last executing test programs: 4m58.865137271s ago: executing program 3 (id=2970): write$binfmt_aout(0xffffffffffffffff, 0x0, 0x20) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x11) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 4m57.935985956s ago: executing program 3 (id=2981): r0 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x804, &(0x7f0000000040), 0x1, 0x4f9, &(0x7f0000000a40)="$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") bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x0, r0}, 0x18) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000480)={'syztnl0\x00', &(0x7f0000000440)={'ip_vti0\x00', 0x0, 0x8000, 0x20, 0x80000001, 0x35, {{0x6, 0x4, 0x3, 0x39, 0x18, 0x67, 0x0, 0x10, 0x29, 0x0, @empty, @remote, {[@ra={0x94, 0x4, 0x1}]}}}}}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89001) bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./file0\x00'}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) 4m57.782435148s ago: executing program 3 (id=2985): bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) link(&(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', 0x0) 4m57.752360951s ago: executing program 3 (id=2987): r0 = syz_mount_image$msdos(&(0x7f0000001100), &(0x7f0000000300)='./file1\x00', 0x800884, &(0x7f0000000000)=ANY=[], 0x5, 0x2b4, &(0x7f00000013c0)="$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") r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x61fd, 0x3010, 0x0, 0x145}, &(0x7f0000000040), &(0x7f0000000080)) r2 = epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r4}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=';', 0x1}], 0x1}, 0x0) recvmsg$unix(r6, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000100) add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r7 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6d50745d}, 0x0, 0x0, r7, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_clone(0x4080b000, 0x0, 0x0, &(0x7f0000000e40), 0x0, 0x0) epoll_pwait(r2, &(0x7f0000000200)=[{}], 0x1, 0x6e, 0x0, 0x0) close(r2) poll(&(0x7f0000000000)=[{r1, 0xd010}], 0x1, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @c}}) 4m57.51530948s ago: executing program 3 (id=2993): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108284, 0x4, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0\x00', 0x1000000, &(0x7f0000000300)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2cb, &(0x7f0000000cc0)="$eJzs3c9rE1sUwPHTpm3SljZ58HjwHjw94EY3QxsXLjVIC2JAqU1RF8LUTjRkTMpMqEREsxG3/hGuKu7cCerSTTfiQvfuiiC66UIcyUymJm1a0+ZHY/v9QHtPcu7hnrbTclJIsn71yZ181jWyZkkGYyqDIhXZEElUo5qB2jroxyNSryKnxr99/P/KtesXU+n0zJzqbGr+dFJVJ4+/Cre+mHwZlbXEjfUvyU9r/6z9u/5j/nbO1ZyrhWJJTV0sFkvmom3pUs7NG6qXbct0Lc0VXMtpyGft4vJyWc3C0sTYsmO5rpqFsuatspaKWnLKat4ycwU1DEMnxuRoG2phT2Z1bs5M7Zj2Ih3tCF032uxOx0lVmiczqz3oCQAA9Jnd5/9ggN95/k8vBOsO8//d+8Nn3pTGF4L5//lTkdbmf5HG+f9DW/P/QE+/oX2u0nDrN/M/DgXHSZljtd/fRsz/AAAAAAAAAAAAAAAAAAAAAAD8CTY8L+55Xjxcw4+oiMREJLx90H2iO/b58z97QO2iw+qeuBcTsR+vZEYlWIN8Kis5scWSKYnLd/96qAni2QvpmSn1JeS1/XAlU62srhGJhvWhRLP6Y39NB/XaWD8stWfwBecnJS5/Nz8/2bR+RE6eqOvfkLi8uylFsWXJv66ffa1+rtY/mFY9fym9pX7U3wcAAAAAwGFg6KZtj9/9vL8hJtvzQf0e/j+w5fH1kPzXyktUAgAAAACAtrnle3nTti1nH0FURNoo30PgDXT9iM4FEemLNrYE50SkD9roVRATkeAe3U/5583ylqq8FvYMiUi7X1esh5fWQf9lAgAAANBpv4b+PRS9f9TFjgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOHpafT2wcP+2VJjYpbzuuIi83Xx7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODI+RkAAP//KGghCg==") r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 4m57.367873212s ago: executing program 3 (id=2995): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc0100000000000000000000000000010004000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) r1 = open(0x0, 0x143c62, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socket(0x2, 0x80805, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f80)="$eJzs3c9rJFkdAPBvdbpjMpPZZNWDLriu7kJm0OlONu5u8LCOIHpaUNf7GJNOCOmkQ7qzOwmLm8E/QBBRwZNevAj+AYIsePG4CAt6VlQU0VkFPejUUt3VmZlMd6cz0/kxyecDlXqvXlV93+tQ1fW6HlUBXFjPRcSNiLibpum1iJjMlxfyKfbaU7be+3feWsymJNL09X8kkeTLOvtK8vnlfLOxiPj6VyK+lTwct7Gzu7ZQq1W38nylub5ZaezsXl9dX1iprlQ35uZmX55/Zf6l+ZmhtPNKRLz6pb/84Ls/+/Krv/rsm3+8+ber386qNZGX39+OIyr2K2w3vXTj4AZbjxjsLMraU+pkxrutMfLQktvHXCcAALrLrvE/HBGfjohrMRkj/S9nAQAAgCdQ+oWJ+F8SkXY32mM5AAAA8AQptMbAFqOcjwWYiEKhXG6P4f1oXCrU6o3mZ5br2xtL7bGyU1EqLK/WqjP5WOGpKCVZfraVvpd/8UB+LiKejojvT4638uXFem3ptH/8AAAAgAvicqvPnxQ6/f9/T7b7/wAAAMA5M3WEdf9zjPUAAAAAjs9R+v8AAADAk0n/HwAAAM61r772WjalnfdfL72xs71Wf+P6UrWxVl7fXiwv1rc2yyv1+krrmX3rh+2vVq9vfi42tm9VmtVGs9LY2b25Xt/eaN5cbb0OHAAAADgFT3/ynd8nEbH3+fHWlBkdbNMBVwPOquJ+KsnnXQ7rPzzVnv/5hCoFnIiRvqWlE6sHcPKKp10B4NT4hgeSQ8p7Dt55N59/arj1AQAAhm/6473v/xf6brnXvxg48xzEcHH1v/8PnGet+/+DjuR1sQDnSskVAFx4g9//P3AR8O6gEdL0yJUCAACGaqI1JYVyfmU/EYVCuRxxpfVagFKyvFqrzkTEUxHxu8nSh7L8bGvL5NA+AwAAAAAAAAAAAAAAAAAAAAAAAADQlqZJpAAAAMC5FlH4a/Lr9rP8pydfmDj4+8Bo8t/JyF8R+uaPX//hrYVmc2s2W/7P/eXNH+XLXzyNXzAAAADgQjjSC/w7/fROPx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhun9O28tdqaTjPv3L0bE1IH4SVZSjLGI0YixKEXEpX8lUbxvu0JEjAwh/nj252Pd2p9k1doPeTB+0tn2Me3d7hs/prJPoUf8y0OIDxfZO9n550a3468Qz7Xm3Y+/YsQD+UfV9fyXG8v/jvQ4/q8MGOOZ935R6Rn/dsQzxe7nn078pEf85weM/81v7O72Kkt/EjHd9fsneSBWpbm+WWns7F5fXV9Yqa5UN+bmZl+ef2X+pfmZyvJqrZr/7Rrje5/45d1+7b/UI/7UIe1/YcD2//+9W3c+0k6WusW/+nyX+L/5ab7Gw/Hz77707TydlU930nvt9P2e/flvn+3X/qUe7T/s/391wPZf+9p3/jTgqgDACWjs7K4t1GrVrWEnCse25yMmsl76GajGWftYJKpbjbeHusM0TdPsmHqM/SRxFj6WVuK0z0wAAMCw3bvoP+2aAAAAAAAAAAAAAAAAAAAAwMV1Eo8TOxhzbz+VDOMR2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ/FBAAAA///ROdsN") r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0700000004000000080000000001000002400200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/12], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r7 = syz_io_uring_setup(0x568e, &(0x7f0000000100)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x1, 0x8}) io_uring_enter(r7, 0x6efc, 0x3900, 0xb, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r10}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000000c0), 0x0, 0x2, r10}, 0x38) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x11, {0x5, 0x1}, 0x1}, 0x1) 4m57.367499302s ago: executing program 32 (id=2995): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc0100000000000000000000000000010004000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) r1 = open(0x0, 0x143c62, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socket(0x2, 0x80805, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f80)="$eJzs3c9rJFkdAPBvdbpjMpPZZNWDLriu7kJm0OlONu5u8LCOIHpaUNf7GJNOCOmkQ7qzOwmLm8E/QBBRwZNevAj+AYIsePG4CAt6VlQU0VkFPejUUt3VmZlMd6cz0/kxyecDlXqvXlV93+tQ1fW6HlUBXFjPRcSNiLibpum1iJjMlxfyKfbaU7be+3feWsymJNL09X8kkeTLOvtK8vnlfLOxiPj6VyK+lTwct7Gzu7ZQq1W38nylub5ZaezsXl9dX1iprlQ35uZmX55/Zf6l+ZmhtPNKRLz6pb/84Ls/+/Krv/rsm3+8+ber386qNZGX39+OIyr2K2w3vXTj4AZbjxjsLMraU+pkxrutMfLQktvHXCcAALrLrvE/HBGfjohrMRkj/S9nAQAAgCdQ+oWJ+F8SkXY32mM5AAAA8AQptMbAFqOcjwWYiEKhXG6P4f1oXCrU6o3mZ5br2xtL7bGyU1EqLK/WqjP5WOGpKCVZfraVvpd/8UB+LiKejojvT4638uXFem3ptH/8AAAAgAvicqvPnxQ6/f9/T7b7/wAAAMA5M3WEdf9zjPUAAAAAjs9R+v8AAADAk0n/HwAAAM61r772WjalnfdfL72xs71Wf+P6UrWxVl7fXiwv1rc2yyv1+krrmX3rh+2vVq9vfi42tm9VmtVGs9LY2b25Xt/eaN5cbb0OHAAAADgFT3/ynd8nEbH3+fHWlBkdbNMBVwPOquJ+KsnnXQ7rPzzVnv/5hCoFnIiRvqWlE6sHcPKKp10B4NT4hgeSQ8p7Dt55N59/arj1AQAAhm/6473v/xf6brnXvxg48xzEcHH1v/8PnGet+/+DjuR1sQDnSskVAFx4g9//P3AR8O6gEdL0yJUCAACGaqI1JYVyfmU/EYVCuRxxpfVagFKyvFqrzkTEUxHxu8nSh7L8bGvL5NA+AwAAAAAAAAAAAAAAAAAAAAAAAADQlqZJpAAAAMC5FlH4a/Lr9rP8pydfmDj4+8Bo8t/JyF8R+uaPX//hrYVmc2s2W/7P/eXNH+XLXzyNXzAAAADgQjjSC/w7/fROPx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhun9O28tdqaTjPv3L0bE1IH4SVZSjLGI0YixKEXEpX8lUbxvu0JEjAwh/nj252Pd2p9k1doPeTB+0tn2Me3d7hs/prJPoUf8y0OIDxfZO9n550a3468Qz7Xm3Y+/YsQD+UfV9fyXG8v/jvQ4/q8MGOOZ935R6Rn/dsQzxe7nn078pEf85weM/81v7O72Kkt/EjHd9fsneSBWpbm+WWns7F5fXV9Yqa5UN+bmZl+ef2X+pfmZyvJqrZr/7Rrje5/45d1+7b/UI/7UIe1/YcD2//+9W3c+0k6WusW/+nyX+L/5ab7Gw/Hz77707TydlU930nvt9P2e/flvn+3X/qUe7T/s/391wPZf+9p3/jTgqgDACWjs7K4t1GrVrWEnCse25yMmsl76GajGWftYJKpbjbeHusM0TdPsmHqM/SRxFj6WVuK0z0wAAMCw3bvoP+2aAAAAAAAAAAAAAAAAAAAAwMV1Eo8TOxhzbz+VDOMR2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ/FBAAAA///ROdsN") r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0700000004000000080000000001000002400200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/12], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r7 = syz_io_uring_setup(0x568e, &(0x7f0000000100)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x1, 0x8}) io_uring_enter(r7, 0x6efc, 0x3900, 0xb, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r10}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000000c0), 0x0, 0x2, r10}, 0x38) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x11, {0x5, 0x1}, 0x1}, 0x1) 4m28.067895547s ago: executing program 4 (id=3421): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r2 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x114df, 0x0, 0x1, 0x89}, &(0x7f00000003c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780}) io_uring_enter(r2, 0x3518, 0xaddf, 0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20) mbind(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4003, &(0x7f0000000c00)=0xc, 0x6, 0x2) socket$nl_route(0x10, 0x3, 0x0) 4m27.805021189s ago: executing program 4 (id=3426): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x7ff}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800020095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) clock_getres(0xfffffffffffffff1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000040)={'netpci0\x00', {0x2, 0x0, @remote}}) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x70, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) 4m27.208720026s ago: executing program 4 (id=3433): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x11) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 4m26.650927382s ago: executing program 4 (id=3443): r0 = syz_mount_image$msdos(&(0x7f0000001100), &(0x7f0000000300)='./file1\x00', 0x800884, &(0x7f0000000000)=ANY=[], 0x5, 0x2b4, &(0x7f00000013c0)="$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") r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x61fd, 0x3010, 0x0, 0x145}, &(0x7f0000000040), &(0x7f0000000080)) r2 = epoll_create1(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r4}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=';', 0x1}], 0x1}, 0x0) recvmsg$unix(r6, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x40000100) add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) r7 = perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x6d50745d}, 0x0, 0x0, r7, 0x0) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) syz_clone(0x4080b000, 0x0, 0x0, &(0x7f0000000e40), 0x0, 0x0) epoll_pwait(r2, &(0x7f0000000200)=[{}], 0x1, 0x6e, 0x0, 0x0) close(r2) poll(&(0x7f0000000000)=[{r1, 0xd010}], 0x1, 0x9) openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000040)={@id={0x2, 0x0, @c}}) 4m26.077392008s ago: executing program 4 (id=3447): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x6c, 0x7, 0x8001, 0x5, 0x1000, 0x2, "02f27bb8fbae12e7290daf249cd7338871ef6bc87eeeaf59ebcd84205fddf8dbe34a7f84ff67e1b02b5f243d22548f82b5ac41e07b928a447c1707db46a616fd20891fd6baa7650df148aa93be18c0bcf3303cefe3b59b3d1ad64c5bb82409794f598074aede5de18d91fdc0"}}, 0x184) bpf$MAP_CREATE(0x0, 0x0, 0x50) 4m25.839932727s ago: executing program 4 (id=3448): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, 0x0) perf_event_open(0x0, 0x0, 0x2000000000006, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x6c, 0x7, 0x8001, 0x5, 0x1000, 0x2, "02f27bb8fbae12e7290daf249cd7338871ef6bc87eeeaf59ebcd84205fddf8dbe34a7f84ff67e1b02b5f243d22548f82b5ac41e07b928a447c1707db46a616fd20891fd6baa7650df148aa93be18c0bcf3303cefe3b59b3d1ad64c5bb82409794f598074aede5de18d91fdc0"}}, 0x184) bpf$MAP_CREATE(0x0, 0x0, 0x50) 4m25.839514817s ago: executing program 33 (id=3448): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r5 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, 0x0) perf_event_open(0x0, 0x0, 0x2000000000006, r5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)={0x58, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffbfff9}}}]}}]}, 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000040)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x6c, 0x7, 0x8001, 0x5, 0x1000, 0x2, "02f27bb8fbae12e7290daf249cd7338871ef6bc87eeeaf59ebcd84205fddf8dbe34a7f84ff67e1b02b5f243d22548f82b5ac41e07b928a447c1707db46a616fd20891fd6baa7650df148aa93be18c0bcf3303cefe3b59b3d1ad64c5bb82409794f598074aede5de18d91fdc0"}}, 0x184) bpf$MAP_CREATE(0x0, 0x0, 0x50) 2.139266617s ago: executing program 2 (id=7625): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800020095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) clock_getres(0xfffffffffffffff1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000040)={'netpci0\x00', {0x2, 0x0, @remote}}) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x70, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) 1.623479829s ago: executing program 1 (id=7645): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x56) connect$inet(r2, &(0x7f0000000380)={0x2, 0x4e25, @dev={0xac, 0x14, 0x14, 0x3e}}, 0x10) sendmmsg(r2, &(0x7f0000006140)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)="65c6d96326a838047976a77611d4c4ecc94b3585c42786716ad7c93fd3a228e9a1cd93801f5b4033ea9ae2b561128c2893aba2af73f86ac4a65917672e186b297cada86c7b329c4831efa7d660040c757e6ce437d7853ac2cca9605a2e18bf6529e94453fac161511f4483dc8b5294583cc78cd79fb68fb57bd8697ac1639517070e92cd2d36932b0e26cf8fdd87e817f08f7d937282c63371e22e43e8ab5c2b3d851d147f260004a12512be6e3b6b48a430a4e4747a28d766c634658499181a54867295ad5496ef6eed69b0da6b885004a5bc869e090798f4a1139e098f282ab4aefc8a67fe2087e1eadd30c54f4c87b1fb7a", 0xf3}, {&(0x7f00000002c0)="b16b5d1ddcad4b5eedb9593060ada4a1778939f40388ef540871ce291c1010f3310edf7028093cf8709632cad4866d5e448d5385c80db3518564b1194247acfb3b463ee97c794123a991311e51e1790748a23c3301974b905bbd18b3e54cb3cc90c180fba7461df205130349d430083d2c66828f43", 0x75}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000) close(r2) 1.600328351s ago: executing program 6 (id=7647): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xa6400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8f}, 0x94) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) r4 = socket(0x10, 0x3, 0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x0) pwritev(r5, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000200)="9cc4", 0x2}], 0x2, 0xffffff01, 0x2) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) sendmsg$kcm(r3, &(0x7f00000002c0)={&(0x7f0000000bc0)=@caif=@dgm={0x25, 0x12}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000140)="18", 0x1}], 0x1}, 0x0) rt_sigaction(0x28, 0x0, 0x0, 0x8, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18032689c9db0900f8ffffe89500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xd, &(0x7f0000000300)=""/13, 0x41000, 0x3d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x6, 0x4, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x1, r1, r1], &(0x7f0000000540)=[{0x0, 0x3, 0xa, 0x4}, {0x2, 0x3, 0xa, 0x9}, {0x1, 0x2, 0x0, 0x5}], 0x10, 0xfffffff2}, 0x94) 1.556402345s ago: executing program 1 (id=7648): r0 = socket(0x1e, 0x5, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x2017be01}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r3}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb017918"], 0x0, 0x18, 0x0, 0x2}, 0x28) ioctl$sock_ifreq(r2, 0x8946, &(0x7f0000000180)={'hsr0\x00', @ifru_names='caif0\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x2}, 0x18) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r5 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) preadv2(r5, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r7}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4e24, @multicast2}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r8, 0x0, 0xfffffffffffffffd}, 0x18) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) 1.419719095s ago: executing program 1 (id=7651): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x4}, 0x18) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) r1 = open(0x0, 0x143c62, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x80000, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) socket(0x2, 0x80805, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f80)="$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") r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0700000004000000080000000001000002400200", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/12], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r6}, 0x18) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}], 0x48}, 0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r7 = syz_io_uring_setup(0x568e, &(0x7f0000000100)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x1, 0x8}) io_uring_enter(r7, 0x6efc, 0x3900, 0xb, 0x0, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r10}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000000c0), 0x0, 0x2, r10}, 0x38) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f00000000c0)={0x1, 0xffffffffffffffff, 0x11, {0x5, 0x1}, 0x1}, 0x1) 1.206256703s ago: executing program 6 (id=7655): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00"/13], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000001000010700020100000000000a0000"], 0x1c}}, 0x0) 1.205397723s ago: executing program 0 (id=7656): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x2000, 0x7e, 0x100}}) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0, r0}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x9}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c00000010000305000900"/20, @ANYRES32=0x0, @ANYRES64=r1], 0x3c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a2a0000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000000314010029bd7000ffdbdf250900020080797a310000000008004100736977001400330076657468305f746f5f627269646765"], 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@mask_fadd={0x58, 0x114, 0x8, {{}, 0xfffffffffffffffe, 0x0}}], 0x58}, 0x0) 1.173842955s ago: executing program 0 (id=7657): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3260}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x1}, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x85}, @exit], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 1.163253776s ago: executing program 2 (id=7658): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x15, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES32=0x0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc68, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40050) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x100000000000000) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000000ee030000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x67a, 0x1, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10) r5 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r5, 0x84, 0x81, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000000380)=""/102, 0x66}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r9}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000180000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000f0850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r10}, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r11}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000001080)='afs_receive_data\x00', r11, 0x0, 0x2}, 0x18) 1.156270407s ago: executing program 6 (id=7659): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x22, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x480c0}, 0xc000) 1.127287199s ago: executing program 5 (id=7660): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$getregset(0x4204, r1, 0x1, &(0x7f0000000480)={0x0}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={0xffffffffffffffff}, 0x13f}}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000400"/18, @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x10000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000000000000000c81067c800850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000001e80)={[{@jqfmt_vfsv0}]}, 0x1, 0x549, &(0x7f0000001800)="$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") creat(0x0, 0x0) quotactl$Q_QUOTAON(0xffffffff80000102, &(0x7f0000000140)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r5}, 0x10) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="440000000906010200120000000c0000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f0000013c292f8c9e8c292aa4064b4e75d401369d4ea2"], 0x44}, 0x1, 0x0, 0x0, 0x10008086}, 0x4000050) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x18) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) close_range(r9, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f00000003c0)={0x7, 0x8, 0xfa9d, {r2, 0x6}}, 0x10) 1.126655399s ago: executing program 0 (id=7661): r0 = socket(0x1e, 0x5, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x2017be01}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r3}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb017918"], 0x0, 0x18, 0x0, 0x2}, 0x28) ioctl$sock_ifreq(r2, 0x8946, &(0x7f0000000180)={'hsr0\x00', @ifru_names='caif0\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x2}, 0x18) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r5 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) preadv2(r5, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r7}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4e24, @multicast2}}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', r8, 0x0, 0xfffffffffffffffd}, 0x18) r9 = socket$rds(0x15, 0x5, 0x0) bind$rds(r9, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) 1.088730692s ago: executing program 6 (id=7662): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x3}, 0x8) sendto$inet6(r0, &(0x7f0000000000)="aa", 0x1, 0x0, 0x0, 0x0) shutdown(r0, 0x1) 1.009222759s ago: executing program 6 (id=7663): prlimit64(0x0, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000400)='ramfs\x00', 0x2000000, 0x0) chdir(&(0x7f0000000280)='./file0\x00') creat(&(0x7f0000000300)='./bus\x00', 0x15d) r0 = open(&(0x7f00000000c0)='./bus\x00', 0x14103e, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x143042, 0xfe) ftruncate(r1, 0x2008002) sendfile(r0, r1, 0x0, 0x80000001) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x6}, 0x1c) 1.007031119s ago: executing program 2 (id=7664): syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="070008000000d900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[], 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000600)={0x8, 0x1, 0x401, 0x5, 0x8, "9a48ac789bc246a718ef8e542cb39e6493eb23", 0x4, 0x80000001}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)='%pS \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0xa8}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000200000c12000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4) 926.658175ms ago: executing program 0 (id=7665): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0}, 0x18) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000), 0xa6400, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8f}, 0x94) r3 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x14, &(0x7f0000000000), 0x4) r4 = socket(0x10, 0x3, 0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/uevent_helper', 0x42, 0x0) pwritev(r5, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000200)="9cc4", 0x2}], 0x2, 0xffffff01, 0x2) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) sendmsg$kcm(r3, &(0x7f00000002c0)={&(0x7f0000000bc0)=@caif=@dgm={0x25, 0x12}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000140)="18", 0x1}], 0x1}, 0x0) rt_sigaction(0x28, 0x0, 0x0, 0x8, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18032689c9db0900f8ffffe89500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0xd, &(0x7f0000000300)=""/13, 0x41000, 0x3d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x6, 0x4, 0x8}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000500)=[0x1, r1, r1], &(0x7f0000000540)=[{0x0, 0x3, 0xa, 0x4}, {0x2, 0x3, 0xa, 0x9}, {0x1, 0x2, 0x0, 0x5}], 0x10, 0xfffffff2}, 0x94) 828.250973ms ago: executing program 2 (id=7666): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000010000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 802.622405ms ago: executing program 2 (id=7667): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000240)=ANY=[@ANYBLOB="240100001600010428bd700000000000fe8000000000000000000000000000bbfc01000000000000000000000000000100040000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff02000000000000000000000000000100000000330000000a0101010000000000000000000000000000000000004e340100000000000000000000000000000004000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000a0000002bbd70000000000000000200000000000000000008000020ffffffdf2c0027cc"], 0x124}}, 0x0) 743.61798ms ago: executing program 5 (id=7668): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x30000884}, 0x20000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0xe) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0x2, 0x0, 0x700}, 0x10}, 0x1, 0x7}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r4, 0x0, 0x7}, 0x18) kexec_load(0x4, 0xa, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) tkill(0x0, 0x37) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r7 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @initdev}}, &(0x7f0000000240)=0x1c, 0x80000) getsockname$packet(0xffffffffffffffff, &(0x7f0000004b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) sendmmsg$inet(r7, &(0x7f0000005640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="25633c44b552c3fc6e1a55489046319c9a30767f213495e2a40359cbe44a456ed2fe25d53bef1577f1cf779048d23f0017d73f92283b53ff29da234bd44cbc9a981ae6e3a1f13ea7233dd9588a03634b7eb21ea849232533cbf375dbca3827fc3a1d1bfca03c8bd24d7f20aab7a15c2684eedc91c14f", 0x76}, {&(0x7f00000004c0)="c5f024e1d7ba02abf190e366cdc1389e806af2087d16db8cd88100cb1bc4b53ca335a0e9118a8c600a218f0e111ef9d2fce626a6e3c605345b26545a0eaa9146b0edff013545494ceb5d7b31919fea7c86139fc98a56b5c216e935ed36f7c378edead7d5870ccda0b82aef7e16aef7533b3cd0005e946447b046402cfcba1a076995f333d6f6860cc62337f8945f9ac740ea6c44366440eb4baee7df31adf1f92c4f4f54c6b78359022da7038efc67180359334478a6c343802d3b0576b54a7a4eb278859a2022d12ab4058d756a5db96c909a6d92863207dd00958b104f4915", 0xe0}], 0x2, &(0x7f00000003c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1c}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x929}}, @ip_tos_u8={{0x11}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}], 0xb0}}, {{0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000940)=[@ip_retopts={{0x20, 0x0, 0x7, {[@cipso={0x86, 0xd, 0x1, [{0x2, 0x7, "10ff261cc8"}]}]}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp_addr={0x44, 0x14, 0xe2, 0x1, 0x1, [{@remote, 0x9}, {@remote, 0xfffffff9}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x44, 0x50, 0x1, 0xc, [{@private=0xa010102, 0x2}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x596}, {@multicast2, 0x6}, {@empty, 0x10000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@multicast1, 0x101}, {@loopback, 0x7}, {@local, 0x9}]}, @ra={0x94, 0x4}]}}}], 0xd8}}, {{&(0x7f0000000640)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000740)}}, {{&(0x7f0000000780)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000e40)=[{&(0x7f0000000880)="85fa2ffaf59673d0ed187308ab964322b6e84e0cbd636b02ec44a6edf7d23daeffb7584b03b2add7febf571bfab19331ad34e490bc668fc532dd740a395573f6f491c4bf7518", 0x46}, {&(0x7f0000000a40)="ac0c5107ebe59c683472f28260723e7914798dab9c1f5d1a4b17af6e34fc056e257b5afc90f927f3d0b5bcef48841580106957b50b0e7f6882959d6de032c803ecf97ca21e64765c05cc68dba728c74a23cb", 0x52}, {&(0x7f0000000ac0)="9814b9701fca11c86f1efa153ccbeadd9925d5c7c3cb77505220a23640e1fd759b5b4192344c79a426a195dfb05d7e3ef8065ec8dc1060e47a6e0180e54f434e5e79619c3bf73a57052b3172", 0x4c}, {&(0x7f0000000c00)}, {0x0}, {&(0x7f0000000b80)}, {&(0x7f0000000d00)="5f64f73b1a3daa23d4635ce7166d855f998701e2ec83ea593782571f6a6f3c69d211f508f1f0caba7f986975883fbcfe6119828e6ea18b4cf4e9953dfbe6469928c9d05f777a846d26eb3779154c107dadeaa0ae185e1a0d4e10508fe5985201eeec5c8efd9e157867a365df86b4eb428fe41f58d1beab48bf820b6f5a0b93a6eabd6f5b23b38784acd79014cc90e1119323b043afcac0193fb701e70fbf45f8ef9c97e5494e2c7a6a29a8866fee698b3e02c5b54aedd2a1f5606d7b7b6b361929f3a5a07aea040fe7d50d5c4c76735e50f75c7f6a41e73c2806c4ea855b218bf0e6534d2744339ff606882d2d5047e7c38e5dfb6b", 0xf5}], 0x7, &(0x7f0000000ec0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0x18}}, {{&(0x7f0000000f00)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f0000001200), 0x0, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], 0x110}}, {{&(0x7f0000000200)={0x2, 0x4e23, @private=0xa010102}, 0x10, &(0x7f0000004540)=[{&(0x7f00000034c0)="9feb5195cd820d218f22740fe20ba3041b4063659d04ade0925e5ffd88ff917d55cde05991d4424909d7ae62eced8f54dd94fda35a031fcc828efe0d34681715f7f0263da84644c76d12f6b577193388c1a30942576fa126782c4b6d92c75d452c6977fca060d90c69161e6a5ec497a71a001c", 0x73}, {&(0x7f0000001280)="4deddbf3517d64b11ba777e81bb299d1c73b8f80037c", 0x16}, {&(0x7f0000003540)="b913498a7a2d6e97eba638704cad31960782000f6561d6917e6db5860e7327f1b4cd23964a43c8e99f45560261ff3a8f388084ba92b85866e8eb8fda613b5f0a0951e1fddbcc731e9388446725a5a4d2bce94cc2ca9a30ae77fa9cfa2da3524dc4b94b4bd40aa71e9ea159d539acbacf2ca4a0e46ebd9788a0bf75855e743cc145f6e786ae390dceff5aacfea3040c70317d3aac2e6990ee65053bf00d3dc90b2790b4a6abe33bc42b8096bc4d06d48629d728201792f4e29a913c6833775b6f62e59dc3750cc8a6092bdb337595a7af4ba8d9c2f8e466a6491e7a367de0d4437d14a6e71dc2e4253a23278e5128dca90f0b91a9e98446ebaef003c227146ed08acb71caabdafff4ee008c94ed958ae379fcebc58b14b9fcaa8fcfc2864d71d575fd4d7e904e7ee0d48a4c81ea926ab48d262ca8389e0d075606baf9b04157a9ad2cd4378e6792ce228308829cc2495fe8120afba8205c656d010bddbb93a2da5ab7a1ace00c2669f588ef6a53ea556ae15b47e029b418338fd5a92fdf559d29211dd5a7321944aace3dea760b6e465ad553da2cec21b806b4ff116352747a21128041c64a5085ea1167256e10bfcd220b1a4b25e2ce2b97a07cc64cd42b48cac2ca93817f49d7430324608530f8edce0f4e373290f71ae9352ba0eb158138accb8b0b3f60fc914739a77d78be7c7152994bf40078f2042e2e12d18a7a3fb73186a4093404eda3136e3dee11f6902c83c77af1af73f21ec76201f7410b06c912a51c052e1cfbb5df75d6da3c554eaab601df74491ff1288a49eaa8b6e0ae2912cf8e4398784fecfbe34a58385e625dfe21954886d1602fce5da3878515c7350273329d842817b7480ca672578aec29aa5c5ac6060eb69da5d7aa0efedd7adc0a3804f19123f19eb878e5d70a2e19e5d5aaa6d768608b802c965e174bb16b794fabb651b6f960404b8ff8663609f646370a5e420b607afefce5ae625211630c91dc576620308aecca39f95100f98ffb746e62af023f17d2770378a9bef96cb932c4f7d4e66b9ec61a44e22943ef21f1692905383aa8f0ebf74c74978bb6888799e24ef1a0e3b4b630afc4ce1f914fc5e108aec421c7f8cf3ea5aaa6228951ff8e68643e66bc3b9928f23d346dd7b3b614ba7fdffd1383a2fffdf00d571d2a9228cba8c6920c041762ae7179fadebc58391e60372d1cbf3a9bebe70c7f4dcc32e7ca9260f461d0541eceea37751b9faaaefe5ef72899e21461d7db68f9a5fbc29fa7a9d957548c97712f232cf990472f693165ad2a3031f8f5be33df874b85c392027edd66cff259a3b09fe0b40efacb6162b6b2fad755c5ae4d9ad522caacd0a0efab0b221787e4f484d418b53d67cdeded24388fd549bd7c9fe228315696b81c914309e21b84c1a1b5edeeb52c40c78f869f23c00823a47a1a55467bb86a4303ea6bcc838a2ddbfc5f71e2a84a83ab93b32e74d36e0f4b56ac7611a24ad91a88ac9c30446b9e3bd262062fd61a761f0fdca096cf5ed625ce53922849ee0f6082a0c6be3ffaa5cadba77b68cbd38e7c2c73bfa83f84103345747ffbf43a96eededd27953b1ac0d2a8d9daf80310794ff962bb41d3e67f98b61fc52b437be4b150cb048d13244fc18a38b118be4750b2c47e1bf3f9497c17e15cd7da0ca8ba5afef775fd26791d2cdc3f176b3ee9a984e4284a05afc6fec0b6463825f57b43fd3e93ff3bda118f9dd154bff15f0ef4562dfbb6b219d9b52cbc9e93d3f530197205f2dfb65b817301366276ed564b3b6c63c269ac6a6d9bb158ffcc38a020a6907345d8561d20486f3372818c4f72ffa14d622d762cfe892ac1abc2c4f40b571488ea1a4ea55d5bd98550fe760a31464d89eb5b9e705c3e153f4b0cc42943d3a9e406b086026d24f169b07cd6176ae0798988d8016630e59d174f3f071f545b285f7a655f8cf43b40e20a439f8c430078f78da2495c34e9ff78527ffc81550f08b85ea022fd0e7fa88af4533202f632f86ccfaa02a196c64ebf7a450835e9d9787d6c45adfffd60dfc552d6d2b9c900f4785e2fa219e5b4b818c34c96b80a1b904e77883f667f1b1c8ea07dad409426f2fc9d8a28d4bc25f074adbdb9975bd093fed7d50d07a670275ce0cb8c633d5f83a46aa009e78c7a68c06942fe39dc0ece6ee2a0cf7b5cc63f62f7df81469beb07f329f8d22d72e6f6bdcd48a356fc43a091f96d4f8eb4e37dae96c477025cd84502ac22aa24ee1bd77868792fcda0ea62dfccf53ebaf41edfca2c39c1f16a0b6230842a718e26129f0cbff7f88f81ade364f5545c8c940ce1fd8932e751a2ffeedc8dee38ce9b4091ed581be5ea655d882493bee7b4fa70bc617e825616f8741fe459f56f81d4334efb1d1c9c211257b498338de9fc4761a1f53be311dbc46506eb3d1584321030a654454dca0c50b7dfd1a0f46bbcdab85d91f2bc4fa6325a15f30ab95b25e618d23b54ccc129254676bd002a9e4d237eaf2925c67b00e70e941219cbce5784bd528433bad8351e985d7b1968c68304b956a8d7d480e8e260f3f7b9e84f967a1c7d859a1cd5fc8a982a9bf365d2e3bc10b74b7dbfa8b14b53719c47ac862944e09f1c4169b9a81bcfde37e1627e2b97f0513aef55d07b090d4d2448795fac56a576df9765dae297fa7ea808da4792d79646118d4b476b8f23fb46916c815a16becd8dbf4d26f2a9b788d9f6dc94962974c5e2ebcf261730b3e67380322e43f210af076e42ac9aeaa2592695e0f8dda6c69cff78f43406018ce13c7135f41ae1e478f13442026536ecc580519da1786d5013b097e4da0d0cc8ae6c74e9509fa6d930af11ef3ea4b63a1373932db66aa48ea2c68e86cfb85b1db3456703cc3513723e2a6e2efc64da608b0157c7cbcbb76482a45a0674a2361210bcaabb82ab37bcd21af46e8d8b0472af6b7ff84ecfb296ab1e03475d6a227c95c7251c3a8f09ad84650836570382df51487155b32d9a6b3c80e8cecdf7079f7349d7eb490ba500b0ba7ced8eac8ad87b30c418f4bb7295076dbe19ac75ce9feea8a0da08ba78ce53145930a243af30b4f5b4e1fa353d946d6451375083cbeeb934fca00082b101ed2d5b1b9cc7029292b368beed2361d2dbdb41303416a54dd2dd50076e1eef45d25cf67084b6b4e5f1d691cdc28926c3e201231c94a56525c9536f896b3cb8ff3e6bcc7dce3f6b94ec422b5b9d4b10633bae3267053719d61f6d6903ae8b9df38ac0e32ba8e20f10b6e6d251ff1397b567790d7f09c0cae04cc916dcf9dbfc5db8c8f22412c45a15e3b0b016785c64944ec5d74315bfe61966b924db1e35e785d2ffebc47182b0983996f2c4695d0eb9d7aa2b84373e1117f16a1440ac37eaecef703bc003eb8f651a8cb19d6e4dc5fca8888ffdd5700d7dcf351814ae6ed8f01ba28a9415360ef83ae10d73bec5ca3019d0d301e2ed9620ccfba13a0a3f16ddb0aecd0be06b52aa259b967acc9872023bdc822b96a5d450b7db2cc86a44c9d8b173401c12cc1023f6dbb8989946b535565fa73ddc13d9b02b82421228d847f450a24f4a0f3d5dedffbf30031f95b17ee1293bf295fff352086c75599f905bbf6ba9f1de02f0d972fcb44d61e154523af202b41732a96ff04d281cc66be0f80fa69cbb10e540ad8f619d66b755672c100e50accc321e8c0982589a01b61f36944460b416e8ccf9f98dfae6db45c2c4894c6186ba7ccca063dea199bffa7dd04ce345d827e8119e9d184932e00c649b6d904a76af6239fda022c5483349a60a97169df61c88dae3bce84e2e67e36105830f1eeae7fe38b3a4c060fd4703c7734f9521072b0565cce7693e515468a4aa525d997c9a03e70bc5f3fd86e086719923bcb7ca11d8207e50807cf32183ddd9d145708cec91e16bffcc97b6c05312140949b0904a808b438ea5df643d47656cb458a1da9fcdda2b1721fb603186d1969fab3d45d7b997918606712a627c0062369aadd925f4a73dac504dbcbb7fd0992496e87338cee68e60c6def6de4f91a3db11c9b950b54a6676e3d026d2f40e666a7cdace7b0c9eb3784badb3384cc682714376c8ba4d01a21867f6fe9566e3b64f4a2f8c2e9d8cdd564ab0f298d2913238c5f0c5e2e8b3f2ea662e262bbb09c25435836e8974bc4ee150d3dbc090ad3b595ceee10bdb6ef34a760d2a4c9ccae6d783fae25b69afd1ec3ab22467a511804afac0a63e69167cbe527d7efd8c52919ac398598086924d2552a49bf52e4b6e42ab4bb5a082e59e4d859890a28f5bcef473d004a123a0daa5e0d90a74851e422dda1db2733717ac108a461a6e7c5d421d6325acba0b1f8451b2b8762cc9f8d3d17c2e69dc7d8ee74861333995a645d813aadbc9ebf205cb348808e555023506f0843e264f4ca897bae308f01eb69785f37d6113c88d1237653613d44667a68c4894b7cd637afff0bbe5c10753c8a885ed1a3455caaa27749ecdb457dfeab81ea851ff47bed70c7c2a7e67775e79cba1d8d48100aa2295435387cde67b92e819d0a5e24fa1a700c5d139ead491dfc6427fba1004c9d7d56881445de8700e6154323809b45f280913af8ed4711fe4755d6490d3e78e5008b49508845d8a6228c022e43a48bcb983336fea9ad8e49b39e284dfa1683d7a66a2879cb3ff730395dfdd135db702dad6449a05de210d3cf86ed74fe148b7d804ff154edb9b821327b0a0b6e0c0afa216e5784e3999fc9e631c9089463f41fcfbde67c55554bd7380171e8336c85bcd5d0497cb3ec93867163e50a11588a7db8f363c9947463783234cde955701e0a2b929596097445a17fe453886d98f87fa0c85f72c102383542bdf209af35a4971e8d4c5eb8970d7b083ddb591c43715a5666c43087445c7f01ca6b2a18dd1b6f5890c2624aea0da8af95395ab735d5b3f5a79117fed232158623785f682cb51cb7aedcf7842f34e53c5b09e61c53851ec05605d5f816d44b016ad235456b5cf4242f31ac32eb01993247df5a553c3bc7808648343c65a6892d7923f72c0ad43ac6eb01994c6ff9c3de96c62d7f6b921b2abc37f4d2a46c71fbd436897f51fb2ce54c35193cdd928d5a4c173390f604742ef3c371ce92ec7480ca5c7db3ee6c2279b49630055f7e41941758aee88d8ebfba703e471d6b34e57a944186e5388c0be87a0c183b4b6c295c640b00442110d00270adc12d7c30e52ebd0c166efb50c15e255e72a66a5cac92d3e89fb64df4c4e3c1d5dcdd1df720db67462f3b81484bd3c20504cf992fc5f76102413b5555fc82dee433af8f507811742e74c79d6d85b30165fd28640ebc9dd5051b94b4c75793f19bb84d021dd07726d029da984105e6830dfc4d7dfe61051ef82a45500d86585957be8aaaa4302adf522d8f4f46bbd3ed99d6e17583a2ed5574c50778a851915eff5777c370efe911ba56c8c56e12bc55a5154be4a2a3d7c21d33b7f846fbb83e9cbd6f1573c5195c6a6ae81cc19ca755f26d1f4ceca002a918469437c6028c923e517ffc8fa79f81e89e8a68ab2c1404108c393e4f047c58193f9b70b60c4bd9cee9d1e37c9e94566f790c5f1b423e69f5815abd362716e7b5908a630b208f34a1a3c7f23184be04bc2bfc3bfada953d3e89b970a47884b0715777c5ff014f478ba979231161fab54a57c1496f818f2864fda7f520c06c64fc8c1db00d1e4e127436ff60a9416a8feeb451395be5e4e040445f4a8d161e427ffc7d5bf2976cbab39540a9ecf03b7049010760bf66172acba298884343c5542a196365034c53750598b91", 0x1000}], 0x3, &(0x7f0000004580)=[@ip_retopts={{0xbc, 0x0, 0x7, {[@cipso={0x86, 0x37, 0x1, [{0x5, 0x6, "d3ae307d"}, {0x2, 0xa, "bad2c103fb41eb9f"}, {0x0, 0x11, "9dadf9860aeb60ce8b6cf9713e4522"}, {0x6, 0x10, "a1936a0445168728ced9e3b7ac17"}]}, @timestamp_addr={0x44, 0x34, 0xa5, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x43}, 0x7b3662e7}, {@dev={0xac, 0x14, 0x14, 0x3d}}, {@private=0xa010102, 0x5}, {@loopback, 0x1217}, {@multicast1, 0x4ab}, {@multicast1, 0x1}]}, @ssrr={0x89, 0x13, 0x67, [@private=0xa010102, @local, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @timestamp_addr={0x44, 0xc, 0x93, 0x1, 0x7, [{@local, 0xe3}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x1c, 0x3d, 0x0, 0x6, [0x5, 0xfffffffe, 0xffffffff, 0x8, 0x7, 0xc]}]}}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000004ac0)=[{&(0x7f0000004640)="cb7d028eeeb714991b91429418c269385947d2fd41b1cd26efb43caa176ae791b1a7144c306d44cb2ac9b44c48298657a3ca0c9956f16360eeddfc83fbcd68ba45678b36f8e0ba7bcf9ba03ebece5a34e3259998ff8cc782d583f301b8d5144d7d34977fcf5e69970d89255d9e53e62113b298a235516721d30ad6aa0387f0b1110e7347019b9f9a144f912171376f49382fdd35784a54e1d54b70fc95b5fbd8a23f2d2672605d2c746001db14a3531ba6173e0b4257ec1dda42457dc07be444fa00ff14732f905de829f109fe5306d1cd2d0cb40d18f1bd0ed20937ce6446", 0xdf}, {&(0x7f0000004740)="ef018feabe9817cc6e71df51b28963fd26a99ab9572cdc5fedc6a99f8f66042c96cc9c46fd6b1a3ff38d8c1f051ae96094aa8cd9fd282edaef90991d075de02aa9b7254178a3e5182a075651bff23081abcb51c17ebbd6202b26f902530edcd80661dcf7889ab123a233d4", 0x6b}, {&(0x7f00000047c0)="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", 0xfa}, {&(0x7f00000048c0)="e0b4729ee225859e6b12f5a95d887fcaf7342477f583f3a9a6dfcb6786bab4698c5f5e0dd26c3afa96a3e71f9dc283e90c045a7d65c5a6f16411b2239a2083fd81a4f03738986a5991023ab65c9b28d30c60b9849aa9a7e76c81b151c27bdc395f5dc7ab7fd6135158f19f799c1462cbd1716739ca25bd16bd22f700bcabb4dcd165727dfb55bb3b2c0332e700b9e92d8c2ece362b5d72b2e965ddce5862e87acf92fb6a13400018742938d4ddc5bc6c6aebc4d57c68cf1cc332c81fd61058c67bf667171d341cdff1107c2894f0408b7a87c02ef4be989ce6b0e6", 0xdb}, {&(0x7f00000049c0)="f2815db19648e8722f02cd4437f69249a3cf82d5d497b3974269bdd90f206bd55d13d5d8e6a320d76178fe95e3437e72ed1b6a46b99e34af", 0x38}, {&(0x7f0000004a00)="d62c349ceb149ed0111e840ca010cca7cf0ea5571653d171ea3f89b689917c723a89004aa519d4a8fe34db283017676f1fe8d24fc01a86518f80c93d9a7461e12bb45d598f707d2b0654ae898c3bed9742c6d6ed6a9f033e255d35a5c89f9049c352b7e51a39d573a7c3e0ae4d45039e1709cb3c90a600293e92729062835d8705634a13065d8fa0a93c41e5320f78949f871aedc367125d5678397d", 0x9c}], 0x6, &(0x7f0000004bc0)=[@ip_retopts={{0x84, 0x0, 0x7, {[@cipso={0x86, 0x37, 0x3, [{0x1, 0x10, "c9163460fc9d2545581a9c07f9fe"}, {0x0, 0x12, "bd49a23ed79e0b086264657727158799"}, {0x2, 0x6, "93776457"}, {0x5, 0x9, "182417f570fc48"}]}, @timestamp_prespec={0x44, 0xc, 0x5a, 0x3, 0x2, [{@multicast1, 0x6}]}, @end, @lsrr={0x83, 0x17, 0xe8, [@multicast1, @dev={0xac, 0x14, 0x14, 0x23}, @multicast2, @private=0xa010102, @broadcast]}, @cipso={0x86, 0x14, 0x2, [{0x1, 0xe, "c867574ff862a2e7d7806f53"}]}, @ra={0x94, 0x4, 0x1}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x34}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0xf0}}, {{0x0, 0x0, &(0x7f0000004d80)=[{&(0x7f0000004cc0)="503ba3ecc08428a4000054b1b63ce0fd29bbffe6", 0x14}, {&(0x7f0000004d00)="f05a2ed7ea8d197bfa45f14a96cafcc76f2502f8109129296181e46e5ee09d5352bda9e98f804b7a7dfd3b85c2e93dcd0397c2536f5843250270b63a44f76719eb18d96a3511bef2c84234cf89fd0169cd4002fae2d1cf08a19d2c8ec7d9b623a3b6eea17fc58dbf7a85", 0x6a}], 0x2, &(0x7f0000004dc0)}}, {{0x0, 0x0, &(0x7f0000005500)=[{&(0x7f0000004f80)="5abd0d34c79f7d58260418c35ae6e1fc343c41efdf1567ab7a8067d93fa909fe82c3b5a338e3c579641d4106d1fda7aaaf3a5efa94fc3c714c35313d2c0278903955010181a3e688d2769f60d073162606efa9be6b54ef8f3b359a084913660cab808a6130d81efdfd8783e455a3cfa4b2328edd8fdf1f3e43ad767e983acd2bb538a3918e808160154e7107158de825a1051a0c7762f100454cb6bf8397839bf2ec8fb88084c13e", 0xa8}, {&(0x7f0000005040)="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", 0xfb}, {&(0x7f0000005140)="6bc7667c43b3625028bacaa44ddf68ff3a326ec9586b216cde411098236795e286b60b48255aadddc8a2882bf41bd392b897ea8f01f01c18079822b0d4d7bcfdf3004caed641a79e53d158576a4abb5836180d5c62e1797a4071f8dc3a5c8c316e0ff425", 0x64}, {&(0x7f00000051c0)="c4716601f5ce87eaa6d2a40c825933e225c41e3db4e2e3cbe8a43fe655c4e45747c1a5171a207f4ecadb9ed6", 0x2c}, {&(0x7f0000005200)="482a8e76d976f28542fb52ad18470d1f327c2aa24f7130216115c2a810c24d27f465a37103a8bfce2d4eb445605bf86db4c465f046e99fe7a3fae257be22c3249e2a25332cb33d4c6524f737b5b6fbbc8438994004395f10d5a2c93d9626bf2697ae91bc0026303c36ac65f57b825e50b4ed1eb62a736c4ba6dffe73117ae3505fe2da89eaa3c24addf0821f881199fd1d53fbbcd0efb862ab42", 0x9a}, {&(0x7f00000052c0)="46165010e580593009ad54312204c0ac777726922232130f84a1d41c08b3b283e3327134942e0c51dd19a8d5cd5313bc3fb345280479de7ec219e50dbf5325ad865b4edde4e690c51275aa4dccc5", 0x4e}, {&(0x7f0000005340)="d53199f440b1cabab1439342e2c1c5cbdad047184059c9e755a6022526c58cd0235991ff15d7ef14514db7325c7deffaa3ec3e3e0362e880d2fbb56c5ca764228ac0", 0x42}, {0x0}, {&(0x7f0000005400)="9aff762d7ad8b8b2da0ced02e674b654f2ee669ce6c6245e772d37964ac0eed6aa01bda3c9010ed43b739ae5973863c337df6f7826faabad7c4be4a36ee0cc6403a3e46ee21ac6cd1309d526769b89e15190cbef4b3888d01a2fc79795c25d4ef8b09ebd82a70f00c1dc14aad5b106458977a229aec794755f6ed2e1082ba5876fbcb92e493d0663afc64133f249a18d62629f926e4086422e709c0d826e9be998b1333211ff393d3321efb29cd4d1710db32a70de7f254151a27578d0b1afa50457b607bca287116829bd566de6dc717be74051da56edee780d91514691c1a96362a5a580a7bc9249e9", 0xea}], 0x9, &(0x7f00000055c0)=ANY=[@ANYBLOB="1400000000000000000000000100eaea4635d5772e65000000020000000000004400000000000000000000ffff00000000820cb3e207acf88ac97ece48004424ffe1e0000002000000000000000000000006e000000100000002ac1400010000"], 0x60}}], 0x9, 0x880) fcntl$getflags(r6, 0x40a) bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4509c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a900d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a3c0db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848022e8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x20200006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$kcm(0x10, 0x2, 0x0) 739.62146ms ago: executing program 2 (id=7669): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x94) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5e8, &(0x7f0000001200)="$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") r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800020095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) clock_getres(0xfffffffffffffff1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000040)={'netpci0\x00', {0x2, 0x0, @remote}}) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) sendfile(r3, r2, 0x0, 0x7ffff000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x70, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) 715.882932ms ago: executing program 1 (id=7670): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1, 0x0, 0x100}, 0x18) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000008c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0, r3, 0x0, 0x7ffffffe, 0x4000}}, 0x20) 642.261418ms ago: executing program 1 (id=7671): r0 = syz_io_uring_setup(0xbc3, &(0x7f0000001480)={0x0, 0x1064, 0x80, 0x200003, 0x1af}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x2, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3, 0x0, {0x2}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f8, 0x0, 0x0, 0x0, 0x0) (fail_nth: 6) 609.794061ms ago: executing program 5 (id=7672): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x0, 0x1, 0xbd73}) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="580000001000370401000000f8dbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c040031810000300012800900010069706970000000002000028008000200ac1414bb06000f000200000004001300050005000100000008001f0006"], 0x58}, 0x1, 0x0, 0x0, 0x44801}, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061109d000000000007000000800000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3c) sendto$inet6(r2, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) socket$inet(0x2, 0x2, 0x0) unshare(0x22020600) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x22, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000003e000701fcfffffffddbdf25047c0000100036800c00020007009300000000000c0001"], 0x30}, 0x1, 0x0, 0x0, 0x480c0}, 0xc000) 285.973497ms ago: executing program 0 (id=7673): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000040)={0x0, 0x1, 0xbd73}) getsockname$packet(r0, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="580000001000370401000000f8dbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c040031810000300012800900010069706970000000002000028008000200ac1414bb06000f000200000004001300050005000100000008001f0006"], 0x58}, 0x1, 0x0, 0x0, 0x44801}, 0x0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r2}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000500)="a4", 0x34000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x2000000, @loopback, 0xffffffff}, 0x1c) 269.424128ms ago: executing program 5 (id=7674): r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r1 = socket(0x18, 0x5, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'vcan0\x00'}}, 0x1e) sendfile(r1, r0, 0x0, 0xf2) 213.010963ms ago: executing program 5 (id=7675): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400000000010000010000"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7}, 0x18) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 212.684963ms ago: executing program 0 (id=7676): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x2000, 0x80, 0x100}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r0}, 0x8) io_setup(0x5, &(0x7f0000000300)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fallocate(0xffffffffffffffff, 0x0, 0x400000002000000, 0x2) msgget$private(0x0, 0x790) syz_emit_ethernet(0x56, &(0x7f00000022c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6084000000202c00fe8000000000489700000000000000bbfe8000080000000000000000000000aa7302000000000000c910ff020000000000000000000000000001000000000000"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac1414aa0000000000000000000000007f000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c0400000000002008000a0007db05f41d6467b4000000000000000020010000000000000000000000000000ac141439000000000000000000000000fc0200000000000000000000000000003c0400000000000008000200"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 211.562793ms ago: executing program 6 (id=7677): set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x2000, 0x80, 0x100}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000600)={0x0, r0}, 0x8) io_setup(0x5, &(0x7f0000000300)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) fallocate(0xffffffffffffffff, 0x0, 0x400000002000000, 0x2) msgget$private(0x0, 0x790) syz_emit_ethernet(0x56, &(0x7f00000022c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6084000000202c00fe8000000000489700000000000000bbfe8000080000000000000000000000aa7302000000000000c910ff020000000000000000000000000001000000000000"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100ac1414aa0000000000000000000000007f000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c0400000000002008000a0007db05f41d6467b4000000000000000020010000000000000000000000000000ac141439000000000000000000000000fc0200000000000000000000000000003c0400000000000008000200"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 191.679214ms ago: executing program 5 (id=7678): r0 = socket(0x1e, 0x5, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000100)={0x2017be01}) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") r2 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r3}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb017918"], 0x0, 0x18, 0x0, 0x2}, 0x28) ioctl$sock_ifreq(r2, 0x8946, &(0x7f0000000180)={'hsr0\x00', @ifru_names='caif0\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000019200)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x2}, 0x18) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r5 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) preadv2(r5, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4e24, @multicast2}}) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffd}, 0x18) socket$rds(0x15, 0x5, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001000000000000000b000000000c0014"], 0x28}}, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000000)={0x40000000}) 0s ago: executing program 1 (id=7679): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) syz_clone3(&(0x7f0000000540)={0x200, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[0x0, 0x0], 0x2}, 0x58) kernel console output (not intermixed with test programs): 1][T29334] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.175400][T29334] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 528.190523][T29346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6777'. [ 528.270199][T29350] FAULT_INJECTION: forcing a failure. [ 528.270199][T29350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 528.283352][T29350] CPU: 0 UID: 0 PID: 29350 Comm: syz.1.6776 Not tainted syzkaller #0 PREEMPT(voluntary) [ 528.283465][T29350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 528.283482][T29350] Call Trace: [ 528.283490][T29350] [ 528.283500][T29350] __dump_stack+0x1d/0x30 [ 528.283526][T29350] dump_stack_lvl+0xe8/0x140 [ 528.283602][T29350] dump_stack+0x15/0x1b [ 528.283621][T29350] should_fail_ex+0x265/0x280 [ 528.283648][T29350] should_fail+0xb/0x20 [ 528.283670][T29350] should_fail_usercopy+0x1a/0x20 [ 528.283696][T29350] _copy_to_user+0x20/0xa0 [ 528.283792][T29350] simple_read_from_buffer+0xb5/0x130 [ 528.283822][T29350] proc_fail_nth_read+0x10e/0x150 [ 528.283856][T29350] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 528.283920][T29350] vfs_read+0x1a8/0x770 [ 528.283941][T29350] ? __rcu_read_unlock+0x4f/0x70 [ 528.283962][T29350] ? __fget_files+0x184/0x1c0 [ 528.283994][T29350] ksys_read+0xda/0x1a0 [ 528.284023][T29350] __x64_sys_read+0x40/0x50 [ 528.284124][T29350] x64_sys_call+0x27bc/0x2ff0 [ 528.284147][T29350] do_syscall_64+0xd2/0x200 [ 528.284248][T29350] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 528.284279][T29350] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 528.284311][T29350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.284349][T29350] RIP: 0033:0x7fb23999d5fc [ 528.284379][T29350] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 528.284398][T29350] RSP: 002b:00007fb2383e6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 528.284417][T29350] RAX: ffffffffffffffda RBX: 00007fb239bc6090 RCX: 00007fb23999d5fc [ 528.284430][T29350] RDX: 000000000000000f RSI: 00007fb2383e60a0 RDI: 0000000000000008 [ 528.284491][T29350] RBP: 00007fb2383e6090 R08: 0000000000000000 R09: 0000000000000000 [ 528.284544][T29350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.284559][T29350] R13: 00007fb239bc6128 R14: 00007fb239bc6090 R15: 00007ffd608194a8 [ 528.284582][T29350] [ 528.513077][T23897] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.558487][T29360] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6780'. [ 528.567513][T29360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6780'. [ 528.749117][T29382] loop0: detected capacity change from 0 to 1024 [ 528.795346][T29382] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.855216][ T29] kauditd_printk_skb: 205 callbacks suppressed [ 528.855234][ T29] audit: type=1400 audit(1755674014.336:16052): avc: denied { wake_alarm } for pid=29394 comm="syz.2.6794" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 528.883737][T29398] FAULT_INJECTION: forcing a failure. [ 528.883737][T29398] name failslab, interval 1, probability 0, space 0, times 0 [ 528.885526][T23897] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.896453][T29398] CPU: 1 UID: 0 PID: 29398 Comm: syz.2.6794 Not tainted syzkaller #0 PREEMPT(voluntary) [ 528.896531][T29398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 528.896549][T29398] Call Trace: [ 528.896558][T29398] [ 528.896570][T29398] __dump_stack+0x1d/0x30 [ 528.896642][T29398] dump_stack_lvl+0xe8/0x140 [ 528.896678][T29398] dump_stack+0x15/0x1b [ 528.896702][T29398] should_fail_ex+0x265/0x280 [ 528.896733][T29398] should_failslab+0x8c/0xb0 [ 528.896767][T29398] kmem_cache_alloc_node_noprof+0x57/0x320 [ 528.896812][T29398] ? __alloc_skb+0x101/0x320 [ 528.896940][T29398] __alloc_skb+0x101/0x320 [ 528.896996][T29398] netlink_alloc_large_skb+0xba/0xf0 [ 528.897121][T29398] netlink_sendmsg+0x3cf/0x6b0 [ 528.897151][T29398] ? __pfx_netlink_sendmsg+0x10/0x10 [ 528.897182][T29398] __sock_sendmsg+0x142/0x180 [ 528.897231][T29398] ____sys_sendmsg+0x31e/0x4e0 [ 528.897274][T29398] ___sys_sendmsg+0x17b/0x1d0 [ 528.897322][T29398] __x64_sys_sendmsg+0xd4/0x160 [ 528.897358][T29398] x64_sys_call+0x191e/0x2ff0 [ 528.897387][T29398] do_syscall_64+0xd2/0x200 [ 528.897464][T29398] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 528.897496][T29398] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 528.897530][T29398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.897560][T29398] RIP: 0033:0x7eff1954ebe9 [ 528.897580][T29398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.897642][T29398] RSP: 002b:00007eff17fb7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 528.897721][T29398] RAX: ffffffffffffffda RBX: 00007eff19775fa0 RCX: 00007eff1954ebe9 [ 528.897738][T29398] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000c [ 528.897757][T29398] RBP: 00007eff17fb7090 R08: 0000000000000000 R09: 0000000000000000 [ 528.897859][T29398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.897877][T29398] R13: 00007eff19776038 R14: 00007eff19775fa0 R15: 00007ffcda79c308 [ 528.897917][T29398] [ 529.039020][ T29] audit: type=1326 audit(1755674014.516:16053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29401 comm="syz.2.6798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1954ebe9 code=0x7ffc0000 [ 529.184648][ T29] audit: type=1326 audit(1755674014.586:16054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29401 comm="syz.2.6798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7eff1954ebe9 code=0x7ffc0000 [ 529.208239][ T29] audit: type=1326 audit(1755674014.586:16055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29401 comm="syz.2.6798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1954ebe9 code=0x7ffc0000 [ 529.231886][ T29] audit: type=1326 audit(1755674014.586:16056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29401 comm="syz.2.6798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1954ebe9 code=0x7ffc0000 [ 529.255545][ T29] audit: type=1326 audit(1755674014.586:16057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29401 comm="syz.2.6798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7eff1954d69f code=0x7ffc0000 [ 529.278992][ T29] audit: type=1326 audit(1755674014.586:16058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29401 comm="syz.2.6798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1954ebe9 code=0x7ffc0000 [ 529.302825][ T29] audit: type=1326 audit(1755674014.586:16059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29401 comm="syz.2.6798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1954ebe9 code=0x7ffc0000 [ 529.326502][ T29] audit: type=1326 audit(1755674014.586:16060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29401 comm="syz.2.6798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff1954ebe9 code=0x7ffc0000 [ 529.350128][ T29] audit: type=1326 audit(1755674014.586:16061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29401 comm="syz.2.6798" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1954ebe9 code=0x7ffc0000 [ 529.428300][T29409] A link change request failed with some changes committed already. Interface ip6gretap0 may have been left with an inconsistent configuration, please check. [ 529.853429][T29434] loop5: detected capacity change from 0 to 1024 [ 529.860454][T29434] EXT4-fs: Ignoring removed orlov option [ 529.871872][T29434] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.144509][T29432] validate_nla: 44 callbacks suppressed [ 530.144530][T29432] netlink: 'syz.6.6810': attribute type 6 has an invalid length. [ 530.292236][T29447] __nla_validate_parse: 4 callbacks suppressed [ 530.292269][T29447] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6814'. [ 530.341003][T24647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.673360][T29459] loop5: detected capacity change from 0 to 512 [ 530.683250][T29459] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 530.728542][T29459] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 530.903972][T29459] ext4 filesystem being mounted at /198/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 530.967000][T29470] loop0: detected capacity change from 0 to 1024 [ 530.973731][T29470] EXT4-fs: Ignoring removed orlov option [ 531.001173][T29470] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.028604][T24647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.704732][T29509] loop5: detected capacity change from 0 to 2048 [ 531.714968][T29509] EXT4-fs: Ignoring removed mblk_io_submit option [ 531.736393][T29509] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.749383][T29490] netlink: 'syz.6.6824': attribute type 6 has an invalid length. [ 531.837922][T23897] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.853059][T24647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.891759][T29518] loop0: detected capacity change from 0 to 512 [ 531.901489][T29518] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 531.918229][T29518] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.938272][T29518] ext4 filesystem being mounted at /190/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 531.951193][T29522] loop5: detected capacity change from 0 to 512 [ 531.964916][T29522] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 531.994449][T29522] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 532.014494][T23897] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.023727][T29522] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 532.307761][T24647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.457143][T29550] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6838'. [ 532.477488][T29565] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 532.488995][T29564] IPVS: stopping master sync thread 29565 ... [ 532.558437][T29569] loop5: detected capacity change from 0 to 512 [ 532.624565][T29569] EXT4-fs: Ignoring removed oldalloc option [ 532.656725][T29569] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.6842: Parent and EA inode have the same ino 15 [ 532.700573][T29571] loop0: detected capacity change from 0 to 8192 [ 532.700588][T29579] netlink: 'syz.1.6847': attribute type 10 has an invalid length. [ 532.710539][T29579] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 532.735889][T29569] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.6842: Parent and EA inode have the same ino 15 [ 532.767368][T29569] EXT4-fs (loop5): 1 orphan inode deleted [ 532.784016][T29569] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.803754][T29585] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6848'. [ 532.848044][T29585] loop0: detected capacity change from 0 to 512 [ 532.857765][T29585] EXT4-fs (loop0): orphan cleanup on readonly fs [ 532.865407][T29585] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6848: bg 0: block 248: padding at end of block bitmap is not set [ 532.883310][T24647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.967450][T29585] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.6848: Failed to acquire dquot type 1 [ 532.984034][T29601] loop5: detected capacity change from 0 to 512 [ 533.012901][T29597] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6855'. [ 533.039136][T29601] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 533.129278][T29585] EXT4-fs (loop0): 1 truncate cleaned up [ 533.132257][T29601] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.152058][T29612] siw: device registration error -23 [ 533.154085][T29601] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 533.275543][T29585] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 533.291574][T29614] sz1: rxe_newlink: already configured on lo [ 533.493899][T24647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.762812][T29629] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6859'. [ 533.789980][T29629] loop5: detected capacity change from 0 to 512 [ 533.816273][T29629] EXT4-fs (loop5): orphan cleanup on readonly fs [ 533.826556][T29629] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.6859: bg 0: block 248: padding at end of block bitmap is not set [ 533.868403][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 533.868437][ T29] audit: type=1326 audit(1755674019.346:16160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29637 comm="syz.6.6860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6d0f9ebe9 code=0x7ffc0000 [ 533.898307][ T29] audit: type=1326 audit(1755674019.346:16161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29637 comm="syz.6.6860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d0f9ebe9 code=0x7ffc0000 [ 533.921921][ T29] audit: type=1326 audit(1755674019.346:16162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29637 comm="syz.6.6860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d0f9ebe9 code=0x7ffc0000 [ 533.945546][ T29] audit: type=1326 audit(1755674019.346:16163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29637 comm="syz.6.6860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6d0f9ebe9 code=0x7ffc0000 [ 533.969197][ T29] audit: type=1326 audit(1755674019.346:16164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29637 comm="syz.6.6860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d0f9ebe9 code=0x7ffc0000 [ 533.992823][ T29] audit: type=1326 audit(1755674019.346:16165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29637 comm="syz.6.6860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d0f9ebe9 code=0x7ffc0000 [ 534.031346][T29629] Quota error (device loop5): write_blk: dquota write failed [ 534.038831][T29629] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 534.048788][T29629] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.6859: Failed to acquire dquot type 1 [ 534.058242][ T29] audit: type=1326 audit(1755674019.496:16166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29637 comm="syz.6.6860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6d0f9ebe9 code=0x7ffc0000 [ 534.083638][ T29] audit: type=1326 audit(1755674019.496:16167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29637 comm="syz.6.6860" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d0f9ebe9 code=0x7ffc0000 [ 534.124935][T29629] EXT4-fs (loop5): 1 truncate cleaned up [ 534.143704][T29629] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 534.160714][T29640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6861'. [ 534.578516][T23897] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.644692][T29642] Set syz1 is full, maxelem 65536 reached [ 534.717535][T24647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 534.924410][T29680] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 534.985187][T29694] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6877'. [ 535.008554][T29694] loop0: detected capacity change from 0 to 512 [ 535.019747][T29694] EXT4-fs (loop0): orphan cleanup on readonly fs [ 535.027346][T29694] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6877: bg 0: block 248: padding at end of block bitmap is not set [ 535.051679][T29694] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.6877: Failed to acquire dquot type 1 [ 535.081385][T29694] EXT4-fs (loop0): 1 truncate cleaned up [ 535.095952][T29694] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 535.569802][T23897] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.639051][T29718] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.661098][T29718] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.670160][T29721] loop0: detected capacity change from 0 to 512 [ 535.677305][T29721] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 535.689222][T29726] netlink: 'syz.6.6886': attribute type 6 has an invalid length. [ 535.706731][T29721] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 535.721266][T29721] ext4 filesystem being mounted at /203/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.759574][T29731] netlink: 80 bytes leftover after parsing attributes in process `syz.6.6887'. [ 535.771165][T23897] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.809404][T29735] loop5: detected capacity change from 0 to 4096 [ 535.818998][T29735] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 535.843199][T29735] netlink: 80 bytes leftover after parsing attributes in process `syz.5.6890'. [ 535.867764][T24647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.911205][T29755] loop5: detected capacity change from 0 to 2048 [ 535.926443][T29755] EXT4-fs: Ignoring removed mblk_io_submit option [ 535.939103][T29762] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6897'. [ 535.952124][T29762] loop0: detected capacity change from 0 to 512 [ 535.960473][T29762] EXT4-fs (loop0): orphan cleanup on readonly fs [ 535.965203][T29755] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.968102][T29762] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6897: bg 0: block 248: padding at end of block bitmap is not set [ 536.003197][T24647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.016807][T29762] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.6897: Failed to acquire dquot type 1 [ 536.032895][T29762] EXT4-fs (loop0): 1 truncate cleaned up [ 536.040500][T29762] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 536.165518][T29784] netlink: 40 bytes leftover after parsing attributes in process `syz.5.6904'. [ 536.684421][T23897] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.737865][T29820] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6913'. [ 536.772633][T29820] loop0: detected capacity change from 0 to 512 [ 536.807728][T29826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.822955][T29820] EXT4-fs (loop0): orphan cleanup on readonly fs [ 536.830874][T29826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.832788][T29820] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.6913: bg 0: block 248: padding at end of block bitmap is not set [ 536.853275][T29827] loop5: detected capacity change from 0 to 1024 [ 536.864230][T29833] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6919'. [ 536.877998][T29827] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 536.888508][ T51] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.897683][T29820] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.6913: Failed to acquire dquot type 1 [ 536.909519][ T51] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.918574][ T51] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.928315][ T51] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.937326][T29820] EXT4-fs (loop0): 1 truncate cleaned up [ 536.955226][T29827] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.968465][T29820] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 537.065336][T24647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.176757][ T3379] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 537.186847][ T3379] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 537.613215][T23897] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.787923][T29898] loop0: detected capacity change from 0 to 512 [ 537.797597][T29900] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6936'. [ 537.846906][T29898] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 537.891759][T29898] ext4 filesystem being mounted at /211/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 538.032588][T23897] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.278711][T29926] netlink: 'syz.2.6941': attribute type 13 has an invalid length. [ 538.307632][T29911] netlink: 'syz.5.6937': attribute type 6 has an invalid length. [ 538.346572][T29926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 538.355114][T29926] 8021q: adding VLAN 0 to HW filter on device team0 [ 538.367510][T29926] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 538.383192][ T3402] lo speed is unknown, defaulting to 1000 [ 538.389008][ T3402] sz1: Port: 1 Link ACTIVE [ 538.395814][ T3402] lo speed is unknown, defaulting to 1000 [ 538.437796][T29929] loop0: detected capacity change from 0 to 2048 [ 538.459920][T29931] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6944'. [ 538.468417][T29929] EXT4-fs: Ignoring removed mblk_io_submit option [ 538.756788][T29929] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 538.800890][T23897] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 539.298183][T29981] loop5: detected capacity change from 0 to 2048 [ 539.322098][T29986] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6961'. [ 539.335588][T29983] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 539.354613][T29981] loop5: p1 < > p2 p3 < p5 p6 > p4 [ 539.359860][T29981] loop5: partition table partially beyond EOD, truncated [ 539.368339][T29981] loop5: p1 start 4278190080 is beyond EOD, truncated [ 539.375199][T29981] loop5: p2 start 16908800 is beyond EOD, truncated [ 539.423648][T29981] loop5: p5 start 16908800 is beyond EOD, truncated [ 539.510140][T30001] loop0: detected capacity change from 0 to 512 [ 539.535595][T30001] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 539.619662][T30001] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 539.651463][T30001] ext4 filesystem being mounted at /219/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.790165][T23897] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.123956][ T29] kauditd_printk_skb: 320 callbacks suppressed [ 540.123974][ T29] audit: type=1326 audit(1755674025.596:16482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30035 comm="syz.5.6972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34dacebe9 code=0x7ffc0000 [ 540.153956][ T29] audit: type=1326 audit(1755674025.596:16483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30035 comm="syz.5.6972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34dacebe9 code=0x7ffc0000 [ 540.177619][ T29] audit: type=1326 audit(1755674025.596:16484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30035 comm="syz.5.6972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fb34dacebe9 code=0x7ffc0000 [ 540.201276][ T29] audit: type=1326 audit(1755674025.596:16485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30035 comm="syz.5.6972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34dacebe9 code=0x7ffc0000 [ 540.225006][ T29] audit: type=1326 audit(1755674025.596:16486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30035 comm="syz.5.6972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fb34dacebe9 code=0x7ffc0000 [ 540.248549][ T29] audit: type=1326 audit(1755674025.596:16487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30035 comm="syz.5.6972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34dacebe9 code=0x7ffc0000 [ 540.272149][ T29] audit: type=1326 audit(1755674025.596:16488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30035 comm="syz.5.6972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb34dacd69f code=0x7ffc0000 [ 540.295676][ T29] audit: type=1326 audit(1755674025.596:16489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30035 comm="syz.5.6972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34dacebe9 code=0x7ffc0000 [ 540.319415][ T29] audit: type=1326 audit(1755674025.596:16490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30035 comm="syz.5.6972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb34dacebe9 code=0x7ffc0000 [ 540.343006][ T29] audit: type=1326 audit(1755674025.596:16491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30035 comm="syz.5.6972" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb34dacebe9 code=0x7ffc0000 [ 540.673008][T30043] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6975'. [ 540.791296][T30046] loop0: detected capacity change from 0 to 512 [ 540.806765][T30046] EXT4-fs: Ignoring removed oldalloc option [ 540.827080][T30046] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.6976: Parent and EA inode have the same ino 15 [ 540.879662][T30046] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.6976: Parent and EA inode have the same ino 15 [ 540.932331][T30060] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6981'. [ 540.944015][T30046] EXT4-fs (loop0): 1 orphan inode deleted [ 540.950315][T30046] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 541.000529][T23897] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 541.097972][T30067] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6983'. [ 541.137113][T30069] rdma_rxe: rxe_newlink: failed to add lo [ 541.413651][T30086] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6988'. [ 541.453400][T30086] loop0: detected capacity change from 0 to 256 [ 541.627447][T30081] netlink: 'syz.2.6987': attribute type 6 has an invalid length. [ 541.722626][T30104] loop5: detected capacity change from 0 to 512 [ 541.739858][T30104] EXT4-fs: Ignoring removed oldalloc option [ 541.780168][T30104] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.6993: Parent and EA inode have the same ino 15 [ 541.829443][T30104] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.6993: Parent and EA inode have the same ino 15 [ 541.986864][T30104] EXT4-fs (loop5): 1 orphan inode deleted [ 541.992999][T30104] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 542.023195][T24647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.162908][T30119] loop5: detected capacity change from 0 to 512 [ 542.173837][T30119] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 542.196550][T30119] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.209346][T30119] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 542.235233][T24647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.336552][T30117] netlink: 'syz.2.6996': attribute type 6 has an invalid length. [ 542.368882][T30130] loop5: detected capacity change from 0 to 4096 [ 542.392636][T30130] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 542.433403][T24647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.443856][T30136] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7001'. [ 542.468409][T30136] loop0: detected capacity change from 0 to 512 [ 542.477718][T30136] EXT4-fs (loop0): orphan cleanup on readonly fs [ 542.485400][T30136] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.7001: bg 0: block 248: padding at end of block bitmap is not set [ 542.523627][T30136] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.7001: Failed to acquire dquot type 1 [ 542.545643][T30136] EXT4-fs (loop0): 1 truncate cleaned up [ 542.555722][T30136] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 542.851387][T30144] netlink: 'syz.5.7003': attribute type 6 has an invalid length. [ 542.950436][T30172] loop5: detected capacity change from 0 to 512 [ 542.966529][T30172] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 542.987786][T23897] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.066175][T30172] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.084633][T30172] ext4 filesystem being mounted at /240/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 543.110014][T30180] loop0: detected capacity change from 0 to 4096 [ 543.121359][T24647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.121505][T30180] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 543.151690][T30180] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7009'. [ 543.161572][T30180] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7009'. [ 543.192491][T30186] loop5: detected capacity change from 0 to 1024 [ 543.200071][T30186] EXT4-fs: Ignoring removed orlov option [ 543.219110][T30191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.228457][T30191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.556327][T30203] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7013'. [ 543.631823][T30213] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7018'. [ 544.157536][T30239] netlink: 'syz.0.7023': attribute type 6 has an invalid length. [ 544.219710][T30268] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7035'. [ 544.221429][T30266] loop0: detected capacity change from 0 to 1024 [ 544.262007][T30266] EXT4-fs: Ignoring removed orlov option [ 544.516077][T30286] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7041'. [ 544.641736][T30301] netlink: 'syz.6.7046': attribute type 3 has an invalid length. [ 544.657583][T30298] loop5: detected capacity change from 0 to 1024 [ 544.684670][T30298] EXT4-fs: Ignoring removed orlov option [ 544.831587][T30313] loop0: detected capacity change from 0 to 512 [ 544.839415][T30313] EXT4-fs: Ignoring removed oldalloc option [ 544.969111][T30313] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.7048: Parent and EA inode have the same ino 15 [ 545.067267][T30313] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.7048: Parent and EA inode have the same ino 15 [ 545.097764][T30313] EXT4-fs (loop0): 1 orphan inode deleted [ 545.139642][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 545.139655][ T29] audit: type=1326 audit(1755674030.616:16743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30311 comm="syz.0.7048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4f9d01d550 code=0x7ffc0000 [ 545.170142][ T29] audit: type=1326 audit(1755674030.616:16744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30311 comm="syz.0.7048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f4f9d01d937 code=0x7ffc0000 [ 545.194739][ T29] audit: type=1326 audit(1755674030.616:16745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30311 comm="syz.0.7048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4f9d01d550 code=0x7ffc0000 [ 545.218399][ T29] audit: type=1326 audit(1755674030.616:16746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30311 comm="syz.0.7048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9d01ebe9 code=0x7ffc0000 [ 545.242072][ T29] audit: type=1326 audit(1755674030.616:16747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30311 comm="syz.0.7048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9d01ebe9 code=0x7ffc0000 [ 545.277313][T30317] netlink: 'syz.1.7049': attribute type 6 has an invalid length. [ 545.320046][T30328] FAULT_INJECTION: forcing a failure. [ 545.320046][T30328] name failslab, interval 1, probability 0, space 0, times 0 [ 545.332819][T30328] CPU: 1 UID: 0 PID: 30328 Comm: syz.6.7053 Not tainted syzkaller #0 PREEMPT(voluntary) [ 545.332890][T30328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 545.332903][T30328] Call Trace: [ 545.332909][T30328] [ 545.332919][T30328] __dump_stack+0x1d/0x30 [ 545.332978][T30328] dump_stack_lvl+0xe8/0x140 [ 545.333002][T30328] dump_stack+0x15/0x1b [ 545.333068][T30328] should_fail_ex+0x265/0x280 [ 545.333090][T30328] should_failslab+0x8c/0xb0 [ 545.333122][T30328] kmem_cache_alloc_noprof+0x50/0x310 [ 545.333157][T30328] ? skb_clone+0x151/0x1f0 [ 545.333196][T30328] skb_clone+0x151/0x1f0 [ 545.333223][T30328] __netlink_deliver_tap+0x2c9/0x500 [ 545.333255][T30328] netlink_unicast+0x66b/0x690 [ 545.333297][T30328] netlink_sendmsg+0x58b/0x6b0 [ 545.333353][T30328] ? __pfx_netlink_sendmsg+0x10/0x10 [ 545.333381][T30328] __sock_sendmsg+0x142/0x180 [ 545.333411][T30328] ____sys_sendmsg+0x31e/0x4e0 [ 545.333438][T30328] ___sys_sendmsg+0x17b/0x1d0 [ 545.333656][T30328] __x64_sys_sendmsg+0xd4/0x160 [ 545.333737][T30328] x64_sys_call+0x191e/0x2ff0 [ 545.333764][T30328] do_syscall_64+0xd2/0x200 [ 545.333923][T30328] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 545.333954][T30328] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 545.334059][T30328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.334103][T30328] RIP: 0033:0x7fb6d0f9ebe9 [ 545.334122][T30328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.334143][T30328] RSP: 002b:00007fb6cfa07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 545.334164][T30328] RAX: ffffffffffffffda RBX: 00007fb6d11c5fa0 RCX: 00007fb6d0f9ebe9 [ 545.334204][T30328] RDX: 0000000004004054 RSI: 00002000000002c0 RDI: 0000000000000003 [ 545.334221][T30328] RBP: 00007fb6cfa07090 R08: 0000000000000000 R09: 0000000000000000 [ 545.334236][T30328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.334274][T30328] R13: 00007fb6d11c6038 R14: 00007fb6d11c5fa0 R15: 00007ffe6ea0b028 [ 545.334292][T30328] [ 545.575771][T30328] team0: Device vxcan3 is of different type [ 545.581983][ T29] audit: type=1400 audit(1755674031.056:16748): avc: denied { map } for pid=30329 comm="syz.1.7054" path="socket:[96954]" dev="sockfs" ino=96954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 545.616686][T30342] loop0: detected capacity change from 0 to 512 [ 545.654226][T30342] EXT4-fs (loop0): orphan cleanup on readonly fs [ 545.661162][T30342] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.7056: bg 0: block 248: padding at end of block bitmap is not set [ 545.676865][T30342] Quota error (device loop0): write_blk: dquota write failed [ 545.684312][T30342] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 545.694364][T30342] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.7056: Failed to acquire dquot type 1 [ 545.695273][ T29] audit: type=1326 audit(1755674031.166:16749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30357 comm="syz.6.7058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d0f9ebe9 code=0x7ffc0000 [ 545.729459][ T29] audit: type=1326 audit(1755674031.166:16750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30357 comm="syz.6.7058" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d0f9ebe9 code=0x7ffc0000 [ 545.753592][T30342] EXT4-fs (loop0): 1 truncate cleaned up [ 545.799035][T30366] loop5: detected capacity change from 0 to 512 [ 545.825777][T30366] EXT4-fs (loop5): orphan cleanup on readonly fs [ 545.844243][T30366] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7059: bg 0: block 248: padding at end of block bitmap is not set [ 545.892298][T30366] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.7059: Failed to acquire dquot type 1 [ 545.917492][T30384] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 545.925560][T30366] EXT4-fs (loop5): 1 truncate cleaned up [ 546.062480][T30397] __nla_validate_parse: 5 callbacks suppressed [ 546.062497][T30397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7071'. [ 546.298869][T30382] netlink: 'syz.1.7067': attribute type 6 has an invalid length. [ 546.386899][T30418] loop5: detected capacity change from 0 to 1024 [ 546.393542][T30418] EXT4-fs: Ignoring removed orlov option [ 546.433660][T30421] loop0: detected capacity change from 0 to 512 [ 546.482635][T30421] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 546.696012][T30421] ext4 filesystem being mounted at /236/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 546.733683][T30432] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7077'. [ 546.743371][T30424] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7077'. [ 546.799872][T30436] loop0: detected capacity change from 0 to 512 [ 546.831248][T30436] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 546.840909][T30448] loop5: detected capacity change from 0 to 512 [ 546.861740][T30448] EXT4-fs: Ignoring removed i_version option [ 546.867822][T30448] EXT4-fs: Ignoring removed nobh option [ 546.932182][T30436] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 546.943061][T30448] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 546.982673][T30448] EXT4-fs (loop5): 1 truncate cleaned up [ 547.103229][T30461] FAULT_INJECTION: forcing a failure. [ 547.103229][T30461] name failslab, interval 1, probability 0, space 0, times 0 [ 547.116099][T30461] CPU: 1 UID: 0 PID: 30461 Comm: syz.5.7082 Not tainted syzkaller #0 PREEMPT(voluntary) [ 547.116129][T30461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 547.116146][T30461] Call Trace: [ 547.116154][T30461] [ 547.116162][T30461] __dump_stack+0x1d/0x30 [ 547.116220][T30461] dump_stack_lvl+0xe8/0x140 [ 547.116241][T30461] dump_stack+0x15/0x1b [ 547.116262][T30461] should_fail_ex+0x265/0x280 [ 547.116289][T30461] should_failslab+0x8c/0xb0 [ 547.116328][T30461] kmem_cache_alloc_noprof+0x50/0x310 [ 547.116419][T30461] ? __es_insert_extent+0x508/0xee0 [ 547.116453][T30461] __es_insert_extent+0x508/0xee0 [ 547.116512][T30461] ext4_es_insert_extent+0x435/0x1c10 [ 547.116555][T30461] ext4_punch_hole+0x593/0x770 [ 547.116599][T30461] ext4_fallocate+0x2d7/0x2f0 [ 547.116639][T30461] vfs_fallocate+0x3b6/0x400 [ 547.116667][T30461] madvise_vma_behavior+0x192d/0x1cf0 [ 547.116753][T30461] ? mas_prev+0x5a/0x80 [ 547.116778][T30461] ? find_vma_prev+0x99/0xe0 [ 547.116895][T30461] madvise_do_behavior+0x5b7/0x970 [ 547.117002][T30461] do_madvise+0x10e/0x190 [ 547.117041][T30461] __x64_sys_madvise+0x64/0x80 [ 547.117067][T30461] x64_sys_call+0x1f1a/0x2ff0 [ 547.117095][T30461] do_syscall_64+0xd2/0x200 [ 547.117198][T30461] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 547.117229][T30461] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 547.117261][T30461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.117290][T30461] RIP: 0033:0x7fb34dacebe9 [ 547.117367][T30461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.117388][T30461] RSP: 002b:00007fb34c50e038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 547.117409][T30461] RAX: ffffffffffffffda RBX: 00007fb34dcf6090 RCX: 00007fb34dacebe9 [ 547.117426][T30461] RDX: 0000000000000009 RSI: 0000000000600003 RDI: 0000200000000000 [ 547.117441][T30461] RBP: 00007fb34c50e090 R08: 0000000000000000 R09: 0000000000000000 [ 547.117457][T30461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.117472][T30461] R13: 00007fb34dcf6128 R14: 00007fb34dcf6090 R15: 00007fff71e78e88 [ 547.117497][T30461] [ 547.342882][T30464] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7085'. [ 547.360102][T30464] loop0: detected capacity change from 0 to 512 [ 547.370681][T30464] EXT4-fs (loop0): orphan cleanup on readonly fs [ 547.394348][T30464] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.7085: bg 0: block 248: padding at end of block bitmap is not set [ 547.426431][T30464] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.7085: Failed to acquire dquot type 1 [ 547.458858][T30464] EXT4-fs (loop0): 1 truncate cleaned up [ 547.636187][T30479] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7090'. [ 547.647775][T30479] netlink: 96 bytes leftover after parsing attributes in process `syz.6.7090'. [ 547.717991][T30490] FAULT_INJECTION: forcing a failure. [ 547.717991][T30490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 547.731110][T30490] CPU: 1 UID: 0 PID: 30490 Comm: syz.6.7093 Not tainted syzkaller #0 PREEMPT(voluntary) [ 547.731162][T30490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 547.731174][T30490] Call Trace: [ 547.731180][T30490] [ 547.731187][T30490] __dump_stack+0x1d/0x30 [ 547.731209][T30490] dump_stack_lvl+0xe8/0x140 [ 547.731228][T30490] dump_stack+0x15/0x1b [ 547.731250][T30490] should_fail_ex+0x265/0x280 [ 547.731270][T30490] should_fail+0xb/0x20 [ 547.731355][T30490] should_fail_usercopy+0x1a/0x20 [ 547.731376][T30490] _copy_from_user+0x1c/0xb0 [ 547.731403][T30490] __se_sys_mount+0x10d/0x2e0 [ 547.731467][T30490] ? fput+0x8f/0xc0 [ 547.731494][T30490] ? ksys_write+0x192/0x1a0 [ 547.731515][T30490] __x64_sys_mount+0x67/0x80 [ 547.731559][T30490] x64_sys_call+0x2b4d/0x2ff0 [ 547.731661][T30490] do_syscall_64+0xd2/0x200 [ 547.731687][T30490] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 547.731712][T30490] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 547.731814][T30490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.731835][T30490] RIP: 0033:0x7fb6d0f9ebe9 [ 547.731867][T30490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.731962][T30490] RSP: 002b:00007fb6cfa07038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 547.732032][T30490] RAX: ffffffffffffffda RBX: 00007fb6d11c5fa0 RCX: 00007fb6d0f9ebe9 [ 547.732045][T30490] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000000000000000 [ 547.732059][T30490] RBP: 00007fb6cfa07090 R08: 0000200000000580 R09: 0000000000000000 [ 547.732072][T30490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.732085][T30490] R13: 00007fb6d11c6038 R14: 00007fb6d11c5fa0 R15: 00007ffe6ea0b028 [ 547.732145][T30490] [ 547.952333][T30490] 9pnet: Could not find request transport: f [ 548.033309][T30474] netlink: 'syz.5.7087': attribute type 6 has an invalid length. [ 548.045320][T30492] siw: device registration error -23 [ 548.139685][T30499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7096'. [ 548.177441][T30507] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7097'. [ 548.188058][T30507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7097'. [ 548.197250][T30507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7097'. [ 548.695259][T30540] loop0: detected capacity change from 0 to 1024 [ 548.722412][T30540] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (58532!=20869) [ 548.737621][T30540] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 548.746278][T30540] EXT4-fs (loop0): failed to initialize system zone (-117) [ 548.753805][T30540] EXT4-fs (loop0): mount failed [ 548.798215][T30536] netlink: 'syz.6.7108': attribute type 6 has an invalid length. [ 548.813581][T30569] loop5: detected capacity change from 0 to 2048 [ 548.867410][T30585] netlink: 'syz.6.7125': attribute type 3 has an invalid length. [ 548.874434][T30569] loop5: p1 < > p2 p3 < p5 p6 > p4 [ 548.880478][T30569] loop5: partition table partially beyond EOD, truncated [ 548.888034][T30569] loop5: p1 start 4278190080 is beyond EOD, truncated [ 548.894914][T30569] loop5: p2 start 16908800 is beyond EOD, truncated [ 548.899581][T30588] FAULT_INJECTION: forcing a failure. [ 548.899581][T30588] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 548.902749][T30569] loop5: p5 start 16908800 is beyond EOD, truncated [ 548.915113][T30588] CPU: 0 UID: 0 PID: 30588 Comm: syz.6.7126 Not tainted syzkaller #0 PREEMPT(voluntary) [ 548.915211][T30588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 548.915229][T30588] Call Trace: [ 548.915235][T30588] [ 548.915247][T30588] __dump_stack+0x1d/0x30 [ 548.915275][T30588] dump_stack_lvl+0xe8/0x140 [ 548.915302][T30588] dump_stack+0x15/0x1b [ 548.915400][T30588] should_fail_ex+0x265/0x280 [ 548.915430][T30588] should_fail+0xb/0x20 [ 548.915453][T30588] should_fail_usercopy+0x1a/0x20 [ 548.915483][T30588] _copy_from_user+0x1c/0xb0 [ 548.915521][T30588] ___sys_sendmsg+0xc1/0x1d0 [ 548.915581][T30588] __x64_sys_sendmsg+0xd4/0x160 [ 548.915617][T30588] x64_sys_call+0x191e/0x2ff0 [ 548.915647][T30588] do_syscall_64+0xd2/0x200 [ 548.915755][T30588] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 548.915789][T30588] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 548.915820][T30588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.915899][T30588] RIP: 0033:0x7fb6d0f9ebe9 [ 548.915921][T30588] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.915981][T30588] RSP: 002b:00007fb6cfa07038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 548.916007][T30588] RAX: ffffffffffffffda RBX: 00007fb6d11c5fa0 RCX: 00007fb6d0f9ebe9 [ 548.916024][T30588] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 548.916041][T30588] RBP: 00007fb6cfa07090 R08: 0000000000000000 R09: 0000000000000000 [ 548.916058][T30588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.916075][T30588] R13: 00007fb6d11c6038 R14: 00007fb6d11c5fa0 R15: 00007ffe6ea0b028 [ 548.916120][T30588] [ 549.205756][T30617] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 549.276917][T30620] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 549.295803][T30600] netlink: 'syz.1.7131': attribute type 6 has an invalid length. [ 549.313997][T30622] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 549.418953][T30630] loop0: detected capacity change from 0 to 512 [ 549.426342][T30630] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 549.445457][T30615] netlink: 'syz.5.7134': attribute type 6 has an invalid length. [ 549.458084][T30630] ext4 filesystem being mounted at /245/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 549.528432][T30651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.544232][T30651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.595847][T30659] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 549.662996][T30669] siw: device registration error -23 [ 549.762935][T30677] loop5: detected capacity change from 0 to 1024 [ 549.770842][T30677] EXT4-fs: Ignoring removed orlov option [ 550.062429][T30692] netlink: 'syz.1.7164': attribute type 3 has an invalid length. [ 550.157765][T30697] loop0: detected capacity change from 0 to 2048 [ 550.196670][ T29] kauditd_printk_skb: 272 callbacks suppressed [ 550.196723][ T29] audit: type=1400 audit(1755674035.676:17019): avc: denied { mounton } for pid=30695 comm="syz.0.7166" path="/247/file0/bus" dev="loop0" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 550.315424][ T29] audit: type=1326 audit(1755674035.726:17020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30711 comm="syz.1.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23999ebe9 code=0x7ffc0000 [ 550.339151][ T29] audit: type=1326 audit(1755674035.726:17021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30711 comm="syz.1.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23999ebe9 code=0x7ffc0000 [ 550.362745][ T29] audit: type=1326 audit(1755674035.726:17022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30711 comm="syz.1.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb23999ebe9 code=0x7ffc0000 [ 550.386486][ T29] audit: type=1326 audit(1755674035.726:17023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30711 comm="syz.1.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23999ebe9 code=0x7ffc0000 [ 550.410223][ T29] audit: type=1326 audit(1755674035.726:17024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30711 comm="syz.1.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb23999ebe9 code=0x7ffc0000 [ 550.433853][ T29] audit: type=1326 audit(1755674035.736:17025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30711 comm="syz.1.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23999ebe9 code=0x7ffc0000 [ 550.457775][ T29] audit: type=1326 audit(1755674035.736:17026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30711 comm="syz.1.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23999ebe9 code=0x7ffc0000 [ 550.459639][T30718] loop5: detected capacity change from 0 to 512 [ 550.481642][ T29] audit: type=1326 audit(1755674035.736:17027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30711 comm="syz.1.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb23999ebe9 code=0x7ffc0000 [ 550.511536][ T29] audit: type=1326 audit(1755674035.736:17028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30711 comm="syz.1.7169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23999ebe9 code=0x7ffc0000 [ 550.637030][T30718] EXT4-fs (loop5): orphan cleanup on readonly fs [ 550.647532][T23897] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 550.706603][T23897] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 550.724951][T30718] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7172: bg 0: block 248: padding at end of block bitmap is not set [ 550.795733][T30729] loop0: detected capacity change from 0 to 512 [ 550.804123][T30729] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 550.840091][T30718] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.7172: Failed to acquire dquot type 1 [ 550.873064][T30735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.888919][T30718] EXT4-fs (loop5): 1 truncate cleaned up [ 550.892604][T30735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.895786][T30738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.913179][T30729] ext4 filesystem being mounted at /248/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 550.925518][T30738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.962355][T30746] loop0: detected capacity change from 0 to 512 [ 550.976316][T30746] EXT4-fs (loop0): orphan cleanup on readonly fs [ 550.983617][T30746] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.7177: bg 0: block 248: padding at end of block bitmap is not set [ 551.008685][T30746] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.7177: Failed to acquire dquot type 1 [ 551.032947][T30746] EXT4-fs (loop0): 1 truncate cleaned up [ 551.293438][T30762] __nla_validate_parse: 3 callbacks suppressed [ 551.293452][T30762] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7178'. [ 551.401403][T30769] loop5: detected capacity change from 0 to 2048 [ 551.477629][T30769] loop5: p1 < > p2 p3 < p5 p6 > p4 [ 551.482867][T30769] loop5: partition table partially beyond EOD, truncated [ 551.495600][T30773] 9pnet: p9_errstr2errno: server reported unknown error [ 551.513324][T30773] FAULT_INJECTION: forcing a failure. [ 551.513324][T30773] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.526605][T30773] CPU: 1 UID: 0 PID: 30773 Comm: syz.2.7180 Not tainted syzkaller #0 PREEMPT(voluntary) [ 551.526633][T30773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 551.526647][T30773] Call Trace: [ 551.526653][T30773] [ 551.526660][T30773] __dump_stack+0x1d/0x30 [ 551.526681][T30773] dump_stack_lvl+0xe8/0x140 [ 551.526700][T30773] dump_stack+0x15/0x1b [ 551.526745][T30773] should_fail_ex+0x265/0x280 [ 551.526766][T30773] should_fail+0xb/0x20 [ 551.526783][T30773] should_fail_usercopy+0x1a/0x20 [ 551.526864][T30773] _copy_from_user+0x1c/0xb0 [ 551.526895][T30773] __se_sys_mount+0x10d/0x2e0 [ 551.526918][T30773] ? fput+0x8f/0xc0 [ 551.526947][T30773] ? ksys_write+0x192/0x1a0 [ 551.527019][T30773] __x64_sys_mount+0x67/0x80 [ 551.527049][T30773] x64_sys_call+0x2b4d/0x2ff0 [ 551.527071][T30773] do_syscall_64+0xd2/0x200 [ 551.527098][T30773] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 551.527122][T30773] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 551.527215][T30773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.527236][T30773] RIP: 0033:0x7eff1954ebe9 [ 551.527251][T30773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.527336][T30773] RSP: 002b:00007eff17fb7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 551.527355][T30773] RAX: ffffffffffffffda RBX: 00007eff19775fa0 RCX: 00007eff1954ebe9 [ 551.527367][T30773] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 551.527380][T30773] RBP: 00007eff17fb7090 R08: 0000200000000080 R09: 0000000000000000 [ 551.527392][T30773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.527404][T30773] R13: 00007eff19776038 R14: 00007eff19775fa0 R15: 00007ffcda79c308 [ 551.527471][T30773] [ 551.714051][T30769] loop5: p1 start 4278190080 is beyond EOD, truncated [ 551.720859][T30769] loop5: p2 start 16908800 is beyond EOD, truncated [ 551.769035][T30769] loop5: p5 start 16908800 is beyond EOD, truncated [ 551.839366][T30788] loop0: detected capacity change from 0 to 512 [ 551.887638][T30798] FAULT_INJECTION: forcing a failure. [ 551.887638][T30798] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.895613][T30788] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 551.900844][T30798] CPU: 1 UID: 0 PID: 30798 Comm: syz.5.7185 Not tainted syzkaller #0 PREEMPT(voluntary) [ 551.900895][T30798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 551.900916][T30798] Call Trace: [ 551.900924][T30798] [ 551.900934][T30798] __dump_stack+0x1d/0x30 [ 551.901047][T30798] dump_stack_lvl+0xe8/0x140 [ 551.901075][T30798] dump_stack+0x15/0x1b [ 551.901099][T30798] should_fail_ex+0x265/0x280 [ 551.901151][T30798] should_fail+0xb/0x20 [ 551.901186][T30798] should_fail_usercopy+0x1a/0x20 [ 551.901214][T30798] _copy_from_iter+0xcf/0xe40 [ 551.901245][T30798] ? __build_skb_around+0x1a0/0x200 [ 551.901325][T30798] ? __alloc_skb+0x223/0x320 [ 551.901368][T30798] netlink_sendmsg+0x471/0x6b0 [ 551.901399][T30798] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.901443][T30798] __sock_sendmsg+0x142/0x180 [ 551.901495][T30798] ____sys_sendmsg+0x31e/0x4e0 [ 551.901527][T30798] ___sys_sendmsg+0x17b/0x1d0 [ 551.901570][T30798] __x64_sys_sendmsg+0xd4/0x160 [ 551.901665][T30798] x64_sys_call+0x191e/0x2ff0 [ 551.901692][T30798] do_syscall_64+0xd2/0x200 [ 551.901725][T30798] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 551.901785][T30798] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 551.901827][T30798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.901900][T30798] RIP: 0033:0x7fb34dacebe9 [ 551.901919][T30798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.901979][T30798] RSP: 002b:00007fb34c52f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 551.902049][T30798] RAX: ffffffffffffffda RBX: 00007fb34dcf5fa0 RCX: 00007fb34dacebe9 [ 551.902067][T30798] RDX: 0000000020004000 RSI: 0000200000000040 RDI: 0000000000000005 [ 551.902083][T30798] RBP: 00007fb34c52f090 R08: 0000000000000000 R09: 0000000000000000 [ 551.902099][T30798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 551.902113][T30798] R13: 00007fb34dcf6038 R14: 00007fb34dcf5fa0 R15: 00007fff71e78e88 [ 551.902138][T30798] [ 551.968718][T30806] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7188'. [ 551.974465][T30788] EXT4-fs (loop0): mount failed [ 552.191794][T30817] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7189'. [ 552.204657][T30824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.213240][T30824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.368319][T30841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.377426][T30841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.390158][T30845] serio: Serial port ttyS3 [ 552.686673][T30859] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7202'. [ 552.771340][T30862] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.822977][T30873] sch_tbf: peakrate 1024 is lower than or equals to rate 176566272 ! [ 552.825614][T30871] loop0: detected capacity change from 0 to 512 [ 552.853961][T30871] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 552.857628][T30862] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.884090][T30871] ext4 filesystem being mounted at /253/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 552.977383][T30862] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.042613][T30890] loop0: detected capacity change from 0 to 4096 [ 553.100099][T30862] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.111120][T30890] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7209'. [ 553.125542][T30890] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7209'. [ 553.246838][T30873] loop5: detected capacity change from 0 to 32768 [ 553.282877][T30910] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 553.313584][ T31] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.323426][T30920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7215'. [ 553.341190][T30885] netlink: 'syz.6.7208': attribute type 6 has an invalid length. [ 553.355746][ T31] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.369848][T30926] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7217'. [ 553.379200][ T31] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.391152][ T31] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.405232][T30926] loop0: detected capacity change from 0 to 512 [ 553.413652][T30926] EXT4-fs (loop0): orphan cleanup on readonly fs [ 553.421644][T30926] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.7217: bg 0: block 248: padding at end of block bitmap is not set [ 553.441527][T30926] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.7217: Failed to acquire dquot type 1 [ 553.453442][T30926] EXT4-fs (loop0): 1 truncate cleaned up [ 553.544824][T30953] loop5: detected capacity change from 0 to 512 [ 553.572434][T30953] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 553.591812][T30964] siw: device registration error -23 [ 553.646314][T30953] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 553.659504][T30969] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 553.818392][T30987] loop5: detected capacity change from 0 to 1024 [ 553.836985][T30987] EXT4-fs: Ignoring removed orlov option [ 553.893629][T30992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7232'. [ 553.902712][T30992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7232'. [ 553.999193][T30992] netlink: 'syz.2.7232': attribute type 3 has an invalid length. [ 554.336537][T31001] loop0: detected capacity change from 0 to 4096 [ 555.071682][T31085] siw: device registration error -23 [ 555.170864][T31090] loop0: detected capacity change from 0 to 4096 [ 555.224825][ T29] kauditd_printk_skb: 303 callbacks suppressed [ 555.224859][ T29] audit: type=1400 audit(1755674040.706:17325): avc: denied { create } for pid=31088 comm="syz.0.7252" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 555.436063][T31100] loop0: detected capacity change from 0 to 512 [ 555.475594][T31100] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 555.734626][T31112] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 555.764331][ T29] audit: type=1326 audit(1755674041.236:17326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31027 comm="syz.6.7243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d0f9ebe9 code=0x7ffc0000 [ 555.788105][ T29] audit: type=1326 audit(1755674041.236:17327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31027 comm="syz.6.7243" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d0f9ebe9 code=0x7ffc0000 [ 555.788263][T31114] loop5: detected capacity change from 0 to 2048 [ 555.819301][T31100] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 555.876481][ T29] audit: type=1326 audit(1755674041.336:17328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31125 comm="syz.0.7259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9d01ebe9 code=0x7ffc0000 [ 555.900311][ T29] audit: type=1400 audit(1755674041.346:17329): avc: denied { bind } for pid=31124 comm="syz.1.7260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 555.919871][ T29] audit: type=1400 audit(1755674041.346:17330): avc: denied { name_bind } for pid=31124 comm="syz.1.7260" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 555.941841][ T29] audit: type=1400 audit(1755674041.346:17331): avc: denied { node_bind } for pid=31124 comm="syz.1.7260" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 555.962880][ T29] audit: type=1326 audit(1755674041.356:17332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31125 comm="syz.0.7259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f9d01ebe9 code=0x7ffc0000 [ 555.987343][ T29] audit: type=1326 audit(1755674041.356:17333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31125 comm="syz.0.7259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f9d01ebe9 code=0x7ffc0000 [ 556.010968][ T29] audit: type=1326 audit(1755674041.356:17334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31125 comm="syz.0.7259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f9d01ebe9 code=0x7ffc0000 [ 556.095672][T24647] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 556.097065][T31143] netlink: 'syz.0.7264': attribute type 3 has an invalid length. [ 556.128000][T24647] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 556.147512][T31145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.156232][T31145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.240483][T31153] loop5: detected capacity change from 0 to 512 [ 556.253147][T31153] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 556.286826][T31153] ext4 filesystem being mounted at /283/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 556.373003][T24647] EXT4-fs unmount: 54 callbacks suppressed [ 556.373024][T24647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.460829][T31168] __nla_validate_parse: 3 callbacks suppressed [ 556.460843][T31168] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7271'. [ 556.486029][T31157] netlink: 'syz.1.7268': attribute type 6 has an invalid length. [ 556.499735][T31168] loop5: detected capacity change from 0 to 512 [ 556.530474][T31168] EXT4-fs (loop5): orphan cleanup on readonly fs [ 556.548738][T31168] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7271: bg 0: block 248: padding at end of block bitmap is not set [ 556.581155][T31168] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.7271: Failed to acquire dquot type 1 [ 556.601847][T31168] EXT4-fs (loop5): 1 truncate cleaned up [ 556.609932][T31168] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 556.773295][T31190] loop0: detected capacity change from 0 to 2048 [ 556.794043][T31194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.809720][T31200] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7281'. [ 556.822584][T31194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.845813][T31190] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 556.946244][T23897] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 556.982364][T23897] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 556.989643][T31216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7285'. [ 557.042950][T24647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.054061][T23897] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.082641][T31223] loop5: detected capacity change from 0 to 2048 [ 557.111241][T31223] EXT4-fs: inline encryption not supported [ 557.226957][T31223] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 557.258077][T31222] EXT4-fs error (device loop5): ext4_find_extent:939: inode #2: comm syz.5.7286: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 557.295406][T31223] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7286'. [ 557.309482][T31222] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7286'. [ 557.382692][T31227] netlink: 'syz.0.7284': attribute type 6 has an invalid length. [ 557.425232][T31247] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 557.434373][T31251] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7294'. [ 557.445560][T24647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.575739][T31268] netlink: 'syz.6.7300': attribute type 3 has an invalid length. [ 557.996572][T31280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.005280][T31280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.419233][T31284] netlink: 'syz.1.7305': attribute type 6 has an invalid length. [ 558.451009][T31292] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 558.583657][T31308] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7315'. [ 558.616052][T31317] netlink: 'syz.0.7319': attribute type 3 has an invalid length. [ 558.624505][T31308] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7315'. [ 558.644808][T31308] infiniband €yz1: RDMA CMA: cma_listen_on_dev, error -98 [ 558.662021][T31319] loop5: detected capacity change from 0 to 2048 [ 558.671709][T31319] EXT4-fs: Ignoring removed mblk_io_submit option [ 558.721215][T31319] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 558.786649][T24647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 558.860046][T31341] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 559.047841][T31325] netlink: 'syz.0.7321': attribute type 6 has an invalid length. [ 559.127483][T31351] loop0: detected capacity change from 0 to 512 [ 559.146331][T31351] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 559.196259][T31351] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.7329: corrupted in-inode xattr: overlapping e_value [ 559.218904][T31354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.227553][T31354] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.256675][T31351] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.7329: couldn't read orphan inode 15 (err -117) [ 559.270354][T31351] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 559.304456][T23897] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 559.326614][T31362] FAULT_INJECTION: forcing a failure. [ 559.326614][T31362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.340012][T31362] CPU: 1 UID: 0 PID: 31362 Comm: syz.0.7330 Not tainted syzkaller #0 PREEMPT(voluntary) [ 559.340047][T31362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 559.340060][T31362] Call Trace: [ 559.340068][T31362] [ 559.340078][T31362] __dump_stack+0x1d/0x30 [ 559.340105][T31362] dump_stack_lvl+0xe8/0x140 [ 559.340146][T31362] dump_stack+0x15/0x1b [ 559.340162][T31362] should_fail_ex+0x265/0x280 [ 559.340187][T31362] should_fail+0xb/0x20 [ 559.340250][T31362] should_fail_usercopy+0x1a/0x20 [ 559.340328][T31362] _copy_from_user+0x1c/0xb0 [ 559.340399][T31362] __sys_connect+0xd0/0x2b0 [ 559.340451][T31362] __x64_sys_connect+0x3f/0x50 [ 559.340561][T31362] x64_sys_call+0x2c08/0x2ff0 [ 559.340596][T31362] do_syscall_64+0xd2/0x200 [ 559.340626][T31362] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 559.340708][T31362] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 559.340735][T31362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.340755][T31362] RIP: 0033:0x7f4f9d01ebe9 [ 559.340769][T31362] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.340829][T31362] RSP: 002b:00007f4f9ba87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 559.340848][T31362] RAX: ffffffffffffffda RBX: 00007f4f9d245fa0 RCX: 00007f4f9d01ebe9 [ 559.340860][T31362] RDX: 000000000000001c RSI: 0000200000000240 RDI: 0000000000000006 [ 559.340871][T31362] RBP: 00007f4f9ba87090 R08: 0000000000000000 R09: 0000000000000000 [ 559.340886][T31362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.340901][T31362] R13: 00007f4f9d246038 R14: 00007f4f9d245fa0 R15: 00007ffedeab3788 [ 559.340920][T31362] [ 559.631599][T31372] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7334'. [ 559.690231][T31375] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7335'. [ 559.748376][T31375] loop0: detected capacity change from 0 to 512 [ 559.768616][T31375] EXT4-fs (loop0): orphan cleanup on readonly fs [ 559.775919][T31375] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.7335: bg 0: block 248: padding at end of block bitmap is not set [ 559.791956][T31375] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.7335: Failed to acquire dquot type 1 [ 559.883502][T31375] EXT4-fs (loop0): 1 truncate cleaned up [ 559.900293][T31375] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 560.052597][T31395] rdma_rxe: rxe_newlink: failed to add lo [ 560.254387][T31399] netlink: 'syz.5.7339': attribute type 3 has an invalid length. [ 560.750062][T31431] siw: device registration error -23 [ 560.815609][T23897] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.925373][T31451] loop0: detected capacity change from 0 to 2048 [ 560.967111][T31451] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 561.088872][T31434] netlink: 'syz.1.7347': attribute type 6 has an invalid length. [ 561.123311][ T29] kauditd_printk_skb: 183 callbacks suppressed [ 561.123327][ T29] audit: type=1326 audit(1755674046.596:17514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31471 comm="syz.2.7352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1954ebe9 code=0x7ffc0000 [ 561.153200][ T29] audit: type=1326 audit(1755674046.596:17515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31471 comm="syz.2.7352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1954ebe9 code=0x7ffc0000 [ 561.205930][T23897] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 561.224938][T23897] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 561.241193][T23897] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.293558][ T29] audit: type=1326 audit(1755674046.656:17516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31471 comm="syz.2.7352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff1954ebe9 code=0x7ffc0000 [ 561.304593][T31490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.317384][ T29] audit: type=1326 audit(1755674046.656:17517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31471 comm="syz.2.7352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1954ebe9 code=0x7ffc0000 [ 561.349278][ T29] audit: type=1326 audit(1755674046.656:17518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31471 comm="syz.2.7352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff1954ebe9 code=0x7ffc0000 [ 561.363955][T31490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.373027][ T29] audit: type=1326 audit(1755674046.656:17519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31471 comm="syz.2.7352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1954ebe9 code=0x7ffc0000 [ 561.404219][ T29] audit: type=1326 audit(1755674046.656:17520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31471 comm="syz.2.7352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1954ebe9 code=0x7ffc0000 [ 561.427882][ T29] audit: type=1326 audit(1755674046.656:17521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31471 comm="syz.2.7352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7eff1954ebe9 code=0x7ffc0000 [ 561.451722][ T29] audit: type=1326 audit(1755674046.656:17522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31471 comm="syz.2.7352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1954ebe9 code=0x7ffc0000 [ 561.475394][ T29] audit: type=1326 audit(1755674046.656:17523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31471 comm="syz.2.7352" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1954ebe9 code=0x7ffc0000 [ 561.529880][T31503] loop0: detected capacity change from 0 to 512 [ 561.543650][T31503] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 561.568846][T31503] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 561.588465][T31503] ext4 filesystem being mounted at /287/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 561.601042][T31522] siw: device registration error -23 [ 561.630637][T31526] __nla_validate_parse: 1 callbacks suppressed [ 561.630669][T31526] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7359'. [ 561.695393][T23897] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 561.946319][T31531] netlink: 'syz.5.7360': attribute type 6 has an invalid length. [ 562.081653][T31555] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7366'. [ 562.092899][T31549] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7363'. [ 562.112679][T31536] netlink: 'syz.0.7361': attribute type 6 has an invalid length. [ 562.147362][T31549] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7363'. [ 562.330602][T31551] netlink: 'syz.5.7364': attribute type 6 has an invalid length. [ 562.437738][T31614] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7372'. [ 563.104256][T31640] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7380'. [ 563.152181][T31642] loop0: detected capacity change from 0 to 4096 [ 563.174589][T31649] siw: device registration error -23 [ 563.181247][T31642] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 563.213460][T31644] lo speed is unknown, defaulting to 1000 [ 563.283493][T23897] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.293414][T31644] lo speed is unknown, defaulting to 1000 [ 563.407411][T31687] loop0: detected capacity change from 0 to 1024 [ 563.416548][T31687] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 563.427519][T31687] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 563.439244][T31687] EXT4-fs (loop0): orphan cleanup on readonly fs [ 563.445900][T31687] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 563.460607][T31687] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 563.468750][T31687] EXT4-fs error (device loop0): ext4_free_blocks:6696: comm syz.0.7387: Freeing blocks not in datazone - block = 0, count = 4096 [ 563.485906][T31687] EXT4-fs (loop0): 1 orphan inode deleted [ 563.486361][T31687] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 563.524946][T23897] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 563.544207][T31695] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 563.649690][T31709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7393'. [ 563.743712][T31716] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7396'. [ 563.761936][T31716] loop0: detected capacity change from 0 to 512 [ 563.778041][T31716] EXT4-fs (loop0): orphan cleanup on readonly fs [ 563.785190][T31716] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.7396: bg 0: block 248: padding at end of block bitmap is not set [ 563.803216][T31716] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.7396: Failed to acquire dquot type 1 [ 563.815315][T31716] EXT4-fs (loop0): 1 truncate cleaned up [ 563.821628][T31716] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 564.303612][T31742] syz!: rxe_newlink: already configured on team_slave_0 [ 564.530772][T31750] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7404'. [ 564.552129][T31752] loop5: detected capacity change from 0 to 2048 [ 564.569266][T31752] EXT4-fs: Ignoring removed mblk_io_submit option [ 564.624951][T31752] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.668222][T24647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.714376][T23897] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.797189][T31765] loop0: detected capacity change from 0 to 2048 [ 564.816719][T31771] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7409'. [ 564.850832][T31765] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.873905][T31771] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 564.890207][ T3388] lo speed is unknown, defaulting to 1000 [ 565.019420][T31786] netlink: 'syz.5.7410': attribute type 3 has an invalid length. [ 565.038391][T23897] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 565.065859][T23897] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 565.079113][T23897] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.279403][T31809] FAULT_INJECTION: forcing a failure. [ 565.279403][T31809] name failslab, interval 1, probability 0, space 0, times 0 [ 565.292113][T31809] CPU: 0 UID: 0 PID: 31809 Comm: syz.5.7420 Not tainted syzkaller #0 PREEMPT(voluntary) [ 565.292138][T31809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 565.292195][T31809] Call Trace: [ 565.292203][T31809] [ 565.292212][T31809] __dump_stack+0x1d/0x30 [ 565.292237][T31809] dump_stack_lvl+0xe8/0x140 [ 565.292259][T31809] dump_stack+0x15/0x1b [ 565.292295][T31809] should_fail_ex+0x265/0x280 [ 565.292313][T31809] ? kobject_uevent_env+0x1c0/0x570 [ 565.292333][T31809] should_failslab+0x8c/0xb0 [ 565.292358][T31809] __kmalloc_cache_noprof+0x4c/0x320 [ 565.292445][T31809] kobject_uevent_env+0x1c0/0x570 [ 565.292464][T31809] ? sysfs_remove_groups+0x64/0x80 [ 565.292488][T31809] kobject_uevent+0x1d/0x30 [ 565.292585][T31809] device_del+0x710/0x790 [ 565.292606][T31809] ? __try_to_del_timer_sync+0x152/0x170 [ 565.292635][T31809] device_unregister+0x15/0x40 [ 565.292657][T31809] wakeup_source_sysfs_remove+0x25/0x30 [ 565.292734][T31809] wakeup_source_unregister+0xf0/0x330 [ 565.292755][T31809] ep_destroy_wakeup_source+0x3a/0x50 [ 565.292792][T31809] ep_modify+0xb0/0x450 [ 565.292837][T31809] do_epoll_ctl+0x611/0x8a0 [ 565.292868][T31809] __x64_sys_epoll_ctl+0xcb/0x100 [ 565.292899][T31809] x64_sys_call+0x706/0x2ff0 [ 565.292917][T31809] do_syscall_64+0xd2/0x200 [ 565.292979][T31809] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 565.293006][T31809] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 565.293060][T31809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.293084][T31809] RIP: 0033:0x7fb34dacebe9 [ 565.293097][T31809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 565.293113][T31809] RSP: 002b:00007fb34c52f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 565.293145][T31809] RAX: ffffffffffffffda RBX: 00007fb34dcf5fa0 RCX: 00007fb34dacebe9 [ 565.293159][T31809] RDX: 0000000000000003 RSI: 0000000000000003 RDI: 0000000000000004 [ 565.293169][T31809] RBP: 00007fb34c52f090 R08: 0000000000000000 R09: 0000000000000000 [ 565.293183][T31809] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.293197][T31809] R13: 00007fb34dcf6038 R14: 00007fb34dcf5fa0 R15: 00007fff71e78e88 [ 565.293219][T31809] [ 565.647770][T31831] FAULT_INJECTION: forcing a failure. [ 565.647770][T31831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 565.661004][T31831] CPU: 1 UID: 0 PID: 31831 Comm: syz.6.7421 Not tainted syzkaller #0 PREEMPT(voluntary) [ 565.661049][T31831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 565.661060][T31831] Call Trace: [ 565.661065][T31831] [ 565.661072][T31831] __dump_stack+0x1d/0x30 [ 565.661092][T31831] dump_stack_lvl+0xe8/0x140 [ 565.661114][T31831] dump_stack+0x15/0x1b [ 565.661179][T31831] should_fail_ex+0x265/0x280 [ 565.661203][T31831] should_fail+0xb/0x20 [ 565.661222][T31831] should_fail_usercopy+0x1a/0x20 [ 565.661247][T31831] strncpy_from_user+0x25/0x230 [ 565.661278][T31831] ? __kmalloc_cache_noprof+0x189/0x320 [ 565.661382][T31831] __se_sys_memfd_create+0x1ff/0x590 [ 565.661402][T31831] __x64_sys_memfd_create+0x31/0x40 [ 565.661419][T31831] x64_sys_call+0x2abe/0x2ff0 [ 565.661441][T31831] do_syscall_64+0xd2/0x200 [ 565.661477][T31831] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 565.661504][T31831] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 565.661532][T31831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.661557][T31831] RIP: 0033:0x7fb6d0f9ebe9 [ 565.661614][T31831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 565.661635][T31831] RSP: 002b:00007fb6cf9c4e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 565.661710][T31831] RAX: ffffffffffffffda RBX: 0000000000000512 RCX: 00007fb6d0f9ebe9 [ 565.661724][T31831] RDX: 00007fb6cf9c4ef0 RSI: 0000000000000000 RDI: 00007fb6d10227e8 [ 565.661736][T31831] RBP: 0000200000000380 R08: 00007fb6cf9c4bb7 R09: 00007fb6cf9c4e40 [ 565.661746][T31831] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080 [ 565.661757][T31831] R13: 00007fb6cf9c4ef0 R14: 00007fb6cf9c4eb0 R15: 0000200000000000 [ 565.661774][T31831] [ 565.924705][T31840] netlink: 'syz.1.7425': attribute type 3 has an invalid length. [ 565.946901][T31843] netlink: 'syz.5.7426': attribute type 1 has an invalid length. [ 565.979169][T31843] 8021q: adding VLAN 0 to HW filter on device bond1 [ 566.320103][T31895] netlink: 'gtp': attribute type 1 has an invalid length. [ 566.363866][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 566.363908][ T29] audit: type=1326 audit(1755674051.816:17817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31893 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1954ebe9 code=0x7ffc0000 [ 566.393301][ T29] audit: type=1326 audit(1755674051.816:17818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31893 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7eff1954ebe9 code=0x7ffc0000 [ 566.416315][ T29] audit: type=1326 audit(1755674051.816:17819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31893 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1954ebe9 code=0x7ffc0000 [ 566.439619][ T29] audit: type=1326 audit(1755674051.816:17820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31893 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7eff1954ebe9 code=0x7ffc0000 [ 566.462531][ T29] audit: type=1326 audit(1755674051.816:17821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31893 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1954ebe9 code=0x7ffc0000 [ 566.487298][ T29] audit: type=1326 audit(1755674051.816:17822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31893 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7eff1954ebe9 code=0x7ffc0000 [ 566.510368][ T29] audit: type=1326 audit(1755674051.816:17823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31893 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1954ebe9 code=0x7ffc0000 [ 566.533704][ T29] audit: type=1326 audit(1755674051.816:17824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31893 comm="gtp" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1954ebe9 code=0x7ffc0000 [ 566.688358][T31905] __nla_validate_parse: 3 callbacks suppressed [ 566.688374][T31905] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7436'. [ 566.724541][ T29] audit: type=1400 audit(1755674052.206:17825): avc: denied { getopt } for pid=31906 comm="syz.2.7437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 567.179931][ T29] audit: type=1326 audit(1755674052.656:17826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31932 comm="syz.2.7444" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1954ebe9 code=0x7ffc0000 [ 567.417846][T31941] siw: device registration error -23 [ 567.441244][T31944] rdma_rxe: rxe_newlink: failed to add lo [ 567.485582][T31951] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7451'. [ 567.987568][T31981] loop5: detected capacity change from 0 to 512 [ 568.009488][T31981] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.7458: iget: bad i_size value: 38620345925642 [ 568.105515][T31981] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.7458: couldn't read orphan inode 15 (err -117) [ 568.188075][T31981] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 568.226766][T31989] loop0: detected capacity change from 0 to 1024 [ 568.240352][T31981] FAULT_INJECTION: forcing a failure. [ 568.240352][T31981] name failslab, interval 1, probability 0, space 0, times 0 [ 568.253067][T31981] CPU: 0 UID: 0 PID: 31981 Comm: syz.5.7458 Not tainted syzkaller #0 PREEMPT(voluntary) [ 568.253108][T31981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 568.253123][T31981] Call Trace: [ 568.253130][T31981] [ 568.253139][T31981] __dump_stack+0x1d/0x30 [ 568.253163][T31981] dump_stack_lvl+0xe8/0x140 [ 568.253184][T31981] dump_stack+0x15/0x1b [ 568.253203][T31981] should_fail_ex+0x265/0x280 [ 568.253226][T31981] should_failslab+0x8c/0xb0 [ 568.253279][T31981] kmem_cache_alloc_noprof+0x50/0x310 [ 568.253364][T31981] ? __es_insert_extent+0x508/0xee0 [ 568.253401][T31981] __es_insert_extent+0x508/0xee0 [ 568.253454][T31981] ? _raw_spin_unlock+0x26/0x50 [ 568.253533][T31981] ? __dquot_alloc_space+0x1f2/0x8a0 [ 568.253568][T31981] ext4_es_insert_delayed_extent+0x322/0x8d0 [ 568.253633][T31981] ext4_da_get_block_prep+0x7bf/0xbb0 [ 568.253724][T31981] ? alloc_buffer_head+0x1c3/0x1f0 [ 568.253751][T31981] ? folio_alloc_buffers+0x2e5/0x310 [ 568.253786][T31981] ext4_block_write_begin+0x5e5/0xc00 [ 568.253860][T31981] ? __pfx_ext4_da_get_block_prep+0x10/0x10 [ 568.253932][T31981] ext4_da_write_begin+0x48f/0x6e0 [ 568.253964][T31981] generic_perform_write+0x184/0x490 [ 568.253990][T31981] ext4_buffered_write_iter+0x1ee/0x3c0 [ 568.254040][T31981] ext4_file_write_iter+0x383/0xf00 [ 568.254138][T31981] ? kstrtouint_from_user+0x9f/0xf0 [ 568.254166][T31981] ? avc_policy_seqno+0x15/0x30 [ 568.254267][T31981] ? selinux_file_permission+0x1e4/0x320 [ 568.254298][T31981] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 568.254336][T31981] vfs_write+0x52a/0x960 [ 568.254368][T31981] ksys_write+0xda/0x1a0 [ 568.254419][T31981] __x64_sys_write+0x40/0x50 [ 568.254440][T31981] x64_sys_call+0x27fe/0x2ff0 [ 568.254462][T31981] do_syscall_64+0xd2/0x200 [ 568.254534][T31981] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 568.254564][T31981] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 568.254587][T31981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.254647][T31981] RIP: 0033:0x7fb34dacebe9 [ 568.254664][T31981] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.254686][T31981] RSP: 002b:00007fb34c52f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 568.254709][T31981] RAX: ffffffffffffffda RBX: 00007fb34dcf5fa0 RCX: 00007fb34dacebe9 [ 568.254791][T31981] RDX: 0000000000001001 RSI: 00002000000005c0 RDI: 0000000000000004 [ 568.254807][T31981] RBP: 00007fb34c52f090 R08: 0000000000000000 R09: 0000000000000000 [ 568.254820][T31981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.254880][T31981] R13: 00007fb34dcf6038 R14: 00007fb34dcf5fa0 R15: 00007fff71e78e88 [ 568.254898][T31981] [ 568.597622][T31981] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.7458: bg 0: block 5: invalid block bitmap [ 568.641409][T31981] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 5 with error 28 [ 568.641793][T31989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 568.653693][T31981] EXT4-fs (loop5): This should not happen!! Data will be lost [ 568.653693][T31981] [ 568.675469][T31981] EXT4-fs (loop5): Total free blocks count 0 [ 568.681456][T31981] EXT4-fs (loop5): Free/Dirty block details [ 568.687418][T31981] EXT4-fs (loop5): free_blocks=0 [ 568.692373][T31981] EXT4-fs (loop5): dirty_blocks=5 [ 568.697469][T31981] EXT4-fs (loop5): Block reservation details [ 568.703458][T31981] EXT4-fs (loop5): i_reserved_data_blocks=5 [ 568.715608][T31989] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.7460: Allocating blocks 385-513 which overlap fs metadata [ 568.768293][T24647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.778744][T31988] EXT4-fs (loop0): pa ffff88810729d0e0: logic 16, phys. 129, len 24 [ 568.786888][T31988] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 568.826653][T32015] loop5: detected capacity change from 0 to 2048 [ 568.850116][T23897] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.862436][T32015] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 568.899317][T32034] FAULT_INJECTION: forcing a failure. [ 568.899317][T32034] name failslab, interval 1, probability 0, space 0, times 0 [ 568.912104][T32034] CPU: 0 UID: 0 PID: 32034 Comm: syz.6.7472 Not tainted syzkaller #0 PREEMPT(voluntary) [ 568.912136][T32034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 568.912151][T32034] Call Trace: [ 568.912159][T32034] [ 568.912167][T32034] __dump_stack+0x1d/0x30 [ 568.912197][T32034] dump_stack_lvl+0xe8/0x140 [ 568.912320][T32034] dump_stack+0x15/0x1b [ 568.912340][T32034] should_fail_ex+0x265/0x280 [ 568.912360][T32034] should_failslab+0x8c/0xb0 [ 568.912438][T32034] kmem_cache_alloc_node_noprof+0x57/0x320 [ 568.912466][T32034] ? __alloc_skb+0x101/0x320 [ 568.912551][T32034] __alloc_skb+0x101/0x320 [ 568.912586][T32034] ? audit_log_start+0x365/0x6c0 [ 568.912621][T32034] audit_log_start+0x380/0x6c0 [ 568.912722][T32034] audit_seccomp+0x48/0x100 [ 568.912752][T32034] ? __seccomp_filter+0x68c/0x10d0 [ 568.912920][T32034] __seccomp_filter+0x69d/0x10d0 [ 568.912944][T32034] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 568.913042][T32034] ? vfs_write+0x7e8/0x960 [ 568.913099][T32034] ? __rcu_read_unlock+0x4f/0x70 [ 568.913120][T32034] ? __fget_files+0x184/0x1c0 [ 568.913148][T32034] __secure_computing+0x82/0x150 [ 568.913203][T32034] syscall_trace_enter+0xcf/0x1e0 [ 568.913228][T32034] do_syscall_64+0xac/0x200 [ 568.913270][T32034] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 568.913294][T32034] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 568.913318][T32034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.913339][T32034] RIP: 0033:0x7fb6d0f9ebe9 [ 568.913428][T32034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.913445][T32034] RSP: 002b:00007fb6cfa07038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 568.913463][T32034] RAX: ffffffffffffffda RBX: 00007fb6d11c5fa0 RCX: 00007fb6d0f9ebe9 [ 568.913475][T32034] RDX: 0000000000000118 RSI: 0000200000000180 RDI: 0000000000000008 [ 568.913487][T32034] RBP: 00007fb6cfa07090 R08: 0000000000000000 R09: 0000000000000000 [ 568.913498][T32034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.913520][T32034] R13: 00007fb6d11c6038 R14: 00007fb6d11c5fa0 R15: 00007ffe6ea0b028 [ 568.913538][T32034] [ 568.924170][T32038] IPVS: set_ctl: invalid protocol: 43 100.1.1.1:20001 [ 568.986293][T24647] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 569.155676][T24647] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 569.169442][T24647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.356838][T32071] lo speed is unknown, defaulting to 1000 [ 569.399304][T32077] netlink: 'syz.5.7485': attribute type 21 has an invalid length. [ 569.407278][T32077] netlink: 'syz.5.7485': attribute type 4 has an invalid length. [ 569.461354][T32071] lo speed is unknown, defaulting to 1000 [ 569.469670][T32077] FAULT_INJECTION: forcing a failure. [ 569.469670][T32077] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 569.482776][T32077] CPU: 0 UID: 0 PID: 32077 Comm: syz.5.7485 Not tainted syzkaller #0 PREEMPT(voluntary) [ 569.482807][T32077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 569.482835][T32077] Call Trace: [ 569.482842][T32077] [ 569.482849][T32077] __dump_stack+0x1d/0x30 [ 569.482868][T32077] dump_stack_lvl+0xe8/0x140 [ 569.482889][T32077] dump_stack+0x15/0x1b [ 569.482908][T32077] should_fail_ex+0x265/0x280 [ 569.483008][T32077] should_fail+0xb/0x20 [ 569.483025][T32077] should_fail_usercopy+0x1a/0x20 [ 569.483051][T32077] strncpy_from_user+0x25/0x230 [ 569.483161][T32077] ? __kmalloc_cache_noprof+0x189/0x320 [ 569.483197][T32077] __se_sys_memfd_create+0x1ff/0x590 [ 569.483223][T32077] __x64_sys_memfd_create+0x31/0x40 [ 569.483246][T32077] x64_sys_call+0x2abe/0x2ff0 [ 569.483343][T32077] do_syscall_64+0xd2/0x200 [ 569.483412][T32077] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 569.483439][T32077] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 569.483465][T32077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.483488][T32077] RIP: 0033:0x7fb34dacebe9 [ 569.483504][T32077] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.483592][T32077] RSP: 002b:00007fb34c50de18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 569.483608][T32077] RAX: ffffffffffffffda RBX: 00000000000007f4 RCX: 00007fb34dacebe9 [ 569.483688][T32077] RDX: 00007fb34c50def0 RSI: 0000000000000000 RDI: 00007fb34db527e8 [ 569.483702][T32077] RBP: 0000200000000e40 R08: 00007fb34c50dbb7 R09: 00007fb34c50de40 [ 569.483721][T32077] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000180 [ 569.483731][T32077] R13: 00007fb34c50def0 R14: 00007fb34c50deb0 R15: 0000200000000d00 [ 569.483747][T32077] [ 569.772161][T32100] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7487'. [ 569.828441][T32107] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7489'. [ 569.866113][T32115] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7492'. [ 569.891671][T32114] loop5: detected capacity change from 0 to 2048 [ 569.910748][T32128] netlink: 80 bytes leftover after parsing attributes in process `syz.6.7495'. [ 569.932212][T32114] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 569.959311][T32142] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7497'. [ 570.014327][T32149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7499'. [ 570.027571][T24647] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 570.042520][T24647] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 570.045093][T32152] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7497'. [ 570.066323][T32154] loop0: detected capacity change from 0 to 512 [ 570.075734][T24647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.097220][T32152] bridge0: entered promiscuous mode [ 570.106233][T32154] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 570.117014][T32152] bridge0: port 3(macsec1) entered blocking state [ 570.123493][T32152] bridge0: port 3(macsec1) entered disabled state [ 570.130646][T32152] macsec1: entered allmulticast mode [ 570.136001][T32152] bridge0: entered allmulticast mode [ 570.142451][T32152] macsec1: left allmulticast mode [ 570.147532][T32152] bridge0: left allmulticast mode [ 570.168750][T32152] bridge0: left promiscuous mode [ 570.170352][T32154] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 570.192255][T32154] ext4 filesystem being mounted at /305/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 570.247143][T23897] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.286230][T32223] netlink: 'syz.0.7508': attribute type 1 has an invalid length. [ 570.307837][T32221] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7510'. [ 570.391043][T32230] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 570.402144][T32236] netlink: 'syz.1.7516': attribute type 3 has an invalid length. [ 570.448858][T32238] siw: device registration error -23 [ 570.493400][T32244] siw: device registration error -23 [ 570.505243][T32246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.524037][T32246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.574997][T32213] netlink: 'syz.5.7501': attribute type 6 has an invalid length. [ 570.608384][T32258] siw: device registration error -23 [ 570.687730][T32266] loop5: detected capacity change from 0 to 512 [ 570.692929][T32272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.703734][T32272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.714853][T32266] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 570.716894][T32276] syz!: rxe_newlink: already configured on team_slave_0 [ 570.736928][T32266] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 570.740217][T32282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.749658][T32266] ext4 filesystem being mounted at /331/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 570.760840][T32282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.793151][T24647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.842601][T32295] FAULT_INJECTION: forcing a failure. [ 570.842601][T32295] name failslab, interval 1, probability 0, space 0, times 0 [ 570.855450][T32295] CPU: 1 UID: 0 PID: 32295 Comm: syz.5.7535 Not tainted syzkaller #0 PREEMPT(voluntary) [ 570.855476][T32295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 570.855489][T32295] Call Trace: [ 570.855496][T32295] [ 570.855512][T32295] __dump_stack+0x1d/0x30 [ 570.855534][T32295] dump_stack_lvl+0xe8/0x140 [ 570.855555][T32295] dump_stack+0x15/0x1b [ 570.855602][T32295] should_fail_ex+0x265/0x280 [ 570.855624][T32295] ? rdma_resolve_addr+0x594/0x1340 [ 570.855707][T32295] should_failslab+0x8c/0xb0 [ 570.855733][T32295] __kmalloc_cache_noprof+0x4c/0x320 [ 570.855765][T32295] rdma_resolve_addr+0x594/0x1340 [ 570.855825][T32295] ucma_resolve_addr+0x274/0x2d0 [ 570.855860][T32295] ucma_write+0x1b0/0x250 [ 570.855882][T32295] ? __pfx_ucma_write+0x10/0x10 [ 570.855983][T32295] vfs_write+0x269/0x960 [ 570.856005][T32295] ? __rcu_read_unlock+0x4f/0x70 [ 570.856028][T32295] ? __fget_files+0x184/0x1c0 [ 570.856092][T32295] ksys_write+0xda/0x1a0 [ 570.856156][T32295] __x64_sys_write+0x40/0x50 [ 570.856179][T32295] x64_sys_call+0x27fe/0x2ff0 [ 570.856199][T32295] do_syscall_64+0xd2/0x200 [ 570.856220][T32295] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 570.856260][T32295] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 570.856286][T32295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.856360][T32295] RIP: 0033:0x7fb34dacebe9 [ 570.856373][T32295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 570.856388][T32295] RSP: 002b:00007fb34c52f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 570.856406][T32295] RAX: ffffffffffffffda RBX: 00007fb34dcf5fa0 RCX: 00007fb34dacebe9 [ 570.856420][T32295] RDX: 0000000000000118 RSI: 0000200000000540 RDI: 0000000000000003 [ 570.856433][T32295] RBP: 00007fb34c52f090 R08: 0000000000000000 R09: 0000000000000000 [ 570.856542][T32295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.856556][T32295] R13: 00007fb34dcf6038 R14: 00007fb34dcf5fa0 R15: 00007fff71e78e88 [ 570.856603][T32295] [ 570.929645][T32286] netlink: 'syz.1.7533': attribute type 6 has an invalid length. [ 571.090307][T32298] loop5: detected capacity change from 0 to 512 [ 571.116475][T32298] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 571.139901][T32298] EXT4-fs (loop5): mount failed [ 571.158449][T32298] siw: device registration error -23 [ 571.202842][T32315] loop5: detected capacity change from 0 to 512 [ 571.244828][T32315] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 571.273980][T32308] netlink: 'syz.6.7538': attribute type 6 has an invalid length. [ 571.312723][T32315] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 571.350704][T32315] ext4 filesystem being mounted at /335/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 571.390912][T24647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.444177][T32341] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 571.506193][T32350] loop0: detected capacity change from 0 to 512 [ 571.528883][ T29] kauditd_printk_skb: 204 callbacks suppressed [ 571.528898][ T29] audit: type=1400 audit(1755674057.006:18028): avc: denied { write } for pid=32356 comm="syz.1.7553" name="usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 571.537079][T32350] EXT4-fs (loop0): orphan cleanup on readonly fs [ 571.559016][ T29] audit: type=1400 audit(1755674057.006:18029): avc: denied { open } for pid=32356 comm="syz.1.7553" path="/dev/usbmon8" dev="devtmpfs" ino=166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 571.589283][ T29] audit: type=1400 audit(1755674057.006:18030): avc: denied { ioctl } for pid=32356 comm="syz.1.7553" path="" dev="devtmpfs" ino=166 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 571.668791][ T29] audit: type=1326 audit(1755674057.146:18031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32360 comm="syz.2.7555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1954ebe9 code=0x7ffc0000 [ 571.692809][ T29] audit: type=1326 audit(1755674057.146:18032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32360 comm="syz.2.7555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff1954ebe9 code=0x7ffc0000 [ 571.716565][ T29] audit: type=1326 audit(1755674057.146:18033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32360 comm="syz.2.7555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1954ebe9 code=0x7ffc0000 [ 571.740680][ T29] audit: type=1326 audit(1755674057.146:18034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32360 comm="syz.2.7555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff1954ebe9 code=0x7ffc0000 [ 571.764414][ T29] audit: type=1326 audit(1755674057.146:18035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32360 comm="syz.2.7555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1954ebe9 code=0x7ffc0000 [ 571.786156][T32350] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.7551: bg 0: block 248: padding at end of block bitmap is not set [ 571.788081][ T29] audit: type=1326 audit(1755674057.146:18036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32360 comm="syz.2.7555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff1954ebe9 code=0x7ffc0000 [ 571.858044][T32351] netlink: 'syz.5.7552': attribute type 6 has an invalid length. [ 571.858652][ T29] audit: type=1326 audit(1755674057.196:18037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32360 comm="syz.2.7555" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff1954ebe9 code=0x7ffc0000 [ 571.867697][T32350] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.7551: Failed to acquire dquot type 1 [ 571.908426][T32350] EXT4-fs (loop0): 1 truncate cleaned up [ 571.914876][T32350] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 571.993361][T32376] netlink: 'syz.5.7561': attribute type 3 has an invalid length. [ 572.034834][T32329] netlink: 'syz.6.7545': attribute type 6 has an invalid length. [ 572.159590][T32395] netlink: 'syz.5.7566': attribute type 3 has an invalid length. [ 572.361425][T32414] __nla_validate_parse: 4 callbacks suppressed [ 572.361487][T32414] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7573'. [ 572.421101][T23897] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 572.436969][T32420] loop5: detected capacity change from 0 to 1024 [ 572.443759][T32420] EXT4-fs: Ignoring removed orlov option [ 572.452661][T32423] IPv6: Can't replace route, no match found [ 572.467792][T32420] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 572.484079][T32429] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7573'. [ 572.503540][T32428] loop0: detected capacity change from 0 to 2048 [ 572.539289][T32440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7580'. [ 572.570122][T32444] FAULT_INJECTION: forcing a failure. [ 572.570122][T32444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 572.583275][T32444] CPU: 0 UID: 0 PID: 32444 Comm: syz.1.7582 Not tainted syzkaller #0 PREEMPT(voluntary) [ 572.583307][T32444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 572.583321][T32444] Call Trace: [ 572.583326][T32444] [ 572.583332][T32444] __dump_stack+0x1d/0x30 [ 572.583356][T32444] dump_stack_lvl+0xe8/0x140 [ 572.583408][T32444] dump_stack+0x15/0x1b [ 572.583424][T32444] should_fail_ex+0x265/0x280 [ 572.583443][T32444] should_fail+0xb/0x20 [ 572.583505][T32444] should_fail_usercopy+0x1a/0x20 [ 572.583531][T32444] _copy_from_user+0x1c/0xb0 [ 572.583564][T32444] ___sys_sendmsg+0xc1/0x1d0 [ 572.583646][T32444] __sys_sendmmsg+0x178/0x300 [ 572.583683][T32444] __x64_sys_sendmmsg+0x57/0x70 [ 572.583742][T32444] x64_sys_call+0x1c4a/0x2ff0 [ 572.583804][T32444] do_syscall_64+0xd2/0x200 [ 572.583834][T32444] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 572.583862][T32444] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 572.583955][T32444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.583981][T32444] RIP: 0033:0x7fb23999ebe9 [ 572.583998][T32444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.584017][T32444] RSP: 002b:00007fb238407038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 572.584103][T32444] RAX: ffffffffffffffda RBX: 00007fb239bc5fa0 RCX: 00007fb23999ebe9 [ 572.584118][T32444] RDX: 0000000000000003 RSI: 0000200000002980 RDI: 0000000000000003 [ 572.584133][T32444] RBP: 00007fb238407090 R08: 0000000000000000 R09: 0000000000000000 [ 572.584146][T32444] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 572.584160][T32444] R13: 00007fb239bc6038 R14: 00007fb239bc5fa0 R15: 00007ffd608194a8 [ 572.584181][T32444] [ 572.588708][T32428] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 572.864372][T23897] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 572.894688][T23897] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 573.066143][T24647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.322706][T23897] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.367080][T32488] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7588'. [ 573.398548][T32491] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7596'. [ 573.428858][T32493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7588'. [ 573.444912][T32491] loop5: detected capacity change from 0 to 512 [ 573.462405][T32491] EXT4-fs (loop5): orphan cleanup on readonly fs [ 573.471700][T32491] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.7596: bg 0: block 248: padding at end of block bitmap is not set [ 573.486760][T32491] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.7596: Failed to acquire dquot type 1 [ 573.492641][T32497] siw: device registration error -23 [ 573.517257][T32491] EXT4-fs (loop5): 1 truncate cleaned up [ 573.553420][T32505] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7600'. [ 573.566586][T32505] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7600'. [ 573.575748][T32505] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7600'. [ 573.584815][T32505] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7600'. [ 573.611410][T32491] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 573.618221][T32509] loop0: detected capacity change from 0 to 2048 [ 573.654231][T32509] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 573.696899][T23897] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 573.714076][T32521] vhci_hcd: invalid port number 94 [ 573.719258][T32521] vhci_hcd: default hub control req: 0300 vfffc i005e l0 [ 573.730135][T23897] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 573.752791][T23897] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 573.877741][T32547] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 573.919317][T32551] siw: device registration error -23 [ 574.007227][T32559] loop0: detected capacity change from 0 to 2048 [ 574.036954][T32559] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 574.066498][T24647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.101801][T23897] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 574.120180][T23897] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 574.144591][T23897] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.158445][T32579] loop5: detected capacity change from 0 to 2048 [ 574.178946][T32579] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 574.234900][T32599] siw: device registration error -23 [ 574.279923][T24647] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 574.334232][T24647] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 574.361942][T24647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.456586][T32626] loop5: detected capacity change from 0 to 1024 [ 574.492553][T32626] EXT4-fs: Ignoring removed orlov option [ 574.504092][T32626] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.550573][T32629] loop0: detected capacity change from 0 to 512 [ 574.564268][T32632] netlink: 'gtp': attribute type 1 has an invalid length. [ 574.596569][T32643] siw: device registration error -23 [ 574.633937][T32629] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 574.741159][T32629] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.757514][T24647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.802746][T32629] ext4 filesystem being mounted at /325/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 574.864485][T23897] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 574.946929][T32677] loop5: detected capacity change from 0 to 4096 [ 574.963280][T32681] siw: device registration error -23 [ 574.965779][T32677] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.056800][T24647] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.227243][T32701] loop5: detected capacity change from 0 to 512 [ 575.256345][T32701] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 575.272887][T32706] loop0: detected capacity change from 0 to 2048 [ 575.345496][T32706] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 575.358837][T32701] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.415542][T23897] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 575.445616][T32701] ext4 filesystem being mounted at /353/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 575.494009][T23897] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 575.520977][T23897] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.747555][T32746] FAULT_INJECTION: forcing a failure. [ 575.747555][T32746] name failslab, interval 1, probability 0, space 0, times 0 [ 575.760261][T32746] CPU: 1 UID: 0 PID: 32746 Comm: syz.1.7671 Not tainted syzkaller #0 PREEMPT(voluntary) [ 575.760296][T32746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 575.760312][T32746] Call Trace: [ 575.760350][T32746] [ 575.760360][T32746] __dump_stack+0x1d/0x30 [ 575.760386][T32746] dump_stack_lvl+0xe8/0x140 [ 575.760410][T32746] dump_stack+0x15/0x1b [ 575.760426][T32746] should_fail_ex+0x265/0x280 [ 575.760507][T32746] ? io_drain_req+0x67/0x350 [ 575.760531][T32746] should_failslab+0x8c/0xb0 [ 575.760562][T32746] __kmalloc_cache_noprof+0x4c/0x320 [ 575.760692][T32746] io_drain_req+0x67/0x350 [ 575.760720][T32746] ? io_queue_sqe_fallback+0x12a/0x140 [ 575.760792][T32746] io_queue_sqe_fallback+0x132/0x140 [ 575.760824][T32746] io_submit_sqes+0xc1d/0x1050 [ 575.760904][T32746] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 575.760927][T32746] ? 0xffffffff81000000 [ 575.760944][T32746] ? __rcu_read_unlock+0x4f/0x70 [ 575.760971][T32746] ? get_pid_task+0x96/0xd0 [ 575.760992][T32746] ? proc_fail_nth_write+0x13b/0x160 [ 575.761037][T32746] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 575.761068][T32746] ? vfs_write+0x7e8/0x960 [ 575.761169][T32746] ? __rcu_read_unlock+0x4f/0x70 [ 575.761194][T32746] ? __fget_files+0x184/0x1c0 [ 575.761223][T32746] ? fput+0x8f/0xc0 [ 575.761254][T32746] __x64_sys_io_uring_enter+0x78/0x90 [ 575.761314][T32746] x64_sys_call+0x2de1/0x2ff0 [ 575.761341][T32746] do_syscall_64+0xd2/0x200 [ 575.761428][T32746] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 575.761461][T32746] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 575.761517][T32746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.761540][T32746] RIP: 0033:0x7fb23999ebe9 [ 575.761558][T32746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.761581][T32746] RSP: 002b:00007fb238407038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 575.761602][T32746] RAX: ffffffffffffffda RBX: 00007fb239bc5fa0 RCX: 00007fb23999ebe9 [ 575.761650][T32746] RDX: 0000000000000000 RSI: 00000000000047f8 RDI: 0000000000000003 [ 575.761664][T32746] RBP: 00007fb238407090 R08: 0000000000000000 R09: 0000000000000000 [ 575.761763][T32746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.761775][T32746] R13: 00007fb239bc6038 R14: 00007fb239bc5fa0 R15: 00007ffd608194a8 [ 575.761795][T32746] [ 576.025702][T32745] validate_nla: 1 callbacks suppressed [ 576.025739][T32745] netlink: 'gtp': attribute type 1 has an invalid length. [ 576.217179][T32767] loop5: detected capacity change from 0 to 2048 [ 576.344031][T32755] ================================================================== [ 576.352158][T32755] BUG: KCSAN: data-race in touch_atime / touch_atime [ 576.358881][T32755] [ 576.361208][T32755] write to 0xffff888117d97258 of 4 bytes by task 32740 on cpu 0: [ 576.368926][T32755] touch_atime+0x1e8/0x340 [ 576.373367][T32755] shmem_file_read_iter+0x477/0x540 [ 576.378595][T32755] copy_splice_read+0x442/0x660 [ 576.383488][T32755] splice_direct_to_actor+0x290/0x680 [ 576.388885][T32755] do_splice_direct+0xda/0x150 [ 576.393665][T32755] do_sendfile+0x380/0x650 [ 576.398112][T32755] __x64_sys_sendfile64+0x105/0x150 [ 576.403358][T32755] x64_sys_call+0x2bb0/0x2ff0 [ 576.408053][T32755] do_syscall_64+0xd2/0x200 [ 576.412583][T32755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.418493][T32755] [ 576.420818][T32755] read to 0xffff888117d97258 of 4 bytes by task 32755 on cpu 1: [ 576.428477][T32755] touch_atime+0x194/0x340 [ 576.432909][T32755] shmem_file_read_iter+0x477/0x540 [ 576.438151][T32755] copy_splice_read+0x442/0x660 [ 576.443048][T32755] splice_direct_to_actor+0x290/0x680 [ 576.448430][T32755] do_splice_direct+0xda/0x150 [ 576.453205][T32755] do_sendfile+0x380/0x650 [ 576.457646][T32755] __x64_sys_sendfile64+0x105/0x150 [ 576.462877][T32755] x64_sys_call+0x2bb0/0x2ff0 [ 576.467564][T32755] do_syscall_64+0xd2/0x200 [ 576.472080][T32755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.477991][T32755] [ 576.480313][T32755] value changed: 0x30a53ebd -> 0x313dd53d [ 576.486028][T32755] [ 576.488349][T32755] Reported by Kernel Concurrency Sanitizer on: [ 576.494499][T32755] CPU: 1 UID: 0 PID: 32755 Comm: syz.2.7669 Not tainted syzkaller #0 PREEMPT(voluntary) [ 576.504313][T32755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 576.514383][T32755] ================================================================== [ 576.579318][ T29] kauditd_printk_skb: 352 callbacks suppressed [ 576.579331][ T29] audit: type=1326 audit(1755674062.056:18386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=312 comm="syz.6.7677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d0f9ebe9 code=0x7ffc0000 [ 576.582655][T24647] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 576.586257][ T29] audit: type=1326 audit(1755674062.066:18387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=312 comm="syz.6.7677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fb6d0f9ebe9 code=0x7ffc0000 [ 576.649744][ T29] audit: type=1326 audit(1755674062.126:18388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=312 comm="syz.6.7677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d0f9ebe9 code=0x7ffc0000 [ 576.649906][T24647] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 576.673255][ T29] audit: type=1326 audit(1755674062.126:18389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=312 comm="syz.6.7677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d0f9ebe9 code=0x7ffc0000 [ 576.673352][ T29] audit: type=1326 audit(1755674062.126:18390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=312 comm="syz.6.7677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb6d0f9d69f code=0x7ffc0000 [ 576.728672][ T29] audit: type=1326 audit(1755674062.126:18391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=312 comm="syz.6.7677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d0f9ebe9 code=0x7ffc0000 [ 576.752102][ T29] audit: type=1326 audit(1755674062.126:18392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=312 comm="syz.6.7677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d0f9ebe9 code=0x7ffc0000 [ 576.775585][ T29] audit: type=1326 audit(1755674062.126:18393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=312 comm="syz.6.7677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb6d0f9ebe9 code=0x7ffc0000 [ 576.799199][ T29] audit: type=1326 audit(1755674062.126:18394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=312 comm="syz.6.7677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6d0f9ebe9 code=0x7ffc0000 [ 576.822659][ T29] audit: type=1326 audit(1755674062.126:18395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=312 comm="syz.6.7677" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb6d0f9ebe9 code=0x7ffc0000