23359] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1197.043828][T23370] netlink: 4 bytes leftover after parsing attributes in process `syz.5.17321'. [ 1197.053899][T23366] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.17324: couldn't read orphan inode 15 (err -117) [ 1197.072940][T15400] hsr_slave_0: left promiscuous mode [ 1197.078794][T15400] hsr_slave_1: left promiscuous mode [ 1197.104370][T15400] veth1_macvtap: left promiscuous mode [ 1197.110830][T15400] veth0_macvtap: left promiscuous mode [ 1197.126591][T15400] veth1_vlan: left promiscuous mode [ 1197.132364][T15400] veth0_vlan: left promiscuous mode [ 1197.142171][T23375] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1197.153553][T23375] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.17325: bg 0: block 5: invalid block bitmap [ 1197.198003][T23375] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1197.216134][T23375] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.17325: invalid indirect mapped block 3 (level 2) [ 1197.247106][T23375] EXT4-fs (loop6): 2 truncates cleaned up [ 1197.300042][T22959] smc: removing ib device syz1 [ 1197.315324][T23370] bond2 (unregistering): Released all slaves [ 1197.363129][ T3513] usb usb8-port7: unable to enumerate USB device [ 1197.435906][T23382] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(7) [ 1197.436958][T23372] veth4: entered allmulticast mode [ 1197.442441][T23382] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1197.442482][T23382] vhci_hcd vhci_hcd.0: Device attached [ 1197.465129][T23384] vhci_hcd: connection closed [ 1197.465236][T22097] vhci_hcd vhci_hcd.6: stop threads [ 1197.475372][T22097] vhci_hcd vhci_hcd.6: release socket [ 1197.480788][T22097] vhci_hcd vhci_hcd.6: disconnect device [ 1197.498645][T16108] vcan0 speed is unknown, defaulting to 1000 [ 1197.504779][T16108] syz1: Port: 1 Link DOWN [ 1197.607979][T23390] netlink: 3 bytes leftover after parsing attributes in process `syz.5.17329'. [ 1197.626042][T23390] 1ªX¹¦À: renamed from 60ªX¹¦À [ 1197.633094][T23390] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1197.755081][T23396] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 1197.951419][T23330] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1197.965367][T23330] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1197.986003][T23330] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1198.017069][T23330] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1198.027468][T23424] bio_check_eod: 70 callbacks suppressed [ 1198.027484][T23424] syz.5.17336: attempt to access beyond end of device [ 1198.027484][T23424] loop5: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 1198.051015][T23424] syz.5.17336: attempt to access beyond end of device [ 1198.051015][T23424] loop5: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 1198.066394][T23424] syz.5.17336: attempt to access beyond end of device [ 1198.066394][T23424] loop5: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 1198.080447][T23424] buffer_io_error: 42 callbacks suppressed [ 1198.080460][T23424] Buffer I/O error on dev loop5, logical block 75, lost async page write [ 1198.125374][T23330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1198.132259][T23424] syz.5.17336: attempt to access beyond end of device [ 1198.132259][T23424] loop5: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 1198.146318][T23424] Buffer I/O error on dev loop5, logical block 76, lost async page write [ 1198.162485][T23330] 8021q: adding VLAN 0 to HW filter on device team0 [ 1198.172593][T15400] bridge0: port 1(bridge_slave_0) entered blocking state [ 1198.179850][T15400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1198.200841][T23330] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1198.211374][T23330] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1198.221822][T23424] syz.5.17336: attempt to access beyond end of device [ 1198.221822][T23424] loop5: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 1198.235921][T23424] syz.5.17336: attempt to access beyond end of device [ 1198.235921][T23424] loop5: rw=8390657, sector=174, nr_sectors = 2 limit=128 [ 1198.249994][T23424] Buffer I/O error on dev loop5, logical block 87, lost async page write [ 1198.260273][T23424] syz.5.17336: attempt to access beyond end of device [ 1198.260273][T23424] loop5: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 1198.261048][T15400] bridge0: port 2(bridge_slave_1) entered blocking state [ 1198.274180][T23424] Buffer I/O error on dev loop5, logical block 88, lost async page write [ 1198.274503][T23424] syz.5.17336: attempt to access beyond end of device [ 1198.274503][T23424] loop5: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 1198.281390][T15400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1198.290282][T23424] syz.5.17336: attempt to access beyond end of device [ 1198.290282][T23424] loop5: rw=8390657, sector=182, nr_sectors = 2 limit=128 [ 1198.324535][T23424] Buffer I/O error on dev loop5, logical block 91, lost async page write [ 1198.333667][T23424] syz.5.17336: attempt to access beyond end of device [ 1198.333667][T23424] loop5: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 1198.347444][T23424] Buffer I/O error on dev loop5, logical block 92, lost async page write [ 1198.359712][T23424] Buffer I/O error on dev loop5, logical block 103, lost async page write [ 1198.377122][T23424] Buffer I/O error on dev loop5, logical block 104, lost async page write [ 1198.386387][T23424] Buffer I/O error on dev loop5, logical block 107, lost async page write [ 1198.397350][T23424] Buffer I/O error on dev loop5, logical block 108, lost async page write [ 1198.428605][T23330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1198.582882][T23454] netlink: 'syz.5.17338': attribute type 1 has an invalid length. [ 1198.591384][T23454] netlink: 224 bytes leftover after parsing attributes in process `syz.5.17338'. [ 1198.617490][T23330] veth0_vlan: entered promiscuous mode [ 1198.623663][T23456] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 1198.625493][T23330] veth1_vlan: entered promiscuous mode [ 1198.701031][T23330] veth0_macvtap: entered promiscuous mode [ 1198.722703][T23330] veth1_macvtap: entered promiscuous mode [ 1198.748233][T23464] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.17342: Failed to acquire dquot type 0 [ 1198.753318][T23330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1198.780018][T23464] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1198.781935][T23467] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 1198.809017][T23330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1198.812954][T23464] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.17342: corrupted inode contents [ 1198.820639][T15400] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.843053][T23464] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #13: comm syz.5.17342: mark_inode_dirty error [ 1198.863257][T23464] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.17342: corrupted inode contents [ 1198.890550][T23464] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.17342: mark_inode_dirty error [ 1198.912464][T23464] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.17342: corrupted inode contents [ 1198.921837][T15400] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.946639][T23471] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1198.953005][T23464] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 1198.966929][T23464] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #13: comm syz.5.17342: corrupted inode contents [ 1198.979339][T15400] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.995338][T23471] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.013839][T23464] EXT4-fs error (device loop5): ext4_truncate:4635: inode #13: comm syz.5.17342: mark_inode_dirty error [ 1199.025801][T15400] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.027057][T23464] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 1199.063501][T23464] EXT4-fs (loop5): 1 truncate cleaned up [ 1199.085493][T23471] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.196846][T23492] SELinux: security_context_str_to_sid (sy) failed with errno=-22 [ 1199.215024][T23471] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.230441][T23492] netlink: 'syz.6.17349': attribute type 1 has an invalid length. [ 1199.241529][T23492] netlink: 4 bytes leftover after parsing attributes in process `syz.6.17349'. [ 1199.310851][T22097] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.329640][T22097] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.338805][T22097] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.347541][T22097] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1199.416066][T23499] set_capacity_and_notify: 12 callbacks suppressed [ 1199.416084][T23499] loop3: detected capacity change from 0 to 512 [ 1199.429881][T23499] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1199.436845][T23499] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1199.460419][T23499] EXT4-fs (loop3): 1 truncate cleaned up [ 1199.490720][T23504] loop5: detected capacity change from 0 to 128 [ 1199.519923][T23509] loop8: detected capacity change from 0 to 512 [ 1199.526879][T23509] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1199.547712][T23509] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.17356: bg 0: block 5: invalid block bitmap [ 1199.562040][T23509] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1199.578803][T23509] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.17356: invalid indirect mapped block 3 (level 2) [ 1199.593006][T23509] EXT4-fs (loop8): 2 truncates cleaned up [ 1199.629041][T23515] netlink: 3 bytes leftover after parsing attributes in process `syz.8.17357'. [ 1199.638640][T23515] 1ªX¹¦À: renamed from 60ªX¹¦À [ 1199.645615][T23515] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1199.665807][ T29] kauditd_printk_skb: 1822 callbacks suppressed [ 1199.665819][ T29] audit: type=1326 audit(1200.649:252530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23477 comm="syz.7.17314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4580352005 code=0x7ffc0000 [ 1199.702480][T17437] EXT4-fs unmount: 41 callbacks suppressed [ 1199.702494][T17437] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1199.708389][ T29] audit: type=1326 audit(1200.679:252531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23477 comm="syz.7.17314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4580352005 code=0x7ffc0000 [ 1199.708428][ T29] audit: type=1326 audit(1200.679:252532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23477 comm="syz.7.17314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4580352005 code=0x7ffc0000 [ 1199.724373][T23517] syzkaller0: entered promiscuous mode [ 1199.740880][ T29] audit: type=1326 audit(1200.679:252533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23477 comm="syz.7.17314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4580352005 code=0x7ffc0000 [ 1199.764063][T23517] syzkaller0: entered allmulticast mode [ 1199.769492][ T29] audit: type=1326 audit(1200.679:252534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23477 comm="syz.7.17314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4580352005 code=0x7ffc0000 [ 1199.821634][ T29] audit: type=1326 audit(1200.679:252535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23477 comm="syz.7.17314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4580352005 code=0x7ffc0000 [ 1199.844856][ T29] audit: type=1326 audit(1200.679:252536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23477 comm="syz.7.17314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4580352005 code=0x7ffc0000 [ 1199.868126][ T29] audit: type=1326 audit(1200.679:252537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23477 comm="syz.7.17314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4580352005 code=0x7ffc0000 [ 1199.891501][ T29] audit: type=1326 audit(1200.679:252538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23477 comm="syz.7.17314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4580352005 code=0x7ffc0000 [ 1199.914735][ T29] audit: type=1326 audit(1200.689:252539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23477 comm="syz.7.17314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4580352005 code=0x7ffc0000 [ 1199.945539][T23523] tipc: Started in network mode [ 1199.950519][T23523] tipc: Node identity 063f8e881317, cluster identity 4711 [ 1199.957826][T23523] tipc: Enabled bearer , priority 0 [ 1199.986052][T23516] tipc: Resetting bearer [ 1199.995185][T23516] tipc: Disabling bearer [ 1200.099738][T23539] netlink: 12 bytes leftover after parsing attributes in process `syz.7.17363'. [ 1200.164928][T23543] loop7: detected capacity change from 0 to 128 [ 1200.318360][T23561] netlink: 8 bytes leftover after parsing attributes in process `syz.7.17367'. [ 1200.449033][T23574] veth2: entered allmulticast mode [ 1200.465175][T23577] loop7: detected capacity change from 0 to 128 [ 1200.543675][T23585] syzkaller0: entered promiscuous mode [ 1200.549179][T23585] syzkaller0: entered allmulticast mode [ 1200.596553][T23585] tipc: Started in network mode [ 1200.601606][T23585] tipc: Node identity 4610cebeccec, cluster identity 4711 [ 1200.608927][T23585] tipc: Enabled bearer , priority 0 [ 1200.649220][T23584] tipc: Resetting bearer [ 1200.664429][T23584] tipc: Disabling bearer [ 1200.676537][T23588] loop5: detected capacity change from 0 to 8192 [ 1200.717720][T23588] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1200.724251][T23588] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1200.732021][T23588] vhci_hcd vhci_hcd.0: Device attached [ 1200.774362][T23600] loop3: detected capacity change from 0 to 1764 [ 1200.840080][T23593] vhci_hcd: connection closed [ 1200.849569][T22959] vhci_hcd vhci_hcd.5: stop threads [ 1200.860103][T22959] vhci_hcd vhci_hcd.5: release socket [ 1200.865526][T22959] vhci_hcd vhci_hcd.5: disconnect device [ 1201.010089][T23626] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17379'. [ 1201.082676][T23628] loop6: detected capacity change from 0 to 512 [ 1201.096701][T23628] EXT4-fs: Ignoring removed nobh option [ 1201.110795][T23628] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e118, mo2=0002] [ 1201.119008][T23628] System zones: 1-12 [ 1201.123264][T23628] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1201.129681][T23634] vcan0 speed is unknown, defaulting to 1000 [ 1201.136168][T23628] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.17380: corrupted inode contents [ 1201.136981][T23634] vcan0 speed is unknown, defaulting to 1000 [ 1201.155271][T23628] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #15: comm syz.6.17380: mark_inode_dirty error [ 1201.155603][T23634] vcan0 speed is unknown, defaulting to 1000 [ 1201.181158][T23628] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.17380: corrupted inode contents [ 1201.188191][T23636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17382'. [ 1201.202360][T23628] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3000: inode #15: comm syz.6.17380: mark_inode_dirty error [ 1201.214820][T23628] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3003: inode #15: comm syz.6.17380: mark inode dirty (error -117) [ 1201.227711][T23628] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -117) [ 1201.237046][T23628] EXT4-fs (loop6): 1 orphan inode deleted [ 1201.243632][T23628] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1201.279022][T23634] infiniband syz1: set active [ 1201.283769][T23634] infiniband syz1: added vcan0 [ 1201.288677][T16108] vcan0 speed is unknown, defaulting to 1000 [ 1201.295537][T22901] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1201.317708][T23641] netlink: 3 bytes leftover after parsing attributes in process `syz.6.17383'. [ 1201.327075][T23641] 0ªX¹¦À: renamed from caif0 [ 1201.330351][T23634] RDS/IB: syz1: added [ 1201.336229][T23634] smc: adding ib device syz1 with port count 1 [ 1201.342644][T23641] 0ªX¹¦À: entered allmulticast mode [ 1201.342768][T23634] smc: ib device syz1 port 1 has no pnetid [ 1201.347921][T23641] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1201.380034][ T8586] vcan0 speed is unknown, defaulting to 1000 [ 1201.386285][T23634] vcan0 speed is unknown, defaulting to 1000 [ 1201.427943][T23649] netlink: 8 bytes leftover after parsing attributes in process `syz.6.17386'. [ 1201.468103][T23634] vcan0 speed is unknown, defaulting to 1000 [ 1201.470156][T23651] loop5: detected capacity change from 0 to 512 [ 1201.492824][T23653] loop6: detected capacity change from 0 to 1764 [ 1201.501144][T23651] EXT4-fs: Ignoring removed nobh option [ 1201.528250][T23634] vcan0 speed is unknown, defaulting to 1000 [ 1201.566202][T23634] vcan0 speed is unknown, defaulting to 1000 [ 1201.620038][T23634] vcan0 speed is unknown, defaulting to 1000 [ 1201.633309][T23651] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e118, mo2=0002] [ 1201.668629][T23651] System zones: 1-12 [ 1201.683722][T23634] vcan0 speed is unknown, defaulting to 1000 [ 1201.685583][T23651] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1201.722008][T23634] vcan0 speed is unknown, defaulting to 1000 [ 1201.730114][T23651] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.17385: corrupted inode contents [ 1201.762075][T23634] vcan0 speed is unknown, defaulting to 1000 [ 1201.788814][T23661] veth4: entered allmulticast mode [ 1201.794635][T23651] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #15: comm syz.5.17385: mark_inode_dirty error [ 1201.833607][T23651] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.17385: corrupted inode contents [ 1201.872387][T23651] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3000: inode #15: comm syz.5.17385: mark_inode_dirty error [ 1201.919252][T23651] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3003: inode #15: comm syz.5.17385: mark inode dirty (error -117) [ 1201.962554][T23651] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 1201.982773][T23651] EXT4-fs (loop5): 1 orphan inode deleted [ 1201.989195][T23651] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1202.004251][T23672] lo speed is unknown, defaulting to 1000 [ 1202.041894][T23672] lo speed is unknown, defaulting to 1000 [ 1202.062167][T23672] lo speed is unknown, defaulting to 1000 [ 1202.083753][T23672] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1202.131901][T23672] lo speed is unknown, defaulting to 1000 [ 1202.140848][T21803] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1202.150839][T23672] lo speed is unknown, defaulting to 1000 [ 1202.164402][T23672] lo speed is unknown, defaulting to 1000 [ 1202.171485][T23672] lo speed is unknown, defaulting to 1000 [ 1202.181896][T23672] lo speed is unknown, defaulting to 1000 [ 1202.188976][T23672] lo speed is unknown, defaulting to 1000 [ 1202.241649][T23678] EXT4-fs: Ignoring removed bh option [ 1202.247724][T23678] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1202.340077][T23678] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1202.371715][T23676] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1202.401275][T23676] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1202.425874][T23691] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 1202.434326][T23688] syzkaller0: entered promiscuous mode [ 1202.442488][T23688] syzkaller0: entered allmulticast mode [ 1202.453757][T23684] vcan0 speed is unknown, defaulting to 1000 [ 1202.482749][T23691] netlink: 12 bytes leftover after parsing attributes in process `syz.8.17397'. [ 1202.489251][T23684] lo speed is unknown, defaulting to 1000 [ 1202.565471][T20109] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1202.694669][T23716] vcan0 speed is unknown, defaulting to 1000 [ 1202.727906][T23716] lo speed is unknown, defaulting to 1000 [ 1202.740309][T23697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1202.753361][T23717] EXT4-fs: Ignoring removed nobh option [ 1202.759277][T23697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1202.780285][T23717] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e118, mo2=0002] [ 1202.810762][T23717] System zones: 1-12 [ 1202.820069][T23717] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1202.834165][T23717] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.17409: corrupted inode contents [ 1202.862338][T23717] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.17409: mark_inode_dirty error [ 1202.876612][T23717] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.17409: corrupted inode contents [ 1202.888916][T23717] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.17409: mark_inode_dirty error [ 1202.901264][T23717] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.17409: mark inode dirty (error -117) [ 1202.915645][T23717] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 1202.924967][T23717] EXT4-fs (loop3): 1 orphan inode deleted [ 1202.931243][T23717] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1202.965228][T17437] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1203.050947][T23737] netlink: 'syz.8.17417': attribute type 12 has an invalid length. [ 1203.071793][T23739] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.17418: inode has both inline data and extents flags [ 1203.086375][T23739] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.17418: couldn't read orphan inode 15 (err -117) [ 1203.099492][T23739] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1203.175549][T17437] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1203.228306][T23755] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.297513][T23759] vcan0 speed is unknown, defaulting to 1000 [ 1203.315260][T23755] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.336909][T23763] EXT4-fs: Ignoring removed nobh option [ 1203.352175][T23759] lo speed is unknown, defaulting to 1000 [ 1203.364198][T23763] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e118, mo2=0002] [ 1203.372440][T23763] System zones: 1-12 [ 1203.380314][T23763] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1203.400093][T23763] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.17425: corrupted inode contents [ 1203.428151][T23763] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #15: comm syz.5.17425: mark_inode_dirty error [ 1203.428946][T23755] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.442204][T23763] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.17425: corrupted inode contents [ 1203.461619][T23763] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3000: inode #15: comm syz.5.17425: mark_inode_dirty error [ 1203.474141][T23763] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3003: inode #15: comm syz.5.17425: mark inode dirty (error -117) [ 1203.490576][T23763] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 1203.503960][T23763] EXT4-fs (loop5): 1 orphan inode deleted [ 1203.510290][T23763] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1203.524979][T23755] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.554103][T21803] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1203.664507][T22085] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.683656][T22085] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.710732][T22085] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.729983][T23778] vcan0 speed is unknown, defaulting to 1000 [ 1203.775916][T23778] lo speed is unknown, defaulting to 1000 [ 1203.799970][T22085] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.907270][T23798] Alternate GPT is invalid, using primary GPT. [ 1203.913601][T23798] loop8: p2 p3 p7 [ 1204.014597][T23789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1204.020110][T23811] vcan0 speed is unknown, defaulting to 1000 [ 1204.039706][T23789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1204.062221][T23812] EXT4-fs: Ignoring removed nobh option [ 1204.071391][T23811] lo speed is unknown, defaulting to 1000 [ 1204.078930][T23812] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e118, mo2=0002] [ 1204.102914][T23812] System zones: 1-12 [ 1204.107083][T23812] EXT4-fs (loop8): orphan cleanup on readonly fs [ 1204.122464][T23812] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.17439: corrupted inode contents [ 1204.135314][T23812] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #15: comm syz.8.17439: mark_inode_dirty error [ 1204.154363][T23812] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #15: comm syz.8.17439: corrupted inode contents [ 1204.167271][T23812] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3000: inode #15: comm syz.8.17439: mark_inode_dirty error [ 1204.180186][T23812] EXT4-fs error (device loop8): ext4_xattr_delete_inode:3003: inode #15: comm syz.8.17439: mark inode dirty (error -117) [ 1204.193217][T23812] EXT4-fs warning (device loop8): ext4_evict_inode:273: xattr delete (err -117) [ 1204.202462][T23812] EXT4-fs (loop8): 1 orphan inode deleted [ 1204.209070][T23812] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1204.232391][T23818] __nla_validate_parse: 7 callbacks suppressed [ 1204.232406][T23818] netlink: 20 bytes leftover after parsing attributes in process `syz.7.17440'. [ 1204.271763][T20109] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1204.315679][T23827] netlink: 8 bytes leftover after parsing attributes in process `syz.8.17443'. [ 1204.357006][T23830] netlink: 'syz.3.17445': attribute type 12 has an invalid length. [ 1204.474148][T23843] vcan0 speed is unknown, defaulting to 1000 [ 1204.478239][T23846] set_capacity_and_notify: 8 callbacks suppressed [ 1204.478299][T23846] loop6: detected capacity change from 0 to 512 [ 1204.513239][T23846] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1204.517490][T23843] lo speed is unknown, defaulting to 1000 [ 1204.525678][T23848] loop8: detected capacity change from 0 to 512 [ 1204.532222][T23848] journal_path: Non-blockdev passed as './bus' [ 1204.538422][T23848] EXT4-fs: error: could not find journal device path [ 1204.545513][T23846] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.17449: bg 0: block 5: invalid block bitmap [ 1204.583748][T23846] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1204.601494][T23846] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.17449: invalid indirect mapped block 3 (level 2) [ 1204.616286][T23846] EXT4-fs (loop6): 2 truncates cleaned up [ 1204.622613][T23846] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1204.649257][T22901] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1204.672927][ T29] kauditd_printk_skb: 931 callbacks suppressed [ 1204.672942][ T29] audit: type=1326 audit(1205.659:253471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23824 comm="syz.7.17444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4580352005 code=0x7ffc0000 [ 1204.703350][ T29] audit: type=1326 audit(1205.689:253472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23824 comm="syz.7.17444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4580352005 code=0x7ffc0000 [ 1204.703896][T23854] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.726886][ T29] audit: type=1326 audit(1205.709:253473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23824 comm="syz.7.17444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4580352005 code=0x7ffc0000 [ 1204.763848][ T29] audit: type=1326 audit(1205.719:253474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23824 comm="syz.7.17444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4580352005 code=0x7ffc0000 [ 1204.787109][ T29] audit: type=1326 audit(1205.719:253475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23824 comm="syz.7.17444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4580352005 code=0x7ffc0000 [ 1204.810623][ T29] audit: type=1326 audit(1205.719:253476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23824 comm="syz.7.17444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4580352005 code=0x7ffc0000 [ 1204.834185][ T29] audit: type=1326 audit(1205.719:253477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23824 comm="syz.7.17444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4580352005 code=0x7ffc0000 [ 1204.857516][ T29] audit: type=1326 audit(1205.719:253478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23824 comm="syz.7.17444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4580352005 code=0x7ffc0000 [ 1204.881097][ T29] audit: type=1326 audit(1205.719:253479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23824 comm="syz.7.17444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4580352005 code=0x7ffc0000 [ 1204.904440][ T29] audit: type=1326 audit(1205.719:253480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23824 comm="syz.7.17444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4580352005 code=0x7ffc0000 [ 1204.928783][T23859] FAULT_INJECTION: forcing a failure. [ 1204.928783][T23859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1204.942105][T23859] CPU: 1 UID: 0 PID: 23859 Comm: syz.3.17455 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1204.942213][T23859] Tainted: [W]=WARN [ 1204.942220][T23859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1204.942233][T23859] Call Trace: [ 1204.942239][T23859] [ 1204.942247][T23859] __dump_stack+0x1d/0x30 [ 1204.942280][T23859] dump_stack_lvl+0x95/0xd0 [ 1204.942301][T23859] dump_stack+0x15/0x1b [ 1204.942335][T23859] should_fail_ex+0x265/0x280 [ 1204.942359][T23859] should_fail+0xb/0x20 [ 1204.942390][T23859] should_fail_usercopy+0x1a/0x20 [ 1204.942413][T23859] _copy_from_user+0x1c/0xb0 [ 1204.942439][T23859] ___sys_sendmsg+0xc1/0x1d0 [ 1204.942574][T23859] __x64_sys_sendmsg+0xd4/0x160 [ 1204.942660][T23859] x64_sys_call+0x17ba/0x3000 [ 1204.942684][T23859] do_syscall_64+0xca/0x2b0 [ 1204.942768][T23859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.942792][T23859] RIP: 0033:0x7ff534eff749 [ 1204.942806][T23859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1204.942821][T23859] RSP: 002b:00007ff53395f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1204.942861][T23859] RAX: ffffffffffffffda RBX: 00007ff535155fa0 RCX: 00007ff534eff749 [ 1204.942874][T23859] RDX: 0000000000040000 RSI: 0000200000000100 RDI: 0000000000000005 [ 1204.942888][T23859] RBP: 00007ff53395f090 R08: 0000000000000000 R09: 0000000000000000 [ 1204.942919][T23859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1204.942938][T23859] R13: 00007ff535156038 R14: 00007ff535155fa0 R15: 00007ffdce711078 [ 1204.942970][T23859] [ 1204.957044][T23861] vcan0 speed is unknown, defaulting to 1000 [ 1205.024940][T23864] loop5: detected capacity change from 0 to 512 [ 1205.072055][T23854] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.079620][T23864] EXT4-fs: Ignoring removed nobh option [ 1205.143222][T23861] lo speed is unknown, defaulting to 1000 [ 1205.177328][T23864] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e118, mo2=0002] [ 1205.179962][T23866] netlink: 'syz.3.17457': attribute type 12 has an invalid length. [ 1205.190409][T23864] System zones: 1-12 [ 1205.198816][T23854] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.210274][T23864] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1205.217697][T23864] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.17454: corrupted inode contents [ 1205.230107][T23864] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #15: comm syz.5.17454: mark_inode_dirty error [ 1205.237328][T23869] netlink: 40 bytes leftover after parsing attributes in process `syz.7.17458'. [ 1205.241991][T23864] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #15: comm syz.5.17454: corrupted inode contents [ 1205.251744][T23854] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1205.273198][T23864] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3000: inode #15: comm syz.5.17454: mark_inode_dirty error [ 1205.286083][T23864] EXT4-fs error (device loop5): ext4_xattr_delete_inode:3003: inode #15: comm syz.5.17454: mark inode dirty (error -117) [ 1205.303170][T23864] EXT4-fs warning (device loop5): ext4_evict_inode:273: xattr delete (err -117) [ 1205.312918][T23864] EXT4-fs (loop5): 1 orphan inode deleted [ 1205.320068][T23864] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1205.344689][T15400] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.359832][T15400] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.387757][T15400] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.418824][T15400] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.467562][T21803] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1205.476794][T23873] loop6: detected capacity change from 0 to 1024 [ 1205.483766][T23873] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 1205.524410][T23874] vcan0 speed is unknown, defaulting to 1000 [ 1205.583745][T23874] lo speed is unknown, defaulting to 1000 [ 1205.668976][T23894] loop6: detected capacity change from 0 to 1024 [ 1205.687961][T23894] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1205.746979][T22901] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1205.767447][T23908] loop6: detected capacity change from 0 to 512 [ 1205.776651][T23908] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.17467: inode has both inline data and extents flags [ 1205.790697][T23908] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.17467: couldn't read orphan inode 15 (err -117) [ 1205.801265][T23911] loop3: detected capacity change from 0 to 1764 [ 1205.803983][T23908] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1205.834099][T22901] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1205.851970][T23913] ALSA: seq fatal error: cannot create timer (-22) [ 1205.872708][T23915] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17470'. [ 1205.901627][T23917] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17471'. [ 1205.934211][T23920] vcan0 speed is unknown, defaulting to 1000 [ 1205.967686][T23920] lo speed is unknown, defaulting to 1000 [ 1206.008403][T23920] loop3: detected capacity change from 0 to 512 [ 1206.015510][T23920] EXT4-fs: Ignoring removed nobh option [ 1206.023212][T23920] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e118, mo2=0002] [ 1206.031600][T23920] System zones: 1-12 [ 1206.036513][T23920] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1206.044246][T23920] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.17472: corrupted inode contents [ 1206.056681][T23920] EXT4-fs error (device loop3): ext4_dirty_inode:6502: inode #15: comm syz.3.17472: mark_inode_dirty error [ 1206.068679][T23920] EXT4-fs error (device loop3): ext4_do_update_inode:5617: inode #15: comm syz.3.17472: corrupted inode contents [ 1206.081187][T23920] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3000: inode #15: comm syz.3.17472: mark_inode_dirty error [ 1206.088832][T23927] loop6: detected capacity change from 0 to 512 [ 1206.094210][T23920] EXT4-fs error (device loop3): ext4_xattr_delete_inode:3003: inode #15: comm syz.3.17472: mark inode dirty (error -117) [ 1206.100346][T23927] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1206.113474][T23920] EXT4-fs warning (device loop3): ext4_evict_inode:273: xattr delete (err -117) [ 1206.123918][T23927] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.17474: bg 0: block 5: invalid block bitmap [ 1206.128053][T23920] EXT4-fs (loop3): 1 orphan inode deleted [ 1206.141592][T23927] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1206.147156][T23920] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1206.156425][T23927] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.17474: invalid indirect mapped block 3 (level 2) [ 1206.180879][T23927] EXT4-fs (loop6): 2 truncates cleaned up [ 1206.187160][T23927] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1206.200973][T17437] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1206.245648][T22901] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1206.417845][T23945] loop7: detected capacity change from 0 to 1764 [ 1206.452445][T23949] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1206.471089][T23949] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.17482: bg 0: block 5: invalid block bitmap [ 1206.483955][T23949] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1206.499265][T23949] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.17482: invalid indirect mapped block 3 (level 2) [ 1206.513216][ T8586] usb usb8-port7: attempt power cycle [ 1206.521141][T23957] syz1: rxe_newlink: already configured on vcan0 [ 1206.534642][T23949] EXT4-fs (loop5): 2 truncates cleaned up [ 1206.543719][T23949] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1206.571635][T23949] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1206.571842][T23960] vcan0 speed is unknown, defaulting to 1000 [ 1206.587702][T23962] netlink: 'syz.7.17486': attribute type 12 has an invalid length. [ 1206.608086][T23963] EXT4-fs: Ignoring removed nobh option [ 1206.637016][T23963] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e118, mo2=0002] [ 1206.646939][T23960] lo speed is unknown, defaulting to 1000 [ 1206.661499][T23963] System zones: 1-12 [ 1206.675834][T23968] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1206.678388][T23963] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1206.695598][T23963] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.17485: corrupted inode contents [ 1206.699601][T23968] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.17487: bg 0: block 5: invalid block bitmap [ 1206.720414][T23963] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #15: comm syz.6.17485: mark_inode_dirty error [ 1206.733312][T23963] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #15: comm syz.6.17485: corrupted inode contents [ 1206.745573][T23968] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1206.756385][T23968] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.17487: invalid indirect mapped block 3 (level 2) [ 1206.757329][T23973] netlink: 3 bytes leftover after parsing attributes in process `syz.5.17490'. [ 1206.779239][T23963] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3000: inode #15: comm syz.6.17485: mark_inode_dirty error [ 1206.791411][T23968] EXT4-fs (loop7): 2 truncates cleaned up [ 1206.798129][T23968] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1206.802961][T23973] 0ªX¹¦À: renamed from 61ªX¹¦À [ 1206.810909][T23963] EXT4-fs error (device loop6): ext4_xattr_delete_inode:3003: inode #15: comm syz.6.17485: mark inode dirty (error -117) [ 1206.828980][T23963] EXT4-fs warning (device loop6): ext4_evict_inode:273: xattr delete (err -117) [ 1206.840172][T23973] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1206.846955][T23963] EXT4-fs (loop6): 1 orphan inode deleted [ 1206.862697][T23330] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1206.876802][T23963] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1206.914957][T23987] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.17493: inode has both inline data and extents flags [ 1206.939057][T23987] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.17493: couldn't read orphan inode 15 (err -117) [ 1206.951724][T23987] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1206.981830][T22901] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1207.008698][T21803] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1207.038658][T24005] netlink: 72 bytes leftover after parsing attributes in process `syz.5.17497'. [ 1207.066951][T24007] netlink: 'syz.7.17498': attribute type 12 has an invalid length. [ 1207.102162][T24009] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1207.121934][T24009] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.17499: bg 0: block 5: invalid block bitmap [ 1207.163941][T24009] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1207.217524][T24009] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.17499: invalid indirect mapped block 3 (level 2) [ 1207.236256][T24015] netlink: 40 bytes leftover after parsing attributes in process `syz.5.17501'. [ 1207.253142][T24009] EXT4-fs (loop3): 2 truncates cleaned up [ 1207.259409][T24009] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1207.314794][T24009] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1207.414850][T24033] veth12: entered allmulticast mode [ 1207.501470][T24035] netlink: 20 bytes leftover after parsing attributes in process `syz.5.17511'. [ 1207.764447][T24043] syzkaller0: entered promiscuous mode [ 1207.770033][T24043] syzkaller0: entered allmulticast mode [ 1207.789857][T24043] tipc: Enabled bearer , priority 0 [ 1207.809985][T24042] tipc: Resetting bearer [ 1207.820077][T24042] tipc: Disabling bearer [ 1207.958176][T24050] netlink: 20 bytes leftover after parsing attributes in process `syz.3.17518'. [ 1208.066193][T24065] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 1208.181432][T24071] bio_check_eod: 230 callbacks suppressed [ 1208.181448][T24071] syz.3.17523: attempt to access beyond end of device [ 1208.181448][T24071] loop3: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 1208.201692][T24075] syzkaller0: entered promiscuous mode [ 1208.207283][T24075] syzkaller0: entered allmulticast mode [ 1208.209985][T24071] syz.3.17523: attempt to access beyond end of device [ 1208.209985][T24071] loop3: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 1208.240489][T24075] tipc: Enabled bearer , priority 0 [ 1208.255882][T24071] syz.3.17523: attempt to access beyond end of device [ 1208.255882][T24071] loop3: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 1208.269818][T24071] buffer_io_error: 146 callbacks suppressed [ 1208.269859][T24071] Buffer I/O error on dev loop3, logical block 75, lost async page write [ 1208.289630][T24074] tipc: Resetting bearer [ 1208.292415][T24078] ALSA: seq fatal error: cannot create timer (-22) [ 1208.298666][T24071] syz.3.17523: attempt to access beyond end of device [ 1208.298666][T24071] loop3: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 1208.315855][T24071] Buffer I/O error on dev loop3, logical block 76, lost async page write [ 1208.326768][T24074] tipc: Disabling bearer [ 1208.333849][T24071] syz.3.17523: attempt to access beyond end of device [ 1208.333849][T24071] loop3: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 1208.348910][T24071] syz.3.17523: attempt to access beyond end of device [ 1208.348910][T24071] loop3: rw=8390657, sector=174, nr_sectors = 2 limit=128 [ 1208.363007][T24071] Buffer I/O error on dev loop3, logical block 87, lost async page write [ 1208.363291][ T8586] usb usb8-port7: unable to enumerate USB device [ 1208.372457][T24071] syz.3.17523: attempt to access beyond end of device [ 1208.372457][T24071] loop3: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 1208.391876][T24071] Buffer I/O error on dev loop3, logical block 88, lost async page write [ 1208.400958][T24071] syz.3.17523: attempt to access beyond end of device [ 1208.400958][T24071] loop3: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 1208.414777][T24071] syz.3.17523: attempt to access beyond end of device [ 1208.414777][T24071] loop3: rw=8390657, sector=182, nr_sectors = 2 limit=128 [ 1208.428609][T24071] Buffer I/O error on dev loop3, logical block 91, lost async page write [ 1208.438062][T24071] syz.3.17523: attempt to access beyond end of device [ 1208.438062][T24071] loop3: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 1208.451862][T24071] Buffer I/O error on dev loop3, logical block 92, lost async page write [ 1208.461892][T24071] Buffer I/O error on dev loop3, logical block 103, lost async page write [ 1208.471071][T24071] Buffer I/O error on dev loop3, logical block 104, lost async page write [ 1208.480328][T24084] FAULT_INJECTION: forcing a failure. [ 1208.480328][T24084] name failslab, interval 1, probability 0, space 0, times 0 [ 1208.492966][T24084] CPU: 0 UID: 0 PID: 24084 Comm: syz.8.17529 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1208.493056][T24084] Tainted: [W]=WARN [ 1208.493062][T24084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1208.493078][T24084] Call Trace: [ 1208.493084][T24084] [ 1208.493091][T24084] __dump_stack+0x1d/0x30 [ 1208.493111][T24084] dump_stack_lvl+0x95/0xd0 [ 1208.493177][T24084] dump_stack+0x15/0x1b [ 1208.493193][T24084] should_fail_ex+0x265/0x280 [ 1208.493212][T24084] should_failslab+0x8c/0xb0 [ 1208.493264][T24084] __kmalloc_cache_noprof+0x65/0x4c0 [ 1208.493283][T24084] ? __se_sys_memfd_create+0x1d6/0x6b0 [ 1208.493331][T24084] ? mutex_unlock+0x4f/0x90 [ 1208.493352][T24084] __se_sys_memfd_create+0x1d6/0x6b0 [ 1208.493378][T24084] __x64_sys_memfd_create+0x31/0x40 [ 1208.493402][T24084] x64_sys_call+0x28cb/0x3000 [ 1208.493499][T24084] do_syscall_64+0xca/0x2b0 [ 1208.493528][T24084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.493545][T24084] RIP: 0033:0x7f499d6cf749 [ 1208.493559][T24084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1208.493573][T24084] RSP: 002b:00007f499c136e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 1208.493664][T24084] RAX: ffffffffffffffda RBX: 00000000000004eb RCX: 00007f499d6cf749 [ 1208.493675][T24084] RDX: 00007f499c136ef0 RSI: 0000000000000000 RDI: 00007f499d754960 [ 1208.493685][T24084] RBP: 0000200000000540 R08: 00007f499c136bb7 R09: 00007f499c136e40 [ 1208.493696][T24084] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000500 [ 1208.493707][T24084] R13: 00007f499c136ef0 R14: 00007f499c136eb0 R15: 0000200000000100 [ 1208.493722][T24084] [ 1208.497131][T24082] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.17530: Failed to acquire dquot type 0 [ 1208.508155][T24087] 1ªX¹¦À: renamed from 60ªX¹¦À [ 1208.509538][T24082] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, [ 1208.544180][T24071] Buffer I/O error on dev loop3, logical block 107, lost async page write [ 1208.546713][T24082] inode 13: [ 1208.551457][T24071] Buffer I/O error on dev loop3, logical block 108, lost async page write [ 1208.556805][T24082] block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1208.557618][T24082] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #13: comm syz.7.17530: corrupted inode contents [ 1208.626373][T24082] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #13: comm syz.7.17530: mark_inode_dirty error [ 1208.745360][T24082] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #13: comm syz.7.17530: corrupted inode contents [ 1208.757646][T24087] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1208.780555][T24082] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #13: comm syz.7.17530: mark_inode_dirty error [ 1208.808002][T24082] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #13: comm syz.7.17530: corrupted inode contents [ 1208.829881][T24082] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 1208.840913][T24082] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #13: comm syz.7.17530: corrupted inode contents [ 1208.853286][T24082] EXT4-fs error (device loop7): ext4_truncate:4635: inode #13: comm syz.7.17530: mark_inode_dirty error [ 1208.865713][T24113] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1208.874305][T24082] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 1208.884299][T24113] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.17537: bg 0: block 5: invalid block bitmap [ 1208.903141][T24113] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1208.916583][T24082] EXT4-fs (loop7): 1 truncate cleaned up [ 1208.923176][T24082] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1208.940013][T24113] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.17537: invalid indirect mapped block 3 (level 2) [ 1208.973031][T24113] EXT4-fs (loop6): 2 truncates cleaned up [ 1208.983478][T23330] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1209.001584][T24113] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1209.025189][T22901] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1209.161090][T24141] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 1209.167651][T24141] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1209.175562][T24141] vhci_hcd vhci_hcd.0: Device attached [ 1209.184967][T24144] vhci_hcd: connection closed [ 1209.185159][ T42] vhci_hcd vhci_hcd.5: stop threads [ 1209.195102][ T42] vhci_hcd vhci_hcd.5: release socket [ 1209.200477][ T42] vhci_hcd vhci_hcd.5: disconnect device [ 1209.288102][T24156] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 1209.354894][T24168] veth2: entered allmulticast mode [ 1209.369429][T24171] __nla_validate_parse: 6 callbacks suppressed [ 1209.369442][T24171] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17551'. [ 1209.389325][T24171] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17551'. [ 1209.436683][T24173] netlink: 'syz.3.17552': attribute type 12 has an invalid length. [ 1209.683552][ T29] kauditd_printk_skb: 1964 callbacks suppressed [ 1209.683568][ T29] audit: type=1326 audit(1210.669:255443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24117 comm="syz.8.17538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f499d702005 code=0x7ffc0000 [ 1209.738825][ T29] audit: type=1326 audit(1210.699:255444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24117 comm="syz.8.17538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f499d702005 code=0x7ffc0000 [ 1209.762110][ T29] audit: type=1326 audit(1210.699:255445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24117 comm="syz.8.17538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f499d702005 code=0x7ffc0000 [ 1209.785491][ T29] audit: type=1326 audit(1210.699:255446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24117 comm="syz.8.17538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f499d702005 code=0x7ffc0000 [ 1209.808859][ T29] audit: type=1326 audit(1210.699:255447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24117 comm="syz.8.17538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f499d702005 code=0x7ffc0000 [ 1209.832526][ T29] audit: type=1326 audit(1210.699:255448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24117 comm="syz.8.17538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f499d702005 code=0x7ffc0000 [ 1209.856066][ T29] audit: type=1326 audit(1210.699:255449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24117 comm="syz.8.17538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f499d6cf749 code=0x7ffc0000 [ 1209.867644][T24190] netlink: 3 bytes leftover after parsing attributes in process `syz.5.17559'. [ 1209.879564][ T29] audit: type=1326 audit(1210.709:255450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24117 comm="syz.8.17538" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f499d6cf749 code=0x7ffc0000 [ 1209.888556][T24190] 0ªX¹¦À: renamed from 61ªX¹¦À [ 1209.919196][T24190] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1209.940752][ T29] audit: type=1400 audit(1210.919:255451): avc: denied { ioctl } for pid=24185 comm="syz.7.17558" path="socket:[217340]" dev="sockfs" ino=217340 ioctlcmd=0x891d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 1209.978083][T24194] syzkaller0: entered promiscuous mode [ 1209.983612][T24194] syzkaller0: entered allmulticast mode [ 1209.988227][T24196] set_capacity_and_notify: 16 callbacks suppressed [ 1209.988243][T24196] loop5: detected capacity change from 0 to 512 [ 1210.006578][T24194] tipc: Started in network mode [ 1210.011731][T24194] tipc: Node identity 26e8fc8b16fa, cluster identity 4711 [ 1210.019291][T24194] tipc: Enabled bearer , priority 0 [ 1210.031809][T24193] tipc: Resetting bearer [ 1210.043150][T24193] tipc: Disabling bearer [ 1210.064351][T24198] vcan0 speed is unknown, defaulting to 1000 [ 1210.115490][T24198] lo speed is unknown, defaulting to 1000 [ 1210.166128][T24196] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.17562: inode has both inline data and extents flags [ 1210.179701][T24196] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.17562: couldn't read orphan inode 15 (err -117) [ 1210.183176][T24202] netlink: 16 bytes leftover after parsing attributes in process `syz.8.17563'. [ 1210.192409][T24196] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1210.225881][T24202] netlink: 12 bytes leftover after parsing attributes in process `syz.8.17563'. [ 1210.252203][T21803] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1210.284751][T24208] netlink: 72 bytes leftover after parsing attributes in process `syz.5.17564'. [ 1210.315108][T24207] netlink: 20 bytes leftover after parsing attributes in process `syz.8.17566'. [ 1210.343408][T24216] rdma_rxe: rxe_newlink: failed to add vcan0 [ 1210.364178][T24208] loop5: detected capacity change from 0 to 8192 [ 1210.409563][T24221] vcan0 speed is unknown, defaulting to 1000 [ 1210.423248][T24219] loop3: detected capacity change from 0 to 8192 [ 1210.434989][T24219] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1210.441609][T24219] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1210.449321][T24219] vhci_hcd vhci_hcd.0: Device attached [ 1210.457826][T24221] lo speed is unknown, defaulting to 1000 [ 1210.485279][T24227] vhci_hcd: connection closed [ 1210.485484][T22085] vhci_hcd vhci_hcd.3: stop threads [ 1210.495711][T22085] vhci_hcd vhci_hcd.3: release socket [ 1210.501131][T22085] vhci_hcd vhci_hcd.3: disconnect device [ 1210.573748][T24235] netlink: 'syz.7.17573': attribute type 12 has an invalid length. [ 1210.591073][ T29] audit: type=1326 audit(1211.569:255452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24236 comm="syz.6.17574" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca862f749 code=0x7ffc0000 [ 1210.648363][T24240] loop7: detected capacity change from 0 to 512 [ 1210.658790][T24240] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.17575: inode has both inline data and extents flags [ 1210.673438][T24240] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.17575: couldn't read orphan inode 15 (err -117) [ 1210.687999][T24240] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1210.719635][T23330] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1210.812978][T24249] netlink: 16 bytes leftover after parsing attributes in process `syz.7.17578'. [ 1210.839756][T24249] netlink: 12 bytes leftover after parsing attributes in process `syz.7.17578'. [ 1210.889908][T24252] rdma_rxe: rxe_newlink: failed to add vcan0 [ 1211.027435][T24259] loop7: detected capacity change from 0 to 512 [ 1211.041281][T24259] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1211.058639][T24259] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.17582: bg 0: block 5: invalid block bitmap [ 1211.099065][T24259] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1211.130237][T24259] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.17582: invalid indirect mapped block 3 (level 2) [ 1211.151815][T24262] netlink: 'syz.3.17583': attribute type 12 has an invalid length. [ 1211.168340][T24259] EXT4-fs (loop7): 2 truncates cleaned up [ 1211.188584][T24259] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1211.219361][T24268] netlink: 40 bytes leftover after parsing attributes in process `syz.3.17585'. [ 1211.240941][T23330] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1211.288672][T24271] loop7: detected capacity change from 0 to 512 [ 1211.311268][T24271] EXT4-fs error (device loop7): ext4_orphan_get:1391: inode #15: comm syz.7.17586: inode has both inline data and extents flags [ 1211.330386][T24271] EXT4-fs error (device loop7): ext4_orphan_get:1396: comm syz.7.17586: couldn't read orphan inode 15 (err -117) [ 1211.336111][T24277] 0ªX¹¦À: renamed from caif0 [ 1211.349053][T24271] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1211.379063][T24277] 0ªX¹¦À: entered allmulticast mode [ 1211.384328][T24277] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1211.400830][T23330] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1211.494376][T24290] loop3: detected capacity change from 0 to 512 [ 1211.519886][T24290] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1211.530623][T24290] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.17590: bg 0: block 5: invalid block bitmap [ 1211.556257][T24297] loop6: detected capacity change from 0 to 1024 [ 1211.562740][T24290] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1211.571973][T24290] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.17590: invalid indirect mapped block 3 (level 2) [ 1211.572959][T24297] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.17593: Failed to acquire dquot type 0 [ 1211.593808][T24290] EXT4-fs (loop3): 2 truncates cleaned up [ 1211.619143][T24297] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1211.644323][T24290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1211.653656][T24297] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #13: comm syz.6.17593: corrupted inode contents [ 1211.681133][T24297] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #13: comm syz.6.17593: mark_inode_dirty error [ 1211.687265][T24306] loop8: detected capacity change from 0 to 128 [ 1211.699299][T24297] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #13: comm syz.6.17593: corrupted inode contents [ 1211.704273][T24310] loop5: detected capacity change from 0 to 512 [ 1211.712300][T24290] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1211.727333][T24297] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #13: comm syz.6.17593: mark_inode_dirty error [ 1211.739353][T24297] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #13: comm syz.6.17593: corrupted inode contents [ 1211.752234][T24310] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1211.761064][T24310] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.17596: bg 0: block 5: invalid block bitmap [ 1211.773945][T24297] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 1211.783279][T24297] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #13: comm syz.6.17593: corrupted inode contents [ 1211.795811][T24310] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1211.820407][T24317] veth4: entered allmulticast mode [ 1211.826601][T24310] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.17596: invalid indirect mapped block 3 (level 2) [ 1211.840649][T24310] EXT4-fs (loop5): 2 truncates cleaned up [ 1211.846495][T24297] EXT4-fs error (device loop6): ext4_truncate:4635: inode #13: comm syz.6.17593: mark_inode_dirty error [ 1211.863431][T24310] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1211.868086][T24297] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 1211.884758][T24319] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.17598: inode has both inline data and extents flags [ 1211.903995][T24297] EXT4-fs (loop6): 1 truncate cleaned up [ 1211.908916][T24319] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.17598: couldn't read orphan inode 15 (err -117) [ 1211.920316][T24297] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1211.922634][T21803] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1211.944141][T24319] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1211.982133][T17437] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1211.999702][T22901] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1212.022384][T24328] 1ªX¹¦À: renamed from 60ªX¹¦À [ 1212.041745][T24328] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1212.345403][T24356] netlink: 'syz.6.17611': attribute type 12 has an invalid length. [ 1212.390429][T24360] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.17613: inode has both inline data and extents flags [ 1212.404452][T24360] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.17613: couldn't read orphan inode 15 (err -117) [ 1212.417568][T24360] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1212.452758][T22901] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1212.643151][ T36] usb usb8-port7: attempt power cycle [ 1212.746540][T24371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1212.755630][T24371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1212.856079][T24375] veth6: entered allmulticast mode [ 1212.946022][T24384] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1212.994630][T24384] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.031618][T24390] netlink: 'syz.3.17624': attribute type 12 has an invalid length. [ 1213.054938][T24384] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.086241][T24394] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #15: comm syz.3.17626: inode has both inline data and extents flags [ 1213.100414][T24394] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.17626: couldn't read orphan inode 15 (err -117) [ 1213.113288][T24394] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1213.114531][T24384] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.136989][T17437] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1213.147424][T24397] netlink: 'syz.8.17627': attribute type 12 has an invalid length. [ 1213.172842][T24401] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1213.180985][T24401] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.17629: bg 0: block 5: invalid block bitmap [ 1213.193924][T24401] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1213.203900][T24401] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.17629: invalid indirect mapped block 3 (level 2) [ 1213.218023][T24401] EXT4-fs (loop8): 2 truncates cleaned up [ 1213.224978][T24401] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1213.230280][ T42] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.242199][T24401] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1213.256626][ T42] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.271012][ T42] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.279645][ T42] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1213.367849][T24417] netlink: 'syz.5.17636': attribute type 12 has an invalid length. [ 1213.455098][T24424] veth2: entered allmulticast mode [ 1213.478539][T24426] syzkaller0: entered promiscuous mode [ 1213.484127][T24426] syzkaller0: entered allmulticast mode [ 1213.505075][T24426] tipc: Started in network mode [ 1213.510146][T24426] tipc: Node identity 62a4676cfe2f, cluster identity 4711 [ 1213.517470][T24426] tipc: Enabled bearer , priority 0 [ 1213.540836][T24425] tipc: Resetting bearer [ 1213.578538][T24425] tipc: Disabling bearer [ 1213.743021][T24431] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.17640: Failed to acquire dquot type 0 [ 1213.763479][T24431] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1213.791572][T24431] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #13: comm syz.7.17640: corrupted inode contents [ 1213.839687][T24431] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #13: comm syz.7.17640: mark_inode_dirty error [ 1213.869474][T24431] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #13: comm syz.7.17640: corrupted inode contents [ 1213.882435][T24431] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #13: comm syz.7.17640: mark_inode_dirty error [ 1213.900982][T24431] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #13: comm syz.7.17640: corrupted inode contents [ 1213.914665][T24431] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 1213.924532][T24431] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #13: comm syz.7.17640: corrupted inode contents [ 1213.938965][T24431] EXT4-fs error (device loop7): ext4_truncate:4635: inode #13: comm syz.7.17640: mark_inode_dirty error [ 1213.952034][T24431] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 1213.962162][T24431] EXT4-fs (loop7): 1 truncate cleaned up [ 1213.970083][T24431] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1214.027207][T24446] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1214.041476][T24446] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.17645: bg 0: block 5: invalid block bitmap [ 1214.062412][T24446] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1214.185371][T24446] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.17645: invalid indirect mapped block 3 (level 2) [ 1214.240576][T24450] vcan0 speed is unknown, defaulting to 1000 [ 1214.274398][T24450] lo speed is unknown, defaulting to 1000 [ 1214.297934][T24446] EXT4-fs (loop3): 2 truncates cleaned up [ 1214.360606][T24457] netlink: 'syz.8.17648': attribute type 12 has an invalid length. [ 1214.502998][ T36] usb usb8-port7: unable to enumerate USB device [ 1214.693001][ T29] kauditd_printk_skb: 2078 callbacks suppressed [ 1214.693017][ T29] audit: type=1326 audit(1215.669:257527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24466 comm="syz.6.17653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=252 compat=0 ip=0x7f6ca862f749 code=0x7ffc0000 [ 1214.735691][ T29] audit: type=1326 audit(1215.709:257528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24466 comm="syz.6.17653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca862f749 code=0x7ffc0000 [ 1214.759047][ T29] audit: type=1326 audit(1215.709:257529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24466 comm="syz.6.17653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca862f749 code=0x7ffc0000 [ 1214.771464][T24472] netlink: 'syz.8.17654': attribute type 12 has an invalid length. [ 1214.782439][ T29] audit: type=1326 audit(1215.709:257530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24466 comm="syz.6.17653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca862f749 code=0x7ffc0000 [ 1214.782466][ T29] audit: type=1326 audit(1215.709:257531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24466 comm="syz.6.17653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f6ca862f749 code=0x7ffc0000 [ 1214.782486][ T29] audit: type=1326 audit(1215.709:257532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24466 comm="syz.6.17653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca862f749 code=0x7ffc0000 [ 1214.860240][ T29] audit: type=1326 audit(1215.709:257533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24466 comm="syz.6.17653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca862f749 code=0x7ffc0000 [ 1214.883515][ T29] audit: type=1326 audit(1215.709:257534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24466 comm="syz.6.17653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca862f749 code=0x7ffc0000 [ 1214.906791][ T29] audit: type=1326 audit(1215.709:257535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24466 comm="syz.6.17653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f6ca862f749 code=0x7ffc0000 [ 1214.930017][ T29] audit: type=1326 audit(1215.709:257536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24466 comm="syz.6.17653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ca862f749 code=0x7ffc0000 [ 1215.018823][T24478] rdma_rxe: rxe_newlink: failed to add vcan0 [ 1215.026507][T24477] set_capacity_and_notify: 8 callbacks suppressed [ 1215.026521][T24477] loop7: detected capacity change from 0 to 512 [ 1215.061902][T24477] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1215.089598][T24477] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.17657: bg 0: block 5: invalid block bitmap [ 1215.107714][T24482] loop8: detected capacity change from 0 to 512 [ 1215.117234][T24482] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.17658: inode has both inline data and extents flags [ 1215.131314][T24477] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1215.141251][T24477] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.17657: invalid indirect mapped block 3 (level 2) [ 1215.154955][T24482] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.17658: couldn't read orphan inode 15 (err -117) [ 1215.172723][T24477] EXT4-fs (loop7): 2 truncates cleaned up [ 1215.208029][T24485] loop8: detected capacity change from 0 to 1764 [ 1215.284309][T24491] loop7: detected capacity change from 0 to 1024 [ 1215.293539][T24491] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.17662: Failed to acquire dquot type 0 [ 1215.306318][T24491] EXT4-fs error (device loop7): mb_free_blocks:2037: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1215.313988][T24494] syzkaller0: entered promiscuous mode [ 1215.326313][T24494] syzkaller0: entered allmulticast mode [ 1215.339390][T24491] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #13: comm syz.7.17662: corrupted inode contents [ 1215.363344][T24491] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #13: comm syz.7.17662: mark_inode_dirty error [ 1215.375613][T24494] tipc: Enabled bearer , priority 0 [ 1215.392571][T24493] tipc: Resetting bearer [ 1215.405155][T24493] tipc: Disabling bearer [ 1215.414331][T24491] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #13: comm syz.7.17662: corrupted inode contents [ 1215.434076][T24491] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #13: comm syz.7.17662: mark_inode_dirty error [ 1215.445819][T24491] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #13: comm syz.7.17662: corrupted inode contents [ 1215.499214][T24491] EXT4-fs error (device loop7) in ext4_orphan_del:303: Corrupt filesystem [ 1215.518412][T24491] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #13: comm syz.7.17662: corrupted inode contents [ 1215.530963][T24491] EXT4-fs error (device loop7): ext4_truncate:4635: inode #13: comm syz.7.17662: mark_inode_dirty error [ 1215.553453][T24491] EXT4-fs error (device loop7) in ext4_process_orphan:345: Corrupt filesystem [ 1215.562947][T24491] EXT4-fs (loop7): 1 truncate cleaned up [ 1215.599363][T24512] loop7: detected capacity change from 0 to 512 [ 1215.626320][T24512] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #2: comm syz.7.17669: corrupted inode contents [ 1215.638912][T24512] EXT4-fs error (device loop7): ext4_dirty_inode:6502: inode #2: comm syz.7.17669: mark_inode_dirty error [ 1215.655607][T24512] EXT4-fs error (device loop7): ext4_do_update_inode:5617: inode #2: comm syz.7.17669: corrupted inode contents [ 1215.668858][T24512] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.17669: mark_inode_dirty error [ 1215.709109][T24524] loop8: detected capacity change from 0 to 1764 [ 1215.709680][T24512] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 1215.737830][T24512] SELinux: Context system_u:object_r:modules_dep_t:s0 is not valid (left unmapped). [ 1215.824585][T24532] loop8: detected capacity change from 0 to 512 [ 1215.833518][T24532] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1215.841905][T24532] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.17674: bg 0: block 5: invalid block bitmap [ 1215.855939][T24532] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 1215.861954][T24534] loop7: detected capacity change from 0 to 128 [ 1215.874589][T24532] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.17674: invalid indirect mapped block 3 (level 2) [ 1215.874648][T24534] bio_check_eod: 110 callbacks suppressed [ 1215.874660][T24534] syz.7.17675: attempt to access beyond end of device [ 1215.874660][T24534] loop7: rw=2049, sector=138, nr_sectors = 8 limit=128 [ 1215.907573][T24532] EXT4-fs (loop8): 2 truncates cleaned up [ 1215.908026][T24534] syz.7.17675: attempt to access beyond end of device [ 1215.908026][T24534] loop7: rw=2049, sector=146, nr_sectors = 6 limit=128 [ 1215.933321][T24534] syz.7.17675: attempt to access beyond end of device [ 1215.933321][T24534] loop7: rw=8390657, sector=150, nr_sectors = 2 limit=128 [ 1215.947122][T24534] buffer_io_error: 68 callbacks suppressed [ 1215.947192][T24534] Buffer I/O error on dev loop7, logical block 75, lost async page write [ 1215.961578][T24534] syz.7.17675: attempt to access beyond end of device [ 1215.961578][T24534] loop7: rw=8390657, sector=152, nr_sectors = 2 limit=128 [ 1215.975442][T24534] Buffer I/O error on dev loop7, logical block 76, lost async page write [ 1215.999692][T24534] syz.7.17675: attempt to access beyond end of device [ 1215.999692][T24534] loop7: rw=2049, sector=170, nr_sectors = 6 limit=128 [ 1216.016353][T24540] __nla_validate_parse: 11 callbacks suppressed [ 1216.016369][T24540] netlink: 16 bytes leftover after parsing attributes in process `syz.6.17677'. [ 1216.018252][T24534] syz.7.17675: attempt to access beyond end of device [ 1216.018252][T24534] loop7: rw=8390657, sector=174, nr_sectors = 2 limit=128 [ 1216.045794][T24534] Buffer I/O error on dev loop7, logical block 87, lost async page write [ 1216.054469][T24534] syz.7.17675: attempt to access beyond end of device [ 1216.054469][T24534] loop7: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 1216.068264][T24534] Buffer I/O error on dev loop7, logical block 88, lost async page write [ 1216.077052][T24534] syz.7.17675: attempt to access beyond end of device [ 1216.077052][T24534] loop7: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 1216.099243][T24540] netlink: 12 bytes leftover after parsing attributes in process `syz.6.17677'. [ 1216.123282][T24534] syz.7.17675: attempt to access beyond end of device [ 1216.123282][T24534] loop7: rw=8390657, sector=182, nr_sectors = 2 limit=128 [ 1216.137110][T24534] Buffer I/O error on dev loop7, logical block 91, lost async page write [ 1216.148682][T24542] syzkaller0: entered promiscuous mode [ 1216.154194][T24542] syzkaller0: entered allmulticast mode [ 1216.159379][T24534] syz.7.17675: attempt to access beyond end of device [ 1216.159379][T24534] loop7: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 1216.174135][T24534] Buffer I/O error on dev loop7, logical block 92, lost async page write [ 1216.184200][T24534] Buffer I/O error on dev loop7, logical block 103, lost async page write [ 1216.193141][T24534] Buffer I/O error on dev loop7, logical block 104, lost async page write [ 1216.202401][T24534] Buffer I/O error on dev loop7, logical block 107, lost async page write [ 1216.210281][T24542] tipc: Enabled bearer , priority 0 [ 1216.215802][T24534] Buffer I/O error on dev loop7, logical block 108, lost async page write [ 1216.226328][T24541] tipc: Resetting bearer [ 1216.233934][T24546] loop6: detected capacity change from 0 to 128 [ 1216.234743][T24541] tipc: Disabling bearer [ 1216.301849][T24550] netlink: 20 bytes leftover after parsing attributes in process `syz.8.17682'. [ 1216.328014][T24555] loop3: detected capacity change from 0 to 1764 [ 1216.344150][T24557] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.379954][T24561] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 1216.407551][T24557] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.475107][T24557] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.489932][T24570] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.17690: inode has both inline data and extents flags [ 1216.504393][T24570] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.17690: couldn't read orphan inode 15 (err -117) [ 1216.554452][T24557] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.599693][ T6388] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.614016][ T6388] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.629685][ T6388] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.647335][ T6388] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1216.743932][T24578] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.17692: inode has both inline data and extents flags [ 1216.757315][T24578] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.17692: couldn't read orphan inode 15 (err -117) [ 1217.334526][T24586] netlink: 3 bytes leftover after parsing attributes in process `syz.6.17695'. [ 1217.353280][T24586] 1ªX¹¦À: renamed from 60ªX¹¦À [ 1217.364115][T24586] A link change request failed with some changes committed already. Interface 61ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1217.419824][T24593] netlink: 20 bytes leftover after parsing attributes in process `syz.6.17698'. [ 1217.430033][T24588] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(7) [ 1217.436591][T24588] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1217.444456][T24588] vhci_hcd vhci_hcd.0: Device attached [ 1217.458297][T24588] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 1217.467262][T24588] FAT-fs (loop7): Filesystem has been set read-only [ 1217.479575][T24588] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 1046) [ 1217.497491][T24592] vhci_hcd: connection closed [ 1217.497878][T15358] vhci_hcd vhci_hcd.7: stop threads [ 1217.507835][T15358] vhci_hcd vhci_hcd.7: release socket [ 1217.513326][T15358] vhci_hcd vhci_hcd.7: disconnect device [ 1217.557325][T24602] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.17701: inode has both inline data and extents flags [ 1217.571385][T24602] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.17701: couldn't read orphan inode 15 (err -117) [ 1217.742610][T24619] ALSA: seq fatal error: cannot create timer (-22) [ 1217.771623][T24612] vcan0 speed is unknown, defaulting to 1000 [ 1217.801151][T24612] lo speed is unknown, defaulting to 1000 [ 1217.872660][T24633] rdma_rxe: rxe_newlink: failed to add vcan0 [ 1217.879454][T24633] netlink: 16 bytes leftover after parsing attributes in process `syz.8.17711'. [ 1217.892762][T24635] EXT4-fs: Ignoring removed orlov option [ 1217.928773][T24639] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.17713: inode has both inline data and extents flags [ 1217.943165][T24639] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.17713: couldn't read orphan inode 15 (err -117) [ 1217.965016][T15358] ================================================================== [ 1217.973122][T15358] BUG: KCSAN: data-race in wb_wait_for_completion / writeback_sb_inodes [ 1217.981542][T15358] [ 1217.983852][T15358] write to 0xffffc90002967cb8 of 8 bytes by task 20109 on cpu 0: [ 1217.991555][T15358] wb_wait_for_completion+0x90/0x360 [ 1217.996846][T15358] writeback_inodes_sb+0x144/0x190 [ 1218.001947][T15358] sync_filesystem+0x69/0x190 [ 1218.006652][T15358] generic_shutdown_super+0x44/0x210 [ 1218.011950][T15358] kill_block_super+0x2a/0x70 [ 1218.016876][T15358] ext4_kill_sb+0x42/0x80 [ 1218.021198][T15358] deactivate_locked_super+0x75/0x1c0 [ 1218.026565][T15358] deactivate_super+0x97/0xa0 [ 1218.031247][T15358] cleanup_mnt+0x2a9/0x320 [ 1218.035669][T15358] __cleanup_mnt+0x19/0x20 [ 1218.040097][T15358] task_work_run+0x131/0x1a0 [ 1218.044675][T15358] exit_to_user_mode_loop+0x1fe/0x740 [ 1218.050041][T15358] do_syscall_64+0x1e1/0x2b0 [ 1218.054635][T15358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.060515][T15358] [ 1218.062827][T15358] read to 0xffffc90002967cb8 of 8 bytes by task 15358 on cpu 1: [ 1218.070536][T15358] writeback_sb_inodes+0x4ce/0xb20 [ 1218.075639][T15358] wb_writeback+0x252/0x5c0 [ 1218.080134][T15358] wb_workfn+0x194/0x910 [ 1218.084365][T15358] process_scheduled_works+0x4ce/0x9d0 [ 1218.089902][T15358] worker_thread+0x582/0x770 [ 1218.094487][T15358] kthread+0x489/0x510 [ 1218.098560][T15358] ret_from_fork+0x149/0x290 [ 1218.103143][T15358] ret_from_fork_asm+0x1a/0x30 [ 1218.107923][T15358] [ 1218.110232][T15358] value changed: 0x0000000000000000 -> 0x0000000100016667 [ 1218.117354][T15358] [ 1218.119664][T15358] Reported by Kernel Concurrency Sanitizer on: [ 1218.125973][T15358] CPU: 1 UID: 0 PID: 15358 Comm: kworker/u8:3 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 1218.137496][T15358] Tainted: [W]=WARN [ 1218.141278][T15358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1218.151314][T15358] Workqueue: writeback wb_workfn (flush-7:8) [ 1218.157323][T15358] ================================================================== [ 1224.023447][ T29] kauditd_printk_skb: 3111 callbacks suppressed [ 1224.023463][ T29] audit: type=1400 audit(1225.009:260646): avc: denied { recv } for pid=0 comm="swapper/1" saddr=10.128.0.163 src=37536 daddr=10.128.0.227 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1