last executing test programs: 43.05954958s ago: executing program 4 (id=1252): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys\x00\x00et/\x80\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.impure\x00', &(0x7f0000000100)=""/7, 0x7) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r3}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000005b80)={@empty, 0x33, r5}) r6 = socket$key(0xf, 0x3, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000b00)=""/109) sendmsg$key(r6, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000015204f089b96478db1d8a5f756509e977fb1a030000000002000100000000000000020d1600003f030006000000000002004e21000000800000000000000000030005003200000002"], 0x70}, 0x1, 0x7}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a017f7f00000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000003280004800800024000000012080001"], 0xac}, 0x1, 0x0, 0x0, 0xc0c1}, 0x0) r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0xc}}, 0x20) faccessat(r2, &(0x7f0000000400)='./file0\x00', 0x1c) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000480)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x35}, 0x1}, {0xa, 0x4e21, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x2f}, 0x9}, r9, 0xb}}, 0x48) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b80000000201050000000000000000000000000a1800164000000007000000090000034a000000010000000764000d8014000500fc0000000000000000000000000000001400050000000000000000000000ffff7f000001080002000000000008000100ac1414aa14000400fc00000000000000000000000000000114000500fe80000000000000000000000000001f28005700000000070000ebb40000010000000002000000030000000100000e51000008000000000f"], 0xb8}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 42.927312781s ago: executing program 4 (id=1253): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000020000000000002000085000000ae00"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4e, 0x4, 0x22, 0x31000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x0, 0x0, 0x0, @void, @value, @value=r1}, 0x50) r3 = socket$inet(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r0}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x24000810}, 0x800) 42.906079232s ago: executing program 4 (id=1254): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300090d00000000000000000000000400"], 0x68}, 0x1, 0x7}, 0x4a79a644ae8bc70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='fib6_table_lookup\x00', r5, 0x0, 0x8000000000000000}, 0x18) r6 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r6, &(0x7f0000000640)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0x400}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}], 0x1, 0x4008040) 42.372955815s ago: executing program 4 (id=1259): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) 42.06374854s ago: executing program 4 (id=1269): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300090d00000000000000000000000400"], 0x68}, 0x1, 0x7}, 0x4a79a644ae8bc70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='fib6_table_lookup\x00', r5, 0x0, 0x8000000000000000}, 0x18) r6 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r6, &(0x7f0000000640)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0x400}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}], 0x1, 0x4008040) 41.80984103s ago: executing program 4 (id=1271): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000180)=0x9) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) name_to_handle_at(r0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="200000000000000000007fff0000ad5c000001000100000000003771195e58a452231c3024ff5bee"], &(0x7f00000001c0), 0x200) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb4}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) sigaltstack(0x0, 0x0) connect$vsock_stream(r3, &(0x7f0000000280)={0x28, 0x0, 0xffffffff, @local}, 0x31) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x600, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x92, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0xfffffffffffffd50}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @host}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9fcf01f117000000000000003c0000003c00000004000000040000000000000901000000020000000000000a3fe89656000000000500000002000005070000000500000004000000080000000e0000000200000002000000005f0000ebdf8cf4f679c22c043a0cbd0501f4b9dd2a223a5303da077f33a4d8b683af38caac702b970080f4184a2df8c2f3d1a3af631c7e0802e63a04b07ef1dd82aefb0d2c644f5365b851cb41f69dbee0ca199ca97e33c097c4082baa2dc725a795240e745acf9a1fa87352f3f43cc8ba0d68274278604df1cd7d647daba4"], &(0x7f0000000180)=""/31, 0x58, 0x1f, 0x0, 0x1}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) close(0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) 41.751284145s ago: executing program 32 (id=1271): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000180)=0x9) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) name_to_handle_at(r0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="200000000000000000007fff0000ad5c000001000100000000003771195e58a452231c3024ff5bee"], &(0x7f00000001c0), 0x200) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb4}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10) sigaltstack(0x0, 0x0) connect$vsock_stream(r3, &(0x7f0000000280)={0x28, 0x0, 0xffffffff, @local}, 0x31) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x600, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x92, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0xfffffffffffffd50}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xfffffffffffffffe}}}]}, {0x25}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @host}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9fcf01f117000000000000003c0000003c00000004000000040000000000000901000000020000000000000a3fe89656000000000500000002000005070000000500000004000000080000000e0000000200000002000000005f0000ebdf8cf4f679c22c043a0cbd0501f4b9dd2a223a5303da077f33a4d8b683af38caac702b970080f4184a2df8c2f3d1a3af631c7e0802e63a04b07ef1dd82aefb0d2c644f5365b851cb41f69dbee0ca199ca97e33c097c4082baa2dc725a795240e745acf9a1fa87352f3f43cc8ba0d68274278604df1cd7d647daba4"], &(0x7f0000000180)=""/31, 0x58, 0x1f, 0x0, 0x1}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00'}, 0x18) close(0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) 5.328047923s ago: executing program 5 (id=1737): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) syz_clone(0x26801000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c010000100013"], 0x13c}}, 0x0) 5.23846483s ago: executing program 5 (id=1739): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f00000004c0)='./file0\x00', 0x800b, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xfd, 0x1c7, &(0x7f00000008c0)="$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") (fail_nth: 16) 5.109718381s ago: executing program 5 (id=1740): r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x1f, 0x10, &(0x7f0000000480)=ANY=[@ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000070004007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200e10085000000a600000018110000", @ANYRES32, @ANYRES16], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0xf) r4 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r5 = socket$packet(0x11, 0x3, 0x300) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) bind$packet(r5, &(0x7f0000000080)={0x11, 0x1a, r8, 0x1, 0x1, 0x6, @broadcast}, 0x14) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000380)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@i_version}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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") r10 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) connect$unix(r4, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e20}, 0x6e) write$cgroup_devices(r10, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8) write$cgroup_devices(r10, &(0x7f00000000c0)={'b', ' *:* ', 'r\x00'}, 0x8) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x5}}, 0x20) socket$netlink(0x10, 0x3, 0x14) 4.974530372s ago: executing program 3 (id=1743): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x2d, 0x20040040) bind$unix(r3, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e) recvmmsg(r2, &(0x7f0000000d40), 0x40000000000038f, 0x10020, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r5, 0x5, 0x4) getdents(r5, 0x0, 0x0) 4.903508058s ago: executing program 0 (id=1745): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffe, r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x60800, 0x0) sendfile(r2, r3, 0x0, 0x1000000000004) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r4 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0xfffffffffffffc9a, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000003e000701fcfffffffedbdf25017c0000060004"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r11, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x40048d0) r12 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10041, 0x0, 0x3, 0x4, 0x1, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x40082406, &(0x7f0000000180)='cpu>=0||!') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000c13000/0x4000)=nil, 0x4000, 0x17) syz_clone(0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 4.605489551s ago: executing program 3 (id=1746): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x102, 0x128) r1 = add_key$fscrypt_v1(&(0x7f0000000000), 0x0, &(0x7f0000000100)={0x0, "de442bfc7910e10ac69ac014b0fa7807b11d2c99ed1f40d47a6edb3367b5cc888e1fd5102ae2d3d05f251f8d49025ceab4152b6e6d87cd6088e97a9d06d29143"}, 0x48, 0xffffffffffffffff) add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, r1) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f00000000c0)={@desc={0x1, 0x0, @desc1}, 0x40, r1, '\x00', @b}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r3, 0x0, 0x4}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000240)=@nullb, r2, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 4.548542746s ago: executing program 5 (id=1747): r0 = bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff66) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x7e0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r0, 0x28f43000) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, r0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRESDEC=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r4, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_io_uring_setup(0x1c44, &(0x7f0000000240)={0x0, 0x59fc, 0x80, 0x3, 0xbd7f7fff}, &(0x7f0000000480)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f00000002c0)=0x9, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r7, 0x5535, 0x3acd, 0x22, 0x0, 0x0) r10 = inotify_init() r11 = inotify_add_watch(r10, &(0x7f0000000200)='.\x00', 0x82000714) inotify_rm_watch(r10, r11) inotify_rm_watch(r4, r11) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) 4.421899996s ago: executing program 2 (id=1748): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0200cef6c3811c4a8f94d500ebfcdfa26fa57e5635ce0004000000080300", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000041000007b8af0ff00000000bfa1000000000000070100006b5c93088df8ffffffbfa400000000000007040004f0ffffffb7020000e25703a55aec0800007a2cfb9a3cfe269fd05a94984f3352c040d3d9c2e919aa70326468629275351709493659d5b82bdbee7335b78744c1608c5b73ef520b14ee40c3d9e17e8ba3e14e09680b2be760", @ANYRES32=r2, @ANYBLOB="0000000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002800)=@delchain={0xc4, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xd, 0x8}, {0x0, 0x9}, {0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x84, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x6}, {0x34, 0x5, [{0x7, 0x7, 0x1, 0x4}, {0xf3d0, 0xeb, 0x30, 0x2}, {0x7bd, 0x7, 0xdf, 0x3616}, {0x0, 0xb, 0x81, 0x1}, {0x81, 0x80, 0x40, 0x3}, {0x8, 0xa1, 0x5, 0xc365}]}}, @TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x3c, 0x5, [{0x80, 0x8, 0xa, 0x7fff}, {0xe5fe, 0x10, 0x0, 0x5}, {0x400, 0xf, 0x81, 0x28e49d38}, {0x1, 0xff, 0xef, 0x5}, {0xe68, 0x7, 0x2}, {0xfff0, 0x9c, 0x30, 0xb2}, {0x8000, 0x8, 0x1, 0xa4}]}}]}}, @TCA_CHAIN={0x8, 0xb, 0x101}, @filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x81}, 0x8000) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000880)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x3a1}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r6 = epoll_create1(0x80000) splice(r4, &(0x7f0000000200)=0x9, r6, &(0x7f0000000240)=0x26df, 0x5, 0x1f) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xffffffffffffffff}, 0x18) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000500160002000000060018"], 0x50}}, 0x4080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r3, 0x0, 0x4}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0xa}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48801}, 0x4) setsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, 0x0, 0x0) 4.415061457s ago: executing program 3 (id=1749): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = socket(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r4, &(0x7f00000003c0)=0x2, 0x12) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) syz_init_net_socket$x25(0x9, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x3f, 0x0, 0x0, 0x0, 0xb}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) syz_emit_ethernet(0x3e, &(0x7f00000003c0)={@broadcast, @empty, @void, {@ipv6={0x86dd, @generic={0xf, 0x6, "d3b6af", 0x8, 0x11, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, @mcast2, {[], "077caad79881c4ca"}}}}}, 0x0) write$binfmt_script(r3, &(0x7f0000000500)={'#! ', './file0'}, 0xb) close_range(r2, r3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) ioctl$BLKTRACESETUP(r7, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x5, 0x8000, 0x2, 0xd8e3, 0x8000000000000000, 0x0}) fcntl$lock(r0, 0x5, &(0x7f0000000180)={0x1, 0x5, 0xd6, 0x8, r8}) fcntl$setlease(r7, 0x400, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000000440)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c0000001000010025bdf000fedbdf2500000000", @ANYRES32=r1, @ANYRES8, @ANYRES32=r1], 0x3c}}, 0x40000c4) 4.347563132s ago: executing program 2 (id=1750): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000002c0)='./bus\x00', 0x404, &(0x7f0000000580)={[{@orlov}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x226040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) r2 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0xe1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x396) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000001c0)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000400)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=r3, @ANYRES8=r2], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) keyctl$get_keyring_id(0x0, 0x0, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000002800)=ANY=[@ANYBLOB, @ANYRESOCT=r4, @ANYBLOB="536b3eb22e2702c72eea90abb647e78ac7506b63428500690fb99d037af2dcdc98bd1c4ba45d0f774b1f756cae287e056d18e6c3795ddb35ceb2ddaea043fca9666d09775ea4e04ce7c858a567ea3caa2ee2b15fa4f22230b050f041008592b4b4348ca53f1d36802ff5eeeef82c7459ec87a3b660d1f67910b5bbdf5d53de682b28c6271987598d2a874f5b9dc6dfafb3ab38317a335394c638b8221d73007b991e57dd1f95ff8e477938fece96f5417d41a808ceeacf0242452a7df1ee63c90c99fec6022b0e5a9c72fa1f212d565af8e166c62cf059e3c5a42de7704f09f7f12a647433b9e1ea82a4a9c704bbd7b39bb403a42fb7d05e888a0303b80a1f1499a2fc683019b643d1ad9e915796a208e8313684cc354d26340cf7df3a649890608ffe15196a0cb4f906edfa641716b8dc65d1953f247d67b3921f256899d864f8327cdf1f9c8f7c98226747231277e01d6d45d4ffa6fa7026e78105f3322504dc7cbdc5ed9aa4e33d150e0ad4dc3040dbff7406afc346d168d36fbc51690321e644acc6ef550a80ef881aecadc908eebd4dab5dab01db201fd8dd700ced299f8febae46fd4ad1cd1dc3128dc1238f277f3b577388d0915fe339c75acc43f1bed5b89164c668612c25c3a86e0ed9ba0ab2feaee339e2b3c80626c507e96c85f62bc135febb0ab1ef6b35d495af054badc926f15eb5d36e1e34ff569c8eb4879b0bc48eb4ce596232209f3ddc7cea9eec258eec7c682c51f3b0b75d289e03645203071b08b77514f0a339eca27fa47fc09936b87c71736865b32f9ef4cbf2bbe213821af08eea264dc43bf98a06ad664b65e6634a88ab57f0a5a0a09b4052cccb4b5b2073fc016e285bb692384cdbbcec5447dfff4bee04b39dda1988fcb1b8c9fdf74a1863be3a92f1dd3f1de4cf6f7139cc072523cb8bd832cc36ba30a9726f5bc7c50a028b4ec2e9787e455b49975882404b5239207a821d0e05121353d7435b0ce19791bf51c155d228c086409ddd46796ff235bce272e1e1a206c1ec41e5327926c86a9270dd50558162cdc91b38a164f2b0310f9e78282358f208af81e5cb200310f4b462b5986dfe253284f605ddb3cd5c9e9d5ca5784b1c2fcbdfb4ab852355eea77787ed66abd77f55f45d5d3469ce48f81059da95d0205df1889b71eafeaaec35535dea0a5cf7a3afa2a65697172649a85e49aed7c83eb19425c1ffed614f93643eee289d4431f732e25bb5fc81e0eda94928a3355395cd9de46c1d7c535df96a57a2fdba8ad57da0136a952ece8c8a3ce126ed251103a7b7bd3467a3b6ac26c2b34823fb9a1459cda88a90dda09cc4b1fcfb74a96a7d7178814e73d4400638eddd04b8972c19daef4393b342d012905ad791b994c48e792a8a618321f23f5e47403cd1fafcce50d0cadaff33ddd6d1ca45b390b52ec68e4ff769ab244faaf0fb03dcbc3c3ab0191598d7002023938ce1851445ef60c7ca682343cbbe6e1793c5ffca816821b92b0885e966aa34068ed15b408d132bb2c0ebdbeb891e69688952aa00c40f6a65d0623d366597dc5d60bfa47292e960f98658373eb11b25cbf4a30a90694d15a4ba9c3212e68edaddb8bfb6319fe0fa6ccffa97345ebd188a9763be3acbdc22f515711ca5065335d0cf6cd2bd552d597fa0705bf67e1748bf1a75622eeb291e9b09541e09994d060134d219a3edc39b3654ac9a73d6ecfd1498c61f24572b3ca3ca4c346ea3bbb4405126f191a193b1b4168ba80c91ab8de9754f956a8296d3e2734999fb9b4f2918632ad3186e9d31b7fffa423936c6f9e7d95c18089c08347322d8e74febeb6fa2e4107585faca424dc46ceddc330c01ba254b3346691717204d0b05018a442d604d4fa772ab630b277b174a6b1bdfd0fd7121413891e2958e808906138ced111a9999f12329e7685c6e7fe42202859bec5114215a0bffe8852b0b4e3d1b64e9816992ffaf09b56a446f9a50de9709e4c9852f46a4974ab779c2c458f468c88b6183a8bc98cf9cfc7fe79e0d8e8f04fe210523c9bcc7b124fd2f4316b28d953e926778bf1105b368cf2f2e161ef7fa9d9a6573c1414132f4926836074f7057cceabee2eec25aaac10a40afb852ebf619adaaa9c9ee4b2c682f5529f63d3b5f3718265676838f939a7b9a307d019f51fc4fdb1772f61309b28a84a784d316d763bd98d6588cb20786a5eba3265a242cf2a88fc2142e1d26e31c3d0700a01e031f9215fddcecda2ea6914bd76c89227c848ca88d8c796ca7315bf746f2499ef9b6a2c7b6d4d2eebfa924dd77f2b238dc9802159d75ae60639881720657e443261928ced72867496bc6b3ee4f4e19fc897c7c47695c80182a6f954cf483b788cc10729ae070d4b8c3fc77659dafe113d23015b42da980a83902cde224d473266b625ee1aa955ba628abab556781c7ceb26032357209285f1a58236b6240fcacd1d8555a1ca460223c9fc48d006b650c89e2644d7d1cba9e7c9fd67c5d54bea620c6e8197d661e1ca5ab099fb01f7454831f528e888561acad2ea3d0b83a164ea6533022f5ba60b9af3f06361e1b5abf14ecfb83b8faafb7efaa51f22012c916d86d44cf8053b6c1cfdbf9a8e513914bacec94e1aa675f83ae1019dae4d308d94b95e7b77ba6fb169e5e30553a7f281097e190ffe0be71da2232cbfdc4c7de9da87e7c128b236f78a2b15cee5fe28af145e03e74011e927f618c14bef450d85e29eacacceedb08e42352eaad975f9f9758c98194dc1901b64e517d016bb13ccf25edcaaea651d2681096704dc646d6f8c258b4720204a05b8eaed7b6a3a49c2cb734c9c5342212dec95ec7bdbc40d806909a5d84a1c03caad9b66189e5f4d42d98ea650c0a16ec579bfb867489ebe4c3a442cc0be3392ed041a2db4db562ac09931587cb4d9a8a15157d5ed2e6d63111ec40b8a3e336fc92ae41a73d3e6d8bb28bffaadd727b555a79f9ea00ab72fdc02f8518ed986f9fe22afe30239f234ef183c512eb572ef6f31d29ab4a58e5725ad59b71fe2a72ba04c928e2d7da0d960073557a66586c717861c81e6f231fec0b90500d3e27b940965cbfee63ee00018d10d7f63b51eef9c025f3d7eb2b7d7355e2b69357586748af157e4a31a0e0fe984efb913868ae08c05f722ff5f41dea19672702672454b13500920876a4aa8afc12ea278c9b6a4e0c21429c2605bda126a8337b3321b53a3d4d5fabbb4074c8a51703353ef5757800a7511bff39c608a75eae9f93b58bbe265969ddab48fc114f26032376a13fdf577becf842ce7d315f6ac54af9d476f9a56d38e9c113e28303e9419ad4484359383173cea8a8a37a1494f04d28fa2d1ad1f94f7547556a181e87179f9554b78b448e339de1431378d210d6539b71b9daa322c0fa63846f3418ad06bd66b98a2c6943cf5f01f334cdabec6fd9326108246022b2ba3e81ed35c478d4208e92dd7a10715668d477804cae7aa5b8a1a3b071a7d13ecdbcbe3357beebca6d0ffe537ee60e45d484b1c9f1967adefb71f7d9892af32b6ff3bcd3bb9297e33a8d8b94cd54e75d8167592e9ccfdd515e28aa2deaaf9835009177de1bca117300690f29995e90380d421be00b216f98971157f62cc651245287b175952d94285c45e487f3cfbcc9b6a3f21ff5d3a8da76267b429a6e0552a39be76ba9e893348a7f1ce754c30434f5a501ebe9149d47c53c9585ee32ee93fcb39c7cd113fffafc573ee684b6cd80c3ff33392dbd60532382ce8388cce769805344ef1d0be897a1a136fbcef0208093e03ab681205966a9a09db51ddaaaeb0d9e6f7ee759aa964d4baeb6629d590db365b17fad654a91c2b8fd31c0a40ea27907f7c671cf738d9110cf99a48fd17c8826a1318e2c5a5dc89781b858470ff11dae9248c965ebf44453de6852eaf3129a9313a9de4ce3a5226146cc2a2914d5c070685abbada6d48db017a4ed0fa26f212b0feb34fe81a4ca59d157d9aedcda69ad231978591d00d100c060b78c39811a47a59c8efd549790819996bdf362c5405a4e7c1c08becf661190c94ebbb0a279a9588891521b0e67ac345725a222aff0361aca910017d385bbb10d8596830993357aa5242fc19e8db2e2fd0cdd1faa2b0cfc448953c083cac4c2aeda04b9dfac4fd0754f87d0339176172fa13c280941a6c3bdb96a62f43bf2e4f6ee4f4d7993b542e9937c49f7be4778c8875cedce5508cfca9d357dea26167088764ed8ac83bc1b6f9981a5c72802c9aa3dc650ccdf0d96d6493c3217c38222ad219b176ff210e360f3b5d4c527a55b03c8759dad511c80496d57200333b43fc1dc9c7f7ca938f0b40936535f753061884cbe4e702be05f66a920c8eeb4c9ad4f3ee7f4b05f1a7614aff3381872c9da4a8babb7a974d61a602e26e18f241b1567eaa550e42d9a88eb4bfa5a1df8113e7a79e6f1b034f1877453a2c51c7876d5cdb5b5da2ff20b1625ec0099afe4ddb1ddd4d7bbd69045ab10d2b8581ee4723ad5ccc9a7d54e1e2cf118312e36a945065c1ce0575d7b93ba795de2bb5bb2ad5d6cf2a5701daf4392acd156b22730d077d328dce34a2d303213fd9376464ffd2efc7e55dcb0ce8842fd88fd88a06df599f8555db859ffc7ac387a811946685efe989a5e47e3ac19c317f7a3a2dcb860383f88cc86240d618fcab99d4b2110d55cbea122825013029b2eaeb8e8e2bc30e6ff65ea3ef984a1fe61837dc3e57044ca05181d3ad697cd11ee93047d9186358105974ed8125ff2623f799be77c6c50312d357ebd523c8880f9ad11cb03f06be73f90fe7a115595f54498f2cee7cd0fb52c8a1b5612dc43dcbc73d447907549ceaf7c918f44dd16258f7f0a006ab0a53d69690e58d51d36e13a0e274fe89f7e08f8c92f8ee82f9d9a49fad6019547390f5418cd83d006d41c4ccc79f12308e705830e15546154c90e23ace92938e3e1defd69ace6767fa8d55643be3104f931fa3ada9dff08bdcacccb51488053642fa374fc0f3d64a8d03cfbc04bb5abbd808e9fd4c268898a70d77c825997dece9d56268fd6461ad94f4b234702950a69899de41a8ef1d759e3cd38632ba20ff92cb95c4d3d97c2b59f1097e32944ece73aee08cb68ea1ae32da45b2ac51c4014a8e3a3a0aebdcb23425256f44e600e22c853faa2d22c0e6ebdd1ee50cd14feb8302cc3db107b24494549fe7aeb5244182e9801ebd88c82f33caa86dc3cc3fb5923990d967142ef5e532ad482b72273338befc91421b7cdac38960f60efb67403b4e5f39d1a13bb82b888e64354f4f9a686b4883b0a7db7c28e496fef9195699adeb5ba38e945476c6aeffb2346990e1594bfb3d5248277bb2bb9a80e9bdc16763307c70381734e26e9bce5fd807f29996a8cc054536cb8f8634a9ade7ca767591aec804445e018cc1c1da8d33481c7af46707f027220734a0c6348b6be48e40897861c39f73fbf5f9be15536eccb0f0492240fba0597978962d88b19fd70ad4ae6d28966134c9734a7459cfecda2d4a14ce86c6f27d3ca2db20d0bf3407071e47e86f41c242240110aec80a639b0d12f9e2f92ae1a09ffc548a7cc7b3ed0c288e234b01f26af2450042a3d8a59ce4931da28305b6f83a1e1c193a4706a348fc365b82447d173f4552c3144212cf3a7dfeaf475f2182c685078fc20d8123cc1085cb33ea3921c5afb9e4abc4337220bb3688d314bc82d225d91f96f0524b049b453fe29c22efaa0ad9d65c7cf5e847c947f2cd1f6916aa2ebc133b6bcff15c763a8bfa48dd824738c14b01613cf", @ANYRESOCT=r6, @ANYRESHEX=r3, @ANYRES64=r1, @ANYRESOCT, @ANYRES8=r6], 0x0, 0xa, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r9, &(0x7f0000000200)={0xa, 0x4e21, 0x0, @empty}, 0x1c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x23, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x69c2, 0x3ff}, 0x0, 0x9, 0x0, 0x1, 0x5, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) stat(0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r8) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c9980000", @ANYRES16=r10, @ANYBLOB='ya\x00\x00\x00\x00\x00\x00\x00\x00~\x00\x00\x00'], 0x14}}, 0x4000054) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={0xffffffffffffffff, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x3, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="8c0f0b9f6a48439611b52563dfc784ad45460ddd046957dec7bffcdf64f7d80aa269f2d16d08988e161e98a2aefdcb3d6c8b9f7883b1dbf4aab967fd789859c2fe01af549108c4885a916f69410c480a5d848914928384096d27a1f668323f884d9239e7358e2cf6e8d68685867ec135fcca040b163beb43f7f2f61e588c1a1e8c2e5512d97c94d1c2802229e2d448dd47361ec3c7fb49d3e024aaffc936ade39e54c10ffbbc925585b09d9ba18c848316ae", @ANYRES8=r5, @ANYRES64=r3, @ANYRESHEX, @ANYRES16=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 4.310787185s ago: executing program 3 (id=1751): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$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") r0 = open(&(0x7f0000000380)='./file1\x00', 0x109042, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f00000001c0)={0x17f, 0x0, 0x0, 0x0, 0x5}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40000, 0x1) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000000)={0x8, 0xb, 0x7, 0x3, 0x6}) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xfffffffffffffffe) r3 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r4 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', 0x0) r5 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000200)={'syz', 0x1}, 0x0, 0x0, r3) keyctl$unlink(0x9, r4, r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r7, 0x0, 0x7fffffffffffffff}, 0x18) keyctl$KEYCTL_MOVE(0x1e, r2, 0xffffffffffffffff, r3, 0x0) 4.231460871s ago: executing program 2 (id=1752): socket$inet6_udplite(0xa, 0x2, 0x88) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b'], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300090d00000000000000000000000400"], 0x68}, 0x1, 0x7}, 0x4a79a644ae8bc70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00'}, 0x18) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r3, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018110000", @ANYRES32=r4], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x100, 0x5, 0x28}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000380)='fib6_table_lookup\x00', r7, 0x0, 0x8000000000000000}, 0x18) r8 = socket$inet6(0xa, 0x1, 0x8010800000000084) sendmmsg$inet6(r8, &(0x7f0000000640)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0, 0x400}, 0x1c, &(0x7f0000000600)=[{&(0x7f00000000c0)='/', 0x1}], 0x1}}], 0x1, 0x4008040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) syz_emit_ethernet(0x7a, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000680)={[{@nolazytime}, {@lazytime}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@lazytime}, {@noload}]}, 0x3, 0x45c, &(0x7f0000002400)="$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") r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x75, &(0x7f0000000200)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x67, 0x300, 0x0, 0x8, 0x6c, 0x0, @private, @broadcast}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, "1e835b8814886bf3ff40765c839e23"}}}}}}, 0x0) 4.002652139s ago: executing program 0 (id=1755): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0xf) r2 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r3 = socket$packet(0x11, 0x3, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYRESDEC=r3], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1e, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89a0, &(0x7f0000000040)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) bind$packet(r3, &(0x7f0000000080)={0x11, 0x1a, r6, 0x1, 0x1, 0x6, @broadcast}, 0x14) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x89a1, &(0x7f0000000040)={'syzkaller0\x00'}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000380)={[{@nodioread_nolock}, {@noblock_validity}, {@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@nodiscard}, {@inlinecrypt}, {@i_version}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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") socket$inet_sctp(0x2, 0x5, 0x84) r8 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) connect$unix(r2, &(0x7f0000000400)=@abs={0x1, 0x0, 0x4e20}, 0x6e) write$cgroup_devices(r8, &(0x7f00000003c0)={'b', ' *:* ', 'r\x00'}, 0x8) write$cgroup_devices(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB="62202a3a14207200"], 0x8) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffff"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x9c) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000007c0), 0x13f, 0x5}}, 0x20) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f0000fffffffffffffff000000000"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x6c08845c1bb285e7) lchown(&(0x7f0000000000)='./file0\x00', 0x0, r10) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000100000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='signal_deliver\x00', r12, 0x0, 0x8000000000000004}, 0x18) 3.931724175s ago: executing program 3 (id=1756): socket$kcm(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x2d, 0x20040040) bind$unix(r3, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e) recvmmsg(r2, &(0x7f0000000d40), 0x40000000000038f, 0x10020, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) lseek(r5, 0x5, 0x4) getdents(r5, 0x0, 0x0) 126.0428ms ago: executing program 1 (id=1757): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x150x0}, &(0x7f0000cab000)=0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r3, 0x0, 0x4}, 0x18) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000240)=@nullb, r2, &(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 123.57617ms ago: executing program 0 (id=1760): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='kfree\x00', r0, 0x0, 0x3}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000002000500000a30000000180a3f6d6f578dbe9c8b000002000000040003800900020073797a30000000000900010073797a300000000014000000020a010100000000000000000000000614000000110001"], 0x6c}}, 0x880) 123.39599ms ago: executing program 1 (id=1761): r0 = socket(0xf, 0x1, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030011000500e1000c040007001a030700", 0x33a) 123.17011ms ago: executing program 0 (id=1762): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') syz_read_part_table(0x405b, &(0x7f0000004080)="$eJzszjFKA1EUBdCbxMGvDARBK0EM9jJ2VrOL6SVrsFZxdmIZXIArsnQLIyhGEkW0CKicU73P5b1/wx9RltMoycP8fi/J8Sx907yGW2/5zvtSc5Zqt4xTJ7n8eLNbbL43AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwS41XXtdraVlO88P0V23O66QcTJPbSar2aJT9ZHb6yd1J8phklOQpSTfdUH8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4J+5WHltr8f1F6t3J+nb6mW8STIMw/Dtb0vSLX7SE57ZgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKMCAAD//wx/Es8=") fchdir(r1) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$namespace(r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, 0x0}, 0x24040084) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r5}, 0x18) write$selinux_create(0xffffffffffffffff, &(0x7f0000000240)=@access={'system_u:object_r:semanage_trans_lock_t:s0', 0x20, '/usr/sbin/cups-browsed'}, 0x57) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x0, 0x0, 0x101}}) 122.89727ms ago: executing program 1 (id=1763): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000020000000000002000085000000ae00000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4e, 0x4, 0x22, 0x31000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe, 0x0, 0x0, 0x0, @void, @value, @value=r1}, 0x50) r3 = socket$inet(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r3}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00', r0}, 0x18) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x4) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, 0x0, 0x800) 122.21504ms ago: executing program 2 (id=1764): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2000000}, @NFTA_MATCH_INFO={0x28, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce231633"}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 121.04769ms ago: executing program 2 (id=1765): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000080000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000a3850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r1, 0xfffffffffffffffe, r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x60800, 0x0) sendfile(r2, r3, 0x0, 0x1000000000004) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r4 = getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) recvmsg$unix(r6, &(0x7f0000000400)={0x0, 0xfffffffffffffc9a, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0x12, &(0x7f00000008c0)=r7, 0x4) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c0000003e000701fcfffffffedbdf25017c0000060004"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r11, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x40048d0) r12 = perf_event_open(&(0x7f0000000fc0)={0x2, 0x80, 0x82, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x10041, 0x0, 0x3, 0x4, 0x1, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r12, 0x40082406, &(0x7f0000000180)='cpu>=0||!') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000c13000/0x4000)=nil, 0x4000, 0x17) syz_clone(0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 120.14914ms ago: executing program 0 (id=1766): syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = inotify_init() r1 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r2 = inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x400008bf) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x69) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r3}, 0x38) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4, 0x0, 0x2}, 0x18) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f00000001c0)={0x5813}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001e008d2a28bd", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b'], 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x40000c0) sendto$isdn(r5, &(0x7f0000000a00)={0x6, 0x8, "9a158ae1b9a2be71506e4cbc74601464725d6803c35ee3dc666a8807af4b4cfb69ec16a3a327203f1d7b728c1c82543221595077667953829c3c781ac4990c78aca1b3f0144ba69dc258f8f225587e85c91c53980396183f91a286cd28613bfdc2dd146bf1932db0360bc3a1cde241d2a72f29a2b6de406fd3a3445be8b7fedbd13e05dcae376db03586c46483e2820d4996433ea9afaaebd5595dc11017efb852c2d6e9cbf3744760c969d6a65b8080132b5cc8f2e718f9c65bc8f6a73da1366bea77db4b9fb33c3980c14da4f20a1ae0c9268129a2645cc2deda1d737f"}, 0xe6, 0x4, &(0x7f0000000740)={0x22, 0xfe, 0x25, 0x10}, 0x6) close(r1) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0xc048) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200000038000480340001800b00010074617267657400002400028010000100434f4e4e5345434d41524b0005000300ef00000008000240000000000900010073797a30000000000900020073797a32000000"], 0xa0}, 0x1, 0x0, 0x0, 0x40000}, 0x44110) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'dummy0\x00'}) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x28}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) 120.04275ms ago: executing program 1 (id=1767): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='timer_start\x00', r0, 0x0, 0x4}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000004000000000000000a20000000000a03000000000000000000070000040900010073797a300000000088000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d44001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000003ef0001800e000100636f6e6e6c696d69740000000c000280080001400000e41f08000340000001"], 0xd0}, 0x1, 0x0, 0x0, 0x60000800}, 0x4000024) 119.71621ms ago: executing program 2 (id=1768): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'team_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="800000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100000ffe00340003800c0001000ffe0000000000000c00010094040000000000000c00010000010000000000000c000100040000000000000008000500", @ANYRES32=r1, @ANYBLOB="080003"], 0x80}}, 0x8000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000240)=ANY=[@ANYRESHEX=r1, @ANYRES32, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007500000095"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@delqdisc={0x24, 0x25, 0x1, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xf, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f0000000180)=0x4) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="120000002f0000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r9, &(0x7f0000000080), 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r8, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r10}, 0x10) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@bloom_filter={0x1e, 0x7ad4, 0x0, 0x9, 0x4ce31, r9, 0xa65, '\x00', r1, 0xffffffffffffffff, 0x3, 0x2, 0x4}, 0x50) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x12, [@type_tag={0xc, 0x0, 0x0, 0x12, 0x2}, @int={0xa, 0x0, 0x0, 0x1, 0x0, 0x6e, 0x0, 0x4b, 0x3}, @func={0x8, 0x0, 0x0, 0xc, 0x3}, @typedef={0xe}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}, @const={0x5, 0x0, 0x0, 0xa, 0x3}, @ptr={0x5, 0x0, 0x0, 0x2, 0x1}, @union={0xf, 0x4, 0x0, 0x5, 0x1, 0xfffff800, [{0x4, 0x4, 0x1}, {0x4, 0x0, 0x4}, {0x1000, 0x5, 0x5}, {0xd, 0x4, 0xffffffd1}]}]}, {0x0, [0x30, 0x0, 0x2e, 0x61, 0x30, 0x5f, 0x30, 0x30, 0x2e, 0x61, 0x5f, 0x5f, 0x30, 0x61, 0x2e, 0x61]}}, &(0x7f00000003c0)=""/210, 0xca, 0xd2, 0x1, 0x3}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b0000000700000012bc00000e00000001020000", @ANYRES32=r2, @ANYBLOB="05000000000000000000", @ANYRES32=r7, @ANYRES32=r11, @ANYBLOB="00000000030000000200"/28], 0x50) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000001418120000", @ANYRES32=r12, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000380)='kfree\x00', r13}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 119.35044ms ago: executing program 3 (id=1769): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00', r2}, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000b00)=ANY=[@ANYBLOB="020300000b0000000000000000000000030006000000000002000000e000000100000000000000000200010000001c000000fb18000000000300050000000000020000007f0000010000000000000000010018"], 0x58}, 0x1, 0x7}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="021600000a0000000200000000000000080012000007a18208"], 0x50}}, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)=""/220, 0x151, 0xdc, 0x1, 0x5, 0x10000}, 0x28) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4, 0x2010, r6, 0x789d7000) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r8}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r4], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x2e80, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000004a000dc4702c20be0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r11], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r12}, 0x10) splice(r10, 0x0, r9, 0x0, 0x4, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r13}, 0x18) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000009, 0x4082172, 0xffffffffffffffff, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25cf, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x10000, 0x0, 0xfffffffd, 0x0, 0x0, 0xffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0xfffffffa, 0x7fffffff, 0x9, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x7b2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x9, 0xfffffeff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0xfffffff8, 0x3, 0x0, 0x100000, 0x1000, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x7, 0xd4, 0xc, 0x5, 0x0, 0x0, 0x0, 0x3032, 0x0, 0xffffffff, 0x0, 0x6, 0x8, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0x1, 0x20000000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x1, 0x2, 0x3ff, 0xfffffffc, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x1, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x9, 0x0, 0x0, 0x40000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4]}, @TCA_TBF_PARMS={0x28, 0x1, {{}, {0x2, 0x0, 0x5, 0x0, 0x0, 0x40}}}]}}]}, 0x45c}}, 0x0) 116.588911ms ago: executing program 5 (id=1770): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x9302d000) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f00000079c0)=[{0x1, 0x1, {0x1, 0xf0, 0x2}, {0x0, 0xff, 0x3}}], 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x200000000}, 0x18) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), r3) sendmsg$NFC_CMD_DEP_LINK_UP(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000c40)={0x24, r4, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000090}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES64=r1], 0x7c}}, 0x0) 53.624186ms ago: executing program 5 (id=1771): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2982, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) close(r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400000099000000"], 0x48) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) fcntl$notify(r3, 0x402, 0x8000001e) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x1) fcntl$notify(r6, 0x402, 0x8000003d) close_range(r3, r6, 0x0) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x48) mq_open(0x0, 0x42, 0x1f0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000180)='cpu=~0||!') r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r9, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) 0s ago: executing program 1 (id=1772): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) read(r2, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): ory [ 111.797514][ T6660] udevd[6660]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 111.806209][ T7015] EXT4-fs: Ignoring removed mblk_io_submit option [ 111.863120][ T7033] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 111.864286][ T7015] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 111.883136][ T3303] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.913950][ T7015] EXT4-fs (loop3): 1 truncate cleaned up [ 111.919975][ T7015] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.964024][ T7040] loop5: detected capacity change from 0 to 1024 [ 111.978015][ T7047] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1349'. [ 112.033955][ T7049] loop2: detected capacity change from 0 to 512 [ 112.073473][ T7049] EXT4-fs: Ignoring removed i_version option [ 112.085862][ T7040] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.127679][ T7049] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 112.166335][ T7049] EXT4-fs (loop2): 1 truncate cleaned up [ 112.179043][ T7049] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.197739][ T7064] loop0: detected capacity change from 0 to 1024 [ 112.199712][ T7049] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1351'. [ 112.242745][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.257967][ T7064] EXT4-fs: inline encryption not supported [ 112.263909][ T7064] EXT4-fs: Ignoring removed i_version option [ 112.272806][ T6685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.293921][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.334598][ T7064] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 112.393359][ T7081] loop1: detected capacity change from 0 to 512 [ 112.416878][ T7081] EXT4-fs: Ignoring removed i_version option [ 112.430684][ T7081] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 112.442931][ T7064] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 2: comm syz.0.1352: lblock 2 mapped to illegal pblock 2 (length 1) [ 112.448207][ T7081] EXT4-fs (loop1): 1 truncate cleaned up [ 112.463845][ T7064] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 48: comm syz.0.1352: lblock 0 mapped to illegal pblock 48 (length 1) [ 112.491312][ T7064] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1352: Failed to acquire dquot type 0 [ 112.498625][ T7081] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.529544][ T7064] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 112.540193][ T7081] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1353'. [ 112.572868][ T7064] EXT4-fs error (device loop0): ext4_evict_inode:254: inode #11: comm syz.0.1352: mark_inode_dirty error [ 112.595923][ T7091] FAULT_INJECTION: forcing a failure. [ 112.595923][ T7091] name failslab, interval 1, probability 0, space 0, times 0 [ 112.608796][ T7091] CPU: 1 UID: 0 PID: 7091 Comm: syz.5.1359 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 112.608830][ T7091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 112.608843][ T7091] Call Trace: [ 112.608849][ T7091] [ 112.608857][ T7091] __dump_stack+0x1d/0x30 [ 112.608882][ T7091] dump_stack_lvl+0xe8/0x140 [ 112.608938][ T7091] dump_stack+0x15/0x1b [ 112.608956][ T7091] should_fail_ex+0x265/0x280 [ 112.609052][ T7091] should_failslab+0x8c/0xb0 [ 112.609079][ T7091] kmem_cache_alloc_noprof+0x50/0x310 [ 112.609116][ T7091] ? security_inode_alloc+0x37/0x100 [ 112.609216][ T7091] security_inode_alloc+0x37/0x100 [ 112.609244][ T7091] inode_init_always_gfp+0x4b7/0x500 [ 112.609299][ T7091] alloc_inode+0x58/0x170 [ 112.609321][ T7091] alloc_anon_inode+0x1e/0x170 [ 112.609345][ T7091] aio_setup_ring+0x91/0x760 [ 112.609377][ T7091] ioctx_alloc+0x2c4/0x4e0 [ 112.609405][ T7091] __se_sys_io_setup+0x6b/0x1b0 [ 112.609495][ T7091] __x64_sys_io_setup+0x31/0x40 [ 112.609590][ T7091] x64_sys_call+0x2eff/0x2ff0 [ 112.609612][ T7091] do_syscall_64+0xd2/0x200 [ 112.609641][ T7091] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 112.609667][ T7091] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 112.609755][ T7091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.609778][ T7091] RIP: 0033:0x7fd4cca6ebe9 [ 112.609794][ T7091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.609814][ T7091] RSP: 002b:00007fd4cb4d7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 112.609835][ T7091] RAX: ffffffffffffffda RBX: 00007fd4ccc95fa0 RCX: 00007fd4cca6ebe9 [ 112.609848][ T7091] RDX: 0000000000000000 RSI: 0000200000000680 RDI: 0000000000002004 [ 112.609913][ T7091] RBP: 00007fd4cb4d7090 R08: 0000000000000000 R09: 0000000000000000 [ 112.609926][ T7091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 112.609948][ T7091] R13: 00007fd4ccc96038 R14: 00007fd4ccc95fa0 R15: 00007fff2df73468 [ 112.609968][ T7091] [ 112.814191][ T7064] EXT4-fs warning (device loop0): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 112.824769][ T7064] EXT4-fs (loop0): 1 orphan inode deleted [ 112.831104][ T7064] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.868506][ T7074] loop3: detected capacity change from 0 to 32768 [ 112.878755][ T31] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:1: lblock 1 mapped to illegal pblock 1 (length 1) [ 112.894244][ T31] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:1: Failed to release dquot type 0 [ 112.910120][ T7096] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58384 sclass=netlink_route_socket pid=7096 comm=syz.2.1360 [ 112.930924][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.933269][ T7064] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.962272][ T6654] loop3: p1 p3 < > [ 112.969017][ T7064] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz.0.1352: Invalid inode table block 1 in block_group 0 [ 112.982979][ T7064] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 112.992639][ T7064] EXT4-fs error (device loop0): ext4_quota_off:7217: inode #3: comm syz.0.1352: mark_inode_dirty error [ 113.070618][ T7074] loop3: p1 p3 < > [ 113.105108][ T7105] loop5: detected capacity change from 0 to 1024 [ 113.170265][ T7107] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1362'. [ 113.344738][ T7105] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.362004][ T7112] bridge_slave_0: left allmulticast mode [ 113.367708][ T7112] bridge_slave_0: left promiscuous mode [ 113.373497][ T7112] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.537024][ T7115] loop0: detected capacity change from 0 to 512 [ 113.562398][ T7112] bridge_slave_1: left allmulticast mode [ 113.568139][ T7112] bridge_slave_1: left promiscuous mode [ 113.570927][ T7105] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.1365: Allocating blocks 449-513 which overlap fs metadata [ 113.574048][ T7112] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.605067][ T7104] EXT4-fs (loop5): pa ffff88810726a850: logic 48, phys. 177, len 21 [ 113.613194][ T7104] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 4 [ 113.614827][ T6709] udevd[6709]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 113.623815][ T7115] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 113.657143][ T6654] udevd[6654]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 113.734628][ T7112] bond0: (slave bond_slave_0): Releasing backup interface [ 113.743287][ T7112] bond0: (slave bond_slave_1): Releasing backup interface [ 113.754251][ T7112] team0: Port device team_slave_0 removed [ 113.762605][ T7112] team0: Port device team_slave_1 removed [ 113.762948][ T7115] EXT4-fs (loop0): 1 truncate cleaned up [ 113.770239][ T7112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.784252][ T7112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.846450][ T7115] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.862422][ T7122] netlink: 'syz.1.1370': attribute type 10 has an invalid length. [ 113.874271][ T7122] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 113.878347][ T6685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.899295][ T7115] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.915707][ T7124] geneve2: entered promiscuous mode [ 114.000305][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1374'. [ 114.038287][ T7130] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1374'. [ 114.175782][ T7135] loop5: detected capacity change from 0 to 512 [ 114.213492][ T7135] EXT4-fs warning (device loop5): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 114.248779][ T7139] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.295434][ T7144] loop2: detected capacity change from 0 to 1024 [ 114.302377][ T7144] EXT4-fs: inline encryption not supported [ 114.308239][ T7144] EXT4-fs: Ignoring removed i_version option [ 114.320967][ T7144] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 114.337791][ T7144] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.1377: lblock 2 mapped to illegal pblock 2 (length 1) [ 114.372627][ T7135] EXT4-fs (loop5): mount failed [ 114.408569][ T7144] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.1377: lblock 0 mapped to illegal pblock 48 (length 1) [ 114.448910][ T7137] loop1: detected capacity change from 0 to 32768 [ 114.480096][ T7149] SELinux: failed to load policy [ 114.483753][ T7144] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1377: Failed to acquire dquot type 0 [ 114.497532][ T7137] loop1: p1 p3 < > [ 114.548876][ T7144] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 114.567316][ T7144] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.1377: mark_inode_dirty error [ 114.578965][ T7144] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 114.590760][ T7144] EXT4-fs (loop2): 1 orphan inode deleted [ 114.597194][ T7144] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 114.609963][ T1697] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 114.650156][ T1697] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 114.664394][ T6654] udevd[6654]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 114.676731][ T6660] udevd[6660]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 114.701651][ T7144] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 114.726506][ T7144] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz.2.1377: Invalid inode table block 1 in block_group 0 [ 115.049179][ T7144] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 115.104612][ T7144] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz.2.1377: mark_inode_dirty error [ 115.143206][ T7166] FAULT_INJECTION: forcing a failure. [ 115.143206][ T7166] name failslab, interval 1, probability 0, space 0, times 0 [ 115.155938][ T7166] CPU: 1 UID: 0 PID: 7166 Comm: syz.3.1383 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 115.155969][ T7166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 115.156020][ T7166] Call Trace: [ 115.156027][ T7166] [ 115.156036][ T7166] __dump_stack+0x1d/0x30 [ 115.156097][ T7166] dump_stack_lvl+0xe8/0x140 [ 115.156121][ T7166] dump_stack+0x15/0x1b [ 115.156147][ T7166] should_fail_ex+0x265/0x280 [ 115.156173][ T7166] ? __se_sys_mount+0xef/0x2e0 [ 115.156201][ T7166] should_failslab+0x8c/0xb0 [ 115.156229][ T7166] __kmalloc_cache_noprof+0x4c/0x320 [ 115.156263][ T7166] ? memdup_user+0x99/0xd0 [ 115.156293][ T7166] __se_sys_mount+0xef/0x2e0 [ 115.156318][ T7166] ? fput+0x8f/0xc0 [ 115.156399][ T7166] ? ksys_write+0x192/0x1a0 [ 115.156424][ T7166] __x64_sys_mount+0x67/0x80 [ 115.156449][ T7166] x64_sys_call+0x2b4d/0x2ff0 [ 115.156473][ T7166] do_syscall_64+0xd2/0x200 [ 115.156581][ T7166] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 115.156608][ T7166] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 115.156636][ T7166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.156660][ T7166] RIP: 0033:0x7f6fc584ebe9 [ 115.156677][ T7166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.156742][ T7166] RSP: 002b:00007f6fc42b7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 115.156763][ T7166] RAX: ffffffffffffffda RBX: 00007f6fc5a75fa0 RCX: 00007f6fc584ebe9 [ 115.156777][ T7166] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 115.156849][ T7166] RBP: 00007f6fc42b7090 R08: 0000200000000140 R09: 0000000000000000 [ 115.156863][ T7166] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000001 [ 115.156877][ T7166] R13: 00007f6fc5a76038 R14: 00007f6fc5a75fa0 R15: 00007ffd459d6558 [ 115.156900][ T7166] [ 115.376585][ T7175] loop2: detected capacity change from 0 to 512 [ 115.441596][ T7175] EXT4-fs: Ignoring removed i_version option [ 115.449702][ T7175] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 115.463953][ T7177] loop5: detected capacity change from 0 to 512 [ 115.480478][ T7175] EXT4-fs (loop2): 1 truncate cleaned up [ 115.494025][ T7177] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.505646][ T7175] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.510126][ T7177] ext4 filesystem being mounted at /19/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 115.551148][ T29] kauditd_printk_skb: 211 callbacks suppressed [ 115.551167][ T29] audit: type=1400 audit(1755510152.868:211461): avc: denied { create } for pid=7185 comm="syz.0.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 115.610126][ T7175] __nla_validate_parse: 1 callbacks suppressed [ 115.610142][ T7175] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1386'. [ 115.635117][ T29] audit: type=1400 audit(1755510152.908:211462): avc: denied { bind } for pid=7185 comm="syz.0.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 115.654875][ T29] audit: type=1400 audit(1755510152.928:211463): avc: denied { bind } for pid=7185 comm="syz.0.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 115.675350][ T29] audit: type=1400 audit(1755510152.928:211464): avc: denied { setopt } for pid=7185 comm="syz.0.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 115.696287][ T29] audit: type=1400 audit(1755510152.938:211465): avc: denied { append } for pid=7176 comm="syz.5.1388" path="/19/bus/net_prio.prioidx" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 115.720117][ T29] audit: type=1400 audit(1755510152.938:211466): avc: denied { map } for pid=7176 comm="syz.5.1388" path="/19/bus/net_prio.prioidx" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 115.743905][ T29] audit: type=1400 audit(1755510152.938:211467): avc: denied { map } for pid=7176 comm="syz.5.1388" path="/19/bus/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 115.767897][ T29] audit: type=1400 audit(1755510152.948:211468): avc: denied { write } for pid=7185 comm="syz.0.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 115.824226][ T6685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.870481][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.927961][ T7200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1394'. [ 115.956625][ T7202] loop5: detected capacity change from 0 to 512 [ 115.982340][ T7202] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 116.011301][ T7202] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.1395: bad orphan inode 11 [ 116.050316][ T7204] lo speed is unknown, defaulting to 1000 [ 116.057584][ T7202] ext4_test_bit(bit=10, block=4) = 1 [ 116.062998][ T7202] is_bad_inode(inode)=0 [ 116.067280][ T7202] NEXT_ORPHAN(inode)=2080374784 [ 116.072269][ T7202] max_ino=32 [ 116.075507][ T7202] i_nlink=0 [ 116.108162][ T7202] EXT4-fs (loop5): 1 truncate cleaned up [ 116.117814][ T29] audit: type=1400 audit(1755510153.428:211469): avc: denied { setopt } for pid=7212 comm="syz.3.1396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 116.141678][ T7202] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.180305][ T7202] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1395: bg 0: block 393: padding at end of block bitmap is not set [ 116.200398][ T29] audit: type=1326 audit(1755510153.508:211470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7197 comm="syz.2.1393" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2225d5ebe9 code=0x0 [ 116.205564][ T7202] syz.5.1395 (7202) used greatest stack depth: 10368 bytes left [ 116.289341][ T6685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.382494][ T7220] loop5: detected capacity change from 0 to 2048 [ 116.396687][ T7222] FAULT_INJECTION: forcing a failure. [ 116.396687][ T7222] name failslab, interval 1, probability 0, space 0, times 0 [ 116.409495][ T7222] CPU: 1 UID: 0 PID: 7222 Comm: syz.0.1400 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 116.409605][ T7222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 116.409617][ T7222] Call Trace: [ 116.409625][ T7222] [ 116.409635][ T7222] __dump_stack+0x1d/0x30 [ 116.409662][ T7222] dump_stack_lvl+0xe8/0x140 [ 116.409686][ T7222] dump_stack+0x15/0x1b [ 116.409808][ T7222] should_fail_ex+0x265/0x280 [ 116.409836][ T7222] should_failslab+0x8c/0xb0 [ 116.409944][ T7222] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 116.409979][ T7222] ? sidtab_sid2str_get+0xa0/0x130 [ 116.410000][ T7222] kmemdup_noprof+0x2b/0x70 [ 116.410153][ T7222] sidtab_sid2str_get+0xa0/0x130 [ 116.410180][ T7222] security_sid_to_context_core+0x1eb/0x2e0 [ 116.410208][ T7222] security_sid_to_context+0x27/0x40 [ 116.410231][ T7222] selinux_lsmprop_to_secctx+0x67/0xf0 [ 116.410254][ T7222] security_lsmprop_to_secctx+0x43/0x80 [ 116.410366][ T7222] audit_log_task_context+0x77/0x190 [ 116.410407][ T7222] audit_log_task+0xf4/0x250 [ 116.410610][ T7222] audit_seccomp+0x61/0x100 [ 116.410713][ T7222] ? __seccomp_filter+0x68c/0x10d0 [ 116.410784][ T7222] __seccomp_filter+0x69d/0x10d0 [ 116.410881][ T7222] ? _raw_spin_unlock+0x26/0x50 [ 116.410944][ T7222] __secure_computing+0x82/0x150 [ 116.410972][ T7222] syscall_trace_enter+0xcf/0x1e0 [ 116.411019][ T7222] do_syscall_64+0xac/0x200 [ 116.411084][ T7222] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 116.411112][ T7222] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 116.411142][ T7222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.411168][ T7222] RIP: 0033:0x7fb6abafd5fc [ 116.411229][ T7222] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 116.411245][ T7222] RSP: 002b:00007fb6aa567030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 116.411267][ T7222] RAX: ffffffffffffffda RBX: 00007fb6abd25fa0 RCX: 00007fb6abafd5fc [ 116.411283][ T7222] RDX: 000000000000000f RSI: 00007fb6aa5670a0 RDI: 0000000000000005 [ 116.411303][ T7222] RBP: 00007fb6aa567090 R08: 0000000000000000 R09: 0000000000000000 [ 116.411318][ T7222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 116.411333][ T7222] R13: 00007fb6abd26038 R14: 00007fb6abd25fa0 R15: 00007ffc49bc6ee8 [ 116.411363][ T7222] [ 116.452399][ T7224] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1398'. [ 116.544211][ T7227] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1401'. [ 116.617876][ T7220] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 116.633705][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1403'. [ 116.683005][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1403'. [ 116.719640][ T7220] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 116.744572][ T7220] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1462 with error 28 [ 116.757076][ T7220] EXT4-fs (loop5): This should not happen!! Data will be lost [ 116.757076][ T7220] [ 116.766781][ T7220] EXT4-fs (loop5): Total free blocks count 0 [ 116.772895][ T7220] EXT4-fs (loop5): Free/Dirty block details [ 116.778827][ T7220] EXT4-fs (loop5): free_blocks=2415919104 [ 116.784615][ T7220] EXT4-fs (loop5): dirty_blocks=1472 [ 116.789987][ T7220] EXT4-fs (loop5): Block reservation details [ 116.796000][ T7220] EXT4-fs (loop5): i_reserved_data_blocks=92 [ 116.868427][ T7220] syz.5.1399 (7220) used greatest stack depth: 10120 bytes left [ 116.888748][ T12] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 116.924229][ T7254] netlink: 65055 bytes leftover after parsing attributes in process `syz.0.1407'. [ 117.045614][ T7260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.066501][ T7260] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.086083][ T7266] loop0: detected capacity change from 0 to 164 [ 117.094963][ T7266] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 117.173444][ T7276] SELinux: Context system_u:object_r:admin_passwd_exec_t:s0 is not valid (left unmapped). [ 117.188180][ T7275] Driver unsupported XDP return value 0 on prog (id 209) dev N/A, expect packet loss! [ 117.208431][ T7277] loop3: detected capacity change from 0 to 2048 [ 117.220085][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1415'. [ 117.229222][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1415'. [ 117.319809][ T7285] loop3: detected capacity change from 0 to 256 [ 117.370989][ T7285] FAT-fs (loop3): codepage cp869 not found [ 117.455290][ T7300] loop1: detected capacity change from 0 to 1024 [ 117.464963][ T7300] EXT4-fs: inline encryption not supported [ 117.470843][ T7300] EXT4-fs: Ignoring removed i_version option [ 117.481325][ T7300] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 117.520602][ T7300] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.1421: lblock 2 mapped to illegal pblock 2 (length 1) [ 117.537836][ T7300] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.1421: lblock 0 mapped to illegal pblock 48 (length 1) [ 117.558399][ T7300] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1421: Failed to acquire dquot type 0 [ 117.570357][ T7300] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 117.581374][ T7300] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.1421: mark_inode_dirty error [ 117.593706][ T7300] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 117.604456][ T7300] EXT4-fs (loop1): 1 orphan inode deleted [ 117.611268][ T7300] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.674851][ T12] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 117.689247][ T7308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1425'. [ 117.703305][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 117.715776][ T7300] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.725267][ T7300] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.1421: Invalid inode table block 1 in block_group 0 [ 117.738246][ T7300] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 117.747942][ T7300] EXT4-fs error (device loop1): ext4_quota_off:7217: inode #3: comm syz.1.1421: mark_inode_dirty error [ 117.862753][ T7316] loop2: detected capacity change from 0 to 8192 [ 117.902402][ T6660] loop2: p1 < > p2 p4 [ 117.906542][ T6660] loop2: partition table partially beyond EOD, truncated [ 117.914718][ T6660] loop2: p1 start 408832 is beyond EOD, truncated [ 117.921224][ T6660] loop2: p2 size 8388352 extends beyond EOD, truncated [ 117.937023][ T7316] loop2: p1 < > p2 p4 [ 117.941281][ T7316] loop2: partition table partially beyond EOD, truncated [ 117.949717][ T7316] loop2: p1 start 408832 is beyond EOD, truncated [ 117.956227][ T7316] loop2: p2 size 8388352 extends beyond EOD, truncated [ 117.979555][ T7326] dummy0: entered promiscuous mode [ 118.032057][ T7332] loop1: detected capacity change from 0 to 1024 [ 118.054598][ T7332] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.079925][ T6709] udevd[6709]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 118.081875][ T7332] ext4 filesystem being mounted at /276/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 118.096005][ T6660] udevd[6660]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 118.127238][ T6660] udevd[6660]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 118.129193][ T6654] udevd[6654]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 118.165729][ T7332] openvswitch: netlink: Message has 6 unknown bytes. [ 118.194218][ T7332] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 118.255180][ T7332] EXT4-fs (loop1): Remounting filesystem read-only [ 118.318487][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.399101][ T7350] loop3: detected capacity change from 0 to 128 [ 118.542735][ T7365] syz.3.1442: attempt to access beyond end of device [ 118.542735][ T7365] loop3: rw=0, sector=121, nr_sectors = 120 limit=128 [ 118.936155][ T7385] loop1: detected capacity change from 0 to 1024 [ 119.272063][ T51] kworker/u8:3: attempt to access beyond end of device [ 119.272063][ T51] loop3: rw=1, sector=241, nr_sectors = 800 limit=128 [ 119.342104][ T7402] loop3: detected capacity change from 0 to 8192 [ 119.349186][ T7402] msdos: Unknown parameter 'ÚùèF«nüqµ–R356Ûý&¦ÐTcfãn·}Ъ¢ÛågÑhLðÕ¼áw‰Éü [ 119.349186][ T7402] ¿' [ 119.517467][ T7414] loop2: detected capacity change from 0 to 512 [ 119.542766][ T7414] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 119.571744][ T7414] EXT4-fs (loop2): 1 truncate cleaned up [ 119.600669][ T7414] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 119.641187][ T7426] IPv6: Can't replace route, no match found [ 119.644576][ T7414] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.014433][ T7449] loop3: detected capacity change from 0 to 512 [ 120.051242][ T7449] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 120.081141][ C1] vcan0: j1939_tp_rxtimer: 0xffff88810376ce00: rx timeout, send abort [ 120.089554][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88810376ce00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 120.153039][ T7449] EXT4-fs (loop3): 1 truncate cleaned up [ 120.165474][ T7449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.187404][ T7449] EXT4-fs error (device loop3): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.3.1462: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 120.215502][ T7449] EXT4-fs (loop3): Remounting filesystem read-only [ 120.222208][ T7449] EXT4-fs warning (device loop3): ext4_rename_delete:3735: inode #2: comm syz.3.1462: Deleting old file: nlink 5, error=-117 [ 120.315325][ T7475] loop2: detected capacity change from 0 to 1024 [ 120.344468][ T7475] EXT4-fs: inline encryption not supported [ 120.350393][ T7475] EXT4-fs: Ignoring removed i_version option [ 120.394732][ T7475] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 120.434577][ T7475] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.1463: lblock 2 mapped to illegal pblock 2 (length 1) [ 120.486267][ T7475] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.1463: lblock 0 mapped to illegal pblock 48 (length 1) [ 120.536157][ T7475] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1463: Failed to acquire dquot type 0 [ 120.589010][ T7475] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 120.620339][ T7475] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.1463: mark_inode_dirty error [ 120.649838][ T7475] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 120.667772][ T7475] EXT4-fs (loop2): 1 orphan inode deleted [ 120.680161][ T7475] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.692742][ T12] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 120.712423][ T12] __quota_error: 188 callbacks suppressed [ 120.712439][ T12] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 120.726699][ T12] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:0: Failed to release dquot type 0 [ 120.781403][ T7475] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.810264][ T7475] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz.2.1463: Invalid inode table block 1 in block_group 0 [ 120.843515][ T7480] __nla_validate_parse: 13 callbacks suppressed [ 120.843532][ T7480] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1465'. [ 120.859323][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.892830][ T7480] netlink: 'syz.1.1465': attribute type 4 has an invalid length. [ 120.903050][ T7475] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 120.926278][ T7475] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz.2.1463: mark_inode_dirty error [ 120.965710][ T7484] loop1: detected capacity change from 0 to 512 [ 121.007091][ T7484] EXT4-fs: Ignoring removed i_version option [ 121.041371][ T7484] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 121.068083][ T7484] EXT4-fs (loop1): 1 truncate cleaned up [ 121.084211][ T7484] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 121.107078][ T7484] netlink: 272 bytes leftover after parsing attributes in process `syz.1.1467'. [ 121.118505][ T29] audit: type=1326 audit(1755510158.428:211653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7487 comm="syz.2.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2225d5ebe9 code=0x7ffc0000 [ 121.142278][ T29] audit: type=1326 audit(1755510158.428:211654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7487 comm="syz.2.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2225d5ebe9 code=0x7ffc0000 [ 121.196686][ T29] audit: type=1326 audit(1755510158.478:211655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7487 comm="syz.2.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f2225d5ebe9 code=0x7ffc0000 [ 121.220296][ T29] audit: type=1326 audit(1755510158.478:211656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7487 comm="syz.2.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2225d5ebe9 code=0x7ffc0000 [ 121.243966][ T29] audit: type=1326 audit(1755510158.478:211657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7487 comm="syz.2.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2225d5ebe9 code=0x7ffc0000 [ 121.267633][ T29] audit: type=1326 audit(1755510158.488:211658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7487 comm="syz.2.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f2225d5ebe9 code=0x7ffc0000 [ 121.291180][ T29] audit: type=1326 audit(1755510158.488:211659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7487 comm="syz.2.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2225d5ebe9 code=0x7ffc0000 [ 121.314796][ T29] audit: type=1326 audit(1755510158.488:211660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7487 comm="syz.2.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2225d5ebe9 code=0x7ffc0000 [ 121.338518][ T29] audit: type=1326 audit(1755510158.488:211661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7487 comm="syz.2.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f2225d5ebe9 code=0x7ffc0000 [ 121.443443][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1473'. [ 121.452451][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1473'. [ 121.476061][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.910432][ T7526] loop3: detected capacity change from 0 to 1024 [ 121.928139][ T7526] EXT4-fs: Ignoring removed orlov option [ 121.955690][ T7526] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.069252][ T7540] netlink: 'syz.3.1480': attribute type 1 has an invalid length. [ 122.085929][ T7539] loop2: detected capacity change from 0 to 2048 [ 122.114327][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 122.142042][ T7539] loop2: p1 < > p4 < > [ 122.175460][ T7543] vlan1: entered allmulticast mode [ 122.180639][ T7543] bridge_slave_0: entered allmulticast mode [ 122.377313][ T7553] loop3: detected capacity change from 0 to 1024 [ 122.378222][ T7555] loop5: detected capacity change from 0 to 1024 [ 122.410956][ T7553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.428404][ T7555] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 122.431301][ T7563] netlink: 'syz.1.1490': attribute type 4 has an invalid length. [ 122.443773][ T7553] ext4 filesystem being mounted at /287/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.452172][ T10] lo speed is unknown, defaulting to 1000 [ 122.459122][ T7555] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.464593][ T10] syz0: Port: 1 Link DOWN [ 122.473081][ T7563] netlink: 'syz.1.1490': attribute type 4 has an invalid length. [ 122.500089][ T3391] lo speed is unknown, defaulting to 1000 [ 122.506002][ T3391] syz0: Port: 1 Link ACTIVE [ 122.557266][ T7569] openvswitch: netlink: Message has 6 unknown bytes. [ 122.593323][ T7571] netlink: 'syz.3.1494': attribute type 30 has an invalid length. [ 122.863180][ T7586] loop5: detected capacity change from 0 to 256 [ 122.912369][ T7586] FAT-fs (loop5): codepage cp869 not found [ 122.923651][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ab2cc00: rx timeout, send abort [ 122.932010][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811ab2cc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 123.272685][ T7592] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1500'. [ 123.281722][ T7592] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1500'. [ 123.358215][ T7607] loop1: detected capacity change from 0 to 1024 [ 123.468495][ T7607] Falling back ldisc for ttyS3. [ 123.515385][ T7597] macvtap0: refused to change device tx_queue_len [ 123.556759][ T7624] loop2: detected capacity change from 0 to 256 [ 123.601969][ T7624] FAT-fs (loop2): codepage cp869 not found [ 123.746919][ T7642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1514'. [ 123.755941][ T7642] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1514'. [ 123.764948][ T7642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1514'. [ 123.778795][ T7642] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1514'. [ 123.787873][ T7642] netlink: 'syz.0.1514': attribute type 6 has an invalid length. [ 123.830642][ T7654] netlink: 'syz.0.1517': attribute type 21 has an invalid length. [ 123.830642][ T7651] netlink: 'syz.0.1517': attribute type 21 has an invalid length. [ 123.830689][ T7651] netlink: 'syz.0.1517': attribute type 1 has an invalid length. [ 123.854477][ T7654] netlink: 'syz.0.1517': attribute type 1 has an invalid length. [ 124.399898][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811ab2cc00: rx timeout, send abort [ 124.411096][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811ab2cc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 124.785726][ T7690] loop1: detected capacity change from 0 to 512 [ 124.801011][ T7690] EXT4-fs: Ignoring removed i_version option [ 124.811197][ T7690] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 124.840989][ T7690] EXT4-fs (loop1): 1 truncate cleaned up [ 124.905772][ T7712] loop2: detected capacity change from 0 to 1024 [ 124.935325][ T7713] loop3: detected capacity change from 0 to 512 [ 124.942708][ T7712] EXT4-fs: inline encryption not supported [ 124.948573][ T7712] EXT4-fs: Ignoring removed i_version option [ 124.976742][ T7713] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 125.041457][ T7712] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 125.106469][ T7712] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.1533: lblock 2 mapped to illegal pblock 2 (length 1) [ 125.125309][ T7712] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.1533: lblock 0 mapped to illegal pblock 48 (length 1) [ 125.142411][ T7712] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1533: Failed to acquire dquot type 0 [ 125.161252][ T7712] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 125.171503][ T7712] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.1533: mark_inode_dirty error [ 125.202445][ T7712] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 125.224983][ T7761] loop1: detected capacity change from 0 to 256 [ 125.228118][ T7712] EXT4-fs (loop2): 1 orphan inode deleted [ 125.244543][ T1882] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 125.265887][ T7761] FAT-fs (loop1): codepage cp869 not found [ 125.277844][ T1882] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 0 [ 125.406290][ T7712] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz.2.1533: Invalid inode table block 1 in block_group 0 [ 125.420937][ T7712] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 125.433721][ T7712] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz.2.1533: mark_inode_dirty error [ 125.771246][ T7770] FAULT_INJECTION: forcing a failure. [ 125.771246][ T7770] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 125.784657][ T7770] CPU: 0 UID: 0 PID: 7770 Comm: syz.0.1538 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 125.784786][ T7770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 125.784804][ T7770] Call Trace: [ 125.784811][ T7770] [ 125.784820][ T7770] __dump_stack+0x1d/0x30 [ 125.784846][ T7770] dump_stack_lvl+0xe8/0x140 [ 125.784871][ T7770] dump_stack+0x15/0x1b [ 125.784907][ T7770] should_fail_ex+0x265/0x280 [ 125.784934][ T7770] should_fail+0xb/0x20 [ 125.784956][ T7770] should_fail_usercopy+0x1a/0x20 [ 125.784983][ T7770] _copy_to_user+0x20/0xa0 [ 125.785010][ T7770] simple_read_from_buffer+0xb5/0x130 [ 125.785039][ T7770] proc_fail_nth_read+0x10e/0x150 [ 125.785069][ T7770] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 125.785100][ T7770] vfs_read+0x1a8/0x770 [ 125.785156][ T7770] ? __rcu_read_unlock+0x4f/0x70 [ 125.785184][ T7770] ? __fget_files+0x184/0x1c0 [ 125.785218][ T7770] ksys_read+0xda/0x1a0 [ 125.785241][ T7770] __x64_sys_read+0x40/0x50 [ 125.785261][ T7770] x64_sys_call+0x27bc/0x2ff0 [ 125.785304][ T7770] do_syscall_64+0xd2/0x200 [ 125.785347][ T7770] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 125.785377][ T7770] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 125.785409][ T7770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.785450][ T7770] RIP: 0033:0x7fb6abafd5fc [ 125.785469][ T7770] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 125.785492][ T7770] RSP: 002b:00007fb6aa567030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 125.785516][ T7770] RAX: ffffffffffffffda RBX: 00007fb6abd25fa0 RCX: 00007fb6abafd5fc [ 125.785569][ T7770] RDX: 000000000000000f RSI: 00007fb6aa5670a0 RDI: 0000000000000006 [ 125.785585][ T7770] RBP: 00007fb6aa567090 R08: 0000000000000000 R09: 0000000000000000 [ 125.785601][ T7770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 125.785614][ T7770] R13: 00007fb6abd26038 R14: 00007fb6abd25fa0 R15: 00007ffc49bc6ee8 [ 125.785632][ T7770] [ 126.099644][ T7784] loop3: detected capacity change from 0 to 2048 [ 126.109941][ T7784] EXT4-fs: dax option not supported [ 126.373720][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 126.373739][ T29] audit: type=1400 audit(1755510163.688:211898): avc: denied { setopt } for pid=7799 comm="syz.3.1546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 126.440546][ T7804] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(18) [ 126.447188][ T7804] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 126.454814][ T7804] vhci_hcd vhci_hcd.0: Device attached [ 126.463412][ T7804] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(20) [ 126.470165][ T7804] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 126.477692][ T7804] vhci_hcd vhci_hcd.0: Device attached [ 126.488662][ T7804] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 126.497485][ T7804] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(24) [ 126.504103][ T7804] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 126.511701][ T7804] vhci_hcd vhci_hcd.0: Device attached [ 126.527242][ T7804] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(26) [ 126.533893][ T7804] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 126.541609][ T7804] vhci_hcd vhci_hcd.0: Device attached [ 126.667256][ T7815] loop5: detected capacity change from 0 to 512 [ 126.677384][ T7815] journal_path: Non-blockdev passed as './bus' [ 126.683633][ T7815] EXT4-fs: error: could not find journal device path [ 126.695871][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811a9e8600: rx timeout, send abort [ 126.704158][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811a9e8600: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 126.718969][ T3391] usb 7-1: new low-speed USB device number 2 using vhci_hcd [ 126.889414][ T29] audit: type=1400 audit(1755510164.198:211899): avc: denied { ioctl } for pid=7816 comm="syz.1.1548" path="socket:[18682]" dev="sockfs" ino=18682 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 127.197215][ T7811] vhci_hcd: connection closed [ 127.197332][ T7807] vhci_hcd: connection closed [ 127.205433][ T7809] vhci_hcd: connection closed [ 127.206003][ T7753] vhci_hcd: stop threads [ 127.210178][ T7805] vhci_hcd: connection reset by peer [ 127.214887][ T7753] vhci_hcd: release socket [ 127.214902][ T7753] vhci_hcd: disconnect device [ 127.229954][ T7753] vhci_hcd: stop threads [ 127.238056][ T7753] vhci_hcd: release socket [ 127.238132][ T7753] vhci_hcd: disconnect device [ 127.239342][ T7753] vhci_hcd: stop threads [ 127.244073][ T7826] validate_nla: 1 callbacks suppressed [ 127.244090][ T7826] netlink: 'syz.5.1550': attribute type 1 has an invalid length. [ 127.247671][ T7753] vhci_hcd: release socket [ 127.247691][ T7753] vhci_hcd: disconnect device [ 127.248089][ T7753] vhci_hcd: stop threads [ 127.278631][ T7753] vhci_hcd: release socket [ 127.283125][ T7753] vhci_hcd: disconnect device [ 127.298517][ T29] audit: type=1326 audit(1755510164.608:211900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7832 comm="syz.5.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4cca6ebe9 code=0x7ffc0000 [ 127.325880][ T29] audit: type=1326 audit(1755510164.608:211901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7832 comm="syz.5.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4cca6ebe9 code=0x7ffc0000 [ 127.349579][ T29] audit: type=1326 audit(1755510164.608:211902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7832 comm="syz.5.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4cca6ebe9 code=0x7ffc0000 [ 127.373336][ T29] audit: type=1326 audit(1755510164.608:211903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7832 comm="syz.5.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4cca6ebe9 code=0x7ffc0000 [ 127.396953][ T29] audit: type=1326 audit(1755510164.608:211904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7832 comm="syz.5.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4cca6ebe9 code=0x7ffc0000 [ 127.420590][ T29] audit: type=1326 audit(1755510164.608:211905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7832 comm="syz.5.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4cca6ebe9 code=0x7ffc0000 [ 127.444255][ T29] audit: type=1326 audit(1755510164.608:211906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7832 comm="syz.5.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd4cca6ebe9 code=0x7ffc0000 [ 127.451218][ T7839] loop5: detected capacity change from 0 to 512 [ 127.468491][ T29] audit: type=1326 audit(1755510164.638:211907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7832 comm="syz.5.1552" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4cca6ebe9 code=0x7ffc0000 [ 127.475544][ T7839] EXT4-fs: Ignoring removed oldalloc option [ 127.519243][ T7839] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.1554: Parent and EA inode have the same ino 15 [ 127.534536][ T7839] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.1554: Parent and EA inode have the same ino 15 [ 127.547499][ T7839] EXT4-fs (loop5): 1 orphan inode deleted [ 127.780698][ T7850] __nla_validate_parse: 12 callbacks suppressed [ 127.780716][ T7850] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1554'. [ 127.812929][ T7850] EXT4-fs warning (device loop5): __ext4_unlink:3282: inode #15: comm syz.5.1554: Deleting file 'file1' with no links [ 127.848378][ T7852] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.906955][ T7852] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.060055][ T7852] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.197284][ T7852] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 128.258340][ T7736] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.277825][ T7736] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.301182][ T7736] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.321352][ T7736] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 128.494072][ T7871] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1564'. [ 128.508209][ T7871] team1: entered promiscuous mode [ 128.513403][ T7871] team1: entered allmulticast mode [ 128.609347][ T7874] loop5: detected capacity change from 0 to 512 [ 128.620070][ T7874] EXT4-fs (loop5): orphan cleanup on readonly fs [ 128.638404][ T7874] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1565: Failed to acquire dquot type 1 [ 128.659468][ T7874] EXT4-fs (loop5): 1 truncate cleaned up [ 128.952910][ T7904] loop2: detected capacity change from 0 to 164 [ 128.975792][ T7904] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 129.257727][ T7910] loop1: detected capacity change from 0 to 2048 [ 129.292508][ T7913] loop3: detected capacity change from 0 to 164 [ 129.305661][ T6660] loop1: p1 < > p4 [ 129.309740][ T7913] ISOFS: unable to read i-node block [ 129.315103][ T7913] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 129.327346][ T6660] loop1: p4 size 8388608 extends beyond EOD, truncated [ 129.338426][ T7910] loop1: p1 < > p4 [ 129.353002][ T7910] loop1: p4 size 8388608 extends beyond EOD, truncated [ 129.363895][ T7913] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17680 sclass=netlink_route_socket pid=7913 comm=syz.3.1578 [ 129.524661][ T7921] lo speed is unknown, defaulting to 1000 [ 129.767274][ T7934] loop5: detected capacity change from 0 to 1024 [ 129.780496][ T7934] EXT4-fs: Ignoring removed bh option [ 129.786698][ T7934] EXT4-fs: inline encryption not supported [ 129.795361][ T7934] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 129.815171][ T7934] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 129.826739][ T7934] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.1585: lblock 2 mapped to illegal pblock 2 (length 1) [ 129.838405][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b3d6800: rx timeout, send abort [ 129.840901][ T7934] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.1585: lblock 0 mapped to illegal pblock 48 (length 1) [ 129.849599][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b3d6800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 129.864804][ T7934] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1585: Failed to acquire dquot type 0 [ 129.892750][ T7934] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 129.902752][ T7934] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.1585: mark_inode_dirty error [ 129.916049][ T7934] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 129.939957][ T7934] EXT4-fs (loop5): 1 orphan inode deleted [ 129.951171][ T7736] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:45: lblock 1 mapped to illegal pblock 1 (length 1) [ 129.968584][ T7736] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:45: Failed to release dquot type 0 [ 130.002512][ T7934] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.1585: lblock 0 mapped to illegal pblock 48 (length 1) [ 130.148411][ T7939] loop5: detected capacity change from 0 to 4096 [ 130.158912][ T7939] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 130.206987][ T7937] IPv6: Can't replace route, no match found [ 130.232218][ T7944] loop2: detected capacity change from 0 to 1024 [ 130.239054][ T7944] EXT4-fs: inline encryption not supported [ 130.244962][ T7944] EXT4-fs: Ignoring removed i_version option [ 130.253327][ T7944] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 130.265638][ T7944] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.1588: lblock 2 mapped to illegal pblock 2 (length 1) [ 130.279277][ T7948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1589'. [ 130.282353][ T7944] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.1588: lblock 0 mapped to illegal pblock 48 (length 1) [ 130.304166][ T7944] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1588: Failed to acquire dquot type 0 [ 130.304863][ T7948] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1589'. [ 130.325630][ T7944] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 130.336451][ T7944] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.1588: mark_inode_dirty error [ 130.359934][ T7944] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 130.376818][ T7944] EXT4-fs (loop2): 1 orphan inode deleted [ 130.383768][ T7736] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:45: lblock 1 mapped to illegal pblock 1 (length 1) [ 130.398559][ T7736] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:45: Failed to release dquot type 0 [ 130.413736][ T7944] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz.2.1588: Invalid inode table block 1 in block_group 0 [ 130.427698][ T7944] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 130.438303][ T7956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1592'. [ 130.447428][ T7956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1592'. [ 130.449743][ T7954] sock: sock_set_timeout: `syz.0.1590' (pid 7954) tries to set negative timeout [ 130.463230][ T7956] bridge0: port 3(macsec2) entered blocking state [ 130.468375][ T7944] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz.2.1588: mark_inode_dirty error [ 130.472149][ T7956] bridge0: port 3(macsec2) entered disabled state [ 130.497057][ T7956] macsec2: entered allmulticast mode [ 130.504977][ T7956] macsec2: left allmulticast mode [ 130.516685][ T7958] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1592'. [ 130.544338][ T7958] netem: change failed [ 130.574031][ T2994] udevd[2994]: worker [6660] terminated by signal 33 (Unknown signal 33) [ 130.586710][ T7964] FAULT_INJECTION: forcing a failure. [ 130.586710][ T7964] name failslab, interval 1, probability 0, space 0, times 0 [ 130.599427][ T2994] udevd[2994]: worker [6660] failed while handling '/devices/virtual/block/loop2' [ 130.599460][ T7964] CPU: 0 UID: 0 PID: 7964 Comm: syz.3.1595 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 130.599492][ T7964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 130.599574][ T7964] Call Trace: [ 130.599583][ T7964] [ 130.599596][ T7964] __dump_stack+0x1d/0x30 [ 130.599631][ T7964] dump_stack_lvl+0xe8/0x140 [ 130.599656][ T7964] dump_stack+0x15/0x1b [ 130.599680][ T7964] should_fail_ex+0x265/0x280 [ 130.599710][ T7964] should_failslab+0x8c/0xb0 [ 130.599810][ T7964] __kmalloc_noprof+0xa5/0x3e0 [ 130.599883][ T7964] ? trace_probe_init+0x5c/0x280 [ 130.599912][ T7964] trace_probe_init+0x5c/0x280 [ 130.599941][ T7964] alloc_trace_uprobe+0x8b/0x1e0 [ 130.599973][ T7964] create_local_trace_uprobe+0xb5/0x2c0 [ 130.600049][ T7964] perf_uprobe_init+0xc0/0x150 [ 130.600090][ T7964] perf_uprobe_event_init+0xc4/0x140 [ 130.600126][ T7964] perf_try_init_event+0xd9/0x540 [ 130.600163][ T7964] ? perf_event_alloc+0xb1c/0x1740 [ 130.600220][ T7964] perf_event_alloc+0xb27/0x1740 [ 130.600267][ T7964] __se_sys_perf_event_open+0x4a5/0x11c0 [ 130.600393][ T7964] __x64_sys_perf_event_open+0x67/0x80 [ 130.600435][ T7964] x64_sys_call+0x7bd/0x2ff0 [ 130.600464][ T7964] do_syscall_64+0xd2/0x200 [ 130.600501][ T7964] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 130.600573][ T7964] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 130.600606][ T7964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.600634][ T7964] RIP: 0033:0x7f6fc584ebe9 [ 130.600717][ T7964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.600760][ T7964] RSP: 002b:00007f6fc42b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 130.600784][ T7964] RAX: ffffffffffffffda RBX: 00007f6fc5a75fa0 RCX: 00007f6fc584ebe9 [ 130.600802][ T7964] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 00002000000004c0 [ 130.600819][ T7964] RBP: 00007f6fc42b7090 R08: 0000000000000000 R09: 0000000000000000 [ 130.600836][ T7964] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 130.600853][ T7964] R13: 00007f6fc5a76038 R14: 00007f6fc5a75fa0 R15: 00007ffd459d6558 [ 130.600880][ T7964] [ 130.600922][ T7964] trace_uprobe: Failed to allocate trace_uprobe.(-12) [ 130.624214][ T7966] loop1: detected capacity change from 0 to 256 [ 130.860403][ T7966] FAT-fs (loop1): codepage cp869 not found [ 131.450798][ T7978] loop3: detected capacity change from 0 to 32768 [ 131.492582][ T6654] loop3: p1 p3 < > [ 131.513159][ T7978] loop3: p1 p3 < > [ 131.713642][ T6654] udevd[6654]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 131.715275][ T6709] udevd[6709]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 131.733280][ T29] kauditd_printk_skb: 288 callbacks suppressed [ 131.733295][ T29] audit: type=1326 audit(1755510169.038:212187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7994 comm="syz.3.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc584ebe9 code=0x7ffc0000 [ 131.763044][ T29] audit: type=1326 audit(1755510169.038:212188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7994 comm="syz.3.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6fc584ebe9 code=0x7ffc0000 [ 131.781337][ T3391] usb 7-1: enqueue for inactive port 0 [ 131.786568][ T29] audit: type=1326 audit(1755510169.038:212189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7994 comm="syz.3.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc584ebe9 code=0x7ffc0000 [ 131.812662][ T3391] usb 7-1: enqueue for inactive port 0 [ 131.815569][ T29] audit: type=1326 audit(1755510169.038:212190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7994 comm="syz.3.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f6fc584ebe9 code=0x7ffc0000 [ 131.844487][ T29] audit: type=1326 audit(1755510169.038:212191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7994 comm="syz.3.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc584ebe9 code=0x7ffc0000 [ 131.868096][ T29] audit: type=1326 audit(1755510169.038:212192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7994 comm="syz.3.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f6fc584ebe9 code=0x7ffc0000 [ 131.892057][ T29] audit: type=1326 audit(1755510169.038:212193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7994 comm="syz.3.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc584ebe9 code=0x7ffc0000 [ 131.915655][ T29] audit: type=1326 audit(1755510169.038:212194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7994 comm="syz.3.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6fc584ebe9 code=0x7ffc0000 [ 131.940261][ T29] audit: type=1326 audit(1755510169.038:212195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7994 comm="syz.3.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc584ebe9 code=0x7ffc0000 [ 131.956951][ T6709] udevd[6709]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 131.963871][ T29] audit: type=1326 audit(1755510169.038:212196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7994 comm="syz.3.1603" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6fc584ebe9 code=0x7ffc0000 [ 131.988582][ T6654] udevd[6654]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 132.007156][ T3391] vhci_hcd: vhci_device speed not set [ 132.118741][ T8008] netlink: 328 bytes leftover after parsing attributes in process `syz.3.1607'. [ 132.129334][ T8013] loop2: detected capacity change from 0 to 164 [ 132.157577][ T8013] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 132.218268][ T8017] loop2: detected capacity change from 0 to 512 [ 132.233778][ T8017] EXT4-fs: Ignoring removed i_version option [ 132.270902][ T8017] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 132.293493][ T8017] EXT4-fs (loop2): 1 truncate cleaned up [ 132.323411][ T8017] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1611'. [ 132.354837][ T8021] loop3: detected capacity change from 0 to 512 [ 132.397095][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b135c00: rx timeout, send abort [ 132.405519][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b135c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 132.440835][ T8021] journal_path: Non-blockdev passed as './bus' [ 132.447067][ T8021] EXT4-fs: error: could not find journal device path [ 132.470318][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1611'. [ 132.650029][ T8039] loop5: detected capacity change from 0 to 1024 [ 132.664873][ T8039] EXT4-fs: inline encryption not supported [ 132.670836][ T8039] EXT4-fs: Ignoring removed i_version option [ 132.697117][ T8039] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 132.714668][ T8039] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.1616: lblock 2 mapped to illegal pblock 2 (length 1) [ 132.730004][ T8039] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.1616: lblock 0 mapped to illegal pblock 48 (length 1) [ 132.751253][ T8039] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1616: Failed to acquire dquot type 0 [ 132.771457][ T8039] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 132.783824][ T8042] FAULT_INJECTION: forcing a failure. [ 132.783824][ T8042] name failslab, interval 1, probability 0, space 0, times 0 [ 132.796499][ T8042] CPU: 0 UID: 0 PID: 8042 Comm: syz.0.1619 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 132.796578][ T8042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 132.796594][ T8042] Call Trace: [ 132.796601][ T8042] [ 132.796619][ T8042] __dump_stack+0x1d/0x30 [ 132.796640][ T8042] dump_stack_lvl+0xe8/0x140 [ 132.796658][ T8042] dump_stack+0x15/0x1b [ 132.796676][ T8042] should_fail_ex+0x265/0x280 [ 132.796697][ T8042] should_failslab+0x8c/0xb0 [ 132.796775][ T8042] __kvmalloc_node_noprof+0x123/0x4e0 [ 132.796806][ T8042] ? snd_seq_pool_init+0x50/0x210 [ 132.796834][ T8042] snd_seq_pool_init+0x50/0x210 [ 132.796907][ T8042] snd_seq_ioctl_set_client_pool+0x17f/0x310 [ 132.797005][ T8042] snd_seq_ioctl+0x17d/0x2e0 [ 132.797045][ T8042] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 132.797075][ T8042] __se_sys_ioctl+0xcb/0x140 [ 132.797122][ T8042] __x64_sys_ioctl+0x43/0x50 [ 132.797153][ T8042] x64_sys_call+0x1816/0x2ff0 [ 132.797179][ T8042] do_syscall_64+0xd2/0x200 [ 132.797212][ T8042] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 132.797360][ T8042] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 132.797446][ T8042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.797466][ T8042] RIP: 0033:0x7fb6abafebe9 [ 132.797521][ T8042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.797552][ T8042] RSP: 002b:00007fb6aa567038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 132.797629][ T8042] RAX: ffffffffffffffda RBX: 00007fb6abd25fa0 RCX: 00007fb6abafebe9 [ 132.797644][ T8042] RDX: 0000200000000180 RSI: 000000004058534c RDI: 0000000000000003 [ 132.797656][ T8042] RBP: 00007fb6aa567090 R08: 0000000000000000 R09: 0000000000000000 [ 132.797668][ T8042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 132.797679][ T8042] R13: 00007fb6abd26038 R14: 00007fb6abd25fa0 R15: 00007ffc49bc6ee8 [ 132.797698][ T8042] [ 132.798042][ T8039] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.1616: mark_inode_dirty error [ 133.004309][ T8039] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 133.038491][ T8045] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1620'. [ 133.047865][ T8045] unsupported nla_type 65024 [ 133.053022][ T8039] EXT4-fs (loop5): 1 orphan inode deleted [ 133.065672][ T7733] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:42: lblock 1 mapped to illegal pblock 1 (length 1) [ 133.092916][ T8047] loop1: detected capacity change from 0 to 164 [ 133.114738][ T8047] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 133.136037][ T7733] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:42: Failed to release dquot type 0 [ 133.167977][ T8051] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1623'. [ 133.201660][ T8039] EXT4-fs error (device loop5): __ext4_get_inode_loc:4861: comm syz.5.1616: Invalid inode table block 1 in block_group 0 [ 133.220040][ T8051] loop1: detected capacity change from 0 to 1024 [ 133.244503][ T8039] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 133.258626][ T8051] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 133.280248][ T8039] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz.5.1616: mark_inode_dirty error [ 133.379382][ T8057] loop5: detected capacity change from 0 to 256 [ 133.426282][ T8057] FAT-fs (loop5): codepage cp869 not found [ 133.500201][ T8062] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1627'. [ 133.512273][ T8063] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1626'. [ 133.536275][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1627'. [ 133.725318][ T8069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.734859][ T8069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.252128][ T8074] netlink: 87 bytes leftover after parsing attributes in process `syz.0.1630'. [ 134.278405][ T8076] bridge0: port 1(batadv1) entered blocking state [ 134.285136][ T8076] bridge0: port 1(batadv1) entered disabled state [ 134.298828][ T8076] batadv1: entered allmulticast mode [ 134.305832][ T8076] batadv1: entered promiscuous mode [ 134.482993][ T8091] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1636'. [ 134.492237][ T8091] netem: change failed [ 134.629357][ T8105] lo speed is unknown, defaulting to 1000 [ 134.782786][ T7746] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 134.792208][ T7746] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 134.824181][ T8121] loop2: detected capacity change from 0 to 512 [ 134.830809][ T8121] EXT4-fs: Ignoring removed i_version option [ 134.838149][ T8121] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 134.850132][ T8121] EXT4-fs (loop2): 1 truncate cleaned up [ 134.870656][ T8121] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1645'. [ 134.882779][ T8121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1645'. [ 134.882783][ T8125] pim6reg1: entered promiscuous mode [ 134.897056][ T8125] pim6reg1: entered allmulticast mode [ 134.905718][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811b135c00: rx timeout, send abort [ 134.914102][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b135c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 134.987808][ T8129] tipc: Started in network mode [ 134.992779][ T8129] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 135.003156][ T8129] FAULT_INJECTION: forcing a failure. [ 135.003156][ T8129] name failslab, interval 1, probability 0, space 0, times 0 [ 135.015912][ T8129] CPU: 1 UID: 0 PID: 8129 Comm: syz.5.1648 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 135.015938][ T8129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 135.015949][ T8129] Call Trace: [ 135.015955][ T8129] [ 135.015962][ T8129] __dump_stack+0x1d/0x30 [ 135.015980][ T8129] dump_stack_lvl+0xe8/0x140 [ 135.016059][ T8129] dump_stack+0x15/0x1b [ 135.016073][ T8129] should_fail_ex+0x265/0x280 [ 135.016092][ T8129] should_failslab+0x8c/0xb0 [ 135.016113][ T8129] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 135.016215][ T8129] ? sock_alloc_inode+0x34/0xa0 [ 135.016240][ T8129] ? __pfx_sock_alloc_inode+0x10/0x10 [ 135.016306][ T8129] sock_alloc_inode+0x34/0xa0 [ 135.016402][ T8129] alloc_inode+0x3d/0x170 [ 135.016426][ T8129] __sock_create+0x122/0x5b0 [ 135.016461][ T8129] ? _printk+0x79/0xa0 [ 135.016532][ T8129] sock_create_kern+0x38/0x50 [ 135.016558][ T8129] udp_sock_create6+0x68/0x3d0 [ 135.016584][ T8129] udp_sock_create+0x4f/0x80 [ 135.016606][ T8129] tipc_udp_enable+0x943/0xb10 [ 135.016641][ T8129] __tipc_nl_bearer_enable+0x945/0xda0 [ 135.016690][ T8129] tipc_nl_bearer_enable+0x22/0x40 [ 135.016708][ T8129] genl_family_rcv_msg_doit+0x143/0x1b0 [ 135.016757][ T8129] genl_rcv_msg+0x422/0x460 [ 135.016827][ T8129] ? __pfx_tipc_nl_bearer_enable+0x10/0x10 [ 135.016849][ T8129] netlink_rcv_skb+0x123/0x220 [ 135.016865][ T8129] ? __pfx_genl_rcv_msg+0x10/0x10 [ 135.016902][ T8129] genl_rcv+0x28/0x40 [ 135.016986][ T8129] netlink_unicast+0x5bd/0x690 [ 135.017017][ T8129] netlink_sendmsg+0x58b/0x6b0 [ 135.017038][ T8129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.017099][ T8129] __sock_sendmsg+0x142/0x180 [ 135.017123][ T8129] ____sys_sendmsg+0x31e/0x4e0 [ 135.017146][ T8129] ___sys_sendmsg+0x17b/0x1d0 [ 135.017178][ T8129] __x64_sys_sendmsg+0xd4/0x160 [ 135.017202][ T8129] x64_sys_call+0x191e/0x2ff0 [ 135.017244][ T8129] do_syscall_64+0xd2/0x200 [ 135.017346][ T8129] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 135.017387][ T8129] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 135.017409][ T8129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.017427][ T8129] RIP: 0033:0x7fd4cca6ebe9 [ 135.017439][ T8129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.017454][ T8129] RSP: 002b:00007fd4cb4d7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.017473][ T8129] RAX: ffffffffffffffda RBX: 00007fd4ccc95fa0 RCX: 00007fd4cca6ebe9 [ 135.017483][ T8129] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000000c [ 135.017493][ T8129] RBP: 00007fd4cb4d7090 R08: 0000000000000000 R09: 0000000000000000 [ 135.017503][ T8129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.017593][ T8129] R13: 00007fd4ccc96038 R14: 00007fd4ccc95fa0 R15: 00007fff2df73468 [ 135.017612][ T8129] [ 135.017623][ T8129] socket: no more sockets [ 135.113123][ T8135] FAULT_INJECTION: forcing a failure. [ 135.113123][ T8135] name failslab, interval 1, probability 0, space 0, times 0 [ 135.117145][ T8129] tipc: Enabling of bearer rejected, failed to enable media [ 135.324267][ T8135] CPU: 0 UID: 0 PID: 8135 Comm: syz.3.1649 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 135.324293][ T8135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 135.324352][ T8135] Call Trace: [ 135.324358][ T8135] [ 135.324365][ T8135] __dump_stack+0x1d/0x30 [ 135.324429][ T8135] dump_stack_lvl+0xe8/0x140 [ 135.324454][ T8135] dump_stack+0x15/0x1b [ 135.324475][ T8135] should_fail_ex+0x265/0x280 [ 135.324542][ T8135] should_failslab+0x8c/0xb0 [ 135.324563][ T8135] __kmalloc_node_track_caller_noprof+0xa4/0x410 [ 135.324590][ T8135] ? sidtab_sid2str_get+0xa0/0x130 [ 135.324688][ T8135] kmemdup_noprof+0x2b/0x70 [ 135.324712][ T8135] sidtab_sid2str_get+0xa0/0x130 [ 135.324731][ T8135] security_sid_to_context_core+0x1eb/0x2e0 [ 135.324751][ T8135] security_sid_to_context+0x27/0x40 [ 135.324769][ T8135] selinux_lsmprop_to_secctx+0x67/0xf0 [ 135.324859][ T8135] security_lsmprop_to_secctx+0x43/0x80 [ 135.324884][ T8135] audit_log_task_context+0x77/0x190 [ 135.324984][ T8135] audit_log_task+0xf4/0x250 [ 135.325009][ T8135] ? hash+0x1e0/0x230 [ 135.325035][ T8135] audit_seccomp+0x61/0x100 [ 135.325058][ T8135] ? __seccomp_filter+0x68c/0x10d0 [ 135.325077][ T8135] __seccomp_filter+0x69d/0x10d0 [ 135.325114][ T8135] ? user_path_at+0x109/0x130 [ 135.325141][ T8135] ? __traceiter_kmem_cache_free+0x38/0x60 [ 135.325161][ T8135] ? user_path_at+0x109/0x130 [ 135.325234][ T8135] ? kmem_cache_free+0xdf/0x300 [ 135.325262][ T8135] __secure_computing+0x82/0x150 [ 135.325416][ T8135] syscall_trace_enter+0xcf/0x1e0 [ 135.325437][ T8135] do_syscall_64+0xac/0x200 [ 135.325461][ T8135] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 135.325561][ T8135] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 135.325657][ T8135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.325676][ T8135] RIP: 0033:0x7f6fc584d5fc [ 135.325689][ T8135] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 135.325709][ T8135] RSP: 002b:00007f6fc42b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 135.325725][ T8135] RAX: ffffffffffffffda RBX: 00007f6fc5a75fa0 RCX: 00007f6fc584d5fc [ 135.325786][ T8135] RDX: 000000000000000f RSI: 00007f6fc42b70a0 RDI: 0000000000000007 [ 135.325797][ T8135] RBP: 00007f6fc42b7090 R08: 0000000000000000 R09: 0000000000000000 [ 135.325808][ T8135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 135.325848][ T8135] R13: 00007f6fc5a76038 R14: 00007f6fc5a75fa0 R15: 00007ffd459d6558 [ 135.325866][ T8135] [ 135.594393][ T8143] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1652'. [ 135.740436][ T8150] FAULT_INJECTION: forcing a failure. [ 135.740436][ T8150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.753631][ T8150] CPU: 1 UID: 0 PID: 8150 Comm: syz.1.1654 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 135.753733][ T8150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 135.753746][ T8150] Call Trace: [ 135.753752][ T8150] [ 135.753759][ T8150] __dump_stack+0x1d/0x30 [ 135.753780][ T8150] dump_stack_lvl+0xe8/0x140 [ 135.753809][ T8150] dump_stack+0x15/0x1b [ 135.753829][ T8150] should_fail_ex+0x265/0x280 [ 135.753927][ T8150] should_fail+0xb/0x20 [ 135.753947][ T8150] should_fail_usercopy+0x1a/0x20 [ 135.753967][ T8150] _copy_to_user+0x20/0xa0 [ 135.754030][ T8150] simple_read_from_buffer+0xb5/0x130 [ 135.754057][ T8150] proc_fail_nth_read+0x10e/0x150 [ 135.754152][ T8150] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 135.754197][ T8150] vfs_read+0x1a8/0x770 [ 135.754224][ T8150] ? sock_common_setsockopt+0x69/0x80 [ 135.754339][ T8150] ksys_read+0xda/0x1a0 [ 135.754368][ T8150] __x64_sys_read+0x40/0x50 [ 135.754388][ T8150] x64_sys_call+0x27bc/0x2ff0 [ 135.754408][ T8150] do_syscall_64+0xd2/0x200 [ 135.754433][ T8150] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 135.754535][ T8150] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 135.754566][ T8150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.754632][ T8150] RIP: 0033:0x7f37988bd5fc [ 135.754650][ T8150] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 135.754673][ T8150] RSP: 002b:00007f3797327030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 135.754696][ T8150] RAX: ffffffffffffffda RBX: 00007f3798ae5fa0 RCX: 00007f37988bd5fc [ 135.754716][ T8150] RDX: 000000000000000f RSI: 00007f37973270a0 RDI: 0000000000000004 [ 135.754731][ T8150] RBP: 00007f3797327090 R08: 0000000000000000 R09: 0000000000000000 [ 135.754746][ T8150] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 135.754762][ T8150] R13: 00007f3798ae6038 R14: 00007f3798ae5fa0 R15: 00007fffbf780d88 [ 135.754784][ T8150] [ 136.018245][ T8158] tipc: Started in network mode [ 136.023349][ T8158] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 136.032324][ T8158] tipc: Enabling of bearer rejected, failed to enable media [ 136.088206][ T8159] loop5: detected capacity change from 0 to 512 [ 136.112548][ T8159] EXT4-fs: Ignoring removed oldalloc option [ 136.125482][ T8163] loop2: detected capacity change from 0 to 512 [ 136.134805][ T8159] EXT4-fs error (device loop5): ext4_xattr_inode_iget:433: comm syz.5.1658: Parent and EA inode have the same ino 15 [ 136.173363][ T8163] EXT4-fs: Ignoring removed oldalloc option [ 136.186528][ T8159] EXT4-fs (loop5): Remounting filesystem read-only [ 136.201275][ T8159] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -30) [ 136.216547][ T8159] EXT4-fs (loop5): 1 orphan inode deleted [ 136.222664][ T8159] EXT4-fs mount: 24 callbacks suppressed [ 136.222690][ T8159] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.242856][ T8169] FAULT_INJECTION: forcing a failure. [ 136.242856][ T8169] name failslab, interval 1, probability 0, space 0, times 0 [ 136.255547][ T8169] CPU: 0 UID: 0 PID: 8169 Comm: syz.0.1661 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 136.255582][ T8169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 136.255599][ T8169] Call Trace: [ 136.255607][ T8169] [ 136.255616][ T8169] __dump_stack+0x1d/0x30 [ 136.255709][ T8169] dump_stack_lvl+0xe8/0x140 [ 136.255757][ T8169] dump_stack+0x15/0x1b [ 136.255778][ T8169] should_fail_ex+0x265/0x280 [ 136.255799][ T8169] should_failslab+0x8c/0xb0 [ 136.255822][ T8169] kmem_cache_alloc_noprof+0x50/0x310 [ 136.255933][ T8169] ? dst_alloc+0xbd/0x100 [ 136.255954][ T8169] dst_alloc+0xbd/0x100 [ 136.255970][ T8169] ? ip_vs_ftp_out+0x732/0x980 [ 136.255995][ T8169] ip_route_output_key_hash_rcu+0xef5/0x1380 [ 136.256100][ T8169] ip_route_output_flow+0x7b/0x130 [ 136.256127][ T8169] __ip4_datagram_connect+0x583/0x7e0 [ 136.256172][ T8169] udp_connect+0x33/0x110 [ 136.256218][ T8169] inet_dgram_connect+0x125/0x1c0 [ 136.256322][ T8169] ? __pfx_inet_dgram_connect+0x10/0x10 [ 136.256341][ T8169] __sys_connect+0x1f2/0x2b0 [ 136.256379][ T8169] __x64_sys_connect+0x3f/0x50 [ 136.256419][ T8169] x64_sys_call+0x2c08/0x2ff0 [ 136.256468][ T8169] do_syscall_64+0xd2/0x200 [ 136.256496][ T8169] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 136.256520][ T8169] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 136.256552][ T8169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.256636][ T8169] RIP: 0033:0x7fb6abafebe9 [ 136.256651][ T8169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.256668][ T8169] RSP: 002b:00007fb6aa567038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 136.256686][ T8169] RAX: ffffffffffffffda RBX: 00007fb6abd25fa0 RCX: 00007fb6abafebe9 [ 136.256751][ T8169] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 136.256767][ T8169] RBP: 00007fb6aa567090 R08: 0000000000000000 R09: 0000000000000000 [ 136.256820][ T8169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.256861][ T8169] R13: 00007fb6abd26038 R14: 00007fb6abd25fa0 R15: 00007ffc49bc6ee8 [ 136.256885][ T8169] [ 136.259715][ T6685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.440357][ T8163] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.1662: Parent and EA inode have the same ino 15 [ 136.548650][ T8163] EXT4-fs (loop2): Remounting filesystem read-only [ 136.555471][ T8163] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -30) [ 136.575628][ T8163] EXT4-fs (loop2): 1 orphan inode deleted [ 136.582104][ T8163] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.599027][ T8163] FAULT_INJECTION: forcing a failure. [ 136.599027][ T8163] name failslab, interval 1, probability 0, space 0, times 0 [ 136.611768][ T8163] CPU: 0 UID: 0 PID: 8163 Comm: syz.2.1662 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 136.611828][ T8163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 136.611891][ T8163] Call Trace: [ 136.611898][ T8163] [ 136.611907][ T8163] __dump_stack+0x1d/0x30 [ 136.611931][ T8163] dump_stack_lvl+0xe8/0x140 [ 136.611954][ T8163] dump_stack+0x15/0x1b [ 136.611974][ T8163] should_fail_ex+0x265/0x280 [ 136.611999][ T8163] should_failslab+0x8c/0xb0 [ 136.612076][ T8163] kmem_cache_alloc_noprof+0x50/0x310 [ 136.612107][ T8163] ? __es_insert_extent+0x508/0xee0 [ 136.612140][ T8163] __es_insert_extent+0x508/0xee0 [ 136.612177][ T8163] ext4_es_insert_extent+0x435/0x1c10 [ 136.612276][ T8163] ext4_map_query_blocks+0x2fd/0x480 [ 136.612315][ T8163] ext4_map_blocks+0x330/0xd00 [ 136.612347][ T8163] ? xas_load+0x413/0x430 [ 136.612380][ T8163] ? xa_load+0xb1/0xe0 [ 136.612425][ T8163] ext4_getblk+0x114/0x510 [ 136.612461][ T8163] ext4_bread_batch+0x5c/0x320 [ 136.612492][ T8163] __ext4_find_entry+0x840/0xf40 [ 136.612528][ T8163] ? __d_lookup_rcu+0x251/0x2a0 [ 136.612623][ T8163] ? d_alloc_parallel+0xba9/0xc60 [ 136.612665][ T8163] ext4_lookup+0xbb/0x390 [ 136.612693][ T8163] __lookup_slow+0x190/0x250 [ 136.612724][ T8163] lookup_slow+0x3c/0x60 [ 136.612760][ T8163] walk_component+0x1ec/0x220 [ 136.612823][ T8163] path_lookupat+0xfe/0x2a0 [ 136.612853][ T8163] filename_lookup+0x147/0x340 [ 136.612893][ T8163] path_removexattrat+0x148/0x570 [ 136.612997][ T8163] __x64_sys_removexattr+0x38/0x50 [ 136.613025][ T8163] x64_sys_call+0x242f/0x2ff0 [ 136.613046][ T8163] do_syscall_64+0xd2/0x200 [ 136.613150][ T8163] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 136.613191][ T8163] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 136.613216][ T8163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.613237][ T8163] RIP: 0033:0x7f2225d5ebe9 [ 136.613253][ T8163] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.613334][ T8163] RSP: 002b:00007f22247c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c5 [ 136.613357][ T8163] RAX: ffffffffffffffda RBX: 00007f2225f85fa0 RCX: 00007f2225d5ebe9 [ 136.613372][ T8163] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 00002000000004c0 [ 136.613384][ T8163] RBP: 00007f22247c7090 R08: 0000000000000000 R09: 0000000000000000 [ 136.613396][ T8163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.613407][ T8163] R13: 00007f2225f86038 R14: 00007f2225f85fa0 R15: 00007fffedb0c1d8 [ 136.613466][ T8163] [ 136.908002][ T29] kauditd_printk_skb: 304 callbacks suppressed [ 136.908026][ T29] audit: type=1326 audit(1755510174.198:212495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8173 comm="syz.0.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fb6abafebe9 code=0x7ffc0000 [ 136.937894][ T29] audit: type=1326 audit(1755510174.198:212496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8173 comm="syz.0.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6abafebe9 code=0x7ffc0000 [ 136.961564][ T29] audit: type=1326 audit(1755510174.198:212497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8173 comm="syz.0.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6abafebe9 code=0x7ffc0000 [ 136.985173][ T29] audit: type=1326 audit(1755510174.198:212498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8179 comm="syz.3.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f6fc584ebe9 code=0x7ffc0000 [ 137.008943][ T29] audit: type=1326 audit(1755510174.208:212499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8173 comm="syz.0.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fb6abafebe9 code=0x7ffc0000 [ 137.032523][ T29] audit: type=1326 audit(1755510174.208:212500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8173 comm="syz.0.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6abafebe9 code=0x7ffc0000 [ 137.056338][ T29] audit: type=1326 audit(1755510174.208:212501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8173 comm="syz.0.1664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb6abafebe9 code=0x7ffc0000 [ 137.080734][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.083347][ T29] audit: type=1326 audit(1755510174.278:212502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8160 comm="syz.3.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc584ebe9 code=0x7ffc0000 [ 137.113463][ T29] audit: type=1326 audit(1755510174.278:212503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8160 comm="syz.3.1660" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc584ebe9 code=0x7ffc0000 [ 137.184130][ T8187] vhci_hcd: invalid port number 96 [ 137.189317][ T8187] vhci_hcd: default hub control req: 0318 vf7fa i0060 l0 [ 137.217214][ T8195] FAULT_INJECTION: forcing a failure. [ 137.217214][ T8195] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 137.230554][ T8195] CPU: 1 UID: 0 PID: 8195 Comm: syz.5.1669 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 137.230593][ T8195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 137.230642][ T8195] Call Trace: [ 137.230648][ T8195] [ 137.230655][ T8195] __dump_stack+0x1d/0x30 [ 137.230682][ T8195] dump_stack_lvl+0xe8/0x140 [ 137.230706][ T8195] dump_stack+0x15/0x1b [ 137.230726][ T8195] should_fail_ex+0x265/0x280 [ 137.230762][ T8195] should_fail_alloc_page+0xf2/0x100 [ 137.230804][ T8195] __alloc_frozen_pages_noprof+0xff/0x360 [ 137.230903][ T8195] alloc_pages_mpol+0xb3/0x250 [ 137.231023][ T8195] alloc_pages_noprof+0x90/0x130 [ 137.231067][ T8195] get_free_pages_noprof+0xc/0x40 [ 137.231106][ T8195] selinux_genfs_get_sid+0x33/0x180 [ 137.231209][ T8195] inode_doinit_with_dentry+0x5fe/0x7a0 [ 137.231308][ T8195] selinux_d_instantiate+0x27/0x40 [ 137.231369][ T8195] security_d_instantiate+0x7a/0xa0 [ 137.231437][ T8195] d_instantiate+0x3f/0x80 [ 137.231474][ T8195] __debugfs_create_file+0x1c1/0x330 [ 137.231504][ T8195] debugfs_create_file_full+0x3f/0x60 [ 137.231535][ T8195] ? __pfx_team_setup+0x10/0x10 [ 137.231564][ T8195] ref_tracker_dir_debugfs+0x100/0x1e0 [ 137.231644][ T8195] alloc_netdev_mqs+0x1a2/0xa30 [ 137.231722][ T8195] rtnl_create_link+0x239/0x710 [ 137.231744][ T8195] rtnl_newlink_create+0x14c/0x620 [ 137.231779][ T8195] ? security_capable+0x83/0x90 [ 137.231830][ T8195] ? netlink_ns_capable+0x86/0xa0 [ 137.231887][ T8195] rtnl_newlink+0xf29/0x12d0 [ 137.231928][ T8195] ? bpf_trace_run3+0x12c/0x1d0 [ 137.231951][ T8195] ? __kfree_skb+0x109/0x150 [ 137.231968][ T8195] ? __account_obj_stock+0x211/0x350 [ 137.232018][ T8195] ? __rcu_read_unlock+0x4f/0x70 [ 137.232042][ T8195] ? avc_has_perm_noaudit+0x1b1/0x200 [ 137.232148][ T8195] ? cred_has_capability+0x210/0x280 [ 137.232171][ T8195] ? selinux_capable+0x31/0x40 [ 137.232202][ T8195] ? security_capable+0x83/0x90 [ 137.232229][ T8195] ? ns_capable+0x7d/0xb0 [ 137.232253][ T8195] ? __pfx_rtnl_newlink+0x10/0x10 [ 137.232302][ T8195] rtnetlink_rcv_msg+0x5fe/0x6d0 [ 137.232332][ T8195] netlink_rcv_skb+0x123/0x220 [ 137.232349][ T8195] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 137.232384][ T8195] rtnetlink_rcv+0x1c/0x30 [ 137.232410][ T8195] netlink_unicast+0x5bd/0x690 [ 137.232469][ T8195] netlink_sendmsg+0x58b/0x6b0 [ 137.232498][ T8195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.232525][ T8195] __sock_sendmsg+0x142/0x180 [ 137.232612][ T8195] ____sys_sendmsg+0x345/0x4e0 [ 137.232642][ T8195] ___sys_sendmsg+0x17b/0x1d0 [ 137.232690][ T8195] __sys_sendmmsg+0x178/0x300 [ 137.232730][ T8195] __x64_sys_sendmmsg+0x57/0x70 [ 137.232758][ T8195] x64_sys_call+0x1c4a/0x2ff0 [ 137.232849][ T8195] do_syscall_64+0xd2/0x200 [ 137.232874][ T8195] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 137.232900][ T8195] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 137.232946][ T8195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.233036][ T8195] RIP: 0033:0x7fd4cca6ebe9 [ 137.233051][ T8195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.233074][ T8195] RSP: 002b:00007fd4cb4d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 137.233097][ T8195] RAX: ffffffffffffffda RBX: 00007fd4ccc95fa0 RCX: 00007fd4cca6ebe9 [ 137.233112][ T8195] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000007 [ 137.233188][ T8195] RBP: 00007fd4cb4d7090 R08: 0000000000000000 R09: 0000000000000000 [ 137.233199][ T8195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 137.233211][ T8195] R13: 00007fd4ccc96038 R14: 00007fd4ccc95fa0 R15: 00007fff2df73468 [ 137.233229][ T8195] [ 137.286261][ T8195] team2: entered promiscuous mode [ 137.440073][ T8204] loop2: detected capacity change from 0 to 128 [ 137.441899][ T8195] team2: entered allmulticast mode [ 137.463950][ T29] audit: type=1326 audit(1755510174.738:212504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8197 comm="syz.3.1671" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fc584ebe9 code=0x7ffc0000 [ 137.484961][ T8195] syz.5.1669 (8195) used greatest stack depth: 9560 bytes left [ 137.497096][ T8199] bridge0: port 3(macsec2) entered blocking state [ 137.544237][ T8204] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 137.550417][ T8199] bridge0: port 3(macsec2) entered disabled state [ 137.675735][ T8199] macsec2: entered allmulticast mode [ 137.682822][ T8204] ext4 filesystem being mounted at /339/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.698191][ T8199] macsec2: left allmulticast mode [ 137.710686][ T8202] netem: change failed [ 137.776863][ T8221] loop5: detected capacity change from 0 to 1024 [ 137.794857][ T8221] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.807029][ T8221] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 137.818560][ T8221] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters [ 137.823881][ T8219] lo speed is unknown, defaulting to 1000 [ 137.840531][ T8216] loop3: detected capacity change from 0 to 1024 [ 137.853212][ T8204] lo speed is unknown, defaulting to 1000 [ 137.859407][ T8221] EXT4-fs (loop5): Remounting filesystem read-only [ 137.867017][ T8216] EXT4-fs: inline encryption not supported [ 137.867147][ T8216] EXT4-fs: Ignoring removed i_version option [ 137.893812][ T8216] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 137.982072][ T8221] lo speed is unknown, defaulting to 1000 [ 138.029411][ T3307] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 138.048704][ T8233] loop1: detected capacity change from 0 to 1024 [ 138.061763][ T8216] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 2: comm syz.3.1676: lblock 2 mapped to illegal pblock 2 (length 1) [ 138.089764][ T8233] EXT4-fs: Ignoring removed orlov option [ 138.098937][ T8216] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 48: comm syz.3.1676: lblock 0 mapped to illegal pblock 48 (length 1) [ 138.138395][ T8233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.140611][ T8216] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1676: Failed to acquire dquot type 0 [ 138.200486][ T8216] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 138.205790][ T8233] FAULT_INJECTION: forcing a failure. [ 138.205790][ T8233] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 138.223214][ T8233] CPU: 0 UID: 0 PID: 8233 Comm: syz.1.1681 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 138.223324][ T8233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 138.223339][ T8233] Call Trace: [ 138.223346][ T8233] [ 138.223356][ T8233] __dump_stack+0x1d/0x30 [ 138.223413][ T8233] dump_stack_lvl+0xe8/0x140 [ 138.223516][ T8233] dump_stack+0x15/0x1b [ 138.223535][ T8233] should_fail_ex+0x265/0x280 [ 138.223560][ T8233] should_fail_alloc_page+0xf2/0x100 [ 138.223592][ T8233] alloc_pages_bulk_noprof+0xef/0x540 [ 138.223635][ T8233] copy_splice_read+0xf3/0x660 [ 138.223680][ T8233] ? __pfx_ext4_file_splice_read+0x10/0x10 [ 138.223719][ T8233] splice_direct_to_actor+0x290/0x680 [ 138.223743][ T8233] ? __pfx_direct_splice_actor+0x10/0x10 [ 138.223795][ T8233] do_splice_direct+0xda/0x150 [ 138.223816][ T8233] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 138.223846][ T8233] do_sendfile+0x380/0x650 [ 138.223896][ T8233] __x64_sys_sendfile64+0x105/0x150 [ 138.223950][ T8233] x64_sys_call+0x2bb0/0x2ff0 [ 138.223984][ T8233] do_syscall_64+0xd2/0x200 [ 138.224014][ T8233] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 138.224044][ T8233] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.224101][ T8233] RIP: 0033:0x7f37988bebe9 [ 138.224119][ T8233] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.224150][ T8233] RSP: 002b:00007f3797327038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 138.224242][ T8233] RAX: ffffffffffffffda RBX: 00007f3798ae5fa0 RCX: 00007f37988bebe9 [ 138.224256][ T8233] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 138.224272][ T8233] RBP: 00007f3797327090 R08: 0000000000000000 R09: 0000000000000000 [ 138.224286][ T8233] R10: 000000000003ffff R11: 0000000000000246 R12: 0000000000000002 [ 138.224301][ T8233] R13: 00007f3798ae6038 R14: 00007f3798ae5fa0 R15: 00007fffbf780d88 [ 138.224350][ T8233] [ 138.451105][ T8216] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.1676: mark_inode_dirty error [ 138.457761][ T8239] lo speed is unknown, defaulting to 1000 [ 138.489479][ T8216] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 138.536435][ T8216] EXT4-fs (loop3): 1 orphan inode deleted [ 138.560355][ T7736] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:45: lblock 1 mapped to illegal pblock 1 (length 1) [ 138.592393][ T8216] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.607824][ T7736] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:45: Failed to release dquot type 0 [ 138.680981][ T8240] loop2: detected capacity change from 0 to 32768 [ 138.704259][ T8216] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.732075][ T8240] loop2: p1 p3 < > [ 138.733189][ T8246] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.763839][ T8216] EXT4-fs error (device loop3): __ext4_get_inode_loc:4861: comm syz.3.1676: Invalid inode table block 1 in block_group 0 [ 138.783965][ T8246] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.817518][ T8253] __nla_validate_parse: 6 callbacks suppressed [ 138.817537][ T8253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1684'. [ 138.833303][ T8253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1684'. [ 138.857926][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.873101][ T8253] bridge0: port 3(macsec1) entered blocking state [ 138.879689][ T8253] bridge0: port 3(macsec1) entered disabled state [ 138.896559][ T8216] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 138.914543][ T6654] udevd[6654]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 138.917207][ T6704] udevd[6704]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 138.926226][ T8253] macsec1: entered allmulticast mode [ 138.943613][ T8216] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz.3.1676: mark_inode_dirty error [ 138.955665][ T8253] macsec1: left allmulticast mode [ 138.978941][ T8246] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.072132][ T8256] loop1: detected capacity change from 0 to 1024 [ 139.087809][ T8246] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.099257][ T8256] EXT4-fs: inline encryption not supported [ 139.105154][ T8256] EXT4-fs: Ignoring removed i_version option [ 139.137726][ T8256] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 139.180924][ T7736] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.205898][ T6685] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.207068][ T7736] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.215042][ T8256] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 2: comm syz.1.1685: lblock 2 mapped to illegal pblock 2 (length 1) [ 139.245539][ T7734] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.259054][ T7734] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.274052][ T8270] loop2: detected capacity change from 0 to 8192 [ 139.281301][ T8256] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 48: comm syz.1.1685: lblock 0 mapped to illegal pblock 48 (length 1) [ 139.300788][ T8256] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1685: Failed to acquire dquot type 0 [ 139.322294][ T8256] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 139.340980][ T8256] EXT4-fs error (device loop1): ext4_evict_inode:254: inode #11: comm syz.1.1685: mark_inode_dirty error [ 139.355601][ T8256] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 139.365876][ T8256] EXT4-fs (loop1): 1 orphan inode deleted [ 139.372203][ T8256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.384662][ T7753] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:62: lblock 1 mapped to illegal pblock 1 (length 1) [ 139.431573][ T7753] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:62: Failed to release dquot type 0 [ 139.459627][ T8256] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.469335][ T8256] EXT4-fs error (device loop1): __ext4_get_inode_loc:4861: comm syz.1.1685: Invalid inode table block 1 in block_group 0 [ 139.484812][ T8256] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 139.495251][ T8256] EXT4-fs error (device loop1): ext4_quota_off:7217: inode #3: comm syz.1.1685: mark_inode_dirty error [ 139.631992][ T8289] loop1: detected capacity change from 0 to 1024 [ 139.648578][ T8289] EXT4-fs: Ignoring removed orlov option [ 139.665932][ T8289] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.758591][ T8289] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.1695: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 139.778652][ T8289] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.1695: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 139.802564][ T8294] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1697'. [ 139.811675][ T8294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1697'. [ 139.823601][ T8294] bridge0: port 2(macsec1) entered blocking state [ 139.830154][ T8294] bridge0: port 2(macsec1) entered disabled state [ 139.836951][ T8294] macsec1: entered allmulticast mode [ 139.842932][ T8294] macsec1: left allmulticast mode [ 139.876382][ T8297] netlink: 272 bytes leftover after parsing attributes in process `syz.0.1698'. [ 139.889616][ T8297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1698'. [ 140.052848][ T8302] loop3: detected capacity change from 0 to 512 [ 140.087983][ T8302] EXT4-fs: Ignoring removed i_version option [ 140.117331][ T8302] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 140.170538][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.258531][ T8302] EXT4-fs (loop3): 1 truncate cleaned up [ 140.327020][ T8302] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.485618][ T8302] netlink: 272 bytes leftover after parsing attributes in process `syz.3.1699'. [ 140.522990][ T8321] netlink: 8 bytes leftover after parsing attributes in process `gtp'. [ 140.550554][ T8323] loop5: detected capacity change from 0 to 256 [ 140.627844][ T8302] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1699'. [ 140.674890][ T8323] FAT-fs (loop5): codepage cp869 not found [ 140.847132][ T8337] loop2: detected capacity change from 0 to 512 [ 140.950692][ T8337] EXT4-fs: Ignoring removed i_version option [ 140.970896][ T8337] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 141.002259][ T8337] EXT4-fs (loop2): 1 truncate cleaned up [ 141.007358][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.011646][ T8337] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.052011][ T8337] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1712'. [ 141.114204][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.171256][ T8349] loop2: detected capacity change from 0 to 512 [ 141.244892][ T8356] loop2: detected capacity change from 0 to 164 [ 141.265505][ T8358] loop1: detected capacity change from 0 to 128 [ 141.294514][ T8353] sd 0:0:1:0: device reset [ 141.342979][ T8362] process 'syz.0.1720' launched '/dev/fd/4' with NULL argv: empty string added [ 141.444165][ T8371] infiniband !yz!: set down [ 141.448755][ T8371] infiniband !yz!: added team_slave_0 [ 141.493045][ T8371] RDS/IB: !yz!: added [ 141.498392][ T8378] loop1: detected capacity change from 0 to 512 [ 141.517900][ T8378] EXT4-fs: Ignoring removed i_version option [ 141.539274][ T8371] smc: adding ib device !yz! with port count 1 [ 141.546593][ T8378] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 141.573128][ T8378] EXT4-fs (loop1): 1 truncate cleaned up [ 141.580759][ T8378] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.593137][ T8371] smc: ib device !yz! port 1 has pnetid [ 141.670915][ T8374] IPv6: Can't replace route, no match found [ 141.699067][ T3311] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.757807][ T8383] netlink: 'syz.1.1727': attribute type 3 has an invalid length. [ 141.999516][ T29] kauditd_printk_skb: 441 callbacks suppressed [ 141.999536][ T29] audit: type=1400 audit(1755510179.308:212940): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 142.047673][ T29] audit: type=1400 audit(1755510179.358:212941): avc: denied { nlmsg_write } for pid=8396 comm="syz.2.1731" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 142.093095][ T29] audit: type=1400 audit(1755510179.408:212942): avc: denied { listen } for pid=8398 comm="syz.2.1732" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 142.115553][ T29] audit: type=1400 audit(1755510179.428:212943): avc: denied { accept } for pid=8398 comm="syz.2.1732" lport=50052 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 142.148092][ T29] audit: type=1400 audit(1755510179.448:212944): avc: denied { read } for pid=8398 comm="syz.2.1732" name="mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 142.171378][ T29] audit: type=1400 audit(1755510179.448:212945): avc: denied { open } for pid=8398 comm="syz.2.1732" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 142.173735][ C1] vcan0: j1939_tp_rxtimer: 0xffff88811abe4c00: rx timeout, send abort [ 142.195071][ T29] audit: type=1400 audit(1755510179.458:212946): avc: denied { ioctl } for pid=8398 comm="syz.2.1732" path="/dev/mISDNtimer" dev="devtmpfs" ino=250 ioctlcmd=0x4940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 142.203864][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811abe4c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 142.235509][ T29] audit: type=1400 audit(1755510179.518:212947): avc: denied { create } for pid=8402 comm="syz.0.1733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 142.262513][ T29] audit: type=1400 audit(1755510179.548:212948): avc: denied { read } for pid=2976 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 142.284725][ T29] audit: type=1400 audit(1755510179.548:212949): avc: denied { search } for pid=2976 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 142.383913][ T8412] lo speed is unknown, defaulting to 1000 [ 142.389820][ T8412] lo speed is unknown, defaulting to 1000 [ 142.396093][ T8412] lo speed is unknown, defaulting to 1000 [ 142.403854][ T8412] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 142.421190][ T8412] lo speed is unknown, defaulting to 1000 [ 142.431543][ T8412] lo speed is unknown, defaulting to 1000 [ 142.438569][ T8420] FAULT_INJECTION: forcing a failure. [ 142.438569][ T8420] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 142.451913][ T8420] CPU: 1 UID: 0 PID: 8420 Comm: syz.5.1739 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 142.451944][ T8420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 142.451956][ T8420] Call Trace: [ 142.451963][ T8420] [ 142.451970][ T8420] __dump_stack+0x1d/0x30 [ 142.451994][ T8420] dump_stack_lvl+0xe8/0x140 [ 142.452068][ T8420] dump_stack+0x15/0x1b [ 142.452086][ T8420] should_fail_ex+0x265/0x280 [ 142.452151][ T8420] should_fail_alloc_page+0xf2/0x100 [ 142.452185][ T8420] __alloc_frozen_pages_noprof+0xff/0x360 [ 142.452232][ T8420] alloc_pages_mpol+0xb3/0x250 [ 142.452312][ T8420] vma_alloc_folio_noprof+0x1aa/0x300 [ 142.452480][ T8420] handle_mm_fault+0xec2/0x2c20 [ 142.452524][ T8420] do_user_addr_fault+0x636/0x1090 [ 142.452645][ T8420] exc_page_fault+0x62/0xa0 [ 142.452673][ T8420] asm_exc_page_fault+0x26/0x30 [ 142.452696][ T8420] RIP: 0033:0x7fd4cc930ba3 [ 142.452715][ T8420] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c [ 142.452765][ T8420] RSP: 002b:00007fd4cb4d64a0 EFLAGS: 00010206 [ 142.452915][ T8420] RAX: 0000000000006000 RBX: 00007fd4cb4d6540 RCX: 00007fd4c30b7000 [ 142.452930][ T8420] RDX: 00007fd4cb4d66e0 RSI: 0000000000000011 RDI: 00007fd4cb4d65e0 [ 142.452944][ T8420] RBP: 0000000000000079 R08: 0000000000000009 R09: 00000000000001ae [ 142.452959][ T8420] R10: 00000000000001d4 R11: 00007fd4cb4d6540 R12: 0000000000000001 [ 142.452975][ T8420] R13: 00007fd4ccb0d980 R14: 000000000000001d R15: 00007fd4cb4d65e0 [ 142.453069][ T8420] [ 142.453300][ T8420] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 142.462643][ T8412] lo speed is unknown, defaulting to 1000 [ 142.473410][ T8420] loop5: detected capacity change from 0 to 256 [ 142.493623][ T8412] lo speed is unknown, defaulting to 1000 [ 142.639927][ T8412] lo speed is unknown, defaulting to 1000 [ 142.737909][ T8432] loop5: detected capacity change from 0 to 1024 [ 142.746176][ T8432] EXT4-fs: inline encryption not supported [ 142.752087][ T8432] EXT4-fs: Ignoring removed i_version option [ 142.762743][ T8432] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 142.776519][ T8432] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 2: comm syz.5.1740: lblock 2 mapped to illegal pblock 2 (length 1) [ 142.792835][ T8432] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 48: comm syz.5.1740: lblock 0 mapped to illegal pblock 48 (length 1) [ 142.808004][ T8432] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1740: Failed to acquire dquot type 0 [ 142.822509][ T8432] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 142.832596][ T8432] EXT4-fs error (device loop5): ext4_evict_inode:254: inode #11: comm syz.5.1740: mark_inode_dirty error [ 142.867828][ T8432] EXT4-fs warning (device loop5): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 142.880160][ T8441] loop2: detected capacity change from 0 to 1024 [ 142.886990][ T8432] EXT4-fs (loop5): 1 orphan inode deleted [ 142.891005][ T8441] EXT4-fs: inline encryption not supported [ 142.898659][ T8441] EXT4-fs: Ignoring removed i_version option [ 142.911668][ T7734] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:43: lblock 1 mapped to illegal pblock 1 (length 1) [ 142.928789][ T8441] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 142.942473][ T8432] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.962574][ T7734] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:43: Failed to release dquot type 0 [ 142.976197][ T8441] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.1744: lblock 2 mapped to illegal pblock 2 (length 1) [ 142.992512][ T8432] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.002709][ T8441] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.1744: lblock 0 mapped to illegal pblock 48 (length 1) [ 143.017692][ T8432] EXT4-fs error (device loop5): __ext4_get_inode_loc:4861: comm syz.5.1740: Invalid inode table block 1 in block_group 0 [ 143.025710][ T8441] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.1744: Failed to acquire dquot type 0 [ 143.031629][ T8432] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 143.044766][ T8441] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 143.052321][ T8432] EXT4-fs error (device loop5): ext4_quota_off:7217: inode #3: comm syz.5.1740: mark_inode_dirty error [ 143.073603][ T8441] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.1744: mark_inode_dirty error [ 143.090624][ T8441] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 143.101388][ T8441] EXT4-fs (loop2): 1 orphan inode deleted [ 143.107948][ T8441] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.120725][ T7753] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:62: lblock 1 mapped to illegal pblock 1 (length 1) [ 143.153222][ T7753] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:62: Failed to release dquot type 0 [ 143.165602][ T8441] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.176589][ T8441] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz.2.1744: Invalid inode table block 1 in block_group 0 [ 143.189765][ T8441] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 143.203897][ T8441] EXT4-fs error (device loop2): ext4_quota_off:7217: inode #3: comm syz.2.1744: mark_inode_dirty error [ 143.326132][ T8453] loop2: detected capacity change from 0 to 1024 [ 143.337753][ T8453] EXT4-fs: Ignoring removed orlov option [ 143.360791][ T8453] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.410013][ T8456] loop3: detected capacity change from 0 to 2048 [ 143.435255][ T8456] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.460490][ T3307] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.505763][ T8456] ext4 filesystem being mounted at /341/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 143.573743][ T8461] loop2: detected capacity change from 0 to 512 [ 143.593334][ T8461] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 143.648802][ T8461] EXT4-fs (loop2): 1 truncate cleaned up [ 143.661917][ T8461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.700538][ T8461] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.719900][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.752503][ T8472] FAULT_INJECTION: forcing a failure. [ 143.752503][ T8472] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.765645][ T8472] CPU: 0 UID: 0 PID: 8472 Comm: syz.1.1754 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 143.765682][ T8472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 143.765702][ T8472] Call Trace: [ 143.765714][ T8472] [ 143.765721][ T8472] __dump_stack+0x1d/0x30 [ 143.765746][ T8472] dump_stack_lvl+0xe8/0x140 [ 143.765770][ T8472] dump_stack+0x15/0x1b [ 143.765790][ T8472] should_fail_ex+0x265/0x280 [ 143.765816][ T8472] should_fail+0xb/0x20 [ 143.765835][ T8472] should_fail_usercopy+0x1a/0x20 [ 143.765970][ T8472] _copy_from_user+0x1c/0xb0 [ 143.766006][ T8472] ___sys_recvmsg+0xaa/0x370 [ 143.766089][ T8472] do_recvmmsg+0x1ef/0x540 [ 143.766183][ T8472] ? fput+0x8f/0xc0 [ 143.766219][ T8472] __x64_sys_recvmmsg+0xe5/0x170 [ 143.766293][ T8472] x64_sys_call+0x27a6/0x2ff0 [ 143.766343][ T8472] do_syscall_64+0xd2/0x200 [ 143.766368][ T8472] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 143.766451][ T8472] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 143.766480][ T8472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.766500][ T8472] RIP: 0033:0x7f37988bebe9 [ 143.766569][ T8472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.766591][ T8472] RSP: 002b:00007f3797327038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 143.766609][ T8472] RAX: ffffffffffffffda RBX: 00007f3798ae5fa0 RCX: 00007f37988bebe9 [ 143.766621][ T8472] RDX: 040000000000012d RSI: 0000200000000080 RDI: 0000000000000003 [ 143.766633][ T8472] RBP: 00007f3797327090 R08: 0000000000000000 R09: 0000000000000000 [ 143.766644][ T8472] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 143.766739][ T8472] R13: 00007f3798ae6038 R14: 00007f3798ae5fa0 R15: 00007fffbf780d88 [ 143.766763][ T8472] [ 147.578373][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 147.578391][ T29] audit: type=1400 audit(1755510184.888:212970): avc: denied { watch watch_reads } for pid=8505 comm="syz.0.1766" path="/374/file0" dev="tmpfs" ino=2052 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 147.612159][ T8508] __nla_validate_parse: 8 callbacks suppressed [ 147.612176][ T8508] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1766'. [ 147.627985][ T8508] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 147.645315][ T29] audit: type=1400 audit(1755510184.918:212971): avc: denied { execute } for pid=8505 comm="syz.0.1766" name="file0" dev="tmpfs" ino=2052 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 147.667946][ T29] audit: type=1400 audit(1755510184.918:212972): avc: denied { execute_no_trans } for pid=8505 comm="syz.0.1766" path="/374/file0" dev="tmpfs" ino=2052 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 147.710674][ T29] audit: type=1400 audit(1755510184.998:212973): avc: denied { create } for pid=8505 comm="syz.0.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 147.730564][ T29] audit: type=1400 audit(1755510184.998:212974): avc: denied { write } for pid=8505 comm="syz.0.1766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 147.750446][ T29] audit: type=1400 audit(1755510184.998:212975): avc: denied { ioctl } for pid=8506 comm="syz.2.1768" path="socket:[20977]" dev="sockfs" ino=20977 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 147.775535][ T29] audit: type=1400 audit(1755510185.008:212976): avc: denied { name_bind } for pid=8513 comm="syz.5.1771" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 147.797799][ T29] audit: type=1400 audit(1755510185.068:212977): avc: denied { connect } for pid=8516 comm="syz.1.1772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 147.817906][ T29] audit: type=1326 audit(1755510185.098:212978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8526 comm="syz.5.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4cca6ebe9 code=0x7ffc0000 [ 147.841519][ T29] audit: type=1326 audit(1755510185.098:212979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8526 comm="syz.5.1773" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4cca6ebe9 code=0x7ffc0000 [ 147.872079][ T8527] loop5: detected capacity change from 0 to 256 [ 147.925053][ T8534] loop1: detected capacity change from 0 to 1764 [ 147.953691][ T8534] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 148.020458][ T8544] loop5: detected capacity change from 0 to 512 [ 148.032427][ T8544] EXT4-fs: Ignoring removed oldalloc option [ 148.038602][ T8544] EXT4-fs: Ignoring removed mblk_io_submit option [ 148.048080][ T8538] ip6gre1: entered allmulticast mode [ 148.055012][ T8544] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 148.067297][ T8544] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=2840c01c, mo2=0102] [ 148.085599][ T8544] System zones: 0-2, 18-18, 34-34 [ 148.090860][ T8544] EXT4-fs (loop5): orphan cleanup on readonly fs [ 148.103903][ T8548] FAULT_INJECTION: forcing a failure. [ 148.103903][ T8548] name failslab, interval 1, probability 0, space 0, times 0 [ 148.116750][ T8548] CPU: 1 UID: 0 PID: 8548 Comm: syz.2.1780 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 148.116787][ T8548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 148.116803][ T8548] Call Trace: [ 148.116812][ T8548] [ 148.116821][ T8548] __dump_stack+0x1d/0x30 [ 148.116888][ T8548] dump_stack_lvl+0xe8/0x140 [ 148.116907][ T8548] dump_stack+0x15/0x1b [ 148.116947][ T8548] should_fail_ex+0x265/0x280 [ 148.116974][ T8548] should_failslab+0x8c/0xb0 [ 148.117004][ T8548] __kmalloc_noprof+0xa5/0x3e0 [ 148.117074][ T8548] ? nf_tables_newrule+0xe25/0x17a0 [ 148.117103][ T8548] nf_tables_newrule+0xe25/0x17a0 [ 148.117149][ T8548] ? __nla_parse+0x40/0x60 [ 148.117242][ T8548] nfnetlink_rcv+0xb96/0x1690 [ 148.117311][ T8548] netlink_unicast+0x5bd/0x690 [ 148.117346][ T8548] netlink_sendmsg+0x58b/0x6b0 [ 148.117369][ T8548] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.117412][ T8548] __sock_sendmsg+0x142/0x180 [ 148.117440][ T8548] ____sys_sendmsg+0x31e/0x4e0 [ 148.117476][ T8548] ___sys_sendmsg+0x17b/0x1d0 [ 148.117519][ T8548] __x64_sys_sendmsg+0xd4/0x160 [ 148.117601][ T8548] x64_sys_call+0x191e/0x2ff0 [ 148.117701][ T8548] do_syscall_64+0xd2/0x200 [ 148.117735][ T8548] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 148.117766][ T8548] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 148.117792][ T8548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.117874][ T8548] RIP: 0033:0x7f2225d5ebe9 [ 148.117888][ T8548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.117946][ T8548] RSP: 002b:00007f22247c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.117970][ T8548] RAX: ffffffffffffffda RBX: 00007f2225f85fa0 RCX: 00007f2225d5ebe9 [ 148.117986][ T8548] RDX: 0000000004000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 148.118002][ T8548] RBP: 00007f22247c7090 R08: 0000000000000000 R09: 0000000000000000 [ 148.118041][ T8548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.118053][ T8548] R13: 00007f2225f86038 R14: 00007f2225f85fa0 R15: 00007fffedb0c1d8 [ 148.118075][ T8548] [ 148.118834][ T8544] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1779: Failed to acquire dquot type 1 [ 148.235136][ T8534] IPv6: Can't replace route, no match found [ 148.350864][ T8544] EXT4-fs (loop5): 1 truncate cleaned up [ 148.356918][ T8544] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 148.444211][ T8557] ================================================================== [ 148.452322][ T8557] BUG: KCSAN: data-race in io_flush_timeouts / io_issue_sqe [ 148.459615][ T8557] [ 148.462000][ T8557] read-write to 0xffff88811a9ab210 of 4 bytes by task 8559 on cpu 0: [ 148.470070][ T8557] io_issue_sqe+0x19c/0x970 [ 148.474586][ T8557] io_wq_submit_work+0x3f7/0x5f0 [ 148.479523][ T8557] io_worker_handle_work+0x44e/0x9b0 [ 148.484806][ T8557] io_wq_worker+0x22e/0x870 [ 148.489307][ T8557] ret_from_fork+0xda/0x150 [ 148.493810][ T8557] ret_from_fork_asm+0x1a/0x30 [ 148.498576][ T8557] [ 148.500892][ T8557] read to 0xffff88811a9ab210 of 4 bytes by task 8557 on cpu 1: [ 148.508433][ T8557] io_flush_timeouts+0x56/0x1d0 [ 148.513288][ T8557] __io_commit_cqring_flush+0xeb/0x100 [ 148.518775][ T8557] io_issue_sqe+0x7cb/0x970 [ 148.523273][ T8557] io_wq_submit_work+0x3f7/0x5f0 [ 148.528207][ T8557] io_worker_handle_work+0x44e/0x9b0 [ 148.533493][ T8557] io_wq_worker+0x22e/0x870 [ 148.537989][ T8557] ret_from_fork+0xda/0x150 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 148.542489][ T8557] ret_from_fork_asm+0x1a/0x30 [ 148.547256][ T8557] [ 148.549577][ T8557] value changed: 0x0000045b -> 0x0000045c [ 148.555288][ T8557] [ 148.557607][ T8557] Reported by Kernel Concurrency Sanitizer on: [ 148.563751][ T8557] CPU: 1 UID: 0 PID: 8557 Comm: iou-wrk-8544 Not tainted 6.17.0-rc1-syzkaller-00224-g8d561baae505 #0 PREEMPT(voluntary) [ 148.576335][ T8557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 148.586390][ T8557] ================================================================== [ 148.748019][ T8543] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.126254][ T7736] batadv1: left allmulticast mode [ 149.131360][ T7736] batadv1: left promiscuous mode [ 149.136403][ T7736] bridge0: port 1(batadv1) entered disabled state [ 149.193077][ T7736] bond0 (unregistering): Released all slaves [ 149.233531][ T7736] tipc: Left network mode [ 149.257982][ T7736] hsr_slave_0: left promiscuous mode [ 149.263828][ T7736] hsr_slave_1: left promiscuous mode [ 149.311343][ T7746] smc: removing ib device !yz! [ 149.635267][ T7736] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.674353][ T7736] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.724512][ T7736] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.783796][ T7736] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.840915][ T7736] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.904321][ T7736] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.953766][ T7736] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.993999][ T7736] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.064571][ T7736] bridge_slave_1: left allmulticast mode [ 150.070344][ T7736] bridge_slave_1: left promiscuous mode [ 150.076185][ T7736] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.084125][ T7736] bridge_slave_0: left allmulticast mode [ 150.089855][ T7736] bridge_slave_0: left promiscuous mode [ 150.095713][ T7736] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.104107][ T7736] bridge_slave_1: left allmulticast mode [ 150.109762][ T7736] bridge_slave_1: left promiscuous mode [ 150.115566][ T7736] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.123485][ T7736] bridge_slave_0: left allmulticast mode [ 150.129141][ T7736] bridge_slave_0: left promiscuous mode [ 150.134883][ T7736] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.224386][ T7736] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.234282][ T7736] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.244125][ T7736] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 150.253280][ T7736] bond0 (unregistering): Released all slaves [ 150.304054][ T7736] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.314123][ T7736] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.323715][ T7736] bond0 (unregistering): Released all slaves [ 150.353717][ T7736] tipc: Left network mode [ 150.363252][ T7736] hsr_slave_0: left promiscuous mode [ 150.369090][ T7736] hsr_slave_1: left promiscuous mode [ 150.375810][ T7736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.383452][ T7736] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.393386][ T7736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.400803][ T7736] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.410577][ T7736] hsr_slave_0: left promiscuous mode [ 150.417385][ T7736] hsr_slave_1: left promiscuous mode [ 150.424001][ T7736] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.431472][ T7736] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.440088][ T7736] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.447583][ T7736] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.462524][ T7736] macvlan1: left promiscuous mode [ 150.467880][ T7736] veth1_macvtap: left promiscuous mode [ 150.474818][ T7736] veth0_macvtap: left promiscuous mode [ 150.480344][ T7736] veth1_vlan: left promiscuous mode [ 150.485872][ T7736] veth0_vlan: left promiscuous mode [ 150.491951][ T7736] veth1_macvtap: left promiscuous mode [ 150.497433][ T7736] veth0_macvtap: left promiscuous mode [ 150.503059][ T7736] veth1_vlan: left promiscuous mode [ 150.508372][ T7736] veth0_vlan: left promiscuous mode [ 150.653647][ T7736] team0 (unregistering): Port device team_slave_1 removed [ 150.663039][ T7736] team0 (unregistering): Port device team_slave_0 removed [ 150.693353][ T1035] lo speed is unknown, defaulting to 1000 [ 150.699119][ T1035] infiniband syz0: ib_query_port failed (-19) [ 151.583511][ T7734] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.652385][ T7734] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.692710][ T7734] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.742531][ T7734] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.811267][ T7734] bridge_slave_1: left allmulticast mode [ 151.816944][ T7734] bridge_slave_1: left promiscuous mode [ 151.822612][ T7734] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.830380][ T7734] bridge_slave_0: left allmulticast mode [ 151.836171][ T7734] bridge_slave_0: left promiscuous mode [ 151.841838][ T7734] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.914065][ T7734] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.923947][ T7734] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.933446][ T7734] bond0 (unregistering): Released all slaves [ 151.942037][ T7734] bond1 (unregistering): Released all slaves [ 151.976714][ T7734] hsr_slave_0: left promiscuous mode [ 151.982850][ T7734] hsr_slave_1: left promiscuous mode [ 151.988519][ T7734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.995951][ T7734] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.004315][ T7734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.011760][ T7734] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.023938][ T7734] veth1_macvtap: left promiscuous mode [ 152.029450][ T7734] veth0_macvtap: left promiscuous mode [ 152.035354][ T7734] veth1_vlan: left promiscuous mode [ 152.040704][ T7734] veth0_vlan: left promiscuous mode [ 152.127023][ T3412] lo speed is unknown, defaulting to 1000 [ 152.132904][ T3412] infiniband syz2: ib_query_port failed (-19)