last executing test programs: 6m20.062387437s ago: executing program 4 (id=670): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="01000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x0, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setpgid(0xffffffffffffffff, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaabb32860ceba34ba34dfb866ee7bbbbbbbbbb86dd603000bb00082b00fc0200008056cf234e3d7ced000000000000000000000000fe8000000000000000000000000000aa"], 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x5, 0x0, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000002480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x840) r6 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSKBENT(r6, 0x4b47, &(0x7f0000000580)={0x8, 0xff, 0x1}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x4e21, @broadcast}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r9}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0200000004000000008001400200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r7], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r8}, &(0x7f00000003c0), &(0x7f0000000400)=r9}, 0x20) 6m19.977779647s ago: executing program 4 (id=672): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0xb) 6m19.73746611s ago: executing program 4 (id=675): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000880)=@newsa={0x138, 0x10, 0x633, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x25}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {0xfffffffffffffffd, 0x0, 0x0, 0x2dcd, 0x8}, {}, {0x0, 0x0, 0x4}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) 6m19.71575407s ago: executing program 4 (id=676): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./file0\x00', 0xc80, &(0x7f0000020100)=ANY=[@ANYBLOB="00631dda01aef2456795dd9b26209f1c0f624854ea3dd5a00bd6df44035f5c3ae796fec6d633a0ffad0569794acfef7da01767fd4175f2cd82df769aa2ee7bfe3640554507d2e660c9f9e222a72e1e3e71145c480657d2864e5e276f028d64701ae31cde0ceaf408fdb05c0f4142da00e900000100000149e6d308cbe315789f4baffe39bbced9b1d421d2e290e9fc563b62225f002ee310e1fa7321000000000000d6231001a4b2d467825f3abb0c167e129cf1fa0e7854103f4bf2d3a0194983bc86cbd3d75ccef3c8ac4516dac102"], 0x1, 0x266, &(0x7f000001fe80)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) msgctl$IPC_SET(0x0, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) mkdir(&(0x7f0000000140)='./control\x00', 0x8) rmdir(&(0x7f0000000100)='./control\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_create(0x2, 0x0, &(0x7f0000044000)=0x0) timer_delete(r1) timer_settime(r1, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000f40)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000f80)) 6m19.512519773s ago: executing program 1 (id=681): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0x5, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x4, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000580)='\xa3\x04\x00', &(0x7f00000003c0)="c5", 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='kfree\x00', &(0x7f0000000180)='\xfa.-\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a40)='t`\x16{\xf9\x8eE5\xf7\xbbE\xc94I\xb4\xbap\xc7\x13\x0f\xa8\x8c.\xc8\xe5\xbc\xbeQ#\v$z\x7f:\xe5J\xad\xf1\xdc\x8dE\x90\xf8\x01\x1f\xdd\xa6!\xf0\x1a\x9b\'\x8a\x83Y\x8d\x01\xf8\xda$\x93\xbb|\x00', &(0x7f0000000a80)='U&~=\xd8G\x93\x14\xc9o\xaf\x8b\xd4-\xc5\x12\x8d\xc8\xf1\'\xcf\x92V\xceKg\x8b\xc3\x9e\xd6H\xad0`\xaf\x06\x00xOq\xb6H\x11', 0x0) close(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xae000, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000080)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r3, 0x0, 0x1}, 0x18) r4 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r4) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000580)='\xa3\x04\x00', &(0x7f00000003c0)="c5", 0x1) ioctl$BLKGETDISKSEQ(0xffffffffffffffff, 0x80081280, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000200000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b783000000bf0900000000000055090100000000009500c27fbebab5000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 6m19.438530754s ago: executing program 1 (id=684): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0x5, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x4, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4\r\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000580)='\xa3\x04\x00', &(0x7f00000003c0)="c5", 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='kfree\x00', &(0x7f0000000180)='\xfa.-\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000a40)='t`\x16{\xf9\x8eE5\xf7\xbbE\xc94I\xb4\xbap\xc7\x13\x0f\xa8\x8c.\xc8\xe5\xbc\xbeQ#\v$z\x7f:\xe5J\xad\xf1\xdc\x8dE\x90\xf8\x01\x1f\xdd\xa6!\xf0\x1a\x9b\'\x8a\x83Y\x8d\x01\xf8\xda$\x93\xbb|\x00', &(0x7f0000000a80)='U&~=\xd8G\x93\x14\xc9o\xaf\x8b\xd4-\xc5\x12\x8d\xc8\xf1\'\xcf\x92V\xceKg\x8b\xc3\x9e\xd6H\xad0`\xaf\x06\x00xOq\xb6H\x11', 0x0) close(r1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0xae000, 0x0) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r2, 0x80089419, &(0x7f0000000080)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r3, 0x0, 0x1}, 0x18) r4 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='$\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='\x00H\xeb', 0x0, r4) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000580)='\xa3\x04\x00', &(0x7f00000003c0)="c5", 0x1) ioctl$BLKGETDISKSEQ(0xffffffffffffffff, 0x80081280, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000200000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b783000000bf0900000000000055090100000000009500c27fbebab5000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) statfs(0x0, 0x0) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 6m19.396418955s ago: executing program 1 (id=686): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x0, &(0x7f0000000080)=""/4076, &(0x7f0000000040)=0xfec) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) writev(r0, &(0x7f0000000040)=[{&(0x7f0000002500)='\f7', 0x2}, {&(0x7f0000000000)='0', 0x1}], 0xb) 6m19.369214645s ago: executing program 1 (id=688): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = syz_io_uring_setup(0x3b52, &(0x7f0000000140)={0x0, 0x5883, 0x1000, 0x8003, 0x1c2}, &(0x7f0000000040)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1}) io_uring_enter(r1, 0x10007b0f, 0x96f0, 0x20, 0x0, 0x0) 6m19.194305367s ago: executing program 4 (id=694): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000dc0), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) io_setup(0x20, &(0x7f0000001140)=0x0) io_submit(r3, 0x1, &(0x7f00000001c0)=[&(0x7f0000000d80)={0xf, 0x400000000000, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000200)='at)9', 0x4, 0x4}]) 6m19.157214738s ago: executing program 1 (id=695): gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0500000004", @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000032dc00000000000000000000000000000000d95f5162d81bd2970000200008d6e9d7c212d3f83f3c8cc8c71958dd1a2ebff300002bdca9d42a7eec5a281368403d97eb5aab472b3f698dbecc40cd2c0784b23a273ba04adad01f57ec2fd84317d2b4e028ed29f2aead6003b6f03a90fd85566cdac4b3931c73851af4d9"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) waitid$P_PIDFD(0x2, 0xffffffffffffffff, 0x0, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f00000030c0)={0x765, {"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", 0x1000}}, 0x1006) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000400)='./file0/../file0\x00', &(0x7f0000000080), 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000000)=[{r5, 0x12090}], 0x1, 0x0, 0x0, 0x0) umount2(&(0x7f0000000100)='./file0/../file0\x00', 0xa) r6 = semget$private(0x0, 0x6, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000140)) syz_open_procfs(0x0, 0x0) semop(r6, &(0x7f0000000180)=[{0x0, 0x3}, {0x1}], 0x2) 6m18.949173821s ago: executing program 4 (id=705): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) chroot(&(0x7f00000003c0)='./bus\x00') 6m18.943197311s ago: executing program 32 (id=705): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000e8000000000040d900008500000023000000850000000f00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) chroot(&(0x7f00000003c0)='./bus\x00') 6m18.278645689s ago: executing program 1 (id=707): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x8, 0x40, 0x204, 0x300}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @lsm=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='xprtrdma_post_recvs_err\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r3, 0x4b4b, &(0x7f0000000440)=""/252) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f00000001c0)={0x3f, 0xc, 0x8a6, 0x101, 0x1, 0x1, &(0x7f0000000240)='>'}) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2df0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x80, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0xb0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 6m18.278384479s ago: executing program 33 (id=707): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x8, 0x40, 0x204, 0x300}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @lsm=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='xprtrdma_post_recvs_err\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBDIACR(r3, 0x4b4b, &(0x7f0000000440)=""/252) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f00000001c0)={0x3f, 0xc, 0x8a6, 0x101, 0x1, 0x1, &(0x7f0000000240)='>'}) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2df0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x40, 0x80, "7a58beca39ed2d5a99bbc4bff0ebd3e9bd5a8e"}) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0xb0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) 2.721878017s ago: executing program 3 (id=8092): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x84}}, 0x0) 2.602888069s ago: executing program 3 (id=8095): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000240)=[{0x1, 0x2, {0x0, 0xff, 0x1}, {0x0, 0xff}, 0x1}, {0x1, 0x0, {0x1, 0xf0, 0x3}, {0x2, 0xff, 0x3}, 0x2, 0x1}, {0x1, 0x3, {0x0, 0xff}, {0x2, 0xf0, 0x2}, 0xff, 0x2}, {0x3, 0x3, {0x2, 0x0, 0x1}, {0x2}, 0xfe, 0xfe}], 0x80) perf_event_open(&(0x7f0000001700)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x0, 0x1}, 0x8806, 0x0, 0x634e, 0x0, 0x0, 0x1, 0xffb6, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300021000000000000000040000000200080008000000540000000000000005000600000000000a00000000000000fe8000000000000000000000000000aa00000000000020000200010000000000000005fd80ffffff05000500000000000a"], 0x80}, 0x1, 0x7}, 0x0) lseek(r2, 0x8000, 0x1) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 2.353642651s ago: executing program 3 (id=8096): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x20}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1000000, &(0x7f00000007c0)={[{@mblk_io_submit}]}, 0xfe, 0x52c, &(0x7f0000000d40)="$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") 1.854016758s ago: executing program 3 (id=8103): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRES64=r1], &(0x7f0000000200)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r5, &(0x7f0000000140)='./file1\x00', r5, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/if_inet6\x00') fchdir(r6) r7 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r7, &(0x7f0000000280)='ns/cgroup\x00') write$P9_RGETLOCK(r6, &(0x7f0000000040)=ANY=[@ANYBLOB="2200a22c3702000008000000000000000180000000000000", @ANYRES32=r7, @ANYBLOB="040047504c00"], 0x22) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="3800000010003904ffffff5b9f00000000000000", @ANYRES32=r9, @ANYBLOB="0000000098000600180016801400018010000600030000000080000008000000"], 0x38}, 0x1, 0x0, 0x0, 0x4000001}, 0xc000) sendto$inet6(r3, &(0x7f0000000080)="be", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) shutdown(r3, 0x1) 1.716761419s ago: executing program 3 (id=8108): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0a00000002000000020000000d"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r0}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x61, &(0x7f0000000280)=ANY=[@ANYRESOCT=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bf5180183cb8713cdc0f8587c04bd7a9a200000000000007020000f8ffffffb703000008002010b704", @ANYRES64=r0, @ANYRES16=r0, @ANYRESOCT=0x0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x4, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000100)={0x0, &(0x7f0000000180)}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x70, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b00000"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x11, 0x20000000000000db, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', r5, 0x0, 0x2}, 0x18) personality(0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000002c0)={[{@inlinecrypt}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@errors_remount}, {@data_err_ignore}, {@jqfmt_vfsv1}, {@nodelalloc}, {@grpquota}, {@noload}, {@nouid32}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") faccessat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) r7 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r7, &(0x7f0000000400)=@in4={0x21, 0x0, 0x2, 0x1c, {0x2, 0x4e20, @remote}}, 0x24) r8 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r8, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close(r3) 1.537236801s ago: executing program 3 (id=8112): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x18002, 0x12d, 0x2}, 0x18) openat2(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x4000, 0x15, 0x2}, 0x18) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280), 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000fc0)={'bond0\x00', @multicast}) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000680)=@usbdevfs_disconnect={0x100}) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r3 = syz_io_uring_setup(0x147e, &(0x7f0000000080)={0x0, 0x1010b6, 0x80, 0x400002, 0x403ae}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x84, 0x0, 0x1}) io_uring_enter(r3, 0x1ae0, 0x4, 0x48, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='fsi_master_acf_copro_command\x00', r6, 0x0, 0x6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x5e9, &(0x7f0000000600)="$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") sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4040004) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 1.536878761s ago: executing program 34 (id=8112): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x18002, 0x12d, 0x2}, 0x18) openat2(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x4000, 0x15, 0x2}, 0x18) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000280), 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000fc0)={'bond0\x00', @multicast}) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/sockcreate\x00', 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000680)=@usbdevfs_disconnect={0x100}) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) r3 = syz_io_uring_setup(0x147e, &(0x7f0000000080)={0x0, 0x1010b6, 0x80, 0x400002, 0x403ae}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x84, 0x0, 0x1}) io_uring_enter(r3, 0x1ae0, 0x4, 0x48, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='fsi_master_acf_copro_command\x00', r6, 0x0, 0x6}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x18) keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) syz_read_part_table(0x5e9, &(0x7f0000000600)="$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") sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4040004) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 750.684631ms ago: executing program 6 (id=8132): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{}, [@TCA_NETEM_LOSS={0x1c, 0x2, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x88}}, 0x0) 692.512051ms ago: executing program 2 (id=8133): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000006c0)='kmem_cache_free\x00', r1, 0x0, 0x2000}, 0x18) mkdir(0x0, 0x1) 637.699802ms ago: executing program 2 (id=8134): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd885000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000240)=0xfffffefd) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r3, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="2419bef03612ccabd877a5954ae8df172d63c865acad5bbb36047580659ac9081ea04cb968115f142d7078db5c9de10fbca8", @ANYRES32, @ANYRESDEC=r1, @ANYRES32, @ANYRES32, @ANYBLOB="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", @ANYRES64], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0xc, &(0x7f0000000f40)=ANY=[@ANYRES16=r0, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa2000900fc000007020000f8ffcdc0deab1430d4a4cc9a70d2f30000b704000000000000002b876a6774c9f7c58700"/86], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000001240)='jbd2_checkpoint\x00', r5}, 0x18) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x800000000010000, &(0x7f0000000100)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r6, &(0x7f0000000380)={0xe, 0x18, 0xfa00, @ib_path={0x0, r7}}, 0x20) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000340)={0x3f, 0xc, 0x8a6, 0x101, 0x1, 0x1, &(0x7f0000000300)='>'}) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0xfffffffffffffffc) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2df0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r8, 0x5404, &(0x7f0000000000)={0x0, 0x1, 0xfffffffc, 0x40, 0x5, "fcc8d21339ed2d5a599a9c12fd6771acbd5a8e"}) r9 = socket(0x1e, 0x1, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x0, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r9, &(0x7f0000005100)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001080)=""/156, 0x9c}, {&(0x7f0000001140)=""/226, 0xe2}], 0x2}}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000015c0)=""/57, 0x39}], 0x1}}], 0x2, 0x120a0, 0x0) sendmmsg(r9, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x8000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0], 0x0, 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0xa8) sendmsg$NFT_BATCH(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000030000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000020900010073797a30000000000900030073797a3200000000240b0000060a010400000000000000000100000008000b4000000000fc0a048028000180080001006c6f67001c0002800e00024073797a6b616c6c65720000000800054000000008d00a01800e000100696d6d656469617465000000bc0a0280640002804c0002800900020073797a32000000000900020073797a310000000008000180fffffffc0900020073797a31000000000800034000009c920900020073797a300000000008000180ffffffff14000280080003400000000808000180fffffffb0800014000000002080001400000000b500002804b000100fa62d7ba9ceeacf9aa4f832b78f35731f355d63e192a72aef5e68a05d1b806151b6bd1e2d74abafd383790ad363fdc1b7766748630b48f9beefdb33c86d5835a470b5ffd20d7e9006c0102805c00028008000180fffffffe0900020073797a30000000000900020073797a320000000008000180ffffffff0900020073797a320000000008000180fffffffd0900020073797a310000000008000180fffffffc0800034000000e5628000280080003400000000608000340000000070900020073797a320000000008000180fffffffe540002800900020073797a320000000008000180fffffffe0800034000000000080003400000000008000340000000090900020073797a310000000008000180fffffffe080003400000800108000180fffffffd8e000100818ce881ff18470752e86442e8b77ddcfc7a4c87f05cd36147be26c85cc854cc117db1906007a5a8c298f4724c8c743d46ec7f3ba478d9dfb10bbe9e4fdfc2188d62db9bb1364fed383fe0b0c3fbbab83959470cb0ffb14765c32f10b54d99531d04caaf264214997543a1c63637d9a3a20b7ce9312e545626eb375c88462c198f35cf8a11616de4fa0c000098020280eb00010099c8e680eb4d0e7f78e1fb62226ae541d997c8cb51c5ebd0bb7e2730b61310dcd7525807288a7ad8c00f6aa230a1d1b876ddb0e188384e7c79cd8af94a02451a04d8f116bde38077da45650d82bdd1767b03e3f35bc4a5769e659d8cdb6d9d9d717c78b50f6b3ac899b07a9eaf2c989654de7d6609299bad01ca1f3fa8b6229a6c69627a07f627880e902231b20368f3ae64fd12fc37afeb95f14a4dc3d0bc5f6e2afd0fc8ef6982054cffa703ee1376654019ad6d2add9052c5d2f2e0ba3318f931b2c5f2dcce5cbca6093c64d23b64e2f2061da3dd5983644280de22d592b63b5d7f6b571beb005400010041bbc64da6bacaad1bebec23352accccbca40d6ba87943f82df945bf4ccc5250a0c2b2cb13793380f424b280bfb960885af6df4afa26efa8fcd7a1243389ef3fcf1d709f775a9cd1dfb2b84fd03e5d70f800010001950b7c0ec30534e476b721ba6e82d03078fe63b683918ecbbb9c339c8cdd63689339ac43acd5973f4aac8720a98d18e13b98e11e291f3f3621ed29c717639f84bdd28810da6ae30538775f15e00133741e9de3f96f69ab363752fa962b3c71041ba1e463a91d782a968d9febb648b66e71a6827c53b3be014b785f61c4fd46fef00658f64cdd465edb61ba4c5f00849b2935c485da99a38489ecc29837433ac5446c3922d73153fd8fb2368a5ce4201760ca6778f570b7fcb38be633a02d57c5884b6bcbaf3bc28ca7686edb5d59e1b823a8f0f5ff788625995d51c16413783c6290a9714bd4dcbd2a388139f3e46f69916f335c0002800900020073797a3000000000080003400000000908000180000000000900020073797a3000000000080003400000000808000180fffffffd080003400000000408000340fffffff908000180fffffffb0800034000000003a80002801c000280080003400000020008000340fffffff508000340000000001400028008000340000000050800034000000007720001001c2cce526d2ee30fb33f426450278cb35ac06b1cef15fefc26b5c17a8c9251bed316fccb5588f2e071fc355537fcf458cf14217f16ce4c12a4b559f3e807c94c6cc4f418baebc6024b74b9dbc5ef66dbbe91812ea247db80670c101ed494f105ad9c09b4eaf8d5c133b46a311c1a00001c0302802000028008000180fffffffc0900020073797a320000000008000340000000035c00028008000180fffffffc08000180fffffffc08000180fffffffb0900020073797a300000000008000340000000060900020073797a30000000000900020073797a31000000000900020073797a310000000008000180fffffffbf6000100330e5af714359ac9da33381a13071148dbe4293800e6be0290efbb549850cda132ca27a55553fd77c3067504c4596086f4001f53d49e8111395ebccb983c6b04735a58ab2617dfc62123b09c8dc5a47154667414dc28e8369829764b2e3cc23303a882890bad6d3a70d9e15701ec8c4c15a46d38c9ed6bc8658f8a45a02083f563324a27c649bab7cbcb485c289bd8df0a040128df6891ab48095977e0463f8e3ed7ba6df976ee30768954dfeb3f08c942b2c9384aa0b78baf92ecf5e4d73788afb1bc5a8f7c4b454897cd8bcac7f19cdd949fac66756da3b9311e13362eee317df853f6bc7e4638eb145a1484d3780e09b50000c8000100d5c1e4159bf770e02e6e1ebe911d7513709588175328d2e11f2ebf3f6967c49bedcb2a5459a45272bb8084e3bb55ea7a80166d97ec16457ed7d2a834d9aafdb2a54110ddc7975eaeda4f897ec7d533c27df0ce5ff92cfedadc67fff850ee5d07822d72b27af229d17ad2f8d802ae40d98f373e348a04b4f0270c71f82319de3a0331f165204896e0e448cf7ea0f8eb32a312fda6716f72f0234742fe6708ad0adf587ea21d94b8c8f5080028dda1e21d3d9ac82d8edd12941631b72b692ecc262d6ae12393000100c56deda494a09379df59bad8f0f17376b307ce49571034af728b1c4bf694e3b91406b976944238ab36ccaf40e3d92952ba87aa27af6353a82868c9508577a1b6a349fce75b3e4952b04b9527f496b5555e6db110dec07430b01446635eff12f136dbcb54fd4dc90b02e1bc6488ed74efd9eeb1b6de6e2a234f6c323df5c28a0352d03b34ee4f64ab614078125aa3cc0048000280080003400000000c08000340000000010900020073797a310000000008000180fffffffd0800034000008000080003400000dc5b08000180fffffffc08000180fffffffb2c0202804b000100cece2d8ff50c68c1060c2e691ddc50c6d87b46b4e5f6695010163d98bac2d9d7693cff0ec1e2107f58d3c305c78e5a596df92f1dbe80793dce5424be9e7951890023db7d0b9b2700e5000100f46e4b21dd4b92221713eece21b0e3bfb3fe995725eca78713a8d11ac82a6aefeeeab4720bd136479523ccafa34771afedeafc55275842bb7adb37ff3c93b19d9d5139f8b67ee81e380faa9506e6c8e5956cf7efc9828438d340aa4bfe771769c6ddb2f8c31049c1fc37e8f28812ea0aadd0caa7e32f6bb4b2b7a4473e5fa876c87bf285a503660ea12a0cfff6863a87c64ea83c31e737e278edcad77cb964828c7049d335e25156fd4d1c2faada6a8363794fe487155fbfd7c2e1b8504d4a744357734f51fca0426ffe929280df27411f8a90a067b285e970fa1e403722ae91dd000000f400010073e22ba6603d1c92836887468b100c2dc430efeb2ef19c66bd0582fe94df7b5a20292fdfbd2009980dbf9651685f7713bfb0f42583e452670f29e2cabf848fcdcb7a2067f0b257efd7dc927e540584b08f026e14be231afa797e36410d8ad6cbced8c5d2cce2f5a8b75713e57b3161b5b4ce78f283bf59a04f90bc1c5a4371abed0124c621ecb51b6166ad39f14216c09456232b7ea8dd7058bbbeae8b1c13df7ffa1515a359309683421d783f4fb00547cb06b3f974e65f28397c2c16675436a414b6e28d61800c35bdc05f9837e14491ce0fa7c0fbf6f61dd8f7eceac62373ed913de212a188ad5fa12d0eab8a0b440900010073797a30"], 0xb98}}, 0x0) 584.709853ms ago: executing program 6 (id=8135): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r2, 0x0, 0x0, 0x0, 0x80000}) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000240)={'security\x00', 0x4c, "8c2a0a48baf0971cdad710df6e980a94de5bd9ac032d32ff17160043abab90ec448308e320d481110ca75ebd1db5249a6962a2a44b165077cebfe4bcf17465a1b5d9d65729408e7b8e4d8666"}, &(0x7f0000000000)=0x70) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) sendto$packet(r4, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x1a, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x20000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000f0f000000000700000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000003c000000050a01020000000000000000010000000c00024000000000000000010900010073797a3100"], 0xc4}}, 0x0) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', 0x0, 0x2410, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) 438.982394ms ago: executing program 0 (id=8137): syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x33, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8}]}}]}, 0x38}}, 0x0) 393.996655ms ago: executing program 2 (id=8139): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x10001, 0x9, 0x9, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) setxattr$system_posix_acl(0x0, &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x2c, 0x0) 357.685175ms ago: executing program 0 (id=8141): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) modify_ldt$write(0x1, 0x0, 0x0) 313.951706ms ago: executing program 2 (id=8142): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000cf00000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000600)='sys_enter\x00', r1}, 0x10) openat$rtc(0xffffffffffffff9c, &(0x7f0000000300), 0x2000, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 274.723686ms ago: executing program 5 (id=8144): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) fcntl$setpipe(r2, 0x407, 0x6) 257.953567ms ago: executing program 6 (id=8145): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x10001, 0x9, 0x9, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) setxattr$system_posix_acl(0x0, &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x2c, 0x0) 250.481976ms ago: executing program 0 (id=8146): r0 = socket$inet6(0xa, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x61, &(0x7f0000000280)=ANY=[@ANYRESOCT, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bf5180183cb8713cdc0f8587c04bd7a9a200000000000007020000f8ffffffb703000008002010b704", @ANYRES64=r0, @ANYRES16=r0, @ANYRESOCT=r0, @ANYRESOCT=0x0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, @void, @value}, 0x94) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x8, 0x0, 0xf77}]}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000000000005000000"], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) personality(0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000002c0)={[{@inlinecrypt}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@errors_remount}, {@data_err_ignore}, {@jqfmt_vfsv1}, {@nodelalloc}, {@grpquota}, {@noload}, {@nouid32}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000400)=@in4={0x21, 0x0, 0x2, 0x1c, {0x2, 0x4e20, @remote}}, 0x24) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 219.243897ms ago: executing program 6 (id=8147): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{}, [@TCA_NETEM_LOSS={0x1c, 0x2, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x88}}, 0x0) 209.745847ms ago: executing program 5 (id=8148): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) fcntl$setpipe(r2, 0x407, 0x6) 170.281677ms ago: executing program 0 (id=8149): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000240)=0xfffffefd) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_NAME(0xf, &(0x7f0000000680)='+}[@\x00[$oB\xfa=\xee\xc4F\xba\xed\x97') ioctl$USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x11, 0xc, &(0x7f0000000f40)=ANY=[@ANYRES16=r0, @ANYRES32, @ANYBLOB="0000000000000000b7080000ff0100007b8af8ff00000000bfa2000900fc000007020000f8ffcdc0deab1430d4a4cc9a70d2f30000b704000000000000002b876a6774c9f7c58700"/86], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x800000000010000, &(0x7f0000000100), 0x2, 0x6}}, 0x20) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000340)={0x3f, 0xc, 0x8a6, 0x101, 0x1, 0x1, &(0x7f0000000300)='>'}) 156.491178ms ago: executing program 6 (id=8150): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000040000000000000000000100000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021800000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000005400038050000080080003400000000244000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c000240000000000000001014000180090001"], 0x104}}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) 155.896288ms ago: executing program 2 (id=8151): syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000002c0)='mm_page_alloc\x00', r1}, 0x10) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x33, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8}]}}]}, 0x38}}, 0x0) 106.010328ms ago: executing program 5 (id=8152): bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xb, 0x7, 0x10001, 0x9, 0x9, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r0}, 0x10) setxattr$system_posix_acl(0x0, &(0x7f00000000c0)='system.posix_acl_access\x00', 0x0, 0x2c, 0x0) 105.735368ms ago: executing program 5 (id=8153): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0}, &(0x7f0000000180), 0x0}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) fcntl$setpipe(r2, 0x407, 0x6) 90.499949ms ago: executing program 5 (id=8154): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae000000"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='kmem_cache_free\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) inotify_init() 83.216709ms ago: executing program 2 (id=8155): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x2d) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340)=0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r2, 0x0, 0x0, 0x0, 0x80000}) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f0000000240)={'security\x00', 0x4c, "8c2a0a48baf0971cdad710df6e980a94de5bd9ac032d32ff17160043abab90ec448308e320d481110ca75ebd1db5249a6962a2a44b165077cebfe4bcf17465a1b5d9d65729408e7b8e4d8666"}, &(0x7f0000000000)=0x70) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{}, &(0x7f0000000800), &(0x7f0000000840)=r5}, 0x20) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xa004}, 0x4) sendto$packet(r4, &(0x7f0000000180)="10030600e0ff020004004788aa96a13bb100001100007fca1a00", 0x1a, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1e, 0x20000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000f0f000000000700000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a31000000003c000000050a01020000000000000000010000000c00024000000000000000010900010073797a31000000000400"], 0xc4}}, 0x0) mount(&(0x7f0000000240), &(0x7f0000000040)='.\x00', 0x0, 0x2410, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="0213000002"], 0x10}}, 0x0) syz_open_dev$usbfs(0x0, 0x20000007d, 0x0) 72.375259ms ago: executing program 6 (id=8156): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007b00000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x20}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1000000, &(0x7f00000007c0)={[{@mblk_io_submit}]}, 0xfe, 0x52c, &(0x7f0000000d40)="$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") 34.241449ms ago: executing program 0 (id=8157): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x38}}, 0x8802) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x3ef, 0x0) 33.583469ms ago: executing program 5 (id=8158): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000b20018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000027"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x10000) r5 = syz_open_procfs(0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r8, 0xfffffffffffffffe, r8, 0x1) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000002ac0)={@fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, @void, @value}, 0x20) pread64(r5, 0x0, 0x0, 0x1000000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) write$binfmt_aout(r9, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r9, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x3, "0062ba7d820000a75e0000000000fcff00"}) r10 = syz_open_pts(r9, 0x0) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000000)=0x44) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="8b33000000000000000005000000080003"], 0x28}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$netlink(r13, &(0x7f0000000000)=@proc={0x10, 0x0, 0x25dfdbfb}, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r13, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) 0s ago: executing program 0 (id=8159): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000008000000000000000300000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000b7080000000000007b8af8ff00000000b7080000220e00007b8af0ff00000000bfa100000000000007010000f8ffffff00"/104, @ANYRES32=0x1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x7000000, 0x8e, &(0x7f0000000300)=""/142, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000240)={0x5, 0x0, 0x5, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x10001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='consume_skb\x00', r1, 0x0, 0x100000000}, 0x18) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000002c0)=0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="ba0000000400bcf45de90d2ca9d4661e0000ff0f000007", @ANYRES32=r0, @ANYRES16=r0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$inet(0xa, 0x6, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x0, 0x238, 0x2d8, 0x138, 0x2d8, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@ip={@loopback, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00', {}, {}, 0x0, 0x0, 0x11}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'wg1\x00', 'ip6gretap0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0x100, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x0, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x18}, 'veth0_virt_wifi\x00', {0x7}}}}, {{@ip={@rand_addr, @private, 0xffffffff, 0xff, 'syzkaller0\x00', 'veth1_to_team\x00', {}, {0xff}}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x5c}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x4, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r6, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) kernel console output (not intermixed with test programs): oop5): Cannot turn on quotas: error -117 [ 430.846023][T25331] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7257: bg 0: block 40: padding at end of block bitmap is not set [ 430.861410][T25337] EXT4-fs (loop2): 1 truncate cleaned up [ 430.867410][T25337] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.881373][T25331] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 430.915692][T25331] EXT4-fs (loop5): 1 truncate cleaned up [ 430.921995][T25331] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 430.947238][T25344] loop3: detected capacity change from 0 to 512 [ 430.957226][T22927] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 430.968008][T25344] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 430.995752][T25344] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.7261: invalid block [ 431.008573][T25344] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.7261: invalid indirect mapped block 4294967295 (level 1) [ 431.022849][T25344] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.7261: invalid indirect mapped block 4294967295 (level 1) [ 431.024880][T25354] loop5: detected capacity change from 0 to 164 [ 431.043966][T25344] EXT4-fs (loop3): 2 truncates cleaned up [ 431.044796][T22511] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.061766][T25344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.076686][T25354] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 431.091339][T25344] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.7261: bg 0: block 5: invalid block bitmap [ 431.121958][T25360] loop2: detected capacity change from 0 to 164 [ 431.130857][T25354] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 431.130941][T23256] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.139945][T25354] Symlink component flag not implemented [ 431.150470][T25356] loop6: detected capacity change from 0 to 1024 [ 431.153634][T25354] Symlink component flag not implemented [ 431.165790][T25360] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 431.174589][T25354] Symlink component flag not implemented (7) [ 431.175714][T25360] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 431.180631][T25354] Symlink component flag not implemented (116) [ 431.207871][T25360] Symlink component flag not implemented [ 431.213588][T25360] Symlink component flag not implemented [ 431.232825][T25360] Symlink component flag not implemented (7) [ 431.238886][T25360] Symlink component flag not implemented (116) [ 431.264169][T25372] netem: change failed [ 431.280323][T25370] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=25370 comm=syz.6.7272 [ 431.307786][T25376] loop5: detected capacity change from 0 to 1024 [ 431.315615][T25376] EXT4-fs: inline encryption not supported [ 431.322577][T25376] EXT4-fs: Ignoring removed bh option [ 431.345567][T25380] loop2: detected capacity change from 0 to 512 [ 431.353918][T25380] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 431.386325][T25376] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.390376][T25380] EXT4-fs (loop2): 1 truncate cleaned up [ 431.415356][T25380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 431.416287][T25389] loop6: detected capacity change from 0 to 512 [ 431.477487][T25389] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 431.486619][T25389] System zones: 0-2, 18-18, 34-35 [ 431.498183][T22927] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.500169][T25389] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 431.525367][T22511] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.558062][T25396] xt_TPROXY: Can be used only with -p tcp or -p udp [ 431.580146][T25398] loop2: detected capacity change from 0 to 164 [ 431.604917][T24642] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.615811][T25398] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 431.646979][T25398] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 431.664205][T25398] Symlink component flag not implemented [ 431.669963][T25398] Symlink component flag not implemented [ 431.677664][T25398] Symlink component flag not implemented (7) [ 431.683750][T25398] Symlink component flag not implemented (116) [ 431.684072][T25402] loop6: detected capacity change from 0 to 164 [ 431.699909][T25402] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 431.709075][T25402] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 431.724257][T25404] loop3: detected capacity change from 0 to 1024 [ 431.730830][T25402] Symlink component flag not implemented [ 431.736526][T25402] Symlink component flag not implemented [ 431.792447][T25410] loop3: detected capacity change from 0 to 512 [ 431.799059][T25410] EXT4-fs: Ignoring removed mblk_io_submit option [ 431.806002][T25402] Symlink component flag not implemented (7) [ 431.812092][T25402] Symlink component flag not implemented (116) [ 431.827438][T25415] loop2: detected capacity change from 0 to 164 [ 431.834100][T25410] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 431.843646][T25415] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 431.843882][T25410] EXT4-fs (loop3): orphan cleanup on readonly fs [ 431.858605][T25410] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 431.875154][T25415] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 431.875164][T25410] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 431.893672][T25415] Symlink component flag not implemented [ 431.899354][T25415] Symlink component flag not implemented [ 431.905544][T25410] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7286: bg 0: block 40: padding at end of block bitmap is not set [ 431.919866][T25415] Symlink component flag not implemented (7) [ 431.925915][T25415] Symlink component flag not implemented (116) [ 431.932036][T25410] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 431.932380][T25410] EXT4-fs (loop3): 1 truncate cleaned up [ 431.949104][T25410] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 432.006218][T25420] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 432.018904][T25422] loop2: detected capacity change from 0 to 512 [ 432.028008][T25422] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 432.043501][T23256] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.054241][T25422] +}[@: attempt to access beyond end of device [ 432.054241][T25422] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 432.068552][T25422] EXT4-fs (loop2): couldn't read superblock of external journal [ 432.079002][T25424] __nla_validate_parse: 25 callbacks suppressed [ 432.079019][T25424] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7291'. [ 432.085730][T25426] loop6: detected capacity change from 0 to 512 [ 432.120063][T25426] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 432.128325][T25426] System zones: 0-2, 18-18, 34-35 [ 432.134039][T25426] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 432.154564][T25433] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7295'. [ 432.182940][T25435] ip6gretap1: entered allmulticast mode [ 432.207136][T24642] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.221747][T25428] loop3: detected capacity change from 0 to 2048 [ 432.245640][T25438] loop6: detected capacity change from 0 to 512 [ 432.269474][T25438] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 432.287383][T25438] System zones: 0-2, 18-18, 34-35 [ 432.293172][T25438] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 432.302292][T25428] loop3: unable to read partition table [ 432.314587][T25428] loop3: partition table beyond EOD, truncated [ 432.320839][T25428] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 432.376619][T25444] netlink: 'syz.0.7299': attribute type 39 has an invalid length. [ 432.389409][T24642] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.395008][T25448] loop5: detected capacity change from 0 to 164 [ 432.425701][T25448] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 432.434873][T25448] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 432.445644][T25448] Symlink component flag not implemented [ 432.451332][T25448] Symlink component flag not implemented [ 432.466031][T25448] Symlink component flag not implemented (7) [ 432.472099][T25448] Symlink component flag not implemented (116) [ 432.493269][T25450] xt_TPROXY: Can be used only with -p tcp or -p udp [ 432.533300][T25458] loop3: detected capacity change from 0 to 164 [ 432.575808][T25461] loop2: detected capacity change from 0 to 2048 [ 432.582396][T25458] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 432.593395][T25458] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 432.608583][T25458] Symlink component flag not implemented [ 432.614347][T25458] Symlink component flag not implemented [ 432.620844][T25458] Symlink component flag not implemented (7) [ 432.626870][T25458] Symlink component flag not implemented (116) [ 432.636963][T25465] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7309'. [ 432.647311][T25461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 432.685911][T25461] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 432.693056][T25470] ip6gretap1: entered allmulticast mode [ 432.720119][T22511] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 432.913650][T25486] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 433.035984][T25498] loop6: detected capacity change from 0 to 2048 [ 433.070943][T25499] loop5: detected capacity change from 0 to 2048 [ 433.080370][T25503] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7325'. [ 433.091774][T25498] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.115580][T25510] blktrace: Concurrent blktraces are not allowed on sg0 [ 433.139017][T25498] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 433.194369][T25499] loop5: unable to read partition table [ 433.200264][T25499] loop5: partition table beyond EOD, truncated [ 433.206445][T25499] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 433.298637][T24642] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.311757][T25514] loop2: detected capacity change from 0 to 512 [ 433.314299][T25527] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7336'. [ 433.329020][T25514] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 433.340531][T25527] netem: change failed [ 433.346101][T25514] System zones: 0-2, 18-18, 34-35 [ 433.351951][T25514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 433.397713][T22511] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.457148][T25538] blktrace: Concurrent blktraces are not allowed on sg0 [ 433.480306][T25540] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7341'. [ 433.518327][T25541] loop3: detected capacity change from 0 to 2048 [ 433.655921][ T29] kauditd_printk_skb: 2309 callbacks suppressed [ 433.655935][ T29] audit: type=1326 audit(1746738563.078:73266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25553 comm="syz.6.7346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30dfc0e969 code=0x7ffc0000 [ 433.658102][T25555] loop6: detected capacity change from 0 to 164 [ 433.689699][ T29] audit: type=1326 audit(1746738563.078:73267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25553 comm="syz.6.7346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30dfc0e969 code=0x7ffc0000 [ 433.715770][ T29] audit: type=1326 audit(1746738563.078:73268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25553 comm="syz.6.7346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f30dfc0e969 code=0x7ffc0000 [ 433.726936][T25558] loop5: detected capacity change from 0 to 164 [ 433.739687][ T29] audit: type=1326 audit(1746738563.078:73269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25553 comm="syz.6.7346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30dfc0e969 code=0x7ffc0000 [ 433.769401][ T29] audit: type=1326 audit(1746738563.078:73270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25553 comm="syz.6.7346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30dfc0e969 code=0x7ffc0000 [ 433.776430][T25557] loop2: detected capacity change from 0 to 1024 [ 433.793023][ T29] audit: type=1326 audit(1746738563.078:73271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25553 comm="syz.6.7346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f30dfc0e969 code=0x7ffc0000 [ 433.802643][T25555] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 433.822887][ T29] audit: type=1326 audit(1746738563.078:73272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25553 comm="syz.6.7346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30dfc0e969 code=0x7ffc0000 [ 433.854792][ T29] audit: type=1326 audit(1746738563.078:73273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25553 comm="syz.6.7346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f30dfc0e969 code=0x7ffc0000 [ 433.855389][T25557] EXT4-fs: inline encryption not supported [ 433.878396][ T29] audit: type=1326 audit(1746738563.078:73274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25553 comm="syz.6.7346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f30dfc0e9a3 code=0x7ffc0000 [ 433.878430][ T29] audit: type=1326 audit(1746738563.078:73275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25553 comm="syz.6.7346" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f30dfc0d41f code=0x7ffc0000 [ 433.932773][T25558] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 433.933043][T25555] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 433.944008][T25557] EXT4-fs: Ignoring removed bh option [ 433.951625][T25541] loop3: unable to read partition table [ 433.954774][T25558] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 433.960830][T25541] loop3: partition table beyond EOD, truncated [ 433.969984][T25558] Symlink component flag not implemented [ 433.974858][T25541] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 433.980441][T25558] Symlink component flag not implemented [ 433.996103][T25558] Symlink component flag not implemented (7) [ 434.002238][T25558] Symlink component flag not implemented (116) [ 434.009225][T25555] Symlink component flag not implemented [ 434.014995][T25555] Symlink component flag not implemented [ 434.029948][T25555] Symlink component flag not implemented (7) [ 434.032145][T25557] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 434.035968][T25555] Symlink component flag not implemented (116) [ 434.104435][T25569] blktrace: Concurrent blktraces are not allowed on sg0 [ 434.122491][T22511] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.139553][T25571] xt_TPROXY: Can be used only with -p tcp or -p udp [ 434.201670][T25579] blktrace: Concurrent blktraces are not allowed on sg0 [ 434.264850][T25583] loop3: detected capacity change from 0 to 512 [ 434.320104][T25583] EXT4-fs: Ignoring removed mblk_io_submit option [ 434.359930][T25583] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 434.388304][T25583] EXT4-fs (loop3): orphan cleanup on readonly fs [ 434.398528][T25583] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 434.455006][T25583] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 434.486341][T25583] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7358: bg 0: block 40: padding at end of block bitmap is not set [ 434.516652][T25583] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 434.538585][T25583] EXT4-fs (loop3): 1 truncate cleaned up [ 434.555616][T25583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 434.604684][T23256] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.657463][T25606] loop3: detected capacity change from 0 to 512 [ 434.666882][T25606] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 434.675143][T25606] System zones: 0-2, 18-18, 34-35 [ 434.680785][T25606] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 434.682808][T25609] blktrace: Concurrent blktraces are not allowed on sg0 [ 434.739248][T23256] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.799157][T25616] loop3: detected capacity change from 0 to 164 [ 434.806833][T25616] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 434.815589][T25616] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 434.824101][T25616] Symlink component flag not implemented [ 434.829848][T25616] Symlink component flag not implemented [ 434.835755][T25616] Symlink component flag not implemented (7) [ 434.841788][T25616] Symlink component flag not implemented (116) [ 434.919051][T25620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7370'. [ 434.928125][T25620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7370'. [ 434.937223][T25620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7370'. [ 434.957637][T25620] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7370'. [ 435.015108][T25629] loop3: detected capacity change from 0 to 128 [ 435.042832][T25629] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 435.129475][T25636] loop5: detected capacity change from 0 to 512 [ 435.137355][T25636] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 435.153255][T25636] EXT4-fs (loop5): 1 truncate cleaned up [ 435.159550][T25636] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.260961][T22927] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.504100][T25674] loop5: detected capacity change from 0 to 512 [ 435.511926][T25674] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 435.531870][T25674] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 435.544746][T25674] ext4 filesystem being mounted at /176/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 435.687637][T22927] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.710063][T25680] loop5: detected capacity change from 0 to 512 [ 435.717300][T25680] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 435.726233][T25680] +}[@: attempt to access beyond end of device [ 435.726233][T25680] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 435.738623][T25680] EXT4-fs (loop5): couldn't read superblock of external journal [ 435.886057][T25692] loop5: detected capacity change from 0 to 164 [ 435.903379][T25696] loop3: detected capacity change from 0 to 164 [ 435.912031][T25692] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 435.921430][T25696] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 435.933969][T25696] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 435.943255][T25692] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 435.949712][T25696] Symlink component flag not implemented [ 435.957207][T25696] Symlink component flag not implemented [ 435.960965][T25692] Symlink component flag not implemented [ 435.963498][T25696] Symlink component flag not implemented (7) [ 435.968505][T25692] Symlink component flag not implemented [ 435.968549][T25692] Symlink component flag not implemented (7) [ 435.974536][T25696] Symlink component flag not implemented (116) [ 435.980210][T25692] Symlink component flag not implemented (116) [ 436.045967][T25705] loop3: detected capacity change from 0 to 512 [ 436.055519][T25705] EXT4-fs: Ignoring removed mblk_io_submit option [ 436.071182][T25705] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 436.099555][T25705] EXT4-fs (loop3): orphan cleanup on readonly fs [ 436.113807][T25705] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 436.128696][T25705] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 436.137172][T25705] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7402: bg 0: block 40: padding at end of block bitmap is not set [ 436.154018][T25705] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 436.195091][T25711] netlink: 'syz.5.7403': attribute type 39 has an invalid length. [ 436.209865][T25705] EXT4-fs (loop3): 1 truncate cleaned up [ 436.215962][T25705] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 436.251378][T23256] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 436.335977][T25720] loop3: detected capacity change from 0 to 164 [ 436.344516][T25720] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 436.354935][T25720] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 436.364465][T25720] Symlink component flag not implemented [ 436.370185][T25720] Symlink component flag not implemented [ 436.379617][T25720] Symlink component flag not implemented (7) [ 436.385712][T25720] Symlink component flag not implemented (116) [ 436.404428][T25725] loop6: detected capacity change from 0 to 512 [ 436.412822][T25725] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 436.443120][T25725] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.462000][T25725] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 436.589059][T25742] netlink: 'syz.3.7415': attribute type 39 has an invalid length. [ 436.778219][T25753] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 436.793479][T25755] loop3: detected capacity change from 0 to 512 [ 436.811625][T25755] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 436.833843][T25751] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 436.849821][T25755] +}[@: attempt to access beyond end of device [ 436.849821][T25755] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 436.864464][T25758] loop5: detected capacity change from 0 to 512 [ 436.874404][T25755] EXT4-fs (loop3): couldn't read superblock of external journal [ 436.875055][T25758] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 436.932353][T25758] EXT4-fs (loop5): 1 truncate cleaned up [ 436.938554][T25758] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 436.978637][T25761] blktrace: Concurrent blktraces are not allowed on sg0 [ 437.005629][T25763] xt_TPROXY: Can be used only with -p tcp or -p udp [ 437.063747][T22927] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.114833][T25765] __nla_validate_parse: 15 callbacks suppressed [ 437.114851][T25765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7425'. [ 437.120795][T25775] loop5: detected capacity change from 0 to 512 [ 437.121194][T25765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7425'. [ 437.132284][T25775] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 437.152894][T25765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7425'. [ 437.175568][T25775] EXT4-fs (loop5): 1 truncate cleaned up [ 437.181814][T25775] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.257599][T25784] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7431'. [ 437.287380][T24642] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.330085][T22927] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.344970][T25792] blktrace: Concurrent blktraces are not allowed on sg0 [ 437.391413][T25797] loop5: detected capacity change from 0 to 512 [ 437.404765][T25799] loop3: detected capacity change from 0 to 164 [ 437.420628][T25797] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 437.437291][T25799] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 437.457767][T25797] EXT4-fs (loop5): 1 truncate cleaned up [ 437.466188][T25799] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 437.469839][T25806] loop2: detected capacity change from 0 to 164 [ 437.475295][T25797] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 437.485771][T25799] Symlink component flag not implemented [ 437.499030][T25799] Symlink component flag not implemented [ 437.506118][T25799] Symlink component flag not implemented (7) [ 437.512264][T25799] Symlink component flag not implemented (116) [ 437.521616][T25806] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 437.543346][T25806] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 437.558958][T25806] Symlink component flag not implemented [ 437.564699][T25806] Symlink component flag not implemented [ 437.571232][T25806] Symlink component flag not implemented (7) [ 437.577336][T25806] Symlink component flag not implemented (116) [ 437.607403][T22927] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.636584][T25816] loop6: detected capacity change from 0 to 164 [ 437.653231][T25816] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 437.666277][T25816] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 437.674727][T25816] Symlink component flag not implemented [ 437.680460][T25816] Symlink component flag not implemented [ 437.686276][T25816] Symlink component flag not implemented (7) [ 437.692328][T25816] Symlink component flag not implemented (116) [ 437.751579][T25829] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 437.768606][T25830] loop3: detected capacity change from 0 to 2048 [ 437.814857][T25833] loop6: detected capacity change from 0 to 512 [ 437.840348][T25833] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 437.858660][T25833] System zones: 0-2, 18-18, 34-35 [ 437.870196][T25833] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 437.939031][T24642] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 437.975349][T25841] loop5: detected capacity change from 0 to 512 [ 437.982738][T25841] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 437.984741][T25830] loop3: unable to read partition table [ 438.006321][T25830] loop3: partition table beyond EOD, truncated [ 438.012916][T25830] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 438.015657][T25844] loop6: detected capacity change from 0 to 164 [ 438.031164][T25841] EXT4-fs (loop5): 1 truncate cleaned up [ 438.042987][T25844] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 438.060088][T25841] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.091586][T25844] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 438.114220][T25850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7459'. [ 438.123200][T25850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7459'. [ 438.145642][T25844] Symlink component flag not implemented [ 438.151360][T25844] Symlink component flag not implemented [ 438.176946][T25844] Symlink component flag not implemented (7) [ 438.183098][T25844] Symlink component flag not implemented (116) [ 438.189468][T25850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7459'. [ 438.217581][T25850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7459'. [ 438.226573][T25850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7459'. [ 438.241355][T25850] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7459'. [ 438.253754][T22927] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.262771][T25863] xt_TPROXY: Can be used only with -p tcp or -p udp [ 438.292148][T25865] loop6: detected capacity change from 0 to 1024 [ 438.299155][T25865] EXT4-fs: inline encryption not supported [ 438.307174][T25865] EXT4-fs: Ignoring removed bh option [ 438.316502][T25866] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 438.338365][T25865] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.422452][T25880] ip6gretap1: entered allmulticast mode [ 438.463825][T24642] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.600715][T25897] loop6: detected capacity change from 0 to 2048 [ 438.609240][T25896] loop5: detected capacity change from 0 to 512 [ 438.616596][T25896] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 438.660077][ T29] kauditd_printk_skb: 1430 callbacks suppressed [ 438.660162][ T29] audit: type=1326 audit(1746738568.078:74704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25881 comm="syz.0.7470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7180e969 code=0x7ffc0000 [ 438.690122][ T29] audit: type=1326 audit(1746738568.078:74705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25885 comm="syz.6.7471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30dfc0e969 code=0x7ffc0000 [ 438.713820][ T29] audit: type=1326 audit(1746738568.078:74706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25881 comm="syz.0.7470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7180e969 code=0x7ffc0000 [ 438.737436][ T29] audit: type=1326 audit(1746738568.088:74707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25885 comm="syz.6.7471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30dfc0e969 code=0x7ffc0000 [ 438.751907][T25896] EXT4-fs (loop5): 1 truncate cleaned up [ 438.761046][ T29] audit: type=1326 audit(1746738568.088:74708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25885 comm="syz.6.7471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30dfc0e969 code=0x7ffc0000 [ 438.761075][ T29] audit: type=1326 audit(1746738568.088:74709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25885 comm="syz.6.7471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30dfc0e969 code=0x7ffc0000 [ 438.776759][T25897] loop6: unable to read partition table [ 438.829770][T25896] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.837149][ T29] audit: type=1326 audit(1746738568.088:74710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25881 comm="syz.0.7470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7180e969 code=0x7ffc0000 [ 438.854524][T25897] loop6: partition table beyond EOD, truncated [ 438.865822][ T29] audit: type=1326 audit(1746738568.088:74711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25881 comm="syz.0.7470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7180e969 code=0x7ffc0000 [ 438.872038][T25897] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 438.895584][ T29] audit: type=1326 audit(1746738568.088:74712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25881 comm="syz.0.7470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7180e969 code=0x7ffc0000 [ 438.927177][ T29] audit: type=1326 audit(1746738568.088:74713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25881 comm="syz.0.7470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a7180e969 code=0x7ffc0000 [ 438.993719][T22927] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.024690][T25906] loop5: detected capacity change from 0 to 512 [ 439.044765][T25906] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 439.055451][T25906] System zones: 0-2, 18-18, 34-35 [ 439.071949][T25906] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 439.088074][T25911] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 439.094689][T25911] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 439.102221][T25911] vhci_hcd vhci_hcd.0: Device attached [ 439.174250][T22927] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.263353][T25922] loop5: detected capacity change from 0 to 512 [ 439.279540][ T3389] vhci_hcd: vhci_device speed not set [ 439.291365][T25922] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 439.316158][T25922] syz.5.7482: attempt to access beyond end of device [ 439.316158][T25922] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 439.344770][ T3389] usb 5-1: new full-speed USB device number 6 using vhci_hcd [ 439.345107][T25926] loop6: detected capacity change from 0 to 1024 [ 439.373749][T25926] EXT4-fs: inline encryption not supported [ 439.389649][T25926] EXT4-fs: Ignoring removed bh option [ 439.410779][T25922] EXT4-fs (loop5): couldn't read superblock of external journal [ 439.449987][T25926] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.526812][T25935] xt_TPROXY: Can be used only with -p tcp or -p udp [ 439.534313][T24642] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.844327][T25941] blktrace: Concurrent blktraces are not allowed on sg0 [ 439.922680][T25913] vhci_hcd: connection reset by peer [ 439.922898][T25944] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 439.951406][ T328] vhci_hcd: stop threads [ 439.955732][ T328] vhci_hcd: release socket [ 439.960185][ T328] vhci_hcd: disconnect device [ 440.134628][T25955] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 440.256198][T25964] loop3: detected capacity change from 0 to 1024 [ 440.270187][T25964] EXT4-fs: inline encryption not supported [ 440.282952][T25964] EXT4-fs: Ignoring removed bh option [ 440.301668][T25967] loop6: detected capacity change from 0 to 128 [ 440.320480][T25964] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.333310][T25967] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 440.380787][T25977] netlink: 'syz.3.7503': attribute type 39 has an invalid length. [ 440.616550][T25997] loop2: detected capacity change from 0 to 512 [ 440.639039][T25997] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 440.687673][T25997] System zones: 0-2, 18-18, 34-35 [ 440.699337][T26001] loop5: detected capacity change from 0 to 1024 [ 440.707540][T26001] EXT4-fs: inline encryption not supported [ 440.725296][T26001] EXT4-fs: Ignoring removed bh option [ 440.816878][T26010] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 440.823492][T26010] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 440.830988][T26010] vhci_hcd vhci_hcd.0: Device attached [ 440.854023][T26018] blktrace: Concurrent blktraces are not allowed on sg0 [ 440.885132][T26022] loop2: detected capacity change from 0 to 512 [ 440.897154][T26022] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 440.913383][T26022] EXT4-fs (loop2): 1 truncate cleaned up [ 440.961110][T26030] blktrace: Concurrent blktraces are not allowed on sg0 [ 441.019571][ T3452] vhci_hcd: vhci_device speed not set [ 441.089639][ T3452] usb 1-1: new full-speed USB device number 7 using vhci_hcd [ 441.171859][T26043] netem: change failed [ 441.202962][T26045] loop6: detected capacity change from 0 to 1024 [ 441.224158][T26045] EXT4-fs: inline encryption not supported [ 441.237777][T26045] EXT4-fs: Ignoring removed bh option [ 441.490276][T26064] netlink: 'syz.6.7535': attribute type 39 has an invalid length. [ 441.505047][T26067] blktrace: Concurrent blktraces are not allowed on sg0 [ 441.659002][T26014] vhci_hcd: connection reset by peer [ 441.670667][ T4278] vhci_hcd: stop threads [ 441.674963][ T4278] vhci_hcd: release socket [ 441.679471][ T4278] vhci_hcd: disconnect device [ 441.828080][T26076] loop6: detected capacity change from 0 to 1024 [ 441.835076][T26076] EXT4-fs: inline encryption not supported [ 441.848061][T26076] EXT4-fs: Ignoring removed bh option [ 441.876174][T26082] loop5: detected capacity change from 0 to 1024 [ 441.912175][T26082] EXT4-fs: inline encryption not supported [ 441.942723][T26082] EXT4-fs: Ignoring removed bh option [ 442.033224][T26095] netlink: 'syz.5.7545': attribute type 39 has an invalid length. [ 442.129347][T26104] loop6: detected capacity change from 0 to 512 [ 442.138784][T26104] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 442.148867][T26104] syz.6.7548: attempt to access beyond end of device [ 442.148867][T26104] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 442.179584][T26104] EXT4-fs (loop6): couldn't read superblock of external journal [ 442.200295][T26107] loop3: detected capacity change from 0 to 512 [ 442.201488][T26110] loop5: detected capacity change from 0 to 1024 [ 442.214306][T26107] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 442.220264][T26110] EXT4-fs: inline encryption not supported [ 442.232194][T26107] EXT4-fs (loop3): 1 truncate cleaned up [ 442.238742][T26110] EXT4-fs: Ignoring removed bh option [ 442.382353][T26126] loop2: detected capacity change from 0 to 512 [ 442.389164][T26126] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 442.403837][T26126] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.7555: invalid block [ 442.427893][T26129] ip6gretap1: entered allmulticast mode [ 442.446509][T26126] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.7555: invalid indirect mapped block 4294967295 (level 1) [ 442.500172][T26126] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.7555: invalid indirect mapped block 4294967295 (level 1) [ 442.533958][T26126] EXT4-fs (loop2): 2 truncates cleaned up [ 442.545009][T26126] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.7555: bg 0: block 5: invalid block bitmap [ 442.568762][T26138] netlink: 'syz.6.7560': attribute type 39 has an invalid length. [ 442.649598][T26144] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 442.656172][T26144] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 442.663679][T26144] vhci_hcd vhci_hcd.0: Device attached [ 442.675199][T26150] loop3: detected capacity change from 0 to 1024 [ 442.691565][T26150] EXT4-fs: inline encryption not supported [ 442.697562][T26150] EXT4-fs: Ignoring removed bh option [ 442.712594][T26155] loop5: detected capacity change from 0 to 512 [ 442.719128][T26152] loop6: detected capacity change from 0 to 512 [ 442.730587][T26152] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 442.740385][T26155] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 442.748463][T26155] System zones: 0-2, 18-18, 34-35 [ 442.751964][T26152] EXT4-fs (loop6): 1 truncate cleaned up [ 442.764321][T26159] loop2: detected capacity change from 0 to 164 [ 442.786170][T26159] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 442.806312][T26164] __nla_validate_parse: 16 callbacks suppressed [ 442.806332][T26164] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7568'. [ 442.823766][T26159] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 442.833699][T26159] Symlink component flag not implemented [ 442.839349][T26159] Symlink component flag not implemented [ 442.879574][T26159] Symlink component flag not implemented (7) [ 442.885653][T26159] Symlink component flag not implemented (116) [ 442.921968][T26171] loop3: detected capacity change from 0 to 164 [ 442.930295][T26171] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 442.944347][T26171] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 442.955421][T26175] loop6: detected capacity change from 0 to 512 [ 442.963103][T26173] loop5: detected capacity change from 0 to 512 [ 442.970205][T26171] Symlink component flag not implemented [ 442.975926][T26171] Symlink component flag not implemented [ 442.982946][T26171] Symlink component flag not implemented (7) [ 442.988962][T26171] Symlink component flag not implemented (116) [ 442.989080][T26177] loop2: detected capacity change from 0 to 512 [ 443.004274][T26173] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 443.005952][T26177] EXT4-fs: Ignoring removed mblk_io_submit option [ 443.016558][T26175] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 443.031483][T26173] +}[@: attempt to access beyond end of device [ 443.031483][T26173] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 443.045278][T26173] EXT4-fs (loop5): couldn't read superblock of external journal [ 443.051801][T26175] EXT4-fs (loop6): failed to open journal device unknown-block(9,185) -16 [ 443.074121][T26177] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 443.082329][T26177] EXT4-fs (loop2): orphan cleanup on readonly fs [ 443.092405][T26177] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 443.118931][T26177] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 443.130112][T26177] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7573: bg 0: block 40: padding at end of block bitmap is not set [ 443.150500][T26177] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 443.174038][T26177] EXT4-fs (loop2): 1 truncate cleaned up [ 443.314901][T26199] loop2: detected capacity change from 0 to 512 [ 443.367827][T26199] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 443.386186][T26205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7584'. [ 443.395135][T26205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7584'. [ 443.404188][T26205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7584'. [ 443.476924][T26148] vhci_hcd: connection closed [ 443.478377][T26199] EXT4-fs (loop2): 1 truncate cleaned up [ 443.489215][ T4276] vhci_hcd: stop threads [ 443.493508][ T4276] vhci_hcd: release socket [ 443.497954][ T4276] vhci_hcd: disconnect device [ 443.502873][T26205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7584'. [ 443.511806][T26205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7584'. [ 443.527268][T26205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7584'. [ 443.581515][T26205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7584'. [ 443.590538][T26205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7584'. [ 443.601152][T26205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7584'. [ 443.653622][T26213] loop3: detected capacity change from 0 to 512 [ 443.684970][T26213] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 443.697168][ T29] kauditd_printk_skb: 1119 callbacks suppressed [ 443.697182][ T29] audit: type=1326 audit(1746738573.118:75832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26217 comm="syz.6.7587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30dfc0e969 code=0x7ffc0000 [ 443.730089][T26213] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.7585: invalid block [ 443.743656][T26213] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.7585: invalid indirect mapped block 4294967295 (level 1) [ 443.757734][ T29] audit: type=1326 audit(1746738573.148:75833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26217 comm="syz.6.7587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30dfc0e969 code=0x7ffc0000 [ 443.781356][ T29] audit: type=1326 audit(1746738573.178:75834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26217 comm="syz.6.7587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30dfc0e969 code=0x7ffc0000 [ 443.805074][ T29] audit: type=1326 audit(1746738573.178:75835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26217 comm="syz.6.7587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30dfc0e969 code=0x7ffc0000 [ 443.823419][T26213] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.7585: invalid indirect mapped block 4294967295 (level 1) [ 443.828649][ T29] audit: type=1326 audit(1746738573.178:75836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26217 comm="syz.6.7587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30dfc0e969 code=0x7ffc0000 [ 443.866328][ T29] audit: type=1326 audit(1746738573.178:75837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26217 comm="syz.6.7587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30dfc0e969 code=0x7ffc0000 [ 443.872200][T26213] EXT4-fs (loop3): 2 truncates cleaned up [ 443.890332][ T29] audit: type=1326 audit(1746738573.178:75838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26217 comm="syz.6.7587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30dfc0e969 code=0x7ffc0000 [ 443.919484][ T29] audit: type=1326 audit(1746738573.208:75839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26217 comm="syz.6.7587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30dfc0e969 code=0x7ffc0000 [ 443.966916][ T29] audit: type=1326 audit(1746738573.368:75840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26217 comm="syz.6.7587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30dfc0e969 code=0x7ffc0000 [ 443.990588][ T29] audit: type=1326 audit(1746738573.368:75841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26217 comm="syz.6.7587" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30dfc0e969 code=0x7ffc0000 [ 444.018100][T26213] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.7585: bg 0: block 5: invalid block bitmap [ 444.050685][T26218] loop6: detected capacity change from 0 to 1024 [ 444.107295][T26226] loop6: detected capacity change from 0 to 512 [ 444.114575][T26226] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 444.131805][T26228] netem: change failed [ 444.144589][T26233] loop3: detected capacity change from 0 to 512 [ 444.154765][T26233] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 444.164968][T26226] EXT4-fs (loop6): 1 truncate cleaned up [ 444.165898][T26233] syz.3.7592: attempt to access beyond end of device [ 444.165898][T26233] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 444.183747][T26233] EXT4-fs (loop3): couldn't read superblock of external journal [ 444.217842][T26238] netlink: 'syz.5.7595': attribute type 39 has an invalid length. [ 444.251896][T26240] loop3: detected capacity change from 0 to 512 [ 444.263359][T26240] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 444.284373][T26243] blktrace: Concurrent blktraces are not allowed on sg0 [ 444.293880][T26240] EXT4-fs (loop3): 1 truncate cleaned up [ 444.315972][T26247] loop6: detected capacity change from 0 to 512 [ 444.349611][T26247] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 444.363966][T26247] System zones: 0-2, 18-18, 34-35 [ 444.382680][T26253] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=41664 sclass=netlink_route_socket pid=26253 comm=syz.5.7599 [ 444.396894][ T3389] usb 5-1: enqueue for inactive port 0 [ 444.403938][ T3389] usb 5-1: enqueue for inactive port 0 [ 444.428079][T26257] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 444.434670][T26257] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 444.442103][T26257] vhci_hcd vhci_hcd.0: Device attached [ 444.480949][ T3389] vhci_hcd: vhci_device speed not set [ 444.535113][T26272] loop5: detected capacity change from 0 to 512 [ 444.608128][T26272] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 444.619562][ T36] vhci_hcd: vhci_device speed not set [ 444.623112][T26272] EXT4-fs (loop5): 1 truncate cleaned up [ 444.634173][T26279] loop2: detected capacity change from 0 to 512 [ 444.654102][T26279] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 444.679643][ T36] usb 7-1: new full-speed USB device number 7 using vhci_hcd [ 444.689414][T26279] EXT4-fs error (device loop2): ext4_get_branch:178: inode #11: block 4294967295: comm syz.2.7610: invalid block [ 444.713418][T26279] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.7610: invalid indirect mapped block 4294967295 (level 1) [ 444.738345][T26279] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.7610: invalid indirect mapped block 4294967295 (level 1) [ 444.758163][T26286] loop5: detected capacity change from 0 to 164 [ 444.765760][T26286] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 444.775649][T26279] EXT4-fs (loop2): 2 truncates cleaned up [ 444.782376][T26286] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 444.795852][T26279] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.7610: bg 0: block 5: invalid block bitmap [ 444.808409][T26286] Symlink component flag not implemented [ 444.814195][T26286] Symlink component flag not implemented [ 444.828269][T26286] Symlink component flag not implemented (7) [ 444.834347][T26286] Symlink component flag not implemented (116) [ 444.912694][T26295] netem: change failed [ 444.972121][T26305] loop2: detected capacity change from 0 to 512 [ 444.980455][T26305] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 444.996403][T26305] syz.2.7620: attempt to access beyond end of device [ 444.996403][T26305] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 445.009739][T26305] EXT4-fs (loop2): couldn't read superblock of external journal [ 445.158386][T26319] loop2: detected capacity change from 0 to 1024 [ 445.184795][T26319] EXT4-fs: Ignoring removed orlov option [ 445.204652][T26319] EXT4-fs (loop2): stripe (129) is not aligned with cluster size (16), stripe is disabled [ 445.242998][T26323] loop5: detected capacity change from 0 to 164 [ 445.250476][T26323] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 445.264774][T26258] vhci_hcd: connection reset by peer [ 445.280039][ T4276] vhci_hcd: stop threads [ 445.284317][ T4276] vhci_hcd: release socket [ 445.288816][ T4276] vhci_hcd: disconnect device [ 445.338995][T26323] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 445.364921][T26323] Symlink component flag not implemented [ 445.370685][T26323] Symlink component flag not implemented [ 445.391866][T26323] Symlink component flag not implemented (7) [ 445.398072][T26323] Symlink component flag not implemented (116) [ 445.507092][T26338] xt_TPROXY: Can be used only with -p tcp or -p udp [ 445.711885][T26354] loop2: detected capacity change from 0 to 512 [ 445.720142][T26354] EXT4-fs (loop2): external journal device major/minor numbers have changed [ 445.728892][T26354] +}[@: attempt to access beyond end of device [ 445.728892][T26354] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 445.742717][T26354] EXT4-fs (loop2): couldn't read superblock of external journal [ 445.758767][T26357] loop6: detected capacity change from 0 to 512 [ 445.780260][T26357] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 445.788731][T26357] System zones: 0-2, 18-18, 34-35 [ 445.825981][T26364] loop2: detected capacity change from 0 to 164 [ 445.835138][T26362] loop6: detected capacity change from 0 to 512 [ 445.843215][T26364] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 445.854989][T26362] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 445.865001][T26364] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 445.869847][T26362] syz.6.7643: attempt to access beyond end of device [ 445.869847][T26362] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 445.875055][T26364] Symlink component flag not implemented [ 445.886256][T26362] EXT4-fs (loop6): couldn't read superblock of external journal [ 445.891784][T26364] Symlink component flag not implemented [ 445.913500][T26364] Symlink component flag not implemented (7) [ 445.919665][T26364] Symlink component flag not implemented (116) [ 445.936646][T26373] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 445.972959][T26379] loop2: detected capacity change from 0 to 512 [ 445.986685][T26379] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 445.995169][T26379] System zones: 0-2, 18-18, 34-35 [ 446.009960][T26382] loop3: detected capacity change from 0 to 1024 [ 446.016816][T26382] EXT4-fs: inline encryption not supported [ 446.023059][T26382] EXT4-fs: Ignoring removed bh option [ 446.053572][T26393] loop6: detected capacity change from 0 to 512 [ 446.080502][T26393] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 446.090087][T26393] System zones: 0-2, 18-18, 34-35 [ 446.152841][ T3452] usb 1-1: enqueue for inactive port 0 [ 446.172395][ T3452] usb 1-1: enqueue for inactive port 0 [ 446.243995][T26405] loop3: detected capacity change from 0 to 512 [ 446.250383][ T3452] vhci_hcd: vhci_device speed not set [ 446.276337][T26405] EXT4-fs (loop3): external journal device major/minor numbers have changed [ 446.286168][T26407] loop6: detected capacity change from 0 to 164 [ 446.293022][T26405] syz.3.7659: attempt to access beyond end of device [ 446.293022][T26405] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 446.307095][T26405] EXT4-fs (loop3): couldn't read superblock of external journal [ 446.315197][T26407] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 446.373944][T26411] loop6: detected capacity change from 0 to 512 [ 446.405416][T26411] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 446.417822][T26413] loop3: detected capacity change from 0 to 512 [ 446.428310][T26411] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.7662: invalid block [ 446.441816][T26411] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.7662: invalid indirect mapped block 4294967295 (level 1) [ 446.456057][T26411] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.7662: invalid indirect mapped block 4294967295 (level 1) [ 446.472516][T26411] EXT4-fs (loop6): 2 truncates cleaned up [ 446.481829][T26411] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.7662: bg 0: block 5: invalid block bitmap [ 446.499791][T26413] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 446.515907][T26413] System zones: 0-2, 18-18, 34-35 [ 446.548925][T26425] netlink: 'syz.6.7668': attribute type 39 has an invalid length. [ 446.621644][T26432] netem: change failed [ 446.659669][T26438] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 446.666230][T26438] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 446.673874][T26438] vhci_hcd vhci_hcd.0: Device attached [ 446.714559][T26449] loop6: detected capacity change from 0 to 512 [ 446.732117][T26449] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 446.740316][T26449] System zones: 0-2, 18-18, 34-35 [ 446.779165][T26456] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 446.873162][T26462] loop5: detected capacity change from 0 to 512 [ 446.919620][T26462] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 446.946648][T26462] EXT4-fs (loop5): 1 truncate cleaned up [ 447.020652][T26466] netlink: 'syz.0.7682': attribute type 39 has an invalid length. [ 447.093381][T26469] loop6: detected capacity change from 0 to 512 [ 447.109324][T26469] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 447.152756][T26469] ext4 filesystem being mounted at /109/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.184966][T26478] netem: change failed [ 447.317064][T26484] blktrace: Concurrent blktraces are not allowed on sg0 [ 447.377790][T26486] loop5: detected capacity change from 0 to 512 [ 447.412428][T26486] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 447.439557][T26486] System zones: 0-2, 18-18, 34-35 [ 447.521112][T26469] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 447.591430][T26495] blktrace: Concurrent blktraces are not allowed on sg0 [ 447.605655][T26441] vhci_hcd: connection closed [ 447.605819][ T4276] vhci_hcd: stop threads [ 447.614897][ T4276] vhci_hcd: release socket [ 447.619360][ T4276] vhci_hcd: disconnect device [ 447.630421][T26496] loop6: detected capacity change from 0 to 512 [ 447.637900][T26496] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 447.650218][T26496] EXT4-fs (loop6): 1 truncate cleaned up [ 447.650283][T26499] netlink: 'syz.0.7695': attribute type 39 has an invalid length. [ 447.693389][T26504] loop5: detected capacity change from 0 to 1024 [ 447.717505][T26504] EXT4-fs: inline encryption not supported [ 447.731403][T26504] EXT4-fs: Ignoring removed bh option [ 447.775260][T26510] netem: change failed [ 447.837578][T26516] blktrace: Concurrent blktraces are not allowed on sg0 [ 447.896508][T26522] loop5: detected capacity change from 0 to 1024 [ 447.967420][T26530] loop6: detected capacity change from 0 to 512 [ 447.987812][T26530] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 447.996086][T26530] System zones: 0-2, 18-18, 34-35 [ 448.047704][T26537] loop5: detected capacity change from 0 to 512 [ 448.069952][T26537] EXT4-fs: Ignoring removed mblk_io_submit option [ 448.092184][T26541] loop6: detected capacity change from 0 to 512 [ 448.101186][T26541] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 448.122707][T26541] EXT4-fs (loop6): 1 truncate cleaned up [ 448.130451][T26537] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 448.138522][T26537] EXT4-fs (loop5): orphan cleanup on readonly fs [ 448.163090][T26537] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 448.178001][T26537] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 448.189415][T26537] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7709: bg 0: block 40: padding at end of block bitmap is not set [ 448.205697][T26537] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 448.211888][T26547] netlink: 'syz.3.7712': attribute type 39 has an invalid length. [ 448.224193][T26537] EXT4-fs (loop5): 1 truncate cleaned up [ 448.275522][T26553] blktrace: Concurrent blktraces are not allowed on sg0 [ 448.382592][T26563] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 448.409530][T26557] loop5: detected capacity change from 0 to 2048 [ 448.489768][T26572] loop6: detected capacity change from 0 to 128 [ 448.502147][T26557] loop5: unable to read partition table [ 448.508356][T26572] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 448.514093][T26557] loop5: partition table beyond EOD, truncated [ 448.522713][T26557] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 448.595893][T26580] loop5: detected capacity change from 0 to 512 [ 448.608307][T26580] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 448.632304][T26580] EXT4-fs (loop5): 1 truncate cleaned up [ 448.694046][T26586] loop3: detected capacity change from 0 to 1024 [ 448.700807][T26586] EXT4-fs: inline encryption not supported [ 448.706919][T26586] EXT4-fs: Ignoring removed bh option [ 448.745158][T26592] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 448.767112][T26594] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 448.797033][T26600] __nla_validate_parse: 29 callbacks suppressed [ 448.797053][T26600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7732'. [ 448.812535][T26600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7732'. [ 448.823029][T26600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7732'. [ 448.840992][T26600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7732'. [ 448.849994][T26600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7732'. [ 448.858955][T26600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7732'. [ 448.889682][T26600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7732'. [ 448.898582][T26600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7732'. [ 448.909686][T26600] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7732'. [ 448.945353][T26610] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 449.043132][ T29] kauditd_printk_skb: 1325 callbacks suppressed [ 449.043147][ T29] audit: type=1326 audit(1746738578.468:77166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26614 comm="syz.3.7737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb603e969 code=0x7ffc0000 [ 449.073109][ T29] audit: type=1326 audit(1746738578.468:77167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26614 comm="syz.3.7737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb603e969 code=0x7ffc0000 [ 449.119087][T26615] loop3: detected capacity change from 0 to 164 [ 449.133808][ T29] audit: type=1326 audit(1746738578.538:77168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26614 comm="syz.3.7737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7faeb603e969 code=0x7ffc0000 [ 449.157504][ T29] audit: type=1326 audit(1746738578.538:77169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26614 comm="syz.3.7737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb603e969 code=0x7ffc0000 [ 449.181214][ T29] audit: type=1326 audit(1746738578.538:77170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26614 comm="syz.3.7737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb603e969 code=0x7ffc0000 [ 449.204810][ T29] audit: type=1326 audit(1746738578.538:77171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26614 comm="syz.3.7737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faeb603e969 code=0x7ffc0000 [ 449.228441][ T29] audit: type=1326 audit(1746738578.538:77172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26614 comm="syz.3.7737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb603e969 code=0x7ffc0000 [ 449.252168][ T29] audit: type=1326 audit(1746738578.538:77173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26614 comm="syz.3.7737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faeb603e969 code=0x7ffc0000 [ 449.275856][ T29] audit: type=1326 audit(1746738578.538:77174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26614 comm="syz.3.7737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7faeb603e969 code=0x7ffc0000 [ 449.299522][ T29] audit: type=1326 audit(1746738578.538:77175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26614 comm="syz.3.7737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7faeb603e9a3 code=0x7ffc0000 [ 449.303796][T26615] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 449.389594][T26619] loop2: detected capacity change from 0 to 1024 [ 449.413439][T26619] EXT4-fs: inline encryption not supported [ 449.429646][T26615] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 449.435750][T26623] loop6: detected capacity change from 0 to 512 [ 449.439834][T26619] EXT4-fs: Ignoring removed bh option [ 449.447930][T26623] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 449.457652][T26615] Symlink component flag not implemented [ 449.465022][T26615] Symlink component flag not implemented [ 449.473155][T26625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7741'. [ 449.484082][T26623] EXT4-fs (loop6): 1 truncate cleaned up [ 449.498376][T26625] ip6gretap1: entered allmulticast mode [ 449.504562][T26615] Symlink component flag not implemented (7) [ 449.510615][T26615] Symlink component flag not implemented (116) [ 449.612626][T26644] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 449.629143][T26639] xt_TPROXY: Can be used only with -p tcp or -p udp [ 449.651671][T26648] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 449.665450][T26646] loop5: detected capacity change from 0 to 1024 [ 449.672700][T26646] EXT4-fs: inline encryption not supported [ 449.683069][T26646] EXT4-fs: Ignoring removed bh option [ 449.722810][T26656] loop3: detected capacity change from 0 to 128 [ 449.757605][T26656] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 449.759650][ T36] usb 7-1: enqueue for inactive port 0 [ 449.777674][ T36] usb 7-1: enqueue for inactive port 0 [ 449.800406][T26662] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 449.859706][ T36] vhci_hcd: vhci_device speed not set [ 449.867905][T26672] loop6: detected capacity change from 0 to 512 [ 449.875524][T26672] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 449.898816][T26672] EXT4-fs (loop6): 1 truncate cleaned up [ 449.935209][T26680] loop5: detected capacity change from 0 to 512 [ 449.943140][T26680] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 449.956108][T26680] EXT4-fs (loop5): 1 truncate cleaned up [ 449.987429][T26683] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 450.050662][T26691] netem: change failed [ 450.081711][T26696] ip6gretap1: entered allmulticast mode [ 450.110729][T26700] loop5: detected capacity change from 0 to 512 [ 450.120117][T26700] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 450.139937][T26700] syz.5.7768: attempt to access beyond end of device [ 450.139937][T26700] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 450.163333][T26700] EXT4-fs (loop5): couldn't read superblock of external journal [ 450.237232][T26705] loop5: detected capacity change from 0 to 512 [ 450.244360][T26705] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 450.261560][T26705] ext4 filesystem being mounted at /289/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 450.281028][T26709] loop2: detected capacity change from 0 to 512 [ 450.288385][T26709] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 450.302705][T26709] EXT4-fs (loop2): 1 truncate cleaned up [ 450.496333][T26712] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 450.568442][T26723] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 450.612876][T26729] loop2: detected capacity change from 0 to 128 [ 450.619596][T26729] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 450.633103][T26731] netem: change failed [ 450.671964][T26740] blktrace: Concurrent blktraces are not allowed on sg0 [ 450.824259][T26749] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 450.929179][T26759] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 451.086440][T26767] netem: change failed [ 451.151373][T26774] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 451.202746][T26777] loop5: detected capacity change from 0 to 512 [ 451.224599][T26777] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 451.234451][T26777] syz.5.7797: attempt to access beyond end of device [ 451.234451][T26777] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 451.248842][T26777] EXT4-fs (loop5): couldn't read superblock of external journal [ 451.306848][T26784] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(7) [ 451.313458][T26784] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 451.320961][T26784] vhci_hcd vhci_hcd.0: Device attached [ 451.501142][T26797] loop6: detected capacity change from 0 to 512 [ 451.523007][T26800] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 451.529641][ T36] vhci_hcd: vhci_device speed not set [ 451.536425][T26797] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 451.544716][T26797] System zones: 0-2, 18-18, 34-35 [ 451.575922][T26803] loop3: detected capacity change from 0 to 512 [ 451.582605][T26803] EXT4-fs: Ignoring removed mblk_io_submit option [ 451.599766][ T36] usb 11-1: new full-speed USB device number 5 using vhci_hcd [ 451.674741][T26813] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 451.726519][T26803] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 451.736710][T26803] EXT4-fs (loop3): orphan cleanup on readonly fs [ 451.745292][T26803] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 451.761671][T26803] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 451.768800][T26803] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7807: bg 0: block 40: padding at end of block bitmap is not set [ 451.794363][T26803] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 451.809025][T26803] EXT4-fs (loop3): 1 truncate cleaned up [ 451.856479][T26821] blktrace: Concurrent blktraces are not allowed on sg0 [ 451.911069][T26826] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 451.957186][T26829] loop2: detected capacity change from 0 to 512 [ 451.978604][T26829] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 451.989405][T26829] System zones: 0-2, 18-18, 34-35 [ 452.104996][T26842] loop6: detected capacity change from 0 to 512 [ 452.117014][T26844] loop3: detected capacity change from 0 to 512 [ 452.123691][T26842] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 452.144318][T26785] vhci_hcd: connection reset by peer [ 452.150682][ T4278] vhci_hcd: stop threads [ 452.154981][ T4278] vhci_hcd: release socket [ 452.159411][ T4278] vhci_hcd: disconnect device [ 452.168507][T26846] loop2: detected capacity change from 0 to 512 [ 452.178185][T26842] EXT4-fs (loop6): 1 truncate cleaned up [ 452.185635][T26846] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 452.195975][T26844] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 452.224861][T26846] EXT4-fs (loop2): 1 truncate cleaned up [ 452.235274][T26844] System zones: 0-2, 18-18, 34-35 [ 452.276226][T26858] netem: change failed [ 452.317013][T26860] blktrace: Concurrent blktraces are not allowed on sg0 [ 452.512092][T26880] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 452.566430][ T4276] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.618778][T26885] loop3: detected capacity change from 0 to 512 [ 452.630768][T26883] xt_TPROXY: Can be used only with -p tcp or -p udp [ 452.640311][T26885] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 452.657358][ T4276] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.657478][T26889] loop2: detected capacity change from 0 to 512 [ 452.679311][T26885] EXT4-fs (loop3): 1 truncate cleaned up [ 452.707119][T26889] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 452.742182][ T4276] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.763595][T26889] System zones: 0-2, 18-18, 34-35 [ 452.834776][ T4276] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.898064][T26908] loop3: detected capacity change from 0 to 512 [ 452.905518][T26908] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 452.931308][T26908] EXT4-fs (loop3): 1 truncate cleaned up [ 452.970734][T26917] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 452.996509][ T4276] bridge_slave_1: left allmulticast mode [ 453.002298][ T4276] bridge_slave_1: left promiscuous mode [ 453.008037][ T4276] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.018972][ T4276] bridge_slave_0: left allmulticast mode [ 453.024741][ T4276] bridge_slave_0: left promiscuous mode [ 453.030708][ T4276] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.141819][ T4276] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 453.151413][ T4276] bond_slave_0: left allmulticast mode [ 453.158230][ T4276] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 453.169815][ T4276] bond_slave_1: left allmulticast mode [ 453.176066][ T4276] bond0 (unregistering): Released all slaves [ 453.210235][T26929] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 453.234030][ T4276] hsr_slave_0: left promiscuous mode [ 453.241046][ T4276] hsr_slave_1: left promiscuous mode [ 453.251835][ T4276] veth1_vlan: left promiscuous mode [ 453.261565][T26932] loop3: detected capacity change from 0 to 512 [ 453.267915][ T4276] veth0_vlan: left promiscuous mode [ 453.274870][T26932] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 453.298749][T26932] EXT4-fs (loop3): 1 truncate cleaned up [ 453.309900][T26940] loop5: detected capacity change from 0 to 164 [ 453.317239][T26940] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 453.327183][T26940] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 453.335661][T26940] Symlink component flag not implemented [ 453.341361][T26940] Symlink component flag not implemented [ 453.347144][T26940] Symlink component flag not implemented (7) [ 453.351360][T26941] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 453.353182][T26940] Symlink component flag not implemented (116) [ 453.389110][ T4276] team0 (unregistering): Port device team_slave_1 removed [ 453.401580][ T4276] team0 (unregistering): Port device team_slave_0 removed [ 453.412860][T26946] blktrace: Concurrent blktraces are not allowed on sg0 [ 453.487768][T26886] chnl_net:caif_netlink_parms(): no params data found [ 453.544614][T26886] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.551836][T26886] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.562743][T26886] bridge_slave_0: entered allmulticast mode [ 453.570569][T26958] loop6: detected capacity change from 0 to 512 [ 453.577169][T26886] bridge_slave_0: entered promiscuous mode [ 453.587451][T26886] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.594751][T26886] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.604919][T26886] bridge_slave_1: entered allmulticast mode [ 453.605532][T26958] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 453.612285][T26886] bridge_slave_1: entered promiscuous mode [ 453.619150][T26958] System zones: 0-2, 18-18, 34-35 [ 453.644819][T26886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.655686][T26886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.699152][T26886] team0: Port device team_slave_0 added [ 453.707318][T26964] blktrace: Concurrent blktraces are not allowed on sg0 [ 453.732069][T26886] team0: Port device team_slave_1 added [ 453.753922][T26968] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(10) [ 453.760568][T26968] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 453.768145][T26968] vhci_hcd vhci_hcd.0: Device attached [ 453.772168][T26974] loop2: detected capacity change from 0 to 512 [ 453.789241][T26974] EXT4-fs: Ignoring removed mblk_io_submit option [ 453.797133][T26886] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.804260][T26886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.830337][T26886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.849579][T26886] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.853956][T26977] loop6: detected capacity change from 0 to 512 [ 453.856549][T26886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.875282][T26977] EXT4-fs: Ignoring removed mblk_io_submit option [ 453.888692][T26886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.926653][T26974] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 453.935170][T26977] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 453.943430][T26974] EXT4-fs (loop2): orphan cleanup on readonly fs [ 453.949956][T26977] EXT4-fs (loop6): orphan cleanup on readonly fs [ 453.956720][T26886] hsr_slave_0: entered promiscuous mode [ 453.962698][ T3392] vhci_hcd: vhci_device speed not set [ 453.968441][T26974] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 453.983342][T26977] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 453.991384][T26974] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 453.998582][T26886] hsr_slave_1: entered promiscuous mode [ 454.014279][T26974] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.7870: bg 0: block 40: padding at end of block bitmap is not set [ 454.014382][T26886] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 454.014401][T26886] Cannot create hsr debugfs directory [ 454.043150][T26977] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 454.049580][ T3392] usb 7-1: new full-speed USB device number 8 using vhci_hcd [ 454.067716][T26977] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7871: bg 0: block 40: padding at end of block bitmap is not set [ 454.093520][ T29] kauditd_printk_skb: 755 callbacks suppressed [ 454.093540][ T29] audit: type=1326 audit(1746738583.518:77928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26985 comm="syz.5.7873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e96de969 code=0x7ffc0000 [ 454.129820][T26974] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 454.139032][T26977] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 454.141253][ T29] audit: type=1326 audit(1746738583.518:77929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26985 comm="syz.5.7873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e96de969 code=0x7ffc0000 [ 454.171341][ T29] audit: type=1326 audit(1746738583.518:77930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26985 comm="syz.5.7873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7ff3e96de969 code=0x7ffc0000 [ 454.195181][ T29] audit: type=1326 audit(1746738583.518:77931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26985 comm="syz.5.7873" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e96de969 code=0x7ffc0000 [ 454.224106][T26977] EXT4-fs (loop6): 1 truncate cleaned up [ 454.234676][T26974] EXT4-fs (loop2): 1 truncate cleaned up [ 454.300666][ T29] audit: type=1326 audit(1746738583.728:77932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26991 comm="syz.6.7875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30dfc0e969 code=0x7ffc0000 [ 454.324338][ T29] audit: type=1326 audit(1746738583.728:77933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26991 comm="syz.6.7875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30dfc0e969 code=0x7ffc0000 [ 454.381497][ T29] audit: type=1326 audit(1746738583.788:77934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26991 comm="syz.6.7875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f30dfc0e969 code=0x7ffc0000 [ 454.405141][ T29] audit: type=1326 audit(1746738583.788:77935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26991 comm="syz.6.7875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30dfc0e969 code=0x7ffc0000 [ 454.428862][ T29] audit: type=1326 audit(1746738583.788:77936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26991 comm="syz.6.7875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f30dfc0e969 code=0x7ffc0000 [ 454.452504][ T29] audit: type=1326 audit(1746738583.788:77937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26991 comm="syz.6.7875" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f30dfc0e969 code=0x7ffc0000 [ 454.537010][T26992] loop6: detected capacity change from 0 to 2048 [ 454.576829][T26886] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 454.602416][T26886] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 454.611688][T26886] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 454.621685][T26886] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 454.668662][T26992] loop6: unable to read partition table [ 454.682301][T26886] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.689533][T26992] loop6: partition table beyond EOD, truncated [ 454.695757][T26992] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 454.718624][T26886] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.743226][ T4276] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.750319][ T4276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.784197][ T4276] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.791389][ T4276] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.819060][T26969] vhci_hcd: connection reset by peer [ 454.827937][ T4276] vhci_hcd: stop threads [ 454.832276][ T4276] vhci_hcd: release socket [ 454.836726][ T4276] vhci_hcd: disconnect device [ 454.872250][T26998] blktrace: Concurrent blktraces are not allowed on sg0 [ 454.907705][T26886] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.002961][T27015] loop6: detected capacity change from 0 to 1024 [ 455.015518][T27015] EXT4-fs: inline encryption not supported [ 455.037109][T27015] EXT4-fs: Ignoring removed bh option [ 455.072202][T26886] veth0_vlan: entered promiscuous mode [ 455.092462][T26886] veth1_vlan: entered promiscuous mode [ 455.142919][T26886] veth0_macvtap: entered promiscuous mode [ 455.164403][T27037] loop5: detected capacity change from 0 to 512 [ 455.178499][T26886] veth1_macvtap: entered promiscuous mode [ 455.187366][T27037] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 455.199913][T27037] System zones: 0-2, 18-18, 34-35 [ 455.200735][T26886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.215656][T26886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.225541][T26886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.236088][T26886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.245958][T26886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.256433][T26886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.266461][T26886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.276984][T26886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.288171][T26886] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.299240][T26886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.309804][T26886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.319648][T26886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.330246][T26886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.340148][T26886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.350789][T26886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.360794][T26886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.371297][T26886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.382028][T26886] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.391532][T26886] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.400543][T26886] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.409238][T26886] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.418022][T26886] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.468880][T27043] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 455.627169][T27062] __nla_validate_parse: 26 callbacks suppressed [ 455.627188][T27062] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7899'. [ 455.642520][T27062] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7899'. [ 455.661370][T27062] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7899'. [ 455.703696][T27062] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7899'. [ 455.712828][T27062] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7899'. [ 455.741603][T27062] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7899'. [ 455.767263][T27078] loop3: detected capacity change from 0 to 1024 [ 455.774707][T27078] EXT4-fs: inline encryption not supported [ 455.777175][T27062] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7899'. [ 455.781021][T27078] EXT4-fs: Ignoring removed bh option [ 455.789568][T27062] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7899'. [ 455.792945][T27062] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7899'. [ 455.883995][T27091] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 455.965203][T27103] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 455.999377][T27107] loop5: detected capacity change from 0 to 164 [ 456.007649][T27107] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 456.032910][T27107] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 456.041384][T27107] Symlink component flag not implemented [ 456.047041][T27107] Symlink component flag not implemented [ 456.052864][T27107] Symlink component flag not implemented (7) [ 456.058878][T27107] Symlink component flag not implemented (116) [ 456.133644][T27115] blktrace: Concurrent blktraces are not allowed on sg0 [ 456.194552][T27119] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7919'. [ 456.223818][T27121] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 456.280954][T27126] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 456.336520][T27130] loop3: detected capacity change from 0 to 512 [ 456.343830][T27130] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 456.363466][T27130] EXT4-fs (loop3): 1 truncate cleaned up [ 456.374431][T27137] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 456.393254][T27139] xt_TPROXY: Can be used only with -p tcp or -p udp [ 456.503961][T27145] loop3: detected capacity change from 0 to 512 [ 456.511145][T27145] EXT4-fs: Ignoring removed mblk_io_submit option [ 456.522721][T27145] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 456.531156][T27145] EXT4-fs (loop3): orphan cleanup on readonly fs [ 456.532523][T27150] netem: change failed [ 456.537744][T27145] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 456.557006][T27145] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 456.564168][T27145] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7929: bg 0: block 40: padding at end of block bitmap is not set [ 456.581816][T27145] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 456.600342][T27145] EXT4-fs (loop3): 1 truncate cleaned up [ 456.629925][ T36] usb 11-1: enqueue for inactive port 0 [ 456.632613][T27152] blktrace: Concurrent blktraces are not allowed on sg0 [ 456.635535][ T36] usb 11-1: enqueue for inactive port 0 [ 456.719585][ T36] vhci_hcd: vhci_device speed not set [ 456.799283][T27170] loop3: detected capacity change from 0 to 512 [ 456.827104][T27170] EXT4-fs: Ignoring removed mblk_io_submit option [ 456.873677][T27170] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 456.881951][T27170] EXT4-fs (loop3): orphan cleanup on readonly fs [ 456.888678][T27170] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 456.905380][T27170] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 456.912803][T27170] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.7939: bg 0: block 40: padding at end of block bitmap is not set [ 456.954760][T27170] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 457.003060][T27170] EXT4-fs (loop3): 1 truncate cleaned up [ 457.097376][T27190] blktrace: Concurrent blktraces are not allowed on sg0 [ 457.117487][T27192] loop3: detected capacity change from 0 to 512 [ 457.132381][T27192] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 457.154538][T27192] System zones: 0-2, 18-18, 34-35 [ 457.199964][T27201] loop6: detected capacity change from 0 to 164 [ 457.210280][T27201] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 457.389011][T27213] loop5: detected capacity change from 0 to 128 [ 457.401312][T27213] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 457.803228][T27250] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 457.809788][T27250] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 457.817254][T27250] vhci_hcd vhci_hcd.0: Device attached [ 457.966809][T27259] loop6: detected capacity change from 0 to 512 [ 458.009527][ T36] vhci_hcd: vhci_device speed not set [ 458.012994][T27259] EXT4-fs: Ignoring removed mblk_io_submit option [ 458.050711][T27261] loop2: detected capacity change from 0 to 2048 [ 458.063701][T27259] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 458.072945][ T36] usb 1-1: new full-speed USB device number 8 using vhci_hcd [ 458.128189][T27261] loop2: unable to read partition table [ 458.145293][T27261] loop2: partition table beyond EOD, truncated [ 458.151566][T27261] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) [ 458.160404][T27259] EXT4-fs (loop6): orphan cleanup on readonly fs [ 458.169941][T27259] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 458.187733][T27259] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 458.195295][T27259] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7970: bg 0: block 40: padding at end of block bitmap is not set [ 458.211458][T27259] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 458.221217][T27259] EXT4-fs (loop6): 1 truncate cleaned up [ 458.366654][T27277] loop2: detected capacity change from 0 to 512 [ 458.388464][T27277] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 458.408456][T27277] System zones: 0-2, 18-18, 34-35 [ 458.437383][T27281] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 458.467148][T27282] loop6: detected capacity change from 0 to 512 [ 458.494140][T27282] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 458.504083][T27286] loop2: detected capacity change from 0 to 512 [ 458.511837][T27286] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 458.589681][T27282] System zones: 0-2, 18-18, 34-35 [ 458.644372][T27293] loop5: detected capacity change from 0 to 512 [ 458.651639][T27286] EXT4-fs (loop2): 1 truncate cleaned up [ 458.685841][T27293] EXT4-fs (loop5): external journal device major/minor numbers have changed [ 458.724037][T27293] syz.5.7983: attempt to access beyond end of device [ 458.724037][T27293] md185: rw=0, sector=2, nr_sectors = 2 limit=0 [ 458.774199][T27293] EXT4-fs (loop5): couldn't read superblock of external journal [ 458.791991][T27251] vhci_hcd: connection reset by peer [ 458.798217][ T4278] vhci_hcd: stop threads [ 458.802669][ T4278] vhci_hcd: release socket [ 458.807104][ T4278] vhci_hcd: disconnect device [ 458.884406][T27303] loop5: detected capacity change from 0 to 164 [ 458.909602][T27303] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 458.929651][T27303] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 458.940337][T27303] Symlink component flag not implemented [ 458.946048][T27303] Symlink component flag not implemented [ 458.988090][T27310] loop2: detected capacity change from 0 to 512 [ 458.999129][T27303] Symlink component flag not implemented (7) [ 459.005288][T27303] Symlink component flag not implemented (116) [ 459.020582][T27310] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 459.039548][T27310] System zones: 0-2, 18-18, 34-35 [ 459.102918][ T29] kauditd_printk_skb: 957 callbacks suppressed [ 459.102932][ T29] audit: type=1326 audit(1746738588.528:78892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27317 comm="syz.6.7993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f30dfc0e9f7 code=0x7ffc0000 [ 459.138225][T27319] loop6: detected capacity change from 0 to 1024 [ 459.144994][ T3392] usb 7-1: enqueue for inactive port 0 [ 459.150708][ T3392] usb 7-1: enqueue for inactive port 0 [ 459.156742][T27319] EXT4-fs: inline encryption not supported [ 459.162938][T27319] EXT4-fs: Ignoring removed bh option [ 459.168367][ T29] audit: type=1326 audit(1746738588.568:78893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27321 comm="syz.5.7995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e96de969 code=0x7ffc0000 [ 459.178156][T27322] loop5: detected capacity change from 0 to 512 [ 459.192257][ T29] audit: type=1326 audit(1746738588.568:78894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27321 comm="syz.5.7995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e96de969 code=0x7ffc0000 [ 459.192312][ T29] audit: type=1326 audit(1746738588.568:78895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27321 comm="syz.5.7995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3e96de969 code=0x7ffc0000 [ 459.192337][ T29] audit: type=1326 audit(1746738588.568:78896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27321 comm="syz.5.7995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e96de969 code=0x7ffc0000 [ 459.269663][ T29] audit: type=1326 audit(1746738588.568:78897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27321 comm="syz.5.7995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3e96de969 code=0x7ffc0000 [ 459.293305][ T29] audit: type=1326 audit(1746738588.568:78898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27321 comm="syz.5.7995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e96de969 code=0x7ffc0000 [ 459.316895][ T29] audit: type=1326 audit(1746738588.568:78899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27321 comm="syz.5.7995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7ff3e96de969 code=0x7ffc0000 [ 459.340478][ T29] audit: type=1326 audit(1746738588.568:78900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27321 comm="syz.5.7995" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff3e96de9a3 code=0x7ffc0000 [ 459.363945][ T29] audit: type=1326 audit(1746738588.568:78902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27317 comm="syz.6.7993" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f30dfc0d2d0 code=0x7ffc0000 [ 459.388314][ T3392] vhci_hcd: vhci_device speed not set [ 459.413167][T27322] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 459.421512][T27322] System zones: 0-2, 18-18, 34-35 [ 459.555912][T27345] blktrace: Concurrent blktraces are not allowed on sg0 [ 459.565748][T27346] loop6: detected capacity change from 0 to 128 [ 459.590092][T27346] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 459.668974][T27359] loop2: detected capacity change from 0 to 1024 [ 459.676422][T27359] EXT4-fs: inline encryption not supported [ 459.684299][T27359] EXT4-fs: Ignoring removed bh option [ 459.808691][T27374] loop3: detected capacity change from 0 to 512 [ 459.838707][T27374] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 459.853815][T27374] System zones: 0-2, 18-18, 34-35 [ 459.956632][T27383] xt_TPROXY: Can be used only with -p tcp or -p udp [ 460.199067][T27403] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 460.307274][T27409] loop2: detected capacity change from 0 to 512 [ 460.378336][T27409] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 460.380012][T27413] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 460.393973][T27417] netem: change failed [ 460.437614][T27409] EXT4-fs (loop2): 1 truncate cleaned up [ 460.444141][T27409] EXT4-fs mount: 149 callbacks suppressed [ 460.444159][T27409] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.462627][T27420] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 460.476730][T27425] blktrace: Concurrent blktraces are not allowed on sg0 [ 460.552599][T22511] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.588891][T27432] loop3: detected capacity change from 0 to 1024 [ 460.600195][T27432] EXT4-fs: inline encryption not supported [ 460.606188][T27432] EXT4-fs: Ignoring removed bh option [ 460.644770][T27443] tmpfs: Bad value for 'mpol' [ 460.652914][T27432] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 460.773405][T27453] sctp: [Deprecated]: syz.0.8039 (pid 27453) Use of int in max_burst socket option. [ 460.773405][T27453] Use struct sctp_assoc_value instead [ 460.811395][T23256] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 460.841938][T27459] loop5: detected capacity change from 0 to 128 [ 460.871892][T27459] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 460.919084][T27465] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 460.928678][T27467] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 460.942653][T27462] loop6: detected capacity change from 0 to 2048 [ 460.961500][T27470] blktrace: Concurrent blktraces are not allowed on sg0 [ 461.082282][T27477] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 461.105182][T27462] loop6: unable to read partition table [ 461.125735][T27462] loop6: partition table beyond EOD, truncated [ 461.132104][T27462] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 461.143445][T27483] loop5: detected capacity change from 0 to 164 [ 461.151390][T27483] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 461.160566][T27483] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 461.200453][T27483] Symlink component flag not implemented [ 461.206146][T27483] Symlink component flag not implemented [ 461.238601][T27483] Symlink component flag not implemented (7) [ 461.244765][T27483] Symlink component flag not implemented (116) [ 461.309359][T27496] loop5: detected capacity change from 0 to 512 [ 461.339069][T27496] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 461.401165][T27496] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.438298][T27496] ext4 filesystem being mounted at /341/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 461.506076][T27510] blktrace: Concurrent blktraces are not allowed on sg0 [ 461.572483][T27513] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 461.670318][T27515] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 461.839328][T27528] loop6: detected capacity change from 0 to 2048 [ 461.907302][T27528] loop6: unable to read partition table [ 461.913233][T27528] loop6: partition table beyond EOD, truncated [ 461.919605][T27528] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 462.157799][T22927] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.225897][T27540] FAULT_INJECTION: forcing a failure. [ 462.225897][T27540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 462.239164][T27540] CPU: 0 UID: 0 PID: 27540 Comm: syz.5.8069 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 462.239191][T27540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 462.239204][T27540] Call Trace: [ 462.239211][T27540] [ 462.239290][T27540] __dump_stack+0x1d/0x30 [ 462.239309][T27540] dump_stack_lvl+0xe8/0x140 [ 462.239324][T27540] dump_stack+0x15/0x1b [ 462.239338][T27540] should_fail_ex+0x265/0x280 [ 462.239365][T27540] should_fail+0xb/0x20 [ 462.239471][T27540] should_fail_usercopy+0x1a/0x20 [ 462.239496][T27540] _copy_to_user+0x20/0xa0 [ 462.239523][T27540] simple_read_from_buffer+0xb5/0x130 [ 462.239612][T27540] proc_fail_nth_read+0x100/0x140 [ 462.239634][T27540] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 462.239655][T27540] vfs_read+0x19d/0x6f0 [ 462.239674][T27540] ? __rcu_read_unlock+0x4f/0x70 [ 462.239752][T27540] ? __fget_files+0x184/0x1c0 [ 462.239782][T27540] ksys_read+0xda/0x1a0 [ 462.239804][T27540] __x64_sys_read+0x40/0x50 [ 462.239825][T27540] x64_sys_call+0x2d77/0x2fb0 [ 462.239847][T27540] do_syscall_64+0xd0/0x1a0 [ 462.239907][T27540] ? clear_bhb_loop+0x25/0x80 [ 462.239926][T27540] ? clear_bhb_loop+0x25/0x80 [ 462.239944][T27540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.240074][T27540] RIP: 0033:0x7ff3e96dd37c [ 462.240087][T27540] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 462.240102][T27540] RSP: 002b:00007ff3e7d26030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 462.240118][T27540] RAX: ffffffffffffffda RBX: 00007ff3e9906080 RCX: 00007ff3e96dd37c [ 462.240128][T27540] RDX: 000000000000000f RSI: 00007ff3e7d260a0 RDI: 0000000000000004 [ 462.240140][T27540] RBP: 00007ff3e7d26090 R08: 0000000000000000 R09: 0000000000000000 [ 462.240150][T27540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.240160][T27540] R13: 0000000000000001 R14: 00007ff3e9906080 R15: 00007ffc1d9cc5b8 [ 462.240175][T27540] [ 462.454911][T27542] loop2: detected capacity change from 0 to 512 [ 462.461663][T27542] EXT4-fs: Ignoring removed mblk_io_submit option [ 462.481510][T27542] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 462.489885][T27542] EXT4-fs (loop2): orphan cleanup on readonly fs [ 462.496406][T27542] EXT4-fs warning (device loop2): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 462.512892][T27542] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 462.520040][T27542] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.8070: bg 0: block 40: padding at end of block bitmap is not set [ 462.535894][T27542] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 462.545133][T27542] EXT4-fs (loop2): 1 truncate cleaned up [ 462.551523][T27542] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 462.578192][T22511] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.592059][T27554] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 462.603934][T27556] __nla_validate_parse: 37 callbacks suppressed [ 462.603948][T27556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8076'. [ 462.619226][T27556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8076'. [ 462.628313][T27556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8076'. [ 462.646205][T27556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8076'. [ 462.655151][T27556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8076'. [ 462.664429][T27556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8076'. [ 462.686179][T27556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8076'. [ 462.695118][T27556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8076'. [ 462.704013][T27556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8076'. [ 462.785111][T27569] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 462.791716][T27569] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 462.799213][T27569] vhci_hcd vhci_hcd.0: Device attached [ 462.912329][T27576] loop6: detected capacity change from 0 to 128 [ 462.919024][T27576] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 462.979553][ T3393] vhci_hcd: vhci_device speed not set [ 463.039547][ T3393] usb 5-1: new full-speed USB device number 7 using vhci_hcd [ 463.109638][ T36] usb 1-1: enqueue for inactive port 0 [ 463.115164][ T36] usb 1-1: enqueue for inactive port 0 [ 463.189558][ T36] vhci_hcd: vhci_device speed not set [ 463.647681][T27570] vhci_hcd: connection reset by peer [ 463.654244][ T4278] vhci_hcd: stop threads [ 463.658547][ T4278] vhci_hcd: release socket [ 463.663038][ T4278] vhci_hcd: disconnect device [ 463.760368][T27582] blktrace: Concurrent blktraces are not allowed on sg0 [ 463.910338][T27591] loop6: detected capacity change from 0 to 512 [ 463.928034][T27591] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 463.936121][T27591] System zones: 0-2, 18-18, 34-35 [ 463.943222][T27591] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 463.968969][T24642] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.988756][T27594] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8088'. [ 464.113961][ T29] kauditd_printk_skb: 1094 callbacks suppressed [ 464.113982][ T29] audit: type=1326 audit(1746738593.538:79995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27602 comm="syz.5.8091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e96de969 code=0x7ffc0000 [ 464.178727][ T29] audit: type=1326 audit(1746738593.568:79996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27602 comm="syz.5.8091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff3e96de969 code=0x7ffc0000 [ 464.202392][ T29] audit: type=1326 audit(1746738593.568:79997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27602 comm="syz.5.8091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e96de969 code=0x7ffc0000 [ 464.226179][ T29] audit: type=1326 audit(1746738593.568:79998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27602 comm="syz.5.8091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff3e96de969 code=0x7ffc0000 [ 464.249793][ T29] audit: type=1326 audit(1746738593.568:79999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27602 comm="syz.5.8091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e96de969 code=0x7ffc0000 [ 464.273432][ T29] audit: type=1326 audit(1746738593.568:80000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27602 comm="syz.5.8091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff3e96de969 code=0x7ffc0000 [ 464.297087][ T29] audit: type=1326 audit(1746738593.568:80001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27602 comm="syz.5.8091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e96de969 code=0x7ffc0000 [ 464.320763][ T29] audit: type=1326 audit(1746738593.568:80002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27602 comm="syz.5.8091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7ff3e96de969 code=0x7ffc0000 [ 464.344354][ T29] audit: type=1326 audit(1746738593.568:80003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27602 comm="syz.5.8091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3e96de969 code=0x7ffc0000 [ 464.344381][ T29] audit: type=1326 audit(1746738593.568:80004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27602 comm="syz.5.8091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7ff3e96de969 code=0x7ffc0000 [ 464.416232][T27603] loop5: detected capacity change from 0 to 2048 [ 464.425647][T27614] blktrace: Concurrent blktraces are not allowed on sg0 [ 464.532305][T27632] loop3: detected capacity change from 0 to 512 [ 464.532646][T27632] EXT4-fs: Ignoring removed mblk_io_submit option [ 464.573881][T27632] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 464.587464][T27603] loop5: unable to read partition table [ 464.598577][T27608] loop2: detected capacity change from 0 to 512 [ 464.605343][T27632] EXT4-fs (loop3): orphan cleanup on readonly fs [ 464.613558][T27603] loop5: partition table beyond EOD, truncated [ 464.619796][T27603] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 464.631095][T27608] EXT4-fs: Ignoring removed nobh option [ 464.644211][T27632] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 464.682506][T27632] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 464.716690][T27646] loop6: detected capacity change from 0 to 512 [ 464.723370][T27648] loop5: detected capacity change from 0 to 164 [ 464.723399][T27632] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.8096: bg 0: block 40: padding at end of block bitmap is not set [ 464.741179][T27608] EXT4-fs error (device loop2): ext4_do_update_inode:5211: inode #16: comm syz.2.8093: corrupted inode contents [ 464.744300][T27646] EXT4-fs: Ignoring removed mblk_io_submit option [ 464.764345][T27648] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 464.772706][T27608] EXT4-fs (loop2): Remounting filesystem read-only [ 464.773883][T27632] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 464.791039][T27648] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 464.791627][T27608] EXT4-fs (loop2): 1 truncate cleaned up [ 464.799600][T27632] EXT4-fs (loop3): 1 truncate cleaned up [ 464.809627][ T4225] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 464.820990][T27648] Symlink component flag not implemented [ 464.821001][T27648] Symlink component flag not implemented [ 464.821362][T27648] Symlink component flag not implemented (7) [ 464.826621][ T4225] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 464.832258][T27648] Symlink component flag not implemented (116) [ 464.848947][T27608] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.856954][T27632] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 464.895838][T27646] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 464.906047][T27646] EXT4-fs (loop6): orphan cleanup on readonly fs [ 464.924610][ T4225] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 464.929775][T27646] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 464.934953][T27608] ext4 filesystem being mounted at /339/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.951541][T27646] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 464.969603][T27646] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.8102: bg 0: block 40: padding at end of block bitmap is not set [ 464.970082][T27608] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.996011][T27646] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 465.015195][T27646] EXT4-fs (loop6): 1 truncate cleaned up [ 465.022172][T23256] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.046903][T27646] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 465.083878][T27657] loop3: detected capacity change from 0 to 128 [ 465.093430][T24642] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.134006][T23256] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000074f) [ 465.141967][T23256] FAT-fs (loop3): Filesystem has been set read-only [ 465.155788][T23256] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000074f) [ 465.175967][T27666] loop2: detected capacity change from 0 to 512 [ 465.186281][T27666] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 465.194436][T27666] System zones: 0-2, 18-18, 34-35 [ 465.201098][T27665] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 465.217212][T27666] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 465.256901][T27659] loop5: detected capacity change from 0 to 2048 [ 465.300813][T22511] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.353400][T27659] loop5: unable to read partition table [ 465.359159][T27659] loop5: partition table beyond EOD, truncated [ 465.365423][T27659] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 465.407110][T27677] netlink: 'syz.0.8114': attribute type 39 has an invalid length. [ 465.479045][T27688] loop6: detected capacity change from 0 to 512 [ 465.493740][T27688] EXT4-fs: Ignoring removed mblk_io_submit option [ 465.535094][T27700] loop5: detected capacity change from 0 to 512 [ 465.552733][T27688] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 465.563154][T27700] EXT4-fs: Ignoring removed mblk_io_submit option [ 465.579925][T27688] EXT4-fs (loop6): orphan cleanup on readonly fs [ 465.594664][T27688] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 465.610494][T27688] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 465.613010][T27700] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 465.619945][T27688] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.8117: bg 0: block 40: padding at end of block bitmap is not set [ 465.625449][T27700] EXT4-fs (loop5): orphan cleanup on readonly fs [ 465.650481][T27700] EXT4-fs warning (device loop5): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 465.654378][T27688] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 465.673094][T27700] EXT4-fs (loop5): Cannot turn on quotas: error -117 [ 465.675591][T27688] EXT4-fs (loop6): 1 truncate cleaned up [ 465.684724][T27700] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.8120: bg 0: block 40: padding at end of block bitmap is not set [ 465.686880][T27688] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 465.704228][T27700] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 465.724574][T27700] EXT4-fs (loop5): 1 truncate cleaned up [ 465.731705][T27700] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 465.733768][T24642] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.764221][ T4278] bridge_slave_1: left allmulticast mode [ 465.769953][ T4278] bridge_slave_1: left promiscuous mode [ 465.775746][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.790501][ T4278] bridge_slave_0: left allmulticast mode [ 465.796247][ T4278] bridge_slave_0: left promiscuous mode [ 465.802040][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.804904][T27712] blktrace: Concurrent blktraces are not allowed on sg0 [ 465.809554][T22927] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.855065][T27714] loop5: detected capacity change from 0 to 512 [ 465.868410][T27714] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c119, mo2=0002] [ 465.877954][T27714] System zones: 0-2, 18-18, 34-35 [ 465.886719][T27714] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 465.901379][ T4278] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.916811][T27719] loop6: detected capacity change from 0 to 512 [ 465.925631][ T4278] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.941593][T27719] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 465.956666][ T4278] bond0 (unregistering): Released all slaves [ 465.969295][T27680] chnl_net:caif_netlink_parms(): no params data found [ 465.976813][T22927] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.993494][T27719] EXT4-fs (loop6): 1 truncate cleaned up [ 466.003150][T27719] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.020170][T27725] ip6gretap1: entered allmulticast mode [ 466.042815][T27680] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.049956][T27680] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.058231][T27680] bridge_slave_0: entered allmulticast mode [ 466.065027][T27680] bridge_slave_0: entered promiscuous mode [ 466.072373][T27680] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.079574][T27680] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.087060][T27680] bridge_slave_1: entered allmulticast mode [ 466.094204][T27680] bridge_slave_1: entered promiscuous mode [ 466.117350][ T4278] hsr_slave_0: left promiscuous mode [ 466.129879][ T4278] hsr_slave_1: left promiscuous mode [ 466.135643][ T4278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.136212][T24642] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.152498][ T4278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.203402][ T4278] team0 (unregistering): Port device team_slave_1 removed [ 466.213864][ T4278] team0 (unregistering): Port device team_slave_0 removed [ 466.247215][T27680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.256161][T27746] vhci_hcd: default hub control req: 3f0c v08a6 i0001 l1 [ 466.259820][T27680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.300032][T27680] team0: Port device team_slave_0 added [ 466.309000][T27680] team0: Port device team_slave_1 added [ 466.331215][T27680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.338218][T27680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.364227][T27680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.376726][T27680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.383727][T27680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.409713][T27680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.470918][T27680] hsr_slave_0: entered promiscuous mode [ 466.487208][T27680] hsr_slave_1: entered promiscuous mode [ 466.494355][T27680] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.501975][T27680] Cannot create hsr debugfs directory [ 466.710308][T27680] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 466.728068][T27680] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 466.743039][T27680] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 466.773404][T27680] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 466.817171][T27798] loop6: detected capacity change from 0 to 512 [ 466.834582][T27798] EXT4-fs: Ignoring removed mblk_io_submit option [ 466.854244][T27680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.867749][T27680] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.902515][ T328] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.909648][ T328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.919128][T27798] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 466.938427][T27798] EXT4-fs (loop6): orphan cleanup on readonly fs [ 466.952431][ T328] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.959617][ T328] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.961652][T27798] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 466.981801][T27798] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 466.995766][T27798] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.8156: bg 0: block 40: padding at end of block bitmap is not set [ 467.010160][T27807] xt_TPROXY: Can be used only with -p tcp or -p udp [ 467.010274][T27798] ================================================================== [ 467.010315][T27798] BUG: KCSAN: data-race in _prb_read_valid / prb_reserve [ 467.010360][T27798] [ 467.010366][T27798] write to 0xffffffff868bd400 of 88 bytes by task 27807 on cpu 1: [ 467.010382][T27798] prb_reserve+0x696/0xaf0 [ 467.010411][T27798] vprintk_store+0x56d/0x860 [ 467.010443][T27798] vprintk_emit+0x178/0x650 [ 467.010460][T27798] vprintk_default+0x26/0x30 [ 467.010477][T27798] vprintk+0x1d/0x30 [ 467.010499][T27798] _printk+0x79/0xa0 [ 467.010527][T27798] tproxy_tg4_check+0xf6/0x100 [ 467.010558][T27798] xt_check_target+0x28a/0x4c0 [ 467.010584][T27798] translate_table+0xc31/0xf90 [ 467.010607][T27798] do_ipt_set_ctl+0x66f/0x820 [ 467.010631][T27798] nf_setsockopt+0x196/0x1b0 [ 467.010663][T27798] ip_setsockopt+0x102/0x110 [ 467.010687][T27798] ipv6_setsockopt+0xfb/0x130 [ 467.010706][T27798] dccp_setsockopt+0xe4/0x660 [ 467.010728][T27798] sock_common_setsockopt+0x66/0x80 [ 467.010754][T27798] __sys_setsockopt+0x181/0x200 [ 467.010784][T27798] __x64_sys_setsockopt+0x64/0x80 [ 467.010815][T27798] x64_sys_call+0x2bd5/0x2fb0 [ 467.010836][T27798] do_syscall_64+0xd0/0x1a0 [ 467.010858][T27798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.010879][T27798] [ 467.010884][T27798] read to 0xffffffff868bd400 of 8 bytes by task 27798 on cpu 0: [ 467.010899][T27798] _prb_read_valid+0x383/0x920 [ 467.010929][T27798] prb_read_valid+0x3c/0x60 [ 467.010957][T27798] printk_get_next_message+0xc8/0x510 [ 467.010978][T27798] console_flush_all+0x290/0x730 [ 467.010998][T27798] console_unlock+0xa1/0x330 [ 467.011014][T27798] vprintk_emit+0x388/0x650 [ 467.011031][T27798] vprintk_default+0x26/0x30 [ 467.011050][T27798] vprintk+0x1d/0x30 [ 467.011073][T27798] _printk+0x79/0xa0 [ 467.011100][T27798] __ext4_error+0x248/0x320 [ 467.011126][T27798] ext4_validate_block_bitmap+0x557/0x5a0 [ 467.011155][T27798] ext4_wait_block_bitmap+0xda/0x150 [ 467.011181][T27798] ext4_mb_init_cache+0x2f1/0xb60 [ 467.011207][T27798] ext4_mb_init_group+0x223/0x3b0 [ 467.011227][T27798] ext4_mb_load_buddy_gfp+0x6ed/0x750 [ 467.011262][T27798] ext4_free_blocks+0x758/0x1400 [ 467.011285][T27798] ext4_ext_remove_space+0x1775/0x2900 [ 467.011308][T27798] ext4_ext_truncate+0xc7/0x170 [ 467.011326][T27798] ext4_truncate+0x6f8/0xac0 [ 467.011346][T27798] ext4_process_orphan+0x110/0x1c0 [ 467.011375][T27798] ext4_orphan_cleanup+0x6a8/0xa00 [ 467.011404][T27798] ext4_fill_super+0x3171/0x34e0 [ 467.011428][T27798] get_tree_bdev_flags+0x28e/0x300 [ 467.011451][T27798] get_tree_bdev+0x1f/0x30 [ 467.011472][T27798] ext4_get_tree+0x1c/0x30 [ 467.011495][T27798] vfs_get_tree+0x54/0x1d0 [ 467.011516][T27798] do_new_mount+0x207/0x680 [ 467.011538][T27798] path_mount+0x4a4/0xb20 [ 467.011557][T27798] __se_sys_mount+0x28f/0x2e0 [ 467.011579][T27798] __x64_sys_mount+0x67/0x80 [ 467.011602][T27798] x64_sys_call+0xd36/0x2fb0 [ 467.011621][T27798] do_syscall_64+0xd0/0x1a0 [ 467.011641][T27798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.011660][T27798] [ 467.011663][T27798] value changed: 0x00000000000026d8 -> 0x00000000000046d8 [ 467.011674][T27798] [ 467.011677][T27798] Reported by Kernel Concurrency Sanitizer on: [ 467.011688][T27798] CPU: 0 UID: 0 PID: 27798 Comm: syz.6.8156 Not tainted 6.15.0-rc5-syzkaller-00123-g2c89c1b655c0 #0 PREEMPT(voluntary) [ 467.011714][T27798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 467.011726][T27798] ================================================================== [ 467.094501][T27680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.112775][T27798] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 467.264813][T27680] veth0_vlan: entered promiscuous mode [ 467.350402][T27798] EXT4-fs (loop6): 1 truncate cleaned up [ 467.383780][T27798] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 467.408528][T27680] veth1_vlan: entered promiscuous mode [ 467.424581][T24642] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.431730][T27680] veth0_macvtap: entered promiscuous mode [ 467.441878][T27680] veth1_macvtap: entered promiscuous mode [ 467.455633][T27680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.466298][T27680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.476242][T27680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.486690][T27680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.496536][T27680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.506998][T27680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.517508][T27680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.528184][T27680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.538086][T27680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.548604][T27680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.559252][T27680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.572535][T27680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.583335][T27680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.593396][T27680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.603898][T27680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.613713][T27680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.624272][T27680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.634153][T27680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.644662][T27680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.654483][T27680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.664920][T27680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.675814][T27680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.684852][T27680] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.693674][T27680] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.702428][T27680] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.711342][T27680] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.069893][ T3393] usb 5-1: enqueue for inactive port 0 [ 468.075598][ T3393] usb 5-1: enqueue for inactive port 0 [ 468.150256][ T3393] vhci_hcd: vhci_device speed not set