last executing test programs: 50.916220528s ago: executing program 0 (id=38): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000fdfeffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r2 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r3 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0xb) ftruncate(r3, 0x3) r4 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r4, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000580)="89", 0x1}], 0x1, &(0x7f0000000000)=ANY=[], 0xd0}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="bc", 0x1}], 0x1}}], 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r5}, &(0x7f0000000800), &(0x7f0000000840)=r6}, 0x20) ioctl$SG_GET_VERSION_NUM(r2, 0x2284, &(0x7f0000000080)) 50.825086849s ago: executing program 0 (id=39): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = getpid() syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r5}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002800)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x14, 0x2, 0x1, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x8094}, 0x4) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000002c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@noblock_validity}, {@user_xattr}, {@max_batch_time={'max_batch_time', 0x3d, 0x8cc}}, {@block_validity}, {@nolazytime}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f00000003c0), &(0x7f0000000340)='.\x00', 0x126a4b5, &(0x7f0000001280)=ANY=[], 0x6, 0x0, &(0x7f0000000000)) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x0, 0x10203, 0xf5ad, 0x4, 0x0}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r8, 0x84, 0x79, &(0x7f00000000c0)={r9, 0x5, 0x2}, 0x8) close(r0) 50.517101334s ago: executing program 0 (id=42): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x18) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000004c0)="0021ff17a70700000000030640710a069d317ebbaaa6", 0x16}], 0x1, 0x804, 0x0) 50.184685859s ago: executing program 0 (id=46): bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={0x0, 0xffffffffffffffff, 0x1000000}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={&(0x7f0000000540)=""/111, 0x6f, 0x0, &(0x7f00000005c0)=""/188, 0xbc}}, 0x10) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r1, 0x227b, &(0x7f00000001c0)=0x2001) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1, 0x31}, {}, @addr={0x2a, 0x5}}], 0x38) readv(r2, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@data_err_ignore}, {@resgid}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") openat(0xffffffffffffff9c, &(0x7f0000000340)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1043818, 0x0) select(0x40, &(0x7f0000000180)={0x8000, 0x9, 0x8000000000000000, 0x3, 0x1, 0x400, 0x2}, &(0x7f0000000280)={0x4, 0xb, 0x9bbd, 0x8, 0x8000, 0xd, 0x9, 0xffffffffffffff00}, &(0x7f00000002c0)={0x7, 0x73, 0x4, 0x8, 0x7, 0x6, 0xf, 0xffffffffffffffe7}, &(0x7f0000000300)={0x0, 0xea60}) r4 = open(&(0x7f0000000500)='./bus\x00', 0x101000, 0x0) ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x4, 0x8001, 0x0, 0x0, 0x19, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4117639c2eb4b78c66ee677df701905b9aafab4afaaf755a3f6a004", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000", [0x0, 0x2]}) 50.037120031s ago: executing program 0 (id=50): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x4, 0x7fdf, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfe}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = dup2(r2, r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x10) inotify_init() 49.641968768s ago: executing program 0 (id=59): writev(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f00000004c0)="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", 0x457}], 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89fc, &(0x7f0000000900)={'bond0\x00', @random="06fe002000"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000060060000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0xb8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='mm_page_alloc\x00'}, 0x10) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff7fffffffffefe, 0xa5d7}, 0x4c58, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/reserved_size', 0x169a82, 0x0) sendfile(r3, r3, 0x0, 0x7) 49.625993628s ago: executing program 32 (id=59): writev(0xffffffffffffffff, &(0x7f0000001540)=[{&(0x7f00000004c0)="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", 0x457}], 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89fc, &(0x7f0000000900)={'bond0\x00', @random="06fe002000"}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000002900000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000060060000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0xb8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000002c0)='mm_page_alloc\x00'}, 0x10) r2 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3f, 0x1, 0x0, 0x0, 0x0, 0x40008, 0x590, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfff7fffffffffefe, 0xa5d7}, 0x4c58, 0x0, 0x0, 0x0, 0x8, 0xffffffff, 0xb, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000003, 0x13, r2, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000580)='/sys/power/reserved_size', 0x169a82, 0x0) sendfile(r3, r3, 0x0, 0x7) 32.351718832s ago: executing program 2 (id=257): r0 = socket$kcm(0x2, 0x3, 0x2) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac14140dac1414180000000010000000000000000000000007"], 0x30}, 0x0) (fail_nth: 2) 32.253436484s ago: executing program 2 (id=258): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x20000, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x54, 0x10, 0x1, 0x16000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0}, {0xfff1}, {0xe, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffffc}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x91, 0x3}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x4, r4}, 0x10) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000180)={0x80, 0x2a, 0x3}) 31.920879198s ago: executing program 2 (id=260): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) open(&(0x7f0000000500)='./file0\x00', 0x14d27e, 0x14) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[]) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettaction={0x34, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x1a}]}, 0x34}}, 0x0) r3 = getpgrp(0x0) syz_open_dev$hiddev(&(0x7f0000000100), 0x1000, 0x800) fcntl$lock(r1, 0x6, &(0x7f0000000080)={0x1, 0x1, 0xe, 0xdae3, r3}) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) 31.848131429s ago: executing program 2 (id=262): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{}, &(0x7f0000000340), &(0x7f00000003c0)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20001f, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@jqfmt_vfsv0}, {@delalloc}]}, 0x3, 0x54f, &(0x7f0000000600)="$eJzs3dFvW1cZAPDv3sSx02VLNvYACFgZg4KqOo27VdMeYDwhhCYh9ghSFxI3qmrXUe2MJfSh+x+QmMQL8MgfgOBtT7zzguCNl/GANKACNRNINbrX14mbxq1LnDjEv590dc851/Z3znXvPfbX1ieAqXU+Iu5GxFxEvBMRi0V7UmzxZm/LHnf/3p213Xt31pLodt/+e5Ifz9pi4DmZZ4rXrETE974V8cPk0bjt7Z2bq41G/XYv5Pxyp7m53N7euXSjubpR36jfqtWurly9/PqV12rjGehMxEvNuaLy+Y9+f/drP866tVC09MdxSFePpPd6pb04mdmI+M6Y40zKTDGeuf/t6eM+3TylNCJeiIiX8+t/MWbydxMAOMu63cXoLg7WAYCzLs1zYElaLXIBC5Gm1Wovh/dinEsbrXbn4vXW1q31Xq5sKUrp9RuN+uUiV7gUpSSrr+Tl/XrtQP1KRDwfET8pz+f16lqrsT7JDz4AMMWeOTD//6vcm/8BgDOu8nB1aVL9AABOTmXSHQAATpz5HwCmj/kfAKaP+R8Apo/5HwCmj/kfAKbKd996K9u6u8XvX6+/u711s/XupfV6+2a1ubVWXWvd3qxutFob+W/2NJ/0eo1Wa3Pl1dh6b+nrm+3Ocnt751qztXWrcy3/Xe9r9dKJjAoAeJznX/rwT0lE3H1jPsoxn7f113IwV8PZlk66A8DEzEy6A8DEWO0LptcRvuNLD8AZkS/E+qBYFOSQ45WIIjs4YMhjh/BRA06ZC5/Zz/9nW8j/w9QYyP/7V8AwZeT/YXr5Ug7Tq9tNRl3zP0Z9IABwusnxA8nhzS8U+18Vfznwg/WDj/jgOHsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp1t//d9qlPO1wBciTavViGcjYilKyfUbjfrliHguIv5YLpWz+sqE+wwAHFX616RY/+vC4isLB4/OJZ+U831E/Ohnb//0vdVO5/YfsvZ/7LV3Pijaa08dfH48YwAAHqc/T+f7gS/y9+/dWetvJ9mfj78ZEZVe/N17c7G7F382ZvN9JUoRce6fSVHvSQZyF0dx9/2IuPKbIuKgfxcrJPdWPj0YP4v97Ljif/qw85/EQp6D6cdPH4qf5sd6++xcfGoMfYFp82F2/3nzsOsvjfP5vn/9xYO96+/nvbbZMcQv7n/ZS63t5vfA/fj9+9/MkPvf+VFjvPq7b/dKj37d+vj9iM/ORvRjZ1t/Leh+/GRI/FdGCX4+4s+f+8LLww53fxFxIR6Ovx9hv7TcaW4ut7d3Lt1orm7UN+q3arWrK1cvv37ltdpynqNeHj4b/O2Ni88NO5aN/9yQ+JUnjP/Lo4w/In75n3e+/8XHxP/qlw6Ln8aLj4mfzYlfGTH+6rlfV4Ydy+KvDxn/k97/iyPG/+gvO48sGw4ATE57e+fmaqNRv50VylEU9lqOp9D/IHESsU5XoRSnohv/R4X+n5VeS1Ya8em/jWPpT3noO/iNh1ruF/0+htMyF0/1rG53sCUZ9bQMu2OMI+sGnAZ7F31EfDLpzgAAAAAAAAAAAAAAAIc6vv+/le61THqMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF3/DQAA///Xj86C") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2012024, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYRES64=r0], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r5, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, &(0x7f0000000ac0)) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, 0x0, 0x0) r7 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r7}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) sendmsg$tipc(r9, &(0x7f0000000540)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x1, {{0x43}, 0x3}}, 0x10, 0x0, 0xfdd1, 0x0, 0x0, 0x2000481a}, 0x10) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) unshare(0x2040400) r10 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$PPPIOCSACTIVE(r10, 0xc02063a1, 0x0) 31.521736294s ago: executing program 2 (id=265): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r0, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 30.828869965s ago: executing program 2 (id=271): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000500000008000000"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20) recvfrom$inet6(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) 30.812730235s ago: executing program 33 (id=271): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="120000000500000008000000"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20) recvfrom$inet6(r0, 0x0, 0x0, 0x40000000, 0x0, 0x0) 29.997291808s ago: executing program 5 (id=284): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018", @ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={&(0x7f0000000240), 0x1}, 0x10, 0x0, 0x800000, 0x0, 0x1, 0x20000002, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x35) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)={0x70, 0x0, 0x8, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x884c}, @CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9200}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x6636}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8, 0x9, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000004}, 0x40400c4) openat$cgroup_type(r3, &(0x7f00000000c0), 0x2, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000031c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r5, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) r9 = io_uring_setup(0x1783, &(0x7f0000000640)={0x0, 0xfffffffe, 0x800, 0x400, 0x2de}) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) sendmsg$rds(r10, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) sendmsg$tipc(r6, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0}, 0x0) close(r6) rmdir(&(0x7f0000000700)='./cgroup/../file0\x00') 29.913449679s ago: executing program 5 (id=285): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000040)=ANY=[], 0x6) 29.804941841s ago: executing program 5 (id=286): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) (async) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='kmem_cache_free\x00', r0}, 0x18) (async) rt_sigqueueinfo(0x0, 0x21, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) (async, rerun: 64) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file1\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") (rerun: 64) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000740)='scsi_dispatch_cmd_start\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r4}, 0x10) (async, rerun: 32) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) (async, rerun: 32) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) renameat2(r5, &(0x7f0000000140)='./file1\x00', r5, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 28.337942333s ago: executing program 5 (id=298): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@acl}]}, 0x1, 0x787, &(0x7f0000001000)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f0000000140)='Q', 0x1, 0x200983) creat(&(0x7f0000000200)='./file1\x00', 0x12e) (async) creat(&(0x7f0000000200)='./file1\x00', 0x12e) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff80000000, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0xf58, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x41, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff80000000, 0x800000000003}, 0x1100, 0x5dd8, 0x0, 0x3, 0xf58, 0x8, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) utimensat(0xffffffffffffffff, &(0x7f0000000100)='./bus\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setpriority(0x2, 0xffffffffffffffff, 0xb972) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x27) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) openat$sndseq(0xffffffffffffff9c, 0x0, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x1, 0x0, 0x0, 0x4, 0x0, 0x7, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext, 0x100008, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, r1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) (async) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r2, &(0x7f00000002c0)='io.weight\x00', 0x2, 0x0) (async) openat$cgroup_int(r2, &(0x7f00000002c0)='io.weight\x00', 0x2, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2711, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0x2a) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r5}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='task_newtask\x00', r5}, 0x10) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r3) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x38, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc}]}, {0x4}, {0x9}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}}, 0x0) sendmsg$IPVS_CMD_SET_CONFIG(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x28, r6, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PROTOCOL={0x6}]}]}, 0x28}}, 0x4) 28.021584418s ago: executing program 5 (id=299): open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYRES8, @ANYRES64=r3, @ANYRESDEC=r4], 0x208}, 0x0, 0x20008800}) io_uring_enter(r3, 0x6e2, 0x3900, 0x4d, 0x0, 0x0) 27.881631631s ago: executing program 5 (id=302): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000480)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = io_uring_setup(0x6280, &(0x7f0000000640)={0x0, 0x13e, 0x0, 0x0, 0x1d1}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002700)=""/4084, 0xff4}], &(0x7f0000000200), 0x1}, 0x20) 27.87711514s ago: executing program 34 (id=302): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\n\x00'], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000480)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = io_uring_setup(0x6280, &(0x7f0000000640)={0x0, 0x13e, 0x0, 0x0, 0x1d1}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002700)=""/4084, 0xff4}], &(0x7f0000000200), 0x1}, 0x20) 23.011644835s ago: executing program 7 (id=303): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x4f) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x573, &(0x7f0000000ec0)="$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") setresuid(0x0, 0xee00, 0x0) utimes(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)={{}, {0x77359400}}) mkdir(&(0x7f0000000000)='./control\x00', 0x0) mount(0x0, &(0x7f00000006c0)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x4014, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./control\x00', 0x0, 0x2000, 0x0) sendto$inet6(r0, &(0x7f0000f6f000), 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr=' \x01\x00'}, 0x1c) 22.833735288s ago: executing program 7 (id=351): bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000a00)=ANY=[@ANYBLOB="f80000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1546010049340600d80012800c0001006d6163766c616e00c8000280080001000800000008000700060000000800010010000000080007000e4926890800030000000000700005800a000400aaaaaaaaaabb00000a000400519fc128b6bb00000a000400aaaaaaaaaa2000000a0004000180c200000200000a000400ffffffffffff00000a000400aaaaaaaaaaaa00000a000400aaaaaaaaaaaa00000a0004000b1ffb7769e000000a000400aaaaaaaaaa3600000600020001"], 0xf8}}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000180)={0x28, 0x0, 0x0, @host}, 0x10) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) lseek(r2, 0xfffffffffffffffc, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) r3 = socket$netlink(0x10, 0x3, 0xb) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={0x190, 0x7, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_USERDATA={0xa0, 0x7, 0x1, 0x0, "5c3a59b28022505351dd8abae77072acbc7757731c68d959eb713ed7af3f4eb5a77793d4e84b1b05f8bc077b0c817b3ee586626eff86f70f8cc122b0fa8febd207761ee84e98f0837255bae478d630852019b177e72f78a0ad9f2cf64994ab9503809a250dedcaa8d4c1c89e4fdaff18b69c5660570928f8f6aa99d06a6ed056135e55d38a23db1c619796277f9fad1090ea75362ab4e014bcae34a2"}, @NFTA_RULE_USERDATA={0xca, 0x7, 0x1, 0x0, "08a704cf0da390f83a06e6f6eaac0959bf8b526fb9c9a32862b59bbf18947adcefbb6927819a97cffeab055c18a799c60ca6654f902a412ced474be476573e2c89e9b2472a533d10e80d1d1317990d47624b8a9328561dbe42598578b37c581b6bfd8edb102c40ee63440eba009038fe0fe74c1a639d7d71ee26fa94404e6d15e16dd1d3010ce2cab1ca96d84dcdb55b8c1a8f7ec547ab74c78806585417c045d66a91adc34aedc0146408ea099b28f7c382bcd5cf20c9a535c7d9ccbd9051a46120031e058d"}]}, 0x190}, 0x1, 0x0, 0x0, 0x20}, 0x40080) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) close(r3) 22.67554425s ago: executing program 7 (id=355): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0x111400, 0x0) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000100)=0x40) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x8205, &(0x7f0000000480)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}, {@grpquota}, {@nouid32}, {@nodelalloc}, {@abort}, {@noblock_validity}, {@barrier}, {@journal_dev={'journal_dev', 0x3d, 0xf35}}]}, 0x1, 0x625, &(0x7f0000000c80)="$eJzs3c9rHG0dAPDvzCYxed9oWpVii2LAQwvS/KjFqqe2F3soWLAHEQ8NTVJDN21oUrC1YAoeFBREvIr04j/gXYpXbyKoN89CFYl4UOnKzM6k281ussnb3Ukznw/s9plnZvd5vvvs03me3Tw7AdTWbHaXRpyNiDtJxEzHvulo75wtjtv557O72S2JVuub/0giKfLK418X/36Y3SURkxHxh+sRn2zsLXfzydP7S81W2w8i5rfWN+Y3nzy9uLa+dG/l3sqDxUtfuXxl4auLlxffSZxlXDdufuOzP/3hd7+8+sfmxSSuxu3x7y9HVxz7+NRhypyN2XhdhNiZPxYRV7JEj9flfVOGkFRcD46mUbwfxyPiTMxEI99qm4m1n1RaOWCoWo2IFlBTif4PNVWOA8q5/YDz4BPj1bX2BGhv/GPtz0ZiMp8bfbCTdMyM2vPdU++g/KyM/z0798vsFn0+hxh7B+X0s/08Ij7TK/4kr9up/FOcLP400o7HZemFiJgoXotB5v9j+Sv5ttmu7VG//w4Tf2c7ZPFfLf7N8q8fsfyq4wegnl5eK07k29nWm/NfNjIsxz/RY/wz3ePcdRRVn//6j//K8/1k/hl52jUOy8Y7t3o/5Z5Bzl9/fOPn/crvHP9lt6z8ciw4Cq+eR5zriv9H+UAv2W3/pEf7Z4fcGbCMr//p7zf67as6/taLiPM95z9vRrRZan5rfaPM6/p+cn51rbmy0L7vWcZvf/+dX/crv+r4s/aPPvO//do/y9sYsIzf3Hqx3m/f9IHxp3+bSG7nqYki53tLW1uPFiMmkpvFIR35l/avS3lM+RxZ/Be+0Lv/94q/KCpv6O23Xo3+Nr51f6ffcQO3/96pU+Z1a/9wD5TFv9zn/X9Q+/9swDL+/e3Hn+vKmioT+8U/tfepku1DRwgAAAAAAAD1kebfwSbp3G46Tefm2mt4Px0fpM2Hm1tfXH34+MFyxIX87yHH0/Kb7pn2dpJtLxZ/D1tuX+ra/lJEnI6IXzSm8u25uw+by1UHDwAAAAAAAAAAAAAAAAAAAMfEh8X6//I61f9qtNf/D2TrzJBrBwzdMC8wBxxv+j/UV97/06prAVTB+R/qS/+H+tL/ob70f6gv/R/qS/+H+tL/ob70fwAAAAA4kU5//uVfkojY/tpUfstMFPvGK60ZMGyH7+OzQ6kHMHqNkT4MOE52v/q3/B9qZ6Dx/3+KHwccfnWACiS9MvPBQWv/zv+y5yMBAAAAAAAAAAAAgCE4f9b6f6irNH5XdRWAiuxdyH92Z8CFfn4DAN5zfvof6usjzfF9QAAnwkGr+Cd3U13Dfuv/AQAAAAAAAAAAAGBkpvNbks4VlwCdjjSdm4v4eEScivFkda25shARn4iIPzfGP5ZtL1ZdaQAAAAAAAAAAAAAAAAAAADhhNp88vb/UbK486kz8d0/OyU6UV0GtrBrX+u+KZPT1mYqIyhtlaImxjpwkYjtr+VGVPrl/WXEcXp9HaV6Niv9jAgAAAAAAAAAAAAAAAACAGupYe9zbuV+NuEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMHpvrv9/9ERywPNUHSMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8H76fwAAAP//1f46fw==") r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x40, 0x1, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x2, @perf_config_ext={0xf60, 0x40ffffffff}, 0x1100, 0x5, 0x3a65, 0x5, 0x0, 0x5, 0xfffb, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r4) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000080000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000021440011800a0001006d617463680000003400028008000240000000001c0003000afe6cbf96caa5debdad61b67ddb2fb68fcf19f7807076430a00010071756f7461"], 0xc8}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000004) r5 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000080)={0x0, 0x12, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000000314010005bd7000ffdbdf250900020073797a310000000008004100736977001400330076657468305f746f5f62726964676500"], 0x38}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}]}}}]}, 0x40}}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r7}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r9}, 0x10) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f00000000c0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x69, 0x7ffc0005}]}) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x4, &(0x7f0000000000)=@raw=[@cb_func={0x18, 0x1a, 0x4, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @exit], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) syz_clone3(&(0x7f0000000740)={0x400, 0x0, 0x0, 0x0, {0x35}, 0x0, 0x0, 0x0, 0x0}, 0x58) 20.74347655s ago: executing program 7 (id=377): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00715aec1cf9e8a0c70000090000000100", @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x13, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0, 0x0, 0xffffffffffffffff}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0xffffffffffffff57, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x3, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x0, 0x8c, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 18.257630828s ago: executing program 7 (id=428): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0xa0, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x4, 0x0, 0x1bc40, 0x40080}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x11}, 0x400e8c0) 17.892021814s ago: executing program 35 (id=428): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0xa0, 0x10, 0x403, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x4, 0x0, 0x1bc40, 0x40080}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x70, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xd, 0x1, 'BATMAN_IV'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}, @IFLA_BATADV_ALGO_NAME={0xc, 0x1, 'BATMAN_V'}]}}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x11}, 0x400e8c0) 8.566083878s ago: executing program 3 (id=570): r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0185879, &(0x7f00000004c0)={0x0, 0xfffffbffffffffff, 0x3ffffd, 0x2, 0x0, 0x0, 0x2401}) 8.46948953s ago: executing program 3 (id=576): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r2, 0x402, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) symlinkat(&(0x7f0000000180)='./file0\x00', r2, &(0x7f00000001c0)='./file0\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r4) sendmsg$NL80211_CMD_SET_REG(r4, &(0x7f0000000080)={0xfffffffffffffffe, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x20, r5, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4082) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x60, 0x0, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x4c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1, @mcast2, 0xfffff555}}, {0x14, 0x2, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4080}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) 8.38671065s ago: executing program 3 (id=580): socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000700)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004b0000400000000000059078ac1414000a01010044140603000000000000000064010102000000008302000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000d6a69ffae8d9ffcdc6742e0e6b80c76029b5022122a94009630a20de6d2cab309793100e18574a7e08eedf2ce821f6bdf6fae6e6664863dee4035d46047075ce465ba03e3da923b58a34dcfe11e03d7c5c4f00a38bd7393d4a759dbf8a369d0085544ad34e651f47ed29be912589291c09abe54594cbc4b9849e20"], 0x0) r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000000c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)='%pI4 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="000000edffffffffb605000010001c0500000000a5000000180100002020640500000000002020207b1af8ff00090000f233bd370000000007010000f8ffffffb702000008000000b703000000007f59a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r4}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x43, 0xa0, 0x1d0, 0x98, 0x318, 0x178, 0x178, 0x318, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1b0, 0x1d0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@helper={{0x48}, {0x0, 'ftp-20000\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x410) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet_dccp(0x2, 0x6, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$inet_int(r6, 0x10d, 0x8e, &(0x7f0000000000), &(0x7f0000000080)=0x4) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x2, 0x12062, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x15bd, 0x0, 0x0, 0x0, 0x4}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}}], 0x2, 0x2004000) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x20000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, @void, @value}, 0xffffffffffffffe5) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r8}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2010008, &(0x7f0000000680)={[{@noauto_da_alloc}, {@errors_remount}, {@barrier_val={'barrier', 0x3d, 0xff}}, {@quota}, {@inlinecrypt}]}, 0xff, 0x53c, &(0x7f0000000140)="$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") socket$can_bcm(0x1d, 0x2, 0x2) r10 = socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000900)='./file0\x00', 0x20) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', 0xffffffffffffffff, 0x0, 0x8000000000}, 0x18) sendmsg$nl_route(r10, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000880)={&(0x7f00000009c0)=ANY=[@ANYRESHEX=r9, @ANYRESOCT=r5, @ANYRES8=0x0], 0x1c}, 0x1, 0x0, 0x0, 0xe080}, 0x20004080) 7.815293089s ago: executing program 3 (id=588): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000009dc0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000009f00)={0x0, 0x0, &(0x7f0000009ec0)={&(0x7f0000009e40)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004084}, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x3c, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8004) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10) r2 = syz_clone(0x0, &(0x7f0000001100), 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x3, &(0x7f0000000640)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$eJzs3c9rXNUeAPDvnSRNm/a95MGD9+oqIGigdGJqbBVcVFyIYKGga9thMg01k0zJTEoTAlpEcCOouBB007U/6s6tP7b6X7gQS9W0WHEhkTu5t502M2mSJpnqfD5wM+fceyfnfOf+OGfmHu4NoGeNpn8KEYcj4t0kYjibn0TEQDPVH3Fybb1bK8vldEpidfXlX5LmOjdXlsvR8p7UwSzz/4j45q2II4X15dYXl2ZK1WplPsuPN2YvjNcXl46eny1NV6Yrc8cnJiePnXjqxPGdi/W375cOXXvvhcc/P/nHm/+7+s63SZyMQ9my1jh2ymiMZp/JQPoR3uX5nS6sy5JuV4BtSQ/NvrWjPA7HcPQ1UwDAP9nrEbEKAPSYRPsPAD0m/x3g5spyOZ+6+4vE3rr+XETsX4s/v765tqQ/u2a3v3kddOhmcteVkSQiRnag/NGI+PjLVz9Np9il65AA7bxxOSLOjoyuP/8n68YsbNUTGyzbl72O3jPf+Q/2zldp/+fpdv2/wu3+T7Tp/wy2OXa3477H/4EdKGQDaf/v2Zaxbbda4s+M9GW5fzX7fAPJufPVSnpu+3dEjMXAYJqf2KCMsRt/3ui0rLX/9+v7r32Slp++3lmj8FP/4N3vmSo1Sg8Sc6vrlyMe6W8Xf3J7+ycd+r+nN1nGi8+8/VGnZWn8abz5tD7+yEYn7Y7VKxGPtd3+d0a0JRuOTxxv7g7j+U7Rxhc/fDjUqfzW7Z9Oafn5d4G9kG7/oY3jH0lax2vWt17Gd1eGv+607P7xt9//9yWvNNN5P+JSqdGYn4jYl7y0fv6xO+/N8/n6afxjj7Y//jfa/9PvhGc3GX//tZ8/2378uyuNf2pL23/riau3Zvo6lb+57T/ZTI1lczZz/ttsBR/kswMAAAAAAAAAAAAAAAAAAAAAAACAzSpExKFICsXb6UKhWFx7hvd/Y6hQrdUbR87VFuamovms7JEYKOS3uhxuuR/qRHY//Dx/7J78kxHxn4j4YPBAkt9HcarLsQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA7mCH5/+nfhzsdu0AgF2zv9sVAAD2nPYfAHqP9h8Aeo/2HwB6j/YfAHqP9h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBddvrUqXRa/X1luZzmpy4uLszULh6dqtRnirML5WK5Nn+hOF2rTVcrxXJt9n7/r1qrXZiMuYVL441KvTFeX1w6M1tbmGucOT9bmq6cqQzsSVQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsDX1xaWZUrVamZfYRmL14ahG9xN92e70sNRnTxPJw1GNHU50+cQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8DfxVwAAAP//02Ii/w==") r5 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x88882, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r7, &(0x7f0000004200)='t', 0x1) sendfile(r7, r6, 0x0, 0x7ffff000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) fallocate(r5, 0x0, 0x0, 0x1001f0) r8 = open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) sendfile(r8, r8, 0x0, 0x800000009) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001108000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) r9 = io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d33, 0x1000, 0x0, 0x4000000}) io_uring_register$IORING_REGISTER_BUFFERS(r9, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0xfff}], 0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000380)=r2, 0x12) 6.881973024s ago: executing program 3 (id=605): r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x275a, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x5) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0xd74d4000) fallocate(r1, 0x20, 0x2, 0x34f0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000d40)=@mangle={'mangle\x00', 0x44, 0x6, 0x528, 0x98, 0x98, 0x3c8, 0x170, 0x170, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0xff000000, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x11}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x3, 0x0}, @loopback, 0xff, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x89}, 0x0, 0x98, 0xd8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x2, 0xffffffff, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4e20}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@unspec=@pkttype={{0x28}, {0x9}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@empty, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xe}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x588) 6.678865487s ago: executing program 3 (id=610): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@generic={0x0, r0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) io_uring_setup(0x725d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0xe3b9}, 0x18) r4 = socket(0x2c, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r4}, 0x20) close_range(r3, 0xffffffffffffffff, 0x0) 6.618640558s ago: executing program 36 (id=610): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@generic={0x0, r0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) io_uring_setup(0x725d, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0xe3b9}, 0x18) r4 = socket(0x2c, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r5, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r4}, 0x20) close_range(r3, 0xffffffffffffffff, 0x0) 2.237412235s ago: executing program 6 (id=669): sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000307000000000000000000000005001a"], 0x38}}, 0x40000) 2.113064157s ago: executing program 6 (id=671): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000100085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000844) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000009c0)='kfree\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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") 1.784574473s ago: executing program 6 (id=674): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000180)='./file1\x00', 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x5, &(0x7f0000000080)=0x1, 0x4) getsockopt$inet_tcp_int(r2, 0x6, 0x6, 0x0, &(0x7f0000000500)) renameat2(r0, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000002c0)='./file0\x00', 0x2) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0xa4000061) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xa00008, &(0x7f0000000340)={[{@noacl}]}, 0xfc, 0x7bb, &(0x7f00000007c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd2900008400000005010000", @ANYRES32, @ANYBLOB="00000000000000890d00000000000000feff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001e0000032bbd7000fcdbdf2500000400"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x14) read(r3, &(0x7f0000000140)=""/68, 0x44) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32=0x1, @ANYBLOB="0c0000000000000000000000d231f2693eda808d3aa86e1f8d1439da", @ANYRES32=0x0, @ANYRESDEC=r4, @ANYBLOB="02000000020000000400"/24], 0x50) 1.668399934s ago: executing program 6 (id=677): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0b00715aec1cf9e8a0c70000090000000100", @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x13, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r0, 0x0, 0xffffffffffffffff}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value=0x2000000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0xffffffffffffff57, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x3, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x0, 0x8c, 0x4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 1.478719077s ago: executing program 9 (id=681): sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="020a000307000000000000000000000005001a"], 0x38}}, 0x40000) 1.399419408s ago: executing program 9 (id=683): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) close(r0) 1.398919778s ago: executing program 9 (id=684): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000240)={[{@quota}]}, 0x0, 0x553, &(0x7f0000001080)="$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") r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x3004000, &(0x7f0000000100)={[{@abort}, {@resuid}, {@block_validity}, {@resuid={'resuid', 0x3d, 0xee01}}, {@discard}, {@noblock_validity}, {@dioread_nolock}]}, 0x1, 0x790, &(0x7f0000000f80)="$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") r3 = msgget$private(0x0, 0x0) msgrcv(r3, 0x0, 0x0, 0x1, 0x2000) msgrcv(r3, &(0x7f0000000000)={0x0, ""/223}, 0xe7, 0x0, 0x0) msgctl$IPC_SET(r3, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x170}, 0x0, 0x0, 0x800000000000000, 0x6, 0xffffffffffffffff, 0x0, 0x3, 0xe8, 0x0, 0x0, 0x0, 0xffffffffffffffff}) shmget$private(0x0, 0x3000, 0x4, &(0x7f0000ffa000/0x3000)=nil) socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000001c0)={@loopback, 0x801, 0x2, 0x3, 0xa, 0x92}, 0x20) msgsnd(r3, 0x0, 0xe, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="ac020000", @ANYRES16=r5, @ANYBLOB="bf4400000000000000000c0000008000058014000280080001000000000008000100090000002c0002800800020001000000080004005fbe0000080001001b00000008000200000000000800020009000000070001006962000034000280080003006400000008000400090000000800030051bd000008000300fc00000008000300a90f00000800"], 0x2ac}}, 0x0) syz_emit_ethernet(0xb2, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb88a8060081003c0088480000040000000000000f0f000000000000f701000000000000000000aa01fe3050310003ffcc8fbe1512b3db4c60ed458e6b3b9d53eb291ec6d266528a93a3767af7f996b06f1b7d664b3ad185beab680920592832a3abf6e044f4418d61156c85a54f6822b0b7c0f54123b9667e3858290753da968af0a8f260c92836469d6d2839a9846aa264f1e97eeaca58e87baac8635821c2d814813257f318846f48c0bc128fb0790677c528b7dcff98ba2ab1a1cc61252cb71a5f7d5dce3126bf611bf3dbdf4bf8"], 0x0) r6 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r6, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r7 = creat(&(0x7f0000000000)='./file0\x00', 0xecf86c37d53049cc) close(r7) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 1.116201742s ago: executing program 6 (id=691): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000040)=0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, 0x0, 0x0) 999.777215ms ago: executing program 1 (id=692): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0xa0, &(0x7f0000000240)={0xa1, 0x0, 0x0, 0x3f}, 0x8, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) 959.793445ms ago: executing program 1 (id=693): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r1 = inotify_init() r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000003c0)='kmem_cache_free\x00', r2}, 0x18) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r3, 0xa, 0x13) fcntl$setlease(r3, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) fcntl$setlease(r3, 0x400, 0x2) writev(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000000)={[{@bsdgroups}, {@grpquota}, {@init_itable}, {@orlov}, {@nomblk_io_submit}]}, 0xa, 0xbb8, &(0x7f00000017c0)="$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") quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) inotify_add_watch(r1, &(0x7f0000000000)='./file1\x00', 0x7a8) setxattr$incfs_id(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0), &(0x7f00000002c0)={'0000000000000000000000000000000', 0x33}, 0x20, 0x3) write$binfmt_elf64(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c460d04000c028000000000000003003e00ecffffff940200000000000040000000000000004d020000000000000000000000003800010001017f000800030000006400000005000000000000000a000000000000000101000000000000a1"], 0x78) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) 721.743059ms ago: executing program 8 (id=694): ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa2, 0x7}}, './file0\x00'}) r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) ioctl$SG_GET_VERSION_NUM(r0, 0x2284, &(0x7f0000000080)) 592.418441ms ago: executing program 8 (id=695): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) close(r0) 513.227952ms ago: executing program 9 (id=696): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 464.547313ms ago: executing program 9 (id=698): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffd}) ioprio_set$pid(0x2, 0x0, 0x6000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xe, 0x9f, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}, 0x1, 0x0, 0x0, 0x4002}, 0x80) close(r3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) stat(&(0x7f0000000180)='./file0\x00', 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)='8', 0x1}], 0x20, 0x14, 0x0) getegid() syz_emit_ethernet(0x2a, &(0x7f0000000980)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) recvmmsg(r1, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}, 0x7061ab3a}], 0x1, 0x0, 0x0) 452.770973ms ago: executing program 8 (id=699): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000180)='./file1\x00', 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x5, &(0x7f0000000080)=0x1, 0x4) getsockopt$inet_tcp_int(r2, 0x6, 0x6, 0x0, &(0x7f0000000500)) renameat2(r0, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000002c0)='./file0\x00', 0x2) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0xa4000061) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0xa00008, &(0x7f0000000340)={[{@noacl}]}, 0xfc, 0x7bb, &(0x7f00000007c0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd2900008400000005010000", @ANYRES32, @ANYBLOB="00000000000000890d00000000000000feff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x0) renameat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001e0000032bbd7000fcdbdf2500000400"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x14) read(r3, &(0x7f0000000140)=""/68, 0x44) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="1b00000000000000000000000500000000000000", @ANYRES32=0x1, @ANYBLOB="0c0000000000000000000000d231f2693eda808d3aa86e1f8d1439da", @ANYRES32=0x0, @ANYRESDEC, @ANYBLOB="02000000020000000400"/24], 0x50) 430.439404ms ago: executing program 1 (id=700): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x581000) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) dup3(r0, r1, 0x0) read(r1, &(0x7f00000010c0)=""/4044, 0xfcc) close(r0) 368.643284ms ago: executing program 4 (id=701): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x101000) 310.094895ms ago: executing program 4 (id=702): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r0}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000900)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd608a96460014040000000000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) 253.643716ms ago: executing program 1 (id=703): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008001500b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x0, 0xa0, &(0x7f0000000240)={0xa1, 0x0, 0x0, 0x3f}, 0x8, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0}) 253.367646ms ago: executing program 8 (id=704): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) 219.826586ms ago: executing program 6 (id=705): creat(&(0x7f0000000280)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000880)={[{@errors_remount}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5e}}, {@noauto_da_alloc}, {@bsdgroups}, {@oldalloc}, {@nojournal_checksum}]}, 0x2, 0x459, &(0x7f0000000900)="$eJzs289vFFUcAPDvzLZFfrYi/gBRq8TY+KOlBZWDF40mHjCa6AGPtS2EUKihNRFCpBqDFxNDomfj0cS/wJsXo55MvOrdkBDlAnqqmdmZsrvs9gfd7gr7+STTvjfzdt/77sybeTNvN4CeNZz9SSJ2RMTvETFYzdYXGK7+u3HtwtQ/1y5MJbG09PZfSV7u+rULU2XR8nXbi8xIGpF+mhSV1Js/d/7U5OzszNkiP7Zw+v2x+XPnnzt5evLEzImZMxNHjhw+NP7iCxPPtyXOLK7r+z6a27/39XcvvzF17PJ7P3+XtXdHsb02jnYZzgL/eym3vDKt/nuy3ZV12c6adNLXxYawLpWIyHZXf97/B6MSN3feYLz2SVcbB2yq7Nq0pfXmxSXgLpZEt1sAdEd5oc/uf8ulQ0OP/4WrL1dvgLK4bxRLdUtfeaue3xvt3KT6hyPi2OK/X2dLbNJzCACAWp9PfXU0nm02/kvjgZpyu4o5lKGIuDcidkfEfRGxJyLuj8jLPhgRD61eZVqbaZwaunX8k1657eDWIBv/vVTMbdWP/5abOVQpcjvz+PuT4ydnZw4Wn8lI9G/J8uMr1PHDq7990Wpb7fgvW7L6y7Fg0Y4rfQ0P6KYnFybzQWkbXP04Yl9fs/iT5ZmALPa9EbFvfW+9q0ycfPrb/a0KrR7/Ctowz7T0TcRT1f2/GA3xl5KV5yfH7onZmYNj5VFxq19+vfRWq/o3FH8bZPt/W/3x31hkKKmdr51ffx2X/vis5T3N7R7/A8k7+flooFj34eTCwtnxiIHkaJ6vWz9x87VlviyfxT9yoHn/3128Jov/4YjIDuJHIuLRiHisaPvjEfFERBxYIf6fXmm9rT7+rTu6sf+nm57/lo//hv2//kTl1I/ft6p/bfv/cJ4aKdbk579VrLWBG/nsAAAA4E6R5t+BT9LR5XSajo5Wv8O/J7als3PzC88cn/vgzHT1u/JD0Z+WT7oGa56HjieLxTtW8xPFs+Jy+6HiufGXla15fnRqbna6y7FDr9veov9n/qx0u3XApms2jzYx0IWGAB3X2P/T+uzFNzvZGKCj/F4betcq/T/tVDuAznP9h97VrP9fbMibC4C7k+s/9C79H3qX/g+9S/+HnrTaj+QrG/ztv8Qdl0jWVjjS7jdVYvMS3T4zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtMd/AQAA//82y+tA") 211.661376ms ago: executing program 4 (id=706): open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000004c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRES8, @ANYRES8, @ANYRES64=r3, @ANYRESDEC=r4], 0x208}, 0x0, 0x20008800}) io_uring_enter(r3, 0x6e2, 0x3900, 0x4d, 0x0, 0x0) 117.312908ms ago: executing program 8 (id=707): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000034000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 109.927608ms ago: executing program 1 (id=708): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x80000001, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) 109.645598ms ago: executing program 4 (id=709): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb85"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) close(r0) 65.292489ms ago: executing program 9 (id=710): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000202300800000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000280)=@generic={0x0, r0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffffffd}, 0x18) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0) io_uring_setup(0x725d, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0xe3b9}, 0x18) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@orlov}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@grpquota}, {@barrier}, {@usrjquota}, {@jqfmt_vfsold}, {@minixdf}]}, 0x3, 0x466, &(0x7f0000000340)="$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") socket$kcm(0xa, 0x5, 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@oldalloc}]}, 0x3, 0x453, &(0x7f0000000600)="$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") setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='system.posix_acl_access\x00', &(0x7f0000001140)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) r5 = socket(0x2c, 0x3, 0x0) syz_io_uring_setup(0x5493, &(0x7f0000000a80)={0x0, 0xa368, 0x4000, 0x0, 0x1cd, 0x0, r2}, &(0x7f0000000b00), &(0x7f0000000b40)) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x11, 0x4, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r6, &(0x7f0000000140), &(0x7f0000000080)=@udp6=r5}, 0x20) close_range(r3, 0xffffffffffffffff, 0x0) 64.974549ms ago: executing program 4 (id=711): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) preadv2(r0, &(0x7f00000004c0)=[{&(0x7f00000000c0)=""/139, 0x8b}], 0x1, 0x867, 0x0, 0x0) 12.52538ms ago: executing program 8 (id=712): mkdir(&(0x7f0000000040)='./file0\x00', 0x141) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma,port=0x00']) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001200)='/proc/vmallocinfo\x00', 0x0, 0x0) read$hiddev(r2, &(0x7f00000000c0)=""/4092, 0xffc) mkdirat(r2, &(0x7f00000010c0)='./file0/file0\x00', 0x4d) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(0xffffffffffffffff, 0x0, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r4, &(0x7f0000000040)='./file0\x00') io_uring_register$IORING_REGISTER_FILES2(r4, 0xd, &(0x7f0000001240)={0x1, 0x1, 0x0, &(0x7f0000001180)=[{&(0x7f0000001100)=""/120, 0x78}], &(0x7f00000011c0)=[0x1a, 0x8000000000000001, 0x9, 0x2, 0x4]}, 0x20) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 12.18046ms ago: executing program 1 (id=713): mkdir(&(0x7f0000000040)='./file0\x00', 0x141) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) mount$9p_rdma(&(0x7f00000013c0), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x800, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=rdma,port=0x00']) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001200)='/proc/vmallocinfo\x00', 0x0, 0x0) read$hiddev(r3, &(0x7f00000000c0)=""/4092, 0xffc) mkdirat(r3, &(0x7f00000010c0)='./file0/file0\x00', 0x4d) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x29}}, './file0\x00'}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(0xffffffffffffffff, 0x0, 0x18) symlinkat(&(0x7f0000000000)='.\x00', r5, &(0x7f0000000040)='./file0\x00') io_uring_register$IORING_REGISTER_FILES2(r5, 0xd, &(0x7f0000001240)={0x1, 0x1, 0x0, &(0x7f0000001180)=[{&(0x7f0000001100)=""/120, 0x78}], &(0x7f00000011c0)=[0x1a, 0x8000000000000001, 0x9, 0x2, 0x4]}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) umount2(&(0x7f0000000140)='./file0\x00', 0x0) 0s ago: executing program 4 (id=714): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000e00002d8300000000fdffffff18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000fa540000850000008200000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r6, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000d0000000c00018008000100", @ANYRES32=r7], 0x20}}, 0x0) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000c80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000d00)=0xfffffffffffffee2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001a40)=@newtfilter={0x44, 0x2c, 0xd29, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xa, 0xfff3}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x200001}, @TCA_BPF_OPS={{0x6}, {0x4}}]}}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x29, 0xf, 0xb, 0x2, 0x61, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x7800, 0x7800, 0x3, 0x50}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000540)={'ip6_vti0\x00', 0x0, 0x4, 0x3c, 0x40, 0x5, 0x61, @mcast1, @mcast1, 0x1, 0x1, 0x4, 0x3}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={r2, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000740)={@dev, 0x0}, &(0x7f0000000780)=0x14) r16 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r16, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r17, {0x0, 0x5}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}, @TCA_CAKE_TARGET={0x8, 0x8, 0x7fff}, @TCA_CAKE_RTT={0x8, 0x7, 0x3}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44004}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'sit0\x00', &(0x7f00000007c0)={'gre0\x00', 0x0, 0x700, 0x1, 0x7, 0xd6, {{0x2f, 0x4, 0x0, 0x2f, 0xbc, 0x64, 0x0, 0x5, 0x4, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x3f}, {[@timestamp={0x44, 0x10, 0x33, 0x0, 0x3, [0x8, 0x2, 0x401]}, @timestamp_addr={0x44, 0xc, 0xd3, 0x1, 0xd, [{@remote, 0xfffffffa}]}, @lsrr={0x83, 0x7, 0xe0, [@private=0xa010101]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x2c, 0xe6, 0x3, 0xc, [{@broadcast, 0xfffff60d}, {@broadcast, 0xe3f}, {@private=0xa010102, 0x1}, {@remote, 0x8}, {@empty, 0x2b}]}, @end, @generic={0x89, 0x10, "e0a7e8a128feb3b1009e684877a5"}, @cipso={0x86, 0x34, 0x0, [{0x6, 0x9, "0d94d88bf13ed2"}, {0x2, 0x8, "6858c1e7953f"}, {0x7, 0xf, "e068820f9688ffc6c3d2fdfec6"}, {0x7, 0xe, "794ca5534be4384cfb10ed55"}]}, @lsrr={0x83, 0xf, 0xe8, [@rand_addr=0x64010100, @multicast2, @broadcast]}, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000980)={'ip6_vti0\x00', &(0x7f0000000900)={'ip6gre0\x00', 0x0, 0x2f, 0x56, 0x7, 0x8001, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2, 0x8, 0x10, 0xe}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000c40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000c00)={&(0x7f00000009c0)={0x140, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000009}, 0x40) r20 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r20, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)="d800000018008103e00312ba0d8105040a600300ff0f040b067c55a1bc000900b80006990700000015000500fef32702d3001500030001400200000901ac040098007f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b66bce0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f00000e970300"/216, 0xd8}], 0x1}, 0x48002) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount$9p_fd(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='trans=f']) kernel console output (not intermixed with test programs): or' [ 62.149034][ T29] audit: type=1400 audit(1744850555.486:1349): avc: denied { create } for pid=4933 comm="syz.6.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.170232][ T4934] __nla_validate_parse: 3 callbacks suppressed [ 62.170249][ T4934] netlink: 24 bytes leftover after parsing attributes in process `syz.6.310'. [ 62.207006][ T29] audit: type=1400 audit(1744850555.506:1350): avc: denied { ioctl } for pid=4933 comm="syz.6.310" path="socket:[9520]" dev="sockfs" ino=9520 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 62.240748][ T4942] netlink: 4 bytes leftover after parsing attributes in process `syz.6.310'. [ 62.247326][ T4934] bond0: option ad_select: unable to set because the bond device is up [ 62.262961][ T29] audit: type=1400 audit(1744850555.606:1351): avc: denied { map } for pid=4937 comm="syz.1.312" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9525 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 62.288570][ T29] audit: type=1400 audit(1744850555.606:1352): avc: denied { read write } for pid=4937 comm="syz.1.312" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9525 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 62.654322][ T29] audit: type=1400 audit(1744850555.666:1353): avc: denied { write } for pid=4933 comm="syz.6.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.740237][ T4859] chnl_net:caif_netlink_parms(): no params data found [ 62.783099][ T29] audit: type=1400 audit(1744850556.126:1354): avc: denied { unmount } for pid=4633 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 62.883279][ T4859] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.890462][ T4859] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.898519][ T29] audit: type=1400 audit(1744850556.236:1355): avc: denied { create } for pid=4962 comm="syz.6.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 62.917232][ T4859] bridge_slave_0: entered allmulticast mode [ 62.920761][ T29] audit: type=1400 audit(1744850556.256:1356): avc: denied { wake_alarm } for pid=4962 comm="syz.6.319" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 62.946747][ T29] audit: type=1400 audit(1744850556.256:1357): avc: denied { read } for pid=4962 comm="syz.6.319" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 62.971063][ T4859] bridge_slave_0: entered promiscuous mode [ 63.027753][ T4859] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.035042][ T4859] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.043512][ T4859] bridge_slave_1: entered allmulticast mode [ 63.056802][ T4859] bridge_slave_1: entered promiscuous mode [ 63.095966][ T4859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.118607][ T4859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.153258][ T4859] team0: Port device team_slave_0 added [ 63.160954][ T4974] loop4: detected capacity change from 0 to 2048 [ 63.162698][ T4859] team0: Port device team_slave_1 added [ 63.189693][ T4859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.196776][ T4859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.223365][ T4859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.235861][ T4859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.243363][ T4859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.269757][ T4859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.285984][ T4974] ------------[ cut here ]------------ [ 63.292676][ T4974] Please remove unsupported % in format string [ 63.300459][ T4974] WARNING: CPU: 1 PID: 4974 at lib/vsprintf.c:2702 format_decode+0x526/0x540 [ 63.309429][ T4974] Modules linked in: [ 63.313417][ T4974] CPU: 1 UID: 0 PID: 4974 Comm: syz.4.323 Not tainted 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 63.325980][ T4974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 63.336238][ T4974] RIP: 0010:format_decode+0x526/0x540 [ 63.341699][ T4974] Code: 8f d3 86 e8 8c b0 09 fc c6 05 1d 88 6f 01 01 90 4c 89 e7 e8 ec ae 09 fc 41 0f b6 34 24 48 c7 c7 8c 54 60 86 e8 2b 7e d0 fb 90 <0f> 0b 90 90 e9 cf fd ff ff e8 4c 94 ef fb 4d 89 e6 e9 ab fc ff ff [ 63.361465][ T4974] RSP: 0018:ffffc90000f9ba58 EFLAGS: 00010246 [ 63.368347][ T4974] RAX: 25138ed2ac9abc00 RBX: ffffc90000f9bad9 RCX: 0000000000080000 [ 63.376902][ T4974] RDX: ffffc90006959000 RSI: 0000000000001437 RDI: 0000000000001438 [ 63.384940][ T4974] RBP: 0000000000000000 R08: ffffffff8134874b R09: 0000000000000000 [ 63.393135][ T4974] R10: 0001ffffffffffff R11: ffff888108b9b180 R12: ffffc90000f9bbb4 [ 63.401415][ T4974] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc90000f9bad8 [ 63.409649][ T4974] FS: 00007ff8ba7f76c0(0000) GS:ffff8882aef23000(0000) knlGS:0000000000000000 [ 63.418646][ T4974] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 63.425473][ T4974] CR2: 0000001b32611ff8 CR3: 00000001257ee000 CR4: 00000000003506f0 [ 63.434101][ T4974] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 63.443156][ T4974] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 63.451370][ T4974] Call Trace: [ 63.454898][ T4974] [ 63.458040][ T4974] bstr_printf+0xb4/0x6f0 [ 63.462730][ T4974] ? bpf_test_run+0x1d8/0x4a0 [ 63.467468][ T4974] bpf_trace_printk+0xbf/0x1e0 [ 63.472406][ T4974] ? find_stack+0xcf/0x170 [ 63.476860][ T4974] ? bpf_test_run+0x1d8/0x4a0 [ 63.481615][ T4974] bpf_prog_12183cdb1cd51dab+0x37/0x3b [ 63.487247][ T4974] bpf_test_run+0x1e7/0x4a0 [ 63.491998][ T4974] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 63.498119][ T4974] ? bpf_test_run+0x106/0x4a0 [ 63.502946][ T4974] bpf_prog_test_run_skb+0x857/0xbe0 [ 63.508624][ T4974] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 63.514511][ T4974] bpf_prog_test_run+0x20e/0x3a0 [ 63.519671][ T4974] __sys_bpf+0x440/0x800 [ 63.524064][ T4974] __x64_sys_bpf+0x43/0x50 [ 63.528690][ T4974] x64_sys_call+0x23da/0x2e10 [ 63.533466][ T4974] do_syscall_64+0xc9/0x1c0 [ 63.538379][ T4974] ? clear_bhb_loop+0x25/0x80 [ 63.543111][ T4974] ? clear_bhb_loop+0x25/0x80 [ 63.547817][ T4974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.553808][ T4974] RIP: 0033:0x7ff8bc18e169 [ 63.558255][ T4974] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 63.577980][ T4974] RSP: 002b:00007ff8ba7f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 63.586564][ T4974] RAX: ffffffffffffffda RBX: 00007ff8bc3b5fa0 RCX: 00007ff8bc18e169 [ 63.594714][ T4974] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 000000000000000a [ 63.602833][ T4974] RBP: 00007ff8bc210a68 R08: 0000000000000000 R09: 0000000000000000 [ 63.611026][ T4974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.619037][ T4974] R13: 0000000000000000 R14: 00007ff8bc3b5fa0 R15: 00007fffbac62088 [ 63.627444][ T4974] [ 63.630522][ T4974] ---[ end trace 0000000000000000 ]--- [ 63.662909][ T4859] hsr_slave_0: entered promiscuous mode [ 63.672581][ T4859] hsr_slave_1: entered promiscuous mode [ 63.683450][ T4980] SELinux: ebitmap: map size 1867778 does not match my size 64 (high bit was 131073) [ 63.685301][ T4859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.702976][ T4980] SELinux: failed to load policy [ 63.708774][ T4980] xt_hashlimit: max too large, truncated to 1048576 [ 63.716018][ T4859] Cannot create hsr debugfs directory [ 63.727812][ T4980] Cannot find set identified by id 0 to match [ 63.790810][ T4980] loop1: detected capacity change from 0 to 512 [ 63.813081][ T4980] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 63.822320][ T4980] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 63.842798][ T4989] loop6: detected capacity change from 0 to 1024 [ 63.853752][ T4989] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 63.861522][ T4990] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4990 comm=syz.4.329 [ 63.862660][ T4989] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 63.887716][ T4989] EXT4-fs (loop6): corrupt root inode, run e2fsck [ 63.894663][ T4989] EXT4-fs (loop6): mount failed [ 63.919409][ T4859] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 63.952879][ T4859] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 63.960187][ T4996] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=4996 comm=syz.6.331 [ 63.977305][ T4859] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 64.017918][ T4994] loop1: detected capacity change from 0 to 512 [ 64.030764][ T4994] EXT4-fs: Ignoring removed orlov option [ 64.032270][ T4859] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 64.084878][ T4994] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.330: corrupted in-inode xattr: invalid ea_ino [ 64.112859][ T4994] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.330: couldn't read orphan inode 15 (err -117) [ 64.137540][ T4994] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 64.164075][ T5003] netlink: 28 bytes leftover after parsing attributes in process `syz.4.333'. [ 64.177551][ T5006] netlink: 28 bytes leftover after parsing attributes in process `syz.6.335'. [ 64.185330][ T4994] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.330: bg 0: block 411: padding at end of block bitmap is not set [ 64.237407][ T4859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.253052][ T5006] netlink: 4 bytes leftover after parsing attributes in process `syz.6.335'. [ 64.266094][ T5006] netlink: 4 bytes leftover after parsing attributes in process `syz.6.335'. [ 64.278155][ T5006] netlink: 4 bytes leftover after parsing attributes in process `syz.6.335'. [ 64.296838][ T4859] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.310054][ T4150] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.317380][ T4150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.336421][ T5019] FAULT_INJECTION: forcing a failure. [ 64.336421][ T5019] name failslab, interval 1, probability 0, space 0, times 0 [ 64.349252][ T5019] CPU: 0 UID: 0 PID: 5019 Comm: syz.4.339 Tainted: G W 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 64.349288][ T5019] Tainted: [W]=WARN [ 64.349296][ T5019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 64.349310][ T5019] Call Trace: [ 64.349318][ T5019] [ 64.349326][ T5019] dump_stack_lvl+0xf6/0x150 [ 64.349352][ T5019] dump_stack+0x15/0x1a [ 64.349375][ T5019] should_fail_ex+0x261/0x270 [ 64.349403][ T5019] should_failslab+0x8f/0xb0 [ 64.349435][ T5019] __kmalloc_cache_noprof+0x55/0x320 [ 64.349461][ T5019] ? nf_tables_newtable+0x3c5/0xf10 [ 64.349570][ T5019] nf_tables_newtable+0x3c5/0xf10 [ 64.349609][ T5019] nfnetlink_rcv+0xb6e/0x1610 [ 64.349657][ T5019] ? __kfree_skb+0x102/0x150 [ 64.349718][ T5019] netlink_unicast+0x605/0x6c0 [ 64.349747][ T5019] netlink_sendmsg+0x609/0x720 [ 64.349781][ T5019] ? __pfx_netlink_sendmsg+0x10/0x10 [ 64.349870][ T5019] __sock_sendmsg+0x140/0x180 [ 64.349889][ T5019] ____sys_sendmsg+0x350/0x4e0 [ 64.349996][ T5019] __sys_sendmsg+0x1a0/0x240 [ 64.350043][ T5019] __x64_sys_sendmsg+0x46/0x50 [ 64.350110][ T5019] x64_sys_call+0x26f3/0x2e10 [ 64.350175][ T5019] do_syscall_64+0xc9/0x1c0 [ 64.350207][ T5019] ? clear_bhb_loop+0x25/0x80 [ 64.350228][ T5019] ? clear_bhb_loop+0x25/0x80 [ 64.350272][ T5019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.350293][ T5019] RIP: 0033:0x7ff8bc18e169 [ 64.350307][ T5019] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.350334][ T5019] RSP: 002b:00007ff8ba7f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 64.350357][ T5019] RAX: ffffffffffffffda RBX: 00007ff8bc3b5fa0 RCX: 00007ff8bc18e169 [ 64.350370][ T5019] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 64.350383][ T5019] RBP: 00007ff8ba7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 64.350396][ T5019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.350409][ T5019] R13: 0000000000000000 R14: 00007ff8bc3b5fa0 R15: 00007fffbac62088 [ 64.350429][ T5019] [ 64.610051][ T3536] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.618180][ T3536] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.628561][ T5006] netlink: 4 bytes leftover after parsing attributes in process `syz.6.335'. [ 64.641517][ T5006] netlink: 4 bytes leftover after parsing attributes in process `syz.6.335'. [ 64.669964][ T4859] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.682112][ T5006] netlink: 4 bytes leftover after parsing attributes in process `syz.6.335'. [ 64.738729][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.777605][ T4859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.791191][ T5029] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5029 comm=+}[@ [ 64.825978][ T5027] loop4: detected capacity change from 0 to 128 [ 65.019439][ T5027] loop4: detected capacity change from 0 to 1024 [ 65.074722][ T5027] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm syz.4.341: Failed to acquire dquot type 0 [ 65.093344][ T4859] veth0_vlan: entered promiscuous mode [ 65.103102][ T4859] veth1_vlan: entered promiscuous mode [ 65.113896][ T5027] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 65.157606][ T4859] veth0_macvtap: entered promiscuous mode [ 65.175509][ T5027] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.341: corrupted inode contents [ 65.196110][ T4859] veth1_macvtap: entered promiscuous mode [ 65.213375][ T5027] EXT4-fs error (device loop4): ext4_dirty_inode:6103: inode #13: comm syz.4.341: mark_inode_dirty error [ 65.221743][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.235906][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.245944][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.256621][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.266454][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.276933][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.286866][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.291892][ T5027] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.341: corrupted inode contents [ 65.297357][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.297382][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.297398][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.344362][ T4859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.346786][ T5027] EXT4-fs error (device loop4): __ext4_ext_dirty:207: inode #13: comm syz.4.341: mark_inode_dirty error [ 65.353521][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.376494][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.386743][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.397426][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.407387][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.417993][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.428376][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.439107][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.449300][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.459888][ T5027] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.341: corrupted inode contents [ 65.460598][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.460620][ T4859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.460657][ T4859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.462159][ T4859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.510666][ T5027] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 65.519899][ T4859] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.529695][ T4859] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.530002][ T5056] loop6: detected capacity change from 0 to 1024 [ 65.538647][ T4859] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.554413][ T4859] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.565980][ T5027] EXT4-fs error (device loop4): ext4_do_update_inode:5211: inode #13: comm syz.4.341: corrupted inode contents [ 65.601892][ T5056] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 65.613572][ T5056] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 65.619523][ T5027] EXT4-fs error (device loop4): ext4_truncate:4255: inode #13: comm syz.4.341: mark_inode_dirty error [ 65.636120][ T5056] JBD2: no valid journal superblock found [ 65.636134][ T5056] EXT4-fs (loop6): Could not load journal inode [ 65.660100][ T5027] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 65.685772][ T5027] EXT4-fs (loop4): 1 truncate cleaned up [ 65.699510][ T5027] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.732306][ T5064] loop7: detected capacity change from 0 to 1024 [ 65.778299][ T5064] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 65.795438][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.804820][ T5064] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.855497][ T4859] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.929840][ T5075] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5075 comm=+}[@ [ 65.999161][ T5081] loop7: detected capacity change from 0 to 1024 [ 66.018029][ T5081] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 66.032760][ T5081] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 66.032889][ T5084] sd 0:0:1:0: device reset [ 66.047940][ T5081] EXT4-fs (loop7): orphan cleanup on readonly fs [ 66.057462][ T5081] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 66.078460][ T5081] EXT4-fs error (device loop7): ext4_dirty_inode:6103: inode #3: comm syz.7.355: mark_inode_dirty error [ 66.091164][ T5082] FAULT_INJECTION: forcing a failure. [ 66.091164][ T5082] name failslab, interval 1, probability 0, space 0, times 0 [ 66.092847][ T5081] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.355: Invalid block bitmap block 3 in block_group 0 [ 66.104182][ T5082] CPU: 1 UID: 0 PID: 5082 Comm: syz.6.354 Tainted: G W 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 66.104276][ T5082] Tainted: [W]=WARN [ 66.104282][ T5082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 66.104293][ T5082] Call Trace: [ 66.104299][ T5082] [ 66.104306][ T5082] dump_stack_lvl+0xf6/0x150 [ 66.104335][ T5082] dump_stack+0x15/0x1a [ 66.104355][ T5082] should_fail_ex+0x261/0x270 [ 66.104392][ T5082] should_failslab+0x8f/0xb0 [ 66.104493][ T5082] kmem_cache_alloc_noprof+0x59/0x340 [ 66.104610][ T5082] ? __kernfs_new_node+0x6d/0x380 [ 66.104637][ T5082] ? kstrdup+0x87/0xd0 [ 66.104666][ T5082] __kernfs_new_node+0x6d/0x380 [ 66.104689][ T5082] ? mod_objcg_state+0x3f9/0x530 [ 66.104894][ T5082] ? obj_cgroup_charge+0xc9/0x170 [ 66.104926][ T5082] ? down_read+0x173/0x4c0 [ 66.104972][ T5082] kernfs_new_node+0xd7/0x150 [ 66.105024][ T5082] kernfs_create_link+0x6c/0x120 [ 66.105091][ T5082] sysfs_do_create_link_sd+0x6b/0xf0 [ 66.105187][ T5082] sysfs_create_link+0x51/0x70 [ 66.105224][ T5082] driver_sysfs_add+0x54/0x160 [ 66.105250][ T5082] really_probe+0x101/0x5d0 [ 66.105336][ T5082] __driver_probe_device+0x12d/0x200 [ 66.105368][ T5082] driver_probe_device+0x38/0x2f0 [ 66.105404][ T5082] __device_attach_driver+0x216/0x320 [ 66.105477][ T5082] ? __pfx___device_attach_driver+0x10/0x10 [ 66.105509][ T5082] bus_for_each_drv+0x1cf/0x250 [ 66.105645][ T5082] __device_attach+0x1d6/0x2b0 [ 66.105675][ T5082] device_attach+0x17/0x20 [ 66.105707][ T5082] proc_ioctl+0x343/0x420 [ 66.105751][ T5082] usbdev_ioctl+0x1dd6/0x3e70 [ 66.105824][ T5082] ? do_vfs_ioctl+0x977/0x1570 [ 66.105862][ T5082] ? selinux_file_ioctl+0x2f9/0x380 [ 66.106005][ T5082] ? __fget_files+0x186/0x1c0 [ 66.106094][ T5082] ? __pfx_usbdev_ioctl+0x10/0x10 [ 66.106130][ T5082] __se_sys_ioctl+0xc9/0x140 [ 66.106196][ T5082] __x64_sys_ioctl+0x43/0x50 [ 66.106248][ T5082] x64_sys_call+0x168d/0x2e10 [ 66.106278][ T5082] do_syscall_64+0xc9/0x1c0 [ 66.106317][ T5082] ? clear_bhb_loop+0x25/0x80 [ 66.106345][ T5082] ? clear_bhb_loop+0x25/0x80 [ 66.106372][ T5082] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.106407][ T5082] RIP: 0033:0x7fd1c06de169 [ 66.106428][ T5082] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 66.106449][ T5082] RSP: 002b:00007fd1bed47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.106473][ T5082] RAX: ffffffffffffffda RBX: 00007fd1c0905fa0 RCX: 00007fd1c06de169 [ 66.106488][ T5082] RDX: 0000200000000040 RSI: 00000000c0105512 RDI: 0000000000000003 [ 66.106503][ T5082] RBP: 00007fd1bed47090 R08: 0000000000000000 R09: 0000000000000000 [ 66.106518][ T5082] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 66.106533][ T5082] R13: 0000000000000000 R14: 00007fd1c0905fa0 R15: 00007fff72f0a748 [ 66.106650][ T5082] [ 66.106671][ T5082] hub 2-0:1.0: really_probe: driver_sysfs_add failed [ 66.127487][ T5081] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.355: Invalid block bitmap block 3 in block_group 0 [ 66.443266][ T5091] loop3: detected capacity change from 0 to 256 [ 66.475442][ T5081] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.355: Invalid block bitmap block 3 in block_group 0 [ 66.548567][ T5081] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 66.549251][ T5096] sd 0:0:1:0: device reset [ 66.571243][ T5081] EXT4-fs error (device loop7): ext4_dirty_inode:6103: inode #3: comm syz.7.355: mark_inode_dirty error [ 66.905220][ T5108] loop6: detected capacity change from 0 to 2048 [ 66.913887][ T5081] EXT4-fs error (device loop7): ext4_map_blocks:675: inode #3: block 1: comm syz.7.355: lblock 6 mapped to illegal pblock 1 (length 1) [ 67.004793][ T5108] ext4: Unknown parameter 'noacl' [ 67.022410][ T5081] EXT4-fs error (device loop7): ext4_map_blocks:675: inode #3: block 48: comm syz.7.355: lblock 0 mapped to illegal pblock 48 (length 1) [ 67.055531][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 67.055548][ T29] audit: type=1326 audit(2000000002.070:1490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5104 comm="syz.6.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c06de169 code=0x7ffc0000 [ 67.087930][ T5081] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 67.097028][ T5081] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.355: Failed to acquire dquot type 0 [ 67.106178][ T29] audit: type=1326 audit(2000000002.100:1491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5111 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8bc18e169 code=0x7ffc0000 [ 67.132512][ T29] audit: type=1326 audit(2000000002.100:1492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5111 comm="syz.4.366" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff8bc18e169 code=0x7ffc0000 [ 67.156068][ T29] audit: type=1326 audit(2000000002.100:1493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5104 comm="syz.6.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd1c06de169 code=0x7ffc0000 [ 67.179398][ T29] audit: type=1326 audit(2000000002.100:1494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5104 comm="syz.6.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c06de169 code=0x7ffc0000 [ 67.205948][ T29] audit: type=1326 audit(2000000002.100:1495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5104 comm="syz.6.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1c06de169 code=0x7ffc0000 [ 67.232497][ T29] audit: type=1326 audit(2000000002.100:1496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5104 comm="syz.6.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c06de169 code=0x7ffc0000 [ 67.256121][ T29] audit: type=1326 audit(2000000002.100:1497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5104 comm="syz.6.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1c06de169 code=0x7ffc0000 [ 67.279945][ T29] audit: type=1326 audit(2000000002.100:1498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5104 comm="syz.6.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1c06de169 code=0x7ffc0000 [ 67.309351][ T5115] FAULT_INJECTION: forcing a failure. [ 67.309351][ T5115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.322662][ T5115] CPU: 1 UID: 0 PID: 5115 Comm: syz.1.367 Tainted: G W 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 67.322749][ T5115] Tainted: [W]=WARN [ 67.322757][ T5115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 67.322871][ T5115] Call Trace: [ 67.322878][ T5115] [ 67.322887][ T5115] dump_stack_lvl+0xf6/0x150 [ 67.322914][ T5115] dump_stack+0x15/0x1a [ 67.322934][ T5115] should_fail_ex+0x261/0x270 [ 67.323057][ T5115] should_fail+0xb/0x10 [ 67.323085][ T5115] should_fail_usercopy+0x1a/0x20 [ 67.323118][ T5115] _copy_from_user+0x1c/0xa0 [ 67.323186][ T5115] memdup_user+0x6b/0xd0 [ 67.323213][ T5115] strndup_user+0x68/0xa0 [ 67.323240][ T5115] __se_sys_mount+0x50/0x2e0 [ 67.323277][ T5115] ? fput+0x99/0xd0 [ 67.323301][ T5115] ? ksys_write+0x180/0x1b0 [ 67.323357][ T5115] __x64_sys_mount+0x67/0x80 [ 67.323394][ T5115] x64_sys_call+0xd11/0x2e10 [ 67.323419][ T5115] do_syscall_64+0xc9/0x1c0 [ 67.323481][ T5115] ? clear_bhb_loop+0x25/0x80 [ 67.323506][ T5115] ? clear_bhb_loop+0x25/0x80 [ 67.323625][ T5115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.323650][ T5115] RIP: 0033:0x7f45d2c5e169 [ 67.323667][ T5115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 67.323717][ T5115] RSP: 002b:00007f45d12c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 67.323738][ T5115] RAX: ffffffffffffffda RBX: 00007f45d2e85fa0 RCX: 00007f45d2c5e169 [ 67.323752][ T5115] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000000000000000 [ 67.323766][ T5115] RBP: 00007f45d12c7090 R08: 0000200000000680 R09: 0000000000000000 [ 67.323779][ T5115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 67.323828][ T5115] R13: 0000000000000000 R14: 00007f45d2e85fa0 R15: 00007ffc8ee5b198 [ 67.323849][ T5115] [ 67.324188][ T5081] EXT4-fs error (device loop7): ext4_map_blocks:675: inode #3: block 49: comm syz.7.355: lblock 1 mapped to illegal pblock 49 (length 1) [ 67.402527][ T5112] loop4: detected capacity change from 0 to 2048 [ 67.508196][ T5081] EXT4-fs error (device loop7): ext4_acquire_dquot:6935: comm syz.7.355: Failed to acquire dquot type 0 [ 67.527917][ T5118] __nla_validate_parse: 6 callbacks suppressed [ 67.527937][ T5118] netlink: 8 bytes leftover after parsing attributes in process `syz.6.369'. [ 67.567417][ T5081] EXT4-fs error (device loop7) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 67.585181][ T5118] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.596099][ T5081] EXT4-fs error (device loop7): ext4_evict_inode:259: inode #15: comm syz.7.355: mark_inode_dirty error [ 67.620050][ T5081] EXT4-fs warning (device loop7): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 67.621714][ T5112] EXT4-fs (loop4): failed to initialize system zone (-117) [ 67.631072][ T5081] EXT4-fs (loop7): 1 orphan inode deleted [ 67.644776][ T5081] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 67.648561][ T5112] EXT4-fs (loop4): mount failed [ 67.670004][ T5126] netlink: 4 bytes leftover after parsing attributes in process `syz.1.371'. [ 67.694519][ T5081] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 67.711894][ T5081] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 67.721615][ T5118] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.757985][ T5131] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 67.765935][ T5133] loop3: detected capacity change from 0 to 2048 [ 67.773841][ T5131] EXT4-fs error (device loop7): __ext4_remount:6738: comm syz.7.355: Abort forced by user [ 67.777319][ T5133] ext4: Unknown parameter 'noacl' [ 67.787326][ T5131] EXT4-fs (loop7): Remounting filesystem read-only [ 67.795455][ T5131] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 67.812579][ T5118] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.837562][ T5139] loop4: detected capacity change from 0 to 512 [ 67.853419][ T5139] EXT4-fs (loop4): 1 orphan inode deleted [ 67.865080][ T5138] loop1: detected capacity change from 0 to 2048 [ 67.870031][ T5139] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.874985][ T5138] ext4: Unknown parameter 'noacl' [ 67.884355][ T4126] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:23: Failed to release dquot type 1 [ 67.905937][ T5081] syz.7.355 (5081) used greatest stack depth: 8840 bytes left [ 67.921386][ T5118] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.940888][ T5139] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.967384][ T5135] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.008153][ T5118] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.023470][ T5118] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.038080][ T5118] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.046734][ T5143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.378'. [ 68.062552][ T5118] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.082523][ T5147] usb usb1: usbfs: process 5147 (syz.1.380) did not claim interface 63 before use [ 68.123207][ T5149] loop3: detected capacity change from 0 to 512 [ 68.131293][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.140920][ T4126] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:23: Failed to release dquot type 1 [ 68.153583][ T5149] EXT4-fs: Ignoring removed nobh option [ 68.163364][ T5149] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 68.174779][ T5149] EXT4-fs error (device loop3): ext4_orphan_get:1390: inode #13: comm syz.3.381: casefold flag without casefold feature [ 68.187927][ T5149] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.381: couldn't read orphan inode 13 (err -117) [ 68.213821][ T5149] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.241791][ T5158] netlink: 40 bytes leftover after parsing attributes in process `syz.6.385'. [ 68.272846][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.311343][ T5165] loop4: detected capacity change from 0 to 2048 [ 68.326302][ T5165] ext4: Unknown parameter 'noacl' [ 68.394400][ T5175] loop6: detected capacity change from 0 to 512 [ 68.423253][ T5175] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 68.448928][ T5175] EXT4-fs (loop6): mount failed [ 68.480661][ T5185] usb usb1: usbfs: process 5185 (syz.4.395) did not claim interface 63 before use [ 68.520074][ T5190] program syz.4.398 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 68.548789][ T5194] netlink: 40 bytes leftover after parsing attributes in process `syz.4.400'. [ 68.605667][ T5202] FAULT_INJECTION: forcing a failure. [ 68.605667][ T5202] name failslab, interval 1, probability 0, space 0, times 0 [ 68.618352][ T5202] CPU: 0 UID: 0 PID: 5202 Comm: syz.6.403 Tainted: G W 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 68.618417][ T5202] Tainted: [W]=WARN [ 68.618474][ T5202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 68.618486][ T5202] Call Trace: [ 68.618493][ T5202] [ 68.618502][ T5202] dump_stack_lvl+0xf6/0x150 [ 68.618530][ T5202] dump_stack+0x15/0x1a [ 68.618557][ T5202] should_fail_ex+0x261/0x270 [ 68.618589][ T5202] should_failslab+0x8f/0xb0 [ 68.618619][ T5202] kmem_cache_alloc_noprof+0x59/0x340 [ 68.618640][ T5202] ? __send_signal_locked+0x15d/0x7a0 [ 68.618673][ T5202] __send_signal_locked+0x15d/0x7a0 [ 68.618722][ T5202] send_signal_locked+0x28f/0x3a0 [ 68.618754][ T5202] do_send_sig_info+0x9f/0xf0 [ 68.618861][ T5202] __se_sys_tkill+0x139/0x190 [ 68.618938][ T5202] __x64_sys_tkill+0x31/0x40 [ 68.618965][ T5202] x64_sys_call+0x2214/0x2e10 [ 68.618991][ T5202] do_syscall_64+0xc9/0x1c0 [ 68.619026][ T5202] ? clear_bhb_loop+0x25/0x80 [ 68.619048][ T5202] ? clear_bhb_loop+0x25/0x80 [ 68.619202][ T5202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.619226][ T5202] RIP: 0033:0x7fd1c06de169 [ 68.619241][ T5202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 68.619258][ T5202] RSP: 002b:00007fd1bed47038 EFLAGS: 00000246 ORIG_RAX: 00000000000000c8 [ 68.619278][ T5202] RAX: ffffffffffffffda RBX: 00007fd1c0905fa0 RCX: 00007fd1c06de169 [ 68.619292][ T5202] RDX: 0000000000000000 RSI: 0000000000000014 RDI: 0000000000000049 [ 68.619330][ T5202] RBP: 00007fd1bed47090 R08: 0000000000000000 R09: 0000000000000000 [ 68.619345][ T5202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 68.619360][ T5202] R13: 0000000000000000 R14: 00007fd1c0905fa0 R15: 00007fff72f0a748 [ 68.619423][ T5202] [ 68.811289][ T5201] loop4: detected capacity change from 0 to 2048 [ 68.817930][ T5201] ext4: Unknown parameter 'noacl' [ 68.876238][ T5208] netlink: 20 bytes leftover after parsing attributes in process `syz.6.407'. [ 68.885580][ T5206] loop4: detected capacity change from 0 to 1024 [ 68.894818][ T5206] EXT4-fs: Ignoring removed bh option [ 68.900459][ T5206] EXT4-fs: inline encryption not supported [ 68.906400][ T5206] EXT4-fs: Ignoring removed i_version option [ 68.916446][ T5206] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 68.932592][ T5206] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 2: comm +}[@: lblock 2 mapped to illegal pblock 2 (length 1) [ 68.946378][ T5206] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 48: comm +}[@: lblock 0 mapped to illegal pblock 48 (length 1) [ 68.962643][ T5206] EXT4-fs error (device loop4): ext4_acquire_dquot:6935: comm +}[@: Failed to acquire dquot type 0 [ 68.974032][ T5206] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 68.985791][ T5206] EXT4-fs error (device loop4): ext4_evict_inode:259: inode #11: comm +}[@: mark_inode_dirty error [ 68.996977][ T5206] EXT4-fs warning (device loop4): ext4_evict_inode:262: couldn't mark inode dirty (err -117) [ 69.007714][ T5206] EXT4-fs (loop4): 1 orphan inode deleted [ 69.013971][ T5206] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.028609][ T3819] EXT4-fs error (device loop4): ext4_map_blocks:675: inode #3: block 1: comm kworker/u8:18: lblock 1 mapped to illegal pblock 1 (length 1) [ 69.051326][ T5211] loop1: detected capacity change from 0 to 512 [ 69.055011][ T3819] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:18: Failed to release dquot type 0 [ 69.075635][ T5213] loop6: detected capacity change from 0 to 512 [ 69.082440][ T5213] EXT4-fs: Ignoring removed orlov option [ 69.104330][ T5213] EXT4-fs error (device loop6): ext4_iget_extra_inode:4693: inode #15: comm syz.6.409: corrupted in-inode xattr: invalid ea_ino [ 69.109710][ T5211] EXT4-fs warning (device loop1): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 69.136207][ T5213] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.409: couldn't read orphan inode 15 (err -117) [ 69.151111][ T5211] EXT4-fs (loop1): mount failed [ 69.156801][ T5217] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.168788][ T5213] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.185736][ T5217] EXT4-fs error (device loop4): __ext4_get_inode_loc:4450: comm syz.4.406: Invalid inode table block 1 in block_group 0 [ 69.201679][ T5213] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.409: bg 0: block 411: padding at end of block bitmap is not set [ 69.214582][ T5217] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5899: Corrupt filesystem [ 69.255920][ T5217] EXT4-fs error (device loop4): ext4_quota_off:7219: inode #3: comm syz.4.406: mark_inode_dirty error [ 69.283121][ T4633] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.410285][ T5231] netlink: 40 bytes leftover after parsing attributes in process `syz.3.414'. [ 69.507276][ T5234] FAULT_INJECTION: forcing a failure. [ 69.507276][ T5234] name failslab, interval 1, probability 0, space 0, times 0 [ 69.522788][ T5234] CPU: 0 UID: 0 PID: 5234 Comm: syz.3.416 Tainted: G W 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 69.522826][ T5234] Tainted: [W]=WARN [ 69.522833][ T5234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 69.522847][ T5234] Call Trace: [ 69.522854][ T5234] [ 69.522862][ T5234] dump_stack_lvl+0xf6/0x150 [ 69.522890][ T5234] dump_stack+0x15/0x1a [ 69.522939][ T5234] should_fail_ex+0x261/0x270 [ 69.522972][ T5234] should_failslab+0x8f/0xb0 [ 69.523009][ T5234] __kmalloc_node_track_caller_noprof+0xaa/0x410 [ 69.523081][ T5234] ? kstrdup_const+0x3e/0x50 [ 69.523109][ T5234] kstrdup+0x3d/0xd0 [ 69.523237][ T5234] kstrdup_const+0x3e/0x50 [ 69.523263][ T5234] __kernfs_new_node+0x44/0x380 [ 69.523285][ T5234] ? cgroup_rstat_init+0x4d/0x160 [ 69.523312][ T5234] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 69.523345][ T5234] kernfs_new_node+0xd7/0x150 [ 69.523438][ T5234] kernfs_create_dir_ns+0x43/0xe0 [ 69.523459][ T5234] cgroup_mkdir+0x24c/0xc60 [ 69.523540][ T5234] ? __pfx_cgroup_mkdir+0x10/0x10 [ 69.523565][ T5234] kernfs_iop_mkdir+0x12d/0x1d0 [ 69.523625][ T5234] vfs_mkdir+0x214/0x350 [ 69.523706][ T5234] do_mkdirat+0x13c/0x2e0 [ 69.523741][ T5234] __x64_sys_mkdirat+0x4e/0x60 [ 69.523775][ T5234] x64_sys_call+0x2ce3/0x2e10 [ 69.523864][ T5234] do_syscall_64+0xc9/0x1c0 [ 69.523896][ T5234] ? clear_bhb_loop+0x25/0x80 [ 69.523921][ T5234] ? clear_bhb_loop+0x25/0x80 [ 69.523947][ T5234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.523971][ T5234] RIP: 0033:0x7f403171e169 [ 69.523988][ T5234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.524071][ T5234] RSP: 002b:00007f402fd87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 69.524093][ T5234] RAX: ffffffffffffffda RBX: 00007f4031945fa0 RCX: 00007f403171e169 [ 69.524106][ T5234] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 69.524118][ T5234] RBP: 00007f402fd87090 R08: 0000000000000000 R09: 0000000000000000 [ 69.524129][ T5234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.524147][ T5234] R13: 0000000000000000 R14: 00007f4031945fa0 R15: 00007fff36426cc8 [ 69.524240][ T5234] [ 69.527937][ T5238] loop4: detected capacity change from 0 to 2048 [ 69.775606][ T5238] ext4: Unknown parameter 'noacl' [ 69.857921][ T5244] FAULT_INJECTION: forcing a failure. [ 69.857921][ T5244] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.871152][ T5244] CPU: 0 UID: 0 PID: 5244 Comm: syz.3.419 Tainted: G W 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 69.871192][ T5244] Tainted: [W]=WARN [ 69.871200][ T5244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 69.871216][ T5244] Call Trace: [ 69.871223][ T5244] [ 69.871231][ T5244] dump_stack_lvl+0xf6/0x150 [ 69.871314][ T5244] dump_stack+0x15/0x1a [ 69.871378][ T5244] should_fail_ex+0x261/0x270 [ 69.871412][ T5244] should_fail+0xb/0x10 [ 69.871480][ T5244] should_fail_usercopy+0x1a/0x20 [ 69.871512][ T5244] _copy_to_user+0x20/0xa0 [ 69.871551][ T5244] copy_siginfo_to_user+0x24/0xb0 [ 69.871573][ T5244] x64_setup_rt_frame+0x2bf/0x5a0 [ 69.871643][ T5244] arch_do_signal_or_restart+0x28c/0x4b0 [ 69.871750][ T5244] syscall_exit_to_user_mode+0x62/0x120 [ 69.871802][ T5244] do_syscall_64+0xd6/0x1c0 [ 69.871891][ T5244] ? clear_bhb_loop+0x25/0x80 [ 69.871917][ T5244] ? clear_bhb_loop+0x25/0x80 [ 69.871942][ T5244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.871966][ T5244] RIP: 0033:0x7f403171e167 [ 69.871983][ T5244] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 69.872005][ T5244] RSP: 002b:00007f402fd87038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 69.872028][ T5244] RAX: 0000000000000113 RBX: 00007f4031945fa0 RCX: 00007f403171e169 [ 69.872086][ T5244] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000003 [ 69.872117][ T5244] RBP: 00007f402fd87090 R08: 0000000000000007 R09: 0000000000000009 [ 69.872131][ T5244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 69.872145][ T5244] R13: 0000000000000000 R14: 00007f4031945fa0 R15: 00007fff36426cc8 [ 69.872167][ T5244] [ 70.083690][ T5246] loop6: detected capacity change from 0 to 512 [ 70.134053][ T5246] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 70.165287][ T5246] EXT4-fs (loop6): mount failed [ 70.466572][ T5263] support for the xor transformation has been removed. [ 70.704890][ T5248] netlink: 8 bytes leftover after parsing attributes in process `syz.4.422'. [ 70.717212][ T5248] netlink: 12 bytes leftover after parsing attributes in process `syz.4.422'. [ 70.918977][ T5278] FAULT_INJECTION: forcing a failure. [ 70.918977][ T5278] name failslab, interval 1, probability 0, space 0, times 0 [ 70.931788][ T5278] CPU: 0 UID: 0 PID: 5278 Comm: syz.6.431 Tainted: G W 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 70.931825][ T5278] Tainted: [W]=WARN [ 70.931832][ T5278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 70.931846][ T5278] Call Trace: [ 70.931852][ T5278] [ 70.931859][ T5278] dump_stack_lvl+0xf6/0x150 [ 70.931887][ T5278] dump_stack+0x15/0x1a [ 70.931907][ T5278] should_fail_ex+0x261/0x270 [ 70.932027][ T5278] should_failslab+0x8f/0xb0 [ 70.932065][ T5278] __kvmalloc_node_noprof+0x12c/0x520 [ 70.932089][ T5278] ? bpf_test_run_xdp_live+0xf9/0x1050 [ 70.932117][ T5278] bpf_test_run_xdp_live+0xf9/0x1050 [ 70.932201][ T5278] ? synchronize_rcu_expedited+0x6d5/0x790 [ 70.932231][ T5278] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 70.932298][ T5278] ? __pfx_autoremove_wake_function+0x10/0x10 [ 70.932340][ T5278] ? 0xffffffffa0003e00 [ 70.932353][ T5278] ? synchronize_rcu+0x4a/0x320 [ 70.932374][ T5278] ? 0xffffffffa0003e00 [ 70.932387][ T5278] ? 0xffffffffa0003e00 [ 70.932422][ T5278] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 70.932456][ T5278] bpf_prog_test_run_xdp+0x526/0x8e0 [ 70.932483][ T5278] ? __rcu_read_unlock+0x4e/0x70 [ 70.932517][ T5278] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 70.932601][ T5278] bpf_prog_test_run+0x20e/0x3a0 [ 70.932654][ T5278] __sys_bpf+0x440/0x800 [ 70.932681][ T5278] __x64_sys_bpf+0x43/0x50 [ 70.932703][ T5278] x64_sys_call+0x23da/0x2e10 [ 70.932798][ T5278] do_syscall_64+0xc9/0x1c0 [ 70.932895][ T5278] ? clear_bhb_loop+0x25/0x80 [ 70.932917][ T5278] ? clear_bhb_loop+0x25/0x80 [ 70.932939][ T5278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.932959][ T5278] RIP: 0033:0x7fd1c06de169 [ 70.932973][ T5278] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.933043][ T5278] RSP: 002b:00007fd1bed47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 70.933063][ T5278] RAX: ffffffffffffffda RBX: 00007fd1c0905fa0 RCX: 00007fd1c06de169 [ 70.933077][ T5278] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 70.933189][ T5278] RBP: 00007fd1bed47090 R08: 0000000000000000 R09: 0000000000000000 [ 70.933203][ T5278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.933291][ T5278] R13: 0000000000000000 R14: 00007fd1c0905fa0 R15: 00007fff72f0a748 [ 70.933314][ T5278] [ 71.274305][ T5284] loop6: detected capacity change from 0 to 512 [ 71.313591][ T5284] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 71.332941][ T5284] EXT4-fs (loop6): mount failed [ 71.354536][ T5288] loop1: detected capacity change from 0 to 2048 [ 71.388888][ T5288] ext4: Unknown parameter 'noacl' [ 71.395542][ T5292] FAULT_INJECTION: forcing a failure. [ 71.395542][ T5292] name failslab, interval 1, probability 0, space 0, times 0 [ 71.408354][ T5292] CPU: 0 UID: 0 PID: 5292 Comm: syz.6.438 Tainted: G W 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 71.408389][ T5292] Tainted: [W]=WARN [ 71.408396][ T5292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 71.408409][ T5292] Call Trace: [ 71.408416][ T5292] [ 71.408458][ T5292] dump_stack_lvl+0xf6/0x150 [ 71.408486][ T5292] dump_stack+0x15/0x1a [ 71.408545][ T5292] should_fail_ex+0x261/0x270 [ 71.408635][ T5292] should_failslab+0x8f/0xb0 [ 71.408672][ T5292] __kmalloc_noprof+0xad/0x410 [ 71.408697][ T5292] ? security_prepare_creds+0x53/0x120 [ 71.408787][ T5292] security_prepare_creds+0x53/0x120 [ 71.408874][ T5292] prepare_creds+0x368/0x4e0 [ 71.408959][ T5292] prepare_exec_creds+0x14/0xe0 [ 71.408987][ T5292] bprm_execve+0x74/0x9c0 [ 71.409021][ T5292] ? copy_string_kernel+0x2be/0x2f0 [ 71.409054][ T5292] do_execveat_common+0x766/0x7e0 [ 71.409122][ T5292] __x64_sys_execve+0x5c/0x70 [ 71.409200][ T5292] x64_sys_call+0x1362/0x2e10 [ 71.409309][ T5292] do_syscall_64+0xc9/0x1c0 [ 71.409413][ T5292] ? clear_bhb_loop+0x25/0x80 [ 71.409439][ T5292] ? clear_bhb_loop+0x25/0x80 [ 71.409464][ T5292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.409514][ T5292] RIP: 0033:0x7fd1c06de169 [ 71.409532][ T5292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.409582][ T5292] RSP: 002b:00007fd1bed47038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 71.409685][ T5292] RAX: ffffffffffffffda RBX: 00007fd1c0905fa0 RCX: 00007fd1c06de169 [ 71.409698][ T5292] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000400 [ 71.409748][ T5292] RBP: 00007fd1bed47090 R08: 0000000000000000 R09: 0000000000000000 [ 71.409762][ T5292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 71.409777][ T5292] R13: 0000000000000000 R14: 00007fd1c0905fa0 R15: 00007fff72f0a748 [ 71.409795][ T5292] [ 71.608597][ T5294] loop4: detected capacity change from 0 to 2048 [ 71.616081][ T5294] ext4: Unknown parameter 'noacl' [ 71.689227][ T5296] loop6: detected capacity change from 0 to 1024 [ 71.728189][ T5296] EXT4-fs warning (device loop6): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 71.812407][ T5304] syz_tun: refused to change device tx_queue_len [ 71.830704][ T5304] netlink: 76 bytes leftover after parsing attributes in process `syz.1.443'. [ 71.853435][ T5296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 71.862781][ T5296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 71.874580][ T5268] chnl_net:caif_netlink_parms(): no params data found [ 71.943889][ T5268] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.951458][ T5268] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.965615][ T5268] bridge_slave_0: entered allmulticast mode [ 71.972631][ T5268] bridge_slave_0: entered promiscuous mode [ 71.979702][ T5268] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.986927][ T5268] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.994332][ T5268] bridge_slave_1: entered allmulticast mode [ 72.000972][ T5268] bridge_slave_1: entered promiscuous mode [ 72.033386][ T5325] loop4: detected capacity change from 0 to 512 [ 72.061822][ T5268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.072379][ T5268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.101299][ T5268] team0: Port device team_slave_0 added [ 72.102980][ T5325] EXT4-fs (loop4): 1 orphan inode deleted [ 72.110052][ T5268] team0: Port device team_slave_1 added [ 72.124493][ T5325] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.137679][ T4160] __quota_error: 554 callbacks suppressed [ 72.137692][ T4160] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 72.153251][ T4160] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:55: Failed to release dquot type 1 [ 72.163077][ T5325] ext4 filesystem being mounted at /123/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.185760][ T5268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.192927][ T5268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.218894][ T5268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.292029][ T5332] support for the xor transformation has been removed. [ 72.416428][ T5268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.423593][ T5268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.450433][ T5268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.559049][ T5337] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5337 comm=+}[@ [ 72.638064][ T29] audit: type=1400 audit(2000000007.650:2042): avc: denied { connect } for pid=5338 comm="syz.3.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 72.674453][ T5268] hsr_slave_0: entered promiscuous mode [ 72.681674][ T5268] hsr_slave_1: entered promiscuous mode [ 72.684630][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.687954][ T5268] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.704398][ T5268] Cannot create hsr debugfs directory [ 72.710677][ T4157] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 72.717639][ T29] audit: type=1326 audit(2000000007.730:2043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5338 comm="syz.3.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403171e169 code=0x7ffc0000 [ 72.720468][ T4157] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:53: Failed to release dquot type 1 [ 72.756520][ T29] audit: type=1326 audit(2000000007.770:2044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5338 comm="syz.3.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403171e169 code=0x7ffc0000 [ 72.875624][ T29] audit: type=1326 audit(2000000007.880:2045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5338 comm="syz.3.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f403171e169 code=0x7ffc0000 [ 72.899301][ T29] audit: type=1326 audit(2000000007.880:2046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5338 comm="syz.3.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403171e169 code=0x7ffc0000 [ 72.923513][ T29] audit: type=1326 audit(2000000007.880:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5338 comm="syz.3.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f403171e169 code=0x7ffc0000 [ 72.947084][ T29] audit: type=1326 audit(2000000007.880:2048): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5338 comm="syz.3.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f403171e169 code=0x7ffc0000 [ 72.970720][ T29] audit: type=1326 audit(2000000007.880:2049): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5338 comm="syz.3.453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f403171e169 code=0x7ffc0000 [ 73.005983][ T5351] sd 0:0:1:0: device reset [ 73.063024][ T5355] loop4: detected capacity change from 0 to 2048 [ 73.073002][ T5359] loop6: detected capacity change from 0 to 512 [ 73.076441][ T5268] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 73.089761][ T5268] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 73.099736][ T5268] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 73.112039][ T5355] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.112664][ T5268] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 73.134602][ T5359] EXT4-fs warning (device loop6): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 73.155559][ T5359] EXT4-fs (loop6): mount failed [ 73.171784][ T5359] usb usb1: usbfs: process 5359 (syz.6.463) did not claim interface 63 before use [ 73.230852][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.247602][ T5268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.279962][ T5268] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.297188][ T4150] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.304370][ T4150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.320275][ T5374] loop6: detected capacity change from 0 to 512 [ 73.334082][ T5374] EXT4-fs: Ignoring removed orlov option [ 73.349636][ T4137] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.356797][ T4137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.378934][ T5374] EXT4-fs error (device loop6): ext4_iget_extra_inode:4693: inode #15: comm syz.6.467: corrupted in-inode xattr: invalid ea_ino [ 73.406663][ T5374] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.467: couldn't read orphan inode 15 (err -117) [ 73.408997][ T5268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.433550][ T5374] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.452209][ T5374] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.467: bg 0: block 411: padding at end of block bitmap is not set [ 73.498590][ T5380] loop4: detected capacity change from 0 to 512 [ 73.530331][ T5380] EXT4-fs: Ignoring removed orlov option [ 73.541695][ T5380] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.469: corrupted in-inode xattr: invalid ea_ino [ 73.563216][ T5380] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.469: couldn't read orphan inode 15 (err -117) [ 73.576401][ T4633] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.588883][ T5380] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.606124][ T5268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.623919][ T5380] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.469: bg 0: block 411: padding at end of block bitmap is not set [ 73.655884][ T5380] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 73.741751][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.766723][ T5397] sd 0:0:1:0: device reset [ 73.800767][ T5405] __nla_validate_parse: 1 callbacks suppressed [ 73.800787][ T5405] netlink: 40 bytes leftover after parsing attributes in process `syz.4.473'. [ 73.829616][ T5402] loop3: detected capacity change from 0 to 512 [ 73.864248][ T5413] loop4: detected capacity change from 0 to 512 [ 73.871669][ T5402] EXT4-fs warning (device loop3): ext4_enable_quotas:7170: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 73.887283][ T5413] EXT4-fs: Ignoring removed orlov option [ 73.887371][ T5268] veth0_vlan: entered promiscuous mode [ 73.899642][ T5402] EXT4-fs (loop3): mount failed [ 73.905672][ T5268] veth1_vlan: entered promiscuous mode [ 73.922408][ T5268] veth0_macvtap: entered promiscuous mode [ 73.923348][ T5413] EXT4-fs error (device loop4): ext4_iget_extra_inode:4693: inode #15: comm syz.4.476: corrupted in-inode xattr: invalid ea_ino [ 73.943011][ T5268] veth1_macvtap: entered promiscuous mode [ 73.950682][ T5413] EXT4-fs error (device loop4): ext4_orphan_get:1395: comm syz.4.476: couldn't read orphan inode 15 (err -117) [ 73.964191][ T5413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.967324][ T5268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.987406][ T5268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.997300][ T5268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.007847][ T5268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.017863][ T5268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.028447][ T5268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.038509][ T5268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.049057][ T5268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.059014][ T5268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.069533][ T5268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.079560][ T5268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.090029][ T5268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.093520][ T5413] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.476: bg 0: block 411: padding at end of block bitmap is not set [ 74.100845][ T5268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.125167][ T5268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.135781][ T5268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.145774][ T5268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.145810][ T5402] usb usb1: usbfs: process 5402 (syz.3.474) did not claim interface 63 before use [ 74.165566][ T5268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.175449][ T5268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.185929][ T5268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.195816][ T5268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.206363][ T5268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.216431][ T5268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.226913][ T5268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.236976][ T5268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.247493][ T5268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.257440][ T5268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.267898][ T5268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.279243][ T5268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.305302][ T5268] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.314147][ T5268] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.322973][ T5268] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.331746][ T5268] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.357004][ T5422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.479'. [ 74.420303][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.499645][ T5427] cgroup: noprefix used incorrectly [ 74.506757][ T5427] lo: entered promiscuous mode [ 74.511606][ T5427] lo: entered allmulticast mode [ 74.587402][ T5439] netlink: 16 bytes leftover after parsing attributes in process `syz.8.429'. [ 74.637153][ T5437] loop6: detected capacity change from 0 to 512 [ 74.659335][ T5449] loop1: detected capacity change from 0 to 512 [ 74.679116][ T5452] loop3: detected capacity change from 0 to 512 [ 74.687926][ T5437] EXT4-fs: Ignoring removed orlov option [ 74.699837][ T5449] EXT4-fs (loop1): 1 orphan inode deleted [ 74.708217][ T5449] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.709613][ T5452] EXT4-fs (loop3): 1 orphan inode deleted [ 74.721245][ T5449] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.726525][ T5437] EXT4-fs error (device loop6): ext4_iget_extra_inode:4693: inode #15: comm syz.6.483: corrupted in-inode xattr: invalid ea_ino [ 74.741130][ T5452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.770004][ T4126] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:23: Failed to release dquot type 1 [ 74.770154][ T5452] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 74.784890][ T5437] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.483: couldn't read orphan inode 15 (err -117) [ 74.824605][ T5437] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.838289][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.847775][ T3819] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:18: Failed to release dquot type 1 [ 74.903681][ T5437] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.483: bg 0: block 411: padding at end of block bitmap is not set [ 74.955721][ T4633] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.988283][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.017919][ T4137] EXT4-fs error (device loop3): ext4_release_dquot:6971: comm kworker/u8:34: Failed to release dquot type 1 [ 75.166407][ T5464] random: crng reseeded on system resumption [ 75.250174][ T5464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.260086][ T5464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.323956][ T5467] loop3: detected capacity change from 0 to 8192 [ 75.343944][ T5467] FAT-fs (loop3): error, fat_free_clusters: deleting FAT entry beyond EOF [ 75.352538][ T5467] FAT-fs (loop3): Filesystem has been set read-only [ 75.413716][ T5475] loop8: detected capacity change from 0 to 2048 [ 75.428174][ T5479] loop1: detected capacity change from 0 to 512 [ 75.435791][ T5479] EXT4-fs: Ignoring removed orlov option [ 75.483177][ T5475] loop8: p1 < > p3 [ 75.486539][ T5479] EXT4-fs error (device loop1): ext4_iget_extra_inode:4693: inode #15: comm syz.1.499: corrupted in-inode xattr: invalid ea_ino [ 75.488312][ T5475] loop8: p3 size 134217728 extends beyond EOD, truncated [ 75.500483][ T5479] EXT4-fs error (device loop1): ext4_orphan_get:1395: comm syz.1.499: couldn't read orphan inode 15 (err -117) [ 75.526080][ T3004] loop8: p1 < > p3 [ 75.530847][ T5479] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.534468][ T3004] loop8: p3 size 134217728 extends beyond EOD, truncated [ 75.545966][ T5481] hub 2-0:1.0: USB hub found [ 75.555498][ T5481] hub 2-0:1.0: 8 ports detected [ 75.601233][ T5485] loop3: detected capacity change from 0 to 512 [ 75.609823][ T5485] EXT4-fs: Ignoring removed orlov option [ 75.644696][ T5479] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.499: bg 0: block 411: padding at end of block bitmap is not set [ 75.645277][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 75.670966][ T3293] udevd[3293]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 75.682798][ T5485] EXT4-fs error (device loop3): ext4_iget_extra_inode:4693: inode #15: comm syz.3.501: corrupted in-inode xattr: invalid ea_ino [ 75.707696][ T5485] EXT4-fs error (device loop3): ext4_orphan_get:1395: comm syz.3.501: couldn't read orphan inode 15 (err -117) [ 75.720270][ T5485] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.743642][ T5485] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.501: bg 0: block 411: padding at end of block bitmap is not set [ 75.760644][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.774835][ T5500] FAULT_INJECTION: forcing a failure. [ 75.774835][ T5500] name failslab, interval 1, probability 0, space 0, times 0 [ 75.787716][ T5500] CPU: 0 UID: 0 PID: 5500 Comm: syz.8.506 Tainted: G W 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 75.787756][ T5500] Tainted: [W]=WARN [ 75.787764][ T5500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 75.787779][ T5500] Call Trace: [ 75.787787][ T5500] [ 75.787796][ T5500] dump_stack_lvl+0xf6/0x150 [ 75.787843][ T5500] dump_stack+0x15/0x1a [ 75.787863][ T5500] should_fail_ex+0x261/0x270 [ 75.787894][ T5500] should_failslab+0x8f/0xb0 [ 75.787932][ T5500] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 75.787960][ T5500] ? __alloc_skb+0x10d/0x320 [ 75.788066][ T5500] ? __rtnl_unlock+0x99/0xb0 [ 75.788095][ T5500] __alloc_skb+0x10d/0x320 [ 75.788123][ T5500] netlink_ack+0xf1/0x4f0 [ 75.788210][ T5500] ? ref_tracker_free+0x3b8/0x420 [ 75.788244][ T5500] netlink_rcv_skb+0x19f/0x230 [ 75.788272][ T5500] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 75.788319][ T5500] rtnetlink_rcv+0x1c/0x30 [ 75.788405][ T5500] netlink_unicast+0x605/0x6c0 [ 75.788434][ T5500] netlink_sendmsg+0x609/0x720 [ 75.788476][ T5500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.788513][ T5500] __sock_sendmsg+0x140/0x180 [ 75.788536][ T5500] ____sys_sendmsg+0x350/0x4e0 [ 75.788578][ T5500] __sys_sendmsg+0x1a0/0x240 [ 75.788625][ T5500] __x64_sys_sendmsg+0x46/0x50 [ 75.788651][ T5500] x64_sys_call+0x26f3/0x2e10 [ 75.788740][ T5500] do_syscall_64+0xc9/0x1c0 [ 75.788770][ T5500] ? clear_bhb_loop+0x25/0x80 [ 75.788790][ T5500] ? clear_bhb_loop+0x25/0x80 [ 75.788811][ T5500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.788831][ T5500] RIP: 0033:0x7f06f6e0e169 [ 75.788910][ T5500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.788928][ T5500] RSP: 002b:00007f06f5477038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.788946][ T5500] RAX: ffffffffffffffda RBX: 00007f06f7035fa0 RCX: 00007f06f6e0e169 [ 75.788957][ T5500] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 75.788969][ T5500] RBP: 00007f06f5477090 R08: 0000000000000000 R09: 0000000000000000 [ 75.788980][ T5500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.789022][ T5500] R13: 0000000000000000 R14: 00007f06f7035fa0 R15: 00007ffdaf286868 [ 75.789040][ T5500] [ 76.077352][ T5511] FAULT_INJECTION: forcing a failure. [ 76.077352][ T5511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 76.091030][ T5511] CPU: 0 UID: 0 PID: 5511 Comm: syz.4.511 Tainted: G W 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 76.091136][ T5511] Tainted: [W]=WARN [ 76.091144][ T5511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 76.091159][ T5511] Call Trace: [ 76.091165][ T5511] [ 76.091174][ T5511] dump_stack_lvl+0xf6/0x150 [ 76.091211][ T5511] dump_stack+0x15/0x1a [ 76.091230][ T5511] should_fail_ex+0x261/0x270 [ 76.091260][ T5511] should_fail+0xb/0x10 [ 76.091286][ T5511] should_fail_usercopy+0x1a/0x20 [ 76.091367][ T5511] _copy_from_user+0x1c/0xa0 [ 76.091403][ T5511] copy_msghdr_from_user+0x54/0x2b0 [ 76.091448][ T5511] ? __fget_files+0x186/0x1c0 [ 76.091470][ T5511] __sys_sendmsg+0x141/0x240 [ 76.091582][ T5511] __x64_sys_sendmsg+0x46/0x50 [ 76.091618][ T5511] x64_sys_call+0x26f3/0x2e10 [ 76.091641][ T5511] do_syscall_64+0xc9/0x1c0 [ 76.091673][ T5511] ? clear_bhb_loop+0x25/0x80 [ 76.091739][ T5511] ? clear_bhb_loop+0x25/0x80 [ 76.091761][ T5511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.091783][ T5511] RIP: 0033:0x7ff8bc18e169 [ 76.091799][ T5511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.091817][ T5511] RSP: 002b:00007ff8ba7f7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 76.091835][ T5511] RAX: ffffffffffffffda RBX: 00007ff8bc3b5fa0 RCX: 00007ff8bc18e169 [ 76.091848][ T5511] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000006 [ 76.091860][ T5511] RBP: 00007ff8ba7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 76.091872][ T5511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.091884][ T5511] R13: 0000000000000000 R14: 00007ff8bc3b5fa0 R15: 00007fffbac62088 [ 76.091901][ T5511] [ 76.097331][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.332839][ T5518] IPv6: NLM_F_CREATE should be specified when creating new route [ 76.428323][ T5527] FAULT_INJECTION: forcing a failure. [ 76.428323][ T5527] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 76.441714][ T5527] CPU: 0 UID: 0 PID: 5527 Comm: syz.1.516 Tainted: G W 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 76.441750][ T5527] Tainted: [W]=WARN [ 76.441827][ T5527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 76.441841][ T5527] Call Trace: [ 76.441848][ T5527] [ 76.441856][ T5527] dump_stack_lvl+0xf6/0x150 [ 76.441884][ T5527] dump_stack+0x15/0x1a [ 76.441963][ T5527] should_fail_ex+0x261/0x270 [ 76.441994][ T5527] should_fail_alloc_page+0xfd/0x110 [ 76.442032][ T5527] __alloc_frozen_pages_noprof+0x11d/0x360 [ 76.442068][ T5527] alloc_pages_mpol+0xb6/0x260 [ 76.442096][ T5527] alloc_pages_noprof+0xe8/0x130 [ 76.442124][ T5527] __pmd_alloc+0x4d/0x440 [ 76.442146][ T5527] handle_mm_fault+0x188d/0x2e80 [ 76.442192][ T5527] exc_page_fault+0x296/0x6a0 [ 76.442294][ T5527] asm_exc_page_fault+0x26/0x30 [ 76.442394][ T5527] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 76.442421][ T5527] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 76.442442][ T5527] RSP: 0018:ffffc9000126fa18 EFLAGS: 00050202 [ 76.442459][ T5527] RAX: ffff8881088c6d98 RBX: 0000200000000040 RCX: 00000000000000f0 [ 76.442550][ T5527] RDX: 0000000000000001 RSI: 0000200000000040 RDI: ffffc9000126fafc [ 76.442565][ T5527] RBP: ffffc9000126fe98 R08: 0000000080000000 R09: 0000000000000000 [ 76.442584][ T5527] R10: 0001c9000126fafc R11: 0001c9000126fbeb R12: ffffc9000126faf8 [ 76.442597][ T5527] R13: ffffc9000126fafc R14: ffffc9000126fafc R15: 00000000000000f0 [ 76.442618][ T5527] _copy_from_user+0x6f/0xa0 [ 76.442702][ T5527] do_sys_poll+0x15e/0xc80 [ 76.442726][ T5527] ? selinux_file_open+0x356/0x3c0 [ 76.442809][ T5527] __se_sys_poll+0xe3/0x200 [ 76.442888][ T5527] __x64_sys_poll+0x43/0x50 [ 76.442922][ T5527] x64_sys_call+0x2c39/0x2e10 [ 76.442947][ T5527] do_syscall_64+0xc9/0x1c0 [ 76.442979][ T5527] ? clear_bhb_loop+0x25/0x80 [ 76.443123][ T5527] ? clear_bhb_loop+0x25/0x80 [ 76.443147][ T5527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.443171][ T5527] RIP: 0033:0x7f45d2c5e169 [ 76.443187][ T5527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.443207][ T5527] RSP: 002b:00007f45d12c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 76.443272][ T5527] RAX: ffffffffffffffda RBX: 00007f45d2e85fa0 RCX: 00007f45d2c5e169 [ 76.443286][ T5527] RDX: 0000000000000000 RSI: 0000000000000055 RDI: 0000200000000040 [ 76.443299][ T5527] RBP: 00007f45d12c7090 R08: 0000000000000000 R09: 0000000000000000 [ 76.443312][ T5527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.443325][ T5527] R13: 0000000000000001 R14: 00007f45d2e85fa0 R15: 00007ffc8ee5b198 [ 76.443345][ T5527] [ 76.748340][ T5525] loop4: detected capacity change from 0 to 8192 [ 76.805773][ T5525] loop4: p1 < > p2 p3 [ 76.806008][ T5528] wg2: entered promiscuous mode [ 76.814878][ T5528] wg2: entered allmulticast mode [ 76.828486][ T5525] loop4: p2 start 14848 is beyond EOD, truncated [ 76.831918][ T5528] syzkaller0: entered allmulticast mode [ 76.834917][ T5525] loop4: p3 size 196608 extends beyond EOD, truncated [ 76.844949][ T5528] syzkaller0: entered promiscuous mode [ 76.856784][ T5528] syzkaller0 (unregistering): left promiscuous mode [ 76.863589][ T5528] syzkaller0 (unregistering): left allmulticast mode [ 76.877425][ T3004] loop4: p1 < > p2 p3 [ 76.882259][ T3004] loop4: p2 start 14848 is beyond EOD, truncated [ 76.888719][ T3004] loop4: p3 size 196608 extends beyond EOD, truncated [ 77.152945][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 77.152959][ T29] audit: type=1326 audit(2000000012.170:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5544 comm="syz.3.521" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f403171e169 code=0x0 [ 77.155741][ T5509] syz.6.510 (5509) used greatest stack depth: 7320 bytes left [ 77.443659][ T5555] support for the xor transformation has been removed. [ 77.685929][ T5559] loop6: detected capacity change from 0 to 2048 [ 77.740795][ T5559] loop6: p1 < > p4 [ 77.746127][ T5559] loop6: p4 size 8388608 extends beyond EOD, truncated [ 77.807123][ T5563] netlink: 20 bytes leftover after parsing attributes in process `syz.1.527'. [ 77.817940][ T29] audit: type=1326 audit(2000000012.830:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5562 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d2c5e169 code=0x7ffc0000 [ 77.841515][ T29] audit: type=1326 audit(2000000012.830:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5562 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d2c5e169 code=0x7ffc0000 [ 77.864879][ T29] audit: type=1326 audit(2000000012.830:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5562 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f45d2c5e169 code=0x7ffc0000 [ 77.888467][ T29] audit: type=1326 audit(2000000012.830:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5562 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d2c5e169 code=0x7ffc0000 [ 77.911889][ T29] audit: type=1326 audit(2000000012.830:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5562 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d2c5e169 code=0x7ffc0000 [ 77.935365][ T29] audit: type=1326 audit(2000000012.830:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5562 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f45d2c5cad0 code=0x7ffc0000 [ 77.958711][ T29] audit: type=1326 audit(2000000012.830:2197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5562 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f45d2c5cad0 code=0x7ffc0000 [ 77.968033][ T5566] cgroup: noprefix used incorrectly [ 77.982131][ T29] audit: type=1326 audit(2000000012.830:2198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5562 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d2c5e169 code=0x7ffc0000 [ 77.982170][ T29] audit: type=1326 audit(2000000012.830:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5562 comm="syz.1.527" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f45d2c5e169 code=0x7ffc0000 [ 78.131294][ T5566] netlink: 4 bytes leftover after parsing attributes in process `syz.4.528'. [ 78.143174][ T5571] loop1: detected capacity change from 0 to 128 [ 78.161126][ T5571] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 78.265842][ T5581] loop6: detected capacity change from 0 to 512 [ 78.284807][ T5582] xt_CT: No such helper "snmp_trap" [ 78.300279][ T5582] IPv6: NLM_F_CREATE should be specified when creating new route [ 78.310900][ T5581] EXT4-fs (loop6): 1 orphan inode deleted [ 78.317167][ T5581] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.324199][ T5571] syz.1.531: attempt to access beyond end of device [ 78.324199][ T5571] loop1: rw=3, sector=33518, nr_sectors = 2 limit=128 [ 78.343699][ T5571] syz.1.531: attempt to access beyond end of device [ 78.343699][ T5571] loop1: rw=2051, sector=33520, nr_sectors = 32742 limit=128 [ 78.346700][ T5581] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.359478][ T4150] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:47: Failed to release dquot type 1 [ 78.618605][ T5590] rdma_rxe: rxe_newlink: failed to add vcan0 [ 78.659762][ T4150] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 78.792738][ T5592] sd 0:0:1:0: device reset [ 78.863543][ T5599] FAULT_INJECTION: forcing a failure. [ 78.863543][ T5599] name failslab, interval 1, probability 0, space 0, times 0 [ 78.876400][ T5599] CPU: 0 UID: 0 PID: 5599 Comm: syz.4.540 Tainted: G W 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 78.876440][ T5599] Tainted: [W]=WARN [ 78.876448][ T5599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 78.876506][ T5599] Call Trace: [ 78.876513][ T5599] [ 78.876529][ T5599] dump_stack_lvl+0xf6/0x150 [ 78.876559][ T5599] dump_stack+0x15/0x1a [ 78.876580][ T5599] should_fail_ex+0x261/0x270 [ 78.876624][ T5599] should_failslab+0x8f/0xb0 [ 78.876655][ T5599] __kvmalloc_node_noprof+0x12c/0x520 [ 78.876702][ T5599] ? bpf_test_run_xdp_live+0x120/0x1050 [ 78.876736][ T5599] bpf_test_run_xdp_live+0x120/0x1050 [ 78.876786][ T5599] ? synchronize_rcu_expedited+0x6d5/0x790 [ 78.876816][ T5599] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 78.876855][ T5599] ? __pfx_autoremove_wake_function+0x10/0x10 [ 78.876887][ T5599] ? 0xffffffffa0003e00 [ 78.876904][ T5599] ? synchronize_rcu+0x4a/0x320 [ 78.876980][ T5599] ? 0xffffffffa0003e00 [ 78.876998][ T5599] ? 0xffffffffa0003e00 [ 78.877026][ T5599] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 78.877069][ T5599] bpf_prog_test_run_xdp+0x526/0x8e0 [ 78.877118][ T5599] ? __rcu_read_unlock+0x4e/0x70 [ 78.877154][ T5599] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 78.877215][ T5599] bpf_prog_test_run+0x20e/0x3a0 [ 78.877247][ T5599] __sys_bpf+0x440/0x800 [ 78.877339][ T5599] __x64_sys_bpf+0x43/0x50 [ 78.877419][ T5599] x64_sys_call+0x23da/0x2e10 [ 78.877446][ T5599] do_syscall_64+0xc9/0x1c0 [ 78.877481][ T5599] ? clear_bhb_loop+0x25/0x80 [ 78.877507][ T5599] ? clear_bhb_loop+0x25/0x80 [ 78.877572][ T5599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 78.877593][ T5599] RIP: 0033:0x7ff8bc18e169 [ 78.877607][ T5599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 78.877630][ T5599] RSP: 002b:00007ff8ba7f7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 78.877652][ T5599] RAX: ffffffffffffffda RBX: 00007ff8bc3b5fa0 RCX: 00007ff8bc18e169 [ 78.877667][ T5599] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 78.877752][ T5599] RBP: 00007ff8ba7f7090 R08: 0000000000000000 R09: 0000000000000000 [ 78.877766][ T5599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 78.877781][ T5599] R13: 0000000000000000 R14: 00007ff8bc3b5fa0 R15: 00007fffbac62088 [ 78.877837][ T5599] [ 79.191239][ T4633] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.213919][ T4157] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:53: Failed to release dquot type 1 [ 79.248992][ T5608] loop3: detected capacity change from 0 to 512 [ 79.263115][ T5610] loop4: detected capacity change from 0 to 512 [ 79.289880][ T5608] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 79.361648][ T5608] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 79.403637][ T5615] netlink: 20 bytes leftover after parsing attributes in process `syz.6.541'. [ 79.442713][ T5610] EXT4-fs (loop4): 1 orphan inode deleted [ 79.453777][ T5610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.474377][ T4157] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:53: Failed to release dquot type 1 [ 79.503195][ T5612] loop8: detected capacity change from 0 to 512 [ 79.510136][ T5612] EXT4-fs: Ignoring removed orlov option [ 79.532677][ T5610] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.547446][ T5621] sd 0:0:1:0: device reset [ 79.558496][ T5612] EXT4-fs error (device loop8): ext4_iget_extra_inode:4693: inode #15: comm syz.8.547: corrupted in-inode xattr: invalid ea_ino [ 79.582572][ T5612] EXT4-fs error (device loop8): ext4_orphan_get:1395: comm syz.8.547: couldn't read orphan inode 15 (err -117) [ 79.598868][ T5612] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 79.679320][ T5612] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.547: bg 0: block 411: padding at end of block bitmap is not set [ 79.692113][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.707863][ T4157] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:53: Failed to release dquot type 1 [ 79.743635][ T5268] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.808316][ T5641] netlink: 20 bytes leftover after parsing attributes in process `syz.3.562'. [ 79.949790][ T5658] sd 0:0:1:0: device reset [ 80.016182][ T5660] loop6: detected capacity change from 0 to 2048 [ 80.023451][ T5660] ext4: Unknown parameter 'noacl' [ 80.225832][ T5681] sd 0:0:1:0: device reset [ 80.228188][ T5675] loop1: detected capacity change from 0 to 128 [ 80.277291][ T5683] loop4: detected capacity change from 0 to 2048 [ 80.285134][ T5675] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 80.291154][ T5683] ext4: Unknown parameter 'noacl' [ 80.316219][ T5675] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 80.350772][ T5689] xt_connbytes: Forcing CT accounting to be enabled [ 80.386272][ T5689] set match dimension is over the limit! [ 80.411770][ T5689] loop3: detected capacity change from 0 to 512 [ 80.418637][ T5689] EXT4-fs: inline encryption not supported [ 80.458562][ T5689] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.580: bg 0: block 248: padding at end of block bitmap is not set [ 80.476831][ T5675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.575'. [ 80.489200][ T5675] netlink: 12 bytes leftover after parsing attributes in process `syz.1.575'. [ 80.490897][ T5689] EXT4-fs (loop3): Remounting filesystem read-only [ 80.508865][ T5675] netlink: 32 bytes leftover after parsing attributes in process `syz.1.575'. [ 80.547669][ T5689] EXT4-fs (loop3): 1 truncate cleaned up [ 80.563854][ T5689] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.629692][ T5689] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.648968][ T3302] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 80.862481][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.901421][ T5712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.589'. [ 80.914948][ T5712] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.928660][ T5713] support for the xor transformation has been removed. [ 81.023800][ T5712] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.083414][ T5717] sd 0:0:1:0: device reset [ 81.102722][ T5712] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.147130][ T5716] loop1: detected capacity change from 0 to 2048 [ 81.169512][ T5719] loop6: detected capacity change from 0 to 512 [ 81.199657][ T5716] ext4: Unknown parameter 'noacl' [ 81.222505][ T5712] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.286781][ T5719] EXT4-fs (loop6): 1 orphan inode deleted [ 81.297592][ T5719] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 81.310368][ T4160] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:55: Failed to release dquot type 1 [ 81.314637][ T5719] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.328565][ T5723] loop3: detected capacity change from 0 to 2048 [ 81.353310][ T5712] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.374447][ T5712] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.387006][ T4633] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.390467][ T5712] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.397490][ T5723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 81.408007][ T5712] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.416687][ T4160] EXT4-fs error (device loop6): ext4_release_dquot:6971: comm kworker/u8:55: Failed to release dquot type 1 [ 81.583067][ T5745] netlink: 20 bytes leftover after parsing attributes in process `syz.4.599'. [ 81.610157][ T5749] sd 0:0:1:0: device reset [ 81.955962][ T5769] loop8: detected capacity change from 0 to 128 [ 81.968206][ T3301] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.968937][ T5769] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 82.030165][ T5773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.611'. [ 82.083225][ T5779] sd 0:0:1:0: device reset [ 82.163411][ T5783] loop8: detected capacity change from 0 to 512 [ 82.170209][ T5783] EXT4-fs: Ignoring removed orlov option [ 82.180951][ T5783] EXT4-fs error (device loop8): ext4_iget_extra_inode:4693: inode #15: comm syz.8.616: corrupted in-inode xattr: invalid ea_ino [ 82.196593][ T5783] EXT4-fs error (device loop8): ext4_orphan_get:1395: comm syz.8.616: couldn't read orphan inode 15 (err -117) [ 82.210007][ T5783] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.257747][ T5783] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.616: bg 0: block 411: padding at end of block bitmap is not set [ 82.304820][ T5268] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.565908][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 82.601186][ T5773] loop1: detected capacity change from 0 to 512 [ 82.608388][ T5773] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 82.618461][ T5805] FAULT_INJECTION: forcing a failure. [ 82.618461][ T5805] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 82.631799][ T5805] CPU: 1 UID: 0 PID: 5805 Comm: syz.6.619 Tainted: G W 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 82.631835][ T5805] Tainted: [W]=WARN [ 82.631843][ T5805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 82.631954][ T5805] Call Trace: [ 82.631962][ T5805] [ 82.631971][ T5805] dump_stack_lvl+0xf6/0x150 [ 82.632008][ T5805] dump_stack+0x15/0x1a [ 82.632026][ T5805] should_fail_ex+0x261/0x270 [ 82.632058][ T5805] should_fail+0xb/0x10 [ 82.632153][ T5805] should_fail_usercopy+0x1a/0x20 [ 82.632187][ T5805] _copy_to_user+0x20/0xa0 [ 82.632221][ T5805] copy_siginfo_to_user+0x24/0xb0 [ 82.632298][ T5805] x64_setup_rt_frame+0x2bf/0x5a0 [ 82.632342][ T5805] arch_do_signal_or_restart+0x28c/0x4b0 [ 82.632455][ T5805] syscall_exit_to_user_mode+0x62/0x120 [ 82.632492][ T5805] do_syscall_64+0xd6/0x1c0 [ 82.632528][ T5805] ? clear_bhb_loop+0x25/0x80 [ 82.632555][ T5805] ? clear_bhb_loop+0x25/0x80 [ 82.632646][ T5805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.632668][ T5805] RIP: 0033:0x7fd1c06de167 [ 82.632684][ T5805] Code: ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 [ 82.632765][ T5805] RSP: 002b:00007fd1bed47038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 82.632787][ T5805] RAX: 0000000000000113 RBX: 00007fd1c0905fa0 RCX: 00007fd1c06de169 [ 82.632802][ T5805] RDX: 0000000000000007 RSI: 0000000000000000 RDI: 0000000000000004 [ 82.632816][ T5805] RBP: 00007fd1bed47090 R08: 0000000000000007 R09: 0000000000000009 [ 82.632831][ T5805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.632845][ T5805] R13: 0000000000000000 R14: 00007fd1c0905fa0 R15: 00007fff72f0a748 [ 82.632868][ T5805] [ 82.637391][ T5773] EXT4-fs (loop1): 1 truncate cleaned up [ 82.678271][ T29] kauditd_printk_skb: 331 callbacks suppressed [ 82.678289][ T29] audit: type=1326 audit(2000000017.670:2523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5810 comm="syz.8.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f6e0e169 code=0x7ffc0000 [ 82.686840][ T5773] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.689427][ T29] audit: type=1326 audit(2000000017.670:2524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5810 comm="syz.8.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f6e0e169 code=0x7ffc0000 [ 82.889414][ T29] audit: type=1326 audit(2000000017.670:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5810 comm="syz.8.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06f6e0e169 code=0x7ffc0000 [ 82.912933][ T29] audit: type=1326 audit(2000000017.670:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5810 comm="syz.8.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f6e0e169 code=0x7ffc0000 [ 82.936491][ T29] audit: type=1326 audit(2000000017.670:2527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5810 comm="syz.8.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f6e0e169 code=0x7ffc0000 [ 82.960165][ T29] audit: type=1326 audit(2000000017.670:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5810 comm="syz.8.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f06f6e0e169 code=0x7ffc0000 [ 82.983645][ T29] audit: type=1326 audit(2000000017.680:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5810 comm="syz.8.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f6e0e169 code=0x7ffc0000 [ 83.007458][ T29] audit: type=1326 audit(2000000017.680:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5810 comm="syz.8.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f06f6e0e169 code=0x7ffc0000 [ 83.030981][ T29] audit: type=1326 audit(2000000017.680:2531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5810 comm="syz.8.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f6e0e169 code=0x7ffc0000 [ 83.054633][ T29] audit: type=1326 audit(2000000017.680:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5810 comm="syz.8.620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f06f6e0e169 code=0x7ffc0000 [ 83.115088][ T5819] sd 0:0:1:0: device reset [ 83.121565][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.128855][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.155164][ T5786] bridge_slave_0: entered allmulticast mode [ 83.156568][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.166689][ T5786] bridge_slave_0: entered promiscuous mode [ 83.187801][ T5823] loop4: detected capacity change from 0 to 512 [ 83.195654][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.199263][ T5825] loop8: detected capacity change from 0 to 512 [ 83.203064][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.210400][ T5825] EXT4-fs: Ignoring removed oldalloc option [ 83.224977][ T5823] EXT4-fs error (device loop4): ext4_get_journal_inode:5798: comm syz.4.625: inode #16777216: comm syz.4.625: iget: illegal inode # [ 83.239007][ T5786] bridge_slave_1: entered allmulticast mode [ 83.246300][ T5786] bridge_slave_1: entered promiscuous mode [ 83.249406][ T5823] EXT4-fs (loop4): Remounting filesystem read-only [ 83.258830][ T5823] EXT4-fs (loop4): no journal found [ 83.269638][ T5825] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.627: Parent and EA inode have the same ino 15 [ 83.291844][ T5825] EXT4-fs (loop8): Remounting filesystem read-only [ 83.298470][ T5825] EXT4-fs warning (device loop8): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 83.314586][ T5825] EXT4-fs (loop8): 1 orphan inode deleted [ 83.323722][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.334290][ T5825] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.352710][ T5825] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.353430][ T5830] netlink: 8 bytes leftover after parsing attributes in process `syz.4.628'. [ 83.371682][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.382825][ T5830] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.429067][ T5786] team0: Port device team_slave_0 added [ 83.444223][ T5786] team0: Port device team_slave_1 added [ 83.465627][ T5830] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.509339][ T5842] sd 0:0:1:0: device reset [ 83.515339][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.522413][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.548602][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.572141][ T5840] loop6: detected capacity change from 0 to 512 [ 83.578775][ T5840] EXT4-fs: Ignoring removed orlov option [ 83.586184][ T5840] EXT4-fs error (device loop6): ext4_iget_extra_inode:4693: inode #15: comm syz.6.633: corrupted in-inode xattr: invalid ea_ino [ 83.605625][ T5840] EXT4-fs error (device loop6): ext4_orphan_get:1395: comm syz.6.633: couldn't read orphan inode 15 (err -117) [ 83.619128][ T5830] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.619988][ T5840] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.649229][ T5844] ªªªªªª: renamed from vlan0 (while UP) [ 83.658172][ T5840] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.633: bg 0: block 411: padding at end of block bitmap is not set [ 83.674552][ T5851] FAULT_INJECTION: forcing a failure. [ 83.674552][ T5851] name failslab, interval 1, probability 0, space 0, times 0 [ 83.683280][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.687563][ T5851] CPU: 1 UID: 0 PID: 5851 Comm: syz.1.637 Tainted: G W 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 83.687620][ T5851] Tainted: [W]=WARN [ 83.687628][ T5851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 83.687644][ T5851] Call Trace: [ 83.687653][ T5851] [ 83.687687][ T5851] dump_stack_lvl+0xf6/0x150 [ 83.687718][ T5851] dump_stack+0x15/0x1a [ 83.687739][ T5851] should_fail_ex+0x261/0x270 [ 83.687774][ T5851] should_failslab+0x8f/0xb0 [ 83.687835][ T5851] kmem_cache_alloc_noprof+0x59/0x340 [ 83.687863][ T5851] ? getname_flags+0x81/0x3b0 [ 83.687912][ T5851] getname_flags+0x81/0x3b0 [ 83.687987][ T5851] user_path_at+0x26/0x140 [ 83.688017][ T5851] vfs_open_tree+0xe3/0x550 [ 83.688043][ T5851] ? ksys_write+0x180/0x1b0 [ 83.688112][ T5851] __x64_sys_open_tree+0x45/0xc0 [ 83.688213][ T5851] x64_sys_call+0x2851/0x2e10 [ 83.688241][ T5851] do_syscall_64+0xc9/0x1c0 [ 83.688279][ T5851] ? clear_bhb_loop+0x25/0x80 [ 83.688306][ T5851] ? clear_bhb_loop+0x25/0x80 [ 83.688333][ T5851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.688446][ T5851] RIP: 0033:0x7f45d2c5e169 [ 83.688464][ T5851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.688487][ T5851] RSP: 002b:00007f45d12c7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 83.688511][ T5851] RAX: ffffffffffffffda RBX: 00007f45d2e85fa0 RCX: 00007f45d2c5e169 [ 83.688526][ T5851] RDX: 0000000000000000 RSI: 0000200000000500 RDI: ffffffffffffffff [ 83.688541][ T5851] RBP: 00007f45d12c7090 R08: 0000000000000000 R09: 0000000000000000 [ 83.688556][ T5851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.688597][ T5851] R13: 0000000000000001 R14: 00007f45d2e85fa0 R15: 00007ffc8ee5b198 [ 83.688621][ T5851] [ 83.884528][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.910816][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.920181][ T5861] loop8: detected capacity change from 0 to 512 [ 83.933779][ T5861] EXT4-fs: Ignoring removed oldalloc option [ 83.934512][ T5859] IPv6: Can't replace route, no match found [ 83.947293][ T5857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.640'. [ 83.948499][ T4633] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.969414][ T5857] program is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.969949][ T5861] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.641: Parent and EA inode have the same ino 15 [ 83.978380][ T5857] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 84.007100][ T5861] EXT4-fs (loop8): Remounting filesystem read-only [ 84.013756][ T5861] EXT4-fs warning (device loop8): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 84.025962][ T5861] EXT4-fs (loop8): 1 orphan inode deleted [ 84.032197][ T5861] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 84.032803][ T5786] hsr_slave_0: entered promiscuous mode [ 84.048356][ T5861] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.051461][ T5786] hsr_slave_1: entered promiscuous mode [ 84.083044][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.099828][ T5786] Cannot create hsr debugfs directory [ 84.108523][ T5830] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.122175][ T5866] FAULT_INJECTION: forcing a failure. [ 84.122175][ T5866] name failslab, interval 1, probability 0, space 0, times 0 [ 84.134904][ T5866] CPU: 1 UID: 0 PID: 5866 Comm: syz.1.643 Tainted: G W 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 84.134966][ T5866] Tainted: [W]=WARN [ 84.135033][ T5866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 84.135045][ T5866] Call Trace: [ 84.135051][ T5866] [ 84.135057][ T5866] dump_stack_lvl+0xf6/0x150 [ 84.135081][ T5866] dump_stack+0x15/0x1a [ 84.135097][ T5866] should_fail_ex+0x261/0x270 [ 84.135125][ T5866] should_failslab+0x8f/0xb0 [ 84.135230][ T5866] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 84.135253][ T5866] ? __alloc_skb+0x10d/0x320 [ 84.135275][ T5866] ? _raw_spin_unlock_bh+0x36/0x40 [ 84.135297][ T5866] __alloc_skb+0x10d/0x320 [ 84.135320][ T5866] qdisc_notify+0xdc/0x2b0 [ 84.135394][ T5866] qdisc_graft+0xbb7/0xcb0 [ 84.135431][ T5866] tc_modify_qdisc+0xe62/0x14d0 [ 84.135495][ T5866] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 84.135527][ T5866] rtnetlink_rcv_msg+0x6b7/0x740 [ 84.135558][ T5866] ? ref_tracker_free+0x3b8/0x420 [ 84.135586][ T5866] netlink_rcv_skb+0x12f/0x230 [ 84.135630][ T5866] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 84.135668][ T5866] rtnetlink_rcv+0x1c/0x30 [ 84.135696][ T5866] netlink_unicast+0x605/0x6c0 [ 84.135786][ T5866] netlink_sendmsg+0x609/0x720 [ 84.135814][ T5866] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.135839][ T5866] __sock_sendmsg+0x140/0x180 [ 84.135858][ T5866] ____sys_sendmsg+0x350/0x4e0 [ 84.135937][ T5866] __sys_sendmsg+0x1a0/0x240 [ 84.135979][ T5866] __x64_sys_sendmsg+0x46/0x50 [ 84.136035][ T5866] x64_sys_call+0x26f3/0x2e10 [ 84.136057][ T5866] do_syscall_64+0xc9/0x1c0 [ 84.136146][ T5866] ? clear_bhb_loop+0x25/0x80 [ 84.136166][ T5866] ? clear_bhb_loop+0x25/0x80 [ 84.136187][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.136234][ T5866] RIP: 0033:0x7f45d2c5e169 [ 84.136248][ T5866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.136265][ T5866] RSP: 002b:00007f45d12c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.136283][ T5866] RAX: ffffffffffffffda RBX: 00007f45d2e85fa0 RCX: 00007f45d2c5e169 [ 84.136368][ T5866] RDX: 0000000000008840 RSI: 0000200000000740 RDI: 0000000000000006 [ 84.136379][ T5866] RBP: 00007f45d12c7090 R08: 0000000000000000 R09: 0000000000000000 [ 84.136390][ T5866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.136402][ T5866] R13: 0000000000000000 R14: 00007f45d2e85fa0 R15: 00007ffc8ee5b198 [ 84.136420][ T5866] [ 84.455661][ T5879] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.456503][ T5878] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=5878 comm=+}[@ [ 84.464571][ T5879] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.523712][ T5882] FAULT_INJECTION: forcing a failure. [ 84.523712][ T5882] name failslab, interval 1, probability 0, space 0, times 0 [ 84.536870][ T5882] CPU: 1 UID: 0 PID: 5882 Comm: syz.1.649 Tainted: G W 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 84.536908][ T5882] Tainted: [W]=WARN [ 84.536915][ T5882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 84.536930][ T5882] Call Trace: [ 84.536936][ T5882] [ 84.536943][ T5882] dump_stack_lvl+0xf6/0x150 [ 84.536967][ T5882] dump_stack+0x15/0x1a [ 84.536983][ T5882] should_fail_ex+0x261/0x270 [ 84.537044][ T5882] should_failslab+0x8f/0xb0 [ 84.537078][ T5882] kmem_cache_alloc_node_noprof+0x5c/0x340 [ 84.537103][ T5882] ? __alloc_skb+0x10d/0x320 [ 84.537159][ T5882] __alloc_skb+0x10d/0x320 [ 84.537182][ T5882] netlink_ack+0xf1/0x4f0 [ 84.537211][ T5882] netlink_rcv_skb+0x19f/0x230 [ 84.537238][ T5882] ? __pfx_genl_rcv_msg+0x10/0x10 [ 84.537297][ T5882] genl_rcv+0x28/0x40 [ 84.537385][ T5882] netlink_unicast+0x605/0x6c0 [ 84.537412][ T5882] netlink_sendmsg+0x609/0x720 [ 84.537448][ T5882] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.537531][ T5882] __sock_sendmsg+0x140/0x180 [ 84.537554][ T5882] ____sys_sendmsg+0x350/0x4e0 [ 84.537589][ T5882] __sys_sendmsg+0x1a0/0x240 [ 84.537706][ T5882] __x64_sys_sendmsg+0x46/0x50 [ 84.537733][ T5882] x64_sys_call+0x26f3/0x2e10 [ 84.537765][ T5882] do_syscall_64+0xc9/0x1c0 [ 84.537802][ T5882] ? clear_bhb_loop+0x25/0x80 [ 84.537878][ T5882] ? clear_bhb_loop+0x25/0x80 [ 84.537916][ T5882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.537940][ T5882] RIP: 0033:0x7f45d2c5e169 [ 84.537959][ T5882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.537981][ T5882] RSP: 002b:00007f45d12c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.538004][ T5882] RAX: ffffffffffffffda RBX: 00007f45d2e85fa0 RCX: 00007f45d2c5e169 [ 84.538019][ T5882] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 84.538034][ T5882] RBP: 00007f45d12c7090 R08: 0000000000000000 R09: 0000000000000000 [ 84.538049][ T5882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.538077][ T5882] R13: 0000000000000000 R14: 00007f45d2e85fa0 R15: 00007ffc8ee5b198 [ 84.538101][ T5882] [ 84.555497][ T5786] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 84.772236][ T5786] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 84.783040][ T5786] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 84.793833][ T5786] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 84.800890][ T5891] loop1: detected capacity change from 0 to 256 [ 84.857481][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.874147][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.886782][ T4150] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.893923][ T4150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.923767][ T4150] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.930935][ T4150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.948288][ T5786] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 84.958719][ T5786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.043734][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.569523][ T5786] veth0_vlan: entered promiscuous mode [ 85.580142][ T5786] veth1_vlan: entered promiscuous mode [ 85.604141][ T5786] veth0_macvtap: entered promiscuous mode [ 85.615354][ T5786] veth1_macvtap: entered promiscuous mode [ 85.625876][ T5917] loop6: detected capacity change from 0 to 128 [ 85.644733][ T5917] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1) [ 85.674649][ T5917] syz.6.655: attempt to access beyond end of device [ 85.674649][ T5917] loop6: rw=3, sector=33518, nr_sectors = 2 limit=128 [ 85.724318][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.735527][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.745973][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.756288][ T5917] syz.6.655: attempt to access beyond end of device [ 85.756288][ T5917] loop6: rw=2051, sector=33520, nr_sectors = 32742 limit=128 [ 85.756685][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.780980][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.791530][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.801685][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.812261][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.822261][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.834711][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.846780][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.859729][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.870969][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.882771][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.906016][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.919842][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.930885][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.941690][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.954467][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.965973][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.976609][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.986665][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.997266][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.007169][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.017833][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.027885][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.038438][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.048593][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.051980][ T5926] loop1: detected capacity change from 0 to 512 [ 86.059336][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.072414][ T5926] EXT4-fs: Ignoring removed oldalloc option [ 86.075406][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.092257][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.092596][ T5926] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 86.103547][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.125059][ T5926] EXT4-fs (loop1): 1 truncate cleaned up [ 86.131350][ T5926] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.149302][ T5786] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.160460][ T5786] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.171265][ T5786] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.181719][ T5786] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.215595][ T5932] loop6: detected capacity change from 0 to 2048 [ 86.224352][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.257648][ T5932] ext4: Unknown parameter 'noacl' [ 86.271375][ T5939] netlink: 8 bytes leftover after parsing attributes in process `syz.1.663'. [ 86.282149][ T5939] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.326152][ T5943] netlink: 132 bytes leftover after parsing attributes in process `syz.6.665'. [ 86.401855][ T5939] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.487879][ T5939] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.566679][ T5959] loop6: detected capacity change from 0 to 1024 [ 86.580935][ T5959] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 86.593860][ T5959] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 86.610586][ T5939] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.670102][ T5959] JBD2: no valid journal superblock found [ 86.676834][ T5959] EXT4-fs (loop6): Could not load journal inode [ 86.702278][ T5939] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.718628][ T5939] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.774111][ T5939] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.828498][ T5939] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.932532][ T5966] loop6: detected capacity change from 0 to 2048 [ 86.939114][ T5966] ext4: Unknown parameter 'noacl' [ 86.979890][ T5968] SELinux: syz.8.675 (5968) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 86.985064][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.6.677'. [ 87.008076][ T5975] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.062219][ T5975] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.135539][ T5975] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.138840][ T5982] netlink: 8 bytes leftover after parsing attributes in process `syz.8.680'. [ 87.157501][ T5982] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.234634][ T5830] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.256785][ T5830] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.272107][ T5975] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.297806][ T5982] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.314000][ T5992] loop9: detected capacity change from 0 to 1024 [ 87.323490][ T5830] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.347353][ T5975] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.356598][ T5992] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.362273][ T5975] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.399741][ T5830] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.413251][ T5982] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.423292][ T6001] loop1: detected capacity change from 0 to 2048 [ 87.434328][ T6001] ext4: Unknown parameter 'noacl' [ 87.462572][ T5975] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.477211][ T5975] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.500856][ T5982] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.503263][ T6005] netlink: 536 bytes leftover after parsing attributes in process `syz.9.684'. [ 87.536873][ T6004] loop4: detected capacity change from 0 to 512 [ 87.577729][ T6004] EXT4-fs (loop4): 1 orphan inode deleted [ 87.600107][ T6004] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.618381][ T4150] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:47: Failed to release dquot type 1 [ 87.638032][ T6004] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 87.658023][ T5982] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.675027][ T5982] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.704111][ T6016] usb usb1: usbfs: process 6016 (syz.1.692) did not claim interface 63 before use [ 87.708119][ T5982] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.754708][ T5982] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.798214][ T6018] loop1: detected capacity change from 0 to 512 [ 87.853281][ T6018] EXT4-fs (loop1): 1 orphan inode deleted [ 87.860076][ T6018] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.916365][ T6018] ext4 filesystem being mounted at /130/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.022398][ T6024] sd 0:0:1:0: device reset [ 88.159389][ T5786] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.176219][ T3314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.190608][ T4157] __quota_error: 32 callbacks suppressed [ 88.190674][ T4157] Quota error (device loop4): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 88.207488][ T4157] EXT4-fs error (device loop4): ext4_release_dquot:6971: comm kworker/u8:53: Failed to release dquot type 1 [ 88.265402][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.274990][ T4126] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 88.277646][ T6031] loop8: detected capacity change from 0 to 2048 [ 88.284910][ T4126] EXT4-fs error (device loop1): ext4_release_dquot:6971: comm kworker/u8:23: Failed to release dquot type 1 [ 88.298249][ T6031] ext4: Unknown parameter 'noacl' [ 88.479811][ T6043] loop6: detected capacity change from 0 to 512 [ 88.494251][ T6048] usb usb1: usbfs: process 6048 (syz.1.703) did not claim interface 63 before use [ 88.526019][ T6043] EXT4-fs: Ignoring removed oldalloc option [ 88.544586][ T6043] EXT4-fs error (device loop6): ext4_xattr_inode_iget:433: comm syz.6.705: Parent and EA inode have the same ino 15 [ 88.582877][ T6043] EXT4-fs (loop6): Remounting filesystem read-only [ 88.589843][ T6043] EXT4-fs warning (device loop6): ext4_evict_inode:262: couldn't mark inode dirty (err -30) [ 88.628016][ T6043] EXT4-fs (loop6): 1 orphan inode deleted [ 88.652516][ T6055] loop9: detected capacity change from 0 to 512 [ 88.657752][ T6043] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.660848][ T6055] EXT4-fs: Ignoring removed orlov option [ 88.701025][ T6066] IPv6: Can't replace route, no match found [ 88.708006][ T29] audit: type=1400 audit(2000000023.710:2564): avc: denied { create } for pid=6065 comm="syz.4.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 88.735499][ T6043] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.752385][ T6066] 9pnet: Could not find request transport: f [ 88.763225][ T6064] ================================================================== [ 88.771364][ T6064] BUG: KCSAN: data-race in vmalloc_info_show / vmalloc_info_show [ 88.779217][ T6064] [ 88.781551][ T6064] read-write to 0xffff8881016f0010 of 4 bytes by task 6062 on cpu 1: [ 88.789717][ T6064] vmalloc_info_show+0x476/0x780 [ 88.794774][ T6064] seq_read_iter+0x2c8/0x970 [ 88.799653][ T6064] proc_reg_read_iter+0x118/0x190 [ 88.804870][ T6064] vfs_read+0x5e6/0x710 [ 88.809087][ T6064] ksys_read+0xeb/0x1b0 [ 88.813352][ T6064] __x64_sys_read+0x42/0x50 [ 88.817917][ T6064] x64_sys_call+0x2a3b/0x2e10 [ 88.822605][ T6064] do_syscall_64+0xc9/0x1c0 [ 88.827231][ T6064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.833159][ T6064] [ 88.835489][ T6064] read-write to 0xffff8881016f0010 of 4 bytes by task 6064 on cpu 0: [ 88.843560][ T6064] vmalloc_info_show+0x476/0x780 [ 88.848526][ T6064] seq_read_iter+0x2c8/0x970 [ 88.853182][ T6064] proc_reg_read_iter+0x118/0x190 [ 88.858230][ T6064] vfs_read+0x5e6/0x710 [ 88.862454][ T6064] ksys_read+0xeb/0x1b0 [ 88.866687][ T6064] __x64_sys_read+0x42/0x50 [ 88.871311][ T6064] x64_sys_call+0x2a3b/0x2e10 [ 88.876021][ T6064] do_syscall_64+0xc9/0x1c0 [ 88.880551][ T6064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.886470][ T6064] [ 88.888795][ T6064] value changed: 0x0000006e -> 0x00000004 [ 88.894599][ T6064] [ 88.896920][ T6064] Reported by Kernel Concurrency Sanitizer on: [ 88.903083][ T6064] CPU: 0 UID: 0 PID: 6064 Comm: syz.1.713 Tainted: G W 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 88.917119][ T6064] Tainted: [W]=WARN [ 88.920942][ T6064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 88.931458][ T6064] ================================================================== [ 88.975636][ T6062] ================================================================== [ 88.983777][ T6062] BUG: KCSAN: data-race in vmalloc_info_show / vmalloc_info_show [ 88.991806][ T6062] [ 88.994146][ T6062] read to 0xffff8881016f0010 of 4 bytes by task 6064 on cpu 1: [ 89.001700][ T6062] vmalloc_info_show+0x54a/0x780 [ 89.006852][ T6062] seq_read_iter+0x2c8/0x970 [ 89.011944][ T6062] proc_reg_read_iter+0x118/0x190 [ 89.017005][ T6062] vfs_read+0x5e6/0x710 [ 89.021191][ T6062] ksys_read+0xeb/0x1b0 [ 89.025649][ T6062] __x64_sys_read+0x42/0x50 [ 89.030179][ T6062] x64_sys_call+0x2a3b/0x2e10 [ 89.034891][ T6062] do_syscall_64+0xc9/0x1c0 [ 89.039411][ T6062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.045331][ T6062] [ 89.047672][ T6062] read-write to 0xffff8881016f0010 of 4 bytes by task 6062 on cpu 0: [ 89.055828][ T6062] vmalloc_info_show+0x476/0x780 [ 89.060873][ T6062] seq_read_iter+0x2c8/0x970 [ 89.065489][ T6062] proc_reg_read_iter+0x118/0x190 [ 89.070557][ T6062] vfs_read+0x5e6/0x710 [ 89.074815][ T6062] ksys_read+0xeb/0x1b0 [ 89.078977][ T6062] __x64_sys_read+0x42/0x50 [ 89.083494][ T6062] x64_sys_call+0x2a3b/0x2e10 [ 89.088181][ T6062] do_syscall_64+0xc9/0x1c0 [ 89.092724][ T6062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.098648][ T6062] [ 89.101005][ T6062] value changed: 0x00000220 -> 0x00000000 [ 89.106748][ T6062] [ 89.109087][ T6062] Reported by Kernel Concurrency Sanitizer on: [ 89.115256][ T6062] CPU: 0 UID: 0 PID: 6062 Comm: syz.8.712 Tainted: G W 6.15.0-rc2-syzkaller-00048-gc62f4b82d571 #0 PREEMPT(voluntary) [ 89.129250][ T6062] Tainted: [W]=WARN [ 89.133148][ T6062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 89.143214][ T6062] ================================================================== [ 89.247705][ T6055] EXT4-fs error (device loop9): ext4_iget_extra_inode:4693: inode #15: comm syz.9.710: corrupted in-inode xattr: invalid ea_ino [ 89.356606][ T6055] EXT4-fs error (device loop9): ext4_orphan_get:1395: comm syz.9.710: couldn't read orphan inode 15 (err -117) [ 89.463974][ T6055] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.710: bg 0: block 411: padding at end of block bitmap is not set