last executing test programs: 2m8.429358465s ago: executing program 1 (id=383): syz_emit_ethernet(0x4a, &(0x7f00000010c0)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb08004500003c00000000000390780a010102ac1414aa0304"], 0x0) 2m8.341814822s ago: executing program 1 (id=385): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0009}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000700000000000000000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) rmdir(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) capset(0x0, &(0x7f0000000880)={0x0, 0xdd1, 0xffffffb3, 0x0, 0x88fd, 0x10}) syz_clone3(&(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000140)=[0x0], 0x1}, 0x58) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x20000000000000dc, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x2b, 0x81}]}, 0x10) io_submit(r8, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r7, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x00', 0x6, 0x0, 0x0, 0x2}]) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r10 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r10, 0x400, 0x1) close_range(r10, 0xffffffffffffffff, 0x0) r11 = pidfd_getfd(0xffffffffffffffff, r5, 0x0) r12 = open(&(0x7f0000000580)='./file0\x00', 0xa000, 0x8) io_submit(r8, 0x6, &(0x7f00000009c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x4, r9, &(0x7f0000000040)="0262b24b35e35b3eff6ed06f366a60a835b403fbae748f134b7336099590966f56c619104a8a4bb8534644b142ab6cba291d4734b4bcfa4b252a8fb203f8449c59d0e3", 0x43, 0x7, 0x0, 0x3, r10}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5, 0x2, r6, &(0x7f00000002c0)="a56445635bd1910eaafcba2f460dc4988ebc45040151d83982cbdd9d51323c69a50c85b34d2a1fdf41a4bafd38d3baaff2efe7eb1af6f4e5c04513b3a63c1f6c9ea2fc4455f8302dd9a3a6961fb89757ee7d16ed44d17f7c294f3f814b2e04f057ba79c5948b47dbf980caa9a5799ed46c27bd5d044c43cce4bbfabfcdc12c5f3297e9c0f21cde2e00d46314716df96e82ed71c4a47c7a74747e371f0b8e542cbd290e67fcb7321515d21bd717dd9b4fe9bdfae0f40904cbe3129d13afc35c24c82734d49b2ebaa45b282edf85249559795fe20548882e8eeba66aaa9a296c", 0xdf, 0xc74, 0x0, 0x1, r11}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, r4, &(0x7f00000003c0)="15a888b4d7b5194363c01b9d911f5e2859d06fd1ccbd235e130d31fe78e5a6390ec480be7cc429c648ef2dd51931b01beab664af12adfe5c5e18688a2ecd98c69978f9d14c9d3ff5dc0ec638c5c6d22fafbd31c90444c92e49ccb288f9d5ab2fe6bbaadfbb7d338155d2fffe922a1d1772b8a4fc447e33ce76f978ff61a75e8711db9d", 0x83, 0x2, 0x0, 0x2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x3, r0, &(0x7f00000004c0)="1dd8f8aca80c4f352161a7b32271bf923726469d24ecceae0ab3b5cdce194641ce530e1821ab3541d90ccefa1e3b7cc173c4760b0c3789778130f6f54dd4333c9b3877673cc69ce2bba80307f20aee62ac59adec6857cd40beca74b47a2f34094ac59a85b0d7d947757a80d3b0bff37a9abfefeab9be7cb119479f034bb14705480937ef361538972945a289df", 0x8d, 0x7f, 0x0, 0x2, r12}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x1, r0, &(0x7f00000008c0)="a82c3a4b041d31933585466ddfe0b983e0dc6a925cf4808d124f89ba753d06135037c2f1106d023e9923b7b4da36fcf8ebd934f11b2075754fd0f22921e738ba021acf836dc7263bc887c92f3f17b3959c20a9bf102cda88736839eb822b73c23e4d9f4a9d070dd3e8231cfa96186c71419280f459bbb2ca4f2eb68ae02d491a23fc2868edaaf9d90f88ae692ccae20dde65c5eddf251bfd1df0a6dc1e7530f9e2865b297db0987646d0fae50900731f1286468f57fc6d3d22c0fd4a4e377cb659e7af08010d7702d23158684e5d104d23b1275cdffb7f945d73831fbc46157af1becf70eb813cd2bc2b5609645d13956f", 0xf1, 0x100000000, 0x0, 0x3}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x5, r1, &(0x7f00000012c0)="f248a7af99411a254a925619b80342f08e0c25e2f2d8cb18e2f917563909ad35fb8b16f74b64d4c571b9cd04c0a01a5f371baa79569549655594b851bca5f27813d5de3d1bf56f393abb7264b15d0a34cf8bb09363a661035b1e7540f4f242c079c177b3e19c0cde238ae266ddd07e5135e9d206dc1ebb7813205157017844ec8e43203ed2bcda44577adf636a522a8268825a078b2073fd6ca9836c325d703c39bcf542ee925fef772c856c57f73ba0d48499a67a7cb688a637db7b1d02d40de7276b26a2ddb3ac3e88d80e430ea6ffd3f6a2d81710eecdee19c2746041549328ce06e05417110a72ccd61358449ba294c7ea3ea63c8d88c758bf84acfe393274eff93f18f7c502d66dbb2c4b35274e46648f395f66410a937d3da7689a9a39c2f6479f491ff75a7d71a68471a6797628e0df8627167dc98ada9bed34d36c0c076455f57d74c6dd9adbdb26319c5e7558ef4070990f75fd4b89442ddaef641d84064ea1a3d0a89f9c7fd52a1b2aef3bac53f569cf0211822df47c0b88c408385450b85574a444f6409ae98197182bd988aeece04ffe9762b8c0b3cae696c6ecc1b622a4a5932e46e590c57d024bc9e17ecb3ce99baa45293fa6e20f4d844055c3d0ac0294247690972fe545a8e8e5e2ec4ded5906c8f8b0ca2e2fb42db93f9fe25952cc56c7a86513bf13a77d60b473a6af14963850844f2d32c9206290c152fc7c77f240b4b3905af9b127d30a0f87552616561e1376595f4af1dae8914aa23f05330024e0a314c7bed4460cc5ae30a87904bc2774ccd566a6291a3b7b41bf584d754ee10e4647d0fc42da6c7d4ec32c7d2957dafa8bc9bd6ca0176f1f4351be009edab2b335bf8fa2a3fc301cdff32aaae940796fe88a99b3d50f33c85febc7c24a41cda3c8833bfaf83daca2234053fec90eeabd099a8af9eca52689903eaf67eb07d5be37d11d2a246528f0ca9678714a854b07968a645bd1ba70450c42a3f57f1e86a88868b3210dc0e0cbd6763e96d789214f9c89b0e986e6bdecd473250c8bbf15e00c502aa9929a07573ca8223d61ddecc9c4140f962b4605ee9ded309bf203299740fc7bb39f20189d3095d69622f16ef63c5ac73675cf2aa717f6afc14db933d2c0b4e2375834e98f911e98e2dd4b1013ad912d893334876159d6feaf5a58d4397e3ea13cb9825fd61ed587428c1b8a6f960d9f9080efd8a6afc3b225bd414e9ffd62367898ec4d976d89b54e39fe40f4bec83dcc4a0c96cb55a1e97249325f71ca65fb3f3847b5ad3e88cba64971574b6d525ed6e82d1019ae2ba4a9f44782b19ba475661f1d4285ffe92df0d884174bbc835a6258fe548d0d4f9cc713ee55f4a732093a85ece46081b895985f4e20982ab55d302d9584e8042bc6f7eb4c2e6545dd24996a1efee8c65d2111ecdbbeac43c410de747830cd44fe5f44e107701a0faaa5d5142d91cecf1bb96c858ead6ec17fa35ec2eca559f2f4668398b616e586d489ac7b1db70f8903439c1a53812c828ae311ec86ee292f7478ebaf3312b879c0514131b0953cd5ff86134592a95888ac706b5d1c1220281a51fe34cccf3efff00751b853f9e72e05e9c97cdc55c5f95dac2852817e9839ad8ee94e5edee4088687111356d245fbfe1aee2e70a72b46310c255a73c2f66c96d640f52a809e923e4ea0b055ab5fdddba9ce01cf410e7a5810167d8e3c85d6bee9ccca8a384d0a4b25fe5e881b338038f986088d5d3e7e40e6de49b9b5444c487be0d92cf2e91b66b0556dda38a829572a9005d60a3800d0d6103e91a88f2776c40d19c299f57d61ef35439d68fb64bd6fa9ca2c0e06a47406768f84729d117311388b0b3735d775a1b01ea3b87ccf318a3e0cba05b36f36be1093390a8c82ae10cf5b2f348e7cad3375abf3de2bd152b1d9c89cfcd7cd88577c87369e3229059b78166f2ae955045f108c75b943b6feb174f0a3c30c98c6267c20e2fa11deddc63682afae157adc95045d3c110fb6d2906c345f728c76350fba469bb82b1bfaad754702a92569e86dc5a7b94ae1ccf4d9635c7f9a16ac32cecf9089fb5a238f006610506e3f70b1d0a902ca26aa0f8c0c23ca0a7ef61548186f0af55471d569aa42b967fe28a47a801f25fe66f4cd17efc45131785f3b793d98837ef4e7d4ce011ed78887a5dc7536f52e8016a87854669d91300d5679d8c34734982a764a018483972020b639adae8b6374e4f355a70b7087aba362eb34a6ce46a38cbca89629768a3b204b9194d0282f9122d1eaa4bffcaa1adc78538d8ca8eddcc12329319792e139b70c82735e6ba918056e4ee3712007c4ddec69f86222fc32ceac371c824a2b07884ae02273a29ad8f284142179e08a03dc31a05ded818b4b6541832ebd3fa04717ec4dc777416adbd78d2ba20df307f15b32d2da54cae1b9d973fc1ef20d302cbe9907b3848722897129600c587c426515689c1cd9232b80635f589e755a81a9ef867c9c5a2cc6dc3a4f6ff058d9b360934459b0a0da93e8f5d38ba358e4efd2d00b9d8a1aeeed2eddd1c27e9d02ed199702fded8cb4846b06ed6662213027ca7e18a19fd722d04fccaaae43878c10f55e9ff6208cf74519b9303cd187e59d7994bfc89b8a13a97f4cb513d2262e4c9573201c67a50fbad7214948aeb1d8bf44105ad943c2d04556d725e099da61bff0405c8088eaedef1cb616e1601bfc2c3ff9b5620ba981c5b4ae9ddec15b8e0431baf8819e3306dba564753224f0d510bf9259dfd4d2997469763794340885dc9d1fe574a443fe78080e0192c61b246232dbb03631eae0409bfc8f72ad92e3b0f33857602d30a46a1d9a4f072643db2cf17b8f443121365f3d901931e80aaab9f43565bc8c56a0c77e0856491d659fdc5d86fd2dc7764793decac1c86406b4648ae87c3e6c59ab77e9890060c3e4ad525c5808b4ce978f7faa1515797285eb3ba6c09360ba0fe11825c0a114588641f40e1d021a773fb2f6ac0e86482b96d91716d9d03905340d919d66208315f0fdb7d43a5096525dd390d17f999eae4c4309cc9a89339d8af7686fcc2226651c7282e0a6790a2f134e62d4100cbeedd1a2a8cfa1e5e908daf025517056340737e6ca247c4b8c52c76298fd764f1af1219aefec37e5e66b7cc075358c9f682bc7eabf93a9a159d30fed177d775ce404e722e8401e44a99954e7130e4734acf4f7beea393e197ad4d0cb7c5ca1af718007cedf08221bed32b2ad82c57e1348ee28abf1d1e0822c33cec17c9e0b34f857106d91378f58d8819258016c51c6e0ba7236e12224f02fc2f37c35e913e90db940271368c4f4258ef1c20fe2096eb4efcd07952b2d3d30bbe6d5be53742f916c313aa1885377b3ba51d39beb809a2aa11086abe722765a54f3213c6f6e289e2118de164fd7383d2207e23e96bee6fcbfdf730d87e43b280abf5b4635197a66aef22c67e1809d9a962759671b054ddd46d36e1c3d8f6a81731b836f710784295a36847b3d4499b33161823ab947bffdcbcae0dfff471128a93bc1164d5a6d39438d87daffef2a2943c0ff0acd9458bc00011361e2f58050521b199cc1ac25f50883fbefa532bfb8addaab70e1d1d4d46256178d716101efbfcb2617f9fc12485174044811b75527703246ca8aa09efb147c739f6ce8c68ac362d2f3fefcc473729e222a197a841e60675e9ad0391a0f51946c198ff8092647c451ffa0fb3b56be9987fcca90e9ca875bad54c7a9be4df70c0e972885803e2902e4b165ad48fe31567410946460e3b4ff6b0bc56fceec83ce6b3a6f578b06d4b1868c54ac385882ab1b1ace1b45f637ecd88007d62dd3ecefe73b85e49b14da491d0676a24e79731fea85f50ec86fb581ad20d5928b9a1958ed59b58edaec1005f153ba53e56d4a0fd4ad79897baeb3a0a431e27081d255b50f678079f9593d9123d41bda53468da3aae303c7df892a42406b0d18e02d2dee4d1f6bf0bf12801073a9e730ebc6f6fd4604c556486c6c7f415ca499653e0f3b3398f1b21028365d4ac341e785a2e23665b4beb19160dfaa75e03a32a8b86b30895c6933f459ee2be4ba3c7faa9b162073753babe53bd8f447177eb344297f698a59dc4dbd1d9848d84c60fba2165d649d4527805d01d0810451032c8d037068379734849423d73034541eae7d882cabe2d3ff647c19f897c16896c2602725894046470c4b00dc0dab2bf537689a0527916f8efc975665ade5098610ccef89f9cbd2a76c681d63d7bd1c8efe31acb2f76e3d30eecbfcf3f2438811a04fa44dbe1d5b92b5b1856e0ee7d94a5dd62fc5821df0e81e13908097f93fda68b79919fcc0e7726d4953a4adb2b27291423b63b2698b6405a4f073024a2cf0a62eb791d7dc454bd67ef1a82d968eb611d2a8cb971532881cdb54e9366818589aa485a3f69847a93f01e47cf846378d6028b03c67202e8e29eca2349a9cc68c10540df12eaee5d73d9ba406ff0b401390fc959e84b29b1032742d50de1263edfff7b692d104092eee0b2064a274024dc79f00a193925111b9a2f48b35ca048e38bece1c99c471cb088ac4de4a976164d2191fc0ad860ad731d6d25c8a6272d4b48460a613beb9f40e3ac0584a5e4ab7ce0ffd46fd095f36084f1c1ccfe2838c5debb57a1e31de94bbf4a0ad797f983549f8d24f69d8ec77d8abe972468feeaf7830c31facbda2d58332edda9e9d6fe128e12bb90482b5f53bddfed551ce8844fd2c5b93510b1f193ef1b4f665550480d61479c7658455cec68531924c5e78fe38e4285edbff96ab817619e50c0a83f2abe132294dd99b0f89c82b27bc6454506e8d569f8a878c1f4e3b6cb2a74384f778d74a0a3732733b1faa0724485bb0da78ce0cd0d11ca44e215aab8b9aa1544a72a1daedf785c3babf4feacbd983af35f6800b312bf0fc84061290206ff0078439d3d5ee900f001cb14463b825611514a8fc99894b066258944e6e1b35d6c36e77cbe2c44459e53a52100b415c9b617645d280667d953ee3ca2b274d5124013109e617605cf2314211d5ec386ee2165b95711e5c8fb01ff8c2d887f71d728526181235eab01b4c9f6cd9989abfa82380ae186a2584d729215e5940d5926e5d8776a9df53028e3c0de53be4a73aed67a5d07a6237e4c1160a804cf4407a25a9d5d567a9ab7bcce7b4bf12f6b0df4be4ebaa44fa2fe9354c0958dc6dd9d96fd6e692a9f0090815eb91c33eae6ffdd4342a252f6821e67d7e4aba115235bad612c1ac2199a3e604a4c02a7543e1f3b2faefeef845d0863f2f02bba4cbe31210110f5ea6bc7251597f2571a8462abd357c17d846c5039c75e63db7554a63c46674a5113d9a1d3be71795cdc29f4c2d98c4c2652e5db3c94e87d4467374aeb55fe92916457314f9cfa7f786bfb65d1855b239f0d803b125cebe39cdd5b337cfd046e874b531cce29a8850ce9535115a90473aaa78b949a86a105bda2c32e2f90a60f28fac5e682fe30e31717b750fb816fabb722b24fd85e023f80286e95e27d222b19da2cacc0fd038eeb66abf3bd069d52206988755691ea16be6aced954d4f2d0dccd5fdffb19f2b88e657b1bfa761b3d412ed3c4215282f2a82783513c402540a3e9ef6cda53c4c45d0eba49e9433d54aa5d57f75a27cb02636435b50ec76a5a5d0212293aa224fb9cbe7cb884866607f9db54546fadd79cd60dd5bed6e412df4ef2350fc3610b106e7be7a92be7440ed741d0e6c3adf3539ef784d39ee82e236643f1b55398c084623303f4e326595dfa922779f", 0x1000, 0xffffffff, 0x0, 0x3}]) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 2m8.209844822s ago: executing program 1 (id=389): bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffd7c) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x800}, &(0x7f0000000140)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x45, &(0x7f0000000000)={0x0, 0x0}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'ip6tnl0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000500)='dax_writeback_one\x00'}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000050b6850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x2, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES8=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m7.745764921s ago: executing program 1 (id=399): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRESOCT=0x0, @ANYRES32, @ANYBLOB="000dd47aeb4522"], 0x50) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_continue}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000f40)="$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") r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000005c0)=[{&(0x7f0000000180)}], 0x1, 0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) write(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r3 = io_uring_setup(0x21a4, &(0x7f0000000000)={0x0, 0x75f, 0x10, 0x1, 0x11cb}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0xc2f00, 0x4d, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000980)='mm_page_free\x00', r4}, 0x18) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000180)={0xe, 0x18, 0xfa00, @ib_path={0x0, r1, 0x1, 0x2}}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='kfree\x00'}, 0x18) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000040)) io_setup(0x3ff, &(0x7f0000000500)) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x5c, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0xce56fe61a68fc369, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000c712dc92c2be18077a7724e78fcd84705087254bdb94dfcb7e91a5af13f9aa9251b44ccf94692c01ab3a5d8eb0ef6d9edf56362a7f29b7c6b862031dc5f1c1bd22fc31c915bf34fbd6d5b20bc6321e68e69cddaa3f82668a3bc38d184d526feefa4a3c5e432fc5514ddf37796a63297208b5082862e617a49762e85394aa3d8c792ebc16ca261c334a49594510b0a9d129388c763d1c4e806c8e9b101ad1fe6dbc05cf8d4a9f2f520036485e5eff6bb79e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) 2m7.018768421s ago: executing program 1 (id=414): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1, 0x0, 0x4}, 0x18) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="59bb22bd7000000020001100000008002b01"], 0x28}}, 0x0) 2m6.643305412s ago: executing program 1 (id=417): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000880)=ANY=[@ANYBLOB="ff1d000000ffffffffffffff08e052000030000000000067907800000000ffffffff210090781200022825000024000000000000000002dffffffc809afe79175ff7e6"], 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a00)=ANY=[@ANYRES16=r4, @ANYBLOB="000425bd7000fddbdf257600000008000300", @ANYRES32=r5, @ANYBLOB="0c00990005000000270000000c0058007d00000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20008800) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001100)={&(0x7f00000007c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="5ff4e6d9c8b1e3c0fbc8bbd1ad1c963a66f1541aaad5cb1db2dfb1c50d21519571c1d803ae8cd304022c76ecb50da9b1018b31b93acddc1bce21851c1101bcc1321274324c6c0bba5e77fe9379e5e46622aa3b9c0f13aa711675ceca0ee3f1d2f94f48", @ANYRES32=r5, @ANYBLOB="0600b300020000000600b300010000000600b400730f00000600b300010000000600b30001000000"], 0x44}, 0x1, 0x0, 0x0, 0x48040}, 0x40040) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r3, @ANYRESOCT=r5], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r7, 0x0, 0xf7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syncfs(r8) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="08042dbd7000fbdbdf256c00000008000300", @ANYRES32=r5, @ANYBLOB="0c009900050000001d0000000500190109000000"], 0x30}}, 0x200480c5) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 2m6.607087965s ago: executing program 32 (id=417): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000000880)=ANY=[@ANYBLOB="ff1d000000ffffffffffffff08e052000030000000000067907800000000ffffffff210090781200022825000024000000000000000002dffffffc809afe79175ff7e6"], 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r2, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000a00)=ANY=[@ANYRES16=r4, @ANYBLOB="000425bd7000fddbdf257600000008000300", @ANYRES32=r5, @ANYBLOB="0c00990005000000270000000c0058007d00000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20008800) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001100)={&(0x7f00000007c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="5ff4e6d9c8b1e3c0fbc8bbd1ad1c963a66f1541aaad5cb1db2dfb1c50d21519571c1d803ae8cd304022c76ecb50da9b1018b31b93acddc1bce21851c1101bcc1321274324c6c0bba5e77fe9379e5e46622aa3b9c0f13aa711675ceca0ee3f1d2f94f48", @ANYRES32=r5, @ANYBLOB="0600b300020000000600b300010000000600b400730f00000600b300010000000600b30001000000"], 0x44}, 0x1, 0x0, 0x0, 0x48040}, 0x40040) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYRESDEC=r3, @ANYRESOCT=r5], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000340)='kmem_cache_free\x00', r7, 0x0, 0xf7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) syncfs(r8) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000640)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="08042dbd7000fbdbdf256c00000008000300", @ANYRES32=r5, @ANYBLOB="0c009900050000001d0000000500190109000000"], 0x30}}, 0x200480c5) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x23, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000000300)={'#! ', '', [{0x20, 'memory.events\x00'}]}, 0x13) perf_event_open(&(0x7f0000000140)={0x8, 0x80, 0x7, 0x0, 0x0, 0x3, 0x82, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0xf}, 0x8080, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x10000000000007}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x8404, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={&(0x7f0000000080)}, 0x400, 0x0, 0x0, 0x0, 0x0, 0x1fffffff, 0x0, 0x0, 0x40, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 53.033467493s ago: executing program 0 (id=1559): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) process_vm_readv(0x0, &(0x7f0000000140), 0x100000000000028b, 0x0, 0x12, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa6}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000180)={[{@sysvgroups}, {@noload}, {@nobh}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x1, 0x644, &(0x7f00000006c0)="$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") r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r4, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x275a, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000008c0)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x7f, 0x100, @void}}}}}}}, 0x0) quotactl_fd$Q_GETINFO(r5, 0xffffffff80000500, 0x0, &(0x7f0000004a40)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(r6, 0x82307202, &(0x7f0000000f80)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) close_range(r6, 0xffffffffffffffff, 0x0) 52.492279827s ago: executing program 0 (id=1563): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)={0x201d}) connect$unix(r1, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000023c0)={0x0, 'veth0_vlan\x00', {0x4}, 0x3}) r4 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x2, 0x0, 0x0, 0x2, 0x1000000}, 0xffffffffffffffff, 0x0, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x7, 0x8, 0x5, 0x80}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r6}, 0x18) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095", @ANYRES8, @ANYRESDEC=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2c450, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x3, 0x8, 0x8, 0x20002, 0x40b, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, 0x0, 0x5) write$cgroup_subtree(r10, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001"], 0x3c}}, 0x0) 52.309254812s ago: executing program 0 (id=1565): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r3}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r6}, 0x10) close(r5) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=ANY=[@ANYBLOB="600000000206010800000000000000000100000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000ffff0500040000002b0011000300686173683a69702c6d61726b00000000050005000a"], 0x60}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff2e) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000380)='kfree\x00', r8}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16, @ANYBLOB="a183000000000000000005000000080003"], 0x78}}, 0x0) r10 = io_uring_setup(0x68f3, &(0x7f00000001c0)={0x0, 0x6483, 0x40, 0x3, 0x6b}) io_uring_register$IORING_REGISTER_RESTRICTIONS(r10, 0xb, &(0x7f0000000240)=[@ioring_restriction_register_op={0x0, 0x2e}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) r11 = syz_open_pts(r0, 0x0) dup3(r11, r0, 0x0) ioctl$TIOCSETD(r11, 0x5423, &(0x7f0000000040)=0x3) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x8000, 0x0, 0x1, 0x8, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7e}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) 52.114880688s ago: executing program 0 (id=1569): unshare(0x6a040000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socket(0x2, 0x1, 0x0) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast1}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5412, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) fdatasync(r0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a6, &(0x7f0000000980)="$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") socket$nl_route(0x10, 0x3, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) syz_io_uring_setup(0x16e, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$setregs(0xd, r3, 0xfffffffffffffffe, &(0x7f0000000140)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178c0900000000000000f39ed4b41924dc225ad4028dd63debb87d698be5c749450b350a789dcfc6b2d6a69600026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fbf057bb711116e53eb0b55667f1a28c2d6506cf26422d389b") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) r4 = open(&(0x7f0000000040)='./bus\x00', 0x103a42, 0x80) ftruncate(r4, 0x2007ffb) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 51.941692572s ago: executing program 0 (id=1570): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="15b26f226e2966667482d50903b0a8d92ccd9e69d5cc4cb3d467a670b237a9225fb56c0f7ea725dee27c4bb43bb50c6748c83b71d59f0537405dfab648c096607340fac939a2efd31cbe2f8ca29c409e87ea0974b7bceff9afef5d07d691575f5115f2f961ad488e3386036913e98181a6034febaab853a3e928b9035b0e3a8e1cb393c70f6d0448970e0af2476f8b923ee09c19deca55d58f70e8eeff55dda6381cb96afe97196c0af0a8fd450a1447a1a521e2c211fb84cbcf4aebd31298972ec6bea1764fbde550", 0xc9}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1}}], 0x3, 0x0) 51.700288252s ago: executing program 0 (id=1572): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0xa4000021) read(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 51.697575202s ago: executing program 33 (id=1572): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000400)='.\x00', 0xa4000021) read(r1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) 51.321251944s ago: executing program 5 (id=1578): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x11, 0xf, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) r2 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) r4 = accept4$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000240)=0x1c, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@mcast2}}, &(0x7f0000000280)=0xe8) setsockopt$inet6_IPV6_IPSEC_POLICY(r4, 0x29, 0x22, &(0x7f00000005c0)={{{@in=@local, @in=@loopback, 0x4e24, 0x0, 0x4e21, 0x8000, 0xa, 0x80, 0xa0, 0x29, 0x0, r5}, {0x9, 0xfffffffffffff000, 0x84a7, 0xfff, 0x4, 0x8b89, 0x0, 0x2}, {0x9, 0x5, 0xffffffffdd2d44bb, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}, {{@in=@empty, 0x4d6, 0xff}, 0x2, @in=@remote, 0x0, 0x1, 0x3, 0x1, 0xd558, 0x5, 0xe4f5}}, 0xe8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) prlimit64(0x0, 0x4, 0x0, 0x0) write$selinux_access(r2, &(0x7f0000001100)=ANY=[@ANYBLOB='system_u:object_r:syslogd_var_run_t:s0 /usr/lib?telepathy/mission-control-5 00'], 0x61) 51.253363169s ago: executing program 5 (id=1580): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="6c00000010001fff109e00008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000440012800b00010067656e6576650000340002800500030003000000060005004e20000005000400ab000000050009000100000005000a0001000000050009000100000008000a00", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x10, 0x803, 0xf8) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r6, @ANYBLOB="01"], 0x3c}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) unlinkat(0xffffffffffffff9c, 0x0, 0x0) socket(0x10, 0x3, 0x0) 50.782894188s ago: executing program 5 (id=1585): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x3c) 50.716160613s ago: executing program 5 (id=1587): unshare(0x6a040000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) socket(0x2, 0x1, 0x0) syz_emit_ethernet(0x32, &(0x7f00000001c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @multicast1}, {0x0, 0x4e22, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00') link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00') pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5412, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r2}, 0x10) fdatasync(r0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0xff, 0x4a6, &(0x7f0000000980)="$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") socket$nl_route(0x10, 0x3, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) syz_io_uring_setup(0x16e, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ptrace$setregs(0xd, r3, 0xfffffffffffffffe, &(0x7f0000000140)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178c0900000000000000f39ed4b41924dc225ad4028dd63debb87d698be5c749450b350a789dcfc6b2d6a69600026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fbf057bb711116e53eb0b55667f1a28c2d6506cf26422d389b") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) r4 = open(&(0x7f0000000040)='./bus\x00', 0x103a42, 0x80) ftruncate(r4, 0x2007ffb) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 49.976574824s ago: executing program 5 (id=1596): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2, 0x0, 0x7}, 0x18) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r0, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0x12e}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="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", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x1}}], 0x3, 0x0) 49.680025509s ago: executing program 5 (id=1599): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[], 0x50}, 0x1, 0xba01}, 0x21) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) socket(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3100000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 49.595581806s ago: executing program 34 (id=1599): bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[], 0x50}, 0x1, 0xba01}, 0x21) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r4}, 0x10) socket(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000048000000030a01010000000000000000010000000900030073797a3100000000080007006e6174000900010073797a310000000014000480080002407c40280f080001"], 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 15.132312653s ago: executing program 3 (id=2019): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000200)={0x201d}) connect$unix(r1, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000023c0)={0x0, 'veth0_vlan\x00', {0x4}, 0x3}) r4 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x2, 0x0, 0x0, 0x2, 0x1000000}, 0xffffffffffffffff, 0x0, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x7, 0x8, 0x5, 0x80}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r6}, 0x18) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095", @ANYRES8, @ANYRESDEC=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2c450, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x3, 0x8, 0x8, 0x20002, 0x40b, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r8, 0x6, 0x0, 0x0, 0x0) r9 = fsmount(r8, 0x0, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r10, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00'], 0x3c}}, 0x0) 14.911752731s ago: executing program 3 (id=2021): unshare(0x22020600) unshare(0x28040680) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="16000000000000"], 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000000000000100000008000600e0000001050004000100000008000b0027"], 0x2c}, 0x1, 0x0, 0x0, 0x20048091}, 0x0) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x20, r5, 0x0, 0x70bd2d, 0x25dfdbfb, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040014}, 0x18095) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x94) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, r6, 0x0, 0x4}, 0x18) lsetxattr$security_selinux(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000940), &(0x7f0000001140)='system_u:object_r:pam_exec_t:s0\x00', 0x20, 0x3) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYRES8=r1], 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x8040) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYRESOCT=r2, @ANYRES32=r2], 0x84}, 0x1, 0x0, 0x0, 0x220000d4}, 0x24009815) r7 = socket$inet(0x2, 0x1, 0x0) r8 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40000100, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x7}, 0x0, 0x800, 0xfffffffc, 0x7, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x20000000000002b8, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x8000, 0x0, 0x0, 0x41000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r9}, &(0x7f0000000180), &(0x7f00000001c0)=r8}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r10}, 0x10) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0xea}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000fcffffff000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000001b000000b7000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='xen_mmu_set_pud\x00', r6, 0x0, 0xfffffffffefffffb}, 0x18) socket(0x40000000015, 0x5, 0x0) 14.672415351s ago: executing program 3 (id=2024): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'veth1_vlan\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x22700, 0x12100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x40040) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x19}, @jmp={0x5, 0x0, 0x9, 0x0, 0x0, 0xfffffffffffffe88}], &(0x7f0000000580)='GPL\x00'}, 0x94) (async) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x20040040) 14.466248368s ago: executing program 3 (id=2028): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) ppoll(0x0, 0xffffffffffffff07, &(0x7f0000000140)={0x0, 0x989680}, 0x0, 0x4b) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdirat(r1, &(0x7f0000000180)='./bus\x00', 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x0, 0x400, 0xb7, 0xc20022, r4}) sendto$packet(r3, 0x0, 0x0, 0x4c001, &(0x7f00000002c0)={0x11, 0x9, r4, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001340)={&(0x7f0000000340)='kfree\x00', r5, 0x0, 0x6}, 0x18) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000e40)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x1c, "ef359f41e236ffc6234b02e86dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) renameat2(r1, &(0x7f0000000380)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) unlinkat(r1, &(0x7f0000000080)='./bus/file0\x00', 0x200) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 13.95227793s ago: executing program 3 (id=2035): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r1}, 0x18) syz_emit_ethernet(0x2e, &(0x7f00000008c0)={@link_local, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x1, 0x3, 0x7f, 0x100, @void}}}}}}}, 0x0) 13.817842461s ago: executing program 3 (id=2038): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000280)='q', 0x1, 0x9c85) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r5) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="6d932bbd700000000000010000000800030003000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}}, 0x0) 13.800394463s ago: executing program 35 (id=2038): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x0, &(0x7f00000021c0)={[{@dioread_nolock}, {@minixdf}, {@nolazytime}, {}]}, 0x1, 0x783, &(0x7f0000002200)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r1, &(0x7f0000000280)='q', 0x1, 0x9c85) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r3}, 0x9) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r5) sendmsg$NL802154_CMD_GET_WPAN_PHY(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="6d932bbd700000000000010000000800030003000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}}, 0x0) 2.031924972s ago: executing program 7 (id=2208): prlimit64(0x0, 0x4, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'team_slave_0\x00'}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448d4, &(0x7f0000000400)={0xffffffffffffffff, 0x200, "000002", 0xe, 0xff}) 1.974989186s ago: executing program 7 (id=2210): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000850000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdffffffc}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4, '\x00', r3}, 0x50) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.io_merged_recursive\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a80)={r5, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x5, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x63, &(0x7f0000000880)=[{}], 0x8, 0x10, &(0x7f00000008c0), &(0x7f0000000900), 0x8, 0x87, 0x8, 0x8, &(0x7f0000000940)}}, 0x10) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000d40)=@bpf_tracing={0x1a, 0x9, &(0x7f0000000ac0)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xffff}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xfff}, @ldst={0xbee931fcdd27e49f, 0x2, 0x2, 0x2, 0x8, 0xfffffffffffffff8, 0x8}], &(0x7f0000000b40)='GPL\x00', 0x80000000, 0x46, &(0x7f0000000b80)=""/70, 0x40f00, 0x24, '\x00', r3, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000c40)={0x2, 0x0, 0x0, 0x7ff}, 0x10, 0x13b0d, r5, 0x8, &(0x7f0000000c80)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000cc0)=[{0x1, 0x3, 0x5}, {0x3, 0x1, 0x3, 0x7}, {0x3, 0x4, 0xb, 0x1}, {0x5, 0x4, 0x6, 0x3}, {0x0, 0x4, 0x9, 0xc}, {0x1, 0x4, 0x4, 0x9}, {0x3, 0x2, 0x5, 0x5}, {0x3, 0x3, 0x5, 0x1}], 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x1d, 0x22, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xa7}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@jmp={0x5, 0x0, 0x5, 0x1, 0xb, 0xfffffffffffffff0}, @generic={0x5, 0x2, 0x7, 0xc7f1}, @alu={0x4, 0x1, 0xb, 0x1, 0x5, 0x100, 0xfffffffffffffffc}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x4}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, @map_fd={0x18, 0xbaa85f0b96a28dac, 0x1, 0x0, r7}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5bd}}, @btf_id={0x18, 0xf, 0x3, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x1000, 0xf9, &(0x7f0000000580)=""/249, 0x41100, 0x51, '\x00', r3, @fallback=0x2e, r8, 0x8, &(0x7f0000000200)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0xb, 0xd8}, 0x10, r9, r10, 0x7, 0x0, &(0x7f0000000e00)=[{0x1, 0x3, 0x8, 0x8}, {0x5, 0x2, 0xb, 0x1}, {0x4, 0x1, 0x8, 0xb}, {0x2, 0x1, 0x5, 0x1}, {0x2, 0x3, 0xf, 0x6bc3caa0c8a4f16f}, {0x0, 0x3, 0x10, 0xa}, {0x4, 0x1, 0x6, 0x7}], 0x10, 0x1}, 0x94) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000001e0000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) sendto$inet6(r0, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) 1.577200849s ago: executing program 2 (id=2221): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/cpu_byteorder', 0x90800, 0x9) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r2}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 1.57327244s ago: executing program 7 (id=2222): r0 = gettid() r1 = io_uring_setup(0x60f7, &(0x7f0000000400)={0x0, 0x39bd, 0x2, 0xfffffbff, 0x3c0}) r2 = socket$rxrpc(0x21, 0x2, 0xa) listen(r2, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r4 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x30046, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0xfffffffffffffffe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$eventfd(r3, &(0x7f00000000c0), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) close_range(r1, r2, 0x0) timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0xce3468f833de3c7d, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x40000}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7}, 0x0, &(0x7f00000001c0)}, 0x20) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r8}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r6}, 0x18) r9 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) close(r9) 1.461716289s ago: executing program 2 (id=2224): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000580), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) mkdir(&(0x7f0000000240)='./file1/file1\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000400000000000400030000000000100003000000020020"], 0x24, 0x1) 1.284260053s ago: executing program 2 (id=2226): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xf, &(0x7f0000000040)={@remote, 0x0}, &(0x7f00000000c0)=0x14) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0xa04710, &(0x7f00000005c0)={[{@user_xattr}, {@errors_remount}, {@noblock_validity}, {@block_validity}, {@mblk_io_submit}, {@min_batch_time={'min_batch_time', 0x3d, 0x6377}}, {@nodelalloc}, {@delalloc}, {@prjquota}, {@jqfmt_vfsold}], [{@uid_gt}]}, 0x0, 0x451, &(0x7f0000001040)="$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") setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@loopback, @in6=@remote, 0x4e20, 0x0, 0x4e24, 0xfffe, 0x2, 0x80, 0x80, 0x2f, r4}, {0x4, 0x0, 0x10000, 0x2, 0x7, 0x8, 0x1, 0x9}, {0x3, 0x55ca, 0xffffffffffffff81, 0x2}, 0x3, 0x6e6bba, 0x1, 0x0, 0x2}, {{@in=@private=0xa010100, 0x4d3}, 0x2, @in6=@private0, 0x34ff, 0x3, 0x3, 0x1e, 0x8, 0x1, 0x2d}}, 0xe8) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0x2}, {0xffff, 0xffff}, {0xb, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, '\x00\x00\x00\x00\x00\x00Z\n\x00'}}}]}, 0x48}}, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="8b3300000000fcdbdf25050000", @ANYRES32=r0], 0x28}}, 0x50) 1.244839487s ago: executing program 4 (id=2227): symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)}}, 0x40) 1.21233486s ago: executing program 4 (id=2228): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (fail_nth: 3) 1.146640995s ago: executing program 7 (id=2229): syz_clone(0xc4200000, 0x0, 0x34, 0x0, 0x0, 0x0) 1.146315285s ago: executing program 2 (id=2230): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000140)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000080)={'nat\x00', 0x2, "29ff"}, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.146012245s ago: executing program 4 (id=2231): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x80000}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000001080)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000080)={0x3a, @broadcast, 0x4e21, 0x1, 'rr\x00', 0x1, 0x0, 0x27}, 0x2c) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) 859.741438ms ago: executing program 2 (id=2235): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10) io_setup(0x3, &(0x7f0000000340)) 793.964324ms ago: executing program 6 (id=2236): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000580), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000f400040000000000000020"], 0x1c, 0x0) mkdir(&(0x7f0000000240)='./file1/file1\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="0200000001000400000000000400030000000000100003000000020020"], 0x24, 0x1) 786.430104ms ago: executing program 7 (id=2237): unshare(0x2040400) r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x103, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fefe8000000000000000000000000000bb00000033000000000a00600000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000007f00000000000000030000000020000000000000000000000000000000000000fffffffffffffffffdffffffffffffffffffffffeffffffe030000000000000000000000000000000000000000000000000100000000000000000000000000000100000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x844}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r9, 0x0, 0x10000001}, 0x18) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="310b2c8b7000150200fb6a690cac"], 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x40) fdatasync(r0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000380)=0xffff000, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC=r10], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r11}, 0x10) clock_getres(0x8, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r12 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='sessionid\x00') writev(r12, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) r13 = socket$nl_route(0x10, 0x3, 0x0) r14 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002100)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r15, {0xc}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 775.444695ms ago: executing program 4 (id=2238): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x2, @empty, 0xf52e}, 0x1c) r1 = socket(0x2, 0x2, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x44014}, 0x4024004) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/80, 0x50}}], 0x1, 0x2, 0x0) 739.176138ms ago: executing program 2 (id=2239): perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x67a, 0x1, 0xfffffffe, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000160000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r4, &(0x7f0000000100)=[{&(0x7f0000000140)="de", 0x1}], 0x1, 0x0, 0x0) 658.575945ms ago: executing program 7 (id=2241): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b7030000000000de850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x58, &(0x7f00000011c0)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r0, 0x58, &(0x7f00000011c0)}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xf}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$eJzs3E1vG0UfAPD/bl7apn1qV3oOvFwsQCISImnSFqgEEhEXDu2JHjhixWmJ6jSoMRKtIl4E4gYSiA8AB+AjcIQD3wHOwAEqRSgHUm5Ga+86Jn5pQx0skt9PGnlmZ+OZ9WTWu+PZCeDIqkTEixExERFnI6KUb0/zEO+2Q7bfzvbm8p/bm8tJNJuv/J5Ekm8r3ivJX0/mbzCbRqQfJPFon3I3bt2+Xq3XV27m6fnG2hvzG7duP726Vr22cm3lxuIz585fuPDcxcVnR3asW2vJR098demXTz6sffrDb9+Ws/qeyvO6j2NUKlHpfCZ7XRx1YWN2vCueTI6xIgAADJXm1/6Trev/UkzE7sVbKT7+fqyVAwAAAEai2SxeAQAAgMMrce8PAAAAh1wxD2Bne3O5CGOcjsC/bGspIsrt9r+bh3bOZOeZ3qk9z/eOUiUiXj5+eTELcUDPYQMAAAAcZd8ttRf+6x3/S+Ohrv1ORMRMsbbfCFX2pHvHf9I7Iy6SLltLEc9HxN2e8b+02KU8kaf+1xoqnEqurtZXzkbE6YiYjaljWXphSBlvP3b960F53eN/n//86kJWfva6u0d6Z/LY3/+mVm1UH+SY2bX1XsQjk/3aP+mM+Xavk/lPvLa688KgvKz9s/YuQm/7c5CaX0Q82bf/765cmgxfn3W+dT6YL84KvX469eX7g8rv7v9ZyMovfgvg4GX9f2Z4+7fWye2s17ux/zK++ePyj4Py7t3+/c//08mVVgWn821vVRuNmwsR08ml3u3+mzqKz6P4vLL2n328//d/cf2X5N/9p7vWh+4x5AfCl945c2VQnv4/Xln71/bV//cfeX3m4dlB5d9f/z/fqkzxJq7/7u1+G2jc9QQAAAAAAABgNNLW3L4knevE03Rurj3P9/8xk9bXNxpPXV1/80atPQewHFNpMdOr1DUfdKH9GHknvbgnfS4izkTEZ6UTrfTc8nq9Nu6DBwAAgCPi5ID7/8yvAx/2AAAAAP5zyuOuAAAAAHDg3P8DAADAofYg6/qLiIgc1si4z0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAR9tfAQAA///8h8MD") (async) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x10, &(0x7f0000000040)={[{@usrjquota}]}, 0x1, 0x3e7, &(0x7f0000000480)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) open(&(0x7f0000000200)='./file0\x00', 0xc0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000044c0)='./file0\x00', &(0x7f0000004500), 0x4000) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000044c0)='./file0\x00', &(0x7f0000004500)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r2, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x1c5042, 0x3) write(r3, &(0x7f0000000740)="cc", 0x1) sendfile(r3, r1, 0x0, 0x3ffff) sendfile(r3, r1, 0x0, 0x7fffeffd) 647.544076ms ago: executing program 4 (id=2242): prlimit64(0x0, 0x4, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r1}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r4, 0x800448d4, &(0x7f0000000400)={0xffffffffffffffff, 0x200, "000002", 0xe, 0xff}) 591.255831ms ago: executing program 8 (id=2243): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x4, @mcast2, 0x9}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0x43, @mcast2, 0x8e}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xb, [@ptr={0x3, 0x0, 0x0, 0x2, 0x3}]}, {0x0, [0x2e, 0x0, 0x2e, 0x6f, 0x2e, 0x5f, 0x30, 0x61, 0x0]}}, &(0x7f0000000280)=""/130, 0x2f, 0x82, 0x1, 0x1}, 0x28) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) (async) sendmmsg(r0, &(0x7f0000000840)=[{{&(0x7f0000000380)=@in6={0xa, 0x4e23, 0x0, @private2, 0x80000001}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000000400)="4a33f3ed1ec735a298acc7f624026eab37", 0x11}, {&(0x7f0000000440)="edd51b91edc54e1c7ca2403021fdb5e11021390498589cd64fed3acce72700ae832e162f84350de4aae2f5f904dbf660378dd95ec48433eba089166863d1d62c0d89e0814cf8ab2290647477b4fef948", 0x50}, {&(0x7f00000004c0)="7b26d40d340ac8daf9a9a15593d169e03081cda7acc43ef0b3be9d28d78aa2e40c9e5eb678c9d1c4d4f75dd5597a8dc8558c5f38c5f5e3bc8855dd137a2ddc9b0bb41c8237a273b472cd43eac01b1aac6e96a118195dd06a2b04a0786d7c897d06c3dda76901ee345abb1af5b001eb52eb2ac222d298481d76e581e3a8d0848d471049661d8e58de", 0x88}, {&(0x7f0000000580)="13f0eb67f025406b3567071e51a4a93b5882839161023ebee6c5cf3a6c4e53287b", 0x21}], 0x5, &(0x7f0000000640)=[{0xe0, 0x6, 0x2, "59ad90a38eff0dc78cf6d97dd83ce1f76d6b814d8414183b49bdaa3c0bf9179bebc637f218593ebafd2cca3645d7503f57cb95484da5e6b658117ffcdad6d8da47d93098f18fbb8b08357b84e4646586e0743f9f350f60dbec5c4d66fb0ed42f85422ee86cb6a7c80d228112c816be6fc7866655e36f72a9d49838f0725d515908f7fd72c8c023d5b4e26c3a90b5105e571945933eeb45e14b4d548a9640bee6d147f3d5ac11d292a241074e420bd323ca4b94b830eb2aeb771d624cd1b1e12ee174cecfdbbd32c472ee"}, {0x28, 0x88, 0x80000000, "068a66265d533728aeb04daf5f84b7220353aaf6b180920e"}, {0xe8, 0x108, 0x85c, "570582650da20de019b2f0f87ccbe669333733f8f51005aac4a92e3a157e873434094e4e8c950183acd2c3807f1a4da817851e8e0f8a18943e4940f0f42999200e5be3e89b734bb8b41083477f632007a4fe48810f44de291d6e0d21a8515751f82625948683955650c06e14f83488329d5336dbbb5785f1b21782e52bfd1b072cf5be10c34bbee79ee2bccd372e0883d87a88c6b42bdf230bfba9416fcd6004fd9f042dc45d5162155ac6666cb659815f52713a688826dbc53e8c42535f4aeecb8c32bf91c1f2221f5a15f8c9492d962b1d9686d88b"}], 0x1f0}}], 0x1, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_batadv\x00'}) (async) r5 = socket(0x10, 0x3, 0x9) sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1400"], 0x28}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000080)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x879c8bce377ea01c}, 0x0) (async) inotify_init1(0x80800) (async) ioctl$PERF_EVENT_IOC_DISABLE(r4, 0x2401, 0x606b) 586.298031ms ago: executing program 6 (id=2244): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 552.223624ms ago: executing program 6 (id=2245): mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) syz_io_uring_setup(0x7cd4, &(0x7f0000000000)={0x0, 0xb9fe, 0x20, 0x1, 0x3c6}, &(0x7f00000000c0), &(0x7f0000000100)) (async) syz_io_uring_setup(0x7cd4, &(0x7f0000000000)={0x0, 0xb9fe, 0x20, 0x1, 0x3c6}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_complete(r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x1000, &(0x7f0000000cc0)=""/4096, 0x41100}, 0x94) 551.593094ms ago: executing program 4 (id=2246): r0 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e) ppoll(&(0x7f0000000000)=[{r0, 0x289}], 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000023c0)={0x0, 'veth0_vlan\x00', {0x4}, 0x3}) r4 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4}, 0x0, 0x2, 0x0, 0x0, 0x2, 0x1000000}, 0xffffffffffffffff, 0x0, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x8946, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x5, 0x7, 0x8, 0x5, 0x80}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x4}, 0x100882, 0x7ff, 0x6, 0x0, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='hrtimer_start\x00', r6}, 0x18) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000001800ff0f00000000001b000085", @ANYRES8, @ANYRESDEC=r3], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x35, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2c450, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x4c58, 0x10000, 0x3, 0x8, 0x8, 0x20002, 0x40b, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r8 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r9 = fsmount(r8, 0x0, 0x0) r10 = openat$cgroup_subtree(r9, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r10, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000130001"], 0x3c}}, 0x0) 473.92883ms ago: executing program 6 (id=2247): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000001}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8004}, 0x4040810) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4000000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000100000180012800e0001007769726567756172640000000400028008000a00"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 473.29857ms ago: executing program 8 (id=2248): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x80000}, 0x18) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000001080)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000080)={0x3a, @broadcast, 0x4e21, 0x1, 'rr\x00', 0x1, 0x0, 0x27}, 0x2c) connect$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) 469.462181ms ago: executing program 8 (id=2249): r0 = openat$selinux_access(0xffffffffffffff9c, &(0x7f00000010c0), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) write$selinux_access(r0, &(0x7f0000001100)=ANY=[@ANYBLOB='system_u:object_r:syslogd_var_run_t:s0 /usr/lib?telepathy/mission-con'], 0x61) 465.672761ms ago: executing program 6 (id=2250): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000980)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0x401, 0x0}, 0x8) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000140)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000780)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0x0, 0xe, 0x8, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1d, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdir(&(0x7f00000005c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c0000000900000000000000", @ANYRES32, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r6, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="0d43091e23185efab09db3eb9f1ce3bbb628c90e2bd302758c6a742c6a0411fa2cb5075841fe72be758b5483ede68b3a817ca029fbe5231a2fb1b36152387c03a8ff098c71850c61eb056c8fd505063120a4e8036ffc64c601e7bd76c91fe9a99af98c54269e2de7acaa16d185de8c5632a08198454203d0", @ANYRES32, @ANYRESOCT=0x0, @ANYBLOB="170d08c2925db236e1de576f08c6da8502a70521298a000b405947058a309a0b89162be866a16f3eaf89e62c586cf2c1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r6}, 0x94) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x6c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r9, {0x8, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x20, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000380), 0x84, r5}, 0x38) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) utimensat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)={{0x0, 0x2710}, {r10, r11/1000+10000}}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r12}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000400)=@o_path={&(0x7f00000002c0)='./file0\x00', r5, 0x4000, r5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r13}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4]) 397.500887ms ago: executing program 8 (id=2251): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000006c0), 0x2000) (async, rerun: 32) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) (rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2000000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x18) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000480)={0xfffffffb, 0x2, 0x1, 'queue0\x00'}) (async, rerun: 64) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000400)={0x0, 0x1f000000}) (async) tkill(0x0, 0x7) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0x7ffc}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@grpid}, {@usrjquota}, {@grpquota}, {@nogrpid}, {@journal_dev={'journal_dev', 0x3d, 0xdcc}}, {@grpjquota}]}, 0x3, 0x44a, &(0x7f0000000400)="$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") chdir(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r5, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f00000004c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = syz_clone3(&(0x7f0000000a40)={0x2000000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f0000000880), {0xd}, &(0x7f00000008c0)=""/75, 0x4b, &(0x7f0000000940)=""/92, &(0x7f0000000a00)=[0xffffffffffffffff], 0x1}, 0x58) sched_setscheduler(r6, 0x6, &(0x7f0000000ac0)) 242.616169ms ago: executing program 8 (id=2252): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f00000000c0)={0x6, 0x5}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRESHEX=r1, @ANYRES16=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x73, 0x0, 0x7ffc0002}]}) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/packet\x00') preadv(r3, &(0x7f00000013c0)=[{&(0x7f00000002c0)=""/84, 0x54}], 0x1, 0x7d, 0x3) getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, &(0x7f00000001c0)=""/163, &(0x7f0000000100)=0xa3) add_key(&(0x7f0000000040)='ceph\x00', 0x0, 0x0, 0x0, 0x0) 122.494899ms ago: executing program 8 (id=2253): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000100)={0x100000011, @multicast2, 0x4e21, 0x0, 'dh\x00', 0x19e172f08959ac7e, 0xfffe, 0x2b}, 0x2c) dup(0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x6, &(0x7f0000000240)=[{0x200000000006, 0x0, 0x0, 0xab}, {0xb69, 0x80, 0x5, 0x1000009c}, {0x401, 0x5, 0xf, 0x6}, {0x7, 0x5, 0x0, 0x2}, {0x8, 0x3, 0x4, 0x6}, {0x800, 0x4, 0xfe, 0x1}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r3, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) io_pgetevents(0x0, 0x6, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$sock_timeval(r5, 0x1, 0x48, &(0x7f00000000c0), &(0x7f0000000100)=0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="880000001000030529bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="15010000cd640600680012800b000100627269646765000058000280050016000000000005002a000100000005002500000000000c002000060000000000000005002d00000000000c002e0001000000010000000c002e000100000001000000060009"], 0x88}, 0x1, 0x0, 0x0, 0x4000004}, 0xe4) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r2}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000004c0)='mm_page_free\x00'}, 0x10) unshare(0x1a000000) socket$nl_xfrm(0x10, 0x3, 0x6) kexec_load(0x0, 0x1, &(0x7f0000000140)=[{0x0, 0x3e00, 0x116094000, 0x41000000}], 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e20, @broadcast}}, 0x0, 0x0, 0x5, 0x0, "84171db4b04c37cdbcd51f6128bfa58090de63426682276089c453208adfcaace71515aef967d3396a123cf90af483580ea697ac73e86023600f8566aac6cd557a5434883d728993c56db6259e9f76df"}, 0xd8) 0s ago: executing program 6 (id=2254): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x17, 0xb, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f00000003c0)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x8a, &(0x7f0000000300), 0x52) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_FLAGS={0x8}]}, 0x1c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="2000000001030101000002000000000000000000"], 0x20}}, 0x0) acct(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kmem_cache_free\x00', r0}, 0x18) connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x0, 0xfffffffd}}, 0x10) gettid() pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r7 = gettid() r8 = getpid() rt_tgsigqueueinfo(r8, r7, 0xb, &(0x7f0000000280)={0x8, 0x0, 0x4}) r9 = gettid() process_vm_writev(r9, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) connect$can_bcm(r5, &(0x7f0000000380), 0x10) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f0000001740)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@broadcast, @loopback}, 0x10) setsockopt$MRT_FLUSH(r10, 0x0, 0xd4, &(0x7f0000000000)=0x9, 0x4) openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) kernel console output (not intermixed with test programs): from 0 to 1024 [ 161.300462][ T9343] EXT4-fs: Ignoring removed orlov option [ 161.323939][ T9343] EXT4-fs mount: 81 callbacks suppressed [ 161.323962][ T9343] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 161.687672][ T9369] loop4: detected capacity change from 0 to 512 [ 161.740687][ T51] 0: reclassify loop, rule prio 0, protocol 800 [ 161.754185][ T9369] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 161.775833][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.785024][ T9369] EXT4-fs (loop4): orphan cleanup on readonly fs [ 161.797195][ T9369] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1846: corrupted inode contents [ 161.809964][ T9369] EXT4-fs (loop4): Remounting filesystem read-only [ 161.817623][ T9369] EXT4-fs (loop4): 1 truncate cleaned up [ 161.823573][ T180] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 161.834174][ T180] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 161.844425][ T9385] loop7: detected capacity change from 0 to 164 [ 161.846137][ T180] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 161.862823][ T9369] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 161.931647][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.948654][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.958871][ T9385] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 161.961537][ T9391] loop6: detected capacity change from 0 to 1024 [ 162.000705][ T9391] EXT4-fs: Ignoring removed mblk_io_submit option [ 162.001734][ T9385] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(4) [ 162.007235][ T9391] EXT4-fs: inline encryption not supported [ 162.013710][ T9385] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 162.013864][ T9385] vhci_hcd vhci_hcd.0: Device attached [ 162.055801][ T9387] loop2: detected capacity change from 0 to 8192 [ 162.073496][ T9391] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 162.084080][ T9396] vhci_hcd: connection closed [ 162.090492][ T51] vhci_hcd: stop threads [ 162.099601][ T51] vhci_hcd: release socket [ 162.104098][ T51] vhci_hcd: disconnect device [ 162.164021][ T9391] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c842e018, mo2=0000] [ 162.196219][ T9406] FAULT_INJECTION: forcing a failure. [ 162.196219][ T9406] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.209431][ T9406] CPU: 0 UID: 0 PID: 9406 Comm: syz.2.1853 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 162.209471][ T9406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 162.209515][ T9406] Call Trace: [ 162.209523][ T9406] [ 162.209532][ T9406] __dump_stack+0x1d/0x30 [ 162.209557][ T9406] dump_stack_lvl+0xe8/0x140 [ 162.209581][ T9406] dump_stack+0x15/0x1b [ 162.209602][ T9406] should_fail_ex+0x265/0x280 [ 162.209709][ T9406] should_fail+0xb/0x20 [ 162.209774][ T9406] should_fail_usercopy+0x1a/0x20 [ 162.209834][ T9406] _copy_to_user+0x20/0xa0 [ 162.209867][ T9406] simple_read_from_buffer+0xb5/0x130 [ 162.209897][ T9406] proc_fail_nth_read+0x10e/0x150 [ 162.209971][ T9406] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.210002][ T9406] vfs_read+0x1a0/0x6f0 [ 162.210090][ T9406] ? __rcu_read_unlock+0x4f/0x70 [ 162.210176][ T9406] ? __fget_files+0x184/0x1c0 [ 162.210205][ T9406] ksys_read+0xda/0x1a0 [ 162.210232][ T9406] __x64_sys_read+0x40/0x50 [ 162.210261][ T9406] x64_sys_call+0x27bc/0x2ff0 [ 162.210285][ T9406] do_syscall_64+0xd2/0x200 [ 162.210360][ T9406] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 162.210439][ T9406] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 162.210462][ T9406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.210484][ T9406] RIP: 0033:0x7f2a13f7d57c [ 162.210501][ T9406] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 162.210594][ T9406] RSP: 002b:00007f2a125e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 162.210676][ T9406] RAX: ffffffffffffffda RBX: 00007f2a141a5fa0 RCX: 00007f2a13f7d57c [ 162.210689][ T9406] RDX: 000000000000000f RSI: 00007f2a125e70a0 RDI: 0000000000000006 [ 162.210705][ T9406] RBP: 00007f2a125e7090 R08: 0000000000000000 R09: 0000000000000000 [ 162.210721][ T9406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.210736][ T9406] R13: 0000000000000000 R14: 00007f2a141a5fa0 R15: 00007ffdfa412168 [ 162.210782][ T9406] [ 162.428362][ T9391] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.1850: bad orphan inode 11 [ 162.439125][ T9391] ext4_test_bit(bit=10, block=4) = 1 [ 162.444703][ T9391] is_bad_inode(inode)=0 [ 162.448939][ T9391] NEXT_ORPHAN(inode)=3254779904 [ 162.452623][ T9421] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1856'. [ 162.453845][ T9391] max_ino=32 [ 162.466037][ T9391] i_nlink=0 [ 162.471404][ T9391] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.1850: lblock 2 mapped to illegal pblock 2 (length 1) [ 162.486244][ T9391] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.1850: lblock 0 mapped to illegal pblock 48 (length 1) [ 162.500812][ T9391] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.1850: Failed to acquire dquot type 0 [ 162.512663][ T9391] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 162.534666][ T9391] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.1850: mark_inode_dirty error [ 162.546469][ T9391] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 162.616959][ T9391] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.638931][ T9391] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #2: block 16: comm syz.6.1850: lblock 0 mapped to illegal pblock 16 (length 1) [ 162.656881][ T9391] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #2: block 16: comm syz.6.1850: lblock 0 mapped to illegal pblock 16 (length 1) [ 162.680435][ T9391] syz.6.1850 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 162.701771][ T9391] EXT4-fs error (device loop6): __ext4_get_inode_loc:4861: comm syz.6.1850: Invalid inode table block 1 in block_group 0 [ 162.716703][ T9391] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 162.728944][ T9439] loop2: detected capacity change from 0 to 512 [ 162.764042][ T9439] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.1861: Invalid inode bitmap blk 4 in block_group 0 [ 162.778773][ T8061] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.839874][ T8061] EXT4-fs error (device loop6): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 162.843571][ T9439] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 162.876200][ T8061] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 162.895560][ T9454] loop7: detected capacity change from 0 to 512 [ 162.906563][ T8061] EXT4-fs error (device loop6): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 162.933498][ T9454] EXT4-fs (loop7): orphan cleanup on readonly fs [ 162.941094][ T9454] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.1866: Failed to acquire dquot type 1 [ 162.954983][ T9454] EXT4-fs (loop7): 1 truncate cleaned up [ 162.963304][ T9454] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 163.049194][ T9476] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1866'. [ 163.090280][ T9476] EXT4-fs (loop7): warning: mounting fs with errors, running e2fsck is recommended [ 163.103151][ T9476] EXT4-fs warning (device loop7): read_mmp_block:115: Error -117 while reading MMP block 8 [ 163.128242][ T8192] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.211499][ T9484] loop7: detected capacity change from 0 to 1024 [ 163.228667][ T9484] EXT4-fs (loop7): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 163.251988][ T9462] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1863'. [ 163.265133][ T9484] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 163.753006][ T9502] sctp: [Deprecated]: syz.4.1874 (pid 9502) Use of int in max_burst socket option deprecated. [ 163.753006][ T9502] Use struct sctp_assoc_value instead [ 163.975470][ T9509] netlink: 'syz.4.1875': attribute type 12 has an invalid length. [ 164.053540][ T9518] loop3: detected capacity change from 0 to 512 [ 164.073994][ T9520] loop4: detected capacity change from 0 to 1024 [ 164.096152][ T8192] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.105994][ T9520] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0003] [ 164.116172][ T9518] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 164.135577][ T9520] System zones: 0-1, 3-36 [ 164.151339][ T9525] loop7: detected capacity change from 0 to 512 [ 164.152726][ T9520] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.172888][ T9520] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.183650][ T9525] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 164.208110][ T9518] EXT4-fs (loop3): 1 truncate cleaned up [ 164.215302][ T9525] EXT4-fs (loop7): orphan cleanup on readonly fs [ 164.230667][ T9518] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.254080][ T9518] FAULT_INJECTION: forcing a failure. [ 164.254080][ T9518] name failslab, interval 1, probability 0, space 0, times 0 [ 164.267021][ T9518] CPU: 1 UID: 0 PID: 9518 Comm: syz.3.1876 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 164.267204][ T9518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 164.267220][ T9518] Call Trace: [ 164.267227][ T9518] [ 164.267236][ T9518] __dump_stack+0x1d/0x30 [ 164.267283][ T9518] dump_stack_lvl+0xe8/0x140 [ 164.267309][ T9518] dump_stack+0x15/0x1b [ 164.267331][ T9518] should_fail_ex+0x265/0x280 [ 164.267380][ T9518] should_failslab+0x8c/0xb0 [ 164.267409][ T9518] kmem_cache_alloc_noprof+0x50/0x310 [ 164.267438][ T9518] ? getname_flags+0x80/0x3b0 [ 164.267473][ T9518] getname_flags+0x80/0x3b0 [ 164.267568][ T9518] __x64_sys_unlink+0x21/0x40 [ 164.267597][ T9518] x64_sys_call+0x2dc0/0x2ff0 [ 164.267684][ T9518] do_syscall_64+0xd2/0x200 [ 164.267715][ T9518] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 164.267824][ T9518] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 164.267853][ T9518] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.267882][ T9518] RIP: 0033:0x7f74d1e4eb69 [ 164.267904][ T9518] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.267929][ T9518] RSP: 002b:00007f74d04af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 164.268008][ T9518] RAX: ffffffffffffffda RBX: 00007f74d2075fa0 RCX: 00007f74d1e4eb69 [ 164.268021][ T9518] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 164.268037][ T9518] RBP: 00007f74d04af090 R08: 0000000000000000 R09: 0000000000000000 [ 164.268052][ T9518] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 164.268067][ T9518] R13: 0000000000000000 R14: 00007f74d2075fa0 R15: 00007fff45d98998 [ 164.268092][ T9518] [ 164.457121][ T9525] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.1879: corrupted inode contents [ 164.473295][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.495246][ T9532] netlink: 'syz.4.1881': attribute type 1 has an invalid length. [ 164.498978][ T9525] EXT4-fs (loop7): Remounting filesystem read-only [ 164.503106][ T9532] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1881'. [ 164.517771][ T9525] EXT4-fs (loop7): 1 truncate cleaned up [ 164.524634][ T4992] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 164.535346][ T4992] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 164.548637][ T4992] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 164.564952][ T9525] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 164.600593][ T9541] loop3: detected capacity change from 0 to 128 [ 164.607144][ T9532] loop4: detected capacity change from 0 to 8192 [ 164.619286][ T8192] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.624654][ T9532] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001 [ 164.637003][ T9541] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 164.656339][ T9541] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 164.680861][ T9544] loop7: detected capacity change from 0 to 1024 [ 164.698545][ T9544] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0003] [ 164.699426][ T9541] ext2 filesystem being mounted at /388/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 164.739528][ T9544] System zones: 0-1, 3-36 [ 164.749774][ T9544] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.783920][ T9544] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.794053][ T9541] netlink: 'syz.3.1885': attribute type 1 has an invalid length. [ 164.844240][ T3308] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 164.895078][ T9554] loop3: detected capacity change from 0 to 1024 [ 164.919731][ T9556] loop4: detected capacity change from 0 to 1024 [ 164.919876][ T9554] EXT4-fs: inline encryption not supported [ 164.933066][ T9554] EXT4-fs: Ignoring removed bh option [ 164.940585][ T295] 0: reclassify loop, rule prio 0, protocol 800 [ 164.957900][ T9556] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0003] [ 164.970950][ T9554] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.972667][ T9556] System zones: 0-1, 3-36 [ 164.994238][ T9562] loop7: detected capacity change from 0 to 512 [ 164.999269][ T9556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.004354][ T9554] netlink: 'syz.3.1888': attribute type 3 has an invalid length. [ 165.025104][ T9556] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.031327][ T9562] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 165.061827][ T9562] EXT4-fs (loop7): Remounting filesystem read-only [ 165.068958][ T3308] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.078438][ T9562] EXT4-fs (loop7): 1 truncate cleaned up [ 165.088319][ T9562] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.137668][ T8192] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.177285][ T9571] loop7: detected capacity change from 0 to 512 [ 165.183729][ T9572] loop4: detected capacity change from 0 to 512 [ 165.206573][ T9572] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 165.220420][ T9572] EXT4-fs (loop4): orphan cleanup on readonly fs [ 165.227605][ T9571] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 165.255246][ T9572] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.1897: corrupted inode contents [ 165.277934][ T9571] EXT4-fs (loop7): Remounting filesystem read-only [ 165.289883][ T9572] EXT4-fs (loop4): Remounting filesystem read-only [ 165.293455][ T9571] EXT4-fs (loop7): 1 truncate cleaned up [ 165.302936][ T9572] EXT4-fs (loop4): 1 truncate cleaned up [ 165.308879][ T295] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 165.319585][ T295] __quota_error: 381 callbacks suppressed [ 165.319654][ T295] Quota error (device loop4): write_blk: dquota write failed [ 165.329378][ T9571] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.332979][ T295] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries [ 165.355181][ T295] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 165.365810][ T295] Quota error (device loop4): write_blk: dquota write failed [ 165.373305][ T295] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list [ 165.388318][ T295] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 165.396709][ T9571] FAULT_INJECTION: forcing a failure. [ 165.396709][ T9571] name failslab, interval 1, probability 0, space 0, times 0 [ 165.398531][ T295] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 165.411119][ T9571] CPU: 1 UID: 0 PID: 9571 Comm: syz.7.1896 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 165.411158][ T9571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 165.411175][ T9571] Call Trace: [ 165.411186][ T9571] [ 165.411198][ T9571] __dump_stack+0x1d/0x30 [ 165.411231][ T9571] dump_stack_lvl+0xe8/0x140 [ 165.411271][ T9571] dump_stack+0x15/0x1b [ 165.411296][ T9571] should_fail_ex+0x265/0x280 [ 165.411364][ T9571] should_failslab+0x8c/0xb0 [ 165.411401][ T9571] kmem_cache_alloc_noprof+0x50/0x310 [ 165.411496][ T9571] ? alloc_empty_file+0x76/0x200 [ 165.411540][ T9571] ? mntput+0x4b/0x80 [ 165.411582][ T9571] alloc_empty_file+0x76/0x200 [ 165.411639][ T9571] path_openat+0x68/0x2170 [ 165.411700][ T9571] ? exc_page_fault+0x62/0xa0 [ 165.411729][ T9571] ? _parse_integer_limit+0x170/0x190 [ 165.411782][ T9571] ? kstrtoull+0x111/0x140 [ 165.411901][ T9571] ? kstrtouint+0x76/0xc0 [ 165.411963][ T9571] do_filp_open+0x109/0x230 [ 165.412005][ T9571] do_sys_openat2+0xa6/0x110 [ 165.412121][ T9571] __x64_sys_openat+0xf2/0x120 [ 165.412182][ T9571] x64_sys_call+0x2e9c/0x2ff0 [ 165.412214][ T9571] do_syscall_64+0xd2/0x200 [ 165.412266][ T9571] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 165.412375][ T9571] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 165.412407][ T9571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.412451][ T9571] RIP: 0033:0x7f66ca02eb69 [ 165.412473][ T9571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.412500][ T9571] RSP: 002b:00007f66c868f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 165.412529][ T9571] RAX: ffffffffffffffda RBX: 00007f66ca255fa0 RCX: 00007f66ca02eb69 [ 165.412548][ T9571] RDX: 0000000000000042 RSI: 0000200000000440 RDI: ffffffffffffff9c [ 165.412565][ T9571] RBP: 00007f66c868f090 R08: 0000000000000000 R09: 0000000000000000 [ 165.412583][ T9571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.412601][ T9571] R13: 0000000000000000 R14: 00007f66ca255fa0 R15: 00007ffd6c87fe18 [ 165.412636][ T9571] [ 165.509231][ T9580] netlink: 'syz.6.1899': attribute type 1 has an invalid length. [ 165.510062][ T295] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 165.514215][ T9580] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1899'. [ 165.520546][ T9572] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 165.603949][ T9580] loop6: detected capacity change from 0 to 8192 [ 165.629786][ T8192] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.668488][ T9580] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001 [ 165.687694][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.713021][ T9582] FAULT_INJECTION: forcing a failure. [ 165.713021][ T9582] name failslab, interval 1, probability 0, space 0, times 0 [ 165.725728][ T9582] CPU: 1 UID: 0 PID: 9582 Comm: syz.7.1900 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 165.725767][ T9582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 165.725781][ T9582] Call Trace: [ 165.725790][ T9582] [ 165.725812][ T9582] __dump_stack+0x1d/0x30 [ 165.725836][ T9582] dump_stack_lvl+0xe8/0x140 [ 165.725858][ T9582] dump_stack+0x15/0x1b [ 165.725879][ T9582] should_fail_ex+0x265/0x280 [ 165.725922][ T9582] ? __se_sys_mount+0xef/0x2e0 [ 165.725952][ T9582] should_failslab+0x8c/0xb0 [ 165.726035][ T9582] __kmalloc_cache_noprof+0x4c/0x320 [ 165.726084][ T9582] ? memdup_user+0x99/0xd0 [ 165.726152][ T9582] __se_sys_mount+0xef/0x2e0 [ 165.726176][ T9582] ? fput+0x8f/0xc0 [ 165.726206][ T9582] ? ksys_write+0x192/0x1a0 [ 165.726270][ T9582] __x64_sys_mount+0x67/0x80 [ 165.726298][ T9582] x64_sys_call+0x2b4d/0x2ff0 [ 165.726368][ T9582] do_syscall_64+0xd2/0x200 [ 165.726399][ T9582] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 165.726443][ T9582] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 165.726528][ T9582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.726557][ T9582] RIP: 0033:0x7f66ca02eb69 [ 165.726574][ T9582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.726593][ T9582] RSP: 002b:00007f66c868f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 165.726613][ T9582] RAX: ffffffffffffffda RBX: 00007f66ca255fa0 RCX: 00007f66ca02eb69 [ 165.726629][ T9582] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 165.726722][ T9582] RBP: 00007f66c868f090 R08: 0000200000000240 R09: 0000000000000000 [ 165.726735][ T9582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.726747][ T9582] R13: 0000000000000000 R14: 00007f66ca255fa0 R15: 00007ffd6c87fe18 [ 165.726776][ T9582] [ 165.922119][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.979301][ T29] audit: type=1400 audit(1754081359.328:5916): avc: denied { read write } for pid=9586 comm="syz.7.1904" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 166.003661][ T29] audit: type=1400 audit(1754081359.328:5917): avc: denied { open } for pid=9586 comm="syz.7.1904" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 166.087019][ T9596] loop4: detected capacity change from 0 to 1024 [ 166.093590][ T29] audit: type=1400 audit(1754081359.388:5918): avc: denied { ioctl } for pid=9586 comm="syz.7.1904" path="/dev/sg0" dev="devtmpfs" ino=135 ioctlcmd=0x2283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 166.119269][ T29] audit: type=1326 audit(1754081359.428:5919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9592 comm="syz.6.1903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a801eb69 code=0x7ffc0000 [ 166.148561][ T9591] process 'syz.7.1904' launched '/dev/fd/6' with NULL argv: empty string added [ 166.181324][ T9596] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0003] [ 166.203241][ T9596] System zones: 0-1, 3-36 [ 166.216683][ T9596] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.233367][ T9596] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.264078][ T9611] loop6: detected capacity change from 0 to 512 [ 166.282822][ T9611] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 166.293347][ T9611] EXT4-fs (loop6): orphan cleanup on readonly fs [ 166.300665][ T9615] loop4: detected capacity change from 0 to 512 [ 166.308680][ T9611] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.1911: corrupted inode contents [ 166.322227][ T9611] EXT4-fs (loop6): Remounting filesystem read-only [ 166.323508][ T9615] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1912: Invalid inode bitmap blk 4 in block_group 0 [ 166.329002][ T9611] EXT4-fs (loop6): 1 truncate cleaned up [ 166.347526][ T56] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 166.348928][ T9615] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.358164][ T56] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 166.381560][ T56] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 166.392468][ T9611] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 166.417122][ T8061] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.551801][ T9618] bridge0: port 3(geneve0) entered blocking state [ 166.558407][ T9618] bridge0: port 3(geneve0) entered disabled state [ 166.565689][ T9618] geneve0: entered allmulticast mode [ 166.572048][ T9618] geneve0: entered promiscuous mode [ 166.577891][ T9618] bridge0: port 3(geneve0) entered blocking state [ 166.584416][ T9618] bridge0: port 3(geneve0) entered forwarding state [ 166.641815][ T9622] netlink: 'syz.6.1914': attribute type 1 has an invalid length. [ 166.649653][ T9622] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1914'. [ 166.687605][ T9622] loop6: detected capacity change from 0 to 8192 [ 166.706927][ T9622] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001 [ 166.781061][ T9626] loop6: detected capacity change from 0 to 2048 [ 166.819615][ T9628] loop2: detected capacity change from 0 to 128 [ 166.827952][ T9628] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 166.840572][ T9628] ext4 filesystem being mounted at /401/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 166.860710][ T51] 0: reclassify loop, rule prio 0, protocol 800 [ 166.867089][ T4992] 0: reclassify loop, rule prio 0, protocol 800 [ 166.883885][ T3312] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 166.906549][ T3294] loop6: unable to read partition table [ 166.917971][ T3294] loop6: partition table beyond EOD, truncated [ 166.973972][ T9626] loop6: unable to read partition table [ 166.979969][ T9626] loop6: partition table beyond EOD, truncated [ 166.986281][ T9626] loop_reread_partitions: partition scan of loop6 () failed (rc=-5) [ 166.998081][ T9637] loop2: detected capacity change from 0 to 512 [ 167.009488][ T9637] EXT4-fs: quotafile must be on filesystem root [ 167.044882][ T9640] raw_sendmsg: syz.6.1916 forgot to set AF_INET. Fix it! [ 167.056342][ T9637] netlink: 620 bytes leftover after parsing attributes in process `syz.2.1921'. [ 167.060807][ T9642] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1923'. [ 167.093386][ T9642] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1923'. [ 167.108400][ T9642] random: crng reseeded on system resumption [ 167.190516][ T9648] bridge_slave_0: left allmulticast mode [ 167.196248][ T9648] bridge_slave_0: left promiscuous mode [ 167.202230][ T9648] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.211123][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 167.249707][ T9648] bridge_slave_1: left allmulticast mode [ 167.255551][ T9648] bridge_slave_1: left promiscuous mode [ 167.261442][ T9648] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.263545][ T9646] loop3: detected capacity change from 0 to 8192 [ 167.355218][ T9651] loop2: detected capacity change from 0 to 2048 [ 167.433368][ T9648] bond0: (slave bond_slave_0): Releasing backup interface [ 167.471248][ T9651] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.505002][ T4987] 0: reclassify loop, rule prio 0, protocol 800 [ 167.550413][ T9651] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1921: bg 0: block 234: padding at end of block bitmap is not set [ 167.567690][ T9651] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 167.580145][ T9651] EXT4-fs (loop2): This should not happen!! Data will be lost [ 167.580145][ T9651] [ 167.589802][ T9651] EXT4-fs (loop2): Total free blocks count 0 [ 167.595869][ T9651] EXT4-fs (loop2): Free/Dirty block details [ 167.601878][ T9651] EXT4-fs (loop2): free_blocks=0 [ 167.606852][ T9651] EXT4-fs (loop2): dirty_blocks=16 [ 167.612017][ T9651] EXT4-fs (loop2): Block reservation details [ 167.618063][ T9651] EXT4-fs (loop2): i_reserved_data_blocks=1 [ 168.143851][ C0] bridge0: received packet on geneve0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 168.227448][ T9648] bond0: (slave bond_slave_1): Releasing backup interface [ 168.268505][ T9648] team0: Port device team_slave_0 removed [ 168.337023][ T9648] team0: Port device team_slave_1 removed [ 168.389128][ T9648] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.396719][ T9648] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.470544][ T9648] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.478004][ T9648] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.554348][ T9648] geneve0: left allmulticast mode [ 168.559481][ T9648] geneve0: left promiscuous mode [ 168.564821][ T9648] bridge0: port 3(geneve0) entered disabled state [ 168.727664][ T9666] loop6: detected capacity change from 0 to 1024 [ 168.794549][ T9666] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0003] [ 168.822071][ T9666] System zones: 0-1, 3-36 [ 168.845536][ T9666] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.878077][ T9666] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.221683][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.255226][ T9676] loop6: detected capacity change from 0 to 1024 [ 169.266968][ T9676] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 169.277070][ T9676] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 169.286852][ T9678] loop2: detected capacity change from 0 to 164 [ 169.292787][ T9676] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 169.306407][ T9676] EXT4-fs error (device loop6): ext4_get_journal_inode:5796: inode #5: comm syz.6.1935: unexpected bad inode w/o EXT4_IGET_BAD [ 169.321850][ T9676] EXT4-fs (loop6): no journal found [ 169.327146][ T9676] EXT4-fs (loop6): can't get journal size [ 169.333795][ T9676] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 169.333814][ T9678] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 169.356950][ T9676] EXT4-fs error (device loop6): __ext4_remount:6736: comm syz.6.1935: Abort forced by user [ 169.360629][ T9678] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 169.368659][ T9676] EXT4-fs (loop6): Remounting filesystem read-only [ 169.373701][ T9678] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 169.373811][ T9678] vhci_hcd vhci_hcd.0: Device attached [ 169.380374][ T9676] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 169.402224][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.422281][ T9680] vhci_hcd: connection closed [ 169.422919][ T12] vhci_hcd: stop threads [ 169.423429][ T8061] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.427895][ T12] vhci_hcd: release socket [ 169.445620][ T12] vhci_hcd: disconnect device [ 169.468720][ T9684] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1936'. [ 169.481404][ T9684] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1936'. [ 169.497437][ T9684] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.550903][ T9693] loop4: detected capacity change from 0 to 1024 [ 169.557854][ T9693] EXT4-fs: Ignoring removed nobh option [ 169.567354][ T9693] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 169.584952][ T9693] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.1940: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 169.606720][ T9693] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1940: couldn't read orphan inode 11 (err -117) [ 169.619568][ T9693] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.637764][ T9693] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.1940: Invalid block bitmap block 0 in block_group 0 [ 169.651855][ T9693] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.1940: Failed to acquire dquot type 0 [ 169.681712][ T3301] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.707575][ T9700] loop4: detected capacity change from 0 to 1024 [ 169.728790][ T9700] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0003] [ 169.741548][ T9700] System zones: 0-1, 3-36 [ 169.745076][ T9703] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1943'. [ 169.746905][ T9700] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.769527][ T9700] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 169.773408][ T9703] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1943'. [ 169.821150][ T9705] netlink: 'syz.3.1944': attribute type 1 has an invalid length. [ 169.829011][ T9705] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1944'. [ 169.865040][ T9707] syzkaller0: entered promiscuous mode [ 169.870690][ T9707] syzkaller0: entered allmulticast mode [ 169.887569][ T9710] loop4: detected capacity change from 0 to 512 [ 169.901889][ T9711] loop7: detected capacity change from 0 to 512 [ 169.903523][ T9707] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 169.936015][ T9705] loop3: detected capacity change from 0 to 8192 [ 169.937514][ T9711] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 169.954642][ T9710] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.1946: Invalid inode bitmap blk 4 in block_group 0 [ 169.954792][ T9705] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001 [ 169.998480][ T9710] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 170.013821][ T9711] EXT4-fs (loop7): orphan cleanup on readonly fs [ 170.034580][ T9711] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #16: comm syz.7.1947: corrupted inode contents [ 170.054318][ T9711] EXT4-fs (loop7): Remounting filesystem read-only [ 170.065980][ T9711] EXT4-fs (loop7): 1 truncate cleaned up [ 170.072911][ T295] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 170.083574][ T295] EXT4-fs (loop7): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 170.095672][ T295] EXT4-fs (loop7): Quota write (off=8, len=24) cancelled because transaction is not started [ 170.106549][ T9711] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 170.172470][ T8192] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.187001][ T9722] loop2: detected capacity change from 0 to 2048 [ 170.196462][ T9725] lo speed is unknown, defaulting to 1000 [ 170.225377][ T9722] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 170.243703][ T9725] lo speed is unknown, defaulting to 1000 [ 170.311685][ T9725] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1952'. [ 170.321945][ T29] kauditd_printk_skb: 239 callbacks suppressed [ 170.321964][ T29] audit: type=1400 audit(1754081363.678:6145): avc: denied { ioctl } for pid=9723 comm="syz.6.1952" path="socket:[25256]" dev="sockfs" ino=25256 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 170.376336][ T9731] loop7: detected capacity change from 0 to 2048 [ 170.403805][ T3294] Alternate GPT is invalid, using primary GPT. [ 170.410500][ T3294] loop7: p2 p3 p7 [ 170.460836][ T9735] netlink: 'syz.3.1955': attribute type 1 has an invalid length. [ 170.468851][ T9735] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1955'. [ 170.474761][ T9731] Alternate GPT is invalid, using primary GPT. [ 170.484378][ T9731] loop7: p2 p3 p7 [ 170.499507][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.510254][ T29] audit: type=1400 audit(1754081363.858:6146): avc: denied { read write } for pid=9730 comm="syz.7.1954" name="loop7p2" dev="devtmpfs" ino=2108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 170.533773][ T29] audit: type=1400 audit(1754081363.858:6147): avc: denied { open } for pid=9730 comm="syz.7.1954" path="/dev/loop7p2" dev="devtmpfs" ino=2108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 170.558096][ T9735] loop3: detected capacity change from 0 to 8192 [ 170.568065][ T9731] netem: incorrect ge model size [ 170.573121][ T9731] netem: change failed [ 170.581397][ T9737] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1956'. [ 170.595315][ T29] audit: type=1326 audit(1754081363.928:6148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9736 comm="syz.2.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a13f7eb69 code=0x7ffc0000 [ 170.619452][ T29] audit: type=1326 audit(1754081363.928:6149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9736 comm="syz.2.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a13f7eb69 code=0x7ffc0000 [ 170.641763][ T9735] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001 [ 170.643420][ T29] audit: type=1326 audit(1754081363.928:6150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9736 comm="syz.2.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2a13f7eb69 code=0x7ffc0000 [ 170.674312][ T29] audit: type=1326 audit(1754081363.928:6151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9736 comm="syz.2.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a13f7eb69 code=0x7ffc0000 [ 170.698403][ T29] audit: type=1326 audit(1754081363.928:6152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9736 comm="syz.2.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a13f7eb69 code=0x7ffc0000 [ 170.722589][ T29] audit: type=1326 audit(1754081363.928:6153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9736 comm="syz.2.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2a13f7eb69 code=0x7ffc0000 [ 170.727010][ T4987] 0: reclassify loop, rule prio 0, protocol 800 [ 170.746656][ T29] audit: type=1326 audit(1754081363.928:6154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9736 comm="syz.2.1956" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a13f7eb69 code=0x7ffc0000 [ 170.782275][ T3750] udevd[3750]: inotify_add_watch(7, /dev/loop7p3, 10) failed: No such file or directory [ 170.796413][ T9737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1956'. [ 170.802551][ T3742] udevd[3742]: inotify_add_watch(7, /dev/loop7p7, 10) failed: No such file or directory [ 170.823146][ T3294] udevd[3294]: inotify_add_watch(7, /dev/loop7p2, 10) failed: No such file or directory [ 170.937943][ T9748] loop2: detected capacity change from 0 to 512 [ 170.984671][ T9748] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 170.993810][ T9748] EXT4-fs (loop2): orphan cleanup on readonly fs [ 171.006681][ T9748] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1960: corrupted inode contents [ 171.086054][ T9748] EXT4-fs (loop2): Remounting filesystem read-only [ 171.093073][ T9748] EXT4-fs (loop2): 1 truncate cleaned up [ 171.099222][ T51] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 171.113827][ T51] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 171.130407][ T9752] loop6: detected capacity change from 0 to 8192 [ 171.167337][ T51] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 171.186616][ T9748] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 171.229822][ T9754] loop6: detected capacity change from 0 to 1024 [ 171.253531][ T3312] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.286912][ T9754] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0003] [ 171.299446][ T9754] System zones: 0-1, 3-36 [ 171.331577][ T9754] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.358519][ T9754] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 171.406970][ T9759] SELinux: Context system_u:object_r:pam_exec_t:s0 is not valid (left unmapped). [ 171.422748][ T9759] FAULT_INJECTION: forcing a failure. [ 171.422748][ T9759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.436897][ T9759] CPU: 1 UID: 0 PID: 9759 Comm: syz.6.1964 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 171.437033][ T9759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 171.437047][ T9759] Call Trace: [ 171.437055][ T9759] [ 171.437085][ T9759] __dump_stack+0x1d/0x30 [ 171.437115][ T9759] dump_stack_lvl+0xe8/0x140 [ 171.437137][ T9759] dump_stack+0x15/0x1b [ 171.437154][ T9759] should_fail_ex+0x265/0x280 [ 171.437248][ T9759] should_fail+0xb/0x20 [ 171.437279][ T9759] should_fail_usercopy+0x1a/0x20 [ 171.437304][ T9759] _copy_to_user+0x20/0xa0 [ 171.437337][ T9759] simple_read_from_buffer+0xb5/0x130 [ 171.437396][ T9759] proc_fail_nth_read+0x10e/0x150 [ 171.437432][ T9759] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 171.437464][ T9759] vfs_read+0x1a0/0x6f0 [ 171.437497][ T9759] ? __rcu_read_unlock+0x4f/0x70 [ 171.437589][ T9759] ? __fget_files+0x184/0x1c0 [ 171.437623][ T9759] ? __rcu_read_unlock+0x4f/0x70 [ 171.437674][ T9759] ksys_read+0xda/0x1a0 [ 171.437708][ T9759] __x64_sys_read+0x40/0x50 [ 171.437738][ T9759] x64_sys_call+0x27bc/0x2ff0 [ 171.437766][ T9759] do_syscall_64+0xd2/0x200 [ 171.437808][ T9759] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 171.437850][ T9759] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 171.437882][ T9759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.437913][ T9759] RIP: 0033:0x7fc9a801d57c [ 171.437938][ T9759] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 171.438025][ T9759] RSP: 002b:00007fc9a667f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 171.438073][ T9759] RAX: ffffffffffffffda RBX: 00007fc9a8245fa0 RCX: 00007fc9a801d57c [ 171.438092][ T9759] RDX: 000000000000000f RSI: 00007fc9a667f0a0 RDI: 0000000000000006 [ 171.438111][ T9759] RBP: 00007fc9a667f090 R08: 0000000000000000 R09: 0000000000000000 [ 171.438129][ T9759] R10: 04000000000000f3 R11: 0000000000000246 R12: 0000000000000001 [ 171.438156][ T9759] R13: 0000000000000000 R14: 00007fc9a8245fa0 R15: 00007ffe7ef99f88 [ 171.438184][ T9759] [ 171.674351][ T9695] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 171.721423][ T9763] loop7: detected capacity change from 0 to 1024 [ 171.740024][ T9763] EXT4-fs: Ignoring removed nobh option [ 171.770846][ T9763] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 171.790382][ T9767] netlink: 'syz.6.1968': attribute type 1 has an invalid length. [ 171.798395][ T9767] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1968'. [ 171.834467][ T9763] EXT4-fs error (device loop7): ext4_ext_check_inode:523: inode #11: comm syz.7.1966: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 171.851132][ T9769] netlink: 'syz.2.1969': attribute type 1 has an invalid length. [ 171.861769][ T9769] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1969'. [ 171.871379][ T9763] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.1966: couldn't read orphan inode 11 (err -117) [ 171.895789][ T9767] loop6: detected capacity change from 0 to 8192 [ 171.900800][ T180] 0: reclassify loop, rule prio 0, protocol 800 [ 171.930493][ T9763] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 171.948346][ T9769] loop2: detected capacity change from 0 to 8192 [ 172.031567][ T9763] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.1966: Invalid block bitmap block 0 in block_group 0 [ 172.080527][ T9763] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.1966: Failed to acquire dquot type 0 [ 172.135826][ T9780] loop2: detected capacity change from 0 to 512 [ 172.162783][ T8192] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.190490][ T9780] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 172.199260][ T9780] EXT4-fs (loop2): orphan cleanup on readonly fs [ 172.240866][ T9780] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.1973: corrupted inode contents [ 172.263169][ T9785] loop7: detected capacity change from 0 to 1024 [ 172.281401][ T9780] EXT4-fs (loop2): Remounting filesystem read-only [ 172.298459][ T9785] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0003] [ 172.309275][ T9786] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1972'. [ 172.318713][ T9780] EXT4-fs (loop2): 1 truncate cleaned up [ 172.324733][ T9785] System zones: 0-1, 3-36 [ 172.326531][ T9786] binfmt_misc: register: failed to install interpreter file ./file0 [ 172.337654][ T4987] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 172.339976][ T9785] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.348497][ T4987] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 172.385702][ T4987] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 172.446230][ T9780] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 172.622598][ T4987] 0: reclassify loop, rule prio 0, protocol 800 [ 172.629262][ T295] 0: reclassify loop, rule prio 0, protocol 800 [ 172.829118][ T9796] lo speed is unknown, defaulting to 1000 [ 172.837157][ T9798] loop6: detected capacity change from 0 to 128 [ 172.845226][ T9796] lo speed is unknown, defaulting to 1000 [ 172.862062][ T9798] FAULT_INJECTION: forcing a failure. [ 172.862062][ T9798] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 172.875902][ T9798] CPU: 1 UID: 0 PID: 9798 Comm: syz.6.1978 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 172.875937][ T9798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 172.875990][ T9798] Call Trace: [ 172.876000][ T9798] [ 172.876013][ T9798] __dump_stack+0x1d/0x30 [ 172.876045][ T9798] dump_stack_lvl+0xe8/0x140 [ 172.876142][ T9798] dump_stack+0x15/0x1b [ 172.876161][ T9798] should_fail_ex+0x265/0x280 [ 172.876213][ T9798] should_fail_alloc_page+0xf2/0x100 [ 172.876349][ T9798] __alloc_frozen_pages_noprof+0xff/0x360 [ 172.876390][ T9798] alloc_pages_mpol+0xb3/0x250 [ 172.876459][ T9798] folio_alloc_noprof+0x97/0x150 [ 172.876505][ T9798] filemap_alloc_folio_noprof+0x66/0x210 [ 172.876555][ T9798] __filemap_get_folio+0x28f/0x6b0 [ 172.876599][ T9798] ? _raw_spin_unlock+0x26/0x50 [ 172.876696][ T9798] cont_write_begin+0x5c8/0x970 [ 172.876806][ T9798] ? generic_write_end+0x133/0x150 [ 172.876844][ T9798] fat_write_begin+0x4f/0xe0 [ 172.876876][ T9798] ? __pfx_fat_get_block+0x10/0x10 [ 172.876906][ T9798] cont_write_begin+0x1b0/0x970 [ 172.877017][ T9798] fat_write_begin+0x4f/0xe0 [ 172.877046][ T9798] ? __pfx_fat_get_block+0x10/0x10 [ 172.877076][ T9798] generic_cont_expand_simple+0xad/0x150 [ 172.877115][ T9798] fat_cont_expand+0x3e/0x170 [ 172.877194][ T9798] fat_fallocate+0x177/0x1c0 [ 172.877296][ T9798] vfs_fallocate+0x3b6/0x400 [ 172.877333][ T9798] __x64_sys_fallocate+0x7a/0xd0 [ 172.877370][ T9798] x64_sys_call+0x2514/0x2ff0 [ 172.877429][ T9798] do_syscall_64+0xd2/0x200 [ 172.877462][ T9798] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 172.877539][ T9798] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 172.877569][ T9798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.877599][ T9798] RIP: 0033:0x7fc9a801eb69 [ 172.877616][ T9798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.877667][ T9798] RSP: 002b:00007fc9a667f038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 172.877693][ T9798] RAX: ffffffffffffffda RBX: 00007fc9a8245fa0 RCX: 00007fc9a801eb69 [ 172.877711][ T9798] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 172.877727][ T9798] RBP: 00007fc9a667f090 R08: 0000000000000000 R09: 0000000000000000 [ 172.877744][ T9798] R10: 000000000000fffb R11: 0000000000000246 R12: 0000000000000001 [ 172.877761][ T9798] R13: 0000000000000000 R14: 00007fc9a8245fa0 R15: 00007ffe7ef99f88 [ 172.877788][ T9798] [ 173.176483][ T9801] tmpfs: Unsupported parameter 'huge' [ 173.238756][ T9805] loop6: detected capacity change from 0 to 164 [ 173.256330][ T9807] netlink: 'syz.4.1981': attribute type 1 has an invalid length. [ 173.268059][ T9805] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 173.313781][ T9805] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 173.321340][ T9805] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 173.329315][ T9805] vhci_hcd vhci_hcd.0: Device attached [ 173.347839][ T9809] vhci_hcd: cannot find the pending unlink 6 [ 173.354683][ T9809] vhci_hcd: connection closed [ 173.354912][ T4987] vhci_hcd: stop threads [ 173.364151][ T4987] vhci_hcd: release socket [ 173.368588][ T4987] vhci_hcd: disconnect device [ 173.377496][ T9807] loop4: detected capacity change from 0 to 8192 [ 173.646619][ T9828] loop4: detected capacity change from 0 to 1024 [ 173.664318][ T9828] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 173.674251][ T9828] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 173.708678][ T9828] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 173.721628][ T9828] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: inode #5: comm syz.4.1986: unexpected bad inode w/o EXT4_IGET_BAD [ 173.767341][ T9834] ucma_write: process 995 (syz.2.1992) changed security contexts after opening file descriptor, this is not allowed. [ 173.769586][ T9828] EXT4-fs (loop4): no journal found [ 173.785052][ T9828] EXT4-fs (loop4): can't get journal size [ 173.836791][ T9828] EXT4-fs error (device loop4): __ext4_remount:6736: comm syz.4.1986: Abort forced by user [ 173.848772][ T9828] EXT4-fs (loop4): Remounting filesystem read-only [ 173.848791][ T9828] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 173.889413][ T9842] loop3: detected capacity change from 0 to 512 [ 173.911446][ T9842] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 173.944267][ T9842] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1996: invalid indirect mapped block 2683928664 (level 1) [ 173.970971][ T9842] EXT4-fs (loop3): 1 truncate cleaned up [ 173.996442][ T9842] EXT4-fs error (device loop3): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.3.1996: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 174.214941][ T9855] loop3: detected capacity change from 0 to 512 [ 174.260346][ T9855] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 174.266864][ T9855] EXT4-fs (loop3): mount failed [ 174.326756][ T9855] loop3: detected capacity change from 0 to 512 [ 174.363027][ T9855] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 174.384831][ T9855] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 174.393373][ T9868] netlink: 'syz.6.2004': attribute type 1 has an invalid length. [ 174.420496][ T9855] EXT4-fs (loop3): 1 truncate cleaned up [ 174.484763][ T9868] bond1: entered promiscuous mode [ 174.516707][ T9868] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.614194][ T9873] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.652980][ T9873] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 174.663949][ T9873] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 174.723511][ T9894] loop7: detected capacity change from 0 to 128 [ 174.763181][ T9873] bond1: (slave ip6gre1): making interface the new active one [ 174.770891][ T9873] ip6gre1: entered promiscuous mode [ 174.786529][ T9894] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.816472][ T9873] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 175.067745][ T9925] FAULT_INJECTION: forcing a failure. [ 175.067745][ T9925] name failslab, interval 1, probability 0, space 0, times 0 [ 175.086019][ T9925] CPU: 0 UID: 0 PID: 9925 Comm: syz.6.2015 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 175.086099][ T9925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 175.086116][ T9925] Call Trace: [ 175.086151][ T9925] [ 175.086163][ T9925] __dump_stack+0x1d/0x30 [ 175.086249][ T9925] dump_stack_lvl+0xe8/0x140 [ 175.086276][ T9925] dump_stack+0x15/0x1b [ 175.086299][ T9925] should_fail_ex+0x265/0x280 [ 175.086339][ T9925] should_failslab+0x8c/0xb0 [ 175.086366][ T9925] __kmalloc_noprof+0xa5/0x3e0 [ 175.086418][ T9925] ? unix_bind+0x1a0/0x920 [ 175.086453][ T9925] unix_bind+0x1a0/0x920 [ 175.086494][ T9925] __sys_bind+0x1d1/0x2a0 [ 175.086534][ T9925] __x64_sys_bind+0x3f/0x50 [ 175.086581][ T9925] x64_sys_call+0x2b6e/0x2ff0 [ 175.086607][ T9925] do_syscall_64+0xd2/0x200 [ 175.086638][ T9925] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 175.086722][ T9925] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 175.086754][ T9925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.086816][ T9925] RIP: 0033:0x7fc9a801eb69 [ 175.086839][ T9925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.086912][ T9925] RSP: 002b:00007fc9a667f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 175.086940][ T9925] RAX: ffffffffffffffda RBX: 00007fc9a8245fa0 RCX: 00007fc9a801eb69 [ 175.086957][ T9925] RDX: 000000000000006e RSI: 0000200000000080 RDI: 0000000000000003 [ 175.086983][ T9925] RBP: 00007fc9a667f090 R08: 0000000000000000 R09: 0000000000000000 [ 175.086999][ T9925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.087016][ T9925] R13: 0000000000000000 R14: 00007fc9a8245fa0 R15: 00007ffe7ef99f88 [ 175.087042][ T9925] [ 175.494163][ T29] kauditd_printk_skb: 215 callbacks suppressed [ 175.494182][ T29] audit: type=1400 audit(1754081368.848:6356): avc: denied { bind } for pid=9962 comm="syz.6.2017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 175.539362][ T29] audit: type=1400 audit(1754081368.888:6357): avc: denied { read } for pid=9962 comm="syz.6.2017" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 175.567794][ T29] audit: type=1400 audit(1754081368.888:6358): avc: denied { open } for pid=9962 comm="syz.6.2017" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 175.595589][ T29] audit: type=1400 audit(1754081368.888:6359): avc: denied { ioctl } for pid=9962 comm="syz.6.2017" path="/dev/loop-control" dev="devtmpfs" ino=99 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 175.721197][ T9969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24420 sclass=netlink_route_socket pid=9969 comm=syz.3.2019 [ 175.721744][ T9971] __nla_validate_parse: 5 callbacks suppressed [ 175.721763][ T9971] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2020'. [ 175.798070][ T29] audit: type=1400 audit(1754081369.148:6360): avc: denied { name_connect } for pid=9970 comm="syz.6.2020" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 175.859734][ T29] audit: type=1326 audit(1754081369.198:6361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9970 comm="syz.6.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a801eb69 code=0x7ffc0000 [ 175.883691][ T29] audit: type=1326 audit(1754081369.198:6362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9970 comm="syz.6.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a801eb69 code=0x7ffc0000 [ 175.907926][ T29] audit: type=1326 audit(1754081369.208:6363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9970 comm="syz.6.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc9a801eb69 code=0x7ffc0000 [ 175.932864][ T29] audit: type=1326 audit(1754081369.208:6364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9970 comm="syz.6.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a801eb69 code=0x7ffc0000 [ 175.964075][ T29] audit: type=1326 audit(1754081369.208:6365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9970 comm="syz.6.2020" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a801eb69 code=0x7ffc0000 [ 176.067143][ T9976] loop6: detected capacity change from 0 to 8192 [ 176.098743][ T9984] macvlan2: entered promiscuous mode [ 176.122460][ T9984] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 176.144821][ T9985] macvlan3: entered promiscuous mode [ 176.161323][ T9985] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 176.277700][ T9994] loop3: detected capacity change from 0 to 128 [ 176.305546][ T9994] ext4 filesystem being mounted at /412/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 176.461205][ T12] 0: reclassify loop, rule prio 0, protocol 800 [ 176.498946][T10004] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2030'. [ 176.535274][ T9994] loop3: detected capacity change from 128 to 64 [ 176.544699][T10006] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24420 sclass=netlink_route_socket pid=10006 comm=syz.2.2031 [ 176.585953][T10005] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Out of memory [ 176.586083][T10004] bridge0: entered promiscuous mode [ 176.601266][T10005] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Out of memory [ 176.606176][T10004] bridge0: port 3(macvlan2) entered blocking state [ 176.617167][T10004] bridge0: port 3(macvlan2) entered disabled state [ 176.627488][T10004] macvlan2: entered allmulticast mode [ 176.633510][T10004] bridge0: entered allmulticast mode [ 176.645007][T10005] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #13: comm syz.3.2028: mark_inode_dirty error [ 176.669289][T10004] macvlan2: left allmulticast mode [ 176.674835][T10004] bridge0: left allmulticast mode [ 176.712499][T10004] bridge0: left promiscuous mode [ 176.732067][T10005] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -12) [ 176.788470][ T3308] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Out of memory [ 176.799877][ T3308] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error [ 177.189896][T10025] lo speed is unknown, defaulting to 1000 [ 177.203388][T10025] lo speed is unknown, defaulting to 1000 [ 177.344896][T10025] chnl_net:caif_netlink_parms(): no params data found [ 177.403157][T10025] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.410890][T10025] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.419212][T10025] bridge_slave_0: entered allmulticast mode [ 177.428147][T10025] bridge_slave_0: entered promiscuous mode [ 177.438918][T10047] loop7: detected capacity change from 0 to 764 [ 177.448163][T10025] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.455674][T10025] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.464019][T10047] iso9660: Unknown parameter '' [ 177.464056][T10025] bridge_slave_1: entered allmulticast mode [ 177.498700][T10025] bridge_slave_1: entered promiscuous mode [ 177.535558][T10025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 177.545177][T10047] rdma_rxe: rxe_newlink: failed to add lo [ 177.556885][T10025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.599728][T10025] team0: Port device team_slave_0 added [ 177.614149][T10025] team0: Port device team_slave_1 added [ 177.623229][T10053] FAULT_INJECTION: forcing a failure. [ 177.623229][T10053] name failslab, interval 1, probability 0, space 0, times 0 [ 177.636127][T10053] CPU: 0 UID: 0 PID: 10053 Comm: syz.4.2046 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 177.636160][T10053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 177.636174][T10053] Call Trace: [ 177.636182][T10053] [ 177.636191][T10053] __dump_stack+0x1d/0x30 [ 177.636220][T10053] dump_stack_lvl+0xe8/0x140 [ 177.636246][T10053] dump_stack+0x15/0x1b [ 177.636367][T10053] should_fail_ex+0x265/0x280 [ 177.636409][T10053] should_failslab+0x8c/0xb0 [ 177.636443][T10053] __kmalloc_noprof+0xa5/0x3e0 [ 177.636492][T10053] ? ip_options_get+0x52/0x350 [ 177.636568][T10053] ip_options_get+0x52/0x350 [ 177.636593][T10053] ? tcp_release_cb+0xf1/0x370 [ 177.636635][T10053] do_ip_setsockopt+0x19d4/0x2240 [ 177.636671][T10053] ip_setsockopt+0x58/0x110 [ 177.636743][T10053] tcp_setsockopt+0x95/0xb0 [ 177.636786][T10053] sock_common_setsockopt+0x66/0x80 [ 177.636844][T10053] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 177.636880][T10053] __sys_setsockopt+0x181/0x200 [ 177.637033][T10053] __x64_sys_setsockopt+0x64/0x80 [ 177.637067][T10053] x64_sys_call+0x20ec/0x2ff0 [ 177.637089][T10053] do_syscall_64+0xd2/0x200 [ 177.637170][T10053] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 177.637203][T10053] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 177.637234][T10053] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.637264][T10053] RIP: 0033:0x7fbf529aeb69 [ 177.637287][T10053] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.637344][T10053] RSP: 002b:00007fbf5100f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 177.637364][T10053] RAX: ffffffffffffffda RBX: 00007fbf52bd5fa0 RCX: 00007fbf529aeb69 [ 177.637425][T10053] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000006 [ 177.637516][T10053] RBP: 00007fbf5100f090 R08: 0000000000000004 R09: 0000000000000000 [ 177.637533][T10053] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 177.637550][T10053] R13: 0000000000000000 R14: 00007fbf52bd5fa0 R15: 00007ffff93b7388 [ 177.637575][T10053] [ 177.878550][ T9882] 0: reclassify loop, rule prio 0, protocol 800 [ 177.886190][T10047] loop7: detected capacity change from 0 to 128 [ 177.893335][T10047] msdos: Bad value for 'fmask' [ 177.896311][ T9882] 0: reclassify loop, rule prio 0, protocol 800 [ 177.932462][T10057] loop4: detected capacity change from 0 to 164 [ 177.942130][T10025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.949562][T10043] loop7: detected capacity change from 0 to 1024 [ 177.951906][T10025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.990793][T10025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.003435][T10057] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 178.027428][T10025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.031030][T10043] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 178.034562][T10025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.071896][T10025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.096362][T10057] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 178.103512][T10057] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 178.111199][T10057] vhci_hcd vhci_hcd.0: Device attached [ 178.131665][T10065] loop6: detected capacity change from 0 to 128 [ 178.138915][T10025] hsr_slave_0: entered promiscuous mode [ 178.151470][T10065] ext4 filesystem being mounted at /94/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 178.152972][T10025] hsr_slave_1: entered promiscuous mode [ 178.198214][T10060] vhci_hcd: connection closed [ 178.207275][ T31] vhci_hcd: stop threads [ 178.216933][ T31] vhci_hcd: release socket [ 178.221892][ T31] vhci_hcd: disconnect device [ 178.259862][T10025] debugfs: 'hsr0' already exists in 'hsr' [ 178.266293][T10025] Cannot create hsr debugfs directory [ 178.334924][T10074] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2051'. [ 178.381007][ T31] 0: reclassify loop, rule prio 0, protocol 800 [ 178.395612][T10074] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2051'. [ 178.401943][T10025] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 178.418917][T10025] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 178.435021][T10025] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 178.442228][T10079] loop6: detected capacity change from 0 to 2048 [ 178.452974][T10025] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 178.491301][T10079] loop6: p1 < > p4 [ 178.495987][T10079] loop6: p4 size 8388608 extends beyond EOD, truncated [ 178.523666][ T2991] udevd[2991]: worker [3294] terminated by signal 33 (Unknown signal 33) [ 178.537637][T10090] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2054'. [ 178.542902][T10025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.577430][ T3287] printk: udevd: 2 output lines suppressed due to ratelimiting [ 178.582714][T10025] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.614342][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.621969][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.640365][ T9937] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.649453][ T9937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.659121][T10096] FAULT_INJECTION: forcing a failure. [ 178.659121][T10096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.672484][T10096] CPU: 0 UID: 0 PID: 10096 Comm: syz.2.2056 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 178.672523][T10096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 178.672540][T10096] Call Trace: [ 178.672548][T10096] [ 178.672557][T10096] __dump_stack+0x1d/0x30 [ 178.672587][T10096] dump_stack_lvl+0xe8/0x140 [ 178.672725][T10096] dump_stack+0x15/0x1b [ 178.672794][T10096] should_fail_ex+0x265/0x280 [ 178.672837][T10096] should_fail+0xb/0x20 [ 178.672867][T10096] should_fail_usercopy+0x1a/0x20 [ 178.672889][T10096] _copy_to_user+0x20/0xa0 [ 178.672922][T10096] simple_read_from_buffer+0xb5/0x130 [ 178.673010][T10096] proc_fail_nth_read+0x10e/0x150 [ 178.673046][T10096] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.673080][T10096] vfs_read+0x1a0/0x6f0 [ 178.673135][T10096] ? percpu_counter_add_batch+0xb6/0x130 [ 178.673166][T10096] ? __rcu_read_unlock+0x4f/0x70 [ 178.673226][T10096] ? __fget_files+0x184/0x1c0 [ 178.673254][T10096] ksys_read+0xda/0x1a0 [ 178.673278][T10096] __x64_sys_read+0x40/0x50 [ 178.673303][T10096] x64_sys_call+0x27bc/0x2ff0 [ 178.673343][T10096] do_syscall_64+0xd2/0x200 [ 178.673374][T10096] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 178.673414][T10096] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 178.673445][T10096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.673474][T10096] RIP: 0033:0x7f2a13f7d57c [ 178.673491][T10096] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 178.673511][T10096] RSP: 002b:00007f2a125e7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 178.673571][T10096] RAX: ffffffffffffffda RBX: 00007f2a141a5fa0 RCX: 00007f2a13f7d57c [ 178.673587][T10096] RDX: 000000000000000f RSI: 00007f2a125e70a0 RDI: 0000000000000006 [ 178.673603][T10096] RBP: 00007f2a125e7090 R08: 0000000000000000 R09: 0000000000000000 [ 178.673618][T10096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.673632][T10096] R13: 0000000000000000 R14: 00007f2a141a5fa0 R15: 00007ffdfa412168 [ 178.673655][T10096] [ 179.009024][T10107] futex_wake_op: syz.4.2057 tries to shift op by 144; fix this program [ 179.077627][T10025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.146006][T10117] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2060'. [ 179.309236][T10128] SELinux: failed to load policy [ 179.357290][T10025] veth0_vlan: entered promiscuous mode [ 179.374331][T10025] veth1_vlan: entered promiscuous mode [ 179.398004][T10151] FAULT_INJECTION: forcing a failure. [ 179.398004][T10151] name failslab, interval 1, probability 0, space 0, times 0 [ 179.413043][T10025] veth0_macvtap: entered promiscuous mode [ 179.414137][T10151] CPU: 1 UID: 0 PID: 10151 Comm: syz.7.2071 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 179.414240][T10151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 179.414259][T10151] Call Trace: [ 179.414268][T10151] [ 179.414277][T10151] __dump_stack+0x1d/0x30 [ 179.414395][T10151] dump_stack_lvl+0xe8/0x140 [ 179.414463][T10151] dump_stack+0x15/0x1b [ 179.414488][T10151] should_fail_ex+0x265/0x280 [ 179.414538][T10151] should_failslab+0x8c/0xb0 [ 179.414574][T10151] kmem_cache_alloc_node_noprof+0x57/0x320 [ 179.414641][T10151] ? __alloc_skb+0x101/0x320 [ 179.414754][T10151] __alloc_skb+0x101/0x320 [ 179.414797][T10151] netlink_alloc_large_skb+0xba/0xf0 [ 179.414839][T10151] netlink_sendmsg+0x3cf/0x6b0 [ 179.414926][T10151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 179.415039][T10151] __sock_sendmsg+0x142/0x180 [ 179.415075][T10151] ____sys_sendmsg+0x31e/0x4e0 [ 179.415141][T10151] ___sys_sendmsg+0x17b/0x1d0 [ 179.415225][T10151] __x64_sys_sendmsg+0xd4/0x160 [ 179.415280][T10151] x64_sys_call+0x191e/0x2ff0 [ 179.415312][T10151] do_syscall_64+0xd2/0x200 [ 179.415447][T10151] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 179.415470][T10151] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 179.415500][T10151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.415530][T10151] RIP: 0033:0x7f66ca02eb69 [ 179.415565][T10151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.415593][T10151] RSP: 002b:00007f66c868f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 179.415642][T10151] RAX: ffffffffffffffda RBX: 00007f66ca255fa0 RCX: 00007f66ca02eb69 [ 179.415661][T10151] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 179.415677][T10151] RBP: 00007f66c868f090 R08: 0000000000000000 R09: 0000000000000000 [ 179.415697][T10151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.415733][T10151] R13: 0000000000000000 R14: 00007f66ca255fa0 R15: 00007ffd6c87fe18 [ 179.415831][T10151] [ 179.536907][T10154] FAULT_INJECTION: forcing a failure. [ 179.536907][T10154] name failslab, interval 1, probability 0, space 0, times 0 [ 179.599674][T10156] loop7: detected capacity change from 0 to 512 [ 179.602178][T10154] CPU: 1 UID: 0 PID: 10154 Comm: syz.2.2068 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 179.602213][T10154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 179.602231][T10154] Call Trace: [ 179.602244][T10154] [ 179.602257][T10154] __dump_stack+0x1d/0x30 [ 179.602406][T10154] dump_stack_lvl+0xe8/0x140 [ 179.602436][T10154] dump_stack+0x15/0x1b [ 179.602461][T10154] should_fail_ex+0x265/0x280 [ 179.602513][T10154] should_failslab+0x8c/0xb0 [ 179.602553][T10154] kmem_cache_alloc_noprof+0x50/0x310 [ 179.602669][T10154] ? skb_clone+0x151/0x1f0 [ 179.602699][T10154] skb_clone+0x151/0x1f0 [ 179.602726][T10154] packet_rcv+0x3c0/0x9a0 [ 179.602786][T10154] ? __pfx_br_handle_frame+0x10/0x10 [ 179.602897][T10154] ? __pfx_packet_rcv+0x10/0x10 [ 179.602940][T10154] __netif_receive_skb_core+0xab8/0x23b0 [ 179.603051][T10154] ? __rcu_read_unlock+0x4f/0x70 [ 179.603100][T10154] ? tun_rx_batched+0xc7/0x430 [ 179.603146][T10154] __netif_receive_skb+0x59/0x270 [ 179.603183][T10154] ? tun_rx_batched+0xc7/0x430 [ 179.603245][T10154] netif_receive_skb+0x4b/0x2e0 [ 179.603279][T10154] ? skb_header_pointer+0x54/0xb0 [ 179.603386][T10154] ? tun_rx_batched+0xc7/0x430 [ 179.603429][T10154] tun_rx_batched+0xfc/0x430 [ 179.603475][T10154] tun_get_user+0x1eb6/0x2680 [ 179.603576][T10154] ? ref_tracker_alloc+0x1f2/0x2f0 [ 179.603635][T10154] tun_chr_write_iter+0x15e/0x210 [ 179.603680][T10154] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 179.603724][T10154] vfs_write+0x4a0/0x8e0 [ 179.603777][T10154] ksys_write+0xda/0x1a0 [ 179.603814][T10154] __x64_sys_write+0x40/0x50 [ 179.603851][T10154] x64_sys_call+0x27fe/0x2ff0 [ 179.603930][T10154] do_syscall_64+0xd2/0x200 [ 179.603967][T10154] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 179.604056][T10154] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 179.604091][T10154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.604127][T10154] RIP: 0033:0x7f2a13f7d61f [ 179.604226][T10154] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 179.604255][T10154] RSP: 002b:00007f2a125a5000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 179.604285][T10154] RAX: ffffffffffffffda RBX: 00007f2a141a6160 RCX: 00007f2a13f7d61f [ 179.604305][T10154] RDX: 00000000000000a6 RSI: 0000200000000840 RDI: 00000000000000c8 [ 179.604325][T10154] RBP: 00007f2a125a5090 R08: 0000000000000000 R09: 0000000000000000 [ 179.604352][T10154] R10: 00000000000000a6 R11: 0000000000000293 R12: 0000000000000001 [ 179.604372][T10154] R13: 0000000000000001 R14: 00007f2a141a6160 R15: 00007ffdfa412168 [ 179.604483][T10154] [ 179.629020][T10158] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2072'. [ 179.640919][T10156] msdos: Unknown parameter '' [ 179.645460][T10158] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2072'. [ 179.667210][T10160] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2073'. [ 180.015119][T10149] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.035491][T10161] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2073'. [ 180.054270][T10165] netlink: 'syz.7.2074': attribute type 10 has an invalid length. [ 180.082140][T10149] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.133478][T10170] random: crng reseeded on system resumption [ 180.136694][T10165] team0: Port device dummy0 added [ 180.149407][T10025] veth1_macvtap: entered promiscuous mode [ 180.152933][T10170] Unrecognized hibernate image header format! [ 180.162641][T10170] PM: hibernation: Image mismatch: architecture specific data [ 180.175170][T10149] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.187939][T10165] netlink: 'syz.7.2074': attribute type 10 has an invalid length. [ 180.202336][T10025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.233491][T10165] team0: Port device dummy0 removed [ 180.249689][T10165] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 180.266539][T10181] loop2: detected capacity change from 0 to 1024 [ 180.278616][T10181] EXT4-fs: Ignoring removed nobh option [ 180.286479][T10181] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 180.299433][T10149] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.303162][T10181] EXT4-fs error (device loop2): ext4_ext_check_inode:523: inode #11: comm syz.2.2080: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 180.342220][T10181] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2080: couldn't read orphan inode 11 (err -117) [ 180.350978][T10025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.369803][ T295] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.372996][T10181] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.2080: Invalid block bitmap block 0 in block_group 0 [ 180.380746][ T295] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.401843][T10181] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2080: Failed to acquire dquot type 0 [ 180.416628][ T295] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.436239][ T295] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.461835][ T295] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.483786][ T295] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.496748][ T295] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.516892][ T295] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.533731][ T29] kauditd_printk_skb: 256 callbacks suppressed [ 180.533769][ T29] audit: type=1400 audit(1754081373.888:6620): avc: denied { bind } for pid=10185 comm="syz.2.2081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 180.603265][T10200] FAULT_INJECTION: forcing a failure. [ 180.603265][T10200] name failslab, interval 1, probability 0, space 0, times 0 [ 180.616921][T10200] CPU: 1 UID: 0 PID: 10200 Comm: syz.8.2083 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 180.616973][T10200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 180.616991][T10200] Call Trace: [ 180.616999][T10200] [ 180.617019][T10200] __dump_stack+0x1d/0x30 [ 180.617050][T10200] dump_stack_lvl+0xe8/0x140 [ 180.617076][T10200] dump_stack+0x15/0x1b [ 180.617098][T10200] should_fail_ex+0x265/0x280 [ 180.617203][T10200] should_failslab+0x8c/0xb0 [ 180.617236][T10200] kmem_cache_alloc_node_noprof+0x57/0x320 [ 180.617334][T10200] ? __alloc_skb+0x101/0x320 [ 180.617373][T10200] __alloc_skb+0x101/0x320 [ 180.617415][T10200] _sctp_make_chunk+0x59/0x210 [ 180.617453][T10200] sctp_make_abort_user+0x4c/0x3a0 [ 180.617504][T10200] ? sctp_epaddr_lookup_transport+0x9e/0x130 [ 180.617559][T10200] sctp_sendmsg_check_sflags+0x17e/0x1e0 [ 180.617591][T10200] sctp_sendmsg+0x75f/0x18d0 [ 180.617697][T10200] ? __pfx_sctp_sendmsg+0x10/0x10 [ 180.617798][T10200] inet_sendmsg+0xc5/0xd0 [ 180.617890][T10200] __sock_sendmsg+0x102/0x180 [ 180.617926][T10200] ____sys_sendmsg+0x345/0x4e0 [ 180.618016][T10200] ___sys_sendmsg+0x17b/0x1d0 [ 180.618081][T10200] __sys_sendmmsg+0x178/0x300 [ 180.618140][T10200] __x64_sys_sendmmsg+0x57/0x70 [ 180.618229][T10200] x64_sys_call+0x1c4a/0x2ff0 [ 180.618259][T10200] do_syscall_64+0xd2/0x200 [ 180.618290][T10200] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 180.618323][T10200] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 180.618353][T10200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.618408][T10200] RIP: 0033:0x7f43b457eb69 [ 180.618430][T10200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.618457][T10200] RSP: 002b:00007f43b2be7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 180.618482][T10200] RAX: ffffffffffffffda RBX: 00007f43b47a5fa0 RCX: 00007f43b457eb69 [ 180.618499][T10200] RDX: 0000000000000001 RSI: 00002000000032c0 RDI: 0000000000000006 [ 180.618514][T10200] RBP: 00007f43b2be7090 R08: 0000000000000000 R09: 0000000000000000 [ 180.618530][T10200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.618594][T10200] R13: 0000000000000000 R14: 00007f43b47a5fa0 R15: 00007ffe0c512f18 [ 180.618623][T10200] [ 180.860256][ T29] audit: type=1326 audit(1754081373.978:6621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10185 comm="syz.2.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a13f7eb69 code=0x7ffc0000 [ 180.886234][ T29] audit: type=1326 audit(1754081373.988:6622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10185 comm="syz.2.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a13f7eb69 code=0x7ffc0000 [ 180.926987][ T29] audit: type=1326 audit(1754081374.278:6623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10185 comm="syz.2.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a13f7eb69 code=0x7ffc0000 [ 180.951089][ T29] audit: type=1326 audit(1754081374.278:6624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10185 comm="syz.2.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a13f7eb69 code=0x7ffc0000 [ 180.989132][ T29] audit: type=1326 audit(1754081374.278:6625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10185 comm="syz.2.2081" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a13f7eb69 code=0x7ffc0000 [ 181.053640][T10205] loop8: detected capacity change from 0 to 4096 [ 181.071800][ T29] audit: type=1400 audit(1754081374.428:6626): avc: denied { unlink } for pid=8192 comm="syz-executor" name="file7" dev="tmpfs" ino=517 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 181.098418][ T29] audit: type=1400 audit(1754081374.448:6627): avc: denied { sqpoll } for pid=10206 comm="syz.2.2085" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 181.106476][T10205] netlink: 'syz.8.2084': attribute type 11 has an invalid length. [ 181.178205][T10215] loop2: detected capacity change from 0 to 1024 [ 181.200601][T10213] FAULT_INJECTION: forcing a failure. [ 181.200601][T10213] name failslab, interval 1, probability 0, space 0, times 0 [ 181.209253][ T29] audit: type=1326 audit(1754081374.548:6628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10211 comm="syz.6.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a801eb69 code=0x7ffc0000 [ 181.217333][T10213] CPU: 1 UID: 0 PID: 10213 Comm: syz.6.2087 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 181.217379][T10213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 181.217398][T10213] Call Trace: [ 181.217409][T10213] [ 181.217449][T10213] __dump_stack+0x1d/0x30 [ 181.217488][T10213] dump_stack_lvl+0xe8/0x140 [ 181.217525][T10213] dump_stack+0x15/0x1b [ 181.217550][T10213] should_fail_ex+0x265/0x280 [ 181.217642][T10213] should_failslab+0x8c/0xb0 [ 181.217688][T10213] kmem_cache_alloc_noprof+0x50/0x310 [ 181.217732][T10213] ? security_inode_alloc+0x37/0x100 [ 181.217771][T10213] security_inode_alloc+0x37/0x100 [ 181.217804][T10213] inode_init_always_gfp+0x4b7/0x500 [ 181.217861][T10213] ? __pfx_shmem_alloc_inode+0x10/0x10 [ 181.217893][T10213] alloc_inode+0x58/0x170 [ 181.217923][T10213] new_inode+0x1d/0xe0 [ 181.217958][T10213] shmem_get_inode+0x244/0x750 [ 181.218043][T10213] __shmem_file_setup+0x113/0x210 [ 181.218092][T10213] shmem_file_setup+0x3b/0x50 [ 181.218173][T10213] __se_sys_memfd_create+0x2c3/0x590 [ 181.218209][T10213] __x64_sys_memfd_create+0x31/0x40 [ 181.218239][T10213] x64_sys_call+0x2abe/0x2ff0 [ 181.218271][T10213] do_syscall_64+0xd2/0x200 [ 181.218372][T10213] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 181.218406][T10213] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 181.218455][T10213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.218486][T10213] RIP: 0033:0x7fc9a801eb69 [ 181.218519][T10213] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.218545][T10213] RSP: 002b:00007fc9a667ee18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 181.218574][T10213] RAX: ffffffffffffffda RBX: 0000000000000464 RCX: 00007fc9a801eb69 [ 181.218592][T10213] RDX: 00007fc9a667eef0 RSI: 0000000000000000 RDI: 00007fc9a80a2784 [ 181.218611][T10213] RBP: 0000200000000f40 R08: 00007fc9a667ebb7 R09: 00007fc9a667ee40 [ 181.218673][T10213] R10: 000000000000000a R11: 0000000000000202 R12: 00002000000000c0 [ 181.218691][T10213] R13: 00007fc9a667eef0 R14: 00007fc9a667eeb0 R15: 0000200000000000 [ 181.218719][T10213] [ 181.268029][T10221] loop8: detected capacity change from 0 to 128 [ 181.275398][ T29] audit: type=1326 audit(1754081374.548:6629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10211 comm="syz.6.2087" exe="/root/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fc9a801eb69 code=0x7ffc0000 [ 181.283022][T10215] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0003] [ 181.373195][T10218] loop4: detected capacity change from 0 to 8192 [ 181.385381][T10215] System zones: [ 181.391639][T10224] __nla_validate_parse: 2 callbacks suppressed [ 181.391666][T10224] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2088'. [ 181.395878][T10215] 0-1 [ 181.411603][T10221] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 181.415421][T10215] , 3-36 [ 181.713194][T10236] pim6reg1: entered promiscuous mode [ 181.719204][T10236] pim6reg1: entered allmulticast mode [ 181.802428][T10248] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2099'. [ 181.817323][T10239] lo speed is unknown, defaulting to 1000 [ 181.818046][T10248] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2099'. [ 181.828770][T10239] lo speed is unknown, defaulting to 1000 [ 181.866579][T10250] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2100'. [ 181.893944][T10251] loop8: detected capacity change from 0 to 128 [ 182.221949][ T9937] 0: reclassify loop, rule prio 0, protocol 800 [ 182.243333][T10264] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 182.255470][T10264] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2104'. [ 182.295114][T10268] loop4: detected capacity change from 0 to 128 [ 182.328877][T10270] loop2: detected capacity change from 0 to 1024 [ 182.338991][T10270] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0003] [ 182.348212][T10270] System zones: 0-1, 3-36 [ 182.357819][T10272] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2108'. [ 182.358089][T10275] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2108'. [ 182.397234][T10278] FAULT_INJECTION: forcing a failure. [ 182.397234][T10278] name failslab, interval 1, probability 0, space 0, times 0 [ 182.410137][T10278] CPU: 1 UID: 0 PID: 10278 Comm: syz.4.2109 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 182.410174][T10278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 182.410190][T10278] Call Trace: [ 182.410199][T10278] [ 182.410277][T10278] __dump_stack+0x1d/0x30 [ 182.410312][T10278] dump_stack_lvl+0xe8/0x140 [ 182.410415][T10278] dump_stack+0x15/0x1b [ 182.410434][T10278] should_fail_ex+0x265/0x280 [ 182.410478][T10278] ? audit_log_d_path+0x8d/0x150 [ 182.410519][T10278] should_failslab+0x8c/0xb0 [ 182.410610][T10278] __kmalloc_cache_noprof+0x4c/0x320 [ 182.410722][T10278] audit_log_d_path+0x8d/0x150 [ 182.410764][T10278] audit_log_d_path_exe+0x42/0x70 [ 182.410810][T10278] audit_log_task+0x1e9/0x250 [ 182.410851][T10278] audit_seccomp+0x61/0x100 [ 182.410923][T10278] ? __seccomp_filter+0x68c/0x10d0 [ 182.410947][T10278] __seccomp_filter+0x69d/0x10d0 [ 182.411004][T10278] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 182.411040][T10278] ? vfs_write+0x75e/0x8e0 [ 182.411198][T10278] __secure_computing+0x82/0x150 [ 182.411226][T10278] syscall_trace_enter+0xcf/0x1e0 [ 182.411297][T10278] do_syscall_64+0xac/0x200 [ 182.411323][T10278] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 182.411433][T10278] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 182.411457][T10278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.411512][T10278] RIP: 0033:0x7fbf529aeb69 [ 182.411531][T10278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.411556][T10278] RSP: 002b:00007fbf5100f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 182.411581][T10278] RAX: ffffffffffffffda RBX: 00007fbf52bd5fa0 RCX: 00007fbf529aeb69 [ 182.411643][T10278] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 182.411716][T10278] RBP: 00007fbf5100f090 R08: 0000000000000000 R09: 0000000000000000 [ 182.411728][T10278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.411740][T10278] R13: 0000000000000000 R14: 00007fbf52bd5fa0 R15: 00007ffff93b7388 [ 182.411836][T10278] [ 182.703614][T10290] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2115'. [ 182.712769][T10290] tipc: Started in network mode [ 182.717727][T10290] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 182.724934][T10290] tipc: Enabled bearer , priority 10 [ 182.748329][T10293] loop2: detected capacity change from 0 to 128 [ 182.756140][T10291] netlink: 14 bytes leftover after parsing attributes in process `syz.7.2115'. [ 182.778299][T10291] tipc: Resetting bearer [ 182.803205][T10291] tipc: Disabling bearer [ 182.866940][T10300] 0: reclassify loop, rule prio 0, protocol 800 [ 182.874516][T10300] 0: reclassify loop, rule prio 0, protocol 800 [ 182.881113][T10300] 0: reclassify loop, rule prio 0, protocol 800 [ 182.887631][T10300] 0: reclassify loop, rule prio 0, protocol 800 [ 182.894640][T10300] 0: reclassify loop, rule prio 0, protocol 800 [ 182.901488][T10300] 0: reclassify loop, rule prio 0, protocol 800 [ 182.908235][T10300] 0: reclassify loop, rule prio 0, protocol 800 [ 182.915582][T10300] 0: reclassify loop, rule prio 0, protocol 800 [ 183.022703][T10305] bond1: entered promiscuous mode [ 183.027820][T10305] bond1: entered allmulticast mode [ 183.033453][T10305] 8021q: adding VLAN 0 to HW filter on device bond1 [ 183.044697][T10305] bond1 (unregistering): Released all slaves [ 183.089961][T10303] 9pnet: Could not find request transport: 0xffffffffffffffff [ 183.185032][T10314] loop7: detected capacity change from 0 to 128 [ 183.206707][T10314] FAULT_INJECTION: forcing a failure. [ 183.206707][T10314] name failslab, interval 1, probability 0, space 0, times 0 [ 183.219674][T10314] CPU: 1 UID: 0 PID: 10314 Comm: syz.7.2123 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 183.219715][T10314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 183.219813][T10314] Call Trace: [ 183.219820][T10314] [ 183.219869][T10314] __dump_stack+0x1d/0x30 [ 183.219900][T10314] dump_stack_lvl+0xe8/0x140 [ 183.219921][T10314] dump_stack+0x15/0x1b [ 183.219937][T10314] should_fail_ex+0x265/0x280 [ 183.220042][T10314] should_failslab+0x8c/0xb0 [ 183.220076][T10314] __kmalloc_noprof+0xa5/0x3e0 [ 183.220124][T10314] ? kobject_get_path+0x92/0x1c0 [ 183.220180][T10314] kobject_get_path+0x92/0x1c0 [ 183.220217][T10314] kobject_uevent_env+0x1da/0x570 [ 183.220269][T10314] ? device_pm_check_callbacks+0x683/0x6a0 [ 183.220312][T10314] kobject_uevent+0x1d/0x30 [ 183.220356][T10314] device_del+0x710/0x790 [ 183.220469][T10314] device_unregister+0x15/0x40 [ 183.220496][T10314] bdi_unregister+0x307/0x3a0 [ 183.220531][T10314] __del_gendisk+0x2c3/0x570 [ 183.220632][T10314] del_gendisk+0xac/0xf0 [ 183.220662][T10314] loop_remove+0x26/0x80 [ 183.220699][T10314] loop_control_ioctl+0x3b3/0x3f0 [ 183.220764][T10314] ? __pfx_loop_control_ioctl+0x10/0x10 [ 183.220869][T10314] __se_sys_ioctl+0xce/0x140 [ 183.220918][T10314] __x64_sys_ioctl+0x43/0x50 [ 183.221039][T10314] x64_sys_call+0x1816/0x2ff0 [ 183.221062][T10314] do_syscall_64+0xd2/0x200 [ 183.221086][T10314] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 183.221126][T10314] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 183.221179][T10314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.221209][T10314] RIP: 0033:0x7f66ca02eb69 [ 183.221226][T10314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.221251][T10314] RSP: 002b:00007f66c868f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 183.221277][T10314] RAX: ffffffffffffffda RBX: 00007f66ca255fa0 RCX: 00007f66ca02eb69 [ 183.221294][T10314] RDX: 0000000000000002 RSI: 0000000000004c81 RDI: 0000000000000008 [ 183.221341][T10314] RBP: 00007f66c868f090 R08: 0000000000000000 R09: 0000000000000000 [ 183.221358][T10314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.221375][T10314] R13: 0000000000000000 R14: 00007f66ca255fa0 R15: 00007ffd6c87fe18 [ 183.221421][T10314] [ 183.584901][T10284] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2112'. [ 183.672558][T10328] hub 9-0:1.0: USB hub found [ 183.677433][T10328] hub 9-0:1.0: 8 ports detected [ 183.722471][T10333] loop7: detected capacity change from 0 to 1024 [ 183.730044][T10333] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 183.740686][T10333] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 183.751017][T10333] EXT4-fs (loop7): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 183.763585][T10333] EXT4-fs error (device loop7): ext4_get_journal_inode:5796: inode #5: comm syz.7.2126: unexpected bad inode w/o EXT4_IGET_BAD [ 183.783156][T10333] EXT4-fs (loop7): no journal found [ 183.788468][T10333] EXT4-fs (loop7): can't get journal size [ 183.794654][T10336] loop4: detected capacity change from 0 to 512 [ 183.801395][T10333] EXT4-fs error (device loop7): __ext4_remount:6736: comm syz.7.2126: Abort forced by user [ 183.812477][T10333] EXT4-fs (loop7): Remounting filesystem read-only [ 183.819059][T10333] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 183.827797][T10336] EXT4-fs error (device loop4): ext4_xattr_inode_iget:433: comm syz.4.2132: Parent and EA inode have the same ino 15 [ 183.829135][T10336] EXT4-fs (loop4): Remounting filesystem read-only [ 183.854081][T10336] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -30) [ 183.865558][T10336] EXT4-fs (loop4): 1 orphan inode deleted [ 183.880624][T10336] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 183.888873][T10341] loop8: detected capacity change from 0 to 1024 [ 183.898226][T10341] EXT4-fs: Ignoring removed nobh option [ 183.905174][T10341] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 183.917376][T10341] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #11: comm syz.8.2133: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 183.936610][T10341] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.2133: couldn't read orphan inode 11 (err -117) [ 183.954739][T10341] EXT4-fs error (device loop8): ext4_read_block_bitmap_nowait:483: comm syz.8.2133: Invalid block bitmap block 0 in block_group 0 [ 183.972203][T10341] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.2133: Failed to acquire dquot type 0 [ 184.245817][T10354] loop8: detected capacity change from 0 to 8192 [ 184.398569][T10364] loop8: detected capacity change from 0 to 512 [ 184.405725][T10364] EXT4-fs: Ignoring removed orlov option [ 184.412447][T10364] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 184.422308][T10364] EXT4-fs (loop8): orphan cleanup on readonly fs [ 184.429359][T10364] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2142: bg 0: block 248: padding at end of block bitmap is not set [ 184.447314][T10364] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.2142: Failed to acquire dquot type 1 [ 184.468318][T10364] EXT4-fs (loop8): 1 truncate cleaned up [ 184.481945][T10364] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 184.502752][T10364] EXT4-fs error (device loop8): __ext4_remount:6736: comm syz.8.2142: Abort forced by user [ 184.521376][T10364] EXT4-fs (loop8): Remounting filesystem read-only [ 184.527992][T10364] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 184.544424][T10364] ext4 filesystem being remounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 184.557988][T10364] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 184.615024][T10377] loop8: detected capacity change from 0 to 1024 [ 184.733652][T10394] FAULT_INJECTION: forcing a failure. [ 184.733652][T10394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.746986][T10394] CPU: 1 UID: 0 PID: 10394 Comm: syz.8.2152 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 184.747025][T10394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 184.747042][T10394] Call Trace: [ 184.747050][T10394] [ 184.747059][T10394] __dump_stack+0x1d/0x30 [ 184.747120][T10394] dump_stack_lvl+0xe8/0x140 [ 184.747147][T10394] dump_stack+0x15/0x1b [ 184.747170][T10394] should_fail_ex+0x265/0x280 [ 184.747286][T10394] should_fail+0xb/0x20 [ 184.747324][T10394] should_fail_usercopy+0x1a/0x20 [ 184.747350][T10394] _copy_from_user+0x1c/0xb0 [ 184.747398][T10394] __se_sys_mount+0x10d/0x2e0 [ 184.747429][T10394] ? fput+0x8f/0xc0 [ 184.747470][T10394] ? ksys_write+0x192/0x1a0 [ 184.747517][T10394] __x64_sys_mount+0x67/0x80 [ 184.747584][T10394] x64_sys_call+0x2b4d/0x2ff0 [ 184.747614][T10394] do_syscall_64+0xd2/0x200 [ 184.747722][T10394] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 184.747753][T10394] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 184.747782][T10394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.747847][T10394] RIP: 0033:0x7f43b457eb69 [ 184.747869][T10394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.747894][T10394] RSP: 002b:00007f43b2be7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 184.747919][T10394] RAX: ffffffffffffffda RBX: 00007f43b47a5fa0 RCX: 00007f43b457eb69 [ 184.747944][T10394] RDX: 00002000000006c0 RSI: 0000200000000380 RDI: 0000000000000000 [ 184.747961][T10394] RBP: 00007f43b2be7090 R08: 0000200000000080 R09: 0000000000000000 [ 184.748049][T10394] R10: 0000000000008010 R11: 0000000000000246 R12: 0000000000000001 [ 184.748064][T10394] R13: 0000000000000000 R14: 00007f43b47a5fa0 R15: 00007ffe0c512f18 [ 184.748090][T10394] [ 185.045283][T10398] hsr_slave_1 (unregistering): left promiscuous mode [ 185.185827][T10405] loop8: detected capacity change from 0 to 1024 [ 185.206925][T10405] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0003] [ 185.223969][T10405] System zones: 0-1, 3-36 [ 185.296472][T10412] netlink: 'syz.6.2160': attribute type 1 has an invalid length. [ 185.315547][T10412] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.335514][T10412] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.346706][T10412] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 185.360076][T10412] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 185.507030][T10429] FAULT_INJECTION: forcing a failure. [ 185.507030][T10429] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 185.520264][T10429] CPU: 1 UID: 0 PID: 10429 Comm: syz.8.2166 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 185.520298][T10429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 185.520372][T10429] Call Trace: [ 185.520380][T10429] [ 185.520390][T10429] __dump_stack+0x1d/0x30 [ 185.520421][T10429] dump_stack_lvl+0xe8/0x140 [ 185.520446][T10429] dump_stack+0x15/0x1b [ 185.520465][T10429] should_fail_ex+0x265/0x280 [ 185.520535][T10429] should_fail+0xb/0x20 [ 185.520573][T10429] should_fail_usercopy+0x1a/0x20 [ 185.520606][T10429] _copy_from_iter+0xcf/0xe40 [ 185.520638][T10429] ? __build_skb_around+0x1a0/0x200 [ 185.520672][T10429] ? __alloc_skb+0x223/0x320 [ 185.520726][T10429] netlink_sendmsg+0x471/0x6b0 [ 185.520839][T10429] ? __pfx_netlink_sendmsg+0x10/0x10 [ 185.520875][T10429] __sock_sendmsg+0x142/0x180 [ 185.520926][T10429] ____sys_sendmsg+0x31e/0x4e0 [ 185.521036][T10429] ___sys_sendmsg+0x17b/0x1d0 [ 185.521104][T10429] __x64_sys_sendmsg+0xd4/0x160 [ 185.521214][T10429] x64_sys_call+0x191e/0x2ff0 [ 185.521239][T10429] do_syscall_64+0xd2/0x200 [ 185.521268][T10429] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 185.521303][T10429] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 185.521392][T10429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.521424][T10429] RIP: 0033:0x7f43b457eb69 [ 185.521447][T10429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.521496][T10429] RSP: 002b:00007f43b2be7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 185.521528][T10429] RAX: ffffffffffffffda RBX: 00007f43b47a5fa0 RCX: 00007f43b457eb69 [ 185.521551][T10429] RDX: 0000000020000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 185.521569][T10429] RBP: 00007f43b2be7090 R08: 0000000000000000 R09: 0000000000000000 [ 185.521585][T10429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.521598][T10429] R13: 0000000000000000 R14: 00007f43b47a5fa0 R15: 00007ffe0c512f18 [ 185.521619][T10429] [ 185.794751][ T29] kauditd_printk_skb: 300 callbacks suppressed [ 185.794772][ T29] audit: type=1400 audit(1754081379.148:6926): avc: denied { read write } for pid=10435 comm="syz.8.2169" name="virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 185.854629][T10443] program syz.7.2171 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.855544][ T29] audit: type=1400 audit(1754081379.148:6927): avc: denied { open } for pid=10435 comm="syz.8.2169" path="/dev/virtual_nci" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 185.889441][ T29] audit: type=1400 audit(1754081379.198:6928): avc: denied { ioctl } for pid=10435 comm="syz.8.2169" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 186.026509][T10449] FAULT_INJECTION: forcing a failure. [ 186.026509][T10449] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.040024][T10449] CPU: 0 UID: 0 PID: 10449 Comm: syz.7.2173 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 186.040063][T10449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 186.040079][T10449] Call Trace: [ 186.040095][T10449] [ 186.040107][T10449] __dump_stack+0x1d/0x30 [ 186.040208][T10449] dump_stack_lvl+0xe8/0x140 [ 186.040232][T10449] dump_stack+0x15/0x1b [ 186.040254][T10449] should_fail_ex+0x265/0x280 [ 186.040344][T10449] should_fail+0xb/0x20 [ 186.040381][T10449] should_fail_usercopy+0x1a/0x20 [ 186.040406][T10449] _copy_from_user+0x1c/0xb0 [ 186.040440][T10449] ___sys_sendmsg+0xc1/0x1d0 [ 186.040516][T10449] __x64_sys_sendmsg+0xd4/0x160 [ 186.040621][T10449] x64_sys_call+0x191e/0x2ff0 [ 186.040650][T10449] do_syscall_64+0xd2/0x200 [ 186.040699][T10449] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 186.040749][T10449] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 186.040777][T10449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.040807][T10449] RIP: 0033:0x7f66ca02eb69 [ 186.040830][T10449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.040859][T10449] RSP: 002b:00007f66c868f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 186.040909][T10449] RAX: ffffffffffffffda RBX: 00007f66ca255fa0 RCX: 00007f66ca02eb69 [ 186.040981][T10449] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000006 [ 186.040994][T10449] RBP: 00007f66c868f090 R08: 0000000000000000 R09: 0000000000000000 [ 186.041006][T10449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.041019][T10449] R13: 0000000000000000 R14: 00007f66ca255fa0 R15: 00007ffd6c87fe18 [ 186.041043][T10449] [ 186.256483][T10453] loop7: detected capacity change from 0 to 1024 [ 186.284931][T10451] tipc: Enabling of bearer rejected, failed to enable media [ 186.300890][T10453] EXT4-fs: Ignoring removed bh option [ 186.322636][T10453] EXT4-fs: inline encryption not supported [ 186.333880][T10458] FAULT_INJECTION: forcing a failure. [ 186.333880][T10458] name failslab, interval 1, probability 0, space 0, times 0 [ 186.345533][T10453] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 186.346749][T10458] CPU: 1 UID: 0 PID: 10458 Comm: syz.2.2177 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 186.346793][T10458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 186.346814][T10458] Call Trace: [ 186.346824][T10458] [ 186.346840][T10458] __dump_stack+0x1d/0x30 [ 186.346918][T10458] dump_stack_lvl+0xe8/0x140 [ 186.346948][T10458] dump_stack+0x15/0x1b [ 186.346974][T10458] should_fail_ex+0x265/0x280 [ 186.347025][T10458] ? alloc_mnt_ns+0x72/0x270 [ 186.347127][T10458] should_failslab+0x8c/0xb0 [ 186.347166][T10458] __kmalloc_cache_noprof+0x4c/0x320 [ 186.347285][T10458] ? inc_ucount+0xcb/0x140 [ 186.347368][T10458] alloc_mnt_ns+0x72/0x270 [ 186.347401][T10458] copy_mnt_ns+0xa5/0x5c0 [ 186.347472][T10458] ? kmem_cache_alloc_noprof+0x220/0x310 [ 186.347514][T10458] ? create_new_namespaces+0x3c/0x3d0 [ 186.347564][T10458] create_new_namespaces+0x83/0x3d0 [ 186.347689][T10458] unshare_nsproxy_namespaces+0xe8/0x120 [ 186.347740][T10458] ksys_unshare+0x3d0/0x6d0 [ 186.347783][T10458] ? ksys_write+0x192/0x1a0 [ 186.347810][T10458] __x64_sys_unshare+0x1f/0x30 [ 186.347841][T10458] x64_sys_call+0x2911/0x2ff0 [ 186.347979][T10458] do_syscall_64+0xd2/0x200 [ 186.348022][T10458] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 186.348066][T10458] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 186.348178][T10458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.348279][T10458] RIP: 0033:0x7f2a13f7eb69 [ 186.348303][T10458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.348341][T10458] RSP: 002b:00007f2a125e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 186.348370][T10458] RAX: ffffffffffffffda RBX: 00007f2a141a5fa0 RCX: 00007f2a13f7eb69 [ 186.348388][T10458] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400 [ 186.348407][T10458] RBP: 00007f2a125e7090 R08: 0000000000000000 R09: 0000000000000000 [ 186.348506][T10458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 186.348524][T10458] R13: 0000000000000000 R14: 00007f2a141a5fa0 R15: 00007ffdfa412168 [ 186.348553][T10458] [ 186.593126][T10453] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.2175: lblock 2 mapped to illegal pblock 2 (length 1) [ 186.607884][T10453] Quota error (device loop7): qtree_write_dquot: dquota write failed [ 186.616413][T10453] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.2175: lblock 0 mapped to illegal pblock 48 (length 1) [ 186.631022][T10453] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 186.640062][T10453] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.2175: Failed to acquire dquot type 0 [ 186.651521][T10462] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(9) [ 186.658112][T10462] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 186.665926][T10462] vhci_hcd vhci_hcd.0: Device attached [ 186.678445][T10453] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 186.699539][T10453] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.2175: mark_inode_dirty error [ 186.754040][T10472] __nla_validate_parse: 3 callbacks suppressed [ 186.754091][T10472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2180'. [ 186.867930][T10453] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 186.885232][T10453] EXT4-fs (loop7): 1 orphan inode deleted [ 186.901632][ T295] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 186.932111][ T295] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 186.940682][ T295] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 0 [ 186.952915][ T3395] usb 18-1: SetAddress Request (2) to port 0 [ 186.959455][ T3395] usb 18-1: new SuperSpeed USB device number 2 using vhci_hcd [ 187.047811][ T29] audit: type=1326 audit(1754081380.398:6929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10479 comm="syz.2.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a13f7eb69 code=0x7ffc0000 [ 187.102379][ T29] audit: type=1326 audit(1754081380.398:6930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10479 comm="syz.2.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a13f7eb69 code=0x7ffc0000 [ 187.127113][ T29] audit: type=1326 audit(1754081380.398:6931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10479 comm="syz.2.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2a13f7eb69 code=0x7ffc0000 [ 187.152296][ T29] audit: type=1326 audit(1754081380.398:6932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10479 comm="syz.2.2182" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2a13f7eb69 code=0x7ffc0000 [ 187.179110][ T8192] EXT4-fs error (device loop7): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 187.234318][ T8192] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 187.264716][ T8192] EXT4-fs error (device loop7): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error [ 187.322632][T10468] vhci_hcd: connection reset by peer [ 187.325161][T10483] hub 6-0:1.0: USB hub found [ 187.336359][ T295] vhci_hcd: stop threads [ 187.340905][ T295] vhci_hcd: release socket [ 187.345422][ T295] vhci_hcd: disconnect device [ 187.356509][T10483] hub 6-0:1.0: 8 ports detected [ 187.452149][T10495] loop6: detected capacity change from 0 to 512 [ 187.484652][T10495] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 187.500312][T10495] EXT4-fs (loop6): orphan cleanup on readonly fs [ 187.518766][T10495] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.2186: corrupted inode contents [ 187.542607][T10495] EXT4-fs (loop6): Remounting filesystem read-only [ 187.554619][T10495] EXT4-fs (loop6): 1 truncate cleaned up [ 187.562270][ T56] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 187.573028][ T56] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 187.722381][ T56] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 187.769369][T10501] loop4: detected capacity change from 0 to 512 [ 187.784116][T10501] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 187.793497][T10501] EXT4-fs (loop4): orphan cleanup on readonly fs [ 187.829950][T10501] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.2188: corrupted inode contents [ 187.865464][T10501] EXT4-fs (loop4): Remounting filesystem read-only [ 187.925639][T10501] EXT4-fs (loop4): 1 truncate cleaned up [ 187.933297][ T56] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 187.944092][ T56] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 187.982931][ T295] net_ratelimit: 35 callbacks suppressed [ 187.982955][ T295] 0: reclassify loop, rule prio 0, protocol 800 [ 187.996864][ T56] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started [ 188.055957][T10518] netlink: 'syz.6.2195': attribute type 10 has an invalid length. [ 188.065784][T10518] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2195'. [ 188.092298][T10518] netlink: 'syz.6.2195': attribute type 3 has an invalid length. [ 188.404094][T10545] FAULT_INJECTION: forcing a failure. [ 188.404094][T10545] name failslab, interval 1, probability 0, space 0, times 0 [ 188.417049][T10545] CPU: 0 UID: 0 PID: 10545 Comm: syz.7.2205 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 188.417085][T10545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 188.417099][T10545] Call Trace: [ 188.417105][T10545] [ 188.417116][T10545] __dump_stack+0x1d/0x30 [ 188.417220][T10545] dump_stack_lvl+0xe8/0x140 [ 188.417241][T10545] dump_stack+0x15/0x1b [ 188.417258][T10545] should_fail_ex+0x265/0x280 [ 188.417302][T10545] should_failslab+0x8c/0xb0 [ 188.417349][T10545] kmem_cache_alloc_noprof+0x50/0x310 [ 188.417425][T10545] ? alloc_vfsmnt+0x2d/0x300 [ 188.417480][T10545] alloc_vfsmnt+0x2d/0x300 [ 188.417564][T10545] clone_mnt+0x46/0x630 [ 188.417676][T10545] copy_tree+0x2cd/0x8c0 [ 188.417705][T10545] copy_mnt_ns+0x120/0x5c0 [ 188.417731][T10545] ? kmem_cache_alloc_noprof+0x220/0x310 [ 188.417840][T10545] ? create_new_namespaces+0x3c/0x3d0 [ 188.417954][T10545] create_new_namespaces+0x83/0x3d0 [ 188.417999][T10545] unshare_nsproxy_namespaces+0xe8/0x120 [ 188.418061][T10545] ksys_unshare+0x3d0/0x6d0 [ 188.418100][T10545] ? ksys_write+0x15f/0x1a0 [ 188.418133][T10545] __x64_sys_unshare+0x1f/0x30 [ 188.418216][T10545] x64_sys_call+0x2911/0x2ff0 [ 188.418264][T10545] do_syscall_64+0xd2/0x200 [ 188.418294][T10545] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 188.418329][T10545] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 188.418358][T10545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.418396][T10545] RIP: 0033:0x7f66ca02eb69 [ 188.418417][T10545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.418441][T10545] RSP: 002b:00007f66c868f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 188.418466][T10545] RAX: ffffffffffffffda RBX: 00007f66ca255fa0 RCX: 00007f66ca02eb69 [ 188.418483][T10545] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c020400 [ 188.418497][T10545] RBP: 00007f66c868f090 R08: 0000000000000000 R09: 0000000000000000 [ 188.418509][T10545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.418586][T10545] R13: 0000000000000000 R14: 00007f66ca255fa0 R15: 00007ffd6c87fe18 [ 188.418612][T10545] [ 188.639050][ T12] 0: reclassify loop, rule prio 0, protocol 800 [ 188.767881][T10557] FAULT_INJECTION: forcing a failure. [ 188.767881][T10557] name failslab, interval 1, probability 0, space 0, times 0 [ 188.780800][T10557] CPU: 1 UID: 0 PID: 10557 Comm: syz.8.2211 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 188.781015][T10557] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 188.781032][T10557] Call Trace: [ 188.781041][T10557] [ 188.781053][T10557] __dump_stack+0x1d/0x30 [ 188.781084][T10557] dump_stack_lvl+0xe8/0x140 [ 188.781111][T10557] dump_stack+0x15/0x1b [ 188.781202][T10557] should_fail_ex+0x265/0x280 [ 188.781247][T10557] should_failslab+0x8c/0xb0 [ 188.781275][T10557] kmem_cache_alloc_noprof+0x50/0x310 [ 188.781306][T10557] ? skb_clone+0x151/0x1f0 [ 188.781332][T10557] skb_clone+0x151/0x1f0 [ 188.781368][T10557] __netlink_deliver_tap+0x2c9/0x500 [ 188.781416][T10557] netlink_unicast+0x66b/0x690 [ 188.781456][T10557] netlink_sendmsg+0x58b/0x6b0 [ 188.781496][T10557] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.781608][T10557] __sock_sendmsg+0x142/0x180 [ 188.781652][T10557] ____sys_sendmsg+0x31e/0x4e0 [ 188.781698][T10557] ___sys_sendmsg+0x17b/0x1d0 [ 188.781795][T10557] __x64_sys_sendmsg+0xd4/0x160 [ 188.781843][T10557] x64_sys_call+0x191e/0x2ff0 [ 188.781959][T10557] do_syscall_64+0xd2/0x200 [ 188.781991][T10557] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 188.782023][T10557] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 188.782052][T10557] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.782112][T10557] RIP: 0033:0x7f43b457eb69 [ 188.782134][T10557] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.782228][T10557] RSP: 002b:00007f43b2be7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.782254][T10557] RAX: ffffffffffffffda RBX: 00007f43b47a5fa0 RCX: 00007f43b457eb69 [ 188.782270][T10557] RDX: 0000000000000000 RSI: 0000200000001540 RDI: 0000000000000003 [ 188.782286][T10557] RBP: 00007f43b2be7090 R08: 0000000000000000 R09: 0000000000000000 [ 188.782313][T10557] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.782328][T10557] R13: 0000000000000000 R14: 00007f43b47a5fa0 R15: 00007ffe0c512f18 [ 188.782388][T10557] [ 189.012907][T10557] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2211'. [ 189.260948][ T4992] 0: reclassify loop, rule prio 0, protocol 800 [ 189.475876][T10595] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2226'. [ 189.579143][T10601] lo speed is unknown, defaulting to 1000 [ 189.591875][T10601] lo speed is unknown, defaulting to 1000 [ 189.608535][T10607] SELinux: Context  is not valid (left unmapped). [ 189.616613][T10607] FAULT_INJECTION: forcing a failure. [ 189.616613][T10607] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.630028][T10607] CPU: 0 UID: 0 PID: 10607 Comm: syz.8.2232 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 189.630129][T10607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 189.630166][T10607] Call Trace: [ 189.630176][T10607] [ 189.630188][T10607] __dump_stack+0x1d/0x30 [ 189.630218][T10607] dump_stack_lvl+0xe8/0x140 [ 189.630243][T10607] dump_stack+0x15/0x1b [ 189.630260][T10607] should_fail_ex+0x265/0x280 [ 189.630315][T10607] should_fail+0xb/0x20 [ 189.630396][T10607] should_fail_usercopy+0x1a/0x20 [ 189.630416][T10607] _copy_to_user+0x20/0xa0 [ 189.630511][T10607] simple_read_from_buffer+0xb5/0x130 [ 189.630579][T10607] proc_fail_nth_read+0x10e/0x150 [ 189.630622][T10607] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 189.630659][T10607] vfs_read+0x1a0/0x6f0 [ 189.630682][T10607] ? __rcu_read_unlock+0x4f/0x70 [ 189.630712][T10607] ? __fget_files+0x184/0x1c0 [ 189.630749][T10607] ksys_read+0xda/0x1a0 [ 189.630795][T10607] __x64_sys_read+0x40/0x50 [ 189.630859][T10607] x64_sys_call+0x27bc/0x2ff0 [ 189.630886][T10607] do_syscall_64+0xd2/0x200 [ 189.630919][T10607] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 189.630948][T10607] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 189.630994][T10607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.631024][T10607] RIP: 0033:0x7f43b457d57c [ 189.631046][T10607] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 189.631071][T10607] RSP: 002b:00007f43b2be7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 189.631092][T10607] RAX: ffffffffffffffda RBX: 00007f43b47a5fa0 RCX: 00007f43b457d57c [ 189.631159][T10607] RDX: 000000000000000f RSI: 00007f43b2be70a0 RDI: 0000000000000005 [ 189.631175][T10607] RBP: 00007f43b2be7090 R08: 0000000000000000 R09: 0000000000000000 [ 189.631193][T10607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 189.631208][T10607] R13: 0000000000000000 R14: 00007f43b47a5fa0 R15: 00007ffe0c512f18 [ 189.631263][T10607] [ 189.900536][ T4992] 0: reclassify loop, rule prio 0, protocol 800 [ 189.909639][T10617] loop6: detected capacity change from 0 to 128 [ 189.931659][T10617] ext4 filesystem being mounted at /117/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 190.094835][T10628] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2240'. [ 190.157942][T10637] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65533 sclass=netlink_audit_socket pid=10637 comm=syz.8.2243 [ 190.183082][T10639] loop7: detected capacity change from 0 to 512 [ 190.248477][T10653] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2246'. [ 190.699697][ T3407] IPVS: starting estimator thread 0... [ 190.709476][T10670] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2253'. [ 190.788286][T10639] ================================================================== [ 190.796437][T10639] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 190.804270][T10639] [ 190.806591][T10639] write to 0xffffea000478f218 of 8 bytes by task 10630 on cpu 1: [ 190.814302][T10639] __filemap_remove_folio+0x1a5/0x2a0 [ 190.819707][T10639] folio_unmap_invalidate+0x1dd/0x360 [ 190.825102][T10639] invalidate_inode_pages2_range+0x27c/0x3d0 [ 190.831176][T10639] filemap_invalidate_pages+0x16d/0x1a0 [ 190.836729][T10639] kiocb_invalidate_pages+0x6e/0x80 [ 190.841934][T10639] __iomap_dio_rw+0x5d4/0x1250 [ 190.846713][T10639] iomap_dio_rw+0x40/0x90 [ 190.851049][T10639] ext4_file_write_iter+0xad9/0xf00 [ 190.856261][T10639] iter_file_splice_write+0x5ef/0x970 [ 190.861652][T10639] direct_splice_actor+0x153/0x2a0 [ 190.866773][T10639] splice_direct_to_actor+0x30f/0x680 [ 190.872168][T10639] do_splice_direct+0xda/0x150 [ 190.876949][T10639] do_sendfile+0x380/0x650 [ 190.881380][T10639] __x64_sys_sendfile64+0x105/0x150 [ 190.886681][T10639] x64_sys_call+0x2bb0/0x2ff0 [ 190.891376][T10639] do_syscall_64+0xd2/0x200 [ 190.895887][T10639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.901872][T10639] [ 190.904205][T10639] read to 0xffffea000478f218 of 8 bytes by task 10639 on cpu 0: [ 190.911856][T10639] folio_mapping+0xa1/0x120 [ 190.916373][T10639] lru_add+0x80/0x430 [ 190.920377][T10639] folio_batch_move_lru+0x177/0x230 [ 190.925590][T10639] lru_add_drain_cpu+0x77/0x250 [ 190.930892][T10639] __folio_batch_release+0x44/0xb0 [ 190.936012][T10639] filemap_splice_read+0x521/0x6b0 [ 190.941129][T10639] ext4_file_splice_read+0x8f/0xb0 [ 190.946799][T10639] splice_direct_to_actor+0x26f/0x680 [ 190.952175][T10639] do_splice_direct+0xda/0x150 [ 190.957119][T10639] do_sendfile+0x380/0x650 [ 190.961561][T10639] __x64_sys_sendfile64+0x105/0x150 [ 190.966783][T10639] x64_sys_call+0x2bb0/0x2ff0 [ 190.971491][T10639] do_syscall_64+0xd2/0x200 [ 190.976017][T10639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.981933][T10639] [ 190.984264][T10639] value changed: 0xffff888119454f88 -> 0x0000000000000000 [ 190.991368][T10639] [ 190.993689][T10639] Reported by Kernel Concurrency Sanitizer on: [ 190.999840][T10639] CPU: 0 UID: 0 PID: 10639 Comm: syz.7.2241 Not tainted 6.16.0-syzkaller-10355-gf2d282e1dfb3 #0 PREEMPT(voluntary) [ 191.012254][T10639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 191.022489][T10639] ================================================================== [ 191.031220][T10671] IPVS: using max 2304 ests per chain, 115200 per kthread [ 191.222452][T10677] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2254'. [ 191.247257][ T29] kauditd_printk_skb: 247 callbacks suppressed [ 191.247279][ T29] audit: type=1326 audit(1754081384.598:7168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10673 comm="syz.6.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a801eb69 code=0x7ffc0000 [ 191.312804][ T29] audit: type=1326 audit(1754081384.638:7169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10673 comm="syz.6.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fc9a801eb69 code=0x7ffc0000 [ 191.336387][ T29] audit: type=1326 audit(1754081384.638:7170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10673 comm="syz.6.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a801eb69 code=0x7ffc0000 [ 191.359961][ T29] audit: type=1326 audit(1754081384.638:7171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10673 comm="syz.6.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a801eb69 code=0x7ffc0000 [ 191.367627][T10676] pimreg: entered allmulticast mode [ 191.384133][ T29] audit: type=1326 audit(1754081384.638:7172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10673 comm="syz.6.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc9a801eb69 code=0x7ffc0000 [ 191.412830][ T29] audit: type=1326 audit(1754081384.638:7173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10673 comm="syz.6.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a801eb69 code=0x7ffc0000 [ 191.418764][T10675] pimreg: left allmulticast mode [ 191.436443][ T29] audit: type=1326 audit(1754081384.638:7174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10673 comm="syz.6.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a801eb69 code=0x7ffc0000 [ 191.465012][ T29] audit: type=1326 audit(1754081384.638:7175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10673 comm="syz.6.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc9a801eb69 code=0x7ffc0000 [ 191.488495][ T29] audit: type=1326 audit(1754081384.638:7176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10673 comm="syz.6.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc9a801eb69 code=0x7ffc0000 [ 191.512006][ T29] audit: type=1326 audit(1754081384.638:7177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10673 comm="syz.6.2254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=297 compat=0 ip=0x7fc9a801eb69 code=0x7ffc0000 [ 192.060211][ T3395] usb 18-1: device descriptor read/8, error -110 [ 192.170168][ T3395] usb 18-1: new SuperSpeed USB device number 2 using vhci_hcd [ 192.200252][ T3395] usb 18-1: enqueue for inactive port 0 [ 192.206290][ T3395] usb 18-1: enqueue for inactive port 0 [ 192.211958][ T3395] usb 18-1: enqueue for inactive port 0 [ 193.230463][ T3395] usb usb18-port1: attempt power cycle [ 193.740529][ T9937] 0: reclassify loop, rule prio 0, protocol 800 [ 194.380704][ T4992] 0: reclassify loop, rule prio 0, protocol 800 [ 195.021159][ T9882] 0: reclassify loop, rule prio 0, protocol 800 [ 195.080452][ T3395] usb usb18-port1: unable to enumerate USB device [ 195.661145][ T9882] 0: reclassify loop, rule prio 0, protocol 800 [ 198.780569][ T9937] 0: reclassify loop, rule prio 0, protocol 800 [ 200.140581][ T9937] 0: reclassify loop, rule prio 0, protocol 800