last executing test programs: 9m42.968567719s ago: executing program 32 (id=178): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r1, {0x10, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4044880}, 0x0) 9m29.961963422s ago: executing program 33 (id=133): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c"], 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c"], 0x0}, 0x94) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',uname=']) (async) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x800, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',uname=']) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r4}, 0x10) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) read(r5, &(0x7f0000000040)=""/148, 0xffffff96) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in6=@ipv4={'\x00', '\xff\xff', @remote}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x80000000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffb}, {0xfffffffffffffffd, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x4000) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x4000) r6 = fsmount(r0, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f00000000c0), 0x1b) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x27, 0x4, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r8, &(0x7f0000000480), &(0x7f0000000580)=@tcp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r8, &(0x7f0000000600), &(0x7f0000000340)=@udp6, 0x1}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r8, &(0x7f0000000600), &(0x7f0000000340)=@udp6, 0x1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000001d7118b6000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 9m22.950270749s ago: executing program 34 (id=522): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$eJzs289rHFUcAPDv7GZT01+Jpf5oWjVaxeCPpElr7cGLouBBQdBDPcYkLbHbRpoItgSNIvUoBe/iUfAv8KQXUU8Fr3oXoUgurZ5WZncm2d1sfnaTrd3PByb5vpm3vPfNzNt9My8bQNcaSn8kEfsj4veI6K8VGysM1X7dXlqY/GdpYTKJSuXtv5NqvVtLC5N51fx1+/JCT0Th8ySOtmh37srVCxPl8vTlrDw6f/GD0bkrV5+fuThxfvr89KXxM2dOnRx78fT4C23JM83r1uDHs8eOvP7u9Tcnz15/75fvkjz/pjzaZGi9g09VKm1urrMO1MVJTwc7wpYUa8M0StXx3x/FWDl5/fHaZx3tHLCjKpVK5cG1Dy9WgHtYEp3uAdAZ+Qd9ev+bb7s09bgr3Hy5dgOU5n0722pHeqKQ1Sk13d+201BEnF389+t0i515DgEA0OCHdP7zXKv5XyHqnwsdzNZQBiLi/og4FBGnI+JwRDwQUa37UEQ8vMX2mxdJVs9/Dm4rr81K538vZWtbjfO/fPYXA8WsdKCafyk5N1OePpH1bDhKe9Ly2Dpt/Pjqb1+2PJA1kc//0i1tP58LZpX+6tnT+LKpifmJO8m53s1PIwZ7WuWfLK8EJBFxJCIGt9nGzDPfHlvr2NCG+a+jDetMlW8inq6d/8Voyj+XrL8+OXpflKdPjOZXxWq/3rj21lrt31H+bZCe/70tr//l/AeS+vXaua23ce2PL9a8p9k4/9bXf2/yTsO+jybm5y+PRfQmb9Q6Xb9/vKne+Er9NP/h463H/6FY+UscjYj0In4kIh6NiMeyvj8eEU9ExPHVqd3ozYKfX3ny/WpQ2k7+OyvNf2pL538l6I3mPa2D4oWfvm9odGAr+afn/1Q1Gs72bOb9bzP92t7VDAAAAP8/hYjYH0lhZDkuFEZGav/Dfzj2Fsqzc/PPnpv98NJU7TsCA1Eq5E+6+uueh45lt/V5ebypfDJ7bvxVsa9aHpmcLU91OnnocvvWGP+pP4ud7h2w43xfC7qX8Q/dy/iH7mX8Q/dqMf77OtEPYPe1+vz/pAP9AHZf0/i37AddxP0/dC/jH7qX8Q9daa4vNv6SvECwKojCXdENwQ4FnX5nAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI//AgAA//9Lr+a0") (fail_nth: 2) 9m20.054414143s ago: executing program 35 (id=557): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x4, 0x0, 0x7ffc0005}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) 9m10.526143784s ago: executing program 36 (id=665): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000014c0)='kmem_cache_free\x00', r0}, 0x18) utimes(0x0, 0x0) (fail_nth: 5) 9m9.038869814s ago: executing program 37 (id=678): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) mmap(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) (fail_nth: 3) 9m6.268020338s ago: executing program 38 (id=708): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000dc0)={{{@in=@initdev, @in=@multicast1}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x4050) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000cc0)="91ebffffff7f7d8625547e6fdcfb96c1d9b461ad7581ce705ad7203fb9e00e70512c27e5d5980dbbdb9d8dd381060e0f5bd279f6b8d9109f8e5b1ad6402331e7e4ba5a0300ee40f4ed347c7997c0c822b355f310b659f42003566ffc26878858a5f20373da0b75bed8465da60f840979b6b18d0cbeb297ce3e1e34d46e9e28b416e60e9f9dceb059bd608a506d563315b1a9c536f6ca7ec68acd35c32cdace2471dce1452c62550a9bf975bb6adf889077c111c77030761c0f5d6baccf58dd38bdc0889b55669170d96224c8fd12762ad7f2a635040cde08fb0cdfb05e", 0xdd}], 0x1}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000b40)="5604b1f93280601007f1bfc8446f785300fcfc78c557b8e530dc9f84187a0dd96c1488a0a665ec777782588791c4fd3b0443cd5bde128419bfe468e7760112d01b2746540dc8a0e9087bde26b530a321fd36ffcbeddbc482d96b9f47e195afe70b764b941e9590c8cfb377d923eaffee045993ff1eb3757b9ec29b8416714cab16", 0x81}, {&(0x7f0000001a80)="d61f2c7a6ddbff16a09972b62284a63c170b9a6ec5cd29dfa047b76a9a0eeb4055c9dd2244e47c59e557c459c397cd02eb261fc7d521b1f2e95c3ce17726db0d3236a6d3b52d3f066554d84292329c8a6f034ff8d85d61dcf7ae508c5925903fb1feb7d07fe481313ad476131cf19514d6c77835e9cf82df2f153d9b82985da3e260fc6942d18345ac61b2958886a77e2a2726097d1888a25bee0fdec661520a057f8559f17e462bdf938f7f2303447bfaa744d3891372a825c63e83ff21650af922eaac39ab491cec071d31eebd6526d7a8ddd052d30beb962aeca814ad530c1413e502b92f3e51eaf75ec5b595b19e4945a1a821a8c47f804465f9e04d0ec9aff13036fe4f3a56b324e9ea795cc89d0f30433f3fa8aa7cc4dd93197840d644c6e48329c266316227ea917708cde40163a6b092d3c722a71e9f21255315cb87a74916d56da0479e7e8865b289fc8095a8477e7fee5eda0c55ec6d53c7aac85f6171717935832962f6db7889683497f3f5a4aa6c6af16908cc4c853536c4f624a75cae053c053f8490c028c15bf043adf4729306a4069324be546a83f71c16a15b86f1d6cb5505808acf055c982dfb14eaaa45b139ccc18952a1c1cbde3bb0d4882d72aa508b511b9a3e2b1a11b96aa29650279ca66b2ba92df4f9dcfa322ddd79d8a4da49182ac4d0c7078b2c2c2860e680276da35f952bc9627ab64d475aaeda4e896f04ffbb48983f29cee0574f219acb18778a0b17db40bca0c7102e8d6cbe0d66420a2d836efe9d4932605ad6852bd15bcfbee0fbc22bf79d08512bb8e4ef67004391f17b9723bd61bca96a861833bd415fafb468a205feb866aeaf0057b5d4c2eb5bed757aa6c8a38fd86de6e06bfce036465e63c9a9ae4512985474edbcd3c7ef50e74b4f6091a649cd04c6e14bc7238327edf829e0cca29fe837fd76e49b464933e40cf9799696fdb694a785a4aa7fc9342d32fd2fda5c5f81286dad13a17ac495bafefc5ec9b5ddbd744f879c00635c79d26b8131d7daadb26e5c4d0293ba696d29", 0x2e6}], 0x2}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 8m59.68956363s ago: executing program 39 (id=791): creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, 0x0, 0x15) dup(r0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60040, 0x0) socket(0x400000000010, 0x3, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) socket(0x2, 0x80805, 0x0) socket(0x400000000010, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) socket$unix(0x1, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 8m58.431958091s ago: executing program 40 (id=805): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x3b9b}, 0x18) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r2, 0x5453, 0x7cb7562f2d67) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000000)={0x8, {{0x2, 0x4e21, @empty=0xe0009eff}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'dvmrp1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'syztnl0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x29, 0x5, 0x0, 0x3, 0x61, @dev={0xfe, 0x80, '\x00', 0x25}, @private2, 0x10, 0x7800, 0x30000, 0x401}}) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000580)={'vxcan0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000005c0)={0x0, @rand_addr, @initdev}, &(0x7f0000000600)=0xc) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r11, {0x10, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4044880}, 0x0) fcntl$setstatus(r10, 0x4, 0x400) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)={0x138, 0x0, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x80}, 0x68c4) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r13}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000040000400"/17], 0x50) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0xfdff, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002800010004000000fcdbdf250401f2800c001800f8ffffffffffffff140001"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) socket$inet_mptcp(0x2, 0x1, 0x106) 8m45.834556831s ago: executing program 41 (id=884): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r2, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) (async) sendto$inet6(r2, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) shutdown(r2, 0x1) openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x30141, 0x0) (async) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x30141, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e22, 0x4, @local, 0xb}, 0x1c) listen(r7, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x8, 0x2, 0x0, 0x0, 0x10, {[@mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x15, @multicast2, 0xfff9}]}}}}}}}}, 0x0) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x14, r5, 0x341, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) (async) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x14, r5, 0x341, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x60, r5, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x369c}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x60, r5, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x10001}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x369c}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x100000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) 8m34.71171152s ago: executing program 42 (id=1027): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) 8m33.413434555s ago: executing program 9 (id=1044): bind$rds(0xffffffffffffffff, &(0x7f0000001000)={0x2, 0x4e21, @loopback}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) 8m33.322467512s ago: executing program 9 (id=1046): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x2, 0x2, 0xfe, 0x7ffc0102}]}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001140)={@map=0x1, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$inet6_sctp(0xa, 0x1, 0x84) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000403910b61200af6300000109022400210000000009"], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x8eb6}]}) 8m32.651840577s ago: executing program 9 (id=1053): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="18020000630400ff00000000000000008500000041000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r4 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETMIFCNT_IN6(r4, 0x89e0, &(0x7f0000000000)={0xffffffffffffffff}) 8m32.400835487s ago: executing program 9 (id=1054): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000006c0)='./file0/file0\x00', 0x0) 8m32.353414811s ago: executing program 9 (id=1055): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) unshare(0x22020600) io_uring_setup(0x560d, &(0x7f0000000680)={0x0, 0xb586, 0x2, 0xfffffffe, 0x3bd}) 8m32.021577268s ago: executing program 9 (id=1058): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0xfc, 0x40, 0x86, 0x1, @dev={0xfe, 0x80, '\x00', 0x10}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x40, 0x2, 0xad7}}) (async, rerun: 64) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r3, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x2b}, 0x4e21, 0x0, 0x4e21, 0x0, 0xa, 0xa0, 0x0, 0x87, r2, r3}, {0x81, 0x2, 0x4, 0x5, 0xe00000000, 0x6, 0x7f, 0x80000001}, {0x56, 0x9, 0x7, 0x3}, 0xd, 0x6e6bb0, 0x0, 0x1, 0x3}, {{@in=@multicast2, 0x4d6, 0xff}, 0xa, @in=@empty, 0x3507, 0x4, 0x2, 0x8, 0x80000000, 0x8}}, 0xe8) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4000010}, 0x4000010) (async) recvmsg$unix(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)}, 0x2062) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async, rerun: 32) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) fsetxattr$security_selinux(r8, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000007c0)=ANY=[@ANYBLOB="06000000000000007b070000000000000900000000000000", @ANYRES32=r4, @ANYBLOB="0000000048ab00"/28, @ANYRES32=r8, @ANYBLOB="000000008a000d64e570b4a5a5ed072a199f00"/40, @ANYRES32=r0, @ANYBLOB="00000000ff0700"/28, @ANYRES32=r4, @ANYBLOB="00000000ffffffffffffff7f00"/28, @ANYRES32=r7, @ANYBLOB="000000000200"/28, @ANYRES32=r4, @ANYBLOB="000000000100"/28, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\b\x00'/28, @ANYRES32=r7, @ANYBLOB="000000000500"/28, @ANYRES32=r7, @ANYBLOB="000000007f00"/28]) (async) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x42}], 0x1}, 0x24000004) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r10}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async, rerun: 32) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r11}, 0x10) (async) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 8m31.9839156s ago: executing program 43 (id=1058): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x4, 0xfc, 0x40, 0x86, 0x1, @dev={0xfe, 0x80, '\x00', 0x10}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x80, 0x40, 0x2, 0xad7}}) (async, rerun: 64) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(0x0, r3, 0x0) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x2b}, 0x4e21, 0x0, 0x4e21, 0x0, 0xa, 0xa0, 0x0, 0x87, r2, r3}, {0x81, 0x2, 0x4, 0x5, 0xe00000000, 0x6, 0x7f, 0x80000001}, {0x56, 0x9, 0x7, 0x3}, 0xd, 0x6e6bb0, 0x0, 0x1, 0x3}, {{@in=@multicast2, 0x4d6, 0xff}, 0xa, @in=@empty, 0x3507, 0x4, 0x2, 0x8, 0x80000000, 0x8}}, 0xe8) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xa, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x4000010}, 0x4000010) (async) recvmsg$unix(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)}, 0x2062) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x6}, 0x3}, 0x1c) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, 0x0, 0x1, 0x7}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async, rerun: 32) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) fsetxattr$security_selinux(r8, &(0x7f00000000c0), &(0x7f0000000040)='system_u:object_r:dhcp_state_t:s0\x00', 0x1e, 0x0) ioctl$FIDEDUPERANGE(r4, 0xc0189436, &(0x7f00000007c0)=ANY=[@ANYBLOB="06000000000000007b070000000000000900000000000000", @ANYRES32=r4, @ANYBLOB="0000000048ab00"/28, @ANYRES32=r8, @ANYBLOB="000000008a000d64e570b4a5a5ed072a199f00"/40, @ANYRES32=r0, @ANYBLOB="00000000ff0700"/28, @ANYRES32=r4, @ANYBLOB="00000000ffffffffffffff7f00"/28, @ANYRES32=r7, @ANYBLOB="000000000200"/28, @ANYRES32=r4, @ANYBLOB="000000000100"/28, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\b\x00'/28, @ANYRES32=r7, @ANYBLOB="000000000500"/28, @ANYRES32=r7, @ANYBLOB="000000007f00"/28]) (async) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x42}], 0x1}, 0x24000004) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r10}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) (async, rerun: 32) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r11}, 0x10) (async) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xc5fffffd) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008188040f80ec59acbc0413a1f848110000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 5m9.126168647s ago: executing program 0 (id=4300): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000580)=ANY=[], 0x0) setgroups(0x0, 0x0) (fail_nth: 3) 5m9.020021516s ago: executing program 0 (id=4301): socket$phonet_pipe(0x23, 0x5, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xe8}}, 0x8040) 5m9.019014296s ago: executing program 0 (id=4302): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0xfe, 0x7ffc0002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='cgroup.kill\x00', 0x26e1, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xfffffd26) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x401c5820, &(0x7f00000001c0)=0x8) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x1, 0x5, 0x7f, 0x2}]}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x18, 0xf, &(0x7f0000000800)=ANY=[@ANYBLOB="180000b8ce000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500cd718ebcbf4fbf1c63090100000000009500000000000000bf91000000000000b702000000000008ab0e9d008400000050e15f0183119db70000008bfdff811c000000000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x4, 0x13, r3, 0xffffe000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000fc0)=ANY=[], 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r1, 0x20, &(0x7f00000004c0)={&(0x7f0000001080)=""/4096, 0x1000, 0x0, &(0x7f0000000440)=""/96, 0x60}}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x20000148, &(0x7f00000000c0)=ANY=[@ANYRESDEC], &(0x7f0000000400)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r5}, 0x18) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, &(0x7f0000001040)) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r7, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="b86b1c4086618b71d9cc24a1ae8ceb25b872ef8a01cda93d3144c781ba46c713fefea4d6b089587a7c3b17419c5f8d1fd014bf812027a3dc64b5c1872f2fcd0545e27d53e923d6f3d205279cdf52f6882347aff9fa24b56ec0d2eea5c0b6d238d1c625667a3b17a8ed7cf5c33296615973e6660e5e3c0a9794b5fa135dea597d117b6c299d6838b9b9c62934055f622d0b8e4557f26d6a610ba9", @ANYRES16=r8, @ANYBLOB="000425bd7000ffdbdf25060000000800390007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000580)=ANY=[], 0x0) setgroups(0x0, 0x0) 5m8.96851885s ago: executing program 0 (id=4303): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f00000001c0)={@id={0x2, 0x0, @c}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000900641700000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x21081e, &(0x7f00000005c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@grpid}]}, 0x1, 0x4f2, &(0x7f0000000600)="$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") socket$isdn(0x22, 0x3, 0x2) bind$unix(r3, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x202) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r1) sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r6, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8000005) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x1f, &(0x7f0000000000), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x1e, 0x800, 0x1, "608d8100ee0becb19c8fa07c206bbe82db48338ea03a1bb9799e0d829215"}) 5m8.409013545s ago: executing program 0 (id=4308): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x10, &(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) sync() 5m8.167677904s ago: executing program 0 (id=4314): fchdir(0xffffffffffffffff) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x784, &(0x7f0000001900)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r3, 0x0, 0x11000000}, 0x38) 5m8.167406084s ago: executing program 44 (id=4314): fchdir(0xffffffffffffffff) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x784, &(0x7f0000001900)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001f80), 0xfffffffb, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r3, 0x0, 0x11000000}, 0x38) 4m6.359772656s ago: executing program 2 (id=4847): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newqdisc={0x50, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x20, 0x2, {{0x0, 0x0, 0x0, 0x386561e9}, [@TCA_NETEM_DELAY_DIST={0x4, 0xd}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x48, r1, 0x4, 0xfffffffc, 0x3, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x7fffffff}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x6}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x1d46}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x48011}, 0x10) 4m6.317105929s ago: executing program 2 (id=4848): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) fcntl$lock(r0, 0x5, &(0x7f0000000000)={0x0, 0x0, 0x2000000000}) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioprio_get$uid(0x3, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)=""/149, 0x95}], 0x1}, 0x5}, {{&(0x7f00000000c0)=@caif=@dbg, 0x80, &(0x7f0000000240)=[{&(0x7f0000000580)=""/86, 0x56}, {&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/230, 0xe6}], 0x3, &(0x7f0000000600)=""/185, 0xb9}, 0x1}, {{&(0x7f0000001840)=@nfc, 0x80, &(0x7f0000003a80)=[{&(0x7f0000000300)=""/17, 0x11}, {&(0x7f0000000440)=""/23, 0x17}, {&(0x7f00000018c0)=""/65, 0x41}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000002940)=""/4096, 0x1000}, {&(0x7f0000003940)=""/8, 0x8}, {&(0x7f0000003980)=""/253, 0xfd}], 0x7, &(0x7f0000003b00)=""/255, 0xff}, 0x101}, {{&(0x7f0000003c00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f0000003e40)=[{&(0x7f0000003c80)=""/149, 0x95}, {&(0x7f0000003d40)=""/38, 0x26}, {&(0x7f0000003d80)=""/179, 0xb3}], 0x3, &(0x7f0000003e80)=""/235, 0xeb}, 0x5}, {{&(0x7f0000003f80)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f0000004340)=[{&(0x7f0000004000)=""/232, 0xe8}, {&(0x7f0000004100)=""/31, 0x1f}, {&(0x7f0000004140)=""/76, 0x4c}, {&(0x7f00000041c0)=""/63, 0x3f}, {&(0x7f0000004200)}, {&(0x7f0000004240)=""/59, 0x3b}, {&(0x7f00000042c0)=""/84, 0x54}], 0x7, &(0x7f00000043c0)=""/228, 0xe4}, 0x101}, {{&(0x7f00000044c0)=@nfc_llcp, 0x80, &(0x7f00000046c0)=[{&(0x7f0000004540)=""/144, 0x90}, {&(0x7f0000004600)=""/187, 0xbb}], 0x2, &(0x7f0000004700)=""/195, 0xc3}, 0xf122}, {{0x0, 0x0, &(0x7f0000004ac0)=[{&(0x7f0000004800)=""/114, 0x72}, {&(0x7f0000004880)=""/194, 0xc2}, {&(0x7f0000004980)=""/234, 0xea}, {&(0x7f0000004a80)=""/57, 0x39}], 0x4, &(0x7f0000004b00)=""/83, 0x53}, 0x9}, {{&(0x7f0000004b80)=@tipc=@id, 0x80, &(0x7f0000004c00), 0x0, &(0x7f0000004c40)=""/150, 0x96}, 0x4}], 0x8, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000000)={r2, 0xff, 0x0, 0x9}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x7, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000024d600000000000044580000184a000007000000000000000000000018140000", @ANYRES32=r4, @ANYBLOB="00000014000000000095000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x66, &(0x7f00000068c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6007000000303a00fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) 4m5.413670972s ago: executing program 2 (id=4857): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0x9, 0x42, 0x1}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000003c0), 0x48600, 0x0) ioctl$PTP_PEROUT_REQUEST2(r2, 0x40383d0c, &(0x7f0000000400)={{0xf7, 0x4}, {0x4, 0x5}, 0x10000}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x101c00, 0x0) syz_extract_tcp_res(&(0x7f0000000340)={0x41424344, 0x41424344}, 0x100, 0xc) syz_extract_tcp_res$synack(&(0x7f0000000380)={0x41424344, 0x41424344}, 0x1, 0x0) write$tun(r3, &(0x7f00000004c0)={@val={0x0, 0x18}, @void, @ipv4=@tcp={{0x24, 0x4, 0x1, 0x8, 0xc8, 0x66, 0x0, 0xfc, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, @multicast2, {[@generic={0x83, 0x10, "3a19845506f7eb9559a3e11a8cb0"}, @end, @cipso={0x86, 0x22, 0x0, [{0x2, 0x9, "48893cbf021c7a"}, {0x0, 0xc, "00b21c9d697d77a66b06"}, {0x6, 0x7, "dae61136bc"}]}, @cipso={0x86, 0x12, 0x3, [{0x5, 0xc, "616fc2bd25ec87b3b318"}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x1c, 0x71, 0x3, 0x3, [{@rand_addr=0x64010100, 0x5}, {@dev={0xac, 0x14, 0x14, 0x37}, 0x1}, {@empty, 0xfff}]}, @ssrr={0x89, 0x17, 0xc2, [@rand_addr=0x64010100, @loopback, @dev={0xac, 0x14, 0x14, 0x26}, @multicast1, @rand_addr=0x64010101]}]}}, {{0x4e24, 0x4e20, r4, r5, 0x1, 0x0, 0xe, 0x0, 0x4, 0x0, 0x7, {[@eol, @generic={0x3, 0x12, "cbde6ad8da8b299b4fd8e95c5264a3ae"}, @mss={0x2, 0x4, 0x7}, @timestamp={0x8, 0xa, 0x0, 0x31e}]}}}}}, 0xcc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000001c0)}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newlink={0x68, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r9}, @IFLA_GRE_LOCAL={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x15}}, @IFLA_GRE_REMOTE={0x14, 0x7, @rand_addr=' \x01\x00'}]}}}]}, 0x68}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r11, 0x0, 0x2}, 0x18) pivot_root(&(0x7f0000000340)='.\x00', 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) shmget$private(0x0, 0x4000, 0x54001800, &(0x7f0000000000/0x4000)=nil) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="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", 0x11a}], 0x1, 0x0, 0x52}, 0x40041) 4m5.338785858s ago: executing program 2 (id=4858): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000004400)='./file1\x00', 0x0, &(0x7f0000000a00)={[{@barrier_val={'barrier', 0x3d, 0x6}}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@debug}, {@inlinecrypt}]}, 0x6, 0x610, &(0x7f0000000340)="$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") r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x3804, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x69, &(0x7f0000000400)=[{&(0x7f0000000240)="b9", 0x26892}], 0xbb}}], 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x201, 0x0, 0x0, {0xd, 0x0, 0x5}}, @NFT_MSG_NEWRULE={0xf8, 0x6, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_RULE_USERDATA={0xb2, 0x7, 0x1, 0x0, "efcceb225b493195cfe6153482f729e7a38fa6f47577981a6400b05ae1e71d1678602d260b70e496c7afcd3af57493519fd140354591c18dd6f5c6012a081edae165eadb6dc965d3a38de3c4c1ef76f46f792c024726d7a10a12467c695c45cef7afb57125121e62ba141dfa1957ffa8cb87cc8f01c195c5591926e84b3898d9ad1a7c6c663e222fe0903504ed68eadce62514b163468843281fd09ccade093321f78213fac732e184acc66d79a0"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x5}}, @NFT_MSG_DELRULE={0xc4, 0x8, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_RULE_EXPRESSIONS={0xb0, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @inner={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x60, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_INNER_EXPR={0x4c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xbd}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xfb}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xf5}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x20c}, 0x1, 0x0, 0x0, 0x44000}, 0x4000004) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f00000000c0)={'xfrm0\x00', 0x2}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x1, 0x566, &(0x7f00000015c0)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x12) write(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802"], 0x0}, 0x94) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ioctl$sock_inet_SIOCRTMSG(r2, 0x890d, &(0x7f0000000040)={0x0, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @local}, {0x2, 0x4e23, @empty}, 0x151, 0x0, 0x0, 0x0, 0xf, &(0x7f0000000000)='virt_wifi0\x00', 0x6, 0x4, 0xd}) 4m5.256881105s ago: executing program 2 (id=4859): sched_setaffinity(0x0, 0x0, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x1, 0x56d, 0x2}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000006c0)={0x0, 0x0, 0x0, &(0x7f0000001f80), 0xfffffffb, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000004c0), 0x1000, r2, 0x0, 0x11000000}, 0x38) 4m3.844492949s ago: executing program 2 (id=4872): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r2, 0x0, 0x4ab}, 0x18) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) read$qrtrtun(r7, 0x0, 0xeffd) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, 0x0, 0x0) setsockopt(r5, 0x6, 0x5, &(0x7f00000001c0)="9c78cc84", 0x4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="57e2d030678d23b5f8ef20bd2c0bd2d9670fadc7d3a6877529230d9cdbe7a9fe5e", @ANYRES16=r4, @ANYBLOB="3183000000000000000019000000"], 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x9a, &(0x7f00000001c0), 0x0, 0x10, &(0x7f0000000200), &(0x7f0000000740), 0x8, 0x4000021, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000c80)={'nat\x00', 0x0, [0x7, 0x0, 0x5, 0x0, 0x7fff]}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000e494dd7b5ee942939b6132a99fa51af167c7bd65dd32e52b35886e4c920a2bdab018f3e508fbc9d42a02ea75a9b7e6dab39e4b6f4f22b09a396647921e8ab570b222f69dfa84f43afc0f58ebab0656a1e1a36a3da5bc37cbe1f1dc520f751c02bb13f00b23d7827c79e172009645bce4ecef1403c82a0fd285a1cec052dede92678c167196eec62d2585bd6e81026967b9a9646f455dc23d18ae"], 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000640)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000006c0)={'wg1\x00'}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r9, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYBLOB="2513b94d7d52c9e103d3d75f520dc8d148500d6b52af123713027ce04b3e130eabd551dcdb0d3aca33716b78b2ec080a147a6316c27ce3a101349e684afcafabd247f53c3b2ae337f12f9532ed6c4b12acdf3cb85c0f7b8e1c8a67dd0b5e2ec063d1ea5c04b2a3375fce50c9da1cf7d3528b5e7e7bc0e72726b13b180643ab29856f450357013b3386b0bd09fb0297dbc6eb76830aba717710b5ac19f2d43c1f14752afd4b72a902b9a9c5186a720565c92b2e1f2acb1b17009709eb93d6bea4c1f512f567d37c8c9d"], 0x10}, 0x1, 0x0, 0x0, 0x2000c011}, 0x4010) 4m3.813413471s ago: executing program 45 (id=4872): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r2, 0x0, 0x4ab}, 0x18) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[], 0x1c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) read$qrtrtun(r7, 0x0, 0xeffd) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r5, 0x6, 0x21, 0x0, 0x0) setsockopt(r5, 0x6, 0x5, &(0x7f00000001c0)="9c78cc84", 0x4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="57e2d030678d23b5f8ef20bd2c0bd2d9670fadc7d3a6877529230d9cdbe7a9fe5e", @ANYRES16=r4, @ANYBLOB="3183000000000000000019000000"], 0x14}, 0x1, 0x0, 0x0, 0x8040}, 0x4886) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={r2, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000000c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x9a, &(0x7f00000001c0), 0x0, 0x10, &(0x7f0000000200), &(0x7f0000000740), 0x8, 0x4000021, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockopt$IP6T_SO_GET_INFO(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000c80)={'nat\x00', 0x0, [0x7, 0x0, 0x5, 0x0, 0x7fff]}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000e000000e494dd7b5ee942939b6132a99fa51af167c7bd65dd32e52b35886e4c920a2bdab018f3e508fbc9d42a02ea75a9b7e6dab39e4b6f4f22b09a396647921e8ab570b222f69dfa84f43afc0f58ebab0656a1e1a36a3da5bc37cbe1f1dc520f751c02bb13f00b23d7827c79e172009645bce4ecef1403c82a0fd285a1cec052dede92678c167196eec62d2585bd6e81026967b9a9646f455dc23d18ae"], 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="4c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000640)=0x14) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000006c0)={'wg1\x00'}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r9, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000540)={&(0x7f0000000780)=ANY=[@ANYBLOB="2513b94d7d52c9e103d3d75f520dc8d148500d6b52af123713027ce04b3e130eabd551dcdb0d3aca33716b78b2ec080a147a6316c27ce3a101349e684afcafabd247f53c3b2ae337f12f9532ed6c4b12acdf3cb85c0f7b8e1c8a67dd0b5e2ec063d1ea5c04b2a3375fce50c9da1cf7d3528b5e7e7bc0e72726b13b180643ab29856f450357013b3386b0bd09fb0297dbc6eb76830aba717710b5ac19f2d43c1f14752afd4b72a902b9a9c5186a720565c92b2e1f2acb1b17009709eb93d6bea4c1f512f567d37c8c9d"], 0x10}, 0x1, 0x0, 0x0, 0x2000c011}, 0x4010) 3m49.015654549s ago: executing program 6 (id=5052): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000200)=0x2400) mount(0x0, &(0x7f0000003c40)='.\x00', 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x7, 0x4, 0x80, 0x4, 0x28}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x18) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xe5) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) write$qrtrtun(r3, &(0x7f0000001880)="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", 0x45c) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x45c], 0x0, 0x0, 0x1, 0x1}}, 0x40) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x0, 0x40, 0x7, 0x2, 0xf00, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xa}, 0x0, 0x0, 0x0, 0x5, 0x800000007, 0x0, 0x5, 0x0, 0x1, 0x0, 0xffffffffffffffff}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 3m48.815211085s ago: executing program 6 (id=5054): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x6, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000300)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{}, {0x0, 0x0, 0x1, 0x1}}], 0x3) socketpair$unix(0x1, 0x2, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0x10000}, 0x0, 0x0) 3m47.846597383s ago: executing program 6 (id=5068): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000ff0f000007"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='kfree\x00', r1, 0x0, 0x3b9b}, 0x18) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCMIWAIT(r2, 0x5453, 0x7cb7562f2d67) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000000)={0x8, {{0x2, 0x4e21, @empty=0xe0009eff}}, {{0x2, 0x4e23, @broadcast}}}, 0x108) socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'dvmrp1\x00'}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000580)={'vxcan0\x00'}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000005c0)={0x0, @rand_addr, @initdev}, &(0x7f0000000600)=0xc) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)) fcntl$setstatus(r6, 0x4, 0x400) sendmsg$ETHTOOL_MSG_EEE_GET(r5, 0x0, 0x68c4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x6, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r7}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d000000040000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000040000400"/17], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) socket$inet_mptcp(0x2, 0x1, 0x106) 3m47.789873698s ago: executing program 6 (id=5069): r0 = socket$netlink(0x10, 0x3, 0x0) syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f00000002c0)=ANY=[], 0x1, 0x5b1, &(0x7f0000001000)="$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") r1 = socket$unix(0x1, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) bind$unix(r1, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000000)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@bsdgroups}, {@oldalloc}, {@resuid}]}, 0x2, 0x44a, &(0x7f0000000400)="$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") r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000006000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r4}, 0x18) syz_clone(0x1000400, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={r3}, 0xffffffffffffff5a) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000006c0)=@newtaction={0x70, 0x30, 0x9, 0xf00, 0x0, {}, [{0x5c, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x24, 0x4, [{}, {0x0, 0x0, 0xfe, 0xb}, {}, {0x6}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x40040c0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000240)='br_fdb_external_learn_add\x00', r5, 0x0, 0x1000000000000}, 0x18) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$MRT_FLUSH(r6, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) epoll_create1(0x0) epoll_create1(0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) 3m47.687660266s ago: executing program 6 (id=5070): ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000200)={'erspan0\x00', &(0x7f00000003c0)={'gre0\x00', 0x0, 0x21, 0x40, 0x5, 0x6, {{0xa, 0x4, 0x3, 0x20, 0x28, 0x67, 0x0, 0x0, 0x4, 0x0, @broadcast, @local, {[@timestamp_prespec={0x44, 0x14, 0x16, 0x3, 0x2, [{@remote, 0x2}, {@empty}]}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000c7de00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850002000300000095"], 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7a, '\x00', r0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0xfd, 0x0, 0x7ffc9ffb}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x25, &(0x7f00000000c0)) gettid() timer_create(0x4, &(0x7f0000533fa0)={0x0, 0x40, 0x800000000004, @thr={&(0x7f0000000740)="2cd56cdbf2d65a3faa1def07571b68cd11f4779943926c771cef6affe992012a0a9ab204657101a4dae2590de2d043e6bcff003fa9d00330e37245313162c561779e87d2106ee8979e93c988afacd015ac1f14219d43b49d2db6b7f25750b79a40ae0caa8a474413e70005f55d28a5a295d6ea11faabbbb3a1078cd818c78b234546bc9b86f416128a0f4ca01af54ed8c02d6df1d55ba58616c4230ec48678a6198fde351bcfe0d78b8d3be1e30321e791f025c3d719539cff745a3932eaee861c4f7b4384c30f5e895e", &(0x7f0000000840)="ae2375b8c86fc195f11c0293a5ee3196b2fc690921ace6677d505d38fc8791362de0ec84e23a56a45c7c3a58db5f0db9cb27a6ee8e5422ebe0ae568581bb517e516d3288fed83cf9c2ebe6ee6d42c39b9f6d24c6480d933484f0b1e75abc42fbb8c1003c275f39ab9d3f87dbc4b9e961c7418607ec9b4cea81ee17f19b684dc4be69e993970637fdd08bbbe3b5726c2597eb9740ac9ba2360dc84c80622d1f548c5dd8183783348bb052363afe61288c1a74a501dabb7fb8c8afcc70e8634b548bc524ad2a143bd42d3cef65c329277c0da27b9962758e842fceb9a9f48433bebc47be5f7b92f9544a87a02bf938555d"}}, &(0x7f0000000040)=0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r3) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r5, 0x26, &(0x7f0000000000)={0x1}) poll(0x0, 0x0, 0x9) 3m47.583217195s ago: executing program 6 (id=5071): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x2fe, 0xe5, 0xe0, 0xfe, 0x0}) 3m47.561481206s ago: executing program 46 (id=5071): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xe, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028014000380"], 0x44}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2c, r6, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x141341) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x2fe, 0xe5, 0xe0, 0xfe, 0x0}) 16.935860191s ago: executing program 7 (id=7844): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_int(r0, 0x11, 0xa, &(0x7f0000000040)=0x5, 0x4) 16.82535403s ago: executing program 7 (id=7846): unshare(0x62000000) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 16.57963311s ago: executing program 7 (id=7850): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f00000003c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x9d, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7b}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 16.57950274s ago: executing program 7 (id=7851): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x10}, 0x18) 16.491726747s ago: executing program 7 (id=7853): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x20080) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) 16.151852834s ago: executing program 7 (id=7858): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77908347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d181ac41a6377703000000fcac059ad433974df43b0efc268cbd67279c5e0f19f5b89100cc35aafb9e96dae3d8afe28e887e01475bd40d1080f70254a3f65a1c6261571866a21a54d7624954802e9fe5003049941e5eb295f250d423cb68802074c8c103494acc2fb1fe19c38704ceb94c6da8fb326c1740c59e"], 0xf, 0x2a4, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file2\x00', 0x143142, 0x40) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 16.151605314s ago: executing program 47 (id=7858): syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYBLOB="d23c17f6ec95b3b820b1161ffa233394c6007d8285b061be4d1d842e4a63ec77908347691f71d1e4132f09405a5b81867a01cf3df73c16fd31622d37a921bdbff76ef2fed6da828ab4e0f87928c18c0380050249fb6ab8e225d181ac41a6377703000000fcac059ad433974df43b0efc268cbd67279c5e0f19f5b89100cc35aafb9e96dae3d8afe28e887e01475bd40d1080f70254a3f65a1c6261571866a21a54d7624954802e9fe5003049941e5eb295f250d423cb68802074c8c103494acc2fb1fe19c38704ceb94c6da8fb326c1740c59e"], 0xf, 0x2a4, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file2\x00', 0x143142, 0x40) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) 2.178565444s ago: executing program 8 (id=8290): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) listen(r2, 0x0) 2.135924848s ago: executing program 8 (id=8291): sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@flowinfo={{0x14, 0x29, 0xb, 0xfffffffc}}], 0x18}, 0xc044) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 2.10424073s ago: executing program 8 (id=8292): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 1.973042761s ago: executing program 8 (id=8296): r0 = openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) finit_module(r0, 0x0, 0x2) 1.884365588s ago: executing program 8 (id=8298): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000e500850000006100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000880)={r0, 0x0, 0x12, 0x0, &(0x7f0000000640)="c1dfb080cd21d308098e000081007e229900", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.884203518s ago: executing program 8 (id=8299): socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2, &(0x7f00000001c0)=0xaf, 0x4) sendmsg$NFT_MSG_GETSET(r0, 0x0, 0x4001) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002, 0x2000}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) splice(r1, 0x0, r0, 0x0, 0x406f413, 0x0) 1.437050814s ago: executing program 1 (id=8324): socket$kcm(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@max_batch_time={'max_batch_time', 0x3d, 0x131}}, {@mblk_io_submit}, {@quota}]}, 0x3, 0x437, &(0x7f0000000d80)="$eJzs281vG0UbAPBn7aR9+/UmVOWjaYFAQUR8JE1aSg9cikDiABISHMoxJGkV6jaoCRKtIggIlSOqxB1xROIv4AQXBJyQuMIdVapQLi2cjNbeTRzHdhPHiQP+/aRtZ3bHmnm8M/bMThxAzxpO/0kiDkbEbxExUM2uLTBc/e/u8uLUX8uLU0mUy2/+mVTK3VlenMqL5q87kGf6IgqfJnGsQb3z165fmiyVZq5m+bGFy++NzV+7/tzs5cmLMxdnrkycPXv61PgLZyae70icaVx3hj6cO3701bdvvj51/uY7P32T5PHXxdGmvrr8cKvCT5bLW6xudzlUk07q3wl2rWLWcfsr438gijXdeCBe+aSrjQO2VblcLj/Q/PJSGfgPS6LbLQC6I/+iT9e/+bFDU49d4fa56gIojftudlSv9EUhK9Nft77tpOGIOL/095fpEZ15DgEA0NJ36fzn2Ubzv0LUPhf6f7aHMhgR90XE4Yg4ExFHIuL+iErZByPioU3WX79Jsn7+U7jVVmAblM7/Xsz2ttbO//LZXwwWs9yhSvz9yYXZ0szJ7D0Zif69aX68RR3fv/zr582u1c7/0iOtP58LZu241bd37WumJxcmtxJzrdsfRwz1NYo/WdkJSCLiaEQMtVnH7NNfH2927d7xt9CBfabyVxFPVe//UtTFn0ta70+O/S9KMyfH8l6x3s+/3HijWf1bir8D0vu/v2H/X4l/MKndr53ffB03fv+s6Zqm3f6/J3lrzbkPJhcWro5H7Eleqza69vxEXbmJ1fJp/CMnGo//w7H6ThyLiLQTPxwRj0TEo1nbH4uIxyPiRIv4f3zpiXfbj397pfFPb+r+ryb2RP2ZxonipR++XVPp4GbiT+//6UpqJDuzkc+/jbSrvd4MAAAA/z6FiDgYSWF0JV0ojI5W/4b/SOwvlObmF565MPf+lenqbwQGo7+QP+kaqHkeOp4t6/P8RF3+VPbc+Ivivkp+dGquNN3t4KHHHWgy/lN/FLvdOmDb+b0W9C7jH3qX8Q+9y/iH3tVg/O/rRjuAndfo+/+jLrQD2Hl149+2H/QQ63/oXQ3G/7lutAPYeb7/oSfN74t7/0heQmJdIgq7ohkS25To9icTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAZ/wTAAD//+e45xo=") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), 0x0, 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') socket$kcm(0x10, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000, 0x0, 0x3}}, @TCA_SKBEDIT_PRIORITY={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) write$binfmt_misc(r1, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000080), &(0x7f0000000240)=r7}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)='wvh', 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x33) 1.255664509s ago: executing program 5 (id=8328): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x5}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048803) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e24, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0xff}}, 0x1000, 0x80}, 0x90) 1.063837064s ago: executing program 3 (id=8329): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x46, &(0x7f00000002c0)={@multicast, @multicast, @void, {@ipv6={0x86dd, @generic={0xb, 0x6, '\x00', 0x10, 0x2c, 0x80, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @mcast2, {[@dstopts={0x88, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x5}]}]}}}}}, 0x0) 1.026207778s ago: executing program 3 (id=8330): ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x804000, &(0x7f0000000180)=ANY=[], 0x1, 0x22d, &(0x7f0000001040)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) 996.81591ms ago: executing program 3 (id=8331): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f0000000500)={[{@norecovery}, {@errors_continue}, {@bh}], [{@smackfsroot={'smackfsroot', 0x3d, '.\x84!\xa3#-@-(,\\'}}]}, 0x2, 0x572, &(0x7f0000001600)="$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") fallocate(0xffffffffffffffff, 0x0, 0x0, 0x8000c62) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) read(r2, &(0x7f0000032440)=""/102364, 0x18fdc) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f00000001c0)={0x80, 0x1, 'client1\x00', 0xffffffff80000006, "d62e980da99179cf", "20e48560999fd132b6a5426180a8c27a00fcfffff0003336f794d20352346f8f"}) write$sndseq(r0, &(0x7f00000000c0), 0x0) syz_read_part_table(0x5d6, &(0x7f0000000880)="$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") 755.938709ms ago: executing program 4 (id=8336): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$eJzs3E1rE10UwPGTNEnTlHayeHhEQXrRjW6GNu7FIC2IAUttxBcQp81EQ8akZEIlIrZduXEhfggXpcvuCtov0I07V27cdSO4sAtxJDOTl7aJrWnSWPv/QZlD7j0z9+Y24dyBzPbdN0/zWVvPGmUJRpUERER2ROISlJqAfwy6cUSaLcvl4W+fzt++d/9mMpWanFFqKjl7JaGUGh17/+zFkN9tY1C24g+3vya+bP2/dXb75+yTnK1ytioUy8pQc8XPZWPOMlUmZ+d1paYt07BNlSvYZslrd5ZELFNlreLCQkUZhcxIbKFk2rYyChWVNyuqXFTlUkUZj41cQem6rkZigoOkV2dmjGSHyfNdHgx6pFRKGgMiMrSvJb3alwEBAIC+8uv/erUfrJb0ndT/oZb1/9qFzfLwnfVRv/7fiFTrf5Gm+v9R41ymygTr9X9URBr1f9HbH3S7/t9fEZ1sr3cvjjhOPYy06n+k+h8nRLX+j/mfX9fKg7VxN6D+BwAAAAAAAAAAAAAAAAAAAADgJNhxHM1xHM07DvivOtqgiETdX5B47X0eJnpk9/o3/lj/06Hx4I7QqIj1ajG9mPaOfodNEbHElHHR5If7/+CrxpFl5XZSVXH5YC35+UuLae+7JJmVnJs/IZrE9+Y7ztSN1OSE8uzOD0usOT8hmvzXOj+xNz9cPUbk0sWmfF00+TgvRbEk4/8yrpb/ckKp67dSe64/5PYDAAAAAOBfoKu6+v59sLld39/u7Y+9dm9/HZLW9we8/fV4y/19SM6F+jVrAAAAAABOF7vyPG9YllnqUbAiIj2+RJugNsPDZtUekNumT0AC7Zq6ENQu3ll6dWxdG0/4UO9YsKOhjkX+cFFaBrXbRu36yHQnZ3Y0kaO+h2fevvv++z7enTGRw5zw6nr0gJl2GkQOmmn42L6AAAAAABybRtFfe+VafwcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMApdByP4uv3HAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC/xa8AAAD//46ZAFE=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 651.384318ms ago: executing program 4 (id=8337): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000400)="3bcb", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001400)="1c2789bd018bf77308ae7ed990e4b63b8cf1cf4ae822f1f84abd5420339c722aa7f6d87f5926c484455c67b7a9259ac3f36154b6526320d83fe72e5f5370550de0307d8ad13d192e7d5c14f8b2367b1db7dbe02629646be253b07a1245dce1a721576750f3f574ce4ac91827528289acb0089c83a39827b4d9f231ad23f382e2f3d86880015b84a6d3740029d6ffbbf61ae415dc51a6ebd3010000000000008067a9e4abdbbe90455d28993254ab9fa2c5d561ee0000000000000000000ce572ae0de07453", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000004080)=[{&(0x7f0000001180)="52348bf9812fc081678b5760a4c4967393fd8939aaf12a894c5424df616c4eea14fbac2dad114a75c405d89fafa5715b56abba4bbceca456d8225e3f6eb57a03287e74c7bd74e40e3fda3150f92d181e7c82cb2f8ea0416fc4c0f111161cdb9a52911925644e25f871d02f403c83214f830f93b30b874e75cab53f1ed7871f21c0d654a47fab0637868517d7e8d9915e99b4dc2dcafdcb2ef2a012ec95418a544c32181fb969e01318e00a12fd1b2a0eb57bcf7de086e320f2d4be4e1453010be849e4d7dba41558329699aacd3d1c7d97b9bf74caf8b7946647", 0xda}], 0x1}}], 0x3, 0x40090) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='reno\x00', 0x5) sendto$inet(r0, &(0x7f00000002c0)="92", 0x1, 0x10008095, 0x0, 0x0) 638.336589ms ago: executing program 4 (id=8338): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="060000000400000008000000"], 0x48) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000240)="94", 0x1) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb12", 0xb8}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r2, r4, 0x8f5, 0x100000000000000) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xd, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r6, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bind$rds(0xffffffffffffffff, &(0x7f00000021c0)={0x2, 0x0, @local}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000002180)={&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) 583.911923ms ago: executing program 4 (id=8339): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100)={[{@resuid}, {@nobh}]}, 0x1, 0x519, &(0x7f00000009c0)="$eJzs3cFvI1cZAPBvJvE2u5tiFxAqlSgVLcpWsHbS0DZCCMoFTpWA5b6ExImi2HEUO2UTVZCK/wAhgcSJExck/gCkqgfEGVWqBBfEAQECIdjCAQnoII/HJevYSaBJnI1/P+mt35sZz/e9ifw8M56dCWBiPRURL0XEVEQ8GxHlYnpalDjole5yb99/daVbksiyO39JIimm9dfVbU9HxM3ibTMR8ZUvRnw9ORq3vbe/udxo1HeKdq3T3K619/ZvbzSX1+vr9a3FxYUXll5cen5pPiu8p35W+pUffeGzr3/yG7+9+6db3+ym9ZkPRSkG+nGWel0v5duir7uNds4j2BhMFf0pjTsRAABOpbuP//6I+Fi+/1+OqXxvbsDUODIDAAAAzkr2udn4VxKRAQAAAFdWGhGzkaTV4lqA2UjTa8W5gQ/GjbTRanc+sdba3VrtzouoRCld22jU54trhStRSrrtheIa2377uYH2YkQ8FhHfLV/P29WVVmN1zOc+AAAAYFLcHDj+/3s5zesnG/L/BAAAAIDLqzKyAQAAAFwVDvkBAADg6hs8/n99THkAAAAA5+JLL7/cLVn/+derr+ztbrZeub1ab29Wm7sr1ZXWznZ1vdVaz+/Z1zxpfY1Wa/tTsbV7r9aptzu19t7+3WZrd6tzd+OBR2ADAAAAF+ixj77xqyQiDj59PS9R3AcQ4AG/H3cCwFmaGncCwNi4izdMrlK/cm28eQDjk5ww38U7AADw8Jv78NHf//unAkpjzQw4b671AYDJ4/d/mFwlVwDCREsj4n296iOjlhn5+/8vThslyyLeLB+e4vwiAABcrNm8JGm1OA6YjTStViMejUgrUUrWNhr1+eL44Jfl0iPd9kL+zuTEa4YBAAAAAAAAAAAAAAAAAAAAAAAAgJ4sSyIDAAAArrSI9I9Jfjf/iLnyM7OD5weuJf8oxx+Kxg/ufO/ecqezs9Cd/tf8WV7XIqLz/TulfPpzIx8fBgAAAJy15GDkrN5xevG6cKFZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAB3r7/6kq/XGTcP38+IirD4k/HTP46E6WIuPG3JKYPvS+JiKkziH/wWkQ8Pix+Eu9kWVYpshgW//o5x6/km2Z4/DQibp5BfJhkb3THn5eGff7SeCp/Hf75my7KezV6/EuLyI/n49yw8efRI2trDo3xxFs/qY2M/1rEE9PDx5/++JuMiP/0kbX9M8uyozG+9tX9/VHxsx9GzA39/kkeiFXrNLdr7b392xvN5fX6en1rcXHhhaUXl55fmq+tbTTqxb9DY3znIz9957j+3xgS/ze/7o2/x/X/mVErHfDvt+7d/0CvWhoW/9bTQ79/Z2JE/LT47vt4Ue/On+vXD3r1w5788ZtPHtf/1RHb/6S//61T9v/ZL3/7d6dcFAC4AO29/c3lRqO+c0xl5hTLPIyVn81cijT+x0r2rd5f7rLk8/9Wunur/53S79UlSOxQJbuwWFNxSbr8bmWswxIAAHAOfv7uTv+4MwEAAAAAAAAAAAAAAAAAAIDJdRG3ExuMeTCergIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHOs/AQAA//9GB9/T") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fallocate(r0, 0x10, 0x17e, 0x8) lseek(r0, 0x0, 0x3) 524.710458ms ago: executing program 1 (id=8340): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0xe0}, 0x14) 442.600065ms ago: executing program 1 (id=8341): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x15, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 384.000509ms ago: executing program 1 (id=8342): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{0x0}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={0x0, 0x3}, 0x8) 383.841679ms ago: executing program 5 (id=8343): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000540)='inet_sock_set_state\x00', r3}, 0x10) listen(r2, 0x0) 382.84023ms ago: executing program 1 (id=8344): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x4, 0x180, 0x4, 0x28, 0xffffffffffffffff, 0x81}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) syz_clone(0x9100000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, 0x0, &(0x7f0000000000)=""/49}, 0x20) 377.46678ms ago: executing program 5 (id=8345): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={r1, 0x7f}, 0x8) 362.011371ms ago: executing program 4 (id=8346): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000000)={[{@usrquota}, {@acl}]}, 0xff, 0x257, &(0x7f0000000500)="$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") pwrite64(0xffffffffffffffff, &(0x7f0000000140)="f6", 0x1, 0x8000c61) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) fallocate(r1, 0x20, 0x0, 0x8000) 361.772831ms ago: executing program 5 (id=8347): r0 = socket(0x10, 0x803, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x109) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x14, 0x4, 0x8, 0xb, 0x180}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', 0x0}) creat(&(0x7f0000000080)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) futex_waitv(&(0x7f0000001a00)=[{0x4, &(0x7f0000000840)=0xf, 0x2, 0x2000000}, {0x2, &(0x7f0000000880)=0x101, 0x82}, {0x0, &(0x7f00000008c0)=0xa, 0x82}, {0x4, &(0x7f0000000900)=0x9, 0x82}, {0x4, 0x0, 0x82}, {0xffffffff00000001, &(0x7f0000000a40)=0x7, 0x2}, {0x3, &(0x7f0000000ac0)=0x9, 0x82}, {0x7ff, &(0x7f0000000b00)=0x5, 0x82}, {0x9, 0x0, 0x2}, {0x1, &(0x7f0000000b80)=0x9, 0x82}, {0xa42, &(0x7f0000000bc0)=0x8, 0x82}, {0x9, &(0x7f0000000c00)=0x101, 0x82}, {0xffffffffffffffff, &(0x7f0000000c40)=0x4, 0x82}, {0xfffffffffffffff7, &(0x7f0000000c80)=0x1ff, 0x82}, {0x7, &(0x7f0000000cc0)=0x4948, 0x2}, {0xfffffffffffffff0, &(0x7f0000000d00)=0xf6, 0x2}, {0x4, &(0x7f0000000d40)=0xd, 0x82}, {0xffffffffffffffff, &(0x7f0000000d80)=0x10000, 0x2}, {0x8, &(0x7f0000000dc0)=0xfffffffffffffff8, 0x82}, {0xfb5, 0x0, 0x82}, {0x7f7b, 0x0, 0x2}, {0xc, 0x0, 0x82}, {0x8, 0x0, 0x2}, {0x52, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x9, 0x0, 0x2}, {0xb2, 0x0, 0x82}, {0xfffffffffffffffb, 0x0, 0x82}, {0x80000000, 0x0, 0x80}, {0x579, 0x0, 0x2}, {0x8000, 0x0, 0x2}, {0x1, 0x0, 0x82}, {0x1, 0x0}, {0xaf, 0x0, 0x82}, {0x9, 0x0, 0x2}, {0x392e, 0x0, 0x2}, {0x3, 0x0, 0x2}, {0x1af4, 0x0, 0x82}, {0xeaf, 0x0, 0x2}, {0xba6, 0x0, 0x82}, {0x80000000, 0x0, 0x2}, {0x400, 0x0}, {0x1, 0x0, 0x82}, {0x5c00000000000000, 0x0, 0x2}], 0x2c, 0x0, &(0x7f00000020c0)={0x0, 0x989680}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) gettid() sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 303.887856ms ago: executing program 1 (id=8348): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x30e, &(0x7f0000000f00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 303.540676ms ago: executing program 5 (id=8349): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000001c000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x2}, 0x18) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8042, &(0x7f0000000500), 0x1, 0x4f8, &(0x7f0000001900)="$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") r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x12, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xe, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r3, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r5 = socket$netlink(0x10, 0x3, 0x10) r6 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r8, 0x0, 0x4}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r10, 0x107, 0x2, &(0x7f0000000380)={0x0, 0x13, 0x6, @broadcast}, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r9, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) 235.315412ms ago: executing program 4 (id=8350): socket$kcm(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000380)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@max_batch_time={'max_batch_time', 0x3d, 0x131}}, {@mblk_io_submit}, {@quota}]}, 0x3, 0x437, &(0x7f0000000d80)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), 0x0, 0xfe37, 0x0) unlink(&(0x7f0000000180)='./file1\x00') socket$kcm(0x10, 0x2, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r1, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r2, r1, 0x0, 0x578410eb) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000001540)=@newtaction={0x68, 0x30, 0x829, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000, 0x0, 0x3}}, @TCA_SKBEDIT_PRIORITY={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) write$binfmt_misc(r1, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000080), &(0x7f0000000240)=r7}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)='wvh', 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x33) 141.829009ms ago: executing program 3 (id=8351): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r0, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00', 0x0}) sendto$packet(r3, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0xe0}, 0x14) 90.585263ms ago: executing program 3 (id=8352): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x15, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000010000008500000082000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 90.069733ms ago: executing program 5 (id=8353): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xb, &(0x7f0000000180)=ANY=[@ANYRES16=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000380)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe}, 0x0, 0xc8, 0x0, 0x2, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, @perf_config_ext={0x5, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x0, 0x3, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0xfdef) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) bind$unix(r5, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r5, 0x0) connect$unix(r4, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r5, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r6], 0x18}}], 0x1, 0x0) close(r2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd63"], 0xfdef) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xffffffffffffffae}, 0x0) write$cgroup_subtree(r8, &(0x7f0000000000)=ANY=[], 0xfdef) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000e80)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x0, 0x3a, 'usrjp\x8aota=', 0x3a, '\x00\xd96\xb5\x14k\x0e\xe7\xce\xf25R\x91\xf5(:\xeb\x8e\xc8\xfb9/O\xac\xd3\x8dS\xf7\xb6\x00\xe8|\xa4\x8cX\x1e\xcd}k\x18\xdc{\xf4\xea\x13\xe2R\xa6\xad5!\xf2\xd8\x12\x1d\x91\xbe\x8e]\x80\x19\t\x03\x1bV\xa2E\xeb\x0e\x90\x9e\xe6\xb3\xe0$\xcf=T\xdc,\xc7\x8ej~\x81^@P\b\'\t\xf8\xa9\xf3\x83o\xc9\xc6\x0f\xf0\xc3kN\x9a\x02G*\x87\x8d$\xee4Dq\x89K\a\xbd]\xe2Q\xee\xe9D\x8b\xed \xd6o\xb9^Wc\x16x\xe4\xc9\x84\xf5?-\xc8\x187Q\x8b\r\x1a#\x94\x18.>h\x8f_1\x1a\xb5\xe6\xa7\x8d\xd0kM\x04\xdd\xd5*\xc6\xd7\xae\xdb\xa8*\xa9\\\x92\x82]e%\xc2\xa2\xc6\xbe\xb6\x85\x88\b\x90v\xc4\x12\x18a\xb4\xf8\x1a`\xeb\xd1\x88\x8b\r=$T', 0x3a, './file2'}, 0x101) socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1d0000001900000012bb00000c00000080040700", @ANYRES32, @ANYBLOB="03000000000000000000000000000000781b2f936bac00000000b270a2ea00a2fcf89534b6585f31d43190616987219d63fefcdfc3b6ed5f22d18fbf6a412058c42282138d0c9f4fd710eac785ebb2226d23489ef235bb6a04b5a62a3c13b7e1148c10b3471b021c7383ed262e896801886e816868966e7f924953c4af12a5904ac482ecb379cea9bb21c266bbeb22064d37b2705db9daa6a90edfc9b69b150a219c9a2cc91a06125638b1380022f68ee6e0aa9845767f773ef418689f015befadea79f705d4deddb45e4755a7e33eeab7cdc5b6be814ee2c0df64052bde", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000040000000300"/24, @ANYRES32, @ANYBLOB], 0x50) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000200)='lp\x00', 0x3) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 0s ago: executing program 3 (id=8354): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x50001) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) kernel console output (not intermixed with test programs): ] CPU: 0 UID: 0 PID: 31803 Comm: Tainted: G W 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 596.672216][T31803] Tainted: [W]=WARN [ 596.672221][T31803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 596.672233][T31803] Call Trace: [ 596.672239][T31803] [ 596.672248][T31803] __dump_stack+0x1d/0x30 [ 596.672284][T31803] dump_stack_lvl+0xe8/0x140 [ 596.672305][T31803] dump_stack+0x15/0x1b [ 596.672325][T31803] should_fail_ex+0x265/0x280 [ 596.672404][T31803] should_fail+0xb/0x20 [ 596.672507][T31803] should_fail_usercopy+0x1a/0x20 [ 596.672526][T31803] _copy_from_iter+0xcf/0xe40 [ 596.672548][T31803] ? __build_skb_around+0x1a0/0x200 [ 596.672689][T31803] ? __alloc_skb+0x223/0x320 [ 596.672736][T31803] netlink_sendmsg+0x471/0x6b0 [ 596.672835][T31803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 596.672910][T31803] __sock_sendmsg+0x142/0x180 [ 596.672934][T31803] ____sys_sendmsg+0x31e/0x4e0 [ 596.673011][T31803] ___sys_sendmsg+0x17b/0x1d0 [ 596.673079][T31803] __x64_sys_sendmsg+0xd4/0x160 [ 596.673112][T31803] x64_sys_call+0x191e/0x2ff0 [ 596.673205][T31803] do_syscall_64+0xd2/0x200 [ 596.673234][T31803] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 596.673256][T31803] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 596.673276][T31803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.673296][T31803] RIP: 0033:0x7f7ad916ebe9 [ 596.673312][T31803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.673397][T31803] RSP: 002b:00007f7ad7bd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 596.673415][T31803] RAX: ffffffffffffffda RBX: 00007f7ad9395fa0 RCX: 00007f7ad916ebe9 [ 596.673428][T31803] RDX: 0000000000004080 RSI: 0000200000000080 RDI: 0000000000000005 [ 596.673440][T31803] RBP: 00007f7ad7bd7090 R08: 0000000000000000 R09: 0000000000000000 [ 596.673450][T31803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.673461][T31803] R13: 00007f7ad9396038 R14: 00007f7ad9395fa0 R15: 00007ffca61881f8 [ 596.673560][T31803] [ 596.887811][T31166] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 596.919532][T31802] ext4 filesystem being mounted at /572/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 596.934851][T31802] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.7654: corrupted inode contents [ 596.947560][T31802] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.7654: mark_inode_dirty error [ 596.959851][T31802] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.7654: corrupted inode contents [ 596.972667][T31802] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.7654: mark_inode_dirty error [ 597.010287][T31812] loop5: detected capacity change from 0 to 512 [ 597.022489][T31819] loop8: detected capacity change from 0 to 1024 [ 597.029287][T31819] EXT4-fs: Ignoring removed bh option [ 597.035265][T31819] ext4: Unknown parameter 'smackfsroot' [ 597.074136][T31828] loop5: detected capacity change from 0 to 512 [ 597.091200][T31828] EXT4-fs: Ignoring removed mblk_io_submit option [ 597.099121][T31805] lo speed is unknown, defaulting to 1000 [ 597.109129][T31828] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 597.135720][T31828] EXT4-fs (loop5): 1 truncate cleaned up [ 597.173806][T31833] loop8: detected capacity change from 0 to 2048 [ 597.254738][T31805] chnl_net:caif_netlink_parms(): no params data found [ 597.345243][T31805] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.352369][T31805] bridge0: port 1(bridge_slave_0) entered disabled state [ 597.359554][T31805] bridge_slave_0: entered allmulticast mode [ 597.366390][T31805] bridge_slave_0: entered promiscuous mode [ 597.373263][T31805] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.380415][T31805] bridge0: port 2(bridge_slave_1) entered disabled state [ 597.387656][T31805] bridge_slave_1: entered allmulticast mode [ 597.396502][T31805] bridge_slave_1: entered promiscuous mode [ 597.417692][T31805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 597.428237][T31805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 597.466071][T31805] team0: Port device team_slave_0 added [ 597.488012][T31805] team0: Port device team_slave_1 added [ 597.535714][T31805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 597.542792][T31805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.568781][T31805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 597.606509][T31847] loop4: detected capacity change from 0 to 1024 [ 597.646507][T31847] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.7662: Allocating blocks 449-513 which overlap fs metadata [ 597.684900][T31847] EXT4-fs (loop4): pa ffff888106a6de70: logic 48, phys. 177, len 21 [ 597.692997][T31847] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 597.705532][T31805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 597.712533][T31805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 597.738490][T31805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 597.779449][T31851] loop4: detected capacity change from 0 to 512 [ 597.794034][T31851] ext4 filesystem being mounted at /576/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 597.807394][T31851] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.7663: corrupted inode contents [ 597.808851][T31805] hsr_slave_0: entered promiscuous mode [ 597.819362][T31851] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.7663: mark_inode_dirty error [ 597.825602][T31805] hsr_slave_1: entered promiscuous mode [ 597.837450][T31851] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.7663: corrupted inode contents [ 597.854250][T31805] debugfs: 'hsr0' already exists in 'hsr' [ 597.859990][T31805] Cannot create hsr debugfs directory [ 597.870107][T31854] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.7663: corrupted inode contents [ 597.882949][T31854] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.7663: mark_inode_dirty error [ 597.894443][T31854] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.7663: corrupted inode contents [ 597.960578][T31854] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.7663: mark_inode_dirty error [ 597.981419][T31805] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.991411][T31854] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.7663: corrupted inode contents [ 598.015677][T31854] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.7663: mark_inode_dirty error [ 598.043047][T31805] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.092317][T31805] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.180401][T31862] loop5: detected capacity change from 0 to 512 [ 598.188842][T31862] EXT4-fs: Ignoring removed mblk_io_submit option [ 598.195822][T31862] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 598.209312][T31805] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 598.222572][T31862] EXT4-fs (loop5): 1 truncate cleaned up [ 598.387143][T31870] loop8: detected capacity change from 0 to 1024 [ 598.415594][T31870] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.7664: Allocating blocks 449-513 which overlap fs metadata [ 598.433313][T31805] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 598.441415][T31870] EXT4-fs (loop8): pa ffff8881069aea10: logic 48, phys. 177, len 21 [ 598.442383][T31805] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 598.449436][T31870] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 598.471524][T31805] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 598.488389][T31805] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 598.682934][ T12] bond0 (unregistering): Released all slaves [ 598.691938][ T12] bond1 (unregistering): Released all slaves [ 598.700958][ T12] bond2 (unregistering): Released all slaves [ 598.709223][ T12] bond3 (unregistering): Released all slaves [ 598.717757][ T12] bond4 (unregistering): Released all slaves [ 598.726612][ T12] bond5 (unregistering): Released all slaves [ 598.734771][ T12] bond6 (unregistering): Released all slaves [ 598.743090][ T12] bond7 (unregistering): Released all slaves [ 598.770673][T31805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 598.780711][ T12] tipc: Left network mode [ 598.782736][T31805] 8021q: adding VLAN 0 to HW filter on device team0 [ 598.797593][ T6235] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.804798][ T6235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.815540][T31890] loop8: detected capacity change from 0 to 512 [ 598.826010][ T6235] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.831732][T31890] EXT4-fs error (device loop8): ext4_get_branch:178: inode #11: block 4294967295: comm syz.8.7673: invalid block [ 598.833170][ T6235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.855805][ T12] hsr_slave_1: left promiscuous mode [ 598.856205][T31890] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.7673: invalid indirect mapped block 4294967295 (level 1) [ 598.875299][ T12] veth1_macvtap: left promiscuous mode [ 598.878474][T31890] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.7673: invalid indirect mapped block 4294967295 (level 1) [ 598.881018][ T12] veth0_macvtap: left promiscuous mode [ 598.895734][T31890] EXT4-fs (loop8): 2 truncates cleaned up [ 598.900307][ T12] veth1_vlan: left promiscuous mode [ 598.911330][ T12] veth0_vlan: left promiscuous mode [ 598.918859][T31890] siw: device registration error -23 [ 598.996480][ T3397] lo speed is unknown, defaulting to 1000 [ 599.002341][ T3397] infiniband syz2: ib_query_port failed (-19) [ 599.009130][T31892] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.028729][ T6241] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.048333][T31805] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 599.073765][ T6241] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.100582][T31892] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.125801][T16788] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.135656][T16788] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.182760][T31892] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.208823][T31904] loop5: detected capacity change from 0 to 128 [ 599.224328][T31908] loop4: detected capacity change from 0 to 512 [ 599.226434][T31805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.238847][T31904] ext4 filesystem being mounted at /240/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 599.242554][T31908] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.7678: invalid block [ 599.283809][T31892] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 599.304793][T31908] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.7678: invalid indirect mapped block 4294967295 (level 1) [ 599.319399][T31908] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.7678: invalid indirect mapped block 4294967295 (level 1) [ 599.335944][T31908] EXT4-fs (loop4): 2 truncates cleaned up [ 599.369580][T31918] SELinux: failed to load policy [ 599.389743][ T6235] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.404016][T16788] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.415221][ T6235] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.433366][ T12] IPVS: stop unused estimator thread 0... [ 599.445514][T31924] loop3: detected capacity change from 0 to 256 [ 599.452332][ T6241] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.476042][T31805] veth0_vlan: entered promiscuous mode [ 599.485078][T31805] veth1_vlan: entered promiscuous mode [ 599.505418][T31805] veth0_macvtap: entered promiscuous mode [ 599.514194][T31805] veth1_macvtap: entered promiscuous mode [ 599.527607][T31805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 599.540382][T31805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 599.551421][ T6199] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.560581][ T6199] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.574529][ T6199] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.585497][ T6199] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 599.640988][T31938] loop7: detected capacity change from 0 to 256 [ 599.697720][T31940] loop4: detected capacity change from 0 to 512 [ 599.712722][T31940] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.7684: invalid block [ 599.776195][T31940] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.7684: invalid indirect mapped block 4294967295 (level 1) [ 599.818286][T31940] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.7684: invalid indirect mapped block 4294967295 (level 1) [ 599.840395][T31940] EXT4-fs (loop4): 2 truncates cleaned up [ 599.854468][T31940] lo speed is unknown, defaulting to 1000 [ 599.862892][T31940] lo speed is unknown, defaulting to 1000 [ 599.873018][T31940] lo speed is unknown, defaulting to 1000 [ 599.904717][T31940] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 599.918661][T31954] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7688'. [ 599.927155][T31940] lo speed is unknown, defaulting to 1000 [ 599.933644][T31940] lo speed is unknown, defaulting to 1000 [ 599.939877][T31940] lo speed is unknown, defaulting to 1000 [ 599.941384][T31955] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7688'. [ 599.946001][T31940] lo speed is unknown, defaulting to 1000 [ 599.961598][T31940] lo speed is unknown, defaulting to 1000 [ 599.967644][T31940] lo speed is unknown, defaulting to 1000 [ 599.997904][T31954] team1: entered promiscuous mode [ 600.003030][T31954] team1: entered allmulticast mode [ 600.021797][T31955] team2: entered promiscuous mode [ 600.023537][T31964] netlink: 104 bytes leftover after parsing attributes in process `syz.8.7691'. [ 600.026876][T31955] team2: entered allmulticast mode [ 600.083844][T31968] loop7: detected capacity change from 0 to 512 [ 600.090672][T31968] EXT4-fs: Ignoring removed mblk_io_submit option [ 600.099587][T31968] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 600.115091][T31968] EXT4-fs (loop7): 1 truncate cleaned up [ 600.163089][T31971] netlink: 'syz.8.7694': attribute type 10 has an invalid length. [ 600.218819][T31973] loop3: detected capacity change from 0 to 512 [ 600.227193][T31973] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 4294967295: comm syz.3.7695: invalid block [ 600.239487][T31973] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.7695: invalid indirect mapped block 4294967295 (level 1) [ 600.257297][T31973] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.7695: invalid indirect mapped block 4294967295 (level 1) [ 600.272862][T31973] EXT4-fs (loop3): 2 truncates cleaned up [ 600.296649][T31973] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.352673][T31973] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.383339][T31981] SELinux: failed to load policy [ 600.432239][T31973] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.446534][T31982] loop5: detected capacity change from 0 to 256 [ 600.472696][T31973] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 601.226421][T32008] loop5: detected capacity change from 0 to 1024 [ 601.270723][T32008] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.7706: Allocating blocks 449-513 which overlap fs metadata [ 601.273797][T32017] netlink: 'syz.8.7709': attribute type 10 has an invalid length. [ 601.294041][T32008] EXT4-fs (loop5): pa ffff8881069aea80: logic 48, phys. 177, len 21 [ 601.302229][T32008] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 601.440838][T31810] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 601.484762][ T29] kauditd_printk_skb: 230 callbacks suppressed [ 601.484794][ T29] audit: type=1326 audit(1754693888.294:41622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32018 comm="syz.5.7710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad916ebe9 code=0x7ffc0000 [ 601.514850][ T29] audit: type=1326 audit(1754693888.294:41623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32018 comm="syz.5.7710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad916ebe9 code=0x7ffc0000 [ 601.538457][ T29] audit: type=1326 audit(1754693888.294:41624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32018 comm="syz.5.7710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ad916ebe9 code=0x7ffc0000 [ 601.562259][ T29] audit: type=1326 audit(1754693888.294:41625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32018 comm="syz.5.7710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad916ebe9 code=0x7ffc0000 [ 601.585894][ T29] audit: type=1326 audit(1754693888.294:41626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32018 comm="syz.5.7710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad916ebe9 code=0x7ffc0000 [ 601.609966][ T29] audit: type=1326 audit(1754693888.424:41627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32018 comm="syz.5.7710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7ad916ebe9 code=0x7ffc0000 [ 601.633617][ T29] audit: type=1326 audit(1754693888.424:41628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32018 comm="syz.5.7710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad916ebe9 code=0x7ffc0000 [ 601.657252][ T29] audit: type=1326 audit(1754693888.424:41629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32018 comm="syz.5.7710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ad916ebe9 code=0x7ffc0000 [ 601.729912][ T29] audit: type=1400 audit(1754693888.534:41630): avc: denied { relabelfrom } for pid=32023 comm="syz.4.7711" name="NETLINK" dev="sockfs" ino=110538 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 601.755590][ T29] audit: type=1400 audit(1754693888.534:41631): avc: denied { relabelto } for pid=32023 comm="syz.4.7711" name="NETLINK" dev="sockfs" ino=110538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 601.813377][T32027] loop8: detected capacity change from 0 to 512 [ 601.819890][T32027] EXT4-fs: Ignoring removed mblk_io_submit option [ 601.826659][T32027] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 601.837991][T32027] EXT4-fs (loop8): 1 truncate cleaned up [ 602.114239][T32037] loop7: detected capacity change from 0 to 1024 [ 602.144085][T32037] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4183: comm syz.7.7715: Allocating blocks 449-513 which overlap fs metadata [ 602.170005][T32037] EXT4-fs (loop7): pa ffff888106a6dd20: logic 48, phys. 177, len 21 [ 602.178102][T32037] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 602.245339][T32051] loop7: detected capacity change from 0 to 1024 [ 602.245584][T32051] EXT4-fs: Ignoring removed bh option [ 602.245606][T32051] ext4: Unknown parameter 'smackfsroot' [ 602.275923][T32041] loop5: detected capacity change from 0 to 512 [ 602.285871][T32041] /dev/loop5: Can't open blockdev [ 602.371899][T32058] loop7: detected capacity change from 0 to 2048 [ 602.477929][T32061] loop5: detected capacity change from 0 to 128 [ 602.486658][T32061] ext4 filesystem being mounted at /249/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 602.610021][T32064] loop5: detected capacity change from 0 to 512 [ 602.616669][T32064] EXT4-fs: Ignoring removed mblk_io_submit option [ 602.623937][T32064] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 602.636218][T32064] EXT4-fs (loop5): 1 truncate cleaned up [ 602.687652][T32067] netlink: 'syz.4.7723': attribute type 10 has an invalid length. [ 602.815212][ T6569] lo speed is unknown, defaulting to 1000 [ 602.901343][T32074] loop8: detected capacity change from 0 to 2048 [ 603.034977][ T6199] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.051685][ T6199] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.068414][ T6199] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.076714][ T6199] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 603.173081][T32088] loop4: detected capacity change from 0 to 128 [ 603.181364][T32087] FAULT_INJECTION: forcing a failure. [ 603.181364][T32087] name failslab, interval 1, probability 0, space 0, times 0 [ 603.194058][T32087] CPU: 1 UID: 0 PID: 32087 Comm: syz.3.7730 Tainted: G W 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 603.194150][T32087] Tainted: [W]=WARN [ 603.194157][T32087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 603.194172][T32087] Call Trace: [ 603.194181][T32087] [ 603.194190][T32087] __dump_stack+0x1d/0x30 [ 603.194214][T32087] dump_stack_lvl+0xe8/0x140 [ 603.194254][T32087] dump_stack+0x15/0x1b [ 603.194270][T32087] should_fail_ex+0x265/0x280 [ 603.194308][T32087] should_failslab+0x8c/0xb0 [ 603.194356][T32087] __kmalloc_noprof+0xa5/0x3e0 [ 603.194387][T32087] ? sctp_make_abort_user+0x17b/0x3a0 [ 603.194411][T32087] sctp_make_abort_user+0x17b/0x3a0 [ 603.194504][T32087] ? sctp_epaddr_lookup_transport+0x9e/0x130 [ 603.194545][T32087] sctp_sendmsg_check_sflags+0x17e/0x1e0 [ 603.194627][T32087] sctp_sendmsg+0x75f/0x18d0 [ 603.194662][T32087] ? __pfx_sctp_sendmsg+0x10/0x10 [ 603.194693][T32087] inet_sendmsg+0xc2/0xd0 [ 603.194730][T32087] __sock_sendmsg+0x102/0x180 [ 603.194836][T32087] ____sys_sendmsg+0x345/0x4e0 [ 603.194985][T32087] ___sys_sendmsg+0x17b/0x1d0 [ 603.195034][T32087] __sys_sendmmsg+0x178/0x300 [ 603.195067][T32087] __x64_sys_sendmmsg+0x57/0x70 [ 603.195085][T32087] x64_sys_call+0x1c4a/0x2ff0 [ 603.195108][T32087] do_syscall_64+0xd2/0x200 [ 603.195134][T32087] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 603.195228][T32087] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 603.195285][T32087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.195326][T32087] RIP: 0033:0x7f2e7696ebe9 [ 603.195344][T32087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 603.195425][T32087] RSP: 002b:00007f2e753d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 603.195452][T32087] RAX: ffffffffffffffda RBX: 00007f2e76b95fa0 RCX: 00007f2e7696ebe9 [ 603.195464][T32087] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000003 [ 603.195476][T32087] RBP: 00007f2e753d7090 R08: 0000000000000000 R09: 0000000000000000 [ 603.195489][T32087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.195579][T32087] R13: 00007f2e76b96038 R14: 00007f2e76b95fa0 R15: 00007ffdce04e598 [ 603.195598][T32087] [ 603.198530][T32088] ext4 filesystem being mounted at /586/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 603.524711][T32091] loop3: detected capacity change from 0 to 1024 [ 603.559995][T32095] netlink: 'syz.4.7733': attribute type 298 has an invalid length. [ 603.572002][T32091] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.7732: Allocating blocks 449-513 which overlap fs metadata [ 603.607120][T32099] loop7: detected capacity change from 0 to 1024 [ 603.613886][T32099] EXT4-fs: Ignoring removed bh option [ 603.619407][T32102] loop4: detected capacity change from 0 to 512 [ 603.619423][T32099] ext4: Unknown parameter 'smackfsroot' [ 603.633457][T32091] EXT4-fs (loop3): pa ffff8881069aeb60: logic 48, phys. 177, len 21 [ 603.641537][T32091] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 603.702423][T32102] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.7736: invalid block [ 603.737221][T32102] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.7736: invalid indirect mapped block 4294967295 (level 1) [ 603.757123][T32113] loop8: detected capacity change from 0 to 1024 [ 603.768856][T32113] EXT4-fs: Ignoring removed bh option [ 603.780456][T32102] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.7736: invalid indirect mapped block 4294967295 (level 1) [ 603.805184][T32114] loop7: detected capacity change from 0 to 2048 [ 603.821253][T32113] ext4: Unknown parameter 'smackfsroot' [ 603.838935][T32102] EXT4-fs (loop4): 2 truncates cleaned up [ 603.925250][T32123] loop5: detected capacity change from 0 to 512 [ 603.947555][T32123] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.7743: invalid block [ 603.961099][T32123] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.7743: invalid indirect mapped block 4294967295 (level 1) [ 604.005053][T32125] loop8: detected capacity change from 0 to 2048 [ 604.014042][T32123] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.7743: invalid indirect mapped block 4294967295 (level 1) [ 604.058230][T32123] EXT4-fs (loop5): 2 truncates cleaned up [ 604.108767][T32123] siw: device registration error -23 [ 604.299510][T32138] ªªªªª»: renamed from veth1_to_bond [ 604.347303][T32138] loop4: detected capacity change from 0 to 2364 [ 604.403914][T32142] netlink: 'syz.3.7747': attribute type 298 has an invalid length. [ 604.508265][T32147] loop5: detected capacity change from 0 to 2048 [ 604.639257][T32151] netlink: 'syz.3.7752': attribute type 10 has an invalid length. [ 604.804081][T32157] bond0: (slave bond1): Releasing backup interface [ 605.053226][T32165] loop4: detected capacity change from 0 to 2048 [ 605.181349][T32184] loop8: detected capacity change from 0 to 512 [ 605.192438][T32184] ext4 filesystem being mounted at /214/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 605.205277][T32184] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #2: comm syz.8.7761: corrupted inode contents [ 605.227731][T32184] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #2: comm syz.8.7761: mark_inode_dirty error [ 605.254001][T32184] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #2: comm syz.8.7761: corrupted inode contents [ 605.286731][T32192] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #2: comm syz.8.7761: corrupted inode contents [ 605.299376][T32192] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #2: comm syz.8.7761: mark_inode_dirty error [ 605.311966][T32192] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #2: comm syz.8.7761: corrupted inode contents [ 605.334094][T32192] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.7761: mark_inode_dirty error [ 605.347084][T32192] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #2: comm syz.8.7761: corrupted inode contents [ 605.364708][T32192] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #2: comm syz.8.7761: mark_inode_dirty error [ 605.487968][T32207] loop8: detected capacity change from 0 to 1024 [ 605.527961][T32207] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4183: comm syz.8.7769: Allocating blocks 449-513 which overlap fs metadata [ 605.546482][T32207] EXT4-fs (loop8): pa ffff8881069aeaf0: logic 48, phys. 177, len 21 [ 605.554623][T32207] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 605.701675][T32231] loop3: detected capacity change from 0 to 2048 [ 606.010473][T32266] loop4: detected capacity change from 0 to 2048 [ 606.279609][T32270] loop8: detected capacity change from 0 to 1024 [ 606.309454][T32270] EXT4-fs: Ignoring removed bh option [ 606.343962][T32270] ext4: Unknown parameter 'smackfsroot' [ 606.962429][ T29] kauditd_printk_skb: 111 callbacks suppressed [ 606.962447][ T29] audit: type=1326 audit(1754693893.744:41743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32280 comm="syz.7.7789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4a24ebe9 code=0x7ffc0000 [ 606.992416][ T29] audit: type=1326 audit(1754693893.744:41744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32280 comm="syz.7.7789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4a24ebe9 code=0x7ffc0000 [ 607.016114][ T29] audit: type=1326 audit(1754693893.744:41745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32280 comm="syz.7.7789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa4a24ebe9 code=0x7ffc0000 [ 607.039783][ T29] audit: type=1326 audit(1754693893.744:41746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32280 comm="syz.7.7789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4a24ebe9 code=0x7ffc0000 [ 607.063418][ T29] audit: type=1326 audit(1754693893.744:41747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32280 comm="syz.7.7789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4a24ebe9 code=0x7ffc0000 [ 607.087005][ T29] audit: type=1326 audit(1754693893.744:41748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32280 comm="syz.7.7789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa4a24ebe9 code=0x7ffc0000 [ 607.110607][ T29] audit: type=1326 audit(1754693893.744:41749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32280 comm="syz.7.7789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4a24ebe9 code=0x7ffc0000 [ 607.134309][ T29] audit: type=1326 audit(1754693893.744:41750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32280 comm="syz.7.7789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4a24ebe9 code=0x7ffc0000 [ 607.157962][ T29] audit: type=1326 audit(1754693893.744:41751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32280 comm="syz.7.7789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7faa4a24ebe9 code=0x7ffc0000 [ 607.194066][ T29] audit: type=1326 audit(1754693893.744:41752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32280 comm="syz.7.7789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa4a24ebe9 code=0x7ffc0000 [ 607.623278][T32291] loop3: detected capacity change from 0 to 512 [ 607.666155][T32291] EXT4-fs: Ignoring removed mblk_io_submit option [ 607.687393][T32291] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 607.702463][T32294] loop7: detected capacity change from 0 to 128 [ 607.715539][T32297] netlink: 'syz.8.7794': attribute type 298 has an invalid length. [ 607.756312][T32294] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 607.766285][T32303] loop4: detected capacity change from 0 to 512 [ 607.813675][T32291] EXT4-fs (loop3): 1 truncate cleaned up [ 607.881965][T32303] EXT4-fs: Ignoring removed mblk_io_submit option [ 607.888892][T32303] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 607.913460][T32303] EXT4-fs (loop4): 1 truncate cleaned up [ 607.963490][T32318] vlan0: entered promiscuous mode [ 608.018284][T32320] loop8: detected capacity change from 0 to 1024 [ 608.043287][T32320] EXT4-fs: Ignoring removed bh option [ 608.048753][T32320] ext4: Unknown parameter 'smackfsroot' [ 608.180023][T32330] loop7: detected capacity change from 0 to 2048 [ 608.864414][T32343] loop5: detected capacity change from 0 to 128 [ 608.944298][T32343] ext4 filesystem being mounted at /264/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 609.267287][T32356] loop8: detected capacity change from 0 to 256 [ 609.366396][T32365] loop8: detected capacity change from 0 to 1024 [ 609.376504][T32365] EXT4-fs: Ignoring removed bh option [ 609.383779][T32365] ext4: Unknown parameter 'smackfsroot' [ 609.437054][T32368] loop3: detected capacity change from 0 to 2048 [ 609.616676][T32369] loop8: detected capacity change from 0 to 2048 [ 609.661701][T32380] loop4: detected capacity change from 0 to 512 [ 609.668698][T32380] EXT4-fs: Ignoring removed mblk_io_submit option [ 609.676255][T32380] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 609.691730][T32380] EXT4-fs (loop4): 1 truncate cleaned up [ 609.783173][T32389] FAULT_INJECTION: forcing a failure. [ 609.783173][T32389] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.796410][T32389] CPU: 0 UID: 0 PID: 32389 Comm: syz.7.7824 Tainted: G W 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 609.796448][T32389] Tainted: [W]=WARN [ 609.796455][T32389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 609.796467][T32389] Call Trace: [ 609.796532][T32389] [ 609.796541][T32389] __dump_stack+0x1d/0x30 [ 609.796573][T32389] dump_stack_lvl+0xe8/0x140 [ 609.796595][T32389] dump_stack+0x15/0x1b [ 609.796685][T32389] should_fail_ex+0x265/0x280 [ 609.796727][T32389] should_fail+0xb/0x20 [ 609.796755][T32389] should_fail_usercopy+0x1a/0x20 [ 609.796787][T32389] _copy_from_user+0x1c/0xb0 [ 609.796861][T32389] __copy_msghdr+0x244/0x300 [ 609.796893][T32389] ___sys_sendmsg+0x109/0x1d0 [ 609.796963][T32389] __x64_sys_sendmsg+0xd4/0x160 [ 609.797043][T32389] x64_sys_call+0x191e/0x2ff0 [ 609.797097][T32389] do_syscall_64+0xd2/0x200 [ 609.797148][T32389] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 609.797190][T32389] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 609.797212][T32389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.797233][T32389] RIP: 0033:0x7faa4a24ebe9 [ 609.797248][T32389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 609.797317][T32389] RSP: 002b:00007faa48caf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 609.797336][T32389] RAX: ffffffffffffffda RBX: 00007faa4a475fa0 RCX: 00007faa4a24ebe9 [ 609.797349][T32389] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 609.797369][T32389] RBP: 00007faa48caf090 R08: 0000000000000000 R09: 0000000000000000 [ 609.797388][T32389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.797481][T32389] R13: 00007faa4a476038 R14: 00007faa4a475fa0 R15: 00007fff1a700b68 [ 609.797502][T32389] [ 610.034120][T32396] netlink: 8 bytes leftover after parsing attributes in process `syz.7.7826'. [ 610.046478][T32396] bridge0: entered promiscuous mode [ 610.051818][T32396] macsec1: entered promiscuous mode [ 610.182816][T32406] loop7: detected capacity change from 0 to 512 [ 610.189433][T32406] EXT4-fs: test_dummy_encryption option not supported [ 610.220708][T24054] EXT4-fs unmount: 87 callbacks suppressed [ 610.226675][T24054] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.253418][T32410] loop7: detected capacity change from 0 to 512 [ 610.329421][T32410] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 610.340221][T32410] EXT4-fs (loop7): orphan cleanup on readonly fs [ 610.347336][T32410] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.7833: bg 0: block 248: padding at end of block bitmap is not set [ 610.362770][T32410] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.7833: Failed to acquire dquot type 1 [ 610.375581][T32410] EXT4-fs (loop7): 1 truncate cleaned up [ 610.382463][T32410] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 610.408612][T31805] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.694257][T32433] loop5: detected capacity change from 0 to 512 [ 610.739444][T32435] loop8: detected capacity change from 0 to 512 [ 610.770450][T32433] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 610.832048][T32435] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.7843: bad orphan inode 11862016 [ 610.871477][T32435] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 610.903462][T27868] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.914485][T32446] netlink: 'syz.7.7846': attribute type 4 has an invalid length. [ 610.927737][T23359] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 610.936920][T32435] ext4 filesystem being mounted at /237/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 610.944425][T32443] lo speed is unknown, defaulting to 1000 [ 610.973025][T32450] loop5: detected capacity change from 0 to 128 [ 610.987091][T32450] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 610.999630][T32450] ext4 filesystem being mounted at /268/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 611.022105][T28638] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 611.032755][T27868] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 611.083680][T32464] loop5: detected capacity change from 0 to 128 [ 611.198992][T32444] lo speed is unknown, defaulting to 1000 [ 611.217535][T32469] loop8: detected capacity change from 0 to 512 [ 611.257677][T32469] EXT4-fs: Ignoring removed nomblk_io_submit option [ 611.266853][T32469] EXT4-fs: Ignoring removed i_version option [ 611.298794][T32473] loop5: detected capacity change from 0 to 1024 [ 611.308076][T32469] EXT4-fs (loop8): 1 orphan inode deleted [ 611.314486][T32473] EXT4-fs: inline encryption not supported [ 611.331051][T32473] EXT4-fs: Ignoring removed bh option [ 611.332034][T32469] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.341148][T32473] /dev/loop5: Can't open blockdev [ 611.446769][T32444] chnl_net:caif_netlink_parms(): no params data found [ 611.478409][T32469] EXT4-fs error (device loop8): ext4_add_entry:2417: inode #2: comm syz.8.7855: Directory hole found for htree leaf block 0 [ 611.519608][ T6241] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.539096][T32488] loop5: detected capacity change from 0 to 512 [ 611.564566][T32444] bridge0: port 1(bridge_slave_0) entered blocking state [ 611.571738][T32444] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.579164][T32444] bridge_slave_0: entered allmulticast mode [ 611.579592][T28638] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.585747][T32444] bridge_slave_0: entered promiscuous mode [ 611.601479][T32444] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.608560][T32444] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.615971][T32444] bridge_slave_1: entered allmulticast mode [ 611.622527][T32444] bridge_slave_1: entered promiscuous mode [ 611.623753][T32488] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 611.642606][T32497] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7863'. [ 611.653043][T32488] ext4 filesystem being mounted at /272/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 611.665355][ T6241] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.721857][ T6241] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.734557][T27868] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.736800][T32444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.753933][T32497] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7863'. [ 611.771851][T32444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 611.789198][ T6241] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.832490][T32444] team0: Port device team_slave_0 added [ 611.851610][T32444] team0: Port device team_slave_1 added [ 611.871274][T32520] loop3: detected capacity change from 0 to 512 [ 611.882350][T32520] FAT-fs (loop3): error, corrupted directory (invalid entries) [ 611.893987][T32489] lo speed is unknown, defaulting to 1000 [ 611.901855][T32444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 611.904395][T32522] loop8: detected capacity change from 0 to 512 [ 611.908840][T32444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.908872][T32444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 611.915893][T32522] msdos: Invalid gid '0x00000000ffffffff' [ 611.941222][T32520] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 0) [ 611.960888][T32444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 611.973155][T32444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 611.999110][T32444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 612.034494][T32526] loop3: detected capacity change from 0 to 128 [ 612.043525][T32526] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 612.056063][T32526] ext4 filesystem being mounted at /530/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 612.068472][ T29] kauditd_printk_skb: 126 callbacks suppressed [ 612.068487][ T29] audit: type=1400 audit(1754693898.874:41877): avc: denied { create } for pid=32525 comm="syz.3.7874" name="encrypted_dir" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 612.108916][T24054] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 612.108926][T32530] loop8: detected capacity change from 0 to 128 [ 612.109403][ T29] audit: type=1400 audit(1754693898.914:41878): avc: denied { add_name } for pid=32525 comm="syz.3.7874" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 612.120080][T32530] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 612.124238][ T29] audit: type=1400 audit(1754693898.914:41879): avc: denied { create } for pid=32525 comm="syz.3.7874" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 612.171256][T32444] hsr_slave_0: entered promiscuous mode [ 612.178256][T32530] ext4 filesystem being mounted at /243/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 612.221619][T32444] hsr_slave_1: entered promiscuous mode [ 612.242043][T32444] debugfs: 'hsr0' already exists in 'hsr' [ 612.247776][T32444] Cannot create hsr debugfs directory [ 612.257704][ T29] audit: type=1400 audit(1754693899.064:41880): avc: denied { ioctl } for pid=32532 comm="syz.3.7876" path="socket:[112452]" dev="sockfs" ino=112452 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 612.285557][T32489] chnl_net:caif_netlink_parms(): no params data found [ 612.303476][T28638] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 612.364002][T32545] loop8: detected capacity change from 0 to 128 [ 612.370613][T32545] EXT4-fs: Ignoring removed nobh option [ 612.382478][T32545] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 612.400291][T32545] ext4 filesystem being mounted at /245/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 612.417848][T32489] bridge0: port 1(bridge_slave_0) entered blocking state [ 612.424976][T32489] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.432507][T32489] bridge_slave_0: entered allmulticast mode [ 612.433973][T28638] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 612.439121][T32489] bridge_slave_0: entered promiscuous mode [ 612.454303][T32489] bridge0: port 2(bridge_slave_1) entered blocking state [ 612.461576][T32489] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.468953][T32489] bridge_slave_1: entered allmulticast mode [ 612.476013][T32489] bridge_slave_1: entered promiscuous mode [ 612.504306][T32489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 612.517727][T32489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.534535][T32554] loop3: detected capacity change from 0 to 1024 [ 612.542062][T32554] EXT4-fs: Ignoring removed orlov option [ 612.547850][T32554] EXT4-fs: Ignoring removed nomblk_io_submit option [ 612.563380][T32554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 612.576855][T32489] team0: Port device team_slave_0 added [ 612.592626][T32489] team0: Port device team_slave_1 added [ 612.622823][T32489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 612.629786][T32489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 612.655790][T32489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 612.681583][ T6241] bridge_slave_1: left allmulticast mode [ 612.687264][ T6241] bridge_slave_1: left promiscuous mode [ 612.693248][ T6241] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.702100][ T6241] bridge_slave_0: left allmulticast mode [ 612.708125][ T6241] bridge_slave_0: left promiscuous mode [ 612.714131][ T6241] bridge0: port 1(bridge_slave_0) entered disabled state [ 612.730515][T32566] loop5: detected capacity change from 0 to 512 [ 612.745065][T32566] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 612.758779][T32566] ext4 filesystem being mounted at /277/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 612.776472][ T29] audit: type=1400 audit(1754693899.584:41881): avc: denied { ioctl } for pid=32565 comm="syz.5.7887" path="/277/file1/file1" dev="loop5" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 612.811819][T24054] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.833372][T27868] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 612.869997][T32574] loop5: detected capacity change from 0 to 128 [ 612.878749][ T6241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 612.879331][T32574] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 612.894933][T32574] FAT-fs (loop5): Filesystem has been set read-only [ 612.903010][ T6241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 612.914100][ T6241] bond0 (unregistering): Released all slaves [ 613.052814][ T6241] bond0 (unregistering): Released all slaves [ 613.054114][T32582] netlink: 'syz.5.7893': attribute type 4 has an invalid length. [ 613.061475][ T6241] bond1 (unregistering): Released all slaves [ 613.074790][ T6241] bond2 (unregistering): Released all slaves [ 613.083251][ T6241] bond3 (unregistering): Released all slaves [ 613.091856][ T6241] bond4 (unregistering): Released all slaves [ 613.099763][ T6241] bond5 (unregistering): Released all slaves [ 613.108113][ T6241] bond6 (unregistering): Released all slaves [ 613.119770][T32489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.126778][T32489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 613.130793][ T29] audit: type=1400 audit(1754693899.934:41882): avc: denied { name_connect } for pid=32580 comm="syz.5.7893" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 613.152995][T32489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.184043][ T29] audit: type=1400 audit(1754693899.934:41883): avc: denied { listen } for pid=32580 comm="syz.5.7893" lport=59966 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 613.223054][T32489] hsr_slave_0: entered promiscuous mode [ 613.229188][T32489] hsr_slave_1: entered promiscuous mode [ 613.235178][T32489] debugfs: 'hsr0' already exists in 'hsr' [ 613.240932][T32489] Cannot create hsr debugfs directory [ 613.246377][ T6241] tipc: Left network mode [ 613.309248][T32581] lo speed is unknown, defaulting to 1000 [ 613.372568][ T6241] hsr_slave_0: left promiscuous mode [ 613.383896][ T6241] hsr_slave_1: left promiscuous mode [ 613.391128][ T6241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.398515][ T6241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 613.407793][ T6241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 613.408503][T32592] loop5: detected capacity change from 0 to 128 [ 613.415230][ T6241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 613.429455][T32592] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 613.441312][ T6241] hsr_slave_0: left promiscuous mode [ 613.442019][T32592] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 613.455847][ T6241] hsr_slave_1: left promiscuous mode [ 613.467364][ T6241] veth1_macvtap: left promiscuous mode [ 613.473020][ T6241] veth0_macvtap: left promiscuous mode [ 613.473123][ T6244] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 613.478694][ T6241] veth1_vlan: left promiscuous mode [ 613.525399][T32598] loop5: detected capacity change from 0 to 128 [ 613.533534][T32598] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 613.550830][T32598] ext4 filesystem being mounted at /285/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 613.585960][ T6241] team0 (unregistering): Port device team_slave_1 removed [ 613.593217][ T29] audit: type=1400 audit(1754693900.394:41884): avc: denied { map } for pid=32597 comm="syz.5.7899" path="/285/mnt/cgroup.controllers" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 613.618087][ T6241] team0 (unregistering): Port device team_slave_0 removed [ 613.624972][T27868] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 613.651711][T32601] loop5: detected capacity change from 0 to 1024 [ 613.658356][T32601] EXT4-fs: inline encryption not supported [ 613.665687][T32601] EXT4-fs: Ignoring removed bh option [ 613.679631][T32601] /dev/loop5: Can't open blockdev [ 613.693984][T32604] loop3: detected capacity change from 0 to 128 [ 613.707078][T32604] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 613.723978][T32606] loop5: detected capacity change from 0 to 512 [ 613.732194][T32604] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100) [ 613.740102][T32604] FAT-fs (loop3): Filesystem has been set read-only [ 613.750711][ T3397] lo speed is unknown, defaulting to 1000 [ 613.756506][ T3397] infiniband syz2: ib_query_port failed (-19) [ 613.776704][T32606] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 613.795705][T32444] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 613.817063][T32606] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 613.830820][ T29] audit: type=1400 audit(1754693900.644:41885): avc: denied { unlink } for pid=24054 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2965 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 613.879086][T32614] loop3: detected capacity change from 0 to 128 [ 613.879347][T32444] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 613.888315][T32614] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 613.905168][T32606] EXT4-fs error (device loop5): ext4_xattr_block_get:593: inode #15: comm syz.5.7902: corrupted xattr block 19: overlapping e_value [ 613.906144][T32614] ext4 filesystem being mounted at /540/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 613.919553][T32606] EXT4-fs (loop5): Remounting filesystem read-only [ 613.935897][T32606] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 613.948838][T32606] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 613.950319][T32444] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 613.973145][ T29] audit: type=1400 audit(1754693900.774:41886): avc: denied { setattr } for pid=32605 comm="syz.5.7902" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 613.996817][T27868] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 614.018559][T32444] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 614.045305][T32621] loop5: detected capacity change from 0 to 512 [ 614.052787][T32621] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 614.107703][T32444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.129670][T32444] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.147571][T32444] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 614.158000][T32444] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 614.174920][T32631] loop5: detected capacity change from 0 to 512 [ 614.183885][T32631] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 614.193093][ T6235] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.199695][T32632] sctp: [Deprecated]: syz.8.7909 (pid 32632) Use of struct sctp_assoc_value in delayed_ack socket option. [ 614.199695][T32632] Use struct sctp_sack_info instead [ 614.200153][ T6235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.226255][ T6235] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.233380][ T6235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.322021][T32644] loop5: detected capacity change from 0 to 512 [ 614.335386][T32647] loop8: detected capacity change from 0 to 512 [ 614.337112][T32444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 614.370069][T32489] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 614.378191][T32647] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.7915: bad orphan inode 11862016 [ 614.397281][T32655] tracefs: Invalid gid '0x00000000ffffffff' [ 614.399501][T32489] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 614.411214][T32647] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 614.423947][T32655] loop5: detected capacity change from 0 to 512 [ 614.424166][T32647] ext4 filesystem being mounted at /252/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 614.431440][T32655] EXT4-fs (loop5): invalid first ino: 2 [ 614.441597][T32489] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 614.457005][T32489] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 614.507589][T28638] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 614.534032][T24054] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 614.550263][ T6241] IPVS: stop unused estimator thread 0... [ 614.564568][T32673] loop8: detected capacity change from 0 to 512 [ 614.595806][T32673] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 614.604277][T32489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 614.615191][T32681] loop5: detected capacity change from 0 to 128 [ 614.629996][T32681] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 614.642414][T32681] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 614.668410][T27868] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 614.691271][T32444] veth0_vlan: entered promiscuous mode [ 614.698791][T32489] 8021q: adding VLAN 0 to HW filter on device team0 [ 614.708630][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.715705][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.732403][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.739587][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.771540][T32444] veth1_vlan: entered promiscuous mode [ 614.834721][T32444] veth0_macvtap: entered promiscuous mode [ 614.855614][T32444] veth1_macvtap: entered promiscuous mode [ 614.869750][T32699] loop8: detected capacity change from 0 to 1024 [ 614.880461][T32444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 614.891035][T32699] EXT4-fs: Ignoring removed bh option [ 614.893571][T32444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 614.906676][T32699] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 614.924962][T16788] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.938689][ T6235] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.957438][ T6235] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.968146][T32699] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 614.982055][ T6235] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.995440][T32489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 615.034262][T28638] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.109826][T32721] loop8: detected capacity change from 0 to 512 [ 615.135790][T32721] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 615.139360][T32489] veth0_vlan: entered promiscuous mode [ 615.183299][T32489] veth1_vlan: entered promiscuous mode [ 615.209910][T32489] veth0_macvtap: entered promiscuous mode [ 615.227066][T32489] veth1_macvtap: entered promiscuous mode [ 615.239295][T32489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 615.250566][T32489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 615.263120][ T6199] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.280824][ T6199] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.304433][ T6199] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.317799][ T6199] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 615.322067][T32736] loop8: detected capacity change from 0 to 128 [ 615.370610][T32743] loop1: detected capacity change from 0 to 764 [ 615.409563][T32743] Symlink component flag not implemented [ 615.415328][T32743] Symlink component flag not implemented [ 615.424869][T32743] Symlink component flag not implemented (129) [ 615.431174][T32743] Symlink component flag not implemented (6) [ 615.438446][T32743] rock: directory entry would overflow storage [ 615.444654][T32743] rock: sig=0x4f50, size=4, remaining=3 [ 615.450260][T32743] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 615.649611][T32765] loop1: detected capacity change from 0 to 4096 [ 615.664377][T32765] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 615.682303][T32765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 615.697069][ T305] loop3: detected capacity change from 0 to 512 [ 615.709953][ T305] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 615.733823][T32489] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 615.761960][ T305] System zones: 1-12 [ 615.777319][ T305] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.7954: Directory hole found for htree index block 0 [ 615.807385][ T326] loop8: detected capacity change from 0 to 128 [ 615.834397][ T305] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 615.853900][ T305] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.7954: Directory hole found for htree index block 0 [ 615.886049][ T326] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 615.906768][ T305] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 615.923119][ T326] ext4 filesystem being mounted at /266/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 615.948791][ T305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 615.984125][ T305] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.7954: Directory hole found for htree index block 0 [ 616.019054][T24054] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.057155][T28638] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 616.113072][ T344] loop1: detected capacity change from 0 to 1024 [ 616.125683][ T344] EXT4-fs: Ignoring removed bh option [ 616.141823][ T352] sctp: [Deprecated]: syz.8.7973 (pid 352) Use of struct sctp_assoc_value in delayed_ack socket option. [ 616.141823][ T352] Use struct sctp_sack_info instead [ 616.142128][ T344] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 616.197132][ T344] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 616.274861][T32489] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.307262][ T382] loop1: detected capacity change from 0 to 128 [ 616.323059][ T382] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 616.336312][ T382] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 616.355758][ T390] loop8: detected capacity change from 0 to 512 [ 616.357737][ T388] sctp: [Deprecated]: syz.3.7989 (pid 388) Use of struct sctp_assoc_value in delayed_ack socket option. [ 616.357737][ T388] Use struct sctp_sack_info instead [ 616.379673][ T390] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002] [ 616.402512][ T390] System zones: 1-12 [ 616.410153][ T390] EXT4-fs error (device loop8): ext4_iget_extra_inode:5104: inode #15: comm syz.8.7990: corrupted in-inode xattr: e_value size too large [ 616.428700][ T390] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.7990: couldn't read orphan inode 15 (err -117) [ 616.429813][T32489] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 616.445778][ T390] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 616.515563][ T406] loop1: detected capacity change from 0 to 256 [ 616.523512][ T404] loop3: detected capacity change from 0 to 1024 [ 616.523663][ T406] vfat: Bad value for 'fmask' [ 616.530245][ T404] EXT4-fs: Ignoring removed bh option [ 616.541352][ T404] EXT4-fs (loop3): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 616.563447][ T404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 616.592989][T24054] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.604501][T28638] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.636981][ T417] netlink: 180 bytes leftover after parsing attributes in process `syz.8.8000'. [ 616.639728][ T416] sctp: [Deprecated]: syz.1.8001 (pid 416) Use of struct sctp_assoc_value in delayed_ack socket option. [ 616.639728][ T416] Use struct sctp_sack_info instead [ 616.684642][ T422] loop3: detected capacity change from 0 to 512 [ 616.715106][ T428] netlink: 180 bytes leftover after parsing attributes in process `syz.8.8000'. [ 616.742217][ T434] tmpfs: Bad value for 'nr_inodes' [ 616.746911][ T433] loop3: detected capacity change from 0 to 128 [ 616.755548][ T433] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 616.767883][ T433] ext4 filesystem being mounted at /563/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 616.778682][ T437] loop1: detected capacity change from 0 to 1024 [ 616.786173][ T437] EXT4-fs: Ignoring removed bh option [ 616.792445][ T437] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 616.792927][T24054] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 616.817916][ T439] loop3: detected capacity change from 0 to 512 [ 616.825798][ T439] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002] [ 616.826113][ T437] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 616.837099][ T439] System zones: 1-12 [ 616.850686][ T439] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.8011: corrupted in-inode xattr: e_value size too large [ 616.865831][ T439] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.8011: couldn't read orphan inode 15 (err -117) [ 616.878291][ T439] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 616.884663][T32489] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.911649][ T445] loop1: detected capacity change from 0 to 1024 [ 616.920116][T24054] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.920375][ T445] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 616.958308][T32489] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 616.984603][ T452] sctp: [Deprecated]: syz.1.8014 (pid 452) Use of struct sctp_assoc_value in delayed_ack socket option. [ 616.984603][ T452] Use struct sctp_sack_info instead [ 616.984853][ T454] loop3: detected capacity change from 0 to 512 [ 617.008074][ T454] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 617.023234][ T454] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 617.036167][ T454] ext4 filesystem being mounted at /567/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 617.046022][ T461] loop1: detected capacity change from 0 to 512 [ 617.053251][ T461] EXT4-fs: Ignoring removed nobh option [ 617.064708][ T461] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.8018: corrupted inode contents [ 617.077320][ T461] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #3: comm syz.1.8018: mark_inode_dirty error [ 617.077610][T24054] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.089783][ T461] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #3: comm syz.1.8018: corrupted inode contents [ 617.109955][ T461] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.8018: mark_inode_dirty error [ 617.122239][ T461] __quota_error: 19 callbacks suppressed [ 617.122253][ T461] Quota error (device loop1): write_blk: dquota write failed [ 617.135402][ T461] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 617.145405][ T461] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.8018: Failed to acquire dquot type 0 [ 617.159454][ T461] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.8018: corrupted inode contents [ 617.173061][ T461] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #16: comm syz.1.8018: mark_inode_dirty error [ 617.184910][ T461] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.8018: corrupted inode contents [ 617.197655][ T461] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.8018: mark_inode_dirty error [ 617.219426][ T461] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.8018: corrupted inode contents [ 617.230086][ T475] loop3: detected capacity change from 0 to 512 [ 617.233787][ T476] 9pnet_fd: Insufficient options for proto=fd [ 617.244314][ T475] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1) [ 617.253927][ T475] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 617.264781][ T461] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 617.273560][ T461] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.8018: corrupted inode contents [ 617.285943][ T461] EXT4-fs error (device loop1): ext4_truncate:4666: inode #16: comm syz.1.8018: mark_inode_dirty error [ 617.299921][ T461] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 617.318796][ T461] EXT4-fs (loop1): 1 truncate cleaned up [ 617.325106][ T461] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 617.338658][ T461] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 617.343517][ T486] loop3: detected capacity change from 0 to 512 [ 617.372384][ T486] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 617.377650][ T29] audit: type=1400 audit(1754693904.184:41906): avc: denied { name_bind } for pid=491 comm="syz.5.8031" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 617.386663][ T486] ext4 filesystem being mounted at /571/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 617.432003][T32489] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.459318][T24054] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.485096][ T505] loop1: detected capacity change from 0 to 512 [ 617.508096][ T29] audit: type=1400 audit(1754693904.314:41907): avc: denied { watch } for pid=508 comm="syz.3.8035" path="/572/file1" dev="tmpfs" ino=3142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 617.553047][ T505] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 617.585268][ T29] audit: type=1400 audit(1754693904.374:41908): avc: denied { execute } for pid=518 comm="syz.8.8042" path=2F6D656D66643A0241BBCC960E202864656C6574656429 dev="hugetlbfs" ino=115722 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 617.611822][ T29] audit: type=1400 audit(1754693904.394:41909): avc: denied { execute_no_trans } for pid=521 comm="syz.8.8043" path="/279/file0" dev="tmpfs" ino=1541 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 617.666074][ T524] loop3: detected capacity change from 0 to 1024 [ 617.672821][ T524] EXT4-fs: Ignoring removed orlov option [ 617.678497][ T524] EXT4-fs: Ignoring removed nomblk_io_submit option [ 617.766857][ T547] loop8: detected capacity change from 0 to 128 [ 617.774192][ T546] loop1: detected capacity change from 0 to 512 [ 617.783814][ T547] ext4 filesystem being mounted at /282/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 617.798202][ T546] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 617.848791][ T557] loop1: detected capacity change from 0 to 512 [ 617.855634][ T557] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 617.878920][ T561] loop8: detected capacity change from 0 to 512 [ 617.885359][ T558] loop3: detected capacity change from 0 to 8192 [ 617.937534][ T558] loop3: p1 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2 [ 617.937757][ T558] loop3: p1 size 1048576 extends beyond EOD, truncated [ 618.041366][ T558] loop3: p3 start 67109888 is beyond EOD, truncated [ 618.051664][ T558] loop3: p5 size 1048576 extends beyond EOD, truncated [ 618.061808][ T558] loop3: p6 size 1048576 extends beyond EOD, truncated [ 618.066858][ T576] loop1: detected capacity change from 0 to 512 [ 618.072030][ T577] loop8: detected capacity change from 0 to 128 [ 618.076257][ T558] loop3: p7 size 1048576 extends beyond EOD, truncated [ 618.088970][ T558] loop3: p8 size 1048576 extends beyond EOD, truncated [ 618.097577][ T576] ext4 filesystem being mounted at /33/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 618.103748][ T558] loop3: p9 size 1048576 extends beyond EOD, truncated [ 618.116458][ T558] loop3: p10 size 1048576 extends beyond EOD, truncated [ 618.118118][ T581] loop8: detected capacity change from 0 to 1024 [ 618.124036][ T558] loop3: p11 size 1048576 extends beyond EOD, truncated [ 618.130374][ T581] EXT4-fs: Ignoring removed bh option [ 618.137258][ T558] loop3: p12 size 1048576 extends beyond EOD, truncated [ 618.149734][ T581] EXT4-fs (loop8): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 618.149889][ T558] loop3: p13 size 1048576 extends beyond EOD, truncated [ 618.166896][ T558] loop3: p14 size 1048576 extends beyond EOD, truncated [ 618.174745][ T558] loop3: p15 size 1048576 extends beyond EOD, truncated [ 618.183996][ T558] loop3: p16 size 1048576 extends beyond EOD, truncated [ 618.191601][ T558] loop3: p17 size 1048576 extends beyond EOD, truncated [ 618.199017][ T558] loop3: p18 size 1048576 extends beyond EOD, truncated [ 618.206624][ T558] loop3: p19 size 1048576 extends beyond EOD, truncated [ 618.214206][ T558] loop3: p20 size 1048576 extends beyond EOD, truncated [ 618.221820][ T558] loop3: p21 size 1048576 extends beyond EOD, truncated [ 618.229517][ T558] loop3: p22 size 1048576 extends beyond EOD, truncated [ 618.237214][ T558] loop3: p23 size 1048576 extends beyond EOD, truncated [ 618.240511][ T589] loop1: detected capacity change from 0 to 512 [ 618.250626][ T588] loop8: detected capacity change from 0 to 512 [ 618.257314][ T588] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 618.265046][ T558] loop3: p24 size 1048576 extends beyond EOD, truncated [ 618.276775][ T558] loop3: p25 size 1048576 extends beyond EOD, truncated [ 618.287380][ T558] loop3: p26 size 1048576 extends beyond EOD, truncated [ 618.294998][ T558] loop3: p27 size 1048576 extends beyond EOD, truncated [ 618.302581][ T558] loop3: p28 size 1048576 extends beyond EOD, truncated [ 618.310435][ T558] loop3: p29 size 1048576 extends beyond EOD, truncated [ 618.318467][ T558] loop3: p30 size 1048576 extends beyond EOD, truncated [ 618.330818][ T558] loop3: p31 size 1048576 extends beyond EOD, truncated [ 618.342853][ T558] loop3: p32 size 1048576 extends beyond EOD, truncated [ 618.350675][ T558] loop3: p33 size 1048576 extends beyond EOD, truncated [ 618.358492][ T558] loop3: p34 size 1048576 extends beyond EOD, truncated [ 618.366179][ T558] loop3: p35 size 1048576 extends beyond EOD, truncated [ 618.373728][ T558] loop3: p36 size 1048576 extends beyond EOD, truncated [ 618.381571][ T558] loop3: p37 size 1048576 extends beyond EOD, truncated [ 618.389057][ T558] loop3: p38 size 1048576 extends beyond EOD, truncated [ 618.395726][ T606] loop8: detected capacity change from 0 to 512 [ 618.396741][ T558] loop3: p39 size 1048576 extends beyond EOD, truncated [ 618.409586][ T558] loop3: p40 size 1048576 extends beyond EOD, truncated [ 618.416878][ T558] loop3: p41 size 1048576 extends beyond EOD, truncated [ 618.422772][ T606] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 618.424424][ T558] loop3: p42 size 1048576 extends beyond EOD, truncated [ 618.441874][ T558] loop3: p43 size 1048576 extends beyond EOD, truncated [ 618.449505][ T558] loop3: p44 size 1048576 extends beyond EOD, truncated [ 618.457167][ T558] loop3: p45 size 1048576 extends beyond EOD, truncated [ 618.464655][ T558] loop3: p46 size 1048576 extends beyond EOD, truncated [ 618.467054][ T610] loop8: detected capacity change from 0 to 512 [ 618.472290][ T558] loop3: p47 size 1048576 extends beyond EOD, truncated [ 618.479619][ T610] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 618.485578][ T558] loop3: p48 size 1048576 extends beyond EOD, truncated [ 618.502750][ T610] ext4 filesystem being mounted at /294/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 618.503113][ T558] loop3: p49 size 1048576 extends beyond EOD, truncated [ 618.524389][ T558] loop3: p50 size 1048576 extends beyond EOD, truncated [ 618.531880][ T558] loop3: p51 size 1048576 extends beyond EOD, truncated [ 618.539617][ T558] loop3: p52 size 1048576 extends beyond EOD, truncated [ 618.547184][ T558] loop3: p53 size 1048576 extends beyond EOD, truncated [ 618.554660][ T558] loop3: p54 size 1048576 extends beyond EOD, truncated [ 618.562339][ T558] loop3: p55 size 1048576 extends beyond EOD, truncated [ 618.569896][ T558] loop3: p56 size 1048576 extends beyond EOD, truncated [ 618.577254][ T558] loop3: p57 size 1048576 extends beyond EOD, truncated [ 618.585020][ T558] loop3: p58 size 1048576 extends beyond EOD, truncated [ 618.592554][ T558] loop3: p59 size 1048576 extends beyond EOD, truncated [ 618.596922][ T618] loop8: detected capacity change from 0 to 2048 [ 618.606192][ T558] loop3: p60 size 1048576 extends beyond EOD, truncated [ 618.613864][ T558] loop3: p61 size 1048576 extends beyond EOD, truncated [ 618.614795][ T618] ext4 filesystem being mounted at /297/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 618.631663][ T558] loop3: p62 size 1048576 extends beyond EOD, truncated [ 618.637082][ T618] EXT4-fs (loop8): Online defrag not supported with bigalloc [ 618.646257][ T558] loop3: p63 size 1048576 extends beyond EOD, truncated [ 618.659285][ T558] loop3: p64 size 1048576 extends beyond EOD, truncated [ 618.668253][ T558] loop3: p65 size 1048576 extends beyond EOD, truncated [ 618.676753][ T558] loop3: p66 size 1048576 extends beyond EOD, truncated [ 618.691837][ T558] loop3: p67 size 1048576 extends beyond EOD, truncated [ 618.704164][ T558] loop3: p68 size 1048576 extends beyond EOD, truncated [ 618.713307][ T558] loop3: p69 size 1048576 extends beyond EOD, truncated [ 618.723393][ T558] loop3: p70 size 1048576 extends beyond EOD, truncated [ 618.731642][ T558] loop3: p71 size 1048576 extends beyond EOD, truncated [ 618.750861][ T558] loop3: p72 size 1048576 extends beyond EOD, truncated [ 618.758318][ T558] loop3: p73 size 1048576 extends beyond EOD, truncated [ 618.770596][ T634] loop8: detected capacity change from 0 to 512 [ 618.777243][ T558] loop3: p74 size 1048576 extends beyond EOD, truncated [ 618.778283][ T634] EXT4-fs: Ignoring removed nobh option [ 618.790527][ T558] loop3: p75 size 1048576 extends beyond EOD, truncated [ 618.799264][ T558] loop3: p76 size 1048576 extends beyond EOD, truncated [ 618.806932][ T558] loop3: p77 size 1048576 extends beyond EOD, truncated [ 618.807780][ T634] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #3: comm syz.8.8090: corrupted inode contents [ 618.826077][ T558] loop3: p78 size 1048576 extends beyond EOD, truncated [ 618.837793][ T634] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #3: comm syz.8.8090: mark_inode_dirty error [ 618.849673][ T558] loop3: p79 size 1048576 extends beyond EOD, truncated [ 618.857310][ T558] loop3: p80 size 1048576 extends beyond EOD, truncated [ 618.862847][ T634] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #3: comm syz.8.8090: corrupted inode contents [ 618.876282][ T558] loop3: p81 size 1048576 extends beyond EOD, truncated [ 618.883908][ T558] loop3: p82 size 1048576 extends beyond EOD, truncated [ 618.891807][ T558] loop3: p83 size 1048576 extends beyond EOD, truncated [ 618.903494][ T558] loop3: p84 size 1048576 extends beyond EOD, truncated [ 618.910492][ T634] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #3: comm syz.8.8090: mark_inode_dirty error [ 618.922284][ T558] loop3: p85 size 1048576 extends beyond EOD, truncated [ 618.930531][ T558] loop3: p86 size 1048576 extends beyond EOD, truncated [ 618.938729][ T558] loop3: p87 size 1048576 extends beyond EOD, truncated [ 618.946757][ T634] Quota error (device loop8): write_blk: dquota write failed [ 618.954610][ T558] loop3: p88 size 1048576 extends beyond EOD, truncated [ 618.962786][ T634] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota [ 618.972889][ T558] loop3: p89 size 1048576 extends beyond EOD, truncated [ 618.980323][ T634] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.8090: Failed to acquire dquot type 0 [ 618.981100][ T558] loop3: p90 size 1048576 extends beyond EOD, truncated [ 618.992701][ T634] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.8090: corrupted inode contents [ 619.009243][ T558] loop3: p91 size 1048576 extends beyond EOD, truncated [ 619.010663][ T634] EXT4-fs error (device loop8): ext4_dirty_inode:6538: inode #16: comm syz.8.8090: mark_inode_dirty error [ 619.021209][ T558] loop3: p92 size 1048576 extends beyond EOD, truncated [ 619.040970][ T634] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.8090: corrupted inode contents [ 619.057772][ T652] loop4: detected capacity change from 0 to 2048 [ 619.064466][ T634] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.8090: mark_inode_dirty error [ 619.076710][ T634] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.8090: corrupted inode contents [ 619.089499][ T558] loop3: p93 size 1048576 extends beyond EOD, truncated [ 619.097397][ T558] loop3: p94 size 1048576 extends beyond EOD, truncated [ 619.121642][ T634] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 619.131228][ T634] EXT4-fs error (device loop8): ext4_do_update_inode:5653: inode #16: comm syz.8.8090: corrupted inode contents [ 619.137838][ T558] loop3: p95 size 1048576 extends beyond EOD, truncated [ 619.144620][ T634] EXT4-fs error (device loop8): ext4_truncate:4666: inode #16: comm syz.8.8090: mark_inode_dirty error [ 619.161618][ T634] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 619.171089][ T558] loop3: p96 size 1048576 extends beyond EOD, truncated [ 619.180701][ T661] loop4: detected capacity change from 0 to 512 [ 619.187272][ T634] EXT4-fs (loop8): 1 truncate cleaned up [ 619.193745][ T634] ext4 filesystem being mounted at /301/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 619.204361][ T558] loop3: p97 size 1048576 extends beyond EOD, truncated [ 619.212286][ T558] loop3: p98 size 1048576 extends beyond EOD, truncated [ 619.219294][ T661] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 619.236831][ T558] loop3: p99 size 1048576 extends beyond EOD, truncated [ 619.245270][ T558] loop3: p100 size 1048576 extends beyond EOD, truncated [ 619.254671][ T661] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 619.265164][ T558] loop3: p101 size 1048576 extends beyond EOD, truncated [ 619.301779][ T558] loop3: p102 size 1048576 extends beyond EOD, truncated [ 619.309449][ T558] loop3: p103 size 1048576 extends beyond EOD, truncated [ 619.317507][ T558] loop3: p104 size 1048576 extends beyond EOD, truncated [ 619.325188][ T558] loop3: p105 size 1048576 extends beyond EOD, truncated [ 619.332723][ T558] loop3: p106 size 1048576 extends beyond EOD, truncated [ 619.348353][ T672] loop8: detected capacity change from 0 to 512 [ 619.373334][ T672] EXT4-fs (loop8): blocks per group (95) and clusters per group (32768) inconsistent [ 619.384496][ T558] loop3: p107 size 1048576 extends beyond EOD, truncated [ 619.393203][ T558] loop3: p108 size 1048576 extends beyond EOD, truncated [ 619.401682][ T558] loop3: p109 size 1048576 extends beyond EOD, truncated [ 619.411944][ T672] loop8: detected capacity change from 0 to 128 [ 619.419676][ T558] loop3: p110 size 1048576 extends beyond EOD, truncated [ 619.422340][ T672] ext4 filesystem being mounted at /302/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 619.512167][ T558] loop3: p111 size 1048576 extends beyond EOD, truncated [ 619.533939][ T558] loop3: p112 size 1048576 extends beyond EOD, truncated [ 619.557135][ T672] EXT4-fs warning (device loop8): ext4_dirblock_csum_verify:375: inode #11: comm syz.8.8105: No space for directory leaf checksum. Please run e2fsck -D. [ 619.561522][ T558] loop3: p113 size 1048576 extends beyond EOD, truncated [ 619.572572][ T672] EXT4-fs error (device loop8): __ext4_find_entry:1626: inode #11: comm syz.8.8105: checksumming directory block 0 [ 619.580134][ T558] loop3: p114 size 1048576 extends beyond EOD, truncated [ 619.599608][ T558] loop3: p115 size 1048576 extends beyond EOD, truncated [ 619.607616][ T558] loop3: p116 size 1048576 extends beyond EOD, truncated [ 619.610279][ T696] loop1: detected capacity change from 0 to 1024 [ 619.615333][ T558] loop3: p117 size 1048576 extends beyond EOD, truncated [ 619.639307][ T696] EXT4-fs: Ignoring removed orlov option [ 619.645033][ T696] EXT4-fs: Ignoring removed nomblk_io_submit option [ 619.653833][ T558] loop3: p118 size 1048576 extends beyond EOD, truncated [ 619.691480][ T558] loop3: p119 size 1048576 extends beyond EOD, truncated [ 619.700232][ T558] loop3: p120 size 1048576 extends beyond EOD, truncated [ 619.708616][ T558] loop3: p121 size 1048576 extends beyond EOD, truncated [ 619.716621][ T558] loop3: p122 size 1048576 extends beyond EOD, truncated [ 619.724421][ T558] loop3: p123 size 1048576 extends beyond EOD, truncated [ 619.732091][ T558] loop3: p124 size 1048576 extends beyond EOD, truncated [ 619.739855][ T558] loop3: p125 size 1048576 extends beyond EOD, truncated [ 619.787816][ T558] loop3: p126 size 1048576 extends beyond EOD, truncated [ 619.799952][ T558] loop3: p127 size 1048576 extends beyond EOD, truncated [ 619.807754][ T558] loop3: p128 size 1048576 extends beyond EOD, truncated [ 619.820468][ T558] loop3: p129 size 1048576 extends beyond EOD, truncated [ 619.830233][ T558] loop3: p130 size 1048576 extends beyond EOD, truncated [ 619.840773][ T558] loop3: p131 size 1048576 extends beyond EOD, truncated [ 619.853722][ T558] loop3: p132 size 1048576 extends beyond EOD, truncated [ 619.862582][ T558] loop3: p133 size 1048576 extends beyond EOD, truncated [ 619.864497][ T715] loop8: detected capacity change from 0 to 1024 [ 619.876566][ T558] loop3: p134 size 1048576 extends beyond EOD, truncated [ 619.884178][ T717] loop4: detected capacity change from 0 to 1024 [ 619.891800][ T558] loop3: p135 size 1048576 extends beyond EOD, truncated [ 619.901169][ T717] EXT4-fs: Ignoring removed bh option [ 619.909511][ T558] loop3: p136 size 1048576 extends beyond EOD, truncated [ 619.918911][ T717] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 619.921566][ T558] loop3: p137 size 1048576 extends beyond EOD, truncated [ 619.942046][ T558] loop3: p138 size 1048576 extends beyond EOD, truncated [ 619.950334][ T558] loop3: p139 size 1048576 extends beyond EOD, truncated [ 619.976872][ T558] loop3: p140 size 1048576 extends beyond EOD, truncated [ 619.984664][ T558] loop3: p141 size 1048576 extends beyond EOD, truncated [ 619.992445][ T558] loop3: p142 size 1048576 extends beyond EOD, truncated [ 620.003506][ T558] loop3: p143 size 1048576 extends beyond EOD, truncated [ 620.011134][ T558] loop3: p144 size 1048576 extends beyond EOD, truncated [ 620.023524][ T731] loop8: detected capacity change from 0 to 128 [ 620.029961][ T558] loop3: p145 size 1048576 extends beyond EOD, truncated [ 620.041461][ T558] loop3: p146 size 1048576 extends beyond EOD, truncated [ 620.049194][ T737] loop4: detected capacity change from 0 to 512 [ 620.050409][ T731] ext4 filesystem being mounted at /306/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 620.055960][ T737] EXT4-fs: Ignoring removed nobh option [ 620.066937][ T558] loop3: p147 size 1048576 extends beyond EOD, truncated [ 620.079671][ T558] loop3: p148 size 1048576 extends beyond EOD, truncated [ 620.087705][ T558] loop3: p149 size 1048576 extends beyond EOD, truncated [ 620.096182][ T558] loop3: p150 size 1048576 extends beyond EOD, truncated [ 620.103901][ T558] loop3: p151 size 1048576 extends beyond EOD, truncated [ 620.111707][ T558] loop3: p152 size 1048576 extends beyond EOD, truncated [ 620.119432][ T558] loop3: p153 size 1048576 extends beyond EOD, truncated [ 620.120098][ T737] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.8132: corrupted inode contents [ 620.127043][ T558] loop3: p154 size 1048576 extends beyond EOD, truncated [ 620.146040][ T558] loop3: p155 size 1048576 extends beyond EOD, truncated [ 620.153508][ T558] loop3: p156 size 1048576 extends beyond EOD, truncated [ 620.161406][ T558] loop3: p157 size 1048576 extends beyond EOD, truncated [ 620.166040][ T737] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.8132: mark_inode_dirty error [ 620.168854][ T558] loop3: p158 size 1048576 extends beyond EOD, truncated [ 620.187675][ T558] loop3: p159 size 1048576 extends beyond EOD, truncated [ 620.193993][ T737] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.8132: corrupted inode contents [ 620.197013][ T558] loop3: p160 size 1048576 extends beyond EOD, truncated [ 620.214099][ T558] loop3: p161 size 1048576 extends beyond EOD, truncated [ 620.221528][ T558] loop3: p162 size 1048576 extends beyond EOD, truncated [ 620.230561][ T558] loop3: p163 size 1048576 extends beyond EOD, truncated [ 620.238114][ T558] loop3: p164 size 1048576 extends beyond EOD, truncated [ 620.239243][ T737] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.8132: mark_inode_dirty error [ 620.245813][ T558] loop3: p165 size 1048576 extends beyond EOD, truncated [ 620.257572][ T747] loop8: detected capacity change from 0 to 512 [ 620.264231][ T558] loop3: p166 size 1048576 extends beyond EOD, truncated [ 620.271808][ T737] Quota error (device loop4): write_blk: dquota write failed [ 620.277238][ T558] loop3: p167 size 1048576 extends beyond EOD, truncated [ 620.284412][ T737] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 620.291686][ T558] loop3: p168 size 1048576 extends beyond EOD, truncated [ 620.302981][ T747] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 620.308621][ T558] loop3: p169 size 1048576 extends beyond EOD, truncated [ 620.317257][ T737] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.8132: Failed to acquire dquot type 0 [ 620.324220][ T558] loop3: p170 size 1048576 extends beyond EOD, truncated [ 620.336822][ T737] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.8132: corrupted inode contents [ 620.342602][ T558] loop3: p171 size 1048576 extends beyond EOD, truncated [ 620.355184][ T737] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.8132: mark_inode_dirty error [ 620.361729][ T558] loop3: p172 size 1048576 extends beyond EOD, truncated [ 620.373412][ T737] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.8132: corrupted inode contents [ 620.379995][ T558] loop3: p173 size 1048576 extends beyond EOD, truncated [ 620.392302][ T737] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.8132: mark_inode_dirty error [ 620.398827][ T558] loop3: p174 size 1048576 extends beyond EOD, truncated [ 620.409750][ T737] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.8132: corrupted inode contents [ 620.417071][ T558] loop3: p175 size 1048576 extends beyond EOD, truncated [ 620.430289][ T737] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 620.436884][ T558] loop3: p176 size 1048576 extends beyond EOD, truncated [ 620.445838][ T737] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.8132: corrupted inode contents [ 620.451850][ T558] loop3: p177 size 1048576 extends beyond EOD, truncated [ 620.463944][ T737] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.8132: mark_inode_dirty error [ 620.471091][ T558] loop3: p178 size 1048576 extends beyond EOD, truncated [ 620.482891][ T737] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 620.488767][ T558] loop3: p179 size 1048576 extends beyond EOD, truncated [ 620.497565][ T737] EXT4-fs (loop4): 1 truncate cleaned up [ 620.504927][ T558] loop3: p180 size 1048576 extends beyond EOD, truncated [ 620.511515][ T737] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 620.517493][ T558] loop3: p181 size 1048576 extends beyond EOD, truncated [ 620.528678][ T747] ext4 filesystem being mounted at /309/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 620.540776][ T558] loop3: p182 size 1048576 extends beyond EOD, truncated [ 620.564668][ T558] loop3: p183 size 1048576 extends beyond EOD, truncated [ 620.572818][ T558] loop3: p184 size 1048576 extends beyond EOD, truncated [ 620.580348][ T558] loop3: p185 size 1048576 extends beyond EOD, truncated [ 620.588400][ T558] loop3: p186 size 1048576 extends beyond EOD, truncated [ 620.596053][ T558] loop3: p187 size 1048576 extends beyond EOD, truncated [ 620.603911][ T558] loop3: p188 size 1048576 extends beyond EOD, truncated [ 620.612641][ T754] loop4: detected capacity change from 0 to 128 [ 620.612893][ T558] loop3: p189 size 1048576 extends beyond EOD, truncated [ 620.626361][ T558] loop3: p190 size 1048576 extends beyond EOD, truncated [ 620.634727][ T558] loop3: p191 size 1048576 extends beyond EOD, truncated [ 620.648198][ T558] loop3: p192 size 1048576 extends beyond EOD, truncated [ 620.674488][ T558] loop3: p193 size 1048576 extends beyond EOD, truncated [ 620.689148][ T558] loop3: p194 size 1048576 extends beyond EOD, truncated [ 620.701167][ T558] loop3: p195 size 1048576 extends beyond EOD, truncated [ 620.709436][ T558] loop3: p196 size 1048576 extends beyond EOD, truncated [ 620.717819][ T558] loop3: p197 size 1048576 extends beyond EOD, truncated [ 620.717870][ T762] loop8: detected capacity change from 0 to 1024 [ 620.725343][ T558] loop3: p198 size 1048576 extends beyond EOD, truncated [ 620.738936][ T558] loop3: p199 size 1048576 extends beyond EOD, truncated [ 620.746669][ T558] loop3: p200 size 1048576 extends beyond EOD, truncated [ 620.754217][ T558] loop3: p201 size 1048576 extends beyond EOD, truncated [ 620.761763][ T558] loop3: p202 size 1048576 extends beyond EOD, truncated [ 620.769306][ T558] loop3: p203 size 1048576 extends beyond EOD, truncated [ 620.776766][ T558] loop3: p204 size 1048576 extends beyond EOD, truncated [ 620.784417][ T558] loop3: p205 size 1048576 extends beyond EOD, truncated [ 620.794004][ T558] loop3: p206 size 1048576 extends beyond EOD, truncated [ 620.801503][ T558] loop3: p207 size 1048576 extends beyond EOD, truncated [ 620.808998][ T558] loop3: p208 size 1048576 extends beyond EOD, truncated [ 620.816596][ T558] loop3: p209 size 1048576 extends beyond EOD, truncated [ 620.824368][ T558] loop3: p210 size 1048576 extends beyond EOD, truncated [ 620.831988][ T558] loop3: p211 size 1048576 extends beyond EOD, truncated [ 620.839557][ T558] loop3: p212 size 1048576 extends beyond EOD, truncated [ 620.847127][ T558] loop3: p213 size 1048576 extends beyond EOD, truncated [ 620.854693][ T558] loop3: p214 size 1048576 extends beyond EOD, truncated [ 620.867798][ T558] loop3: p215 size 1048576 extends beyond EOD, truncated [ 620.880253][ T558] loop3: p216 size 1048576 extends beyond EOD, truncated [ 620.892523][ T558] loop3: p217 size 1048576 extends beyond EOD, truncated [ 620.914815][ T558] loop3: p218 size 1048576 extends beyond EOD, truncated [ 620.932139][ T558] loop3: p219 size 1048576 extends beyond EOD, truncated [ 620.962059][ T558] loop3: p220 size 1048576 extends beyond EOD, truncated [ 620.972235][ T558] loop3: p221 size 1048576 extends beyond EOD, truncated [ 620.980679][ T558] loop3: p222 size 1048576 extends beyond EOD, truncated [ 620.990090][ T558] loop3: p223 size 1048576 extends beyond EOD, truncated [ 621.002264][ T558] loop3: p224 size 1048576 extends beyond EOD, truncated [ 621.010080][ T558] loop3: p225 size 1048576 extends beyond EOD, truncated [ 621.020095][ T558] loop3: p226 size 1048576 extends beyond EOD, truncated [ 621.035693][ T558] loop3: p227 size 1048576 extends beyond EOD, truncated [ 621.043492][ T558] loop3: p228 size 1048576 extends beyond EOD, truncated [ 621.052881][ T558] loop3: p229 size 1048576 extends beyond EOD, truncated [ 621.070950][ T558] loop3: p230 size 1048576 extends beyond EOD, truncated [ 621.089894][ T558] loop3: p231 size 1048576 extends beyond EOD, truncated [ 621.101140][ T558] loop3: p232 size 1048576 extends beyond EOD, truncated [ 621.108671][ T558] loop3: p233 size 1048576 extends beyond EOD, truncated [ 621.116955][ T558] loop3: p234 size 1048576 extends beyond EOD, truncated [ 621.126065][ T558] loop3: p235 size 1048576 extends beyond EOD, truncated [ 621.133872][ T785] loop8: detected capacity change from 0 to 1024 [ 621.140510][ T558] loop3: p236 size 1048576 extends beyond EOD, truncated [ 621.140978][ T785] EXT4-fs: inline encryption not supported [ 621.154207][ T558] loop3: p237 size 1048576 extends beyond EOD, truncated [ 621.155517][ T785] EXT4-fs: Ignoring removed bh option [ 621.167616][ T790] 9pnet_fd: Insufficient options for proto=fd [ 621.173928][ T558] loop3: p238 size 1048576 extends beyond EOD, truncated [ 621.182369][ T558] loop3: p239 size 1048576 extends beyond EOD, truncated [ 621.191971][ T558] loop3: p240 size 1048576 extends beyond EOD, truncated [ 621.200118][ T558] loop3: p241 size 1048576 extends beyond EOD, truncated [ 621.210288][ T558] loop3: p242 size 1048576 extends beyond EOD, truncated [ 621.241638][ T558] loop3: p243 size 1048576 extends beyond EOD, truncated [ 621.249300][ T558] loop3: p244 size 1048576 extends beyond EOD, truncated [ 621.257409][ T558] loop3: p245 size 1048576 extends beyond EOD, truncated [ 621.265513][ T558] loop3: p246 size 1048576 extends beyond EOD, truncated [ 621.273212][ T558] loop3: p247 size 1048576 extends beyond EOD, truncated [ 621.282029][ T558] loop3: p248 size 1048576 extends beyond EOD, truncated [ 621.301708][ T558] loop3: p249 size 1048576 extends beyond EOD, truncated [ 621.310096][ T558] loop3: p250 size 1048576 extends beyond EOD, truncated [ 621.327985][ T558] loop3: p251 size 1048576 extends beyond EOD, truncated [ 621.341181][ T558] loop3: p252 size 1048576 extends beyond EOD, truncated [ 621.364324][ T558] loop3: p253 size 1048576 extends beyond EOD, truncated [ 621.391479][ T558] loop3: p254 size 1048576 extends beyond EOD, truncated [ 621.399200][ T558] loop3: p255 size 1048576 extends beyond EOD, truncated [ 621.445972][ T805] loop1: detected capacity change from 0 to 1024 [ 621.474657][ T805] EXT4-fs: Ignoring removed bh option [ 621.485429][ T805] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 621.559514][ T817] loop1: detected capacity change from 0 to 512 [ 621.566730][ T817] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 621.569989][ T819] loop4: detected capacity change from 0 to 512 [ 621.609253][ T817] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 621.668994][ T828] loop1: detected capacity change from 0 to 512 [ 621.682549][ T830] loop8: detected capacity change from 0 to 1024 [ 621.691151][ T828] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 621.721317][ T830] ext4 filesystem being mounted at /320/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 621.783066][ T849] loop4: detected capacity change from 0 to 128 [ 621.793624][ T849] ext4 filesystem being mounted at /35/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 621.822706][ T857] loop8: detected capacity change from 0 to 512 [ 621.837633][ T858] loop1: detected capacity change from 0 to 2364 [ 621.870100][ T860] vlan3: entered promiscuous mode [ 621.875338][ T860] veth1_to_hsr: entered promiscuous mode [ 622.011917][ T884] loop8: detected capacity change from 0 to 128 [ 622.029748][ T884] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 622.047559][ T889] loop1: detected capacity change from 0 to 512 [ 622.076541][ T889] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 622.091653][ T889] loop1: detected capacity change from 0 to 128 [ 622.104900][ T889] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 622.169055][ T910] loop3: detected capacity change from 0 to 512 [ 622.188275][ T910] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e01c, mo2=0002] [ 622.197172][ T910] System zones: 1-12 [ 622.205011][ T910] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.8204: Directory hole found for htree index block 0 [ 622.217465][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 622.217486][ T29] audit: type=1400 audit(1754693909.014:41912): avc: denied { setopt } for pid=917 comm="syz.5.8209" lport=53670 faddr=::ffff:100.1.1.0 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 622.247729][ T29] audit: type=1400 audit(1754693909.014:41913): avc: denied { unmount } for pid=28638 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 622.250208][ T910] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -117 [ 622.276888][ T922] Invalid ELF header magic: != ELF [ 622.276978][ T910] EXT4-fs error (device loop3): dx_probe:791: inode #2: comm syz.3.8204: Directory hole found for htree index block 0 [ 622.294869][ T29] audit: type=1400 audit(1754693909.094:41914): avc: denied { module_load } for pid=921 comm="syz.8.8210" path="/sys/kernel/notes" dev="sysfs" ino=212 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 622.318994][ T910] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 622.353053][ T928] loop3: detected capacity change from 0 to 128 [ 622.361240][ T928] ext4 filesystem being mounted at /587/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 622.482105][ T944] loop3: detected capacity change from 0 to 512 [ 622.509517][ T946] loop3: detected capacity change from 0 to 1024 [ 622.522071][ T946] ext4 filesystem being mounted at /592/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 622.850577][ T965] chnl_net:caif_netlink_parms(): no params data found [ 622.869846][ T6201] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.896840][ T965] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.903946][ T965] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.911973][ T965] bridge_slave_0: entered allmulticast mode [ 622.918464][ T965] bridge_slave_0: entered promiscuous mode [ 622.926255][ T6201] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.936998][ T965] bridge0: port 2(bridge_slave_1) entered blocking state [ 622.944085][ T965] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.951375][ T965] bridge_slave_1: entered allmulticast mode [ 622.957834][ T965] bridge_slave_1: entered promiscuous mode [ 622.973196][ T6201] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.985603][ T965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 622.996311][ T965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 623.013640][ T6201] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.034419][ T965] team0: Port device team_slave_0 added [ 623.041040][ T965] team0: Port device team_slave_1 added [ 623.051867][ T984] loop1: detected capacity change from 0 to 128 [ 623.060109][ T984] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 623.073879][ T965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 623.080887][ T965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.106854][ T965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 623.119955][ T965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 623.126982][ T965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 623.127433][ T987] loop1: detected capacity change from 0 to 128 [ 623.152925][ T965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 623.171532][ T987] ext4 filesystem being mounted at /63/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 623.204995][ T965] hsr_slave_0: entered promiscuous mode [ 623.214071][ T965] hsr_slave_1: entered promiscuous mode [ 623.220010][ T965] debugfs: 'hsr0' already exists in 'hsr' [ 623.225801][ T965] Cannot create hsr debugfs directory [ 623.268057][ T998] loop8: detected capacity change from 0 to 128 [ 623.277943][ T998] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 623.385553][ T1008] loop8: detected capacity change from 0 to 128 [ 623.404839][ T1008] ext4 filesystem being mounted at /335/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 623.417423][ T6201] bond0 (unregistering): Released all slaves [ 623.426826][ T6201] bond1 (unregistering): Released all slaves [ 623.435648][ T6201] bond2 (unregistering): Released all slaves [ 623.444032][ T6201] bond3 (unregistering): Released all slaves [ 623.485060][ T6201] tipc: Left network mode [ 623.538117][ T6201] hsr_slave_0: left promiscuous mode [ 623.550373][ T6201] hsr_slave_1: left promiscuous mode [ 623.590221][ T1024] loop8: detected capacity change from 0 to 128 [ 623.598709][ T1024] ext4 filesystem being mounted at /342/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 623.627120][ T6201] veth1_macvtap: left promiscuous mode [ 623.632748][ T6201] veth0_macvtap: left promiscuous mode [ 623.638306][ T6201] veth1_vlan: left promiscuous mode [ 623.643601][ T6201] veth0_vlan: left promiscuous mode [ 623.722493][ T6199] smc: removing ib device syz! [ 623.988675][ T1037] loop8: detected capacity change from 0 to 512 [ 623.998960][ T1037] EXT4-fs error (device loop8): ext4_get_branch:178: inode #11: block 4294967295: comm syz.8.8254: invalid block [ 624.019141][ T1037] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.8254: invalid indirect mapped block 4294967295 (level 1) [ 624.034131][ T1037] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.8254: invalid indirect mapped block 4294967295 (level 1) [ 624.048404][ T1037] EXT4-fs (loop8): 2 truncates cleaned up [ 624.049475][ T6201] IPVS: stop unused estimator thread 0... [ 624.077349][ T1037] lo speed is unknown, defaulting to 1000 [ 624.084373][ T1037] lo speed is unknown, defaulting to 1000 [ 624.090285][ T1037] lo speed is unknown, defaulting to 1000 [ 624.097191][ T1037] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 624.108615][ T1037] lo speed is unknown, defaulting to 1000 [ 624.115021][ T1037] lo speed is unknown, defaulting to 1000 [ 624.123479][ T1037] lo speed is unknown, defaulting to 1000 [ 624.129682][ T1037] lo speed is unknown, defaulting to 1000 [ 624.135795][ T1037] lo speed is unknown, defaulting to 1000 [ 624.143060][ T1037] lo speed is unknown, defaulting to 1000 [ 624.156521][ T1037] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.211511][ T965] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 624.222391][ T965] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 624.235097][ T965] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 624.255576][ T965] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 624.280551][ T1037] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.322656][ T1037] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.339524][ T965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 624.362228][ T965] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.374898][ T1037] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 624.391039][ T6201] bridge0: port 1(bridge_slave_0) entered blocking state [ 624.398195][ T6201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 624.411670][ T6241] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.418758][ T6241] bridge0: port 2(bridge_slave_1) entered forwarding state [ 624.441783][ T6201] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.479464][ T6241] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.508175][ T6241] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.521684][ T6241] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.563394][ T965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.642426][ T965] veth0_vlan: entered promiscuous mode [ 624.650484][ T965] veth1_vlan: entered promiscuous mode [ 624.668491][ T965] veth0_macvtap: entered promiscuous mode [ 624.676227][ T965] veth1_macvtap: entered promiscuous mode [ 624.688598][ T965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 624.700382][ T965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 624.713690][ T6199] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.725988][ T6199] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.738067][ T6199] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.750318][ T6199] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.908926][ T1096] loop3: detected capacity change from 0 to 1024 [ 624.924471][ T1096] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 624.995754][ T1105] loop3: detected capacity change from 0 to 512 [ 625.025460][ T29] audit: type=1400 audit(1754693911.834:41915): avc: denied { listen } for pid=1106 comm="syz.3.8275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 625.048341][ T29] audit: type=1400 audit(1754693911.834:41916): avc: denied { accept } for pid=1106 comm="syz.3.8275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 625.249195][ T1127] netlink: 'syz.4.8283': attribute type 10 has an invalid length. [ 625.267576][ T29] audit: type=1326 audit(1754693912.074:41917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1113 comm="syz.1.8278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f463ebe9 code=0x7ffc0000 [ 625.291218][ T29] audit: type=1326 audit(1754693912.074:41918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1113 comm="syz.1.8278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f463ebe9 code=0x7ffc0000 [ 625.314986][ T29] audit: type=1326 audit(1754693912.074:41919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1113 comm="syz.1.8278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa0f463ebe9 code=0x7ffc0000 [ 625.338541][ T29] audit: type=1326 audit(1754693912.074:41920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1113 comm="syz.1.8278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f463ebe9 code=0x7ffc0000 [ 625.345611][ T1137] bridge_slave_0: left allmulticast mode [ 625.362181][ T29] audit: type=1326 audit(1754693912.074:41921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1113 comm="syz.1.8278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0f463ebe9 code=0x7ffc0000 [ 625.367849][ T1137] bridge_slave_0: left promiscuous mode [ 625.397029][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.407095][ T1137] bridge_slave_1: left allmulticast mode [ 625.412882][ T1137] bridge_slave_1: left promiscuous mode [ 625.418597][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.434171][ T1137] bond0: (slave bond_slave_0): Releasing backup interface [ 625.445749][ T1137] bond0: (slave bond_slave_1): Releasing backup interface [ 625.470981][ T1137] team0: Port device team_slave_0 removed [ 625.482280][ T1137] team0: Port device team_slave_1 removed [ 625.489327][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 625.496848][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.512125][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 625.519527][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 626.133569][ T1204] loop3: detected capacity change from 0 to 512 [ 626.162158][ T1204] EXT4-fs: Ignoring removed nobh option [ 626.204123][ T1204] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.8318: corrupted inode contents [ 626.241463][ T1219] loop1: detected capacity change from 0 to 512 [ 626.248097][ T1219] EXT4-fs: Ignoring removed mblk_io_submit option [ 626.251892][ T1204] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #3: comm syz.3.8318: mark_inode_dirty error [ 626.257402][ T1219] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 626.286401][ T1204] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #3: comm syz.3.8318: corrupted inode contents [ 626.301772][ T1221] loop4: detected capacity change from 0 to 512 [ 626.309647][ T1219] EXT4-fs (loop1): 1 truncate cleaned up [ 626.315386][ T1204] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #3: comm syz.3.8318: mark_inode_dirty error [ 626.341227][ T1204] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.8318: Failed to acquire dquot type 0 [ 626.357930][ T1221] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.8325: invalid block [ 626.379441][ T1221] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.8325: invalid indirect mapped block 4294967295 (level 1) [ 626.398496][ T1221] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.8325: invalid indirect mapped block 4294967295 (level 1) [ 626.400995][ T1204] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.8318: corrupted inode contents [ 626.414380][ T1221] EXT4-fs (loop4): 2 truncates cleaned up [ 626.431565][ T1204] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #16: comm syz.3.8318: mark_inode_dirty error [ 626.445547][ T1204] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.8318: corrupted inode contents [ 626.459708][ T1221] siw: device registration error -23 [ 626.460812][ T1204] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #16: comm syz.3.8318: mark_inode_dirty error [ 626.478374][ T1204] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.8318: corrupted inode contents [ 626.478678][ T1221] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.498740][ T1204] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem [ 626.509488][ T1204] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #16: comm syz.3.8318: corrupted inode contents [ 626.521658][ T1204] EXT4-fs error (device loop3): ext4_truncate:4666: inode #16: comm syz.3.8318: mark_inode_dirty error [ 626.532880][ T1204] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem [ 626.542305][ T1204] EXT4-fs (loop3): 1 truncate cleaned up [ 626.548400][ T1204] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 626.565073][ T1221] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.614134][ T1221] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.636354][ T1236] loop3: detected capacity change from 0 to 512 [ 626.669640][ T1238] loop3: detected capacity change from 0 to 1024 [ 626.676461][ T1238] EXT4-fs: Ignoring removed bh option [ 626.683579][ T1238] ext4: Unknown parameter 'smackfsroot' [ 626.691670][ T1221] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.748192][ T6241] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.759852][ T6241] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.768906][ T1239] loop3: detected capacity change from 0 to 2048 [ 626.775445][ T6241] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.784028][ T6241] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.832847][ T1245] Invalid ELF header magic: != ELF [ 626.862458][ T1249] loop4: detected capacity change from 0 to 128 [ 627.034693][ T1257] loop4: detected capacity change from 0 to 512 [ 627.041426][ T1257] EXT4-fs: Ignoring removed nobh option [ 627.052564][ T1257] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.8339: corrupted inode contents [ 627.068220][ T1257] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.8339: mark_inode_dirty error [ 627.080396][ T1257] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.8339: corrupted inode contents [ 627.092634][ T1257] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.8339: mark_inode_dirty error [ 627.104580][ T1257] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.8339: Failed to acquire dquot type 0 [ 627.116533][ T1257] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.8339: corrupted inode contents [ 627.128914][ T1257] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.8339: mark_inode_dirty error [ 627.141969][ T1257] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.8339: corrupted inode contents [ 627.154331][ T1257] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.8339: mark_inode_dirty error [ 627.166381][ T1257] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.8339: corrupted inode contents [ 627.178632][ T1257] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 627.187374][ T1257] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.8339: corrupted inode contents [ 627.199565][ T1257] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.8339: mark_inode_dirty error [ 627.216973][ T1257] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 627.233198][ T1269] sctp: [Deprecated]: syz.1.8342 (pid 1269) Use of struct sctp_assoc_value in delayed_ack socket option. [ 627.233198][ T1269] Use struct sctp_sack_info instead [ 627.252189][ T1257] EXT4-fs (loop4): 1 truncate cleaned up [ 627.258386][ T1257] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 627.306674][ T1288] loop4: detected capacity change from 0 to 128 [ 627.311602][ T1290] loop1: detected capacity change from 0 to 128 [ 627.325899][ T1288] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 627.358481][ T1294] siw: device registration error -23 [ 627.431825][ T1298] loop4: detected capacity change from 0 to 512 [ 627.438584][ T1298] EXT4-fs: Ignoring removed mblk_io_submit option [ 627.449435][ T1298] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 627.462835][ T1298] EXT4-fs (loop4): 1 truncate cleaned up [ 628.135071][ T1295] ================================================================== [ 628.143193][ T1295] BUG: KCSAN: data-race in __mark_inode_dirty / __mark_inode_dirty [ 628.151113][ T1295] [ 628.153436][ T1295] write to 0xffff888119d12528 of 4 bytes by task 1290 on cpu 1: [ 628.161059][ T1295] __mark_inode_dirty+0x240/0x760 [ 628.166099][ T1295] fat_update_time+0x1ec/0x200 [ 628.170872][ T1295] touch_atime+0x145/0x340 [ 628.175303][ T1295] filemap_splice_read+0x629/0x6b0 [ 628.180424][ T1295] splice_direct_to_actor+0x26f/0x680 [ 628.185802][ T1295] do_splice_direct+0xda/0x150 [ 628.190566][ T1295] do_sendfile+0x380/0x650 [ 628.194986][ T1295] __x64_sys_sendfile64+0x105/0x150 [ 628.200193][ T1295] x64_sys_call+0x2bb0/0x2ff0 [ 628.204873][ T1295] do_syscall_64+0xd2/0x200 [ 628.209389][ T1295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.215280][ T1295] [ 628.217598][ T1295] read to 0xffff888119d12528 of 4 bytes by task 1295 on cpu 0: [ 628.225135][ T1295] __mark_inode_dirty+0x18e/0x760 [ 628.230165][ T1295] fat_update_time+0x1ec/0x200 [ 628.234973][ T1295] touch_atime+0x145/0x340 [ 628.239406][ T1295] filemap_splice_read+0x629/0x6b0 [ 628.244529][ T1295] splice_direct_to_actor+0x26f/0x680 [ 628.249909][ T1295] do_splice_direct+0xda/0x150 [ 628.254672][ T1295] do_sendfile+0x380/0x650 [ 628.259103][ T1295] __x64_sys_sendfile64+0x105/0x150 [ 628.264311][ T1295] x64_sys_call+0x2bb0/0x2ff0 [ 628.269004][ T1295] do_syscall_64+0xd2/0x200 [ 628.273507][ T1295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.279405][ T1295] [ 628.281724][ T1295] value changed: 0x00000000 -> 0x00000038 [ 628.287433][ T1295] [ 628.289748][ T1295] Reported by Kernel Concurrency Sanitizer on: [ 628.295898][ T1295] CPU: 0 UID: 0 PID: 1295 Comm: syz.1.8348 Tainted: G W 6.16.0-syzkaller-12063-g37816488247d #0 PREEMPT(voluntary) [ 628.309532][ T1295] Tainted: [W]=WARN [ 628.313331][ T1295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 628.323382][ T1295] ==================================================================