last executing test programs: 1m54.770839917s ago: executing program 32 (id=91): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x45cab649}, 0x18) r2 = creat(0x0, 0xc9028ba210c11f8b) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000000)={'\x00', 0x8, 0x2, 0x803fd, 0x1, 0x800}) 1m54.129105549s ago: executing program 33 (id=98): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000400)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB], 0x48) r1 = socket$packet(0x11, 0x2, 0x300) bind$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x61, 0x6, @multicast}, 0x14) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000c80)=""/198, 0xc6, 0x8001) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000001d00)={[{@grpquota}, {@journal_checksum}, {@quota}, {@debug}, {@noacl}, {}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xf}}, {@noauto_da_alloc}], [{@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000002b40), 0x24, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xf8, 0x0, &(0x7f00000000c0)) r3 = open(&(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) r4 = syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd736, 0x8, 0x3, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x6000}) io_uring_enter(r4, 0x1c3a, 0xe176, 0x22, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000100"/14], 0x48) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000300)={0x8, @multicast1, 0x4e22, 0x1, 'nq\x00', 0x0, 0x3, 0x1a}, 0x2c) syz_mount_image$iso9660(&(0x7f0000000d80), &(0x7f0000000dc0)='./file0\x00', 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="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"], 0x1, 0xd7c, &(0x7f0000000e40)="$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") mount(0x0, 0x0, 0x0, 0x0, 0x0) 1m53.182969222s ago: executing program 34 (id=103): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x142) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1/file2\x00', 0x81c0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 1m47.511500882s ago: executing program 35 (id=155): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/rt_acct\x00') getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='trusted.overlay.upper\x00', &(0x7f0000001500)=""/4096, 0x1000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) recvmsg$can_raw(r2, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x10000) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000000)=""/22, 0x16}], 0x1) 1m46.170660227s ago: executing program 36 (id=178): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x80}, 0x18) unshare(0x22020400) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000700)={0x0, @in6={{0xa, 0x4e22, 0x7f, @local, 0xfffffffd}}, 0x3, 0xd}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0x10007ffffffff}, 0x18) unshare(0x22020400) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) setrlimit(0x9, &(0x7f0000000380)) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) prlimit64(r7, 0xc, 0x0, &(0x7f0000000040)) socket$inet6_mptcp(0xa, 0x1, 0x106) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_setup(0x2004, &(0x7f0000000680)) 1m44.949479819s ago: executing program 37 (id=190): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f00000000c0)='.\x00', 0x10000, 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x200000002000000) (fail_nth: 4) 1m43.4533185s ago: executing program 38 (id=201): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0, 0x0, 0x2}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00'}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x3, 0xc, &(0x7f0000000c40)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000002300000095"], &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x140) sendto$packet(r1, &(0x7f0000000180)="a6bea8a120e5f8320c30ce5086dda5e986f34c10d8c39c3002de8ec445ae083a4b7fc08a086fc691", 0x28, 0x0, &(0x7f0000000140)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="ad446050e878"}, 0x14) 1m43.433095077s ago: executing program 6 (id=203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000400)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) r3 = socket$packet(0x11, 0x2, 0x300) bind$packet(r3, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x61, 0x6, @multicast}, 0x14) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000c80)=""/198, 0xc6, 0x8001) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r4, 0x4c80, 0x7000000) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000001d00)={[{@grpquota}, {@journal_checksum}, {@quota}, {@debug}, {@noacl}, {}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xf}}, {@noauto_da_alloc}], [{@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000002b40), 0x24, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xf8, 0x0, &(0x7f00000000c0)) r5 = open(&(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0) r6 = syz_io_uring_setup(0x10b, &(0x7f0000000580)={0x0, 0xd736, 0x8, 0x3, 0xbffffffa}, &(0x7f00000003c0)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r7, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r7, r8, &(0x7f0000000180)=@IORING_OP_STATX={0x15, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80, 0x6000}) io_uring_enter(r6, 0x1c3a, 0xe176, 0x22, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000100"/14], 0x48) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x484, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000d80), &(0x7f0000000dc0)='./file0\x00', 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="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"], 0x1, 0xd7c, &(0x7f0000000e40)="$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") mount(0x0, 0x0, 0x0, 0x0, 0x0) 1m42.505569632s ago: executing program 6 (id=204): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x2c, 0x11, 0x43d, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0x3, 0x6}, {0xb, 0x1}}, [{0x8, 0xb, 0x8001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48080}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r5}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') lgetxattr(&(0x7f0000000140)='./file0/../file0/file0\x00', &(0x7f00000002c0)=@known='user.incfs.size\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000b00)='cachefiles_mkdir\x00', r1}, 0x18) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xea, 0x7, 0x40, 0xe5, 0x0, 0x0, 0xd000, 0x6, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_bp={0x0, 0x2}, 0x9c7, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x1, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000001200)={[{@nodiscard}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@nobarrier}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xeb}}, {@abort}, {@user_xattr}, {@bh}, {@errors_remount}]}, 0x1, 0x55f, &(0x7f0000000580)="$eJzs3d9rU+cbAPDnpK2/v18riGxjjIIXczhT2+6Hg124y7HJhO3ehfZYpKmRJhXbCdOLebObIYMxJozdb/e7lP0D+yuETZAhZbvYTcZJT2q0SRNrtNF8PnDkfXNO+p4n73le35M3IQEMrYnsn0LEyxHxTRJxMCKSfN9o5Dsn1o9bu391NtuSqNc//StpHJfVm3+r+bz9eeWliPjtq4jjhc3tVldWF0rlcrqU1ydri5cmqyurJy4slubT+fTi9MzMqbdnpt97952+xfrG2X++/+T2h6e+Prr23S93D91M4nQcyPe1xvEErrVWJmIif03G4vQjB071obFBkuz0CbAtI3mej0U2BhyMkTzrgRfflxFRB4ZUIv9hSDXnAc17+z7dBz837n2wfgO0Of7R9fdGYk/j3mjfWvLQnVF2vzveh/azNn7989bNbIv+vQ8B0NW16xFxcnR08/iX5OPf9p3s4ZhH2zD+wbNzO5v/vNlu/lPYmP9Em/nP/ja5ux3d879wtw/NdJTN/95vO//dWLQaH8lr/2vM+caS8xfKaTa2/T8ijsXY7qy+1XrOqbU79U77Wud/2Za135wL5udxd3T3w8+ZK9VKTxJzq3vXI15pO/9NNvo/adP/2etxtsc2jqS3Xuu0r3v8T1f9p4jX2/b/gxWtZOv1ycnG9TDZvCo2+/vGkd87tb/T8Wf9v2/r+MeT1vXa6uO38eOef9NO+x6KP3q//nclnzXKu/LHrpRqtaWpiF3Jx5sfn37w3Ga9eXwW/7GjW49/7a7/vRHxeY/x3zj886s9xd+t/5/CImsW/9xj9f/jF+589MUP248/6/+3GqVj+SO9jH+9nuCTvHYAAAAAAAAwaAoRcSCSQnGjXCgUi+uf7zgc+wrlSrV2/Hxl+eJcNL4rOx5jheZK98GWz0NM5Z+HbdanH6nPRMShiPh2ZG+jXpytlOd2OngAAAAAAAAAAAAAAAAAAAAYEPs7fP8/88fITp8d8NT5yW8YXl3zvx+/9AQMJP//w/CS/zC85D8ML/kPw0v+w/CS/zC85D8ML/kPAAAAAAAAAAAAAAAAAAAAAAAAAAAAfXX2zJlsq6/dvzqb1ecurywvVC6fmEurC8XF5dnibGXpUnG+Upkvp8XZymK3v1euVC5NTcfylclaWq1NVldWzy1Wli/Wzl1YLM2n59KxZxIVAAAAAAAAAAAAAAAAAAAAPF+qK6sLpXI5XVJQ2FZhdDBOY3UhYiBO40Up7PTIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/BcAAP//8NI25Q==") r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r6, 0x0, 0x401}, 0x11) r7 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r7, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x76200}], 0x1, 0x7c00, 0x0, 0x3) 1m42.248167895s ago: executing program 6 (id=205): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) getpid() prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$kcm(0x10, 0x2, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x18, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0xa0a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x91, 0x80000000}, 0x4c8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, r1, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_tid_address(0x0) 1m41.858350806s ago: executing program 6 (id=206): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1000052, &(0x7f0000000240)=ANY=[], 0xf5, 0x1219, &(0x7f0000002100)="$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") r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x40) io_setup(0x9, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r1, 0x0, 0x0}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000000200)=ANY=[], 0x78) close(r3) connect$unix(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x4000000) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) io_submit(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, 0x0) 1m40.923106435s ago: executing program 6 (id=208): openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000057000000"], 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000600000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r2}, 0x10) socket(0x10, 0x3, 0x6) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x1, [0x4, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) 1m40.779001367s ago: executing program 9 (id=209): r0 = socket$nl_route(0x10, 0x3, 0x0) fgetxattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioprio_set$pid(0x2, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023892) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x7fff}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000200), &(0x7f0000000240)=r2}, 0x20) r6 = socket(0x1e, 0x4, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) acct(&(0x7f00000001c0)='./file0\x00') acct(&(0x7f0000000200)='./file0\x00') setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x401, 0xfffffffe, 0x0, 0xffffffff}, 0x10) close(r6) 1m40.776171358s ago: executing program 6 (id=210): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xb, &(0x7f0000000340)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESDEC, @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) getxattr(0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc000900b80006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e07000000", 0xd4}, {&(0x7f0000000100)="d8bcf4de", 0x4}], 0x2, 0x0, 0x0, 0x2663}, 0x0) bind$bt_sco(r0, &(0x7f00000001c0), 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee1, 0x80, 0x2, 0x8b4}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r7, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r10, 0x0, 0x1034}, 0x18) getrusage(0x1, &(0x7f0000000280)) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x16) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) r12 = socket(0x10, 0x3, 0x9) connect$netlink(r12, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) 1m40.730737224s ago: executing program 39 (id=210): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xb, &(0x7f0000000340)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESDEC, @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18) getxattr(0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc000900b80006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e07000000", 0xd4}, {&(0x7f0000000100)="d8bcf4de", 0x4}], 0x2, 0x0, 0x0, 0x2663}, 0x0) bind$bt_sco(r0, &(0x7f00000001c0), 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r6}, 0x10) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee1, 0x80, 0x2, 0x8b4}, &(0x7f0000000000)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r7, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456}) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000b00)='kmem_cache_free\x00', r10, 0x0, 0x1034}, 0x18) getrusage(0x1, &(0x7f0000000280)) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000380)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x16) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r11}, 0x10) r12 = socket(0x10, 0x3, 0x9) connect$netlink(r12, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) 1m40.619247684s ago: executing program 9 (id=213): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x9, 0x7}, 0x100, 0xa88, 0x8406, 0x5, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) r0 = getpgid(0x0) syz_pidfd_open(r0, 0x0) (fail_nth: 4) 1m40.366773276s ago: executing program 9 (id=214): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) futex(0x0, 0x5, 0x604, 0x0, 0x0, 0x1000000) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0), 0x1, 0x5d8, &(0x7f0000000c00)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000582eabdc000000000000", @ANYRES8=0x0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900"], 0x0, 0x1040}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='hwmon_attr_show_string\x00', r1, 0x0, 0x9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0009}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001000000", @ANYRES32, @ANYBLOB="80990e00000000000000002e0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f00003ee000/0x400000)=nil, &(0x7f000057c000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000676000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00005d9000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) 1m40.253213486s ago: executing program 9 (id=216): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1000052, &(0x7f0000000240)=ANY=[], 0xf5, 0x1219, &(0x7f0000002100)="$eJzs3E9rHGUcB/Bf1o1JU/NHrdX2oA948TQ0OXgSJEgKkgWlNkIrCFOz0SVjNmRCYEWsnrz2dXj2JvgOcvE1eMvFYw/iSGYam223VMHdFfv5HDI/nuf55pln2F2YZZ49eefel7s7ZbaTH0ZrZiZa+xHpfooUrTjz+mZzvHV7c73T2biR0vX1m6tvp5SW3vj5k6/nIuLixz8u/TQXxyufnvy29uvx5eMrJ3/c/KJXpl6ZVvqHKU93+v3D/E7RTdu9cjdL6cOim5fd1NsruwdD/TtFf39/kPK97cWF/YNuWaZ8b5B27+UR/XR4MEj553lvL2VZlhYXgieaffqQrR/uV1UVUVWz8XxUVVVdiIW4GC/EYizFtxHxYrwUL8eleCUux6vxWlypR03i9AEAAAAAAAAAAAAAAAAAAODZcX7/f0QM7f9fjhX7/wEAAAAAAAAAAAAAAAAAAGACPrp1e3O909m4kdJ8RPH90dbRVnNs+td3ohdFdONaLMfvUe/+bzT19fc7G9dSbSW+K+4+yN892nquyZ/+Oc2v1j8n8CDfrvvO8qtNPg3n52Lh/PxrsRyXRs+/NjI/H2+9eS6fxXL88ln0o4jteu6H+W9WU3rvg84j+av1OAAAAPg/yNJfRt6/Z9mT+pv83/5+oB2P3F+342p7umsnohx8tZu3iu5BXRRnxfxjLWMrZiNiUnONq5gbbmmNaa7WUy7UzLgW2P6PXGfF48Xpu/jf+D8XYrhl2p9MTMLDl8G0zwQAAAAAAAAAAIB/YszPJ7ZjxJNl705nqQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGCoAAP//I6LAUA==") r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x40) io_setup(0x9, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r1, 0x0, 0x0}, 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1db) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r3, &(0x7f0000000200)=ANY=[], 0x78) close(r3) connect$unix(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_NAME(0xf, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, 0x0, 0x4000000) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) io_submit(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, 0x0) 1m39.239045384s ago: executing program 9 (id=223): rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) futex(0x0, 0x5, 0x604, 0x0, 0x0, 0x1000000) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0), 0x1, 0x5d8, &(0x7f0000000c00)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00000000000000582eabdc000000000000", @ANYRES8=0x0], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900"], 0x0, 0x1040}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='hwmon_attr_show_string\x00', r1, 0x0, 0x9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0009}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001004900000001000000", @ANYRES32, @ANYBLOB="80990e00000000000000002e0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'sit0\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ffd000/0x2000)=nil, &(0x7f00003ee000/0x400000)=nil, &(0x7f000057c000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000676000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00005d9000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) 1m38.372872187s ago: executing program 9 (id=226): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x30}], 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000140)=0x2, 0x4) preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0xe}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x2000000000000149, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000195"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r4}, 0x10) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x75650c5616e7606d}, 0x8002) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='.\x00', 0x0, 0xa008, 0x0) 1m38.354445553s ago: executing program 40 (id=226): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[], 0x30}], 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000140)=0x2, 0x4) preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0xe}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x4000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x2000000000000149, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000195"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='inet_sk_error_report\x00', r4}, 0x10) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x75650c5616e7606d}, 0x8002) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='.\x00', 0x0, 0xa008, 0x0) 1m9.290076713s ago: executing program 5 (id=710): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xd, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES16=r2, @ANYRESHEX=0x0], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xd, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYRES16=r2, @ANYRESHEX=0x0], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000002040)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) keyctl$set_timeout(0xf, r1, 0x40) (async) keyctl$set_timeout(0xf, r1, 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='global_dirty_state\x00', r5}, 0x18) (async) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000100)='global_dirty_state\x00', r5}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x8, 0xff, 0xef, 0x7ffc1ffb}]}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x20, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000018111b00", @ANYRES64=r3, @ANYBLOB="0000000000000000b708"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0xfffffffffffffe18, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440"], 0xdc}}, 0x0) shutdown(0xffffffffffffffff, 0x0) r9 = perf_event_open(0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r9, 0x40082406, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1/file0\x00', 0x48741, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES16=r3, @ANYRES32=r0], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x18) sendmsg$tipc(r10, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000004340)=[{&(0x7f0000000f00)="34cbf9c55466da0eadc249236ab3cbf316717306be4c08c8c7da1f1ee04ab4b4eac14995ebdf620ff778a4e3452587e42a3c6aa1bd35dfd99f23b525893bc3b5f9f3bed1986bf8d0dddd7c5cdada611f9bf641e421ed71a842d84fa289a542f941d6e06b2b14e2a706ce30acf7d82f224f3e30cadd9d15f3dddbb29dbeb9f68fb68bedb91e0b1ef48832778fe36699c7ebf101659a8f476c4a065eac71d6d1e7fafc6f25ec2c9a8f431fe347a2d30e912c5b2397613ce784637ec71e37566eb0548b461f71028459c6f137c18737d58b56949d022bf1eaf486692bb76836a233c7879d740ad0beaf5159d3380442824f536a41bb22d08fe53952b9c6fed2605d53311c71b455655f96ea6a87e41e9211e90170b0a2b1a2098175ebcd33d517085d224122264cddadd82a3d11bc4a33ce66108b22b1abc6243d306d8f6b8a2ddb5373c190d8f859a3174a200936b079f85edcac7fc03fb993ec0ff8b83f1fd3f1b888d192d99c7ede5d381784d25410cccf1b0bf26a54f065e1e3ec59cc5704fb658fc980a0ac4287ef884ee82007554be3f1e163c81468d0c26c95e3e12393776e32800bb4f086f19080c4fca3d72e8569a5627ce98f2ae0bdb3ec42c23847d47e10b1c58da7e9cea990da842d96e3a51ed7d892f7b28a10486424a69a9109ebd4d7d5a3768400ac000a6d7556ca192e5cd45efb82001ac7b53e03036b6019a07ffb545cd3853e077f08a015f6232488c1139a9409c95ed005261e36b307406ba5714ef395129345866109341feb6c7c458ce08c147a983b46375ddb3621cee0312ba1a434bcd6081e1a8ae8b6d518988b9965faf9aff86df8173b93342cceaec357a100e59b4d66553633626b0b12e9622b8f8fdfe26545b87c57f8ce8609fb8e19b0f6d1cd64e8de85c7327f543b2f38cf3086b57f85e1aaa4add723e4bc4e3ea2c27acec1e545ae3fc870bd42422f6eaf17a1f82699c9cadf224ea1e5d1705b49118d91cc3731aeed60e41bf15a9613aeda8e63a29bc7a95b2d993d23269a310b91f69d16a71243c0f4080d3359f5ddd63c7032bef14ab25eb7df4b28b2132bcbf94a281c8f5de79885a6d679f145fca292b599bb09a1864726d86b65d4781408320b968e2224c23ce7a56d8892970043737ae47f071aaeb219716bc21e3304e301eb5cd32aea951a70621eb870214a72e6c474c3a20f5bd8e089ba16326cc9a80a1a4f5f0e8f58629e20b1c73eb8af330744b187a5cfdb410466378313700ca44eb6dcbc8f3d70f58e134202546f0b1a3b61a298f2a1184b1533bdad308fa2f960087e0f239d2ccbaee3889ddc1a2bea2183b98854d255a6f708909134fab83f42f13e7604f602e264f4a3b2b2a08c673c7ce2813218159b472d3b20ecbf26dd2f7b3ba5298a4ff7444ea0936e098c126f590b05e7697ed8a3d52ba1abc7285de2f160b9b081cb775a5ab77aad1bb98d47e3da53fc4c11d4db47de1e4e6f56ad671f5d8389b33260cc546e4f0bf34fec9b2abd209e6b89e6e381367774676ed6e6eaffe42b07241c276f3c84f17a0762de83eb769bdf28991ddbc23758f01c9ecfba4ab2ca2118fcedd7adde9ff47f643c13e3ad2f13b576985128f233e329fe269d5745cd2b30e5762452a4ff58fdec30623175f8d575ced1c43411e2869aadbe6f1e79a010bca334cb08d545bc2808f359b7777d1bb5675ee210574b9f72cdeb071e07eeaa0988086213a37a972647cf21d3a3bcbd7359da327bacad41b93c5e0e494669109dddcec781774f248f5663e4fac187d42ffccf68335de2adac4f8d3e1bf04b95a9464960186ed019773ffeda18f9827a61edc5fc4088eb0965cb1bd8af1185aa3972b8f73839b4611e303bcbc1f84a330f60fa0a7795ea3cffe0e338406533e12c7deef0b5906c513eab4619a8f02fdd65dcfb7297ef971c4601ad079f7ad38278ae3ff455b37d5492af546975535450693fd4593c8157b3fdb16fd3a106d2f1509d1c06dabb8933269d790a1c5e5f7bdd4a57e1e670d7043cfed88c365b5f8eefe530ef7da5322df981723332c088fce89c2ceee23b420f64332243b9c606d67d538810a94e0ffbd37a119d8fc4d6caec0def40e62613873c74feabde63e12cb2016c1d35cf1bb95bf59e01a63be8825cb3118b74b106f21eef5ee2f41e5fb39fdde058050f780d98ced247c66fc3a03ba04edaf14d698859ba303d511cf0845dc5e269aef2287770a247fd5ae1299b45819ff41725f9da3e4dab7770eb83992b53ae9a9de69e764f6e3aee3e27cfb1bacf531a91605894ae209da6d25872fb54bf36b2ed450b51aa8ee4875b9bc7e55753f61e12a323d301faceb2ecff0686b1359343a94774a6a098dc2df440725cd8331f527d4e22f8090d8879ef4765849705b99465d7ebdf661b81c303d13b87270dc1f227d5954fcbc93bbce6fde2a1f8d573d9cd8130c173a14706f1e9dabc4d16a5b003dd3239faf91769e25cf007b0623141e4e57f11746cd62f20d73956fa84c6a12e1756b6671a64bd7a474ba425907e1a61ba6d2ffa1149165a713a141bfec0f1af51afebdb84d5f14eb51acc284403627d6ce48fd028dc04e00ed963de37f85d155c33e2b4ceb09044c4f1c7791348216b674a8831a232a638f8bfb396fabbe1f880944bc5dcac55df8abc78f804306c88617acfd4adfbb5a055d3d3e91abb763ad84e701cc5679498e04600570f4b2e57c70542043dc590ab363215e6ab3f0bd89383748783d01c9227229edac723d4e2eaa061a44f2630691f25ca6093775183fdf432e01322203dd654b336670116a6a52a27ff2032b1103a4e4be0cc2fb05b24352d72e374e90cc3db2a5a691c7f6b8d1058d7730433c742d8ce52074318b1bce9bb104cf90c8b7f65293c2b74434661444f38d94d977e03433440517f6155a3cad2621c5502dd6148b867a40e6a40be4c8265ec2164b5257f06da1784e98991f42003ced4ba67c23b8c654b542d2d31168fd853cf56cc2c464d7a8a9fbcd2715968788f8527c597ab5f917753c1f1708d2c19972373c5a22af71847de22b9f1e9d38a04ea4dd291da3099cb836a696350bf1263c3c275c27b8b82f604625451a24490b0b5367c2fd05e699546ddf17709d2e2c2710f4361d9dd6e2de2b4353b7f4f8141f6f989dc1a798a974565978e4f9ec0c59a7dbc04bcab072c8513b9ca782c22cdd31fb116c10081740fd8f7d0cbd5c54f1069297f20b45d79bb9ace8e851a655fedf47b2dc76fd30b9ba9f09c9b50d6910ffcdec7078c36fe1e9b19dbb110197496349560a43c0ab42b4ce286643e73a92246ecb71e95ce0d54114772f8477c7d5604c1a52d2f680c5868cf08a2688dd9fef492a01836112cec824483e77da93d104a9e18d06bddf9a4007740a0537ac1a5e09900acc65d52680212a15b68b0ef887228e06f533c1ca95b8f9d81b9fc6608cb5bacf4b867922999c69d46048ec3f408866789f49fcb176fc99ed9d3e6c357ed2e3ce2665925773e5d86c2ceaf8f18519a00d9d2e19e9a6b16af0a53fd7df6974f5db00494460e7f3de6ff6b642859335e020513bb525adddabf0d7d6ae85e7e56e32ca8acc07fe86b7b445358966ba3914c1dfa7b814d9e846ff02a6a8c8f5713a0f727024b5d1ea7e4ce7c64f9b24dd3337a3df33714c5404403b0304b25a66fe3ac85083965877117b3d721e7922f0ac7e278feeb8dc09f58cbcfbb81b11d4699737f37ac240a24b9c4b2b587e68974f7ca5561856f32e389d32056f7d58e4de24c11bd5c5afaa441120370d0c48341e1b8146a6bbca8c15f23c155d2533e97a8e6496bc00533ec83be8488d020708d97385a03bcbf57cadc2c1e575e1ac134cdb5047f3f88eae0230751626cea1c85da9b74ddace668afebb2dc66d302ddf3c5f8f21ac0c0535d00839457e7cac9282a8e49d018b077e38ea512cf28eacff5d98e880abfb5af2e7c039d2e1f1edaad2642963ef29d715f754e2715caa6af046a298b285e3582d903be726b608619332e1a82be48b0f5adf6838f41ff776e5290de8269794bce8fb971267d036bd6bd30e42df918125d573ced78263251bcae2b7b40f1ba855b4f2472312ea8752c4a0e09468bd25615a6c00a9b44c484c5507b8400537f20890e9499ec94ed2b6aeff21e57c6e8a93d80097f85ac9316b03a5f768721bf7d041bb9a6a03eabd615e3c4d74f56c429d53b8fec4b5e86c5b311a6cd4a86f03e04dab25ad65b68a8b8d9053993fd2440ff2b81768213084c831d31a0f8c646aff9090b5463cbee452abd6318340ec41b50f1deba7ffb60b326751de3f6dbf9b17714299233d5c43071367ece2e53212e7f4e084fea60850d4d16908d9bbbb531fbf72143fdb62d1b40afde3d0b2ac2c94c32e456bbef62f8d677e332aec8ccc8eedbac61e7b89b32d57157a39ad5c456258d9c36db0edc82c2baead990ee78007ed89c8f450e92d5e209cc25f7c13f5909ca404fddbdbeff89cc42350c91e9f1fdf9753c6e95f71257f8cbb97838684461cd1244c938b9939a4e9c7727902b6f1a5434e0a06d3fc221771dd87572ae801c5ce6886122f0c91dae57440ffc7ace4e8e0041a1d245103aaadbfc2ecff622228daed2b0cd30f7f59b2617f6f0571ee4403d84e652d78b8e64d5450b6483ef70582dcda9351f2dddd3a4ac84f514f708d3af6242501bd041beae78e6b29b517b534148ea91ef85653fec824d6ddb0c0fa2555ab2564ba29227b1046b48a11ee0e6aafda9d0b80b0f05a8d057cbeb16264cb579aea3ba2b2000052d03c77844ab7c81be3110a36a27aeffe0ad5a8a7385a1913a64fb2db630e8fc8017828cea60f327c3a510b441d94d32584e55f7c2320d89b2ba3d44d832b8e7c5f45442de9ef37d057e6d0c6664e8d74e23f18336d41a3e38c2cda49050cb32ca7040a388c75741ac07d3befc714df35dc92ff70ad041cf17b70a971c142bb89ecfe25290750e989c8666560a61b62fdc4fadef7f30b6269a669ef99be7e7ba7ddddf99949fedc0c331796988c6eedb5c66cbe2870a2affce0b550c3411a2aaf302481ee93398c0fbc0c815cfe1e78bf8fed7f19f2c2dae17a4533aa85f6b787f8072adda379118d76dbba3cebfc4c8aacbb1f79a28ec3a0ec99816e3c8721ddcde1ce73b07040634", 0xe4f}, {0x0}, {0x0}, {&(0x7f00000020c0)}], 0x4}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="b0562a8432f01f8022b541b8bf2df31ec8c264663106ae7af760fd40655f8ad771281cd1673f42a889e8c527b6ac4af46e3bd6b2b99e68950059592090", @ANYRES8=r3, @ANYRESOCT=r8, @ANYRES8=0x0, @ANYRESHEX=r7, @ANYRES64=r5, @ANYBLOB="b941fff4f64cfdb3c2977091f32da8f9363d009d85eb98ccb2ea9b87d9af7d5899f416e40e1eb67fe381366c83aad0baf515594f8d7ecf63b26ca31cbc65b2dfb1a242e9945e505c85ae51d525d0de53"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000013000050800000d2b5a6780f3fc61ea805016fd054d1d42b713ee8979dd973c98a3ad6b9c323ec6b06b88875a78e9ea0636b77a86605", @ANYRESHEX, @ANYRES8=r6, @ANYRESOCT=r8, @ANYRESDEC], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000000000000013000050800000d2b5a6780f3fc61ea805016fd054d1d42b713ee8979dd973c98a3ad6b9c323ec6b06b88875a78e9ea0636b77a86605", @ANYRESHEX, @ANYRES8=r6, @ANYRESOCT=r8, @ANYRESDEC], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m8.475584007s ago: executing program 5 (id=735): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000400000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) set_tid_address(0x0) 1m8.38319058s ago: executing program 5 (id=736): mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x8000000000000, 0xc3072, 0xffffffffffffffff, 0x0) 1m8.369689455s ago: executing program 5 (id=737): prctl$PR_SET_SECCOMP(0x16, 0x3, &(0x7f0000000100)={0x43, 0x0}) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbaf, &(0x7f0000002f00)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200008, &(0x7f0000000380)={[{@nolazytime}, {@auto_da_alloc}, {@sysvgroups}, {@norecovery}, {@jqfmt_vfsv0}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@user_xattr}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000400)="4419040ab0eca862e6c082f1aa83f9466978f47cf52163ce7a8848332e2df0610f7d1c0f2a51c085ddcfa6557e711d420b5080b9e4830df7b642447ddd69b95546", 0x41}], 0x1) preadv2(r1, &(0x7f0000000340)=[{&(0x7f0000002200)=""/4096, 0x1000}, {&(0x7f0000000540)=""/76, 0x4c}], 0x2, 0x0, 0x40000000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) ioctl$EXT4_IOC_GETFSUUID(r0, 0x8008662c, &(0x7f0000000080)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x46556b34e8e5276f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f00000002c0)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r5}, 0x10) r6 = syz_open_dev$usbmon(&(0x7f00000000c0), 0x7, 0x101140) ioctl$MON_IOCT_RING_SIZE(r6, 0x9204, 0xda32e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setpgid(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r2, 0x0, 0xffffffffffffffff}, 0x18) syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000640)=[{0x0, 0x0, 0x0, 0x7ffc1ffb}]}) setuid(0xee00) stat(0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) fchown(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 1m8.145090727s ago: executing program 5 (id=741): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x548}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 1m7.989606812s ago: executing program 5 (id=747): bpf$MAP_CREATE(0x0, &(0x7f0000001880)=ANY=[@ANYRES32=0x0], 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000480)="17000000020001000003be8c5e687a8a6a003c00020100ecff3f0000000300dc290001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb2e2f8144243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c9000000000100000000000080c457681f009cee79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02dfccebf6ba00085dbda1348fe947f1da062a00"/184, 0xb8) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) read(r1, &(0x7f0000001480)=""/4096, 0x38) 1m7.989311672s ago: executing program 41 (id=747): bpf$MAP_CREATE(0x0, &(0x7f0000001880)=ANY=[@ANYRES32=0x0], 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000480)="17000000020001000003be8c5e687a8a6a003c00020100ecff3f0000000300dc290001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb2e2f8144243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c9000000000100000000000080c457681f009cee79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02dfccebf6ba00085dbda1348fe947f1da062a00"/184, 0xb8) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) read(r1, &(0x7f0000001480)=""/4096, 0x38) 1m2.1883326s ago: executing program 3 (id=839): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x800000000fc, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x17, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000008000000000000000000218110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000000000000850000001700000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b7020000030000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x364}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r2, @ANYRESHEX], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7d92a094b8dc40ff, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) ioctl$int_out(r6, 0x5460, 0xfffffffffffffffe) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$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") r7 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x6, 0x7, 0x4, 0x1c0a0, r7, 0x0, '\x00', 0x0, r8, 0x0, 0x3, 0x2, 0x4}, 0x50) mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r9) sendmsg$NL80211_CMD_GET_WIPHY(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01032bb570000000000001"], 0x28}}, 0x44) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rmdir(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') lsetxattr$security_selinux(0x0, &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x0) 1m2.062809285s ago: executing program 3 (id=840): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0xae6}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r5, 0x0, 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, 0x0, 0x8, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x4}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6002}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$tipc(r3, &(0x7f0000000740)={&(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x1, {0x1, 0x3, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x4) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r7 = creat(&(0x7f0000000080)='./file0\x00', 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00') close_range(r8, r8, 0x2) syz_open_dev$loop(&(0x7f00000001c0), 0x400000000000000a, 0xc8403) statx(r8, 0x0, 0x1000, 0xb1d57ae6097907af, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f0000000540)={'\x00', 0x7e, 0x7527, 0x5c8, 0x7fff, 0x9}) ioctl$BLKTRACETEARDOWN(r7, 0x1276, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r7, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) syz_open_dev$sg(0x0, 0x0, 0x5) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r9, 0x89e3, &(0x7f0000000000)={0x5d, 0x0, 0xb, 0xa, 0xfffffffd, 0x81}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r7, 0xc0505350, &(0x7f0000000380)={{0x2, 0xb}, {0xb8, 0x7}, 0x5, 0x3, 0x9}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) 1m1.982566944s ago: executing program 3 (id=842): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r0, 0x89e4, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0xffffffffffffff6c, 0x8000000000000001, 0xe10, 0xf}) 1m1.791030673s ago: executing program 3 (id=843): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f0000000140), 0xff, 0x53b, &(0x7f0000000b80)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bc00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x8a) fcntl$setstatus(r3, 0x4, 0x42400) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x2400) open$dir(&(0x7f0000000180)='./file0\x00', 0x237e, 0x8a) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0xe, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r6, &(0x7f0000001200)={'#! ', './file0'}, 0xb) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000d0ff00000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020200600f8ff00000000bf99006ceb00000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0x2, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x29) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) socket$inet6(0xa, 0x2, 0x0) ioctl$IMHOLD_L1(r6, 0x80044948, &(0x7f0000000200)=0xb9a) r9 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3cff02000000", @ANYRES32=r10, @ANYBLOB="0b120500000000001c0012800b00010069703667726500000c00028008000100", @ANYRES32=r10, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) 1m1.461837393s ago: executing program 3 (id=848): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4fc, &(0x7f0000001500)="$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") mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0) 1m1.227535148s ago: executing program 3 (id=853): syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd672d51b28699eb6e1e51a3e06b15000800fffc010000000000000000000000000001ff02f2ffffffffffffff0000000000013200010111000000"], 0x0) r0 = geteuid() r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000280)=0x6e) sendmmsg$unix(r1, 0xffffffffffffffff, 0x0, 0x6c840) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={0xffffffffffffffff}, 0x4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000640)={'erspan0\x00', 0x0, 0x40, 0x700, 0x0, 0x0, {{0x28, 0x4, 0x0, 0x8, 0xa0, 0x64, 0x0, 0xab, 0x4, 0x0, @private=0xa010102, @empty, {[@rr={0x7, 0x1f, 0x75, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @local]}, @timestamp={0x44, 0x1c, 0x87, 0x0, 0x3, [0x626, 0x6, 0x54c51240, 0xf, 0x1000, 0x3]}, @cipso={0x86, 0x29, 0x3, [{0x0, 0x7, "d7124cfcc6"}, {0x6, 0xf, "284b64e563bb2fa88c1ebc4b26"}, {0x2, 0xd, "fa01a0cd07e57f96697599"}]}, @ssrr={0x89, 0x27, 0xe9, [@empty, @multicast1, @broadcast, @remote, @remote, @broadcast, @multicast2, @multicast1, @empty]}, @noop]}}}}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850400000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0xfffffffffffff001}, 0x18) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x2e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) connect$vsock_stream(r7, &(0x7f0000000600)={0x28, 0x0, 0x0, @local}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c80, &(0x7f00000000c0)={[{@i_version}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@usrquota}]}, 0x1, 0x79c, &(0x7f0000001cc0)="$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") creat(&(0x7f0000000000)='./file0\x00', 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r6, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000440)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0, 0xaa, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x9f, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) socket$packet(0x11, 0x3, 0x300) mount$9p_rdma(&(0x7f0000000040), &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x121800, &(0x7f0000000340)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq={'rq', 0x3d, 0x4}}, {@common=@fscache}, {@timeout={'timeout', 0x3d, 0xfffffffffffffff6}}, {@rq={'rq', 0x3d, 0x80000000101}}, {@rq={'rq', 0x3d, 0x8359}}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x64, 0x63, 0x34, 0x38, 0x36, 0x38, 0x39], 0x2d, [0x63, 0x61, 0x31, 0x37], 0x2d, [0x66, 0x32, 0x38, 0x32], 0x2d, [0x37, 0x63, 0x64, 0x32], 0x2d, [0x62, 0x66, 0x38, 0x64, 0x32, 0x62, 0x38, 0x65]}}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@smackfshat={'smackfshat', 0x3d, '\xbb\xbb\xbb\xbb\xbb\xbb'}}, {@fowner_lt={'fowner<', r0}}]}}) 1m1.19334531s ago: executing program 42 (id=853): syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd672d51b28699eb6e1e51a3e06b15000800fffc010000000000000000000000000001ff02f2ffffffffffffff0000000000013200010111000000"], 0x0) r0 = geteuid() r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000280)=0x6e) sendmmsg$unix(r1, 0xffffffffffffffff, 0x0, 0x6c840) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={0xffffffffffffffff}, 0x4) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000640)={'erspan0\x00', 0x0, 0x40, 0x700, 0x0, 0x0, {{0x28, 0x4, 0x0, 0x8, 0xa0, 0x64, 0x0, 0xab, 0x4, 0x0, @private=0xa010102, @empty, {[@rr={0x7, 0x1f, 0x75, [@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @local]}, @timestamp={0x44, 0x1c, 0x87, 0x0, 0x3, [0x626, 0x6, 0x54c51240, 0xf, 0x1000, 0x3]}, @cipso={0x86, 0x29, 0x3, [{0x0, 0x7, "d7124cfcc6"}, {0x6, 0xf, "284b64e563bb2fa88c1ebc4b26"}, {0x2, 0xd, "fa01a0cd07e57f96697599"}]}, @ssrr={0x89, 0x27, 0xe9, [@empty, @multicast1, @broadcast, @remote, @remote, @broadcast, @multicast2, @multicast1, @empty]}, @noop]}}}}}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850400000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0xfffffffffffff001}, 0x18) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x2e}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) connect$vsock_stream(r7, &(0x7f0000000600)={0x28, 0x0, 0x0, @local}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c80, &(0x7f00000000c0)={[{@i_version}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@usrquota}]}, 0x1, 0x79c, &(0x7f0000001cc0)="$eJzs3c1rXFUbAPDnTpKmSfu+yQsvaN2YlRZKE1Njq6BQcSGChYIuxXZIpqFmkimZSWlCQIsIbgQVF4JuunLhR9259WOrf4UuxFI1FiuuIndyJ510Pjppk0lsfj+4mXPuuZNznnvux5m5lzsB7Fkj6Z9cxKGIeDeJGMrmJxHRV031RpxcW+7myvJkOiWxuvrSb0l1mRsry5NR957UgSzzYER8+1bEkVxjveXFpZl8sViYz/JjldkLY+XFpaPnZ/PThenC3PHxiYljJ544cXzrYv3zh6WD1957/tEvTv795gNX3/kuiZNxMCurj6OZV37soIJnNmZHYiRbJ33pKtzguU21fPdLdroB3JV01+xZ28vjUAxFTzUFANzPXo+IVQBgj0mc/wFgj6l9D3BjZXmyNu3sNxLddf3ZiNi/Fn/t+uZaSW92zW5/9Tro4I1kw5WRJCKGt6D+kYj4+KtXP0unuPN1yGNbUCVA1RuXI+Ls8Ejj8T9puGdhsx5rU7Yvex25bX5avyvQ0B1fp+OfJ5uN/3Lr459oMv7pb7Lv3o1m+/+GGQNbUEkb1z+JeLru3rabdfFnhnuy3H+qY76+5Nz5YiE9tv03Ig5HX3+aH29Tx+E/+lqWjcTA+vjv9/df+zStP329tUTul97+je+Zylfy9xDyBtcvRzzU2yz+ZL3/kxbj39NRv5pae+Gptz9qVZb2fxpvbWqMP7K7k7bH6pWIR5r2/6072pK29yeOVTeHsdpG0cSXP3042Kr++vF/OqX11z4LdEPa/4Pt4x9O6u/XLG++ju+vDH3TquzO8Tdu/5Gv5PclL1eTtXHEpXylMj8esS95sXF+3aemS/mHs1R1+fUgm+3/7bb/dI8+22H8vdd+/fzu499eaf9Pbar/N5+4enOmp1X9nfX/RDV1OJvTyfGv0wbey7oDAAAAAAAAAAAAAAAAAAAAAAAAgE7lIuJgJLnR9XQuNzq69hve/4/BXLFUrhw5V1qYm4rqb2UPR1+u9qjLobrnoY5nz8Ov5Y/dln88Iv4XER/0DyS15yhO7XDsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFBzoMXv/6d+7t/p1gEA22b/TjcAAOi69ud/owMAuB85wwPA3tPZ+b9n29sBAHSPz/8AsPc4/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDNTp86lU6rf60sT6b5qYuLCzOli0enCuWZ0dmFydHJ0vyF0elSabpYGJ0szd7p/xVLpQsTMbdwaaxSKFfGyotLZ2ZLC3OVM+dn89OFM4W+rkQFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJtTXlyaya8UC/PVRFGiZWIgGotWd0PDdkOiJ9ucdkt7uppIdkcztjixwwcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH+JfwIAAP//W/UefA==") creat(&(0x7f0000000000)='./file0\x00', 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r6, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000440)=[0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0, 0xaa, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000740), &(0x7f0000000780), 0x8, 0x9f, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r8, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) socket$packet(0x11, 0x3, 0x300) mount$9p_rdma(&(0x7f0000000040), &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x121800, &(0x7f0000000340)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq={'rq', 0x3d, 0x4}}, {@common=@fscache}, {@timeout={'timeout', 0x3d, 0xfffffffffffffff6}}, {@rq={'rq', 0x3d, 0x80000000101}}, {@rq={'rq', 0x3d, 0x8359}}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x64, 0x63, 0x34, 0x38, 0x36, 0x38, 0x39], 0x2d, [0x63, 0x61, 0x31, 0x37], 0x2d, [0x66, 0x32, 0x38, 0x32], 0x2d, [0x37, 0x63, 0x64, 0x32], 0x2d, [0x62, 0x66, 0x38, 0x64, 0x32, 0x62, 0x38, 0x65]}}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@smackfshat={'smackfshat', 0x3d, '\xbb\xbb\xbb\xbb\xbb\xbb'}}, {@fowner_lt={'fowner<', r0}}]}}) 23.412063245s ago: executing program 4 (id=1532): syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x731bc1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f0000000380)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@i_version}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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") 23.309960487s ago: executing program 4 (id=1535): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000012c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0xc}, {}, {0x2, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x9, 0x401, 0x1000, 0x8a0, 0xd5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x800) 23.049759104s ago: executing program 4 (id=1537): io_setup(0x2, &(0x7f0000000040)=0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002580000000e0a01020000000000000000010000000900020073797a32000000001800038014000080100001800400028006000180000000000900010073797a30"], 0xc8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x84200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000000000d50000000a00000a74000000050a010400000000000000000700000708000a40000000070900030073797a310000010017000c008e968c3b0389d4bf66ec6c3902e39339e5cbc6000900010073797a310000000008000b40000000020b00070066696c746572000008000540fffffffd0900010073797a300000000014000000110001000000000000000000070000"], 0x9c}, 0x1, 0x0, 0x0, 0x1}, 0x24008805) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) io_submit(r0, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) sendto$inet6(r2, 0x0, 0x0, 0x2004c8a0, 0x0, 0x0) 22.957390335s ago: executing program 4 (id=1539): r0 = open(&(0x7f0000000080)='./file0\x00', 0x108242, 0x124) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) pipe2(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r7, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f0000000300)=0xff, r8, 0x0, 0x3, 0x1}}, 0x20) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000ddff00850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r9}, 0x10) ioctl$sock_inet_SIOCGIFNETMASK(r0, 0x891b, &(0x7f0000000040)={'nr0\x00', {0x2, 0x0, @dev}}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r10, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r11 = dup(r10) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2b0, &(0x7f0000000280)="$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") r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$P9_RLERRORu(r11, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$P9_RLERRORu(r12, &(0x7f0000000580)={0xe, 0x7, 0x2, {{0x1, '.'}, 0xa}}, 0xe) write$RDMA_USER_CM_CMD_SET_OPTION(r11, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r11, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) r13 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r13) 22.884872877s ago: executing program 4 (id=1544): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x67, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000100001000c000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}}, 0x40) 22.684645491s ago: executing program 4 (id=1550): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) tgkill(0x0, 0x0, 0x21) 22.628284523s ago: executing program 43 (id=1550): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x18) tgkill(0x0, 0x0, 0x21) 4.617465279s ago: executing program 0 (id=1880): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f00000002c0)={0x0, r1}, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x4, 0xc, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x7, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000003c0)='mm_page_alloc\x00', r2, 0x0, 0xffffffffffffffff}, 0x18) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'geneve1\x00', 0x0}) sendto$packet(r5, &(0x7f0000000040)="3f031c000302140006001e008900", 0xe, 0x1, &(0x7f0000000540)={0xc9, 0xf8, r6, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r8) getsockname$packet(r8, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0x3c, 0x28, 0x575ac7824d421509, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, r9, {}, {0x1}, {0x4, 0x3d}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xd, 0x1}}]}}]}, 0x3c}}, 0x40) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0x7000000) 3.982513762s ago: executing program 0 (id=1883): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1, 0x0, 0xfffffffffffffffd}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r2, &(0x7f0000002780)=ANY=[], 0xfb5) (fail_nth: 1) 3.16641214s ago: executing program 2 (id=1888): process_vm_writev(0x0, &(0x7f0000000300), 0x0, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1200000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200"], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000800000000100000028000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="2f000000000000000000000000000000000000000000000000060d00"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x6, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) fcntl$getownex(r3, 0x10, &(0x7f0000000300)={0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r6, r2, 0x0, 0xd, &(0x7f0000000340)='sched_switch\x00'}, 0x30) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e20, 0x4000b, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0x80ad}, 0x1c) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d80000001e0081054e81f782dbe8abd22d267e8e1c007c09e8fe08a104000e800a00142603600e1208000fc01e000402a80016c008000e400400027c035c0461c1d67f6f94007134cff6d26efb8000a0ffa290457f0189c129f509c1c9d8c87017eeadc9c809b316277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccce9500360db7e5167fda40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x40400) 3.154204691s ago: executing program 0 (id=1889): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 3.132375061s ago: executing program 2 (id=1890): r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000070000000080000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='itimer_state\x00', r3}, 0x10) setitimer(0x1, 0x0, 0x0) fcntl$getown(r0, 0x9) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) perf_event_open(&(0x7f0000000800)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x40800000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000600)={{0x1, 0x1, 0x18, r5, {0xfffffffffffffff8}}, './bus\x00'}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x3}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r8, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x2, 0x12, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, 0x0, 0x7, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r9, r7, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r10 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) getsockname$packet(r10, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000540)=0x14) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@quota}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$eJzs3cFvG1kZAPDPTpw4aXaTXfYACHbL7kJBVZ3E3Y1We4DlhBBaCbFHkNqQuFEUO45ipzShh/TMFYlKnODIH8C5J+5cENy4lANSgQjUIHEwmvEkdVO7iZrEzsa/nzSa9+ZN/L3XdN6rvyZ+AQytqxGxGxFjEXE7Iqaz67nsiE/aR3Lf0737S/t795dy0Wp99s9c2p5ci46vSVzJXrMYET/6XsRPcy/GbWzvrC1Wq5XNrD7brG3MNrZ3bqzWFlcqK5X1cnlhfmHuo5sfls9srO/UxrLSVx//cfdbP0+6NZVd6RzHWWoPvXAYJzEaET84j2ADMJKNZ2zQHeGV5CPizYh4N33+p2Mk/W4CAJdZqzUdrenOOgBw2eXTHFguX8pyAVORz5dK7RzeWzGZr9Ybzet36lvry+1c2UwU8ndWq5W5LFc4E4VcUp9Py8/q5SP1mxHxRkT8cnwirZeW6tXlQf7DBwCG2JUj6/9/xtvrPwBwyRUH3QEAoO+s/wAwfKz/ADB8rP8AMHza6//EoLsBAPSR9/8AMHys/wAwVH746afJ0drPPv96+e721lr97o3lSmOtVNtaKi3VNzdKK/X6SvqZPbXjXq9ar2/MfxBb92a+vdFozja2d27V6lvrzVvp53rfqhTSu3b7MDIAoJc33nn0l1yyIn88kR7RsZdDYaA9A85bftAdAAZmZNAdAAbGbl8wvE7xHl96AD7vuuzN202x2y8ItVqt1jl0CeiPa1+S/4dh1ZH/91PAMGTk/2F4yf/D8Gq1cifd8z9OeiMAcLHJ8QM9fgzgzez8u+w/B36yfPSOh+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwWETNRyN1ZrVbmIuL1iPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3+1HNNb185LI5FxM9+/dmv7i02m5t/ihjL/Wv84HrzYXa93P/eAwDHO1in03PHG/mne/eXDo5+9ufJdyOi2I6/vzcW+4fxR2M0PRejEBGT/85l9bZcR+7iNHYfRMQXu40/F1NpDqS98+nR+Ens1/oaP/9c/Hza1j4nfxZfOIO+wLB5lMw/n3R7/vJxNT13f/6L6Qx1etn8l7zU0n46Bz6LfzD/jfSY/66eNMYHf/h+uzSRffGz3Z6fPIj48mjEQez9jvnnIH6uR/z3Txj/r195+91eba3fRFyL7vE7Y802axuzje2dG6u1xZXKSmW9XF6YX5j76OaH5dk0Rz3bezX4x8fXX+/Vlox/skf84jHj//oJx//b/93+8ddeEv+b73WLn4+3XhI/WRO/ccL4i5O/L/ZqS+Iv9xj/cd//6yeM//hvOy9sGw4ADE5je2dtsVqtbCooXPxC8lf2AnSja+E7/Yo1Ft2bfvFe+5k+0tRqvVKsXjPGWWTdgIvg8KGPiP8OujMAAAAAAAAAAAAAAEBX/fiNpUGPEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgMvr/wEAAP//M+fPJQ==") truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc) r11 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) fallocate(r11, 0x8, 0x4000, 0x4000) 3.088651842s ago: executing program 0 (id=1891): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000021000000000000000000000485000000110000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x104800e, &(0x7f00000001c0)={[{@noblock_validity}, {@jqfmt_vfsv0}]}, 0x1, 0x445, &(0x7f0000000b00)="$eJzs28+PE1UcAPDvTLeLCLgr4g9+qKto3PhjlwVUDh7UaOIBExM96HGzuxCksIZdEyFEwRg8GWPi3Xj0X/CkF2M8mXjVuyEhhgvgqWbaGbYtbdktLUX6+SQD78282fe+nXnte/PaAEbWVPZPErE1Iv6MiIl6trnAVP2/q5fPLly7fHYhiWr13X+SWrkrl88uFEWL87bkmek0Iv0iid1t6l05feb4fKWydCrPz66e+Gh25fSZF46dmD+6dHTp5P5Dhw4emHv5pf0v9iXOrE1Xdn26vGfnWx988/bhr5rib4mjT6a6HXy6Wu1zdcO1rSGdjA2xIWxIKSKyy1Wu9f+JKMXaxZuINz8fauOAgapWq9UtnQ+fqwJ3sSSa87o8jIrigz6b/xZb6yDg1cENP4bu0mv1CVAW99V8qx8ZizQvU26Z3/bTVES8f+7f77ItBvMcAgCgyU/Z+Of5duO/NB5qKHdfvjY0GRH3R8T2iHggInZExIMRtbIPR8QjG6y/dZHkxvFPerGnwNYpG/+9kq9tNY//itFfTJby3LZa/OXkyLHK0r78NZmO8qYsP9eljp/f+OPrTscax3/ZltVfjAXzdlwc29R8zuL86vytxNzo0vmIXWPt4k+urwQkEbEzInb1WMexZ3/Y0+nYzePvog/rTNXvI56pX/9z0RJ/Iem+Pjl7T1SW9s0Wd8WNfvv9wjud6r+l+Psgu/73tr3/r8c/mTSu165svI4Lf33ZcU7T6/0/nrxXS4/n+z6ZX109NRcxnhyuN7px//61c4t8UT6Lf3pv+/6/PdZeid0Rkd3Ej0bEYxHxeN72JyLiyYjY2yX+X19/6sPe4x+sLP7FDV3/tcR4tO5pnygd/+XHpkonb4j/Wvfrf7CWms73rOf9bz3t6u1uBgAAgP+fNCK2RpLOXE+n6cxM/fvyOyLSyvLK6nNHlj8+uVj/jcBklNPiSddEw/PQuXxaX8+fj4j6VwuK4wfy58bfljbX8jMLy5XFYQcPI25Lh/6f+bs07NYBA+f3WjC69H8YXfo/jC79H0ZXm/6/eRjtAG6/dp//nw2hHcDt19L/LfvBCDH/h9Gl/8Po0v9hJK1sjpv/SL5rovhLPZ5+1yaifEc0Y2CJSO+IZkgMKDHc9yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB++S8AAP///fHg0g==") io_setup(0x6, &(0x7f00000000c0)) openat$sysfs(0xffffffffffffff9c, 0x0, 0x20001, 0x0) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0), 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000006, 0x31, 0xffffffffffffffff, 0xd0fb8000) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xfffffdd6}], 0x1, 0x9c00, 0x0, 0x3) accept4$phonet_pipe(r1, &(0x7f0000000280), &(0x7f0000000300)=0x10, 0x80000) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/154, 0x9a}], 0x1, 0xffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) 2.647248672s ago: executing program 1 (id=1894): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x7}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$vcs(0xffffffffffffff9c, 0x0, 0x82a00, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) io_setup(0x8, &(0x7f0000002740)) 2.635160642s ago: executing program 8 (id=1895): rename(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000003c0)="53ce", 0x2}, {0x0}, {0x0}], 0x3}}], 0x1, 0x4c004) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 2.437346997s ago: executing program 2 (id=1897): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000021000000000000000000000485000000110000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x104800e, &(0x7f00000001c0)={[{@noblock_validity}, {@jqfmt_vfsv0}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0), 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/154, 0x9a}], 0x1, 0xffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) 2.337102969s ago: executing program 8 (id=1899): syz_open_dev$evdev(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) prlimit64(0x0, 0xe, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x731bc1, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c00008864ba6f319a47fc1990f0c6b00b001800090400000001fedbdf250a000b00000000000000008008001e0001"], 0x2c}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)}, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendfile(r4, r4, 0x0, 0x40000f63c) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1018e58, &(0x7f0000000380)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@i_version}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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") 1.319011641s ago: executing program 1 (id=1901): creat(&(0x7f0000000080)='./file0\x00', 0x6a) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000e00000018110000", @ANYRES32=r0, @ANYRES8=r0], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xb, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x10000000, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_clone(0x80000100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x74, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, 0x0, 0x44008011) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX=r2, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r4}, &(0x7f00000004c0), &(0x7f0000000500)='%-010d \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) r7 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x165381, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r8, &(0x7f0000004200)='t', 0x1) sendfile(r8, r7, 0x0, 0x7ffff000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) rt_tgsigqueueinfo(r2, 0x0, 0x14, &(0x7f0000000700)={0x7, 0x8, 0x100}) r10 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f00000009c0)=ANY=[@ANYRES8=r6], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(r10, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x20000001) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000030601a9d5d5c50000000000000000000500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0xc4) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x4}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, 0x0, 0x30, 0x0, @val=@tracing={0x0, 0xfff}}, 0x20) 1.244222642s ago: executing program 1 (id=1902): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000), 0x10002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES16=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') syz_open_dev$evdev(0x0, 0x0, 0x0) writev(r5, &(0x7f00000003c0), 0x100000000000022d) 1.177161004s ago: executing program 2 (id=1903): rename(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c004) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 946.948379ms ago: executing program 0 (id=1907): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000003e7400850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) writev(r2, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 906.30244ms ago: executing program 2 (id=1908): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000021000000000000000000000485000000110000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0), 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/154, 0x9a}], 0x1, 0xffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) 884.329951ms ago: executing program 7 (id=1909): rename(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000003c0)="53ce", 0x2}, {0x0}, {0x0}], 0x3}}], 0x1, 0x4c004) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 845.863211ms ago: executing program 0 (id=1910): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) socket$netlink(0x10, 0x3, 0x15) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdir(&(0x7f0000000280)='./file0\x00', 0x43) open$dir(&(0x7f0000000340)='./file0\x00', 0x400080, 0x386) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newlink={0x64, 0x10, 0x401, 0x70bd28, 0x0, {0x0, 0x3, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x64}}, 0x0) 634.308766ms ago: executing program 2 (id=1911): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x24000, &(0x7f0000000c00), 0x8, 0x451, &(0x7f0000001380)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r4 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000140), 0x12) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="020000000400000008000000010000008200000017ed615597dcf783a607e063a45cda846dc78f94692900217bacee8ee69d341d9c18789e53e56503c7ac23b984a1cb2480d5f07e4f12f751c61217d5ca08baccc3139fb4ff19031a006ad5ca7ae0677f62f209ac87e668b1d32f8916fef61de25df1aa8eabac2766c44c74f447f8b80be7c217", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket$inet_sctp(0x2, 0x5, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8800, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee2, 0x8031, 0xffffffffffffffff, 0xa8f43000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r7, 0x0, 0x0, 0x80800) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x45, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 557.829228ms ago: executing program 7 (id=1912): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4048000}, 0x44450) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a0001006d6174636800000040000280080002400000000124000300d67a8527f76ec1d39e537c4c3060c6a405106c72848aa8bcb429b3a20d5324520e000100636f6e6e6c696d69740000000900010073797a30000000000900020073797a32"], 0xa8}}, 0x4048010) 554.048108ms ago: executing program 8 (id=1913): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x13, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x6}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @exit, @call={0x85, 0x0, 0x0, 0x7b}]}, &(0x7f0000000380)='GPL\x00', 0x1, 0xe7, &(0x7f0000000580)=""/231, 0x41100, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0x6, 0x8, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000440)=[r1, r1, r2, r2, r1, r1, r1, r2, r1, r1], 0x0, 0x10, 0x9}, 0x94) open(&(0x7f0000000740)='./file0\x00', 0x480400, 0x40) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4, 0x0, 0xa55c}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setpriority(0x0, 0x0, 0x6) ioctl$AUTOFS_IOC_PROTOVER(r5, 0x80049363, &(0x7f0000000780)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000040000000000000000000300000a20000000000a05000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700ffff08000a40000000030900020073797a31000000000900010073797a3000000000080005400000002105000d40930000005c0000000c0a01020000000000000000070000000900020073797a31000000000900010073797a3000000000300003802c0000800400018024000b80100001800c000100636f756e746572", @ANYBLOB="35975caa60410979a3e6d5ec6aaa7110ca1443abe03b608ae6a5c28cd9b64dbfb4b2ffdb847fff44c0781a56506abdb6a86ba7c6e52373042be8f8de187b188ff2792fa681501cd58142f2d56633d92f", @ANYRES8], 0xe8}, 0x1, 0x0, 0x0, 0x10}, 0x0) 512.947819ms ago: executing program 7 (id=1914): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d9"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYBLOB="0000000000000000b7030000003e7400850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) writev(r1, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}], 0x1) 463.09437ms ago: executing program 7 (id=1915): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000020900010073797a30000000002c000000030a010200000000030000000100ffff0900010073797a30000000000900030073797a3100000000d4040000060a010400000000000000000100000008000b4000000000ac0404802c000180080001006c6f6700200002800900024073797a300000000008000340000000060800034000000002380401800c000100626974776973650028040280080003400000000808000240000000140800064000000002080006400000000064020580bb0001001d92704a203d5ecc985c4e4280e5378a36a2856959ffa601c237cc270251cf18420d11613ec98e629c7d84c655efcb2b5ecd71666675bf512cadfe09e4d05a4f60f60e007ca1cf70a5185f973cec0f1ab052acf1acf6a2df83dd88facc62c6e94a1b6368d6bda68abcaed2ee48c3d589bf2a814b728efb93401dfa1d1063200c10e56294dba0e7b780ce0f6090bd0de9f5e000c98c4b97cd985c91284c2bca23e4757407bb41fd8de797502a72e122032d4ef3160f9f7b00fd000100854e3cb6d05d310db3d528811da7f7450ebb2d62cddc6981343570b9f4ab17d75de9411dea482f508c0dce42c25c4778ebc56bb303f9f51c489eedffcb1490560ab26ab7507ec029cca3ddfe7c4f4f6d91db07cbc008636bc7bea7f96954d31da9d8a9ca043df7b409ca2864d56fc6b2a70fcc2f1a3579737bf47542dae337d5203869caff9ab95a317c25521ebf848fad8ceb87f4655ace0701dbe961e9dcaeffa37bfa2e9d127d61b8d6edc1437b46f54c061e1c9d68120ac8300e91d19c708aa9589c37de59a9f8df5546855e934599a2f31b6cb847347fc02231fec395b906e60300340d60ebe7a3f23e1aa6eec9e0150a9d16b3c25e590000002400028008000340fffffff8080003400000000908000340684dbc5808000180ffffffff6200010091de8d9ca3503f5a0a8259007bc5088ccfe97cfebb5ebb90e05d4e8a63fcbee6f14ab7eff7469cf243a6ef6e528b811dfd72af1e7e08de8fbdd4849367ea82016412fab2ccc0fb94fa63fac7fd0c6ea48c0e9ac7d1a30ecf3e70e44ed5ff00001c0002800800034080000000080003400000000308000180fffffffc080001400000000d600004804000028008000180fffffffb0d00020073797a3000000000080001802b30a3bc08000180000000000900020073797a31000000002900020073797a31000000001c0002800900020073797a31000000000900020073797a3200000000080002400000000a30010480380002800900020073797a3200000000080003400000000908000180fffffffc0800018000000007080003408000000108000340000000050b0001000bca99f460f4b0002800028008000180fffffffb0900020073797a3000000000080003400000000308000340000001ff04000100bc000100e27404a10a99dbcc4575917adc29373e2cc46e5e8f99d7a36b7c42c92713cce62084d863a11eb9c2e19fde212924e527db981a9be0c2c15f6a04a67e9e20f86e4bebd07665e2d01da200712427a5525403c1c75468f31b91a60def25f7757c9921d08b9a5b0bc6f8953efbd0416091bf2b30d9a37e789198313dd07b7b70cebff25c562434b67e9a6b70708dd84c86135ab9b0ffda2c4b2fb4a139220c101f4c0a3d58eb124346005c82dea6f0f36444b28300758475eb3d34000180090001006d65746100000000240002800800024000000002080003400000000d08000340000000090800034000000001100001800a0001006c696d69740000000900010073797a30"], 0x548}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 420.829781ms ago: executing program 8 (id=1916): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x800000000fc, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES64=r2, @ANYRESHEX], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x7d92a094b8dc40ff, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) ioctl$int_out(0xffffffffffffffff, 0x5460, 0xfffffffffffffffe) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2008002, &(0x7f00000000c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000}}, {@nodiscard}, {@quota}]}, 0x1, 0x558, &(0x7f0000000680)="$eJzs3c9vI1cdAPDvTH52d9vsQg9QAbtAYUGrtTfedlX10nIBoaoSouKAOGxD4o3C2nGIndKESKR/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACbZA4GM14kriJw5rEsdn485Fm58ebme979s6852dnXgBj60ZE7ETEdES8GRFzxfakmOLVzpTt92h3e3Fvd3sxiXb7jb8leXq2LbqOyVwuzjkbEV/9UsQ3k+Nxm5tbDxdqtep6sV5u1dfKzc2t2yv1heXqcnW1Urk3f+/OS3dfrAysrNfrP3v/iyuvfe2Xv/j4e7/Z+fx3s2xdKdK6yzFInaJPHcTJTEbEa+cRbAQmivn0iPPB6aQR8aGI+FR+/c/FRP6/EwC4yNrtuWjPda8DABddmveBJWkpItK0aASUOn14z8altNZotm49aGysLnX6yq7GVPpgpVa9c23md9/Od55KsvX5PC1Pz9crR9bvRsS1iPjBzFP5emmxUVsaTZMHAMbe5e76PyL+OZOmpVJfh/b4Vg8AeGLMjjoDAMDQqf8BYPyo/wFg/PRR/xdf9u+ce14AgOHw+R8Axo/6HwDGj/ofAMbKV15/PZvae8Xzr5fe2tx42Hjr9lK1+bBU31gsLTbW10rLjcZy/sye+uPOV2s01uZfiI23y61qs1Vubm7drzc2Vlv38+d6369ODaVUAMB/c+36u79NImLn5afyKbrGclBXw8WWDnAv4MkycZaDNRDgiWa0LxhffVXheSPh1+eeF2A0ej7Me7bn4gf96H8I4ndG8H/l5kf77/83xjNcLHr2YXydrv//lYHnAxi+U/f//2Gw+QCGr91Ojo75P32QBABcSGf4CV/7e4NqhAAj9bjBvAfy/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcMFci4luRpKV8LPA0+zctlSKejoirMZU8WKlV70TEM3E9IqZmsvX5UWcaADij9C9JMf7XzbnnrxxNnU7+NZPPI+I7P37jh28vtFrr89n2vx9sn9kfPqxyeNwZxhUEAPr3p352yuvvSjHv+iD/aHd7cX86xzwe8/4XDgYfXdzb3c6nTspktNvtdsRs3pa49I8kJotjZiPiuYiYGED8nXci4iO9yp/kfSNXi5FPu+NHEfvpocZPPxA/zdM68+zl+/AA8gLj5t3s/vNqr+svjRv5vPf1P5vfoc4uv//NRuzf+/a64k8WkSZ6xM+u+Rv9xnjhV18+trE910l7J+K5yV7xk4P4yQnxn+8z/u8/9onvv3JCWvsnETejd/zuWOVWfa3c3Ny6vVJfWK4uV1crlXvz9+68dPfFSjnvoy7v91Qf99eXbz1zUt6y8l86IX7nnb98pPzTB8d+ps/y//Tfb37jk4erM0fjf+7Tvd//Z/N579c/qxM/22f8hUs/P3H47iz+0gnlf9z7f6vP+O/9eWupz10BgCFobm49XKjVqutnWsg+hQ7iPMcWsiz2t/N+c/FsQf8Y+cLhy5JEEoMuV9YY62fnqfN6Vc99YfKgrTjYM389O+OQi5MOvBSnWYirxcKjYQUd3T0JGI7Di37UOQEAAAAAAAAAAAAAAE4yjL9hGnUZAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLj+EwAA//8GP8IF") mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01032bb570000000000001"], 0x28}}, 0x44) mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rmdir(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') lsetxattr$security_selinux(0x0, &(0x7f0000000940), &(0x7f0000000980)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x0) 369.596402ms ago: executing program 7 (id=1917): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0xfffd, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0xe, 0x9}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/50, 0x4}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 353.730822ms ago: executing program 1 (id=1918): r0 = syz_io_uring_setup(0x14d9, &(0x7f0000000480)={0x0, 0x5121, 0x0, 0x3, 0x258}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0xffffffffffffffff}, 0x13) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file1\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 134.036467ms ago: executing program 8 (id=1919): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x8, 0x6}, 0x0, 0x10000, 0x0, 0x6, 0x8, 0x4, 0xb, 0x0, 0x0, 0x0, 0x20000008}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 132.036257ms ago: executing program 1 (id=1920): r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280), 0x88182, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r2, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000002500)='\f', 0x1}], 0x1) 30.419919ms ago: executing program 1 (id=1921): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000021000000000000000000000485000000110000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0), 0x1, 0x5d8, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/154, 0x9a}], 0x1, 0xffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) 30.179459ms ago: executing program 8 (id=1922): rename(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000003c0)="53cef5", 0x3}, {0x0}, {0x0, 0x48}], 0x3}}], 0x1, 0x4c004) sendmmsg(r0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 0s ago: executing program 7 (id=1923): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000021000000000000000000000485000000110000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x104800e, &(0x7f00000001c0)={[{@noblock_validity}, {@jqfmt_vfsv0}]}, 0x1, 0x445, &(0x7f0000000b00)="$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") io_setup(0x6, &(0x7f00000000c0)) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f00000001c0), 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r2, &(0x7f0000004200)='t', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)=""/154, 0x9a}], 0x1, 0xffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) kernel console output (not intermixed with test programs): corrupted xattr block 19: overlapping e_value [ 132.230532][ T8041] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.233404][ T8040] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 132.233446][ T8040] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.1496: corrupted xattr block 19: overlapping e_value [ 132.238712][ T8040] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 132.238808][ T8040] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.1496: corrupted xattr block 19: overlapping e_value [ 132.240284][ T8040] netlink: 'syz.0.1496': attribute type 3 has an invalid length. [ 132.240301][ T8040] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1496'. [ 132.248352][ T4061] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.349599][ T8053] loop1: detected capacity change from 0 to 512 [ 132.356170][ T8053] loop1: detected capacity change from 0 to 1024 [ 132.379798][ T4184] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.439476][ T8053] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.605575][ T8063] FAULT_INJECTION: forcing a failure. [ 132.605575][ T8063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.605695][ T8063] CPU: 1 UID: 0 PID: 8063 Comm: syz.0.1501 Not tainted syzkaller #0 PREEMPT(voluntary) [ 132.605803][ T8063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 132.605820][ T8063] Call Trace: [ 132.605828][ T8063] [ 132.605838][ T8063] __dump_stack+0x1d/0x30 [ 132.605881][ T8063] dump_stack_lvl+0xe8/0x140 [ 132.605946][ T8063] dump_stack+0x15/0x1b [ 132.605984][ T8063] should_fail_ex+0x265/0x280 [ 132.606021][ T8063] should_fail+0xb/0x20 [ 132.606077][ T8063] should_fail_usercopy+0x1a/0x20 [ 132.606105][ T8063] _copy_from_user+0x1c/0xb0 [ 132.606136][ T8063] __sys_bpf+0x183/0x7c0 [ 132.606180][ T8063] __x64_sys_bpf+0x41/0x50 [ 132.606236][ T8063] x64_sys_call+0x2aee/0x3000 [ 132.606262][ T8063] do_syscall_64+0xd2/0x200 [ 132.606348][ T8063] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 132.606382][ T8063] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 132.606449][ T8063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.606471][ T8063] RIP: 0033:0x7fcfca56eec9 [ 132.606487][ T8063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.606510][ T8063] RSP: 002b:00007fcfc8fcf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 132.606566][ T8063] RAX: ffffffffffffffda RBX: 00007fcfca7c5fa0 RCX: 00007fcfca56eec9 [ 132.606582][ T8063] RDX: 0000000000000094 RSI: 0000200000000180 RDI: 0000000000000005 [ 132.606597][ T8063] RBP: 00007fcfc8fcf090 R08: 0000000000000000 R09: 0000000000000000 [ 132.606612][ T8063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.606627][ T8063] R13: 00007fcfca7c6038 R14: 00007fcfca7c5fa0 R15: 00007ffdba251418 [ 132.606711][ T8063] [ 132.750369][ T6269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.807560][ T8076] loop8: detected capacity change from 0 to 512 [ 132.835873][ T8076] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 132.835968][ T8076] EXT4-fs (loop8): orphan cleanup on readonly fs [ 132.837180][ T8076] EXT4-fs error (device loop8): ext4_do_update_inode:5624: inode #16: comm syz.8.1506: corrupted inode contents [ 132.837350][ T8076] EXT4-fs (loop8): Remounting filesystem read-only [ 132.837408][ T8076] EXT4-fs (loop8): 1 truncate cleaned up [ 132.837556][ T174] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 132.837585][ T174] EXT4-fs (loop8): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 132.837669][ T174] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 132.838322][ T8076] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 132.862305][ T4061] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.056142][ T5938] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.119498][ T29] kauditd_printk_skb: 328 callbacks suppressed [ 133.119520][ T29] audit: type=1400 audit(1759774528.046:8280): avc: denied { create } for pid=8087 comm="syz.0.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 133.122650][ T8088] loop0: detected capacity change from 0 to 1024 [ 133.131318][ T29] audit: type=1400 audit(1759774528.056:8281): avc: denied { create } for pid=8087 comm="syz.0.1512" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=pppox_socket permissive=1 [ 133.186065][ T29] audit: type=1326 audit(1759774528.146:8282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8089 comm="syz.8.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80b73eec9 code=0x7ffc0000 [ 133.262062][ T8088] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.268870][ T29] audit: type=1400 audit(1759774528.156:8283): avc: denied { mounton } for pid=8087 comm="syz.0.1512" path="/251/file1" dev="tmpfs" ino=1406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 133.297294][ T29] audit: type=1326 audit(1759774528.156:8284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8089 comm="syz.8.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff80b73eec9 code=0x7ffc0000 [ 133.298397][ T8088] ext4 filesystem being mounted at /251/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 133.320808][ T29] audit: type=1400 audit(1759774528.156:8285): avc: denied { map_create } for pid=8089 comm="syz.8.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 133.350607][ T29] audit: type=1400 audit(1759774528.156:8286): avc: denied { map_read map_write } for pid=8089 comm="syz.8.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 133.370668][ T29] audit: type=1326 audit(1759774528.156:8287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8089 comm="syz.8.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80b73eec9 code=0x7ffc0000 [ 133.394543][ T29] audit: type=1326 audit(1759774528.156:8288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8089 comm="syz.8.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80b73eec9 code=0x7ffc0000 [ 133.418171][ T29] audit: type=1326 audit(1759774528.156:8289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8089 comm="syz.8.1514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff80b73eec9 code=0x7ffc0000 [ 133.486598][ T174] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:5: bg 0: block 393: padding at end of block bitmap is not set [ 133.503247][ T174] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 2035 with error 117 [ 133.514183][ T8098] FAULT_INJECTION: forcing a failure. [ 133.514183][ T8098] name failslab, interval 1, probability 0, space 0, times 0 [ 133.516049][ T174] EXT4-fs (loop0): This should not happen!! Data will be lost [ 133.516049][ T174] [ 133.528693][ T8098] CPU: 1 UID: 0 PID: 8098 Comm: syz.8.1516 Not tainted syzkaller #0 PREEMPT(voluntary) [ 133.528727][ T8098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 133.528743][ T8098] Call Trace: [ 133.528749][ T8098] [ 133.528758][ T8098] __dump_stack+0x1d/0x30 [ 133.528808][ T8098] dump_stack_lvl+0xe8/0x140 [ 133.528929][ T8098] dump_stack+0x15/0x1b [ 133.528984][ T8098] should_fail_ex+0x265/0x280 [ 133.529032][ T8098] should_failslab+0x8c/0xb0 [ 133.529068][ T8098] __kmalloc_node_track_caller_noprof+0xa5/0x580 [ 133.529190][ T8098] ? sidtab_sid2str_get+0xa0/0x130 [ 133.529230][ T8098] ? skb_put+0xa9/0xf0 [ 133.529272][ T8098] kmemdup_noprof+0x2b/0x70 [ 133.529374][ T8098] sidtab_sid2str_get+0xa0/0x130 [ 133.529415][ T8098] security_sid_to_context_core+0x1eb/0x2e0 [ 133.529455][ T8098] security_sid_to_context+0x27/0x40 [ 133.529493][ T8098] avc_audit_post_callback+0x9d/0x520 [ 133.529599][ T8098] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 133.529712][ T8098] common_lsm_audit+0x1bb/0x230 [ 133.529745][ T8098] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 133.529791][ T8098] slow_avc_audit+0x104/0x140 [ 133.529886][ T8098] avc_has_perm+0x13a/0x180 [ 133.529932][ T8098] selinux_socket_sendmsg+0x175/0x1b0 [ 133.529967][ T8098] security_socket_sendmsg+0x48/0x80 [ 133.530028][ T8098] __sock_sendmsg+0x30/0x180 [ 133.530065][ T8098] ____sys_sendmsg+0x31e/0x4e0 [ 133.530099][ T8098] ___sys_sendmsg+0x17b/0x1d0 [ 133.530145][ T8098] __x64_sys_sendmsg+0xd4/0x160 [ 133.530179][ T8098] x64_sys_call+0x191e/0x3000 [ 133.530267][ T8098] do_syscall_64+0xd2/0x200 [ 133.530306][ T8098] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 133.530372][ T8098] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 133.530407][ T8098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.530439][ T8098] RIP: 0033:0x7ff80b73eec9 [ 133.530483][ T8098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 133.530515][ T8098] RSP: 002b:00007ff80a1a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 133.530542][ T8098] RAX: ffffffffffffffda RBX: 00007ff80b995fa0 RCX: 00007ff80b73eec9 [ 133.530559][ T8098] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 133.530577][ T8098] RBP: 00007ff80a1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 133.530633][ T8098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 133.530649][ T8098] R13: 00007ff80b996038 R14: 00007ff80b995fa0 R15: 00007ffca429c7b8 [ 133.530674][ T8098] [ 133.530953][ T8098] unsupported nla_type 52263 [ 133.550243][ T4184] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.598908][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1520'. [ 133.643843][ T8106] loop1: detected capacity change from 0 to 512 [ 133.832029][ T8110] IPv6: sit1: Disabled Multicast RS [ 133.846700][ T8106] loop1: detected capacity change from 0 to 1024 [ 133.865258][ T8106] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.910964][ T8118] loop4: detected capacity change from 0 to 512 [ 133.920476][ T8117] loop2: detected capacity change from 0 to 512 [ 133.927234][ T8111] random: crng reseeded on system resumption [ 133.946999][ T8118] loop4: detected capacity change from 0 to 1024 [ 133.957439][ T8111] Restarting kernel threads ... [ 133.959333][ T8118] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.977547][ T8117] loop2: detected capacity change from 0 to 1024 [ 133.984900][ T8111] Done restarting kernel threads. [ 134.005798][ T8117] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.031147][ T8122] loop8: detected capacity change from 0 to 164 [ 134.042349][ T8122] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 134.085523][ T8122] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 134.086411][ T8122] Symlink component flag not implemented [ 134.100249][ T8122] Symlink component flag not implemented [ 134.150513][ T8122] Symlink component flag not implemented (7) [ 134.150527][ T8122] Symlink component flag not implemented (116) [ 134.375571][ T8138] loop8: detected capacity change from 0 to 1024 [ 134.401870][ T4334] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.402317][ T8138] EXT4-fs: Ignoring removed orlov option [ 134.442514][ T8138] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.481677][ T8143] hub 9-0:1.0: USB hub found [ 134.481837][ T8143] hub 9-0:1.0: 8 ports detected [ 134.482162][ T5938] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.493864][ T8143] loop4: detected capacity change from 0 to 1024 [ 134.494241][ T8143] EXT4-fs: inline encryption not supported [ 134.494264][ T8143] EXT4-fs: Ignoring removed i_version option [ 134.495070][ T8143] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 134.503371][ T8143] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.1532: lblock 2 mapped to illegal pblock 2 (length 1) [ 134.503505][ T8143] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1532: lblock 0 mapped to illegal pblock 48 (length 1) [ 134.503613][ T8143] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.1532: Failed to acquire dquot type 0 [ 134.503778][ T8143] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 134.503911][ T8143] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1532: mark_inode_dirty error [ 134.504032][ T8143] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 134.504083][ T8143] EXT4-fs (loop4): 1 orphan inode deleted [ 134.504922][ T8143] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.509947][ T174] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 134.514888][ T174] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0 [ 134.516012][ T8143] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.516334][ T8143] EXT4-fs error (device loop4): __ext4_get_inode_loc:4832: comm syz.4.1532: Invalid inode table block 1 in block_group 0 [ 134.516494][ T8143] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 134.516635][ T8143] EXT4-fs error (device loop4): ext4_quota_off:7229: inode #3: comm syz.4.1532: mark_inode_dirty error [ 134.552346][ T8149] loop1: detected capacity change from 0 to 512 [ 134.732112][ T8149] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 134.740996][ T8149] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.741105][ T8149] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 134.777672][ T8149] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1534: corrupted xattr block 19: overlapping e_value [ 134.777960][ T8149] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 134.778003][ T8149] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1534: corrupted xattr block 19: overlapping e_value [ 134.778541][ T8149] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 134.793667][ T6269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.803021][ T8149] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1534: corrupted xattr block 19: overlapping e_value [ 134.854963][ T8156] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1537'. [ 134.866668][ T8149] netlink: 'syz.1.1534': attribute type 3 has an invalid length. [ 134.866727][ T8149] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1534'. [ 134.952268][ T8165] loop4: detected capacity change from 0 to 256 [ 134.976221][ T5938] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.004570][ T4334] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 135.013928][ T4334] FAT-fs (loop4): Filesystem has been set read-only [ 135.030839][ T4334] FAT-fs (loop4): error, corrupted directory (invalid entries) [ 135.063136][ T8173] loop1: detected capacity change from 0 to 1024 [ 135.087871][ T8173] EXT4-fs: Ignoring removed mblk_io_submit option [ 135.094661][ T8173] EXT4-fs: Ignoring removed bh option [ 135.117764][ T8173] ext3: Unknown parameter 'subj_type' [ 135.182804][ T8173] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 135.294883][ T4061] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.345917][ T8187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1543'. [ 135.368028][ T8193] loop2: detected capacity change from 0 to 512 [ 135.387354][ T8193] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 135.429174][ T8193] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.452296][ T8193] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.503172][ T8183] loop0: detected capacity change from 0 to 32768 [ 135.515477][ T8193] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.1554: corrupted xattr block 19: overlapping e_value [ 135.542735][ T8195] lo speed is unknown, defaulting to 1000 [ 135.600143][ T8183] loop0: p1 p2 p3 < p5 p6 > [ 135.606211][ T8183] loop0: p2 size 16775168 extends beyond EOD, truncated [ 135.630831][ T174] bridge_slave_1: left allmulticast mode [ 135.637684][ T174] bridge_slave_1: left promiscuous mode [ 135.639292][ T8183] loop0: p5 start 4294970168 is beyond EOD, truncated [ 135.643478][ T174] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.659696][ T8213] netlink: 'syz.2.1554': attribute type 3 has an invalid length. [ 135.667745][ T8213] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1554'. [ 135.694421][ T8193] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 135.703930][ T8193] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.1554: corrupted xattr block 19: overlapping e_value [ 135.732435][ T8193] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop2 ino=15 [ 135.736836][ T174] bridge_slave_0: left allmulticast mode [ 135.747405][ T174] bridge_slave_0: left promiscuous mode [ 135.753214][ T174] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.753295][ T8193] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.1554: corrupted xattr block 19: overlapping e_value [ 135.823085][ T8221] loop8: detected capacity change from 0 to 128 [ 135.843403][ T8221] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 135.852494][ T8225] loop1: detected capacity change from 0 to 256 [ 135.856373][ T8221] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 135.874565][ T8223] loop0: detected capacity change from 0 to 512 [ 135.888584][ T8223] loop0: detected capacity change from 0 to 1024 [ 135.890084][ T6269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.897501][ T8223] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.088022][ T8237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1565'. [ 136.108799][ T8195] chnl_net:caif_netlink_parms(): no params data found [ 136.160414][ T8243] IPv6: sit1: Disabled Multicast RS [ 136.224015][ T174] team0 (unregistering): Port device team_slave_1 removed [ 136.235372][ T174] team0 (unregistering): Port device team_slave_0 removed [ 136.265181][ T4184] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.287843][ T8249] random: crng reseeded on system resumption [ 136.303314][ T8243] Restarting kernel threads ... [ 136.313013][ T8243] Done restarting kernel threads. [ 136.390327][ T37] hid-generic 0000:0000:0002.0001: unknown main item tag 0x4 [ 136.394359][ T8195] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.397822][ T37] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 136.404848][ T8195] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.414391][ T8195] bridge_slave_0: entered allmulticast mode [ 136.419650][ T37] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 136.426394][ T8195] bridge_slave_0: entered promiscuous mode [ 136.433056][ T37] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 136.446302][ T37] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 136.453844][ T37] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 136.459541][ T8265] random: crng reseeded on system resumption [ 136.461508][ T37] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 136.475338][ T37] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 136.483200][ T37] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 136.490898][ T37] hid-generic 0000:0000:0002.0001: unknown main item tag 0x0 [ 136.499731][ T37] hid-generic 0000:0000:0002.0001: hidraw0: HID v0.00 Device [syz0] on syz1 [ 136.512869][ T8265] Restarting kernel threads ... [ 136.518682][ T8265] Done restarting kernel threads. [ 136.589769][ T8195] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.596911][ T8195] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.604359][ T8195] bridge_slave_1: entered allmulticast mode [ 136.612210][ T8195] bridge_slave_1: entered promiscuous mode [ 136.618844][ T8279] loop1: detected capacity change from 0 to 512 [ 136.633842][ T8279] loop1: detected capacity change from 0 to 1024 [ 136.644435][ T8279] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.672593][ T12] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 136.684480][ T8195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.696390][ T8195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.718493][ T8195] team0: Port device team_slave_0 added [ 136.725583][ T8195] team0: Port device team_slave_1 added [ 136.787684][ T8195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.794829][ T8195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.820915][ T8195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.835406][ T8195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.842545][ T8195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 136.868511][ T8195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.909386][ T8195] hsr_slave_0: entered promiscuous mode [ 136.915664][ T8195] hsr_slave_1: entered promiscuous mode [ 136.936099][ T8195] debugfs: 'hsr0' already exists in 'hsr' [ 136.941937][ T8195] Cannot create hsr debugfs directory [ 136.949705][ T8290] IPv6: sit1: Disabled Multicast RS [ 136.971247][ T8292] syz.0.1585 (8292) used obsolete PPPIOCDETACH ioctl [ 137.026070][ T8290] random: crng reseeded on system resumption [ 137.039194][ T8290] Restarting kernel threads ... [ 137.050386][ T8290] Done restarting kernel threads. [ 137.063022][ T8292] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 137.071618][ T8292] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 137.091872][ T5938] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.116562][ T8305] FAULT_INJECTION: forcing a failure. [ 137.116562][ T8305] name failslab, interval 1, probability 0, space 0, times 0 [ 137.129379][ T8305] CPU: 0 UID: 0 PID: 8305 Comm: syz.2.1591 Not tainted syzkaller #0 PREEMPT(voluntary) [ 137.129416][ T8305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 137.129433][ T8305] Call Trace: [ 137.129441][ T8305] [ 137.129449][ T8305] __dump_stack+0x1d/0x30 [ 137.129490][ T8305] dump_stack_lvl+0xe8/0x140 [ 137.129540][ T8305] dump_stack+0x15/0x1b [ 137.129598][ T8305] should_fail_ex+0x265/0x280 [ 137.129707][ T8305] should_failslab+0x8c/0xb0 [ 137.129737][ T8305] __kmalloc_noprof+0xa5/0x570 [ 137.129779][ T8305] ? security_sk_alloc+0x52/0x120 [ 137.129807][ T8305] security_sk_alloc+0x52/0x120 [ 137.129836][ T8305] sk_prot_alloc+0xc2/0x190 [ 137.129862][ T8305] sk_alloc+0x34/0x360 [ 137.129929][ T8305] inet6_create+0x3bd/0x870 [ 137.129963][ T8305] __sock_create+0x2e9/0x5b0 [ 137.129998][ T8305] sock_create_kern+0x38/0x50 [ 137.130108][ T8305] mptcp_subflow_create_socket+0x84/0x500 [ 137.130185][ T8305] ? security_inode_alloc+0x37/0x100 [ 137.130213][ T8305] __mptcp_nmpc_sk+0xb5/0x3d0 [ 137.130239][ T8305] mptcp_sendmsg_fastopen+0x90/0x320 [ 137.130264][ T8305] mptcp_sendmsg+0xcf0/0xf50 [ 137.130305][ T8305] ? avc_has_perm+0xf7/0x180 [ 137.130372][ T8305] ? selinux_socket_sendmsg+0x175/0x1b0 [ 137.130405][ T8305] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 137.130479][ T8305] inet6_sendmsg+0xc5/0xd0 [ 137.130518][ T8305] __sock_sendmsg+0x8b/0x180 [ 137.130548][ T8305] ____sys_sendmsg+0x31e/0x4e0 [ 137.130626][ T8305] ___sys_sendmsg+0x17b/0x1d0 [ 137.130666][ T8305] __x64_sys_sendmsg+0xd4/0x160 [ 137.130725][ T8305] x64_sys_call+0x191e/0x3000 [ 137.130748][ T8305] do_syscall_64+0xd2/0x200 [ 137.130793][ T8305] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 137.130820][ T8305] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 137.130893][ T8305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.130914][ T8305] RIP: 0033:0x7f497981eec9 [ 137.130930][ T8305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.130947][ T8305] RSP: 002b:00007f497827f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.130967][ T8305] RAX: ffffffffffffffda RBX: 00007f4979a75fa0 RCX: 00007f497981eec9 [ 137.131010][ T8305] RDX: 0000000020000081 RSI: 0000200000000780 RDI: 0000000000000005 [ 137.131050][ T8305] RBP: 00007f497827f090 R08: 0000000000000000 R09: 0000000000000000 [ 137.131065][ T8305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.131077][ T8305] R13: 00007f4979a76038 R14: 00007f4979a75fa0 R15: 00007ffe288ed658 [ 137.131098][ T8305] [ 137.425426][ T8309] loop1: detected capacity change from 0 to 164 [ 137.472975][ T8309] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 137.485628][ T8309] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 137.494048][ T8309] Symlink component flag not implemented [ 137.499923][ T8309] Symlink component flag not implemented [ 137.506198][ T8309] Symlink component flag not implemented (7) [ 137.512893][ T8309] Symlink component flag not implemented (116) [ 137.540172][ T8323] loop8: detected capacity change from 0 to 128 [ 137.547389][ T8323] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 137.559797][ T8326] loop1: detected capacity change from 0 to 512 [ 137.573200][ T8326] loop1: detected capacity change from 0 to 1024 [ 137.582079][ T8323] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 137.605333][ T57] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 137.607233][ T8326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.636224][ T8329] FAULT_INJECTION: forcing a failure. [ 137.636224][ T8329] name failslab, interval 1, probability 0, space 0, times 0 [ 137.649204][ T8329] CPU: 1 UID: 0 PID: 8329 Comm: syz.8.1601 Not tainted syzkaller #0 PREEMPT(voluntary) [ 137.649325][ T8329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 137.649338][ T8329] Call Trace: [ 137.649345][ T8329] [ 137.649353][ T8329] __dump_stack+0x1d/0x30 [ 137.649420][ T8329] dump_stack_lvl+0xe8/0x140 [ 137.649452][ T8329] dump_stack+0x15/0x1b [ 137.649484][ T8329] should_fail_ex+0x265/0x280 [ 137.649560][ T8329] should_failslab+0x8c/0xb0 [ 137.649590][ T8329] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 137.649620][ T8329] ? __alloc_skb+0x101/0x320 [ 137.649656][ T8329] __alloc_skb+0x101/0x320 [ 137.649749][ T8329] netlink_alloc_large_skb+0xbf/0xf0 [ 137.649787][ T8329] netlink_sendmsg+0x3cf/0x6b0 [ 137.649815][ T8329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.649841][ T8329] __sock_sendmsg+0x142/0x180 [ 137.649945][ T8329] ____sys_sendmsg+0x31e/0x4e0 [ 137.649975][ T8329] ___sys_sendmsg+0x17b/0x1d0 [ 137.650013][ T8329] __x64_sys_sendmsg+0xd4/0x160 [ 137.650039][ T8329] x64_sys_call+0x191e/0x3000 [ 137.650061][ T8329] do_syscall_64+0xd2/0x200 [ 137.650126][ T8329] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 137.650160][ T8329] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 137.650217][ T8329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.650245][ T8329] RIP: 0033:0x7ff80b73eec9 [ 137.650264][ T8329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.650366][ T8329] RSP: 002b:00007ff80a1a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.650385][ T8329] RAX: ffffffffffffffda RBX: 00007ff80b995fa0 RCX: 00007ff80b73eec9 [ 137.650400][ T8329] RDX: 0000000000000000 RSI: 0000200000004380 RDI: 0000000000000003 [ 137.650415][ T8329] RBP: 00007ff80a1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 137.650507][ T8329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.650523][ T8329] R13: 00007ff80b996038 R14: 00007ff80b995fa0 R15: 00007ffca429c7b8 [ 137.650547][ T8329] [ 137.869621][ T8321] loop2: detected capacity change from 0 to 32768 [ 137.900064][ T8195] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 137.904245][ T8335] loop8: detected capacity change from 0 to 256 [ 137.913741][ T8335] FAT-fs (loop8): bogus logical sector size 128 [ 137.915572][ T8195] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 137.920057][ T8335] FAT-fs (loop8): Can't find a valid FAT filesystem [ 137.937803][ T8195] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 137.948112][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1603'. [ 137.948454][ T8321] loop2: p1 p2 p3 < p5 p6 > [ 137.957100][ T8335] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1603'. [ 137.957132][ T8335] netlink: 'syz.8.1603': attribute type 19 has an invalid length. [ 137.978676][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1603'. [ 137.988734][ T8321] loop2: p2 size 16775168 extends beyond EOD, truncated [ 137.990200][ T8195] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 137.996895][ T8321] loop2: p5 start 4294970168 is beyond EOD, truncated [ 138.011792][ T8336] atomic_op ffff8881011de928 conn xmit_atomic 0000000000000000 [ 138.052796][ T8195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.070559][ T8195] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.093308][ T3872] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.100937][ T3872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.111968][ T3872] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.119131][ T5938] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.119728][ T3872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.136223][ T8346] loop8: detected capacity change from 0 to 128 [ 138.151354][ T8346] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 138.164569][ T8346] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 138.180582][ T29] kauditd_printk_skb: 409 callbacks suppressed [ 138.180598][ T29] audit: type=1400 audit(1759774533.146:8694): avc: denied { name_bind } for pid=8348 comm="syz.1.1607" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 138.250762][ T29] audit: type=1400 audit(1759774533.186:8695): avc: denied { create } for pid=8345 comm="syz.8.1605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 138.270751][ T29] audit: type=1400 audit(1759774533.186:8696): avc: denied { connect } for pid=8345 comm="syz.8.1605" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 138.290922][ T29] audit: type=1326 audit(1759774533.186:8697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8345 comm="syz.8.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80b73eec9 code=0x7ffc0000 [ 138.301066][ T8195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.314336][ T29] audit: type=1326 audit(1759774533.186:8698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8345 comm="syz.8.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff80b73eec9 code=0x7ffc0000 [ 138.344662][ T29] audit: type=1326 audit(1759774533.186:8699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8345 comm="syz.8.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80b73eec9 code=0x7ffc0000 [ 138.368150][ T29] audit: type=1326 audit(1759774533.186:8700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8345 comm="syz.8.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff80b73eec9 code=0x7ffc0000 [ 138.391655][ T29] audit: type=1326 audit(1759774533.186:8701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8345 comm="syz.8.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80b73eec9 code=0x7ffc0000 [ 138.415169][ T29] audit: type=1326 audit(1759774533.186:8702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8345 comm="syz.8.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff80b73eec9 code=0x7ffc0000 [ 138.438871][ T29] audit: type=1326 audit(1759774533.186:8703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8345 comm="syz.8.1605" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff80b73eec9 code=0x7ffc0000 [ 138.535666][ T8195] veth0_vlan: entered promiscuous mode [ 138.557228][ T8195] veth1_vlan: entered promiscuous mode [ 138.564435][ T174] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 138.590557][ T8195] veth0_macvtap: entered promiscuous mode [ 138.603322][ T8195] veth1_macvtap: entered promiscuous mode [ 138.615724][ T8195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.634158][ T8379] hub 9-0:1.0: USB hub found [ 138.637898][ T8195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.651265][ T8379] hub 9-0:1.0: 8 ports detected [ 138.677925][ T8379] loop2: detected capacity change from 0 to 1024 [ 138.689106][ T8379] EXT4-fs: inline encryption not supported [ 138.695163][ T8379] EXT4-fs: Ignoring removed i_version option [ 138.716575][ T8379] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 138.756465][ T8379] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.1612: lblock 2 mapped to illegal pblock 2 (length 1) [ 138.807050][ T8389] loop8: detected capacity change from 0 to 512 [ 138.816038][ T8379] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.1612: lblock 0 mapped to illegal pblock 48 (length 1) [ 138.839001][ T8389] EXT4-fs error (device loop8): ext4_xattr_inode_iget:446: comm syz.8.1614: error while reading EA inode 32 err=-116 [ 138.857824][ T8379] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1612: Failed to acquire dquot type 0 [ 138.871525][ T8389] EXT4-fs (loop8): Remounting filesystem read-only [ 138.884763][ T8389] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 138.899799][ T8379] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 138.917672][ T8389] EXT4-fs (loop8): 1 orphan inode deleted [ 138.925817][ T8379] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.1612: mark_inode_dirty error [ 138.941998][ T8389] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.960619][ T8379] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 138.981117][ T8379] EXT4-fs (loop2): 1 orphan inode deleted [ 139.001548][ T8379] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.058002][ T174] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 139.075289][ T4061] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.088646][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.098191][ T174] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0 [ 139.111567][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.121219][ T57] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.135317][ T8379] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.138261][ T52] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.182129][ T8379] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz.2.1612: Invalid inode table block 1 in block_group 0 [ 139.206262][ T8396] loop8: detected capacity change from 0 to 512 [ 139.213204][ T8379] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 139.231442][ T8379] EXT4-fs error (device loop2): ext4_quota_off:7229: inode #3: comm syz.2.1612: mark_inode_dirty error [ 139.243431][ T8396] loop8: detected capacity change from 0 to 1024 [ 139.257034][ T8396] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.367075][ T8406] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1618'. [ 139.421286][ T8410] IPv6: sit1: Disabled Multicast RS [ 139.499115][ T8417] random: crng reseeded on system resumption [ 139.516457][ T8417] Restarting kernel threads ... [ 139.529296][ T8419] loop2: detected capacity change from 0 to 512 [ 139.530601][ T8417] Done restarting kernel threads. [ 139.558299][ T8419] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.580680][ T8419] ext4 filesystem being mounted at /151/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 139.636295][ T8419] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #2: comm syz.2.1624: corrupted inode contents [ 139.673595][ T8419] EXT4-fs error (device loop2): ext4_dirty_inode:6509: inode #2: comm syz.2.1624: mark_inode_dirty error [ 139.714602][ T8419] EXT4-fs error (device loop2): ext4_do_update_inode:5624: inode #2: comm syz.2.1624: corrupted inode contents [ 139.776148][ T8438] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1631'. [ 139.808840][ T8419] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.1624: mark_inode_dirty error [ 139.839687][ T6269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.960446][ T8456] loop0: detected capacity change from 0 to 512 [ 139.971526][ T8455] loop7: detected capacity change from 0 to 512 [ 139.989500][ T8456] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 140.009596][ T8455] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.028438][ T8455] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 140.040223][ T8456] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.055449][ T4061] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.068968][ T8455] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #2: comm syz.7.1640: corrupted inode contents [ 140.078484][ T8456] ext4 filesystem being mounted at /272/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.102860][ T8455] EXT4-fs error (device loop7): ext4_dirty_inode:6509: inode #2: comm syz.7.1640: mark_inode_dirty error [ 140.142007][ T8456] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.1639: corrupted xattr block 19: overlapping e_value [ 140.164596][ T8462] __nla_validate_parse: 1 callbacks suppressed [ 140.164613][ T8462] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1640'. [ 140.189422][ T8456] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 140.194919][ T8466] netlink: 'syz.0.1639': attribute type 3 has an invalid length. [ 140.206198][ T8466] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1639'. [ 140.206416][ T8455] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #2: comm syz.7.1640: corrupted inode contents [ 140.227261][ T8456] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.1639: corrupted xattr block 19: overlapping e_value [ 140.255297][ T8455] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.1640: mark_inode_dirty error [ 140.266893][ T8456] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 140.277863][ T8469] EXT4-fs warning (device loop7): ext4_empty_dir:3089: inode #18: comm syz.7.1640: directory missing '.' [ 140.291554][ T8456] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.1639: corrupted xattr block 19: overlapping e_value [ 140.375802][ T8195] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.419019][ T4184] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.618475][ T8487] hub 9-0:1.0: USB hub found [ 140.626448][ T8487] hub 9-0:1.0: 8 ports detected [ 140.672800][ T8492] loop2: detected capacity change from 0 to 512 [ 140.709250][ T8492] netlink: 4 bytes leftover after parsing attributes in process `¬í'. [ 140.739103][ T8487] loop1: detected capacity change from 0 to 1024 [ 140.767114][ T31] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.776336][ T8492] netlink: 4 bytes leftover after parsing attributes in process `¬í'. [ 140.790314][ T8487] EXT4-fs: inline encryption not supported [ 140.796251][ T8487] EXT4-fs: Ignoring removed i_version option [ 140.820091][ T31] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.846828][ T8487] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 140.864435][ T31] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.898963][ T8487] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.1650: lblock 2 mapped to illegal pblock 2 (length 1) [ 140.920773][ T31] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 140.949470][ T8494] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 140.956029][ T8494] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 140.964203][ T8494] vhci_hcd vhci_hcd.0: Device attached [ 140.976323][ T8487] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.1650: lblock 0 mapped to illegal pblock 48 (length 1) [ 141.010099][ T8502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1654'. [ 141.038583][ T8487] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.1650: Failed to acquire dquot type 0 [ 141.070780][ T8487] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 141.085198][ T8487] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.1650: mark_inode_dirty error [ 141.100387][ T8495] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(5) [ 141.107050][ T8495] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 141.115327][ T8495] vhci_hcd vhci_hcd.0: Device attached [ 141.121420][ T8487] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 141.131993][ T8487] EXT4-fs (loop1): 1 orphan inode deleted [ 141.132421][ T8487] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.132831][ T31] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 141.190198][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0 [ 141.191153][ T8487] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.191449][ T8487] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz.1.1650: Invalid inode table block 1 in block_group 0 [ 141.191541][ T8487] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 141.191655][ T8487] EXT4-fs error (device loop1): ext4_quota_off:7229: inode #3: comm syz.1.1650: mark_inode_dirty error [ 141.298350][ T23] usb 2-1: SetAddress Request (12) to port 0 [ 141.298379][ T23] usb 2-1: new SuperSpeed USB device number 12 using vhci_hcd [ 141.318345][ T8500] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 141.318525][ T8499] vhci_hcd: connection closed [ 141.320247][ T57] vhci_hcd: stop threads [ 141.320261][ T57] vhci_hcd: release socket [ 141.320293][ T57] vhci_hcd: disconnect device [ 141.398164][ T3387] usb 16-1: SetAddress Request (2) to port 0 [ 141.398198][ T3387] usb 16-1: new SuperSpeed USB device number 2 using vhci_hcd [ 141.465926][ T8504] loop8: detected capacity change from 0 to 32768 [ 141.498857][ T8504] loop8: p1 p2 p3 < p5 p6 > [ 141.509564][ T8504] loop8: p2 size 16775168 extends beyond EOD, truncated [ 141.517647][ T8504] loop8: p5 start 4294970168 is beyond EOD, truncated [ 141.564691][ T8505] vhci_hcd: connection reset by peer [ 141.570496][ T57] vhci_hcd: stop threads [ 141.574767][ T57] vhci_hcd: release socket [ 141.579298][ T57] vhci_hcd: disconnect device [ 141.846747][ T8519] loop8: detected capacity change from 0 to 164 [ 141.853711][ T8519] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 141.864540][ T8519] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 141.864801][ T8519] Symlink component flag not implemented [ 141.864810][ T8519] Symlink component flag not implemented [ 141.865168][ T8519] Symlink component flag not implemented (7) [ 141.890706][ T8519] Symlink component flag not implemented (116) [ 141.964957][ T8523] FAULT_INJECTION: forcing a failure. [ 141.964957][ T8523] name failslab, interval 1, probability 0, space 0, times 0 [ 141.964989][ T8523] CPU: 0 UID: 0 PID: 8523 Comm: syz.0.1663 Not tainted syzkaller #0 PREEMPT(voluntary) [ 141.965033][ T8523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 141.965047][ T8523] Call Trace: [ 141.965055][ T8523] [ 141.965063][ T8523] __dump_stack+0x1d/0x30 [ 141.965101][ T8523] dump_stack_lvl+0xe8/0x140 [ 141.965137][ T8523] dump_stack+0x15/0x1b [ 141.965174][ T8523] should_fail_ex+0x265/0x280 [ 141.965212][ T8523] should_failslab+0x8c/0xb0 [ 141.965240][ T8523] __kmalloc_noprof+0xa5/0x570 [ 141.965327][ T8523] ? iter_file_splice_write+0xf9/0xa60 [ 141.965353][ T8523] iter_file_splice_write+0xf9/0xa60 [ 141.965376][ T8523] ? copy_splice_read+0x623/0x660 [ 141.965431][ T8523] ? copy_splice_read+0x623/0x660 [ 141.965455][ T8523] ? copy_splice_read+0x623/0x660 [ 141.965478][ T8523] ? __pfx_iter_file_splice_write+0x10/0x10 [ 141.965502][ T8523] direct_splice_actor+0x156/0x2a0 [ 141.965548][ T8523] ? __pfx_copy_splice_read+0x1/0x10 [ 141.965569][ T8523] splice_direct_to_actor+0x312/0x680 [ 141.965593][ T8523] ? __pfx_direct_splice_actor+0x10/0x10 [ 141.965620][ T8523] do_splice_direct+0xda/0x150 [ 141.965657][ T8523] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 141.965687][ T8523] do_sendfile+0x380/0x650 [ 141.965832][ T8523] __x64_sys_sendfile64+0x105/0x150 [ 141.965922][ T8523] x64_sys_call+0x2bb4/0x3000 [ 141.965945][ T8523] do_syscall_64+0xd2/0x200 [ 141.965996][ T8523] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 141.966026][ T8523] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 141.966053][ T8523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.966137][ T8523] RIP: 0033:0x7fcfca56eec9 [ 141.966154][ T8523] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.966175][ T8523] RSP: 002b:00007fcfc8fcf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 141.966251][ T8523] RAX: ffffffffffffffda RBX: 00007fcfca7c5fa0 RCX: 00007fcfca56eec9 [ 141.966265][ T8523] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 141.966278][ T8523] RBP: 00007fcfc8fcf090 R08: 0000000000000000 R09: 0000000000000000 [ 141.966291][ T8523] R10: 000000000000000b R11: 0000000000000246 R12: 0000000000000001 [ 141.966333][ T8523] R13: 00007fcfca7c6038 R14: 00007fcfca7c5fa0 R15: 00007ffdba251418 [ 141.966353][ T8523] [ 142.088906][ T8530] loop8: detected capacity change from 0 to 512 [ 142.237606][ T8535] FAULT_INJECTION: forcing a failure. [ 142.237606][ T8535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.241309][ T8530] EXT4-fs: Ignoring removed mblk_io_submit option [ 142.246299][ T8535] CPU: 1 UID: 0 PID: 8535 Comm: syz.7.1668 Not tainted syzkaller #0 PREEMPT(voluntary) [ 142.246350][ T8535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 142.246368][ T8535] Call Trace: [ 142.246378][ T8535] [ 142.246387][ T8535] __dump_stack+0x1d/0x30 [ 142.246439][ T8535] dump_stack_lvl+0xe8/0x140 [ 142.246485][ T8535] dump_stack+0x15/0x1b [ 142.246534][ T8535] should_fail_ex+0x265/0x280 [ 142.246580][ T8535] should_fail+0xb/0x20 [ 142.246679][ T8535] should_fail_usercopy+0x1a/0x20 [ 142.246842][ T8535] _copy_from_iter+0xd2/0xe80 [ 142.246878][ T8535] ? __build_skb_around+0x1ab/0x200 [ 142.246924][ T8535] ? __alloc_skb+0x223/0x320 [ 142.246981][ T8535] netlink_sendmsg+0x471/0x6b0 [ 142.247028][ T8535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.247071][ T8535] __sock_sendmsg+0x142/0x180 [ 142.247109][ T8535] ____sys_sendmsg+0x31e/0x4e0 [ 142.247141][ T8535] ___sys_sendmsg+0x17b/0x1d0 [ 142.247189][ T8535] __x64_sys_sendmsg+0xd4/0x160 [ 142.247225][ T8535] x64_sys_call+0x191e/0x3000 [ 142.247309][ T8535] do_syscall_64+0xd2/0x200 [ 142.247398][ T8535] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 142.247437][ T8535] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 142.247525][ T8535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.247559][ T8535] RIP: 0033:0x7f02c81aeec9 [ 142.247581][ T8535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.247607][ T8535] RSP: 002b:00007f02c6c17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.247655][ T8535] RAX: ffffffffffffffda RBX: 00007f02c8405fa0 RCX: 00007f02c81aeec9 [ 142.247672][ T8535] RDX: 0000000000000000 RSI: 00002000000037c0 RDI: 0000000000000003 [ 142.247690][ T8535] RBP: 00007f02c6c17090 R08: 0000000000000000 R09: 0000000000000000 [ 142.247707][ T8535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.247798][ T8535] R13: 00007f02c8406038 R14: 00007f02c8405fa0 R15: 00007fff4a66dec8 [ 142.247825][ T8535] [ 142.478980][ T8530] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 142.500739][ T8530] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0082] [ 142.509204][ T8530] System zones: 1-12 [ 142.513435][ T8543] loop2: detected capacity change from 0 to 164 [ 142.521081][ T8530] EXT4-fs (loop8): 1 truncate cleaned up [ 142.529607][ T8530] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.542958][ T8543] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 142.554321][ T8543] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 142.568390][ T8543] Symlink component flag not implemented [ 142.574106][ T8543] Symlink component flag not implemented [ 142.580006][ T8543] Symlink component flag not implemented (7) [ 142.586154][ T8543] Symlink component flag not implemented (116) [ 142.595428][ T4061] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.606366][ T8550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1675'. [ 142.615904][ T8550] netlink: 'syz.1.1675': attribute type 1 has an invalid length. [ 142.619977][ T8553] FAULT_INJECTION: forcing a failure. [ 142.619977][ T8553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.628727][ T8551] random: crng reseeded on system resumption [ 142.641990][ T8553] CPU: 0 UID: 0 PID: 8553 Comm: syz.8.1674 Not tainted syzkaller #0 PREEMPT(voluntary) [ 142.642030][ T8553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 142.642049][ T8553] Call Trace: [ 142.642059][ T8553] [ 142.642070][ T8553] __dump_stack+0x1d/0x30 [ 142.642197][ T8553] dump_stack_lvl+0xe8/0x140 [ 142.642274][ T8553] dump_stack+0x15/0x1b [ 142.642317][ T8553] should_fail_ex+0x265/0x280 [ 142.642377][ T8553] should_fail+0xb/0x20 [ 142.642400][ T8553] should_fail_usercopy+0x1a/0x20 [ 142.642429][ T8553] _copy_from_iter+0xd2/0xe80 [ 142.642487][ T8553] ? __build_skb_around+0x1ab/0x200 [ 142.642531][ T8553] ? __alloc_skb+0x223/0x320 [ 142.642576][ T8553] netlink_sendmsg+0x471/0x6b0 [ 142.642606][ T8553] ? __pfx_netlink_sendmsg+0x10/0x10 [ 142.642692][ T8553] __sock_sendmsg+0x142/0x180 [ 142.642805][ T8553] ____sys_sendmsg+0x31e/0x4e0 [ 142.642846][ T8553] ___sys_sendmsg+0x17b/0x1d0 [ 142.642893][ T8553] __x64_sys_sendmsg+0xd4/0x160 [ 142.642995][ T8553] x64_sys_call+0x191e/0x3000 [ 142.643024][ T8553] do_syscall_64+0xd2/0x200 [ 142.643142][ T8553] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 142.643271][ T8553] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 142.643306][ T8553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.643335][ T8553] RIP: 0033:0x7ff80b73eec9 [ 142.643359][ T8553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.643435][ T8553] RSP: 002b:00007ff80a1a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 142.643453][ T8553] RAX: ffffffffffffffda RBX: 00007ff80b995fa0 RCX: 00007ff80b73eec9 [ 142.643465][ T8553] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 142.643476][ T8553] RBP: 00007ff80a1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 142.643487][ T8553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.643502][ T8553] R13: 00007ff80b996038 R14: 00007ff80b995fa0 R15: 00007ffca429c7b8 [ 142.643537][ T8553] [ 142.952811][ T8571] loop7: detected capacity change from 0 to 1024 [ 142.959625][ T8571] EXT4-fs: inline encryption not supported [ 142.965504][ T8571] EXT4-fs: Ignoring removed i_version option [ 142.972822][ T8571] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 142.989632][ T8571] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.1681: lblock 2 mapped to illegal pblock 2 (length 1) [ 143.023155][ T8571] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.1681: lblock 0 mapped to illegal pblock 48 (length 1) [ 143.048093][ T8571] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.1681: Failed to acquire dquot type 0 [ 143.060124][ T8571] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 143.075779][ T8571] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.1681: mark_inode_dirty error [ 143.082904][ T8578] FAULT_INJECTION: forcing a failure. [ 143.082904][ T8578] name failslab, interval 1, probability 0, space 0, times 0 [ 143.100481][ T8578] CPU: 0 UID: 0 PID: 8578 Comm: syz.2.1684 Not tainted syzkaller #0 PREEMPT(voluntary) [ 143.100516][ T8578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 143.100532][ T8578] Call Trace: [ 143.100539][ T8578] [ 143.100560][ T8578] __dump_stack+0x1d/0x30 [ 143.100603][ T8578] dump_stack_lvl+0xe8/0x140 [ 143.100641][ T8578] dump_stack+0x15/0x1b [ 143.100677][ T8578] should_fail_ex+0x265/0x280 [ 143.100734][ T8578] should_failslab+0x8c/0xb0 [ 143.100765][ T8578] kmem_cache_alloc_noprof+0x50/0x480 [ 143.100851][ T8578] ? getname_flags+0x80/0x3b0 [ 143.100886][ T8578] getname_flags+0x80/0x3b0 [ 143.100980][ T8578] io_symlinkat_prep+0x157/0x1d0 [ 143.101082][ T8578] io_submit_sqes+0x5ec/0x1060 [ 143.101127][ T8578] __se_sys_io_uring_enter+0x1c1/0x1b70 [ 143.101167][ T8578] ? 0xffffffff81000000 [ 143.101182][ T8578] ? __rcu_read_unlock+0x4f/0x70 [ 143.101236][ T8578] ? get_pid_task+0x96/0xd0 [ 143.101325][ T8578] ? proc_fail_nth_write+0x13b/0x160 [ 143.101366][ T8578] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 143.101400][ T8578] ? vfs_write+0x7e8/0x960 [ 143.101425][ T8578] ? __rcu_read_unlock+0x4f/0x70 [ 143.101562][ T8578] ? __fget_files+0x184/0x1c0 [ 143.101594][ T8578] ? fput+0x8f/0xc0 [ 143.101632][ T8578] __x64_sys_io_uring_enter+0x78/0x90 [ 143.101671][ T8578] x64_sys_call+0x2df0/0x3000 [ 143.101695][ T8578] do_syscall_64+0xd2/0x200 [ 143.101792][ T8578] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 143.101836][ T8578] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 143.101866][ T8578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.101892][ T8578] RIP: 0033:0x7f497981eec9 [ 143.101929][ T8578] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.101951][ T8578] RSP: 002b:00007f497827f038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 143.101974][ T8578] RAX: ffffffffffffffda RBX: 00007f4979a75fa0 RCX: 00007f497981eec9 [ 143.101990][ T8578] RDX: 0000000000000000 RSI: 00000000000047ba RDI: 0000000000000003 [ 143.102005][ T8578] RBP: 00007f497827f090 R08: 0000000000000000 R09: 0000000000000000 [ 143.102019][ T8578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.102033][ T8578] R13: 00007f4979a76038 R14: 00007f4979a75fa0 R15: 00007ffe288ed658 [ 143.102113][ T8578] [ 143.102546][ T8571] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 143.193307][ T8584] FAULT_INJECTION: forcing a failure. [ 143.193307][ T8584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.218160][ T8571] EXT4-fs (loop7): 1 orphan inode deleted [ 143.218497][ T8584] CPU: 0 UID: 0 PID: 8584 Comm: syz.0.1687 Not tainted syzkaller #0 PREEMPT(voluntary) [ 143.218541][ T8584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 143.218563][ T8584] Call Trace: [ 143.218574][ T8584] [ 143.218585][ T8584] __dump_stack+0x1d/0x30 [ 143.218632][ T8584] dump_stack_lvl+0xe8/0x140 [ 143.218756][ T8584] dump_stack+0x15/0x1b [ 143.218864][ T8584] should_fail_ex+0x265/0x280 [ 143.218978][ T8584] should_fail+0xb/0x20 [ 143.219004][ T8584] should_fail_usercopy+0x1a/0x20 [ 143.219023][ T8584] _copy_from_user+0x1c/0xb0 [ 143.219062][ T8584] __copy_msghdr+0x244/0x300 [ 143.219091][ T8584] ___sys_sendmsg+0x109/0x1d0 [ 143.219185][ T8584] __x64_sys_sendmsg+0xd4/0x160 [ 143.219220][ T8584] x64_sys_call+0x191e/0x3000 [ 143.219247][ T8584] do_syscall_64+0xd2/0x200 [ 143.219285][ T8584] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 143.219343][ T8584] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 143.219453][ T8584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.219483][ T8584] RIP: 0033:0x7fcfca56eec9 [ 143.219503][ T8584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.219538][ T8584] RSP: 002b:00007fcfc8fcf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 143.219573][ T8584] RAX: ffffffffffffffda RBX: 00007fcfca7c5fa0 RCX: 00007fcfca56eec9 [ 143.219591][ T8584] RDX: 0000000000000000 RSI: 0000200000001600 RDI: 0000000000000003 [ 143.219608][ T8584] RBP: 00007fcfc8fcf090 R08: 0000000000000000 R09: 0000000000000000 [ 143.219624][ T8584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 143.219641][ T8584] R13: 00007fcfca7c6038 R14: 00007fcfca7c5fa0 R15: 00007ffdba251418 [ 143.219738][ T8584] [ 143.233756][ T12] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 143.337369][ T8569] loop1: detected capacity change from 0 to 32768 [ 143.346701][ T8571] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.437780][ T12] __quota_error: 218 callbacks suppressed [ 143.437808][ T12] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 143.521755][ T29] audit: type=1400 audit(1759774538.486:8914): avc: denied { write } for pid=8590 comm="syz.8.1690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 143.528838][ T12] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:0: Failed to release dquot type 0 [ 143.547806][ T29] audit: type=1400 audit(1759774538.496:8915): avc: denied { ioctl } for pid=8590 comm="syz.8.1690" path="socket:[27461]" dev="sockfs" ino=27461 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 143.659089][ T8571] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.676522][ T29] audit: type=1400 audit(1759774538.506:8916): avc: denied { bind } for pid=8590 comm="syz.8.1690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 143.686834][ T8597] xt_socket: unknown flags 0x50 [ 143.722706][ T8569] loop1: p1 p2 p3 < p5 p6 > [ 143.728286][ T8571] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz.7.1681: Invalid inode table block 1 in block_group 0 [ 143.746755][ T8571] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 143.774252][ T8571] EXT4-fs error (device loop7): ext4_quota_off:7229: inode #3: comm syz.7.1681: mark_inode_dirty error [ 143.789780][ T8569] loop1: p2 size 16775168 extends beyond EOD, truncated [ 143.809551][ T8569] loop1: p5 start 4294970168 is beyond EOD, truncated [ 143.816941][ T29] audit: type=1400 audit(1759774538.576:8917): avc: denied { getopt } for pid=8590 comm="syz.8.1690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 143.854369][ T8598] random: crng reseeded on system resumption [ 143.930025][ T29] audit: type=1400 audit(1759774538.866:8918): avc: denied { read write } for pid=8601 comm="syz.2.1695" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 143.954954][ T29] audit: type=1400 audit(1759774538.866:8919): avc: denied { open } for pid=8601 comm="syz.2.1695" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 143.979633][ T29] audit: type=1400 audit(1759774538.876:8920): avc: denied { name_bind } for pid=8599 comm="syz.7.1694" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 144.013823][ T8604] loop7: detected capacity change from 0 to 512 [ 144.027656][ T8604] loop7: detected capacity change from 0 to 1024 [ 144.039953][ T8604] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.062094][ T29] audit: type=1400 audit(1759774539.026:8921): avc: denied { read open } for pid=8603 comm="syz.7.1696" path="/17/bus/bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 144.087981][ T29] audit: type=1400 audit(1759774539.046:8922): avc: denied { write } for pid=8603 comm="syz.7.1696" name="bus" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 144.120667][ T8614] loop2: detected capacity change from 0 to 512 [ 144.134165][ T8614] loop2: detected capacity change from 0 to 1024 [ 144.143351][ T8614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.144492][ T8609] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1693'. [ 144.201618][ T8195] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.248507][ T6269] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.436709][ T8622] loop0: detected capacity change from 0 to 32768 [ 144.451544][ T8643] loop7: detected capacity change from 0 to 1024 [ 144.458903][ T8643] EXT4-fs: inline encryption not supported [ 144.464803][ T8643] EXT4-fs: Ignoring removed i_version option [ 144.475104][ T8622] loop0: p1 p2 p3 < p5 p6 > [ 144.480078][ T8643] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 144.495337][ T8622] loop0: p2 size 16775168 extends beyond EOD, truncated [ 144.498162][ T8647] IPv6: sit1: Disabled Multicast RS [ 144.510173][ T8643] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.1705: lblock 2 mapped to illegal pblock 2 (length 1) [ 144.514768][ T8622] loop0: p5 start 4294970168 is beyond EOD, truncated [ 144.531413][ T8643] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.1705: lblock 0 mapped to illegal pblock 48 (length 1) [ 144.556813][ T8643] EXT4-fs error (device loop7): ext4_acquire_dquot:6945: comm syz.7.1705: Failed to acquire dquot type 0 [ 144.573362][ T8643] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 144.583095][ T8643] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.1705: mark_inode_dirty error [ 144.594665][ T8643] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 144.605788][ T8643] EXT4-fs (loop7): 1 orphan inode deleted [ 144.612089][ T8643] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.624702][ T52] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 144.639248][ T52] EXT4-fs error (device loop7): ext4_release_dquot:6981: comm kworker/u8:3: Failed to release dquot type 0 [ 144.652036][ T8643] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.663550][ T8643] EXT4-fs error (device loop7): __ext4_get_inode_loc:4832: comm syz.7.1705: Invalid inode table block 1 in block_group 0 [ 144.708150][ T8643] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 144.736272][ T8643] EXT4-fs error (device loop7): ext4_quota_off:7229: inode #3: comm syz.7.1705: mark_inode_dirty error [ 144.751494][ T8655] bridge_slave_0: left allmulticast mode [ 144.757212][ T8655] bridge_slave_0: left promiscuous mode [ 144.763178][ T8655] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.798663][ T8655] bridge_slave_1: left allmulticast mode [ 144.804406][ T8655] bridge_slave_1: left promiscuous mode [ 144.810294][ T8655] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.821283][ T8655] bond0: (slave bond_slave_0): Releasing backup interface [ 144.835720][ T8655] bond0: (slave bond_slave_1): Releasing backup interface [ 144.876068][ T8675] loop8: detected capacity change from 0 to 512 [ 144.886590][ T8655] team0: Port device team_slave_0 removed [ 144.895579][ T8679] loop1: detected capacity change from 0 to 164 [ 144.906641][ T8679] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 144.907859][ T8655] team0: Port device team_slave_1 removed [ 144.926405][ T8675] loop8: detected capacity change from 0 to 1024 [ 144.938442][ T8679] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 144.947581][ T8655] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.955084][ T8655] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.958184][ T8679] Symlink component flag not implemented [ 144.968471][ T8679] Symlink component flag not implemented [ 144.985682][ T8675] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.999506][ T8679] Symlink component flag not implemented (7) [ 145.005562][ T8679] Symlink component flag not implemented (116) [ 145.030635][ T8655] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.038232][ T8655] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.055631][ T8693] loop7: detected capacity change from 0 to 128 [ 145.079800][ T8655] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 145.133267][ T4061] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.157362][ T8703] syz.7.1717: attempt to access beyond end of device [ 145.157362][ T8703] loop7: rw=2049, sector=161, nr_sectors = 9 limit=128 [ 145.174835][ T8703] netlink: 352 bytes leftover after parsing attributes in process `syz.7.1717'. [ 145.186079][ T8673] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 145.192636][ T8673] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 145.200784][ T8673] vhci_hcd vhci_hcd.0: Device attached [ 145.224558][ T8705] vhci_hcd: connection closed [ 145.224809][ T52] vhci_hcd: stop threads [ 145.233958][ T52] vhci_hcd: release socket [ 145.238478][ T52] vhci_hcd: disconnect device [ 145.490092][ T8753] loop2: detected capacity change from 0 to 512 [ 145.523009][ T8753] loop2: detected capacity change from 0 to 1024 [ 145.544796][ T8760] loop8: detected capacity change from 0 to 164 [ 145.555842][ T8760] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 145.567384][ T8760] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 145.585864][ T8760] Symlink component flag not implemented [ 145.591722][ T8760] Symlink component flag not implemented [ 145.609749][ T8760] Symlink component flag not implemented (7) [ 145.615966][ T8760] Symlink component flag not implemented (116) [ 145.951896][ T8802] loop0: detected capacity change from 0 to 512 [ 145.964722][ T8802] loop0: detected capacity change from 0 to 1024 [ 145.966517][ T8800] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1743'. [ 145.996749][ T8804] 9pnet: Could not find request transport: r [ 146.033749][ T8812] loop7: detected capacity change from 0 to 764 [ 146.034028][ T8812] iso9660: Unknown parameter 'ÿÿ18446744073709551615' [ 146.211271][ T8825] FAULT_INJECTION: forcing a failure. [ 146.211271][ T8825] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.211371][ T8825] CPU: 1 UID: 0 PID: 8825 Comm: syz.1.1749 Not tainted syzkaller #0 PREEMPT(voluntary) [ 146.211403][ T8825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 146.211419][ T8825] Call Trace: [ 146.211428][ T8825] [ 146.211438][ T8825] __dump_stack+0x1d/0x30 [ 146.211483][ T8825] dump_stack_lvl+0xe8/0x140 [ 146.211643][ T8825] dump_stack+0x15/0x1b [ 146.211682][ T8825] should_fail_ex+0x265/0x280 [ 146.211750][ T8825] should_fail+0xb/0x20 [ 146.211766][ T8825] should_fail_usercopy+0x1a/0x20 [ 146.211793][ T8825] _copy_from_iter+0xd2/0xe80 [ 146.211861][ T8825] ? __build_skb_around+0x1ab/0x200 [ 146.211898][ T8825] ? __alloc_skb+0x223/0x320 [ 146.211930][ T8825] netlink_sendmsg+0x471/0x6b0 [ 146.211994][ T8825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.212021][ T8825] __sock_sendmsg+0x142/0x180 [ 146.212122][ T8825] ____sys_sendmsg+0x31e/0x4e0 [ 146.212212][ T8825] ___sys_sendmsg+0x17b/0x1d0 [ 146.212247][ T8825] __x64_sys_sendmsg+0xd4/0x160 [ 146.212271][ T8825] x64_sys_call+0x191e/0x3000 [ 146.212354][ T8825] do_syscall_64+0xd2/0x200 [ 146.212385][ T8825] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 146.212411][ T8825] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 146.212435][ T8825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.212501][ T8825] RIP: 0033:0x7fa1eb16eec9 [ 146.212516][ T8825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.212534][ T8825] RSP: 002b:00007fa1e9bd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.212557][ T8825] RAX: ffffffffffffffda RBX: 00007fa1eb3c5fa0 RCX: 00007fa1eb16eec9 [ 146.212574][ T8825] RDX: 000000002008c010 RSI: 0000200000000580 RDI: 0000000000000007 [ 146.212590][ T8825] RBP: 00007fa1e9bd7090 R08: 0000000000000000 R09: 0000000000000000 [ 146.212661][ T8825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.212672][ T8825] R13: 00007fa1eb3c6038 R14: 00007fa1eb3c5fa0 R15: 00007ffe68336ea8 [ 146.212691][ T8825] [ 146.257981][ T8839] ip6gretap0: entered promiscuous mode [ 146.260016][ T8839] ip6gretap0: left promiscuous mode [ 146.351953][ T23] usb 2-1: device descriptor read/8, error -110 [ 146.428209][ T3387] usb 16-1: device descriptor read/8, error -110 [ 146.468108][ T23] usb 2-1: new SuperSpeed USB device number 12 using vhci_hcd [ 146.549788][ T23] usb 2-1: enqueue for inactive port 0 [ 146.549885][ T23] usb 2-1: enqueue for inactive port 0 [ 146.549926][ T23] usb 2-1: enqueue for inactive port 0 [ 146.580211][ T3387] usb 16-1: new SuperSpeed USB device number 2 using vhci_hcd [ 146.598192][ T3387] usb 16-1: enqueue for inactive port 0 [ 146.598216][ T3387] usb 16-1: enqueue for inactive port 0 [ 146.598233][ T3387] usb 16-1: enqueue for inactive port 0 [ 146.616082][ T8843] loop1: detected capacity change from 0 to 32768 [ 146.658586][ T8843] loop1: p1 p2 p3 < p5 p6 > [ 146.659102][ T8843] loop1: p2 size 16775168 extends beyond EOD, truncated [ 146.659991][ T8843] loop1: p5 start 4294970168 is beyond EOD, truncated [ 146.666971][ T8852] loop0: detected capacity change from 0 to 512 [ 146.704653][ T8852] loop0: detected capacity change from 0 to 1024 [ 146.763238][ T8847] loop2: detected capacity change from 0 to 32768 [ 146.814641][ T8847] loop2: p1 p2 p3 < p5 p6 > [ 146.833176][ T8847] loop2: p2 size 16775168 extends beyond EOD, truncated [ 146.847705][ T8847] loop2: p5 start 4294970168 is beyond EOD, truncated [ 146.887983][ T8868] loop0: detected capacity change from 0 to 512 [ 146.904193][ T8868] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 146.930285][ T8868] ext4 filesystem being mounted at /295/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 146.955332][ T8868] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.1765: corrupted xattr block 19: overlapping e_value [ 146.993044][ T8868] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 147.002854][ T8868] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.1765: corrupted xattr block 19: overlapping e_value [ 147.022194][ T8868] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop0 ino=15 [ 147.039777][ T8877] netlink: 'syz.0.1765': attribute type 3 has an invalid length. [ 147.047743][ T8877] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1765'. [ 147.097659][ T8868] EXT4-fs error (device loop0): ext4_xattr_block_get:597: inode #15: comm syz.0.1765: corrupted xattr block 19: overlapping e_value [ 147.191750][ T8889] loop8: detected capacity change from 0 to 512 [ 147.204543][ T8889] loop8: detected capacity change from 0 to 1024 [ 147.337936][ T8876] loop2: detected capacity change from 0 to 32768 [ 147.364014][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1780'. [ 147.376469][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1780'. [ 147.399353][ T8876] loop2: p1 p2 p3 < p5 p6 > [ 147.405079][ T8906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1781'. [ 147.406370][ T8906] FAULT_INJECTION: forcing a failure. [ 147.406370][ T8906] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.428018][ T8906] CPU: 0 UID: 0 PID: 8906 Comm: syz.1.1781 Not tainted syzkaller #0 PREEMPT(voluntary) [ 147.428126][ T8906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 147.428143][ T8906] Call Trace: [ 147.428153][ T8906] [ 147.428164][ T8906] __dump_stack+0x1d/0x30 [ 147.428214][ T8906] dump_stack_lvl+0xe8/0x140 [ 147.428276][ T8906] dump_stack+0x15/0x1b [ 147.428333][ T8906] should_fail_ex+0x265/0x280 [ 147.428379][ T8906] should_fail+0xb/0x20 [ 147.428403][ T8906] should_fail_usercopy+0x1a/0x20 [ 147.428506][ T8906] _copy_from_user+0x1c/0xb0 [ 147.428542][ T8906] ___sys_sendmsg+0xc1/0x1d0 [ 147.428591][ T8906] __x64_sys_sendmsg+0xd4/0x160 [ 147.428625][ T8906] x64_sys_call+0x191e/0x3000 [ 147.428695][ T8906] do_syscall_64+0xd2/0x200 [ 147.428733][ T8906] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 147.428770][ T8906] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 147.428806][ T8906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.428894][ T8906] RIP: 0033:0x7fa1eb16eec9 [ 147.428916][ T8906] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.428940][ T8906] RSP: 002b:00007fa1e9bd7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.428966][ T8906] RAX: ffffffffffffffda RBX: 00007fa1eb3c5fa0 RCX: 00007fa1eb16eec9 [ 147.428985][ T8906] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000007 [ 147.429002][ T8906] RBP: 00007fa1e9bd7090 R08: 0000000000000000 R09: 0000000000000000 [ 147.429019][ T8906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.429055][ T8906] R13: 00007fa1eb3c6038 R14: 00007fa1eb3c5fa0 R15: 00007ffe68336ea8 [ 147.429081][ T8906] [ 147.429318][ T8876] loop2: p2 size 16775168 extends beyond EOD, [ 147.534382][ T8911] loop1: detected capacity change from 0 to 512 [ 147.546980][ T8876] truncated [ 147.563665][ T8911] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 147.573448][ T8876] loop2: p5 start 4294970168 is beyond EOD, [ 147.609912][ T8912] loop8: detected capacity change from 0 to 1024 [ 147.612312][ T8876] truncated [ 147.616217][ T8912] EXT4-fs (loop8): blocks per group (131072) and clusters per group (8192) inconsistent [ 147.652730][ T23] usb usb2-port1: attempt power cycle [ 147.659241][ T8912] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1783'. [ 147.662022][ T8911] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.671714][ T8912] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1783'. [ 147.690629][ T8911] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1784: corrupted xattr block 19: overlapping e_value [ 147.690830][ T8911] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 147.713639][ T8911] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1784: corrupted xattr block 19: overlapping e_value [ 147.728144][ T8911] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop1 ino=15 [ 147.728199][ T8911] EXT4-fs error (device loop1): ext4_xattr_block_get:597: inode #15: comm syz.1.1784: corrupted xattr block 19: overlapping e_value [ 147.742048][ T8911] netlink: 'syz.1.1784': attribute type 3 has an invalid length. [ 147.742070][ T8911] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1784'. [ 147.778589][ T3387] usb usb16-port1: attempt power cycle [ 147.838120][ T8920] loop8: detected capacity change from 0 to 512 [ 147.939079][ T8930] FAULT_INJECTION: forcing a failure. [ 147.939079][ T8930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.952248][ T8930] CPU: 1 UID: 0 PID: 8930 Comm: syz.8.1792 Not tainted syzkaller #0 PREEMPT(voluntary) [ 147.952321][ T8930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 147.952336][ T8930] Call Trace: [ 147.952343][ T8930] [ 147.952351][ T8930] __dump_stack+0x1d/0x30 [ 147.952387][ T8930] dump_stack_lvl+0xe8/0x140 [ 147.952421][ T8930] dump_stack+0x15/0x1b [ 147.952481][ T8930] should_fail_ex+0x265/0x280 [ 147.952520][ T8930] should_fail+0xb/0x20 [ 147.952593][ T8930] should_fail_usercopy+0x1a/0x20 [ 147.952614][ T8930] _copy_from_user+0x1c/0xb0 [ 147.952640][ T8930] __sys_bpf+0x183/0x7c0 [ 147.952726][ T8930] __x64_sys_bpf+0x41/0x50 [ 147.952754][ T8930] x64_sys_call+0x2aee/0x3000 [ 147.952774][ T8930] do_syscall_64+0xd2/0x200 [ 147.952867][ T8930] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 147.952959][ T8930] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 147.952984][ T8930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.953006][ T8930] RIP: 0033:0x7ff80b73eec9 [ 147.953021][ T8930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.953039][ T8930] RSP: 002b:00007ff80a1a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 147.953067][ T8930] RAX: ffffffffffffffda RBX: 00007ff80b995fa0 RCX: 00007ff80b73eec9 [ 147.953080][ T8930] RDX: 0000000000000040 RSI: 00002000000003c0 RDI: 000000000000001c [ 147.953092][ T8930] RBP: 00007ff80a1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 147.953104][ T8930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.953116][ T8930] R13: 00007ff80b996038 R14: 00007ff80b995fa0 R15: 00007ffca429c7b8 [ 147.953135][ T8930] [ 148.330050][ T8944] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1798'. [ 148.373364][ T8944] tipc: Started in network mode [ 148.378334][ T8944] tipc: Node identity fffffe01, cluster identity 64 [ 148.384955][ T8944] tipc: Node number set to 4294966785 [ 148.390517][ T8944] tipc: Cannot configure node identity twice [ 148.439726][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 148.439744][ T29] audit: type=1400 audit(1759774543.406:9054): avc: denied { create } for pid=8942 comm="syz.7.1798" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 148.508664][ T29] audit: type=1400 audit(1759774543.426:9055): avc: denied { ioctl } for pid=8942 comm="syz.7.1798" path="socket:[28050]" dev="sockfs" ino=28050 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 148.534624][ T29] audit: type=1400 audit(1759774543.476:9056): avc: denied { mount } for pid=8942 comm="syz.7.1798" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 148.691144][ T29] audit: type=1400 audit(1759774543.596:9057): avc: denied { read write } for pid=8195 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 148.691261][ T29] audit: type=1400 audit(1759774543.596:9058): avc: denied { open } for pid=8195 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 148.691291][ T29] audit: type=1400 audit(1759774543.596:9059): avc: denied { ioctl } for pid=8195 comm="syz-executor" path="/dev/loop7" dev="devtmpfs" ino=107 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 148.691320][ T29] audit: type=1400 audit(1759774543.606:9060): avc: denied { prog_load } for pid=8936 comm="syz.0.1795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 148.691411][ T29] audit: type=1400 audit(1759774543.606:9061): avc: denied { bpf } for pid=8936 comm="syz.0.1795" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 148.691434][ T29] audit: type=1400 audit(1759774543.606:9062): avc: denied { perfmon } for pid=8936 comm="syz.0.1795" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 148.691468][ T29] audit: type=1400 audit(1759774543.646:9063): avc: denied { map_create } for pid=8956 comm="syz.1.1801" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 148.709854][ T8955] lo speed is unknown, defaulting to 1000 [ 149.062798][ T8961] loop0: detected capacity change from 0 to 512 [ 149.241483][ T8966] vhci_hcd: default hub control req: 800f v0000 i0000 l31125 [ 149.256995][ T8968] sctp: [Deprecated]: syz.7.1805 (pid 8968) Use of struct sctp_assoc_value in delayed_ack socket option. [ 149.256995][ T8968] Use struct sctp_sack_info instead [ 149.301668][ T8969] loop0: detected capacity change from 0 to 512 [ 149.342586][ T8969] ext4 filesystem being mounted at /299/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.353977][ T8973] loop7: detected capacity change from 0 to 164 [ 149.415197][ T8973] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 149.433408][ T8973] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 149.433534][ T8973] Symlink component flag not implemented [ 149.433561][ T8973] Symlink component flag not implemented [ 149.433827][ T8973] Symlink component flag not implemented (7) [ 149.433839][ T8973] Symlink component flag not implemented (116) [ 149.475432][ T8975] loop0: detected capacity change from 0 to 512 [ 149.475725][ T8975] EXT4-fs: test_dummy_encryption option not supported [ 149.508462][ T23] usb usb2-port1: unable to enumerate USB device [ 149.585154][ T8984] loop7: detected capacity change from 0 to 512 [ 149.587533][ T8988] loop2: detected capacity change from 0 to 1024 [ 149.595148][ T8988] EXT4-fs: inline encryption not supported [ 149.623723][ T8988] EXT4-fs: Ignoring removed i_version option [ 149.633381][ T8984] ext4 filesystem being mounted at /37/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 149.681924][ T8984] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #2: comm syz.7.1811: corrupted inode contents [ 149.714352][ T8984] EXT4-fs error (device loop7): ext4_dirty_inode:6509: inode #2: comm syz.7.1811: mark_inode_dirty error [ 149.714592][ T8984] EXT4-fs error (device loop7): ext4_do_update_inode:5624: inode #2: comm syz.7.1811: corrupted inode contents [ 149.714701][ T8984] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.1811: mark_inode_dirty error [ 149.738581][ T8984] EXT4-fs warning (device loop7): ext4_empty_dir:3089: inode #18: comm syz.7.1811: directory missing '.' [ 149.746799][ T8988] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 149.748501][ T8988] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.1813: lblock 2 mapped to illegal pblock 2 (length 1) [ 149.748688][ T8988] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.1813: lblock 0 mapped to illegal pblock 48 (length 1) [ 149.748760][ T8988] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1813: Failed to acquire dquot type 0 [ 149.748940][ T8988] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 149.749085][ T8988] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.1813: mark_inode_dirty error [ 149.749157][ T8988] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 149.749186][ T8988] EXT4-fs (loop2): 1 orphan inode deleted [ 149.749901][ T12] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 149.750063][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:0: Failed to release dquot type 0 [ 149.762725][ T3387] usb usb16-port1: unable to enumerate USB device [ 149.764654][ T8988] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz.2.1813: Invalid inode table block 1 in block_group 0 [ 149.764753][ T8988] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 149.764878][ T8988] EXT4-fs error (device loop2): ext4_quota_off:7229: inode #3: comm syz.2.1813: mark_inode_dirty error [ 149.853883][ T8997] loop7: detected capacity change from 0 to 512 [ 149.891068][ T9001] FAULT_INJECTION: forcing a failure. [ 149.891068][ T9001] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 150.011721][ T9001] CPU: 0 UID: 0 PID: 9001 Comm: syz.8.1817 Not tainted syzkaller #0 PREEMPT(voluntary) [ 150.011758][ T9001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 150.011834][ T9001] Call Trace: [ 150.011844][ T9001] [ 150.011863][ T9001] __dump_stack+0x1d/0x30 [ 150.011901][ T9001] dump_stack_lvl+0xe8/0x140 [ 150.011953][ T9001] dump_stack+0x15/0x1b [ 150.011990][ T9001] should_fail_ex+0x265/0x280 [ 150.012096][ T9001] should_fail_alloc_page+0xf2/0x100 [ 150.012130][ T9001] __alloc_frozen_pages_noprof+0xff/0x360 [ 150.012234][ T9001] alloc_pages_mpol+0xb3/0x260 [ 150.012279][ T9001] vma_alloc_folio_noprof+0x1aa/0x300 [ 150.012323][ T9001] handle_mm_fault+0xec2/0x2be0 [ 150.012398][ T9001] ? vma_start_read+0x141/0x1f0 [ 150.012433][ T9001] do_user_addr_fault+0x630/0x1080 [ 150.012462][ T9001] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 150.012495][ T9001] exc_page_fault+0x62/0xa0 [ 150.012551][ T9001] asm_exc_page_fault+0x26/0x30 [ 150.012575][ T9001] RIP: 0033:0x7ff80b6ec3ab [ 150.012594][ T9001] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01 [ 150.012617][ T9001] RSP: 002b:00007ff80a1a4e10 EFLAGS: 00010246 [ 150.012635][ T9001] RAX: 00007ff80a1a6f30 RBX: 00007ff80b967640 RCX: 0000000000000000 [ 150.012716][ T9001] RDX: 00007ff80a1a6f78 RSI: 00007ff80b79edf8 RDI: 00007ff80a1a4e30 [ 150.012754][ T9001] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000 [ 150.012771][ T9001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.012786][ T9001] R13: 00007ff80b996038 R14: 00007ff80b995fa0 R15: 00007ffca429c7b8 [ 150.012809][ T9001] [ 150.012822][ T9001] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 150.281756][ T9021] loop8: detected capacity change from 0 to 512 [ 150.282667][ T9020] loop0: detected capacity change from 0 to 1024 [ 150.299459][ T9026] syz.7.1830 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 150.328581][ T9020] EXT4-fs: inline encryption not supported [ 150.328633][ T9020] EXT4-fs: Ignoring removed i_version option [ 150.334814][ T9020] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 150.355326][ T9020] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.1828: lblock 2 mapped to illegal pblock 2 (length 1) [ 150.355415][ T9020] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.1828: lblock 0 mapped to illegal pblock 48 (length 1) [ 150.355551][ T9020] EXT4-fs error (device loop0): ext4_acquire_dquot:6945: comm syz.0.1828: Failed to acquire dquot type 0 [ 150.355702][ T9020] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 150.407168][ T9020] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.1828: mark_inode_dirty error [ 150.419886][ T9021] ext4 filesystem being mounted at /382/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.423382][ T9021] EXT4-fs error (device loop8): ext4_do_update_inode:5624: inode #2: comm syz.8.1827: corrupted inode contents [ 150.455180][ T9021] EXT4-fs error (device loop8): ext4_dirty_inode:6509: inode #2: comm syz.8.1827: mark_inode_dirty error [ 150.455364][ T9021] EXT4-fs error (device loop8): ext4_do_update_inode:5624: inode #2: comm syz.8.1827: corrupted inode contents [ 150.455548][ T9021] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.1827: mark_inode_dirty error [ 150.458390][ T9026] lo speed is unknown, defaulting to 1000 [ 150.461209][ T9020] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 150.461312][ T9020] EXT4-fs (loop0): 1 orphan inode deleted [ 150.475077][ T9021] EXT4-fs warning (device loop8): ext4_empty_dir:3089: inode #18: comm syz.8.1827: directory missing '.' [ 150.485117][ T174] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 150.485339][ T174] EXT4-fs error (device loop0): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0 [ 150.487576][ T9020] EXT4-fs error (device loop0): __ext4_get_inode_loc:4832: comm syz.0.1828: Invalid inode table block 1 in block_group 0 [ 150.487655][ T9020] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 150.487755][ T9020] EXT4-fs error (device loop0): ext4_quota_off:7229: inode #3: comm syz.0.1828: mark_inode_dirty error [ 150.536438][ T9017] loop2: detected capacity change from 0 to 32768 [ 150.540971][ T9031] loop7: detected capacity change from 0 to 512 [ 150.570341][ T9031] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.576657][ T9017] loop2: p1 p2 p3 < p5 p6 > [ 150.693157][ T9017] loop2: p2 size 16775168 extends beyond EOD, truncated [ 150.709066][ T9017] loop2: p5 start 4294970168 is beyond EOD, truncated [ 150.734986][ T9044] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 150.772098][ T9046] loop1: detected capacity change from 0 to 512 [ 150.790799][ T9046] ext4 filesystem being mounted at /195/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 150.805701][ T9046] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #2: comm syz.1.1836: corrupted inode contents [ 150.817786][ T9046] EXT4-fs error (device loop1): ext4_dirty_inode:6509: inode #2: comm syz.1.1836: mark_inode_dirty error [ 150.839763][ T9046] EXT4-fs error (device loop1): ext4_do_update_inode:5624: inode #2: comm syz.1.1836: corrupted inode contents [ 150.859528][ T9046] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #2: comm syz.1.1836: mark_inode_dirty error [ 150.871162][ T9055] loop7: detected capacity change from 0 to 1024 [ 150.885177][ T9058] FAULT_INJECTION: forcing a failure. [ 150.885177][ T9058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.898368][ T9058] CPU: 0 UID: 0 PID: 9058 Comm: syz.0.1840 Not tainted syzkaller #0 PREEMPT(voluntary) [ 150.898463][ T9058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 150.898478][ T9058] Call Trace: [ 150.898487][ T9058] [ 150.898497][ T9058] __dump_stack+0x1d/0x30 [ 150.898541][ T9058] dump_stack_lvl+0xe8/0x140 [ 150.898610][ T9058] dump_stack+0x15/0x1b [ 150.898642][ T9058] should_fail_ex+0x265/0x280 [ 150.898742][ T9058] should_fail+0xb/0x20 [ 150.898757][ T9058] should_fail_usercopy+0x1a/0x20 [ 150.898784][ T9058] _copy_to_user+0x20/0xa0 [ 150.898817][ T9058] simple_read_from_buffer+0xb5/0x130 [ 150.898862][ T9058] proc_fail_nth_read+0x10e/0x150 [ 150.898900][ T9058] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.898936][ T9058] vfs_read+0x1a5/0x770 [ 150.898984][ T9058] ? __rcu_read_unlock+0x4f/0x70 [ 150.899007][ T9058] ? __fget_files+0x184/0x1c0 [ 150.899030][ T9058] ? kfree+0xdb/0x400 [ 150.899076][ T9058] ksys_read+0xda/0x1a0 [ 150.899099][ T9058] __x64_sys_read+0x40/0x50 [ 150.899121][ T9058] x64_sys_call+0x27c0/0x3000 [ 150.899147][ T9058] do_syscall_64+0xd2/0x200 [ 150.899179][ T9058] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 150.899258][ T9058] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 150.899291][ T9058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.899340][ T9058] RIP: 0033:0x7fcfca56d8dc [ 150.899356][ T9058] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 150.899379][ T9058] RSP: 002b:00007fcfc8fcf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 150.899402][ T9058] RAX: ffffffffffffffda RBX: 00007fcfca7c5fa0 RCX: 00007fcfca56d8dc [ 150.899414][ T9058] RDX: 000000000000000f RSI: 00007fcfc8fcf0a0 RDI: 0000000000000006 [ 150.899505][ T9058] RBP: 00007fcfc8fcf090 R08: 0000000000000000 R09: 0000000000000000 [ 150.899517][ T9058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.899530][ T9058] R13: 00007fcfca7c6038 R14: 00007fcfca7c5fa0 R15: 00007ffdba251418 [ 150.899554][ T9058] [ 150.918958][ T9055] SELinux: failed to load policy [ 151.031845][ T9061] lo speed is unknown, defaulting to 1000 [ 151.101482][ T9046] EXT4-fs warning (device loop1): ext4_empty_dir:3089: inode #19: comm syz.1.1836: directory missing '.' [ 151.142698][ T9065] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 151.152365][ T9065] block device autoloading is deprecated and will be removed. [ 151.524461][ T9093] hub 9-0:1.0: USB hub found [ 151.524517][ T9093] hub 9-0:1.0: 8 ports detected [ 151.563355][ T9093] loop2: detected capacity change from 0 to 1024 [ 151.564362][ T9093] EXT4-fs: inline encryption not supported [ 151.564382][ T9093] EXT4-fs: Ignoring removed i_version option [ 151.572452][ T9093] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 151.579526][ T9093] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.1854: lblock 2 mapped to illegal pblock 2 (length 1) [ 151.672405][ T9093] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.1854: lblock 0 mapped to illegal pblock 48 (length 1) [ 151.672530][ T9093] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1854: Failed to acquire dquot type 0 [ 151.672635][ T9093] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 151.672698][ T9093] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.1854: mark_inode_dirty error [ 151.672774][ T9093] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 151.672863][ T9093] EXT4-fs (loop2): 1 orphan inode deleted [ 151.734550][ T12] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 151.736830][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:0: Failed to release dquot type 0 [ 151.759087][ T9093] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz.2.1854: Invalid inode table block 1 in block_group 0 [ 151.759242][ T9093] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 151.759309][ T9093] EXT4-fs error (device loop2): ext4_quota_off:7229: inode #3: comm syz.2.1854: mark_inode_dirty error [ 151.935565][ T9098] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 151.935590][ T9098] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 151.935621][ T9098] vhci_hcd vhci_hcd.0: Device attached [ 152.119577][ T9106] loop2: detected capacity change from 0 to 1024 [ 152.119886][ T9106] EXT4-fs: inline encryption not supported [ 152.119909][ T9106] EXT4-fs: Ignoring removed i_version option [ 152.181406][ T9106] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 152.198176][ T3380] usb 2-1: SetAddress Request (16) to port 0 [ 152.204242][ T3380] usb 2-1: new SuperSpeed USB device number 16 using vhci_hcd [ 152.269497][ T9106] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.1858: lblock 2 mapped to illegal pblock 2 (length 1) [ 152.293948][ T9106] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.1858: lblock 0 mapped to illegal pblock 48 (length 1) [ 152.469457][ T9106] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.1858: Failed to acquire dquot type 0 [ 152.481061][ T9106] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 152.490815][ T9106] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.1858: mark_inode_dirty error [ 152.518772][ T9106] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 152.560689][ T9106] EXT4-fs (loop2): 1 orphan inode deleted [ 152.650500][ T9103] vhci_hcd: connection reset by peer [ 152.658359][ T31] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 152.684922][ T12] vhci_hcd: stop threads [ 152.689273][ T12] vhci_hcd: release socket [ 152.693712][ T12] vhci_hcd: disconnect device [ 152.714732][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0 [ 152.732295][ T9106] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz.2.1858: Invalid inode table block 1 in block_group 0 [ 152.745462][ T9106] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 152.756459][ T9106] EXT4-fs error (device loop2): ext4_quota_off:7229: inode #3: comm syz.2.1858: mark_inode_dirty error [ 152.868864][ T9131] hub 9-0:1.0: USB hub found [ 152.887132][ T9131] hub 9-0:1.0: 8 ports detected [ 152.909437][ T9131] loop1: detected capacity change from 0 to 1024 [ 152.924968][ T9131] EXT4-fs: inline encryption not supported [ 152.930940][ T9131] EXT4-fs: Ignoring removed i_version option [ 152.931658][ T9131] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 152.949167][ T9131] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.1866: lblock 2 mapped to illegal pblock 2 (length 1) [ 152.949271][ T9131] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.1866: lblock 0 mapped to illegal pblock 48 (length 1) [ 152.949429][ T9131] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.1866: Failed to acquire dquot type 0 [ 152.949503][ T9131] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 152.949630][ T9131] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.1866: mark_inode_dirty error [ 152.949712][ T9131] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 152.949744][ T9131] EXT4-fs (loop1): 1 orphan inode deleted [ 152.957559][ T31] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 153.053565][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0 [ 153.054687][ T9131] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz.1.1866: Invalid inode table block 1 in block_group 0 [ 153.054801][ T9131] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 153.054971][ T9131] EXT4-fs error (device loop1): ext4_quota_off:7229: inode #3: comm syz.1.1866: mark_inode_dirty error [ 153.091477][ T9145] loop7: detected capacity change from 0 to 164 [ 153.116519][ T9145] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 153.121836][ T9145] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 153.122208][ T9145] Symlink component flag not implemented [ 153.122215][ T9145] Symlink component flag not implemented [ 153.122445][ T9145] Symlink component flag not implemented (7) [ 153.122456][ T9145] Symlink component flag not implemented (116) [ 153.128799][ T9147] loop1: detected capacity change from 0 to 1024 [ 153.129057][ T9147] EXT4-fs: inline encryption not supported [ 153.129080][ T9147] EXT4-fs: Ignoring removed i_version option [ 153.129447][ T9147] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 153.136252][ T9147] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.1873: lblock 2 mapped to illegal pblock 2 (length 1) [ 153.136369][ T9147] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.1873: lblock 0 mapped to illegal pblock 48 (length 1) [ 153.136522][ T9147] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.1873: Failed to acquire dquot type 0 [ 153.136713][ T9147] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 153.136779][ T9147] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.1873: mark_inode_dirty error [ 153.136855][ T9147] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 153.136965][ T9147] EXT4-fs (loop1): 1 orphan inode deleted [ 153.137732][ T31] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 153.137968][ T31] EXT4-fs error (device loop1): ext4_release_dquot:6981: comm kworker/u8:1: Failed to release dquot type 0 [ 153.139471][ T9147] EXT4-fs error (device loop1): __ext4_get_inode_loc:4832: comm syz.1.1873: Invalid inode table block 1 in block_group 0 [ 153.139708][ T9147] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 153.139807][ T9147] EXT4-fs error (device loop1): ext4_quota_off:7229: inode #3: comm syz.1.1873: mark_inode_dirty error [ 153.237853][ T9153] loop7: detected capacity change from 0 to 512 [ 153.238746][ T9153] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 153.240251][ T9157] FAULT_INJECTION: forcing a failure. [ 153.240251][ T9157] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 153.240279][ T9157] CPU: 1 UID: 0 PID: 9157 Comm: syz.8.1878 Not tainted syzkaller #0 PREEMPT(voluntary) [ 153.240311][ T9157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 153.240327][ T9157] Call Trace: [ 153.240335][ T9157] [ 153.240405][ T9157] __dump_stack+0x1d/0x30 [ 153.240448][ T9157] dump_stack_lvl+0xe8/0x140 [ 153.240487][ T9157] dump_stack+0x15/0x1b [ 153.240521][ T9157] should_fail_ex+0x265/0x280 [ 153.240606][ T9157] should_fail_alloc_page+0xf2/0x100 [ 153.240635][ T9157] __alloc_frozen_pages_noprof+0xff/0x360 [ 153.240732][ T9157] alloc_pages_mpol+0xb3/0x260 [ 153.240787][ T9157] ? alloc_pages_noprof+0xa9/0x130 [ 153.240826][ T9157] vma_alloc_folio_noprof+0x1aa/0x300 [ 153.240868][ T9157] handle_mm_fault+0xec2/0x2be0 [ 153.240919][ T9157] ? vma_start_read+0x141/0x1f0 [ 153.240956][ T9157] do_user_addr_fault+0x630/0x1080 [ 153.240976][ T9157] ? __x64_sys_openat+0xf2/0x120 [ 153.240994][ T9157] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 153.241032][ T9157] exc_page_fault+0x62/0xa0 [ 153.241062][ T9157] asm_exc_page_fault+0x26/0x30 [ 153.241153][ T9157] RIP: 0033:0x7ff80b610460 [ 153.241172][ T9157] Code: d2 12 00 89 c3 85 c0 0f 88 f5 07 00 00 83 f8 1d 0f 8f 4d 09 00 00 48 8d 3d 0d ee 18 00 31 c0 e8 e6 dd fe ff 41 ba 01 00 00 00 44 0f c1 15 97 fe 4a 00 41 83 fa 05 7f 06 49 83 fd 1a 77 1b 48 [ 153.241197][ T9157] RSP: 002b:00007ff80a1a4f70 EFLAGS: 00010206 [ 153.241216][ T9157] RAX: 0000000000000000 RBX: 000000000000000b RCX: 0000000000000000 [ 153.241231][ T9157] RDX: 0000000000000000 RSI: 00007ff80b7c1c6c RDI: 00007ff80b79f260 [ 153.241253][ T9157] RBP: 00007ff80a1a7090 R08: 0000000000000000 R09: 0000000000000000 [ 153.241265][ T9157] R10: 0000000000000001 R11: 0000000000000293 R12: 0000000000000000 [ 153.241287][ T9157] R13: 000000000000002d R14: 0000200000000000 R15: 00007ffca429c7b8 [ 153.241364][ T9157] [ 153.241374][ T9157] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 153.241887][ T9157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.241944][ T9157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.255310][ T9160] vlan0: entered promiscuous mode [ 153.292548][ T9162] __nla_validate_parse: 1 callbacks suppressed [ 153.292569][ T9162] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1880'. [ 153.300789][ T9160] vlan0: entered allmulticast mode [ 153.318799][ T9153] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 153.321542][ T9160] hsr_slave_1: entered allmulticast mode [ 153.381240][ T9153] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.1876: corrupted xattr block 19: overlapping e_value [ 153.464926][ T29] kauditd_printk_skb: 348 callbacks suppressed [ 153.464995][ T29] audit: type=1400 audit(1759774804.421:9394): avc: denied { ioctl } for pid=9161 comm="syz.0.1880" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 153.467267][ T9153] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 153.477399][ T9164] FAULT_INJECTION: forcing a failure. [ 153.477399][ T9164] name failslab, interval 1, probability 0, space 0, times 0 [ 153.480824][ T9153] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.1876: corrupted xattr block 19: overlapping e_value [ 153.486319][ T9164] CPU: 0 UID: 0 PID: 9164 Comm: syz.1.1879 Not tainted syzkaller #0 PREEMPT(voluntary) [ 153.486423][ T9164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 153.486445][ T9164] Call Trace: [ 153.486454][ T9164] [ 153.486467][ T9164] __dump_stack+0x1d/0x30 [ 153.486517][ T9164] dump_stack_lvl+0xe8/0x140 [ 153.486644][ T9164] dump_stack+0x15/0x1b [ 153.486686][ T9164] should_fail_ex+0x265/0x280 [ 153.486790][ T9164] should_failslab+0x8c/0xb0 [ 153.486826][ T9164] kmem_cache_alloc_noprof+0x50/0x480 [ 153.486921][ T9164] ? security_inode_alloc+0x37/0x100 [ 153.486951][ T9164] security_inode_alloc+0x37/0x100 [ 153.486979][ T9164] inode_init_always_gfp+0x4b7/0x500 [ 153.487073][ T9164] ? __pfx_debugfs_alloc_inode+0x10/0x10 [ 153.487102][ T9164] alloc_inode+0x58/0x170 [ 153.487134][ T9164] new_inode+0x1d/0xe0 [ 153.487168][ T9164] __debugfs_create_file+0x109/0x330 [ 153.487289][ T9164] debugfs_create_file_full+0x3f/0x60 [ 153.487389][ T9164] ? __pfx_vlan_setup+0x10/0x10 [ 153.487415][ T9164] ref_tracker_dir_debugfs+0x100/0x1e0 [ 153.487498][ T9164] alloc_netdev_mqs+0x1a7/0xa50 [ 153.487530][ T9164] rtnl_create_link+0x239/0x710 [ 153.487560][ T9164] rtnl_newlink_create+0x14c/0x620 [ 153.487666][ T9164] ? __list_del_entry_valid_or_report+0x65/0x130 [ 153.487705][ T9164] ? __mutex_lock+0x25d/0xcc0 [ 153.487799][ T9164] rtnl_newlink+0xf29/0x12d0 [ 153.487985][ T9164] ? __rcu_read_unlock+0x34/0x70 [ 153.488019][ T9164] ? sock_def_readable+0xaf/0x190 [ 153.488061][ T9164] ? packet_rcv+0xa3b/0xab0 [ 153.488102][ T9164] ? __rcu_read_unlock+0x4f/0x70 [ 153.488161][ T9164] ? avc_has_perm_noaudit+0x1b1/0x200 [ 153.488209][ T9164] ? cred_has_capability+0x210/0x280 [ 153.488293][ T9164] ? selinux_capable+0x31/0x40 [ 153.488327][ T9164] ? security_capable+0x83/0x90 [ 153.488370][ T9164] ? ns_capable+0x7d/0xb0 [ 153.488438][ T9164] ? __pfx_rtnl_newlink+0x10/0x10 [ 153.488542][ T9164] rtnetlink_rcv_msg+0x5fb/0x6d0 [ 153.488583][ T9164] netlink_rcv_skb+0x123/0x220 [ 153.488609][ T9164] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 153.488673][ T9164] rtnetlink_rcv+0x1c/0x30 [ 153.488768][ T9164] netlink_unicast+0x5c0/0x690 [ 153.488822][ T9164] netlink_sendmsg+0x58b/0x6b0 [ 153.488855][ T9164] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.488915][ T9164] __sock_sendmsg+0x142/0x180 [ 153.488953][ T9164] ____sys_sendmsg+0x31e/0x4e0 [ 153.488986][ T9164] ___sys_sendmsg+0x17b/0x1d0 [ 153.489032][ T9164] __x64_sys_sendmsg+0xd4/0x160 [ 153.489143][ T9164] x64_sys_call+0x191e/0x3000 [ 153.489171][ T9164] do_syscall_64+0xd2/0x200 [ 153.489222][ T9164] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 153.489269][ T9164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.489310][ T9164] RIP: 0033:0x7fa1eb16eec9 [ 153.489333][ T9164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.489359][ T9164] RSP: 002b:00007fa1e9bb6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.489440][ T9164] RAX: ffffffffffffffda RBX: 00007fa1eb3c6090 RCX: 00007fa1eb16eec9 [ 153.489458][ T9164] RDX: 0000000000000002 RSI: 0000200000000280 RDI: 0000000000000008 [ 153.489476][ T9164] RBP: 00007fa1e9bb6090 R08: 0000000000000000 R09: 0000000000000000 [ 153.489491][ T9164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 153.489508][ T9164] R13: 00007fa1eb3c6128 R14: 00007fa1eb3c6090 R15: 00007ffe68336ea8 [ 153.489534][ T9164] [ 153.489631][ T9164] debugfs: out of free dentries, can not create file 'netdev@ffff88811d70c550' [ 153.492462][ T9153] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop7 ino=15 [ 153.801483][ T9171] loop8: detected capacity change from 0 to 512 [ 153.802529][ T9153] EXT4-fs error (device loop7): ext4_xattr_block_get:597: inode #15: comm syz.7.1876: corrupted xattr block 19: overlapping e_value [ 153.811380][ T29] audit: type=1400 audit(1759774804.761:9395): avc: denied { setattr } for pid=9152 comm="syz.7.1876" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 153.881019][ T9171] ext4 filesystem being mounted at /391/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 153.913172][ T29] audit: type=1400 audit(1759774804.841:9396): avc: denied { unmount } for pid=8195 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 153.916993][ T9171] EXT4-fs error (device loop8): ext4_do_update_inode:5624: inode #2: comm syz.8.1881: corrupted inode contents [ 153.918624][ T29] audit: type=1400 audit(1759774804.871:9397): avc: denied { add_name } for pid=9170 comm="syz.8.1881" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 153.924122][ T9171] EXT4-fs error (device loop8): ext4_dirty_inode:6509: inode #2: comm syz.8.1881: mark_inode_dirty error [ 153.929282][ T29] audit: type=1400 audit(1759774804.871:9398): avc: denied { create } for pid=9170 comm="syz.8.1881" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 153.934341][ T9171] EXT4-fs error (device loop8): ext4_do_update_inode:5624: inode #2: comm syz.8.1881: corrupted inode contents [ 153.957194][ T9175] FAULT_INJECTION: forcing a failure. [ 153.957194][ T9175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.958885][ T9171] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.1881: mark_inode_dirty error [ 153.963747][ T9175] CPU: 0 UID: 0 PID: 9175 Comm: syz.0.1883 Not tainted syzkaller #0 PREEMPT(voluntary) [ 153.963801][ T9175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 153.963821][ T9175] Call Trace: [ 153.963831][ T9175] [ 153.963844][ T9175] __dump_stack+0x1d/0x30 [ 153.963912][ T9175] dump_stack_lvl+0xe8/0x140 [ 153.963987][ T9175] dump_stack+0x15/0x1b [ 153.964029][ T9175] should_fail_ex+0x265/0x280 [ 153.964143][ T9175] should_fail+0xb/0x20 [ 153.964220][ T9175] should_fail_usercopy+0x1a/0x20 [ 153.964249][ T9175] _copy_from_iter+0xd2/0xe80 [ 153.964281][ T9175] ? mntput_no_expire+0x6f/0x440 [ 153.964329][ T9175] ? mntput+0x4b/0x80 [ 153.964403][ T9175] tun_get_user+0x14d/0x26e0 [ 153.964431][ T9175] ? path_openat+0x1bf8/0x2170 [ 153.964459][ T9175] ? _parse_integer_limit+0x170/0x190 [ 153.964502][ T9175] ? ref_tracker_alloc+0x1f2/0x2f0 [ 153.964601][ T9175] ? selinux_file_permission+0x1e4/0x320 [ 153.964701][ T9175] tun_chr_write_iter+0x15e/0x210 [ 153.964748][ T9175] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 153.964840][ T9175] vfs_write+0x527/0x960 [ 153.964881][ T9175] ksys_write+0xda/0x1a0 [ 153.964915][ T9175] __x64_sys_write+0x40/0x50 [ 153.964953][ T9175] x64_sys_call+0x2802/0x3000 [ 153.965024][ T9175] do_syscall_64+0xd2/0x200 [ 153.965063][ T9175] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 153.965101][ T9175] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 153.965138][ T9175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.965167][ T9175] RIP: 0033:0x7fcfca56eec9 [ 153.965261][ T9175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.965288][ T9175] RSP: 002b:00007fcfc8fcf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 153.965314][ T9175] RAX: ffffffffffffffda RBX: 00007fcfca7c5fa0 RCX: 00007fcfca56eec9 [ 153.965394][ T9175] RDX: 0000000000000fb5 RSI: 0000200000002780 RDI: 0000000000000006 [ 153.965412][ T9175] RBP: 00007fcfc8fcf090 R08: 0000000000000000 R09: 0000000000000000 [ 153.965427][ T9175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.965444][ T9175] R13: 00007fcfca7c6038 R14: 00007fcfca7c5fa0 R15: 00007ffdba251418 [ 153.965563][ T9175] [ 153.997252][ T29] audit: type=1400 audit(1759774804.931:9399): avc: denied { create } for pid=9170 comm="syz.8.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 154.220713][ T9184] loop1: detected capacity change from 0 to 512 [ 154.244350][ T29] audit: type=1400 audit(1759774804.931:9400): avc: denied { write } for pid=9170 comm="syz.8.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 154.244386][ T29] audit: type=1400 audit(1759774804.931:9401): avc: denied { read } for pid=9170 comm="syz.8.1881" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 154.305126][ T9184] loop1: detected capacity change from 0 to 1024 [ 154.322535][ T29] audit: type=1400 audit(1759774805.221:9402): avc: denied { create } for pid=9170 comm="syz.8.1881" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 154.688452][ T29] audit: type=1400 audit(1759774805.331:9403): avc: denied { read open } for pid=9183 comm="syz.1.1885" path="/204/bus/bus" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 154.835668][ T9200] lo speed is unknown, defaulting to 1000 [ 155.048119][ T9205] loop2: detected capacity change from 0 to 512 [ 155.254906][ T9205] ext4 filesystem being mounted at /210/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 155.520730][ T9223] loop2: detected capacity change from 0 to 512 [ 155.534909][ T9225] loop7: detected capacity change from 0 to 164 [ 155.542556][ T9225] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 155.564883][ T9223] loop2: detected capacity change from 0 to 1024 [ 155.584237][ T9225] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 155.601635][ T9227] hub 9-0:1.0: USB hub found [ 155.610668][ T9227] hub 9-0:1.0: 8 ports detected [ 155.654857][ T9225] Symlink component flag not implemented [ 155.660563][ T9225] Symlink component flag not implemented [ 155.687368][ T9225] Symlink component flag not implemented (7) [ 155.693476][ T9225] Symlink component flag not implemented (116) [ 155.746150][ T9230] loop8: detected capacity change from 0 to 1024 [ 155.946880][ T9230] EXT4-fs: inline encryption not supported [ 155.953037][ T9230] EXT4-fs: Ignoring removed i_version option [ 155.959756][ T9230] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 155.973612][ T9230] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.1899: lblock 2 mapped to illegal pblock 2 (length 1) [ 156.248839][ T9230] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.1899: lblock 0 mapped to illegal pblock 48 (length 1) [ 156.539076][ T9230] EXT4-fs error (device loop8): ext4_acquire_dquot:6945: comm syz.8.1899: Failed to acquire dquot type 0 [ 156.704891][ T9230] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 156.725741][ T9247] loop7: detected capacity change from 0 to 164 [ 156.748271][ T9247] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 156.758588][ T9247] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 156.777167][ T9230] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.1899: mark_inode_dirty error [ 156.789777][ T9247] Symlink component flag not implemented [ 156.795422][ T9247] Symlink component flag not implemented [ 156.803691][ T9230] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 156.815552][ T9247] Symlink component flag not implemented (7) [ 156.821619][ T9247] Symlink component flag not implemented (116) [ 156.827884][ T9230] EXT4-fs (loop8): 1 orphan inode deleted [ 156.840308][ T174] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:5: lblock 1 mapped to illegal pblock 1 (length 1) [ 156.872547][ T174] EXT4-fs error (device loop8): ext4_release_dquot:6981: comm kworker/u8:5: Failed to release dquot type 0 [ 156.906536][ T9230] EXT4-fs error (device loop8): __ext4_get_inode_loc:4832: comm syz.8.1899: Invalid inode table block 1 in block_group 0 [ 156.928594][ T9230] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6305: Corrupt filesystem [ 156.958616][ T9230] EXT4-fs error (device loop8): ext4_quota_off:7229: inode #3: comm syz.8.1899: mark_inode_dirty error [ 157.044835][ T9258] loop2: detected capacity change from 0 to 1024 [ 157.281249][ T9266] netlink: 'syz.2.1911': attribute type 1 has an invalid length. [ 157.305423][ T9266] bond1: entered promiscuous mode [ 157.312061][ T3380] usb 2-1: device descriptor read/8, error -110 [ 157.318429][ T9266] 8021q: adding VLAN 0 to HW filter on device bond1 [ 157.341837][ T9266] loop2: detected capacity change from 0 to 512 [ 157.429662][ T3380] usb 2-1: new SuperSpeed USB device number 16 using vhci_hcd [ 157.449849][ T3380] usb 2-1: enqueue for inactive port 0 [ 157.455381][ T3380] usb 2-1: enqueue for inactive port 0 [ 157.471037][ T3380] usb 2-1: enqueue for inactive port 0 [ 157.523739][ T9280] loop8: detected capacity change from 0 to 512 [ 157.560387][ T9280] ext4 filesystem being mounted at /397/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 157.579922][ T9280] EXT4-fs error (device loop8): ext4_do_update_inode:5624: inode #2: comm syz.8.1916: corrupted inode contents [ 157.595734][ T9280] EXT4-fs error (device loop8): ext4_dirty_inode:6509: inode #2: comm syz.8.1916: mark_inode_dirty error [ 157.617559][ T9280] EXT4-fs error (device loop8): ext4_do_update_inode:5624: inode #2: comm syz.8.1916: corrupted inode contents [ 157.628166][ T9284] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 157.635914][ T9284] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 157.644138][ T9284] vhci_hcd vhci_hcd.0: Device attached [ 157.648604][ T9280] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #2: comm syz.8.1916: mark_inode_dirty error [ 157.710006][ T3380] usb 2-1: SetAddress Request (17) to port 0 [ 157.716143][ T3380] usb 2-1: new SuperSpeed USB device number 17 using vhci_hcd [ 157.729508][ T9280] EXT4-fs warning (device loop8): ext4_empty_dir:3089: inode #18: comm syz.8.1916: directory missing '.' [ 157.874051][ T9299] loop1: detected capacity change from 0 to 1024 [ 157.889423][ T9289] vhci_hcd: connection reset by peer [ 157.894914][ T174] vhci_hcd: stop threads [ 157.899262][ T174] vhci_hcd: release socket [ 157.903815][ T174] vhci_hcd: disconnect device [ 157.913506][ T9304] loop7: detected capacity change from 0 to 512 [ 157.933617][ T9304] loop7: detected capacity change from 0 to 1024 [ 158.043595][ T9307] ================================================================== [ 158.051742][ T9307] BUG: KCSAN: data-race in filemap_read / filemap_read [ 158.058627][ T9307] [ 158.060977][ T9307] write to 0xffff8881318308e8 of 8 bytes by task 9304 on cpu 1: [ 158.068627][ T9307] filemap_read+0x974/0xa00 [ 158.073167][ T9307] generic_file_read_iter+0x79/0x330 [ 158.078491][ T9307] ext4_file_read_iter+0x1cc/0x290 [ 158.083669][ T9307] copy_splice_read+0x442/0x660 [ 158.088558][ T9307] splice_direct_to_actor+0x290/0x680 [ 158.093969][ T9307] do_splice_direct+0xda/0x150 [ 158.098761][ T9307] do_sendfile+0x380/0x650 [ 158.103222][ T9307] __x64_sys_sendfile64+0x105/0x150 [ 158.108459][ T9307] x64_sys_call+0x2bb4/0x3000 [ 158.113160][ T9307] do_syscall_64+0xd2/0x200 [ 158.117691][ T9307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.123610][ T9307] [ 158.125951][ T9307] read to 0xffff8881318308e8 of 8 bytes by task 9307 on cpu 0: [ 158.133512][ T9307] filemap_read+0x6f/0xa00 [ 158.137968][ T9307] generic_file_read_iter+0x79/0x330 [ 158.143315][ T9307] ext4_file_read_iter+0x1cc/0x290 [ 158.148476][ T9307] copy_splice_read+0x442/0x660 [ 158.153356][ T9307] splice_direct_to_actor+0x290/0x680 [ 158.158764][ T9307] do_splice_direct+0xda/0x150 [ 158.163560][ T9307] do_sendfile+0x380/0x650 [ 158.168017][ T9307] __x64_sys_sendfile64+0x105/0x150 [ 158.173257][ T9307] x64_sys_call+0x2bb4/0x3000 [ 158.177976][ T9307] do_syscall_64+0xd2/0x200 [ 158.182609][ T9307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.188532][ T9307] [ 158.190871][ T9307] value changed: 0x0000000000000147 -> 0x0000000000000148 [ 158.198086][ T9307] [ 158.200453][ T9307] Reported by Kernel Concurrency Sanitizer on: [ 158.206625][ T9307] CPU: 0 UID: 0 PID: 9307 Comm: syz.7.1923 Not tainted syzkaller #0 PREEMPT(voluntary) [ 158.216623][ T9307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 158.226702][ T9307] ================================================================== [ 162.828181][ T3380] usb 2-1: device descriptor read/8, error -110 [ 162.938146][ T3380] usb 2-1: new SuperSpeed USB device number 17 using vhci_hcd [ 162.958164][ T3380] usb 2-1: enqueue for inactive port 0 [ 162.963909][ T3380] usb 2-1: enqueue for inactive port 0 [ 162.969444][ T3380] usb 2-1: enqueue for inactive port 0 [ 163.078175][ T3380] usb usb2-port1: attempt power cycle [ 164.898876][ T3380] usb usb2-port1: unable to enumerate USB device