last executing test programs: 3m34.662237551s ago: executing program 32 (id=807): r0 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x40200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000d80)=@framed={{0x18, 0x8}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x5, 0x4, &(0x7f0000000d80)=ANY=[], &(0x7f0000000c80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r1, 0xc008240a, &(0x7f0000000080)=ANY=[]) 3m33.391181105s ago: executing program 33 (id=847): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000380)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x70bd28, 0x25dfdbfd, {0xa, 0x80, 0x80}, [@RTA_SPORT={0x6, 0x1c, 0x4e24}]}, 0x24}}, 0x200000d0) 3m22.728375406s ago: executing program 34 (id=1218): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r0, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="e5f1fddfe175759763a2d6055bef6ad6100000006ac3a9353bc1b5b84294df29b09e92680c9e2a1685a8bd3dc842c314776b1f02a8e198691f35a8c392153d171748b56efe2f39ee39d24e26eb605b8a0cbea9d4710693977d8285f130", 0x5d}], 0x1}, 0x20000044) 3m20.247194703s ago: executing program 35 (id=1291): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 3m20.202453494s ago: executing program 3 (id=1294): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 3m20.131304965s ago: executing program 3 (id=1295): perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x80002, 0x0, 0x4000000000004, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xcc0, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m20.062618246s ago: executing program 3 (id=1296): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r1, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 3m19.594850725s ago: executing program 3 (id=1297): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2001080, 0x0) 3m19.519764726s ago: executing program 3 (id=1298): ioctl$BTRFS_IOC_DEV_REPLACE(0xffffffffffffffff, 0xca289435, &(0x7f0000000780)={0x1, 0x1, @start={0x0, 0x0, "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", "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"}, [0x9, 0x7fff, 0x2, 0x7f, 0xb, 0x3, 0x800, 0x500, 0x6, 0xffff, 0x6, 0x3ff, 0x2, 0x9f0, 0x10, 0xfffffffffffffffb, 0x3, 0x9, 0x5, 0x8001, 0x10, 0x3, 0x6, 0x7fff, 0x9, 0x200, 0x7, 0x9, 0x6, 0x3, 0x1, 0x9, 0xa64, 0x80000000000008, 0xd, 0x0, 0x1, 0x7ff, 0xfff, 0xffffffff, 0x5, 0x5f, 0x5, 0x2, 0x5, 0x6, 0x0, 0xffffffffffffffff, 0x3, 0x81, 0x0, 0x6, 0x2c73, 0x4, 0x295, 0x5, 0x9b, 0x7, 0x7b, 0x5, 0x99, 0x4000004b, 0x9, 0xfffffffffffffffc]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x8, 0xb, 0x101, 0x0, 0x1, 0xcb02}, 0x50) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f726f6c653d2c686173682ca8ea26de004d2208fc414d630834ec2191519244adb53cec31ddc7b9b58f32238fac4fbdc332b1719e34"], 0x25, 0x34f, &(0x7f0000000840)="$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") bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000001800), 0x1ff, r0}, 0x38) 3m19.236272412s ago: executing program 3 (id=1301): bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@cgroup, 0xffffffffffffffff, 0x1, 0x29}, 0x20) 3m19.204032102s ago: executing program 36 (id=1301): bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@cgroup, 0xffffffffffffffff, 0x1, 0x29}, 0x20) 3m19.156863763s ago: executing program 0 (id=1303): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000080)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 3m19.105647304s ago: executing program 0 (id=1304): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4c23, 0x5, @remote, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}, 0xf000000}], 0x20, 0x4004844) 3m19.074062435s ago: executing program 0 (id=1305): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB='nodots,nfs,dots,dots,uid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x22d, &(0x7f0000000300)="$eJzs3b2KE1EYBuDP3exu2MatxWLAxiqodzDICuKAEJlCKwdWm10RZpvRKpfhNXhJXsZW6UbMhPwZbTQes/M8EOaFl8B3mpwU5yRv73+4vPh4/b799iWGwywGEZOYRpzFQRxG5878eTDLx7FqEgDAvhmPqzz1DOxWXefVUUSc/NSUX5MMBAAAAAAAAAAAwB9z/h8A+sf5/9uvrvPqdP79bZ3z/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEA607a92/7mlXo+AODvs/8DQP/Y/wGgf+z/ANA/r16/eZEXxfk4y4YRN5OmbMru2fXPnhfnj7KZs+W7bpqmPFz0j7s+W++P4nTeP9naH8fDB13/o3v6stjoT+Ji98sHAAAAAAAAAAAAAAAAAACA/8IoW9h6v380+lXfpZXfB9i4vz+Ie4N/tgwAAAAAAAAAAAAAAAAAAADYa9efPl9WV1fvakEQhEVI/ckEAAAAAAAAAAAAAAAAAAD9s7z0m3oSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEhn+f//uwup1wgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0w/cAAAD//wu+k9A=") unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x200) 3m18.972611387s ago: executing program 0 (id=1306): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x2125099, 0x0) mount$bind(&(0x7f0000000340)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2001080, 0x0) 3m18.972183297s ago: executing program 0 (id=1307): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70200000200000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 3m18.27913976s ago: executing program 0 (id=1308): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup=r1, 0x22, 0x1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 3m18.27898844s ago: executing program 37 (id=1308): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe}) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup=r1, 0x22, 0x1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 3m11.826986962s ago: executing program 7 (id=1399): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}}, 0x0) 3m11.715890083s ago: executing program 7 (id=1404): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x73, 0xfffff034}, {0x50, 0x0, 0x5, 0x2}, {0x6, 0x7, 0x2, 0xffffffff}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @empty, @multicast1}, {0x0, 0x2, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0xc}}}}}}}, 0x0) 3m11.642983105s ago: executing program 7 (id=1408): perf_event_open(&(0x7f0000000040)={0x5, 0x80, 0x2, 0x2, 0x8, 0x9, 0x0, 0x6, 0x0, 0xc, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_bp={0x0, 0x8}, 0x2000, 0xff, 0x80002, 0x0, 0x4000000000004, 0x145d, 0x1, 0x0, 0x3f8, 0x0, 0x100}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801000020786c2500000000002020207b1af8ff00000000bfa10000000000000701000059000000b702000008000000b7030000110b000885000000080000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xcc0, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860186dd", 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m11.572555486s ago: executing program 7 (id=1412): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$eJzs3M9rHGUYB/DHTdrUxPxQa7WC9MVe9DIkOXhRkCApSBeUthFaQZiajS4Zd0NmCayI0ZNXL/4BXsWjN0G86SUe/Bu85eLRgzrSnbY2djVotRPD53PZh33nC8+7s7zwLvvO/gsfv7O5UWYb+SBaD7wYra2IyV9SpGjFLR/Es89/8+1Tl69eu7jSbq9eSunCypWl51JKc+e+ev29z5/+ejDz2hdzX07F3sIb+z8u/7B3Zu/s/q9X3u6WqVumXn+Q8nS93x/k14tOWu+Wm1lKrxadvOykbq/sbB8Y3yj6W1vDlPfWZ6e3tjtlmfLeMG12hmnQT4PtYcrfyru9lGVZmp0O7sXaZz9VVRVRVSfiZFRVVT0Y09GKh2I25mI+FuLheCQejdPxWJyJx+OJODu6qum+AQAAAAAAAAAAAAAAAAAA4HgZd/5/5q7z/59EjDv/f67h5gEAAAAAAAAAAAAAAAAAAOCYuHz12sWVdnv1UkqnIoqPdtZ21urXenxlI7pRRCcWYz5+jtHp/1pdn4z26mIaWYgPi92b+d2dtYmD+aXR4wTuyl94ub26VOfTwfxUTN+ZX475OD0+v/yH/PlR/lQ8c/6OfBbz8f2b0Y8i1uNG9vf8+0spvfRK+3b+u7167usN3hcAAAD4N2XptrH79yz7s/E6f9jvAzf214tj9/eT8eRks3Mnohy+u5kXRWe78eJWR/U7uxFxRBr7x0UrIo5AG39RnDj0mpkGGvt0JuIe4hMHvkhH4nP+PxaHrRwT/+m6xP1x86ZPNd0HAAAAAAAAAAAAf8/9+Dth03MEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Dd24FgAAAAAQJi/dRodGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBXAQAA//+siMjP") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) syz_clone(0xc0400, 0x0, 0xfffffffffffffca8, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000001740)={@desc={0x1, 0x0, @desc2}}) 3m11.322219961s ago: executing program 7 (id=1421): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_clone(0xac201300, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70b524, 0x25dfdbf9, {0x0, 0x0, 0x0, r3, {0xfff3, 0xffe0}, {0x0, 0xfff1}, {0xfff3, 0x1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xfff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008849}, 0xc884) 3m10.998949677s ago: executing program 7 (id=1433): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x400000}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}]}}, 0x0, 0x42}, 0x28) 3m10.948915728s ago: executing program 38 (id=1433): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x400000}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}]}}, 0x0, 0x42}, 0x28) 3m9.099501583s ago: executing program 4 (id=1473): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3m9.039026294s ago: executing program 4 (id=1476): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="3000000010000108000000000000db0000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080004004400000008001b"], 0x30}}, 0x0) r2 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x2}}, 0x20) write$P9_RREADLINK(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) io_uring_setup(0x7, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 3m8.22789816s ago: executing program 4 (id=1495): setpriority(0x0, 0x0, 0x2a14b59) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x4, 0x0, 0x0, 0x41100}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 3m8.064768832s ago: executing program 4 (id=1499): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone(0xc0400, 0x0, 0xfffffffffffffca8, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000001740)={@desc={0x1, 0x0, @desc2}}) 3m7.878637206s ago: executing program 4 (id=1506): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x7, 0x4932, 0x7f, 0x1, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0xca, r0}, 0x38) 3m7.65464549s ago: executing program 4 (id=1511): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000080bfa300000000000007030000fffeffff7a0af0fff8ffff1971a4f0ff00000000b7050000080000001e2400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095"], 0x0, 0xc, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x20000227, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, 0x54) 3m7.6543264s ago: executing program 39 (id=1511): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000080bfa300000000000007030000fffeffff7a0af0fff8ffff1971a4f0ff00000000b7050000080000001e2400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095"], 0x0, 0xc, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x10, 0x20000227, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, 0x54) 3m6.838038206s ago: executing program 8 (id=1533): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000280)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x2, 0x9}}, 0x20) futex(0x0, 0x5, 0x1, 0x0, 0x0, 0x1000000) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000540)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000100)=0x1, r3, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000140)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x6, @loopback, 0x40203}, r3}}, 0x30) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r3, 0xffffffff}}, 0x10) 3m6.802850607s ago: executing program 8 (id=1535): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x101, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x10, &(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000086000000bf0900000000000036090100000001ff95000000000000007d0afeff00000000bf91000000000000b702000002000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x26}, 0x94) 3m6.724754248s ago: executing program 8 (id=1540): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x4, 0xdd, 0xa}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 3m6.629933499s ago: executing program 8 (id=1541): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0xfe, 0x1227, &(0x7f00000024c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) syz_clone(0xc0400, 0x0, 0xfffffffffffffca8, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, 0x0) 3m6.347259275s ago: executing program 8 (id=1548): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x73, 0x1, 0x1, 0x99}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m5.995051812s ago: executing program 8 (id=1559): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 3m5.994970802s ago: executing program 40 (id=1559): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 2.559773661s ago: executing program 6 (id=6663): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x8200) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001600)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) pread64(r1, &(0x7f00000001c0)=""/23, 0x17, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x5c, 0x30, 0xb, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) writev(r5, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) ioctl$RTC_AIE_ON(r5, 0x7001) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") ptrace$cont(0x9, 0x0, 0xfffffffffffffffa, 0x8) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r6 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x100) preadv2(r6, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) 2.373109325s ago: executing program 6 (id=6665): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xa) 1.375812744s ago: executing program 6 (id=6687): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095", @ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000048000000160a01000000000000000000010000010900010073797a30000000000900020073797a30000000001c0003800800014000000000080002400000000000000140000000004c020000180a0101000b000000000000010000000900010073797a3000000000e800038008000140000000000800014000000000cc0003801400010069703665727370616e3000000000000014000100776732000000000000000000000000001400010076657468305f6d61637674617000000014000100626f6e645f736c6176655f310000000045000100626f6e645f736c6176655f300000000014000100636169663000000000000000000000001400010070696d726567300000000000000000001400010070696d726567310000000000000000001400010069705f76746930000000000000000000140001007465616d5f736c6176655f30000000ffff000140000000200900020073797a30"], 0x2dc}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) lsetxattr$trusted_overlay_upper(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0xd7, 0x2) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="300000001d00010025bd7000fbdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="10009d926bd6b7aa23a10000000000000000000000000101"], 0x30}}, 0x0) epoll_create(0x5) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000240)='kmem_cache_free\x00', r4}, 0x18) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x207, &(0x7f0000000500)="$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") mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, &(0x7f0000002480)={&(0x7f0000002380)={0x24, @long={0x3, 0x2}}, 0x14, &(0x7f0000002440)={0x0}}, 0x4040044) 1.356142494s ago: executing program 2 (id=6689): pipe2(&(0x7f0000000c40), 0x4800) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) syz_emit_ethernet(0x2a, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffffffffffffffff08004500001c00000000c72b9078b71414bbac1414ff0800907800060000"], 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = socket$inet_tcp(0x2, 0x1, 0x0) fsopen(0x0, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote, 0x1000}}}, 0x108) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0xb0c4}, [@IFLA_GROUP]}, 0x28}, 0x1, 0x0, 0x0, 0x4000014}, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1a, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x81, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x18, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffb0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x3f) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r10, r8, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x100}}, 0x30) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r8, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r11, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00 \x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) syz_emit_ethernet(0xf5, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}, @remote, @void, {@generic={0x8863, "ccf899d44b3b48ce2e29c30d326c69151b8e04621b9268ad260a253ad0c73dda8652099a51476c4e3cdef4b018771c9bce2b0ce42ee5d9e74fc6d3113df4e833f2cd05973e805d9e9d9738992c1e16c859d0b4b3514a46937d809d9e434cc225aad6b827caaa756064cd44aa86b3d4a6c02dad5596be9182bf35141f651158720dc5d3557f54c2928776cb40d59609c0cf48a4f1baf4a8aad8ffa35f3d7c7152204cc98376ce53d9bcf3fa7db9c4cde988646e9982b19eb8d1a20e4423723506ca3038fb42637d8fa3f930644aa8b113f51c971adcb0d8d305527cc8a40d0f3060c23fcfb6b117"}}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000340)={r1, 0x2}, &(0x7f0000000400)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x82, &(0x7f00000001c0)={r1, 0x407, 0x1}, &(0x7f0000000200)=0x8) setsockopt$inet6_group_source_req(r6, 0x29, 0x2c, &(0x7f0000000480)={0x1, {{0xa, 0x4e21, 0x672b, @mcast2, 0x7fff}}, {{0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}}, 0x108) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000000)={r1, 0x2340, 0xffff}, 0x8) 1.227197246s ago: executing program 2 (id=6692): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) ptrace(0x8, r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f00000002c0)={0x0, 0x1e, 0x0, 0x1, 0x0, 0x0, 0x200048c0}, 0x4040011) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b\x00\x00\x00\b\x00\x00\x00'], 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2, 0x0, 0x8000000000000001}, 0x18) r3 = socket$inet(0x2, 0x3, 0x4) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000014c0)=ANY=[@ANYBLOB="020300030d0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb00000000000000000200010000000000000007ffff00008003000500ff00000002"], 0x68}, 0x1, 0x7}, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000002e40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}, {{&(0x7f0000000180)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000002c40)=ANY=[@ANYBLOB="14000000fd96d38818f42bf5070000008903a700000000e5"], 0x18}}], 0x2, 0xe840) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r5, 0x0, 0x0, 0x94, 0x0, 0x10) 1.207201707s ago: executing program 2 (id=6693): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="2e00000025008101040000000000009f1ba1f848430000005e1406ca000000ffffffff25ed5860000a898988a800", 0x2e}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x900, 0x1a4) read$char_usb(r2, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000400)={0x9, 0x4, 0x0, 'queue0\x00', 0x80000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xd0f, 0x50bd2f, 0xfffffffc, {0x60, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xb, 0xb, 0x2}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x1004400c) 1.162332578s ago: executing program 2 (id=6695): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffffff4f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) set_mempolicy(0x4000, &(0x7f00000005c0)=0x3ff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000df1f000005"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e22ac14140a00000000000000000200130002"], 0x78}, 0x1, 0x7}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0xc, &(0x7f0000000780)=ANY=[@ANYRES64=r4, @ANYBLOB="46c8abf161064c9c0857d60de14bf54345c6a85690353ce5f75ceb2d2be77baf1ae2adbfbf2e3860add497a199a55054caffa98994dadb8cb4e90d533b3fbb36c36dcf22a13c017d3553e65a2e0804afc888f497a9ce925e0e74b8017b901298c8a8ba4ec634dc7b3ac51dbeac6579339dccbc24e78737a21682010e0d4eccf6e26feda7af810e579cd509c132de8ac5c16f01188f446fc784d1ea15c543573f91295711f2657b4ad1e80d653ab55a7522011d0dc946f085500e70e3a7f876312ffd6d18fcf7c59f5711859db1f5ab6bf6107d2f2b749dcd25cfc644ffa1081c1eca528ce1fa5da5c288ff6489a4cc2c95489a9a1b27a82d", @ANYRESHEX, @ANYBLOB="24e06ac5545333830819f5cab6863a85f28a1c2e3e9383e85190594b197073ede2dd44eb280b909f19475a51d53fdff657ecf3bea851cca6434396674f9ff1545d8bdd6c1cee9c886ca7f70587ba7a", @ANYRES16, @ANYRES16=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x8, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000191c0)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r10, @ANYRES32, @ANYBLOB="0000000002"], 0x48) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x7, 0x0, 0xf3c0000, {{0x31, 0x4, 0x2, 0xf, 0xc4, 0x66, 0x0, 0x2, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x23, 0x10, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @loopback, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1d}, @multicast2, @multicast2]}, @generic={0x83, 0x2}, @generic={0xc0, 0xf, "1ad809f84547de8340e98a866b"}, @cipso={0x86, 0x8, 0xffffffffffffffff, [{0x5, 0x2}]}, @ssrr={0x89, 0x23, 0xbe, [@rand_addr=0x64010102, @rand_addr=0x64010101, @broadcast, @remote, @remote, @rand_addr=0x64010101, @multicast1, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x3c, 0x19, 0x1, 0x0, [{@multicast2, 0x1}, {@remote, 0x8000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@local, 0xc}, {@rand_addr=0x64010100, 0x7ff}, {@dev={0xac, 0x14, 0x14, 0x36}}, {@local, 0xfffffff0}]}, @end, @generic={0x44, 0x7, "4fe9296a88"}, @ssrr={0x89, 0x7, 0xea, [@rand_addr=0x64010102]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r1, r11, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x3, 0x0, &(0x7f0000000080)=[0x3ff, 0x1, 0x7fffffff], 0x8000000000000}}, 0x30) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.dequeue\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r12, 0x4030582a, &(0x7f0000000040)=0xc00600000000c006) 1.129513549s ago: executing program 2 (id=6696): r0 = socket(0x10, 0x3, 0xffffffff) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) ioctl$TIOCMGET(r2, 0x5415, &(0x7f0000000080)) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x4}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r5, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000100)=0x6, 0x12) pause() sendfile(r0, r1, 0x0, 0x7fffffffffffffff) 1.126496558s ago: executing program 6 (id=6697): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xa) 1.116769989s ago: executing program 9 (id=6698): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x7, &(0x7f0000000540)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") getpgrp(0xffffffffffffffff) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r3 = fsopen(&(0x7f0000000580)='ceph\x00', 0x0) syz_create_resource$binfmt(&(0x7f0000000380)='./file2\x00') linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000240)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f00000005c0)={0x0, 0xffff, 0x0, [0x7, 0x0, 0x200, 0x2, 0x100], [0x11c0000000000000, 0x5, 0x3, 0xf, 0x4, 0x200, 0x8, 0x6, 0x2, 0x7, 0x5, 0xe57, 0x2, 0x5, 0x4, 0xa5a6, 0x613, 0x1, 0x8, 0x2, 0xe, 0x0, 0x8000000000000001, 0x7, 0x0, 0xdfd, 0x4, 0x2, 0x2, 0x9, 0x0, 0x2, 0x0, 0x9, 0x6, 0x8000000000, 0x7fffffff, 0xfffffffffffffffd, 0x100000000, 0x54, 0x7, 0xf, 0x1, 0x2, 0x7fffffff, 0xffffffff, 0x2, 0xf93, 0x9, 0x0, 0x8000000000000001, 0x9, 0xfffffffffffffff8, 0xe, 0x70e, 0x9, 0x7fffffffffffffff, 0x2, 0x8, 0x5, 0x7, 0x6, 0x9, 0xcfca, 0x2, 0xc, 0xffffffff, 0x2, 0xffffffff, 0x2, 0xfffffffffffffe00, 0x4, 0x4, 0x100000000, 0x4, 0x2, 0x1, 0x7, 0x1, 0x2, 0x8001, 0x3, 0x3, 0x7, 0x7, 0x7, 0xab89, 0x9a, 0x8, 0x0, 0xd038, 0xfffffffffffffffd, 0x7, 0x10000, 0x8, 0x9, 0x6, 0x2399, 0x10000, 0x7f, 0x4, 0x1, 0x8, 0x40, 0x3fc0000000000, 0xff, 0xf9c, 0x9, 0x9, 0x2, 0x2, 0x2, 0x2, 0x8000000000000000, 0x9, 0x5, 0x104, 0xd35, 0x8, 0x100000000, 0x3]}) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000a00)={{r0}, r4, 0x1a, @inherit={0x70, &(0x7f0000000180)={0x1, 0x5, 0x9, 0x1, {0x0, 0x4, 0x7fffffff, 0xe7, 0x5}, [0x7, 0x0, 0x77, 0xfffffffffffffff7, 0x2bf]}}, @devid=r5}) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x1}}, './file0\x00'}) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) 958.338162ms ago: executing program 9 (id=6704): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095", @ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000048000000160a01000000000000000000010000010900010073797a30000000000900020073797a30000000001c0003800800014000000000080002400000000000000140000000004c020000180a0101000b000000000000010000000900010073797a3000000000e800038008000140000000000800014000000000cc0003801400010069703665727370616e3000000000000014000100776732000000000000000000000000001400010076657468305f6d61637674617000000014000100626f6e645f736c6176655f310000000045000100626f6e645f736c6176655f300000000014000100636169663000000000000000000000001400010070696d726567300000000000000000001400010070696d726567310000000000000000001400010069705f76746930000000000000000000140001007465616d5f736c6176655f30000000ffff000140000000200900020073797a30"], 0x2dc}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) lsetxattr$trusted_overlay_upper(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0xd7, 0x2) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="300000001d00010025bd7000fbdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="10009d926bd6b7aa23a10000000000000000000000000101"], 0x30}}, 0x0) epoll_create(0x5) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000240)='kmem_cache_free\x00', r4}, 0x18) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x207, &(0x7f0000000500)="$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") mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r5, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) 897.140103ms ago: executing program 1 (id=6707): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffffff4f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) set_mempolicy(0x4000, &(0x7f00000005c0)=0x3ff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e22ac14140a00000000000000000200130002"], 0x78}, 0x1, 0x7}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0xc, &(0x7f0000000780)=ANY=[@ANYRES64=r4, @ANYBLOB="46c8abf161064c9c0857d60de14bf54345c6a85690353ce5f75ceb2d2be77baf1ae2adbfbf2e3860add497a199a55054caffa98994dadb8cb4e90d533b3fbb36c36dcf22a13c017d3553e65a2e0804afc888f497a9ce925e0e74b8017b901298c8a8ba4ec634dc7b3ac51dbeac6579339dccbc24e78737a21682010e0d4eccf6e26feda7af810e579cd509c132de8ac5c16f01188f446fc784d1ea15c543573f91295711f2657b4ad1e80d653ab55a7522011d0dc946f085500e70e3a7f876312ffd6d18fcf7c59f5711859db1f5ab6bf6107d2f2b749dcd25cfc644ffa1081c1eca528ce1fa5da5c288ff6489a4cc2c95489a9a1b27a82d", @ANYRESHEX, @ANYBLOB="24e06ac5545333830819f5cab6863a85f28a1c2e3e9383e85190594b197073ede2dd44eb280b909f19475a51d53fdff657ecf3bea851cca6434396674f9ff1545d8bdd6c1cee9c886ca7f70587ba7a", @ANYRES16, @ANYRES16=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x8, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000191c0)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r10, @ANYRES32, @ANYBLOB="0000000002"], 0x48) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x7, 0x0, 0xf3c0000, {{0x31, 0x4, 0x2, 0xf, 0xc4, 0x66, 0x0, 0x2, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x23, 0x10, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @loopback, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1d}, @multicast2, @multicast2]}, @generic={0x83, 0x2}, @generic={0xc0, 0xf, "1ad809f84547de8340e98a866b"}, @cipso={0x86, 0x8, 0xffffffffffffffff, [{0x5, 0x2}]}, @ssrr={0x89, 0x23, 0xbe, [@rand_addr=0x64010102, @rand_addr=0x64010101, @broadcast, @remote, @remote, @rand_addr=0x64010101, @multicast1, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x3c, 0x19, 0x1, 0x0, [{@multicast2, 0x1}, {@remote, 0x8000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@local, 0xc}, {@rand_addr=0x64010100, 0x7ff}, {@dev={0xac, 0x14, 0x14, 0x36}}, {@local, 0xfffffff0}]}, @end, @generic={0x44, 0x7, "4fe9296a88"}, @ssrr={0x89, 0x7, 0xea, [@rand_addr=0x64010102]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r1, r11, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x3, 0x0, &(0x7f0000000080)=[0x3ff, 0x1, 0x7fffffff], 0x8000000000000}}, 0x30) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.dequeue\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r12, 0x4030582a, &(0x7f0000000040)=0xc00600000000c006) 870.874933ms ago: executing program 1 (id=6708): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020a07b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095", @ANYRESOCT=r0], &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x6f, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000700)='kfree\x00', r1}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000048000000160a01000000000000000000010000010900010073797a30000000000900020073797a30000000001c0003800800014000000000080002400000000000000140000000004c020000180a0101000b000000000000010000000900010073797a3000000000e800038008000140000000000800014000000000cc0003801400010069703665727370616e3000000000000014000100776732000000000000000000000000001400010076657468305f6d61637674617000000014000100626f6e645f736c6176655f310000000045000100626f6e645f736c6176655f300000000014000100636169663000000000000000000000001400010070696d726567300000000000000000001400010070696d726567310000000000000000001400010069705f76746930000000000000000000140001007465616d5f736c6176655f30000000ffff000140000000200900020073797a30"], 0x2dc}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) lsetxattr$trusted_overlay_upper(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], 0xd7, 0x2) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=ANY=[@ANYBLOB="300000001d00010025bd7000fbdbdf250a000000", @ANYRES32=0x0, @ANYBLOB="10009d926bd6b7aa23a10000000000000000000000000101"], 0x30}}, 0x0) epoll_create(0x5) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1089d8b8588d72ec29c48284b70043dc6124d877142a48448b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d4023f210fa34b63a715a74e802a0dc6bf25d8a242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767192361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae616b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f01000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb796ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab04000000ffe760e717a04becff0f719197724f4fce1093b62d7e8c7123d890decace0200f404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef29cd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f871b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf0100483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6c354463d7d0917fc80e5009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab4000000000000000028df75cf43f8ecc8d37b126602111b40e761fd21081920382f14d12ca3c471c7868e7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec743af930cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89fa516dab183ee65744fb8fc4f9ce2242e0f00000000010000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe3436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f49198e97c862e29e4570600000091c691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104d74dc07748f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426cfce471fef821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ada08f5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bde54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c514b37c668554d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a39938613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85eff010000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae05025040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483d02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1099e40550a1cfd80e918d685a7b099a4f8ed654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732ab916a781b9912160a3fd2a2e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272abbef3e7a828a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece58e752b47e6f677ec97c5c568a89d6e36b165c391339878b699644c96bd6ea589765ed2a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac4741201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6d00000000000000000000008f6555f3b7d5021dfc8eb504f1e4fef716d60f0d50b03fc014fd3dff46f56750f0ba4f1b9f7de5c17e7d1f18522897edab8e9e76b667ec6b01908400f55e16f0cfbf026be5f5acc681053f697d62b3545aec4606e190216c22c1d8807b6c43f0f0a4b53619fe5c9412821c3816194a5e29cf12cc7a197b5bdafb096d2d7f6be483814c92ef29c3a21c169794c7de3b4c706f4de5f4b93c831944c7b66fa49f317aa22dbc211e19f031c4f8bee14ecd5eb061a052044adc4dd1b63a1500a9c0e09dbba23f2726a55975efb4519d864d984dcb3a1dcafa1124a6b004029a706478df3be2438d2e35e6ca674dc190143a0b6f7db3408c0c08011e5d8f54711a0bd410ab53a15b1596cb77d2b58df2d8d8"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000240)='kmem_cache_free\x00', r4}, 0x18) syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0xcc04, &(0x7f0000000880)=ANY=[@ANYBLOB='dots,gid=', @ANYRESHEX=0xee01, @ANYBLOB="2c6e6f646f74732c646f74732c74696d655f6f66667365743d3078303030303030303030303030303264382c646f74732c646f74732c6e6f646f74732c6e6f646f74732c646f74732c646f74732c6e6f646f74732c6e6f646f74732c636865636b3d72656c617865642c666c7573682c64656275672c646f74732c73686f77657865632c6e6f646f74732c6572726f72733d636f6e74696e75652c646f74732c71756965742c003fa5bfd3e968f92d300444698c6f8d94d8b46ce3ce652bc8f6"], 0x1, 0x207, &(0x7f0000000500)="$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") mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000040)=0x2, 0x4) sendmsg$802154_dgram(0xffffffffffffffff, &(0x7f0000002480)={&(0x7f0000002380)={0x24, @long={0x3, 0x2}}, 0x14, &(0x7f0000002440)={0x0}}, 0x4040044) 846.297474ms ago: executing program 1 (id=6709): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000020500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0900020073797a310000000008000a40fffffffc1400"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 747.650776ms ago: executing program 1 (id=6710): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000850, &(0x7f0000000040)={[{@errors_remount}, {@discard}]}, 0x1, 0x512, &(0x7f0000000380)="$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") 712.185796ms ago: executing program 9 (id=6711): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x8200) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001600)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) pread64(r1, &(0x7f00000001c0)=""/23, 0x17, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x5c, 0x30, 0xb, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) writev(r5, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) ioctl$RTC_AIE_ON(r5, 0x7001) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$eJzs3d9rW2UfAPDvSX93e9/2hRd0XhUELYyldtZNwYuJFyI4GOi1W0mzMps2o0nHWgpuiOCNoOKFoDe79se889Yft/pfeCEbU7vhxAupnDRZszXpkq1J5vb5wGme5zwnfZ5vnnOe8yTnkATwyJpI/2QiDkTEB0nEWHV9EhEDlVR/xLGt7W5urOfSJYnNzdd/Syrb3NhYz0Xdc1L7qpnHI+L7dyMOZnbWW1pdW5gtFPLL1fxUefHsVGl17dCZxdn5/Hx+6cj0zMzho88dPbJ3sf7x09r+qx++8vRXx/5657HL7/+QxLHYXy2rj2OvTMRE9TUZSF/C27y815X1WLJ7cYM9gAdB2jF9W0d5HIix6KukmhjpZssAgE55OyI2m+lrWgIA/Kslzc//AMBDqfY5wI2N9Vxt6e0nEt117aWIGN6Kv3Z9c6ukv3rNbrhyHXT0RnLblZEkIsb3oP6JiPjsmze/SJfo0HVIgEYuXIyIU+MTO8f/ZMc9C+16poVtJu7IG/+ge75N5z/PN5r/ZW7Nf6LB/GeowbF7L+5+/Geu7EE1TaXzvxfr7m27WRd/1XhfNfefypxvIDl9ppBPx7b/RsRkDAyl+eld6pi8/vf1ZmX187/fP3rr87T+9HF7i8yV/qHbnzM3W569n5jrXbsY8UR/o/iTW/2fNJn/nmixjldfeO/TZmVp/Gm8tWVn/J21eSniqYb9v31HW7Lr/YlTld1hqrZTNPD1z5+MNqu/vv/TJa2/9l6gG9L+H909/vGk/n7NUvt1/Hhp7LtmZXePv/H+P5i8UUkPVtedny2Xl6cjBpPXdq4/vP3cWr62fRr/5JONj//d9v/0PeGpFuPvv/rrl/cef2el8c+11f/tJy7fXOhrVn9r/T9TSU1W17Qy/rXawPt57QAAAAAAAAAAAAAAAAAAAAAAAACgVZmI2B9JJnsrnclks1u/4f3/GM0UiqXywdPFlaW5qPxW9ngMZGpfdTlW932o09Xvw6/lD9+RfzYi/hcRHw+NVPLZXLEw1+vgAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBqX5Pf/0/9MtTr1gEAHTPc1+sWAADdNtzf6xYAAN023NbWIx1rBwDQPe2d/wGAh4HzPwA8epz/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6LATx4+ny+afG+u5ND93bnVloXju0Fy+tJBdXMllc8Xls9n5YnG+kM/miotN/9GFrYdCsXh2JpZWzk+V86XyVGl17eRicWWpfPLM4ux8/mR+oGuRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDrSqtrC7OFQn5ZQkKi7URc2DqOHpT27F0iBrdHiZGejU8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD7p/AgAA//+mAybn") ptrace$cont(0x9, 0x0, 0xfffffffffffffffa, 0x8) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r6 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x100) preadv2(r6, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) 703.580037ms ago: executing program 1 (id=6712): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xe, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) r5 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_DISALLOCATE(r5, 0x5608) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x5, 0x0, 0x0, 0x7ffc0002}]}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000140)='kfree\x00', r6, 0x0, 0xfffffffffffffff8}, 0x18) r7 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r7, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @loopback, 0xa3c}, {0xa, 0xfffe, 0xfffffffd, @dev, 0x4}, 0x1000, {[0x9, 0x0, 0xfffffffe, 0xfffffef9, 0x0, 0x1, 0x2]}}, 0x5c) epoll_create1(0x0) 644.638247ms ago: executing program 5 (id=6713): r0 = socket(0x22, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x40) write$binfmt_aout(r1, 0x0, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r3 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r3, 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x1000, 0x0, 0x2, 0x0, 0x7, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000000}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3, 0x12, r4, 0x0) 621.377608ms ago: executing program 1 (id=6714): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a0000000500000002000000070000", @ANYRES32=0x1, @ANYBLOB="000000000000000000bf96fa", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = dup(r4) syz_emit_ethernet(0x22, &(0x7f00000009c0)=ANY=[@ANYBLOB="4ec236b6093afffff0ffffff810031739d47606f4f0400"/34], &(0x7f0000000a00)={0x1, 0x1, [0x407, 0x6ff, 0x554, 0xc60]}) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 574.416419ms ago: executing program 9 (id=6715): r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = socket$inet_udp(0x2, 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x100b28, 0x1, 0x0, 0x1, 0xa, 0x21005, 0x209, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x50) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) write$evdev(r3, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000004000000000000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000090100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x808}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, &(0x7f0000000200)=0x32) close(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x10, [{0xb, 0x3, 0x9}]}]}, {0x0, [0x0, 0x0, 0x2e, 0x0, 0x61]}}, &(0x7f0000005bc0)=""/255, 0x37, 0xff, 0x9, 0x1000}, 0x28) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f00000007c0)={0x78, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000011}, 0x48000) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000340)=0x0) syz_pidfd_open(r6, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000030000000050afd010000000000000000010020000c00024000000000000000010900010073797a3100000000040004802c000000000a01040000000000000000070000020900010073797a30492500000c000440000000000000000214000000110001"], 0xe4}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000d4) syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f00000006c0)={[{@grpjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@grpquota}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000001200)="$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") r7 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file1\x00', 0x404640, 0x12) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000100000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000800008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r9}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ff9}]}) socket$nl_netfilter(0x10, 0x3, 0xc) msgsnd(0x0, &(0x7f0000002900)=ANY=[@ANYBLOB="01"], 0xfd1, 0x0) unshare(0x100) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000002880)={{0x2, 0x0, 0x0, 0x0, 0x0, 0x1a, 0x7}, 0x0, 0x0, 0x3, 0x1414, 0x10001, 0x4e, 0xffffffffffffffca, 0x8, 0x8581, 0x3, 0x0, 0xffffffffffffffff}) lseek(r7, 0x1, 0x3) request_key(&(0x7f0000000780)='asymmetric\x00', &(0x7f0000000000)={'syz', 0x3}, &(0x7f0000000040)='-fs\x00\x00\x00\x98a\x7f\"\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9\x91e\x1aNT\x8bm\x1a\xaf$K\xcb\x13&]\xba\x95+(\x19\x950?+\xd0\x17\x1a\xf0b\xb7\x03\xaabA\"?\x12/d\x94\xff\xd6\xe1\xd9\x7f\xff\x7fg\xe1\xab\xfe\x97\x99\x976\xe6\xc5\xaf\xb7\xf8QtU\xde\xffw\a\xf9\xc8\xdbK\xc0?\xdc;B\xa7\xb6X\xbdW\x01\x1bB\x9c\x99\xce!\xec\xb0\xe8]\x82t\xbf\xd7\xe8\x9e_\xd0<\xa7,\xf8\x18\xc3', r0) 573.195728ms ago: executing program 5 (id=6716): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0a0000000500000002000000070000", @ANYRES32=0x1, @ANYBLOB="000000000000000000bf96fa2016cab9766e", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0x48) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = dup(r4) syz_emit_ethernet(0x22, &(0x7f00000009c0)=ANY=[@ANYBLOB="4ec236b6093afffff0ffffff810031739d47606f4f0400"/34], &(0x7f0000000a00)={0x1, 0x1, [0x407, 0x6ff, 0x554, 0xc60]}) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000940)={[{@barrier_val}, {@resuid}, {@block_validity}, {@errors_remount}]}, 0x1, 0x79b, &(0x7f0000000180)="$eJzs3c1rXFUbAPDnTpImTfu+zQsv2LppVloonbQ1tgqCERciWCjo2jZMpiFmkimZSWlCFhYRBBG0uBB049qPunMruvZvcCMiLVXTYsWFjNz5SKb5mHw0k2mb3w9ucs6dc+ecZ+7cc8/MPcwNYM8aTP9kIo5ExIdJxKH6+iQieqqp7oiRWrl7iwu5dEmiUnn996Ra5u7iQi6atkkdqGcOR8T370Ycz6yutzQ3PzlaKORn6vmh8tTlodLc/ImJqdHx/Hh++syp4eHTZ589e2bnYv3zx/mDtz565emvR/5+54kbH/yQxEgcrD/WHMdOGYzB+mvSk76E93l5pyvrsKTTDWBb0kOzq3aUx5E4FF3VFADwOEvP/xUAYI9JnP8BYI9pfA9wd3Eh11g6+43E7rr9UkT01eJvXN+sPdJdv2bXV70O2n83ie76FdHYwetdgxHx2bdvfpku0abrkABreftaRFwcGFzd/yer5ixs1clNlBlckdf/we75Lh3/PLfW+C+zNP6JpfHPst41jt3tGIzY15xfffxnbq654Ys7UHl9/PdCbW5bGmjT+G9p0tpAVz33nzRzNCImCvm0b/tvRByLnt5LE4X8qRZ1HLvzz531Hmse//1x/a0v0vrT/8slMje7e+/fZmy0PPogMTe7fS3iye7luX33VvX/fdWx7sr9n6473+qJjy4nX33+vU/XK5bGn8bbWFbH316VzyOeirXjb0hazk8cSnf/ydrftev45udP+terv3n/p0taf+OzwG5I939/6/gHkub5mqWdrX/j+Nd+/+9L3qimG53H1dFyeeZUxL7ktdXrTy9v28g3yqfx1yJdGX+m5fs//SR4cZMxdt/67avtx7+kLVMs0/jHtrT/t564cW+ya/vxp/t/uJo6Vl+zmf5vsw18kNcOAAAAAAAAAAAAAAAAAAAAAAAAADYrExEHI8lkl9KZTDZbu4f3/6M/UyiWyscvFWenx6J6r+yB6Mk0furyUC2fNH7/dKApf3pF/pmI+F9EfNy7v5rP5oqFsU4HDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1B9a5/3/q195Otw4AaJu+DUvcyd+XrVQqlTa2BwBov43P/wDA46bF+X//brYDANg9Pv8DwN7j/A8Ae4/zPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG12/ty5dKn8tbiQS/NjV+ZmJ4tXTozlS5PZqdlcNlecuZwdLxbHC/lsrji10fMVisXLwzE9e3WonC+Vh0pz8xemirPT5QsTU6Pj+Qv5nl2JCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2pjQ3PzlaKORnHovE+xHxEDSjHYkkHopmdCTxy4mfDrcqc32Dt/HIQxHFI5bodM8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gj4NwAA//8PbSWm") r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ff"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 434.303341ms ago: executing program 9 (id=6717): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000007080)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000011c0)="93bffce623851797a8dc7901f0048678cd35ef833c350900f95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb600000000000000", 0x79}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="51e657b8220ca193c9de9030c3c717", 0xf}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000001280)="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", 0xad6}], 0x1, &(0x7f0000000740)}}], 0x3, 0xc0) 428.118592ms ago: executing program 5 (id=6718): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0xffffff4f, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) set_mempolicy(0x4000, &(0x7f00000005c0)=0x3ff, 0xa) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580)=0xffffffffffffffff, 0x4) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)='%pS \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="020300030f0000002cbd7040fcdbdf2503000900800000001cdc0dca1d9f68846960e56de42944af030006000000000002004e22ac1414bb000000000000000002000100000000000000070c00000080030005000000000002004e22ac14140a00000000000000000200130002"], 0x78}, 0x1, 0x7}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x15, 0xc, &(0x7f0000000780)=ANY=[@ANYRES64=r4, @ANYBLOB="46c8abf161064c9c0857d60de14bf54345c6a85690353ce5f75ceb2d2be77baf1ae2adbfbf2e3860add497a199a55054caffa98994dadb8cb4e90d533b3fbb36c36dcf22a13c017d3553e65a2e0804afc888f497a9ce925e0e74b8017b901298c8a8ba4ec634dc7b3ac51dbeac6579339dccbc24e78737a21682010e0d4eccf6e26feda7af810e579cd509c132de8ac5c16f01188f446fc784d1ea15c543573f91295711f2657b4ad1e80d653ab55a7522011d0dc946f085500e70e3a7f876312ffd6d18fcf7c59f5711859db1f5ab6bf6107d2f2b749dcd25cfc644ffa1081c1eca528ce1fa5da5c288ff6489a4cc2c95489a9a1b27a82d", @ANYRESHEX, @ANYBLOB="24e06ac5545333830819f5cab6863a85f28a1c2e3e9383e85190594b197073ede2dd44eb280b909f19475a51d53fdff657ecf3bea851cca6434396674f9ff1545d8bdd6c1cee9c886ca7f70587ba7a", @ANYRES16, @ANYRES16=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x32, '\x00', 0x0, @fallback=0x8, r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r8}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000191c0)=ANY=[@ANYBLOB="010000000b000000050010000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r10, @ANYRES32, @ANYBLOB="0000000002"], 0x48) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033c88e160d2745a91b08363bcc34006d0009788455ec9ad10b24"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x10, 0x7, 0x0, 0xf3c0000, {{0x31, 0x4, 0x2, 0xf, 0xc4, 0x66, 0x0, 0x2, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x23}, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x23, 0x10, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @loopback, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1d}, @multicast2, @multicast2]}, @generic={0x83, 0x2}, @generic={0xc0, 0xf, "1ad809f84547de8340e98a866b"}, @cipso={0x86, 0x8, 0xffffffffffffffff, [{0x5, 0x2}]}, @ssrr={0x89, 0x23, 0xbe, [@rand_addr=0x64010102, @rand_addr=0x64010101, @broadcast, @remote, @remote, @rand_addr=0x64010101, @multicast1, @rand_addr=0x64010101]}, @timestamp_addr={0x44, 0x3c, 0x19, 0x1, 0x0, [{@multicast2, 0x1}, {@remote, 0x8000}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@local, 0xc}, {@rand_addr=0x64010100, 0x7ff}, {@dev={0xac, 0x14, 0x14, 0x36}}, {@local, 0xfffffff0}]}, @end, @generic={0x44, 0x7, "4fe9296a88"}, @ssrr={0x89, 0x7, 0xea, [@rand_addr=0x64010102]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r1, r11, 0x25, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x3, 0x0, &(0x7f0000000080)=[0x3ff, 0x1, 0x7fffffff], 0x8000000000000}}, 0x30) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, &(0x7f0000000040)) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.dequeue\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r12, 0x4030582a, &(0x7f0000000040)=0xc00600000000c006) 375.377892ms ago: executing program 5 (id=6719): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB="020300030c0000002cbd7040fcdbdf2502000900080000001c00000000000000030006000000000002004e22000000000000ae00000000000200010000"], 0x60}, 0x1, 0x7}, 0x0) 323.198923ms ago: executing program 9 (id=6720): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r7, 0x0, 0x20}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) r8 = socket(0x10, 0x803, 0x0) bind$netlink(r8, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockopt$netlink(r2, 0x10e, 0xa, &(0x7f00000003c0)=""/82, &(0x7f0000000340)=0x52) getsockname$packet(r8, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000a00)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r9, 0x40881, 0x64088}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x800) socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r12, &(0x7f0000000500)=[{&(0x7f0000000040)="93d90400000304", 0x7}, {&(0x7f0000000180)="010400001bfa64", 0x5}], 0x2) socket(0x1, 0x803, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000280)='./bus\x00', 0x21081e, &(0x7f0000000a80)={[{@minixdf}]}, 0x1, 0x506, &(0x7f0000000f40)="$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") sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x4008814) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x1}, 0x18) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), r10) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r8, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r13, 0x800, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", ""]}, 0x30}}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) 322.761004ms ago: executing program 5 (id=6721): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x8200) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001600)={r0, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) pread64(r1, &(0x7f00000001c0)=""/23, 0x17, 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000280)={0x1, &(0x7f0000000780)=[{0x200000000006, 0xf, 0x6, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000001b80)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00'}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x5c, 0x30, 0xb, 0x0, 0x0, {}, [{0x48, 0x1, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xfdb}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20004000}, 0x10000000) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r3}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r4, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3c, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) writev(r5, &(0x7f00000025c0)=[{&(0x7f0000000240)='4', 0x1}, {0x0, 0x900}], 0x2) ioctl$RTC_AIE_ON(r5, 0x7001) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") ptrace$cont(0x9, 0x0, 0xfffffffffffffffa, 0x8) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000080)='ip6_vti0\x00', 0x10) creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r6 = open(&(0x7f0000000000)='./file0\x00', 0x4000, 0x100) preadv2(r6, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) 199.473486ms ago: executing program 2 (id=6722): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000850, &(0x7f0000000040)={[{@errors_remount}, {@discard}]}, 0x1, 0x512, &(0x7f0000000380)="$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") 199.178846ms ago: executing program 6 (id=6723): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000240)='kfree\x00', r4, 0x0, 0x20}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_clone3(&(0x7f0000000740)={0x8180080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff], 0x1}, 0x58) r5 = socket(0x10, 0x803, 0x0) bind$netlink(r5, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockopt$netlink(r1, 0x10e, 0xa, &(0x7f00000003c0)=""/82, &(0x7f0000000340)=0x52) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x2642, 0x0) writev(r8, &(0x7f0000000500)=[{&(0x7f0000000040)="93d90400000304", 0x7}, {&(0x7f0000000180)="010400001bfa64", 0x5}], 0x2) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x4008814) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 36.541529ms ago: executing program 6 (id=6724): bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[], 0x50) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) creat(0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xfecc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) fallocate(r0, 0x0, 0xbf5, 0x2000402) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x0, 0x0, 0x0, 0xfffffffffdffffff}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r5 = dup(r4) syz_emit_ethernet(0x22, &(0x7f00000009c0)=ANY=[@ANYBLOB="4ec236b6093afffff0ffffff810031739d47606f4f0400"/34], &(0x7f0000000a00)={0x1, 0x1, [0x407, 0x6ff, 0x554, 0xc60]}) write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r7}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 0s ago: executing program 5 (id=6725): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='projid_map\x00') write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r2, &(0x7f0000000300)={0x0, 0xeaff, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10000) listen(r1, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6, 0xffffffffffffffff, 0x0, 0x2}, 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) r10 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c000000100003052cbd7000fedbdf2500000020", @ANYRES32=0x0, @ANYBLOB="0000000000080400240012800b0001006d61637365630000140002800500060000000000050007000000000008000500", @ANYRES32=r11], 0x4c}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000003c0)=ANY=[@ANYRES32=r7, @ANYRES32=r4, @ANYBLOB='\a'], 0x10) sendmmsg$inet6(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0x1}], 0x1}}], 0x1, 0x4000) r13 = syz_open_dev$usbfs(&(0x7f0000000000), 0x70, 0x103301) ioctl$USBDEVFS_IOCTL(r13, 0xc0105512, &(0x7f0000000200)) kernel console output (not intermixed with test programs): 8][ T1392] total_swap 1249280 [ 239.483032][ T1392] total_swapcached 16384 [ 239.487321][ T1392] total_pgpgin 102290 [ 239.491286][ T1392] total_pgpgout 102267 [ 239.495376][ T1392] total_pgfault 140956 [ 239.499461][ T1392] total_pgmajfault 120 [ 239.503615][ T1392] total_inactive_anon 12288 [ 239.508104][ T1392] total_active_anon 0 [ 239.512064][ T1392] total_inactive_file 77824 [ 239.516627][ T1392] total_active_file 0 [ 239.520603][ T1392] total_unevictable 0 [ 239.524599][ T1392] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.6034,pid=20419,uid=0 [ 239.539705][ T1392] Memory cgroup out of memory: Killed process 20419 (syz.9.6034) total-vm:96136kB, anon-rss:1264kB, file-rss:22448kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 239.681024][T20452] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6045'. [ 239.814235][ T29] audit: type=1400 audit(1759336341.862:6407): avc: denied { create } for pid=20465 comm="syz.5.6052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 239.815761][T20467] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6052'. [ 239.833849][ T29] audit: type=1400 audit(1759336341.862:6408): avc: denied { ioctl } for pid=20465 comm="syz.5.6052" path="socket:[59359]" dev="sockfs" ino=59359 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 239.877355][ T29] audit: type=1400 audit(1759336341.862:6409): avc: denied { bind } for pid=20465 comm="syz.5.6052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 239.916107][ T29] audit: type=1400 audit(1759336341.962:6410): avc: denied { cpu } for pid=20465 comm="syz.5.6052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 239.921429][T20471] loop6: detected capacity change from 0 to 512 [ 239.994347][T20471] ext4 filesystem being mounted at /401/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.120922][ T29] audit: type=1400 audit(1759336342.162:6411): avc: denied { execmem } for pid=20477 comm="syz.9.6056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 240.190434][T20482] loop5: detected capacity change from 0 to 1024 [ 240.205311][T20482] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 240.235237][T20482] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.6058: Invalid block bitmap block 0 in block_group 0 [ 240.276913][T20482] Quota error (device loop5): write_blk: dquota write failed [ 240.284364][T20482] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 240.315038][T20482] EXT4-fs error (device loop5): ext4_acquire_dquot:6943: comm syz.5.6058: Failed to acquire dquot type 0 [ 240.325915][T20488] loop6: detected capacity change from 0 to 512 [ 240.344050][T20482] EXT4-fs error (device loop5): ext4_free_blocks:6696: comm syz.5.6058: Freeing blocks not in datazone - block = 0, count = 4096 [ 240.381883][T20482] EXT4-fs error (device loop5): ext4_read_inode_bitmap:139: comm syz.5.6058: Invalid inode bitmap blk 0 in block_group 0 [ 240.385215][T20488] ext4 filesystem being mounted at /403/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.409333][ T41] EXT4-fs error (device loop5): ext4_release_dquot:6979: comm kworker/u8:2: Failed to release dquot type 0 [ 240.412675][T20482] EXT4-fs error (device loop5) in ext4_free_inode:361: Corrupt filesystem [ 240.442385][T20482] EXT4-fs (loop5): 1 orphan inode deleted [ 240.699629][T20503] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6065'. [ 240.750802][T20505] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6066'. [ 240.849050][T20509] loop1: detected capacity change from 0 to 1024 [ 240.861713][T20509] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 240.868047][T20513] loop2: detected capacity change from 0 to 512 [ 240.892816][T20509] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.6068: Invalid block bitmap block 0 in block_group 0 [ 240.929908][T20518] loop6: detected capacity change from 0 to 1024 [ 240.939210][T20509] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.6068: Failed to acquire dquot type 0 [ 240.962436][T20513] ext4 filesystem being mounted at /358/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 240.989318][T20518] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 241.024096][T20509] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.6068: Freeing blocks not in datazone - block = 0, count = 4096 [ 241.051663][T20509] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.6068: Invalid inode bitmap blk 0 in block_group 0 [ 241.052192][T20518] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.6072: Invalid block bitmap block 0 in block_group 0 [ 241.090425][T20518] EXT4-fs error (device loop6): ext4_acquire_dquot:6943: comm syz.6.6072: Failed to acquire dquot type 0 [ 241.103223][T20518] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.6072: Freeing blocks not in datazone - block = 0, count = 4096 [ 241.118762][ T3452] EXT4-fs error (device loop1): ext4_release_dquot:6979: comm kworker/u8:7: Failed to release dquot type 0 [ 241.132055][T20518] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.6072: Invalid inode bitmap blk 0 in block_group 0 [ 241.142632][T20509] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 241.145605][T20518] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 241.162462][T20518] EXT4-fs (loop6): 1 orphan inode deleted [ 241.163752][ T3452] EXT4-fs error (device loop6): ext4_release_dquot:6979: comm kworker/u8:7: Failed to release dquot type 0 [ 241.170006][T20509] EXT4-fs (loop1): 1 orphan inode deleted [ 241.217459][T20527] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6075'. [ 241.232251][T20509] netlink: 'syz.1.6068': attribute type 13 has an invalid length. [ 241.248118][T20529] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6074'. [ 241.257259][T20529] hsr_slave_0: left promiscuous mode [ 241.264028][T20529] hsr_slave_1: left promiscuous mode [ 241.481010][T20546] siw: device registration error -23 [ 241.482498][T20545] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6082'. [ 241.631835][T20553] loop6: detected capacity change from 0 to 512 [ 241.680220][T20553] ext4 filesystem being mounted at /411/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.753123][T20559] loop2: detected capacity change from 0 to 512 [ 241.813193][T20559] ext4 filesystem being mounted at /362/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.898131][T20567] 9pnet_fd: Insufficient options for proto=fd [ 242.076648][T20575] loop1: detected capacity change from 0 to 2048 [ 242.348236][T20586] loop5: detected capacity change from 0 to 512 [ 242.562330][T20586] ext4 filesystem being mounted at /442/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.730099][T20567] Set syz1 is full, maxelem 65536 reached [ 242.976399][T20607] loop2: detected capacity change from 0 to 512 [ 243.023346][T20607] ext4 filesystem being mounted at /366/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.215257][T20614] loop1: detected capacity change from 0 to 2048 [ 243.344387][T20625] siw: device registration error -23 [ 243.598971][T20644] loop1: detected capacity change from 0 to 2048 [ 243.640032][T20654] loop2: detected capacity change from 0 to 512 [ 243.671381][T20629] lo speed is unknown, defaulting to 1000 [ 243.699692][T20654] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 243.988493][T20692] loop2: detected capacity change from 0 to 512 [ 244.024874][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 244.024888][ T29] audit: type=1400 audit(1759336346.072:6648): avc: denied { mounton } for pid=20686 comm="syz.2.6127" path="/374/file1" dev="tmpfs" ino=2017 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 244.098790][ T29] audit: type=1400 audit(1759336346.142:6649): avc: denied { create } for pid=20700 comm="syz.6.6128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 244.098793][T20692] ext4 filesystem being mounted at /374/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.129770][ T29] audit: type=1400 audit(1759336346.142:6650): avc: denied { mount } for pid=20686 comm="syz.2.6127" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 244.152217][ T29] audit: type=1400 audit(1759336346.152:6651): avc: denied { add_name } for pid=20686 comm="syz.2.6127" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 244.173019][ T29] audit: type=1400 audit(1759336346.152:6652): avc: denied { create } for pid=20686 comm="syz.2.6127" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 244.207721][ T29] audit: type=1400 audit(1759336346.252:6653): avc: denied { write open } for pid=20686 comm="syz.2.6127" path="/374/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 244.232969][ T29] audit: type=1400 audit(1759336346.252:6654): avc: denied { read write } for pid=20686 comm="syz.2.6127" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 244.250967][T20702] siw: device registration error -23 [ 244.255970][ T29] audit: type=1400 audit(1759336346.252:6655): avc: denied { open } for pid=20686 comm="syz.2.6127" path="/374/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 244.284325][ T29] audit: type=1400 audit(1759336346.252:6656): avc: denied { ioctl } for pid=20686 comm="syz.2.6127" path="/374/file1/file1" dev="loop2" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 244.313791][ T29] audit: type=1400 audit(1759336346.292:6657): avc: denied { create } for pid=20700 comm="syz.6.6128" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 244.459444][T20717] loop5: detected capacity change from 0 to 2048 [ 244.492798][T20678] lo speed is unknown, defaulting to 1000 [ 244.827751][T20751] siw: device registration error -23 [ 244.859373][T20757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6142'. [ 244.872653][T20757] netlink: 312 bytes leftover after parsing attributes in process `syz.5.6142'. [ 244.872687][T20757] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6142'. [ 244.874717][T20755] loop9: detected capacity change from 0 to 1024 [ 244.877309][T20755] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 244.877332][T20755] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 244.882746][T20755] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 244.935755][T20755] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 244.949304][T20757] loop5: detected capacity change from 0 to 256 [ 244.990857][T20755] JBD2: no valid journal superblock found [ 244.990869][T20755] EXT4-fs (loop9): Could not load journal inode [ 245.122032][T20755] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6141'. [ 245.188175][T15212] EXT4-fs unmount: 90 callbacks suppressed [ 245.188189][T15212] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.279658][T20778] siw: device registration error -23 [ 245.337983][T20782] loop2: detected capacity change from 0 to 2048 [ 245.369106][T20782] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.444253][T15212] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.618481][T20796] siw: device registration error -23 [ 245.692818][T20802] loop6: detected capacity change from 0 to 512 [ 245.714181][T20802] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.726917][T20802] ext4 filesystem being mounted at /421/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.870842][T20815] loop9: detected capacity change from 0 to 512 [ 245.899591][T20816] loop2: detected capacity change from 0 to 2048 [ 245.912181][T14596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.925182][T20818] siw: device registration error -23 [ 245.931538][T20816] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.947816][T20815] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.979397][T20815] ext4 filesystem being mounted at /257/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.026370][T20829] loop6: detected capacity change from 0 to 1024 [ 246.048846][T15212] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.061040][T20829] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 246.101203][T20829] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.6161: Invalid block bitmap block 0 in block_group 0 [ 246.132664][T20829] EXT4-fs error (device loop6): ext4_acquire_dquot:6943: comm syz.6.6161: Failed to acquire dquot type 0 [ 246.137691][T20841] loop1: detected capacity change from 0 to 512 [ 246.157427][T20829] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.6161: Freeing blocks not in datazone - block = 0, count = 4096 [ 246.178038][T16811] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.188263][T20829] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.6161: Invalid inode bitmap blk 0 in block_group 0 [ 246.201385][T20829] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 246.210256][ T12] EXT4-fs error (device loop6): ext4_release_dquot:6979: comm kworker/u8:0: Failed to release dquot type 0 [ 246.223054][T20829] EXT4-fs (loop6): 1 orphan inode deleted [ 246.229165][T20829] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.231710][T20841] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.260952][T20849] siw: device registration error -23 [ 246.280797][T20841] ext4 filesystem being mounted at /317/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.329325][T20851] netlink: 104 bytes leftover after parsing attributes in process `syz.9.6172'. [ 246.339155][T20851] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6172'. [ 246.341792][T20833] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.6167: Failed to acquire dquot type 1 [ 246.370368][T14596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.413600][T16170] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.433830][T20861] loop6: detected capacity change from 0 to 2048 [ 246.456016][T20861] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.518903][T20874] loop5: detected capacity change from 0 to 512 [ 246.536584][T20874] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.551019][T20874] ext4 filesystem being mounted at /459/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.564802][T20880] siw: device registration error -23 [ 246.597934][T20884] loop9: detected capacity change from 0 to 1024 [ 246.605152][T20884] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 246.618978][T13950] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.629979][T20884] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.6187: Invalid block bitmap block 0 in block_group 0 [ 246.644809][T20884] EXT4-fs error (device loop9): ext4_acquire_dquot:6943: comm syz.9.6187: Failed to acquire dquot type 0 [ 246.656865][T20884] EXT4-fs error (device loop9): ext4_free_blocks:6696: comm syz.9.6187: Freeing blocks not in datazone - block = 0, count = 4096 [ 246.656905][T14596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.690099][T20884] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.6187: Invalid inode bitmap blk 0 in block_group 0 [ 246.691567][T20889] netlink: 96 bytes leftover after parsing attributes in process `syz.5.6188'. [ 246.706605][ T12] EXT4-fs error (device loop9): ext4_release_dquot:6979: comm kworker/u8:0: Failed to release dquot type 0 [ 246.746319][T20884] EXT4-fs error (device loop9) in ext4_free_inode:361: Corrupt filesystem [ 246.760690][T20884] EXT4-fs (loop9): 1 orphan inode deleted [ 246.761870][T20893] loop6: detected capacity change from 0 to 512 [ 246.777614][T20884] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.798395][T20893] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.867507][T16811] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.917030][T20911] siw: device registration error -23 [ 246.924862][T14596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.962384][T20914] loop5: detected capacity change from 0 to 2048 [ 246.982963][T20918] loop9: detected capacity change from 0 to 512 [ 246.997129][T20914] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.000352][T20922] FAULT_INJECTION: forcing a failure. [ 247.000352][T20922] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 247.022752][T20922] CPU: 0 UID: 0 PID: 20922 Comm: syz.6.6201 Not tainted syzkaller #0 PREEMPT(voluntary) [ 247.022846][T20922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 247.022859][T20922] Call Trace: [ 247.022866][T20922] [ 247.022875][T20922] __dump_stack+0x1d/0x30 [ 247.022893][T20922] dump_stack_lvl+0xe8/0x140 [ 247.022912][T20922] dump_stack+0x15/0x1b [ 247.022928][T20922] should_fail_ex+0x265/0x280 [ 247.022952][T20922] should_fail+0xb/0x20 [ 247.022971][T20922] should_fail_usercopy+0x1a/0x20 [ 247.023059][T20922] _copy_from_user+0x1c/0xb0 [ 247.023083][T20922] ___sys_sendmsg+0xc1/0x1d0 [ 247.023116][T20922] __x64_sys_sendmsg+0xd4/0x160 [ 247.023185][T20922] x64_sys_call+0x191e/0x3000 [ 247.023218][T20922] do_syscall_64+0xd2/0x200 [ 247.023242][T20922] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 247.023308][T20922] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 247.023336][T20922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.023356][T20922] RIP: 0033:0x7f01b3e0eec9 [ 247.023443][T20922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.023469][T20922] RSP: 002b:00007f01b286f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 247.023485][T20922] RAX: ffffffffffffffda RBX: 00007f01b4065fa0 RCX: 00007f01b3e0eec9 [ 247.023495][T20922] RDX: 0000000000040884 RSI: 0000200000000300 RDI: 0000000000000003 [ 247.023506][T20922] RBP: 00007f01b286f090 R08: 0000000000000000 R09: 0000000000000000 [ 247.023520][T20922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 247.023531][T20922] R13: 00007f01b4066038 R14: 00007f01b4065fa0 R15: 00007ffcde7aa7b8 [ 247.023587][T20922] [ 247.028840][T20918] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.211415][T20918] ext4 filesystem being mounted at /262/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.233168][T13950] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.244956][T16811] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.384354][T20944] siw: device registration error -23 [ 247.405089][T20948] loop9: detected capacity change from 0 to 128 [ 247.466545][T20952] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 247.561874][T20962] loop1: detected capacity change from 0 to 2048 [ 247.651979][T20967] lo speed is unknown, defaulting to 1000 [ 247.727081][T20967] loop2: detected capacity change from 0 to 2048 [ 247.765657][ T6506] Alternate GPT is invalid, using primary GPT. [ 247.772129][ T6506] loop2: p1 p2 p3 [ 247.775870][ T6506] loop2: partition table partially beyond EOD, truncated [ 247.790282][T20962] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 247.896242][T16170] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 247.993299][T20967] Alternate GPT is invalid, using primary GPT. [ 247.999609][T20967] loop2: p1 p2 p3 [ 248.003371][T20967] loop2: partition table partially beyond EOD, truncated [ 248.091469][T20978] siw: device registration error -23 [ 248.120420][T20980] loop1: detected capacity change from 0 to 512 [ 248.134446][T20980] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.147071][T20980] ext4 filesystem being mounted at /325/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 248.172404][T20959] capability: warning: `syz.2.6213' uses 32-bit capabilities (legacy support in use) [ 248.214734][T16170] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 248.234238][T20984] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6220'. [ 248.505510][T20986] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 248.665531][T20999] loop9: detected capacity change from 0 to 2048 [ 248.690492][T20999] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 248.741473][T16811] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.514964][ T29] kauditd_printk_skb: 504 callbacks suppressed [ 249.514978][ T29] audit: type=1400 audit(1759336351.562:7150): avc: denied { create } for pid=21022 comm="syz.5.6237" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 249.541133][T21023] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 249.542157][ T29] audit: type=1400 audit(1759336351.562:7151): avc: denied { mounton } for pid=21022 comm="syz.5.6237" path="/475/file0" dev="tmpfs" ino=2549 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 249.583889][ T29] audit: type=1400 audit(1759336351.632:7152): avc: denied { map_create } for pid=21027 comm="syz.5.6239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 249.608839][ T29] audit: type=1400 audit(1759336351.632:7153): avc: denied { read write } for pid=16170 comm="syz-executor" name="loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 249.633299][ T29] audit: type=1400 audit(1759336351.632:7154): avc: denied { open } for pid=16170 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 249.633830][T21028] loop5: detected capacity change from 0 to 1024 [ 249.657530][ T29] audit: type=1400 audit(1759336351.632:7155): avc: denied { ioctl } for pid=16170 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=101 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 249.689847][ T29] audit: type=1400 audit(1759336351.652:7156): avc: denied { name_bind } for pid=21029 comm="syz.1.6240" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 249.711828][ T29] audit: type=1400 audit(1759336351.652:7157): avc: denied { node_bind } for pid=21029 comm="syz.1.6240" saddr=172.20.20.170 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 249.734450][ T29] audit: type=1400 audit(1759336351.712:7158): avc: denied { mounton } for pid=21027 comm="syz.5.6239" path="/476/file0" dev="tmpfs" ino=2555 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 249.758798][T21028] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 249.770144][T21028] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60515!=35945) [ 249.796441][ T29] audit: type=1400 audit(1759336351.802:7159): avc: denied { prog_load } for pid=21031 comm="syz.1.6241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 249.839515][T21028] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 249.862794][T21028] netlink: 176 bytes leftover after parsing attributes in process `syz.5.6239'. [ 249.862827][T21028] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6239'. [ 249.874201][T21028] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6239'. [ 249.904450][T13950] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 249.937365][T21042] loop1: detected capacity change from 0 to 2048 [ 249.954229][T21038] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6245'. [ 249.965110][T21042] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.024235][T16170] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.056250][T21056] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 250.241734][T21084] netlink: '+}[@': attribute type 10 has an invalid length. [ 250.252530][T21084] team0: Port device dummy0 added [ 250.275778][T21086] loop1: detected capacity change from 0 to 512 [ 250.296959][T21086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 250.309945][T21086] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.420181][T16170] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 250.467364][T21094] FAULT_INJECTION: forcing a failure. [ 250.467364][T21094] name failslab, interval 1, probability 0, space 0, times 0 [ 250.480116][T21094] CPU: 0 UID: 0 PID: 21094 Comm: syz.1.6258 Not tainted syzkaller #0 PREEMPT(voluntary) [ 250.480185][T21094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 250.480199][T21094] Call Trace: [ 250.480207][T21094] [ 250.480215][T21094] __dump_stack+0x1d/0x30 [ 250.480237][T21094] dump_stack_lvl+0xe8/0x140 [ 250.480257][T21094] dump_stack+0x15/0x1b [ 250.480290][T21094] should_fail_ex+0x265/0x280 [ 250.480312][T21094] ? __pfx_cond_bools_destroy+0x10/0x10 [ 250.480358][T21094] should_failslab+0x8c/0xb0 [ 250.480378][T21094] kmem_cache_alloc_noprof+0x50/0x310 [ 250.480400][T21094] ? hashtab_duplicate+0xfe/0x360 [ 250.480505][T21094] ? __pfx_cond_bools_destroy+0x10/0x10 [ 250.480594][T21094] hashtab_duplicate+0xfe/0x360 [ 250.480694][T21094] ? __pfx_cond_bools_copy+0x10/0x10 [ 250.480795][T21094] cond_policydb_dup+0xd2/0x4e0 [ 250.480815][T21094] security_set_bools+0xa0/0x340 [ 250.480868][T21094] sel_commit_bools_write+0x1ea/0x270 [ 250.480888][T21094] vfs_writev+0x403/0x8b0 [ 250.480949][T21094] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 250.481061][T21094] ? mutex_lock+0xd/0x30 [ 250.481086][T21094] do_writev+0xe7/0x210 [ 250.481110][T21094] __x64_sys_writev+0x45/0x50 [ 250.481130][T21094] x64_sys_call+0x1e9a/0x3000 [ 250.481195][T21094] do_syscall_64+0xd2/0x200 [ 250.481223][T21094] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 250.481249][T21094] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 250.481285][T21094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.481353][T21094] RIP: 0033:0x7f2b3f7feec9 [ 250.481366][T21094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.481385][T21094] RSP: 002b:00007f2b3e25f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 250.481456][T21094] RAX: ffffffffffffffda RBX: 00007f2b3fa55fa0 RCX: 00007f2b3f7feec9 [ 250.481469][T21094] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 250.481482][T21094] RBP: 00007f2b3e25f090 R08: 0000000000000000 R09: 0000000000000000 [ 250.481495][T21094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 250.481534][T21094] R13: 00007f2b3fa56038 R14: 00007f2b3fa55fa0 R15: 00007ffe0158be28 [ 250.481552][T21094] [ 250.774317][T21100] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 250.846144][T21110] loop9: detected capacity change from 0 to 1024 [ 250.857234][T21110] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 250.878153][T21110] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.6263: Invalid block bitmap block 0 in block_group 0 [ 250.896101][T21110] EXT4-fs error (device loop9): ext4_acquire_dquot:6943: comm syz.9.6263: Failed to acquire dquot type 0 [ 250.925443][T21110] EXT4-fs error (device loop9): ext4_free_blocks:6696: comm syz.9.6263: Freeing blocks not in datazone - block = 0, count = 4096 [ 250.926610][T21110] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.6263: Invalid inode bitmap blk 0 in block_group 0 [ 250.954241][ T5610] EXT4-fs error (device loop9): ext4_release_dquot:6979: comm kworker/u8:8: Failed to release dquot type 0 [ 250.966163][T21110] EXT4-fs error (device loop9) in ext4_free_inode:361: Corrupt filesystem [ 250.966265][T21123] loop6: detected capacity change from 0 to 512 [ 250.974885][T21110] EXT4-fs (loop9): 1 orphan inode deleted [ 250.988370][T21110] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.009286][T21123] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.009368][T21123] ext4 filesystem being mounted at /437/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.040082][T21110] netlink: 'syz.9.6263': attribute type 13 has an invalid length. [ 251.049549][T21110] gretap0: refused to change device tx_queue_len [ 251.050194][T21110] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 251.100937][T14596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.135837][T21128] loop6: detected capacity change from 0 to 1024 [ 251.147658][T21128] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 251.149289][T16811] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.160882][T21128] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.6270: Invalid block bitmap block 0 in block_group 0 [ 251.199658][T21128] EXT4-fs error (device loop6): ext4_acquire_dquot:6943: comm syz.6.6270: Failed to acquire dquot type 0 [ 251.199861][T21128] EXT4-fs error (device loop6): ext4_free_blocks:6696: comm syz.6.6270: Freeing blocks not in datazone - block = 0, count = 4096 [ 251.200097][T21128] EXT4-fs error (device loop6): ext4_read_inode_bitmap:139: comm syz.6.6270: Invalid inode bitmap blk 0 in block_group 0 [ 251.200245][T21128] EXT4-fs error (device loop6) in ext4_free_inode:361: Corrupt filesystem [ 251.200305][T21128] EXT4-fs (loop6): 1 orphan inode deleted [ 251.200690][T21128] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.264412][ T3452] EXT4-fs error (device loop6): ext4_release_dquot:6979: comm kworker/u8:7: Failed to release dquot type 0 [ 251.294497][T21128] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6270'. [ 251.330787][T21136] siw: device registration error -23 [ 251.371854][T14596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 251.628234][T21148] loop6: detected capacity change from 0 to 512 [ 251.641268][T21148] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.641403][T21148] ext4 filesystem being mounted at /442/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.811596][T21158] loop2: detected capacity change from 0 to 512 [ 251.826859][T21158] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 251.852892][T21158] ext4 filesystem being mounted at /399/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 251.908402][T21164] loop5: detected capacity change from 0 to 1024 [ 251.953330][T21164] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 251.964376][T21164] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (60515!=35945) [ 251.986922][T15212] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.033261][T21166] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6284'. [ 252.043683][T21164] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 252.080542][T14596] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 252.091679][T14596] CPU: 0 UID: 0 PID: 14596 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(voluntary) [ 252.091704][T14596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 252.091715][T14596] Call Trace: [ 252.091756][T14596] [ 252.091763][T14596] __dump_stack+0x1d/0x30 [ 252.091867][T14596] dump_stack_lvl+0xe8/0x140 [ 252.091894][T14596] dump_stack+0x15/0x1b [ 252.091974][T14596] dump_header+0x81/0x220 [ 252.092000][T14596] oom_kill_process+0x342/0x400 [ 252.092100][T14596] out_of_memory+0x979/0xb80 [ 252.092124][T14596] try_charge_memcg+0x5e6/0x9e0 [ 252.092157][T14596] charge_memcg+0x51/0xc0 [ 252.092182][T14596] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 252.092287][T14596] __read_swap_cache_async+0x1df/0x350 [ 252.092316][T14596] swap_cluster_readahead+0x277/0x3e0 [ 252.092417][T14596] swapin_readahead+0xde/0x6f0 [ 252.092484][T14596] ? __filemap_get_folio+0x4f7/0x6b0 [ 252.092514][T14596] ? swap_cache_get_folio+0x77/0x200 [ 252.092548][T14596] do_swap_page+0x301/0x2430 [ 252.092582][T14596] ? css_rstat_updated+0xb7/0x240 [ 252.092628][T14596] ? __pfx_default_wake_function+0x10/0x10 [ 252.092649][T14596] handle_mm_fault+0x9a5/0x2c20 [ 252.092762][T14596] do_user_addr_fault+0x630/0x1080 [ 252.092813][T14596] exc_page_fault+0x62/0xa0 [ 252.092851][T14596] asm_exc_page_fault+0x26/0x30 [ 252.092867][T14596] RIP: 0033:0x7f01b3ce5db7 [ 252.092881][T14596] Code: 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 e8 f9 ea 00 48 69 8c 24 90 00 00 00 e8 03 00 00 8b 78 08 <48> 8b 44 24 18 48 c1 ea 12 4c 8b 0d f9 f8 ea 00 48 01 d1 39 7c 24 [ 252.092895][T14596] RSP: 002b:00007ffcde7aab40 EFLAGS: 00010206 [ 252.092911][T14596] RAX: 0000001b34124000 RBX: 00000000000003ef RCX: 000000000003d478 [ 252.092924][T14596] RDX: 000000000f663c08 RSI: 00007ffcde7aabd0 RDI: 0000000000000017 [ 252.092938][T14596] RBP: 00007ffcde7aab7c R08: 000000003abe6e64 R09: 7fffffffffffffff [ 252.092975][T14596] R10: 3fffffffffffffff R11: 0000000000000202 R12: 0000000000001388 [ 252.092985][T14596] R13: 00000000000927c0 R14: 000000000003d778 R15: 00007ffcde7aabd0 [ 252.093001][T14596] [ 252.294402][T14596] memory: usage 307192kB, limit 307200kB, failcnt 18931 [ 252.301326][T14596] memory+swap: usage 309340kB, limit 9007199254740988kB, failcnt 0 [ 252.309230][T14596] kmem: usage 307164kB, limit 9007199254740988kB, failcnt 0 [ 252.316575][T14596] Memory cgroup stats for /syz6: [ 252.325580][T14596] cache 8192 [ 252.333782][T14596] rss 0 [ 252.336585][T14596] shmem 0 [ 252.339582][T14596] mapped_file 0 [ 252.343045][T14596] dirty 0 [ 252.345968][T14596] writeback 0 [ 252.349242][T14596] workingset_refault_anon 308 [ 252.353939][T14596] workingset_refault_file 1160 [ 252.358737][T14596] swap 2211840 [ 252.362090][T14596] swapcached 16384 [ 252.365857][T14596] pgpgin 250657 [ 252.369310][T14596] pgpgout 250651 [ 252.372877][T14596] pgfault 218680 [ 252.376421][T14596] pgmajfault 143 [ 252.379951][T14596] inactive_anon 16384 [ 252.383964][T14596] active_anon 0 [ 252.387447][T14596] inactive_file 8192 [ 252.391386][T14596] active_file 0 [ 252.394971][T14596] unevictable 0 [ 252.398420][T14596] hierarchical_memory_limit 314572800 [ 252.403858][T14596] hierarchical_memsw_limit 9223372036854771712 [ 252.409995][T14596] total_cache 8192 [ 252.413858][T14596] total_rss 0 [ 252.417127][T14596] total_shmem 0 [ 252.418822][T21169] siw: device registration error -23 [ 252.420562][T14596] total_mapped_file 0 [ 252.429821][T14596] total_dirty 0 [ 252.433315][T14596] total_writeback 0 [ 252.437149][T14596] total_workingset_refault_anon 308 [ 252.442420][T14596] total_workingset_refault_file 1160 [ 252.447714][T14596] total_swap 2211840 [ 252.451623][T14596] total_swapcached 16384 [ 252.455939][T14596] total_pgpgin 250657 [ 252.459911][T14596] total_pgpgout 250651 [ 252.464407][T14596] total_pgfault 218680 [ 252.468510][T14596] total_pgmajfault 143 [ 252.472793][T14596] total_inactive_anon 16384 [ 252.477283][T14596] total_active_anon 0 [ 252.481256][T14596] total_inactive_file 8192 [ 252.485679][T14596] total_active_file 0 [ 252.489643][T14596] total_unevictable 0 [ 252.493647][T14596] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.6278,pid=21146,uid=0 [ 252.508346][T14596] Memory cgroup out of memory: Killed process 21146 (syz.6.6278) total-vm:94088kB, anon-rss:1136kB, file-rss:22312kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 252.532432][T13950] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.590774][T21175] lo speed is unknown, defaulting to 1000 [ 253.113209][T21193] loop9: detected capacity change from 0 to 1024 [ 253.131253][T21193] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 253.170721][T14596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.224675][T21193] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.6293: Invalid block bitmap block 0 in block_group 0 [ 253.244412][T21193] EXT4-fs error (device loop9): ext4_acquire_dquot:6943: comm syz.9.6293: Failed to acquire dquot type 0 [ 253.271456][T21193] EXT4-fs error (device loop9): ext4_free_blocks:6696: comm syz.9.6293: Freeing blocks not in datazone - block = 0, count = 4096 [ 253.286926][T21193] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.6293: Invalid inode bitmap blk 0 in block_group 0 [ 253.320804][T21193] EXT4-fs error (device loop9) in ext4_free_inode:361: Corrupt filesystem [ 253.335037][T21206] siw: device registration error -23 [ 253.340510][T21193] EXT4-fs (loop9): 1 orphan inode deleted [ 253.356842][T21193] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.399947][T21193] netlink: 'syz.9.6293': attribute type 13 has an invalid length. [ 253.411043][T21193] gretap0: refused to change device tx_queue_len [ 253.418430][T21193] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 253.444293][T21209] team0: Caught tx_queue_len zero misconfig [ 253.481974][ T1392] EXT4-fs error (device loop9): ext4_release_dquot:6979: comm kworker/u8:5: Failed to release dquot type 0 [ 253.527591][T16811] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.630937][T21219] siw: device registration error -23 [ 253.644860][T21215] loop6: detected capacity change from 0 to 2048 [ 253.673982][T21215] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.798657][T14596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.842206][T21229] loop5: detected capacity change from 0 to 2048 [ 253.885011][T21229] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.960971][T13950] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.020180][T21245] loop5: detected capacity change from 0 to 8192 [ 254.038892][T21244] atomic_op ffff888122052528 conn xmit_atomic 0000000000000000 [ 254.059707][T21244] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6308'. [ 254.321519][T21266] loop1: detected capacity change from 0 to 512 [ 254.352883][T21266] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.368903][T21266] ext4 filesystem being mounted at /351/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.468227][T16170] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.491327][T21275] loop9: detected capacity change from 0 to 512 [ 254.540074][ T29] kauditd_printk_skb: 319 callbacks suppressed [ 254.540090][ T29] audit: type=1400 audit(1759336356.582:7470): avc: denied { execute } for pid=21278 comm="syz.5.6320" path="/494/cpu.stat" dev="tmpfs" ino=2652 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 254.570672][T21275] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 254.584852][T21275] ext4 filesystem being mounted at /286/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 254.671973][ T29] audit: type=1400 audit(1759336356.712:7471): avc: denied { create } for pid=21282 comm="syz.5.6321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 254.672547][T21283] audit: audit_lost=3 audit_rate_limit=0 audit_backlog_limit=64 [ 254.699026][ T29] audit: type=1326 audit(1759336356.712:7472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21282 comm="syz.5.6321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83904eec9 code=0x7ffc0000 [ 254.699245][T21283] audit: out of memory in audit_log_start [ 254.728544][ T29] audit: type=1326 audit(1759336356.712:7473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21282 comm="syz.5.6321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83904eec9 code=0x7ffc0000 [ 254.752053][ T29] audit: type=1326 audit(1759336356.712:7474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21282 comm="syz.5.6321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7fd83904eec9 code=0x7ffc0000 [ 254.775568][ T29] audit: type=1326 audit(1759336356.712:7475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21282 comm="syz.5.6321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83904eec9 code=0x7ffc0000 [ 254.799132][ T29] audit: type=1326 audit(1759336356.712:7476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21282 comm="syz.5.6321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd83904d710 code=0x7ffc0000 [ 254.804829][T21286] loop1: detected capacity change from 0 to 512 [ 254.822738][ T29] audit: type=1326 audit(1759336356.712:7477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21282 comm="syz.5.6321" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd83904d97f code=0x7ffc0000 [ 254.899778][T16811] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.910846][T21286] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 254.919162][T21286] EXT4-fs (loop1): orphan cleanup on readonly fs [ 254.929164][T21294] loop6: detected capacity change from 0 to 512 [ 254.938084][T21286] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.6322: corrupted inode contents [ 254.952598][T21286] EXT4-fs (loop1): Remounting filesystem read-only [ 254.959451][T21286] EXT4-fs (loop1): 1 truncate cleaned up [ 254.967407][ T1392] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 254.978072][ T1392] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 254.995062][ T1392] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 255.005720][T21294] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.024434][T21294] ext4 filesystem being mounted at /446/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.027186][T21286] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 255.122409][T14596] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.198051][T21317] lo: Caught tx_queue_len zero misconfig [ 255.207725][T21316] loop2: detected capacity change from 0 to 512 [ 255.217145][T16170] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.259308][T21316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.274606][T21316] ext4 filesystem being mounted at /407/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.350093][T21330] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 255.461184][T21339] loop1: detected capacity change from 0 to 1024 [ 255.484500][T21339] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 255.498012][T21339] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.6341: Invalid block bitmap block 0 in block_group 0 [ 255.550883][T21339] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.6341: Failed to acquire dquot type 0 [ 255.564014][T21339] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.6341: Freeing blocks not in datazone - block = 0, count = 4096 [ 255.577844][T21339] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.6341: Invalid inode bitmap blk 0 in block_group 0 [ 255.592807][ T12] EXT4-fs error (device loop1): ext4_release_dquot:6979: comm kworker/u8:0: Failed to release dquot type 0 [ 255.605743][T21339] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 255.614782][T21339] EXT4-fs (loop1): 1 orphan inode deleted [ 255.636988][T21339] netlink: 'syz.1.6341': attribute type 13 has an invalid length. [ 255.694418][T21339] gretap0: refused to change device tx_queue_len [ 255.702145][T21339] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 255.852115][T21347] loop9: detected capacity change from 0 to 1024 [ 255.860470][T21347] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 255.882823][T21347] EXT4-fs error (device loop9): ext4_read_block_bitmap_nowait:483: comm syz.9.6343: Invalid block bitmap block 0 in block_group 0 [ 255.896997][T21347] EXT4-fs error (device loop9): ext4_acquire_dquot:6943: comm syz.9.6343: Failed to acquire dquot type 0 [ 255.910775][T21347] EXT4-fs error (device loop9): ext4_free_blocks:6696: comm syz.9.6343: Freeing blocks not in datazone - block = 0, count = 4096 [ 255.926666][T21347] EXT4-fs error (device loop9): ext4_read_inode_bitmap:139: comm syz.9.6343: Invalid inode bitmap blk 0 in block_group 0 [ 255.939872][T21347] EXT4-fs error (device loop9) in ext4_free_inode:361: Corrupt filesystem [ 255.948604][ T5610] EXT4-fs error (device loop9): ext4_release_dquot:6979: comm kworker/u8:8: Failed to release dquot type 0 [ 255.970817][T21319] Set syz1 is full, maxelem 65536 reached [ 255.977568][T21347] EXT4-fs (loop9): 1 orphan inode deleted [ 256.000662][T21347] netlink: 'syz.9.6343': attribute type 13 has an invalid length. [ 256.010544][T21347] gretap0: refused to change device tx_queue_len [ 256.018218][T21347] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 256.045381][T21352] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.6345'. [ 256.076417][T21355] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6347'. [ 256.120677][T21357] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 256.178474][T21368] loop5: detected capacity change from 0 to 512 [ 256.230844][T21368] ext4 filesystem being mounted at /502/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.291747][T21378] loop2: detected capacity change from 0 to 512 [ 256.311902][T21378] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 256.419306][T21386] loop5: detected capacity change from 0 to 512 [ 256.437378][T21386] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 256.509428][T21391] pimreg: entered allmulticast mode [ 256.524010][T21393] loop1: detected capacity change from 0 to 512 [ 256.531840][T21386] FAT-fs (loop5): FAT read failed (blocknr 1568) [ 256.538101][T21391] pimreg: left allmulticast mode [ 256.558128][T21386] FAT-fs (loop5): FAT read failed (blocknr 1568) [ 256.574406][T21393] ext4 filesystem being mounted at /363/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.697284][T21399] loop1: detected capacity change from 0 to 512 [ 256.735180][T21402] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 256.749810][T21399] ext4 filesystem being mounted at /364/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.083355][T21380] Set syz1 is full, maxelem 65536 reached [ 257.197099][T21420] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6369'. [ 257.206211][T21420] netlink: 312 bytes leftover after parsing attributes in process `syz.9.6369'. [ 257.215433][T21420] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6369'. [ 257.236331][T21418] team0: Port device dummy0 removed [ 257.269735][T21420] loop9: detected capacity change from 0 to 256 [ 257.354340][T21422] sctp: [Deprecated]: syz.2.6370 (pid 21422) Use of int in maxseg socket option. [ 257.354340][T21422] Use struct sctp_assoc_value instead [ 257.570719][T21449] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6378'. [ 257.606745][T21449] loop2: detected capacity change from 0 to 512 [ 257.665588][T21449] EXT4-fs error (device loop2): __ext4_fill_super:5510: inode #2: comm syz.2.6378: casefold flag without casefold feature [ 257.680843][T21454] loop1: detected capacity change from 0 to 512 [ 257.708757][T21449] EXT4-fs (loop2): get root inode failed [ 257.714520][T21449] EXT4-fs (loop2): mount failed [ 257.741712][T21454] ext4 filesystem being mounted at /368/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 257.769999][T21464] FAULT_INJECTION: forcing a failure. [ 257.769999][T21464] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.783127][T21464] CPU: 0 UID: 0 PID: 21464 Comm: syz.5.6383 Not tainted syzkaller #0 PREEMPT(voluntary) [ 257.783153][T21464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 257.783164][T21464] Call Trace: [ 257.783171][T21464] [ 257.783177][T21464] __dump_stack+0x1d/0x30 [ 257.783197][T21464] dump_stack_lvl+0xe8/0x140 [ 257.783273][T21464] dump_stack+0x15/0x1b [ 257.783288][T21464] should_fail_ex+0x265/0x280 [ 257.783307][T21464] should_fail+0xb/0x20 [ 257.783323][T21464] should_fail_usercopy+0x1a/0x20 [ 257.783346][T21464] _copy_to_user+0x20/0xa0 [ 257.783373][T21464] simple_read_from_buffer+0xb5/0x130 [ 257.783400][T21464] proc_fail_nth_read+0x10e/0x150 [ 257.783495][T21464] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 257.783519][T21464] vfs_read+0x1a5/0x770 [ 257.783609][T21464] ? __rcu_read_unlock+0x4f/0x70 [ 257.783724][T21464] ? __fget_files+0x184/0x1c0 [ 257.783738][T21464] ? filename_create+0x92/0x230 [ 257.783767][T21464] ksys_read+0xda/0x1a0 [ 257.783884][T21464] __x64_sys_read+0x40/0x50 [ 257.783916][T21464] x64_sys_call+0x27c0/0x3000 [ 257.783938][T21464] do_syscall_64+0xd2/0x200 [ 257.783978][T21464] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 257.784022][T21464] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 257.784059][T21464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.784080][T21464] RIP: 0033:0x7fd83904d8dc [ 257.784096][T21464] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 257.784111][T21464] RSP: 002b:00007fd837ab7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 257.784186][T21464] RAX: ffffffffffffffda RBX: 00007fd8392a5fa0 RCX: 00007fd83904d8dc [ 257.784200][T21464] RDX: 000000000000000f RSI: 00007fd837ab70a0 RDI: 0000000000000003 [ 257.784213][T21464] RBP: 00007fd837ab7090 R08: 0000000000000000 R09: 0000000000000000 [ 257.784287][T21464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.784299][T21464] R13: 00007fd8392a6038 R14: 00007fd8392a5fa0 R15: 00007ffdd840ae08 [ 257.784318][T21464] [ 258.043743][T21473] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6384'. [ 258.087475][T21473] netlink: 312 bytes leftover after parsing attributes in process `syz.5.6384'. [ 258.096702][T21473] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6384'. [ 258.105774][T21485] loop5: detected capacity change from 0 to 256 [ 258.331526][T21508] siw: device registration error -23 [ 258.341792][T21512] netlink: '+}[@': attribute type 10 has an invalid length. [ 258.353698][T21512] team0: Port device dummy0 added [ 258.364759][T21514] netlink: '+}[@': attribute type 10 has an invalid length. [ 258.384917][T21514] team0: Port device dummy0 added [ 258.470879][T21521] netlink: 12 bytes leftover after parsing attributes in process `wg1'. [ 258.502130][T21526] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6402'. [ 258.654715][T21537] loop5: detected capacity change from 0 to 512 [ 258.701693][T21539] siw: device registration error -23 [ 258.834469][T21547] FAULT_INJECTION: forcing a failure. [ 258.834469][T21547] name failslab, interval 1, probability 0, space 0, times 0 [ 258.847217][T21547] CPU: 0 UID: 0 PID: 21547 Comm: syz.9.6412 Not tainted syzkaller #0 PREEMPT(voluntary) [ 258.847248][T21547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 258.847260][T21547] Call Trace: [ 258.847265][T21547] [ 258.847332][T21547] __dump_stack+0x1d/0x30 [ 258.847417][T21547] dump_stack_lvl+0xe8/0x140 [ 258.847437][T21547] dump_stack+0x15/0x1b [ 258.847509][T21547] should_fail_ex+0x265/0x280 [ 258.847541][T21547] should_failslab+0x8c/0xb0 [ 258.847561][T21547] kmem_cache_alloc_noprof+0x50/0x310 [ 258.847585][T21547] ? security_file_alloc+0x32/0x100 [ 258.847614][T21547] security_file_alloc+0x32/0x100 [ 258.847640][T21547] init_file+0x5c/0x1d0 [ 258.847660][T21547] alloc_empty_file+0x8b/0x200 [ 258.847682][T21547] path_openat+0x68/0x2170 [ 258.847720][T21547] ? mntput+0x4b/0x80 [ 258.847744][T21547] ? terminate_walk+0x27f/0x2a0 [ 258.847761][T21547] ? path_openat+0x1bf8/0x2170 [ 258.847866][T21547] ? _parse_integer_limit+0x170/0x190 [ 258.847926][T21547] do_filp_open+0x109/0x230 [ 258.848020][T21547] do_open_execat+0xd8/0x260 [ 258.848050][T21547] alloc_bprm+0x25/0x350 [ 258.848080][T21547] do_execveat_common+0x12e/0x750 [ 258.848108][T21547] ? getname_flags+0x154/0x3b0 [ 258.848165][T21547] __x64_sys_execveat+0x73/0x90 [ 258.848235][T21547] x64_sys_call+0x1fec/0x3000 [ 258.848334][T21547] do_syscall_64+0xd2/0x200 [ 258.848412][T21547] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 258.848493][T21547] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 258.848521][T21547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.848541][T21547] RIP: 0033:0x7f750d6ceec9 [ 258.848554][T21547] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.848589][T21547] RSP: 002b:00007f750c12f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 258.848605][T21547] RAX: ffffffffffffffda RBX: 00007f750d925fa0 RCX: 00007f750d6ceec9 [ 258.848616][T21547] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 258.848629][T21547] RBP: 00007f750c12f090 R08: 0000000000001000 R09: 0000000000000000 [ 258.848642][T21547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.848656][T21547] R13: 00007f750d926038 R14: 00007f750d925fa0 R15: 00007ffe51926df8 [ 258.848675][T21547] [ 259.087635][T21537] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 259.096696][T21537] EXT4-fs (loop5): orphan cleanup on readonly fs [ 259.116178][T21552] SELinux: security_context_str_to_sid (r) failed with errno=-22 [ 259.127400][T21537] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.6406: corrupted inode contents [ 259.177489][T21537] EXT4-fs (loop5): Remounting filesystem read-only [ 259.204386][T21537] EXT4-fs (loop5): 1 truncate cleaned up [ 259.210260][ T1392] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 259.220991][ T1392] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 259.234343][T21555] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6413'. [ 259.240296][ T1392] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 259.339393][T21569] FAULT_INJECTION: forcing a failure. [ 259.339393][T21569] name failslab, interval 1, probability 0, space 0, times 0 [ 259.352149][T21569] CPU: 1 UID: 0 PID: 21569 Comm: syz.6.6420 Not tainted syzkaller #0 PREEMPT(voluntary) [ 259.352173][T21569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 259.352182][T21569] Call Trace: [ 259.352189][T21569] [ 259.352253][T21569] __dump_stack+0x1d/0x30 [ 259.352274][T21569] dump_stack_lvl+0xe8/0x140 [ 259.352312][T21569] dump_stack+0x15/0x1b [ 259.352327][T21569] should_fail_ex+0x265/0x280 [ 259.352347][T21569] should_failslab+0x8c/0xb0 [ 259.352365][T21569] kmem_cache_alloc_node_noprof+0x57/0x320 [ 259.352390][T21569] ? dup_task_struct+0x70/0x6a0 [ 259.352413][T21569] dup_task_struct+0x70/0x6a0 [ 259.352436][T21569] ? _parse_integer+0x27/0x40 [ 259.352462][T21569] copy_process+0x399/0x2000 [ 259.352491][T21569] ? kstrtouint+0x76/0xc0 [ 259.352508][T21569] ? kstrtouint_from_user+0x9f/0xf0 [ 259.352577][T21569] ? __rcu_read_unlock+0x4f/0x70 [ 259.352599][T21569] kernel_clone+0x16c/0x5c0 [ 259.352620][T21569] ? vfs_write+0x7e8/0x960 [ 259.352693][T21569] __x64_sys_clone+0xe6/0x120 [ 259.352721][T21569] x64_sys_call+0x119c/0x3000 [ 259.352739][T21569] do_syscall_64+0xd2/0x200 [ 259.352840][T21569] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 259.352936][T21569] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 259.352959][T21569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.353050][T21569] RIP: 0033:0x7f01b3e0eec9 [ 259.353072][T21569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.353090][T21569] RSP: 002b:00007f01b286efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 259.353110][T21569] RAX: ffffffffffffffda RBX: 00007f01b4065fa0 RCX: 00007f01b3e0eec9 [ 259.353160][T21569] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 259.353173][T21569] RBP: 00007f01b286f090 R08: 0000000000000000 R09: 0000000000000000 [ 259.353186][T21569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.353199][T21569] R13: 00007f01b4066038 R14: 00007f01b4065fa0 R15: 00007ffcde7aa7b8 [ 259.353224][T21569] [ 259.575337][T21572] loop9: detected capacity change from 0 to 512 [ 259.593036][ T29] kauditd_printk_skb: 492 callbacks suppressed [ 259.593051][ T29] audit: type=1400 audit(1759336361.642:7952): avc: denied { mounton } for pid=21575 comm="syz.1.6424" path="/372/file0" dev="tmpfs" ino=2030 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 259.649101][ T29] audit: type=1400 audit(1759336361.692:7953): avc: denied { map_create } for pid=21567 comm="syz.2.6421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 259.668370][ T29] audit: type=1400 audit(1759336361.692:7954): avc: denied { bpf } for pid=21567 comm="syz.2.6421" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 259.689031][ T29] audit: type=1400 audit(1759336361.692:7955): avc: denied { map_read map_write } for pid=21567 comm="syz.2.6421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 259.709088][ T29] audit: type=1400 audit(1759336361.692:7956): avc: denied { mounton } for pid=21571 comm="syz.9.6419" path="/306/file1" dev="tmpfs" ino=1687 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 259.749824][T21568] loop2: detected capacity change from 0 to 2048 [ 259.758832][T21587] FAULT_INJECTION: forcing a failure. [ 259.758832][T21587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.771979][T21587] CPU: 0 UID: 0 PID: 21587 Comm: syz.6.6426 Not tainted syzkaller #0 PREEMPT(voluntary) [ 259.772083][T21587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 259.772093][T21587] Call Trace: [ 259.772100][T21587] [ 259.772106][T21587] __dump_stack+0x1d/0x30 [ 259.772127][T21587] dump_stack_lvl+0xe8/0x140 [ 259.772144][T21587] dump_stack+0x15/0x1b [ 259.772202][T21587] should_fail_ex+0x265/0x280 [ 259.772224][T21587] should_fail+0xb/0x20 [ 259.772243][T21587] should_fail_usercopy+0x1a/0x20 [ 259.772267][T21587] _copy_from_user+0x1c/0xb0 [ 259.772368][T21587] ___sys_sendmsg+0xc1/0x1d0 [ 259.772404][T21587] __sys_sendmmsg+0x178/0x300 [ 259.772437][T21587] __x64_sys_sendmmsg+0x57/0x70 [ 259.772538][T21587] x64_sys_call+0x1c4a/0x3000 [ 259.772594][T21587] do_syscall_64+0xd2/0x200 [ 259.772675][T21587] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 259.772701][T21587] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 259.772809][T21587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.772831][T21587] RIP: 0033:0x7f01b3e0eec9 [ 259.772847][T21587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.772939][T21587] RSP: 002b:00007f01b286f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 259.773039][T21587] RAX: ffffffffffffffda RBX: 00007f01b4065fa0 RCX: 00007f01b3e0eec9 [ 259.773050][T21587] RDX: 0000000000000001 RSI: 00002000000006c0 RDI: 0000000000000003 [ 259.773061][T21587] RBP: 00007f01b286f090 R08: 0000000000000000 R09: 0000000000000000 [ 259.773072][T21587] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.773083][T21587] R13: 00007f01b4066038 R14: 00007f01b4065fa0 R15: 00007ffcde7aa7b8 [ 259.773098][T21587] [ 259.773438][ T29] audit: type=1400 audit(1759336361.722:7957): avc: denied { read write } for pid=13950 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 259.801591][T21584] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 259.803703][ T29] audit: type=1400 audit(1759336361.722:7958): avc: denied { open } for pid=13950 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 259.803731][ T29] audit: type=1400 audit(1759336361.722:7959): avc: denied { ioctl } for pid=13950 comm="syz-executor" path="/dev/loop5" dev="devtmpfs" ino=105 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 259.857021][T21572] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.860325][ T29] audit: type=1400 audit(1759336361.752:7960): avc: denied { read write } for pid=21567 comm="syz.2.6421" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 260.064252][ T29] audit: type=1400 audit(1759336361.752:7961): avc: denied { open } for pid=21567 comm="syz.2.6421" path="/dev/input/event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 260.284666][T21613] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 260.387710][T21625] siw: device registration error -23 [ 260.473462][T21629] loop1: detected capacity change from 0 to 2048 [ 260.494506][T21627] netlink: 'syz.6.6443': attribute type 1 has an invalid length. [ 260.529197][T21627] 8021q: adding VLAN 0 to HW filter on device bond2 [ 260.556359][T21640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.565851][T21640] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.631860][T21627] bond2 (unregistering): Released all slaves [ 260.645797][T21649] loop1: detected capacity change from 0 to 512 [ 260.678466][T21649] ext4 filesystem being mounted at /380/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.809334][T21669] siw: device registration error -23 [ 260.903452][T21680] FAULT_INJECTION: forcing a failure. [ 260.903452][T21680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 260.916664][T21680] CPU: 1 UID: 0 PID: 21680 Comm: syz.1.6455 Not tainted syzkaller #0 PREEMPT(voluntary) [ 260.916691][T21680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 260.916703][T21680] Call Trace: [ 260.916709][T21680] [ 260.916716][T21680] __dump_stack+0x1d/0x30 [ 260.916737][T21680] dump_stack_lvl+0xe8/0x140 [ 260.916757][T21680] dump_stack+0x15/0x1b [ 260.916844][T21680] should_fail_ex+0x265/0x280 [ 260.916918][T21680] should_fail+0xb/0x20 [ 260.916981][T21680] should_fail_usercopy+0x1a/0x20 [ 260.917001][T21680] _copy_from_iter+0xd2/0xe80 [ 260.917031][T21680] ? __build_skb_around+0x1a0/0x200 [ 260.917056][T21680] ? __alloc_skb+0x223/0x320 [ 260.917074][T21680] netlink_sendmsg+0x471/0x6b0 [ 260.917114][T21680] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.917133][T21680] __sock_sendmsg+0x142/0x180 [ 260.917160][T21680] ____sys_sendmsg+0x31e/0x4e0 [ 260.917190][T21680] ___sys_sendmsg+0x17b/0x1d0 [ 260.917221][T21680] __x64_sys_sendmsg+0xd4/0x160 [ 260.917275][T21680] x64_sys_call+0x191e/0x3000 [ 260.917293][T21680] do_syscall_64+0xd2/0x200 [ 260.917341][T21680] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 260.917408][T21680] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 260.917467][T21680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.917494][T21680] RIP: 0033:0x7f2b3f7feec9 [ 260.917509][T21680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.917523][T21680] RSP: 002b:00007f2b3e25f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.917547][T21680] RAX: ffffffffffffffda RBX: 00007f2b3fa55fa0 RCX: 00007f2b3f7feec9 [ 260.917587][T21680] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 000000000000000b [ 260.917599][T21680] RBP: 00007f2b3e25f090 R08: 0000000000000000 R09: 0000000000000000 [ 260.917610][T21680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.917622][T21680] R13: 00007f2b3fa56038 R14: 00007f2b3fa55fa0 R15: 00007ffe0158be28 [ 260.917641][T21680] [ 261.169362][T21686] team0: Port device dummy0 removed [ 261.214832][T21693] SELinux: Context is not valid (left unmapped). [ 261.217742][T21692] loop5: detected capacity change from 0 to 2048 [ 261.293228][T21703] siw: device registration error -23 [ 261.325651][T21705] loop6: detected capacity change from 0 to 512 [ 261.383736][T21705] ext4 filesystem being mounted at /484/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.436739][T21718] loop2: detected capacity change from 0 to 1024 [ 261.458358][T21718] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 261.489028][T21718] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.6468: Invalid block bitmap block 0 in block_group 0 [ 261.509123][T21727] loop9: detected capacity change from 0 to 512 [ 261.532283][T21718] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.6468: Failed to acquire dquot type 0 [ 261.544811][T21718] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.6468: Freeing blocks not in datazone - block = 0, count = 4096 [ 261.568650][T21718] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.6468: Invalid inode bitmap blk 0 in block_group 0 [ 261.581995][ T5610] EXT4-fs error (device loop2): ext4_release_dquot:6979: comm kworker/u8:8: Failed to release dquot type 0 [ 261.594852][T21718] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 261.605226][T21727] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.617382][T21718] EXT4-fs (loop2): 1 orphan inode deleted [ 261.661241][T21739] loop6: detected capacity change from 0 to 512 [ 261.673547][T21718] netlink: 'syz.2.6468': attribute type 13 has an invalid length. [ 261.683179][T21718] gretap0: refused to change device tx_queue_len [ 261.691312][T21718] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 261.725256][T21739] ext4 filesystem being mounted at /485/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.782572][T21749] loop5: detected capacity change from 0 to 128 [ 261.791142][T21749] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 261.815328][T21751] siw: device registration error -23 [ 261.833668][T21753] FAULT_INJECTION: forcing a failure. [ 261.833668][T21753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 261.846803][T21753] CPU: 0 UID: 0 PID: 21753 Comm: syz.9.6474 Not tainted syzkaller #0 PREEMPT(voluntary) [ 261.846862][T21753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 261.846876][T21753] Call Trace: [ 261.846884][T21753] [ 261.846893][T21753] __dump_stack+0x1d/0x30 [ 261.846913][T21753] dump_stack_lvl+0xe8/0x140 [ 261.846930][T21753] dump_stack+0x15/0x1b [ 261.846944][T21753] should_fail_ex+0x265/0x280 [ 261.846963][T21753] should_fail+0xb/0x20 [ 261.847008][T21753] should_fail_usercopy+0x1a/0x20 [ 261.847080][T21753] _copy_from_user+0x1c/0xb0 [ 261.847108][T21753] ___sys_sendmsg+0xc1/0x1d0 [ 261.847138][T21753] __sys_sendmmsg+0x178/0x300 [ 261.847231][T21753] __x64_sys_sendmmsg+0x57/0x70 [ 261.847251][T21753] x64_sys_call+0x1c4a/0x3000 [ 261.847268][T21753] do_syscall_64+0xd2/0x200 [ 261.847360][T21753] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 261.847388][T21753] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 261.847417][T21753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.847440][T21753] RIP: 0033:0x7f750d6ceec9 [ 261.847457][T21753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.847504][T21753] RSP: 002b:00007f750c12f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 261.847524][T21753] RAX: ffffffffffffffda RBX: 00007f750d925fa0 RCX: 00007f750d6ceec9 [ 261.847535][T21753] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 261.847546][T21753] RBP: 00007f750c12f090 R08: 0000000000000000 R09: 0000000000000000 [ 261.847557][T21753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.847568][T21753] R13: 00007f750d926038 R14: 00007f750d925fa0 R15: 00007ffe51926df8 [ 261.847587][T21753] [ 262.179121][T21761] loop5: detected capacity change from 0 to 512 [ 262.207242][T21761] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 262.215931][T21761] EXT4-fs (loop5): orphan cleanup on readonly fs [ 262.298963][T21777] loop2: detected capacity change from 0 to 512 [ 262.319419][T21780] loop6: detected capacity change from 0 to 512 [ 262.335556][T21782] __nla_validate_parse: 3 callbacks suppressed [ 262.335571][T21782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6487'. [ 262.351109][T21782] netlink: 312 bytes leftover after parsing attributes in process `syz.1.6487'. [ 262.358166][T21761] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.6476: corrupted inode contents [ 262.360224][T21782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6487'. [ 262.387926][T21779] team0: Port device dummy0 removed [ 262.393321][T21780] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 262.394238][T21761] EXT4-fs (loop5): Remounting filesystem read-only [ 262.401388][T21780] EXT4-fs (loop6): orphan cleanup on readonly fs [ 262.415061][T21761] EXT4-fs (loop5): 1 truncate cleaned up [ 262.421445][ T51] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 262.432010][ T51] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 262.438508][T21777] ext4 filesystem being mounted at /436/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.458117][T21780] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #16: comm syz.6.6486: corrupted inode contents [ 262.471405][T21782] loop1: detected capacity change from 0 to 256 [ 262.489905][T21780] EXT4-fs (loop6): Remounting filesystem read-only [ 262.497076][T21780] EXT4-fs (loop6): 1 truncate cleaned up [ 262.508994][ T51] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 262.519478][ T51] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 262.530080][ T51] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 262.541243][ T51] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 262.569322][T21789] siw: device registration error -23 [ 262.628804][T21798] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6491'. [ 262.750790][T21808] loop1: detected capacity change from 0 to 512 [ 262.766368][T21808] ext4 filesystem being mounted at /387/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.777325][T21810] loop5: detected capacity change from 0 to 512 [ 262.796353][T21810] ext4 filesystem being mounted at /526/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.842309][T21817] loop6: detected capacity change from 0 to 512 [ 262.950287][T21817] ext4 filesystem being mounted at /490/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 262.979229][T21831] FAULT_INJECTION: forcing a failure. [ 262.979229][T21831] name failslab, interval 1, probability 0, space 0, times 0 [ 262.991902][T21831] CPU: 0 UID: 0 PID: 21831 Comm: syz.5.6503 Not tainted syzkaller #0 PREEMPT(voluntary) [ 262.991927][T21831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 262.991939][T21831] Call Trace: [ 262.991946][T21831] [ 262.991953][T21831] __dump_stack+0x1d/0x30 [ 262.991974][T21831] dump_stack_lvl+0xe8/0x140 [ 262.991990][T21831] dump_stack+0x15/0x1b [ 262.992003][T21831] should_fail_ex+0x265/0x280 [ 262.992021][T21831] should_failslab+0x8c/0xb0 [ 262.992037][T21831] kmem_cache_alloc_noprof+0x50/0x310 [ 262.992055][T21831] ? vm_area_dup+0x33/0x2c0 [ 262.992076][T21831] ? __account_obj_stock+0x211/0x350 [ 262.992106][T21831] vm_area_dup+0x33/0x2c0 [ 262.992129][T21831] __split_vma+0xe9/0x650 [ 262.992150][T21831] ? mas_find+0x5d5/0x700 [ 262.992176][T21831] vms_gather_munmap_vmas+0x2b2/0x7b0 [ 262.992208][T21831] do_vmi_align_munmap+0x1a4/0x3d0 [ 262.992245][T21831] do_vmi_munmap+0x1db/0x220 [ 262.992274][T21831] do_munmap+0x8a/0xc0 [ 262.992303][T21831] mremap_to+0x1a4/0x440 [ 262.992323][T21831] ? check_prep_vma+0x5d6/0x660 [ 262.992346][T21831] __se_sys_mremap+0x650/0xb40 [ 262.992374][T21831] ? fput+0x8f/0xc0 [ 262.992396][T21831] ? ksys_write+0x192/0x1a0 [ 262.992425][T21831] __x64_sys_mremap+0x67/0x80 [ 262.992446][T21831] x64_sys_call+0x2a28/0x3000 [ 262.992470][T21831] do_syscall_64+0xd2/0x200 [ 262.992494][T21831] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 262.992515][T21831] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 262.992541][T21831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.992561][T21831] RIP: 0033:0x7fd83904eec9 [ 262.992575][T21831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.992591][T21831] RSP: 002b:00007fd837ab7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 262.992608][T21831] RAX: ffffffffffffffda RBX: 00007fd8392a5fa0 RCX: 00007fd83904eec9 [ 262.992618][T21831] RDX: 0000000000400000 RSI: 0000000000001000 RDI: 0000200000a96000 [ 262.992628][T21831] RBP: 00007fd837ab7090 R08: 0000200000000000 R09: 0000000000000000 [ 262.992638][T21831] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 262.992649][T21831] R13: 00007fd8392a6038 R14: 00007fd8392a5fa0 R15: 00007ffdd840ae08 [ 262.992664][T21831] [ 263.228673][T21834] netlink: 48 bytes leftover after parsing attributes in process `syz.1.6504'. [ 263.291650][T21841] FAULT_INJECTION: forcing a failure. [ 263.291650][T21841] name failslab, interval 1, probability 0, space 0, times 0 [ 263.304393][T21841] CPU: 0 UID: 0 PID: 21841 Comm: syz.5.6507 Not tainted syzkaller #0 PREEMPT(voluntary) [ 263.304421][T21841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 263.304434][T21841] Call Trace: [ 263.304441][T21841] [ 263.304448][T21841] __dump_stack+0x1d/0x30 [ 263.304476][T21841] dump_stack_lvl+0xe8/0x140 [ 263.304493][T21841] dump_stack+0x15/0x1b [ 263.304510][T21841] should_fail_ex+0x265/0x280 [ 263.304587][T21841] ? call_usermodehelper_setup+0x72/0x190 [ 263.304620][T21841] should_failslab+0x8c/0xb0 [ 263.304640][T21841] ? __pfx_free_modprobe_argv+0x10/0x10 [ 263.304701][T21841] __kmalloc_cache_noprof+0x4c/0x320 [ 263.304722][T21841] ? __pfx_free_modprobe_argv+0x10/0x10 [ 263.304744][T21841] call_usermodehelper_setup+0x72/0x190 [ 263.304777][T21841] __request_module+0x264/0x3e0 [ 263.304833][T21841] ? strncmp+0x34/0x70 [ 263.304858][T21841] get_fs_type+0x11d/0x330 [ 263.304881][T21841] __se_sys_fsopen+0x86/0x1e0 [ 263.304978][T21841] __x64_sys_fsopen+0x31/0x40 [ 263.304998][T21841] x64_sys_call+0x2aa1/0x3000 [ 263.305017][T21841] do_syscall_64+0xd2/0x200 [ 263.305046][T21841] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 263.305084][T21841] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 263.305108][T21841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.305125][T21841] RIP: 0033:0x7fd83904eec9 [ 263.305137][T21841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.305162][T21841] RSP: 002b:00007fd837ab7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 263.305188][T21841] RAX: ffffffffffffffda RBX: 00007fd8392a5fa0 RCX: 00007fd83904eec9 [ 263.305199][T21841] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000340 [ 263.305210][T21841] RBP: 00007fd837ab7090 R08: 0000000000000000 R09: 0000000000000000 [ 263.305220][T21841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.305288][T21841] R13: 00007fd8392a6038 R14: 00007fd8392a5fa0 R15: 00007ffdd840ae08 [ 263.305303][T21841] [ 263.560591][T21845] loop9: detected capacity change from 0 to 2048 [ 263.572173][T21847] loop5: detected capacity change from 0 to 512 [ 263.618140][T21845] wireguard0: entered promiscuous mode [ 263.623676][T21845] wireguard0: entered allmulticast mode [ 263.640280][T21847] ext4 filesystem being mounted at /531/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.673592][T21853] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 263.725322][T21857] loop2: detected capacity change from 0 to 512 [ 263.768315][T21857] ext4 filesystem being mounted at /441/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.866446][T21868] FAULT_INJECTION: forcing a failure. [ 263.866446][T21868] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 263.879906][T21868] CPU: 1 UID: 0 PID: 21868 Comm: syz.5.6516 Not tainted syzkaller #0 PREEMPT(voluntary) [ 263.879928][T21868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 263.879938][T21868] Call Trace: [ 263.879944][T21868] [ 263.879951][T21868] __dump_stack+0x1d/0x30 [ 263.880039][T21868] dump_stack_lvl+0xe8/0x140 [ 263.880115][T21868] dump_stack+0x15/0x1b [ 263.880128][T21868] should_fail_ex+0x265/0x280 [ 263.880146][T21868] should_fail_alloc_page+0xf2/0x100 [ 263.880164][T21868] __alloc_frozen_pages_noprof+0xff/0x360 [ 263.880207][T21868] alloc_pages_mpol+0xb3/0x250 [ 263.880229][T21868] alloc_pages_noprof+0x90/0x130 [ 263.880249][T21868] __pud_alloc+0x47/0x4c0 [ 263.880340][T21868] handle_mm_fault+0x1882/0x2c20 [ 263.880364][T21868] ? __rcu_read_unlock+0x4f/0x70 [ 263.880389][T21868] do_user_addr_fault+0x3fe/0x1080 [ 263.880487][T21868] exc_page_fault+0x62/0xa0 [ 263.880508][T21868] asm_exc_page_fault+0x26/0x30 [ 263.880568][T21868] RIP: 0010:__put_user_8+0xd/0x20 [ 263.880592][T21868] Code: 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <48> 89 01 31 c9 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 263.880606][T21868] RSP: 0018:ffffc900053efec0 EFLAGS: 00050206 [ 263.880625][T21868] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000200000000100 [ 263.880636][T21868] RDX: 0000000000000000 RSI: 0000000000000200 RDI: 0000000000000000 [ 263.880646][T21868] RBP: 0000000000001004 R08: ffff88810ffad280 R09: 0000000000000009 [ 263.880656][T21868] R10: 0000000000005005 R11: 0000000000000000 R12: 0000000000000000 [ 263.880740][T21868] R13: 0000000000000000 R14: ffff88810ffad280 R15: ffff88810ffad280 [ 263.880755][T21868] do_arch_prctl_64+0x119/0x420 [ 263.880772][T21868] x64_sys_call+0x2bbf/0x3000 [ 263.880789][T21868] do_syscall_64+0xd2/0x200 [ 263.880811][T21868] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 263.880840][T21868] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 263.880861][T21868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.880879][T21868] RIP: 0033:0x7fd83904eec9 [ 263.880891][T21868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.880943][T21868] RSP: 002b:00007fd837ab7038 EFLAGS: 00000246 ORIG_RAX: 000000000000009e [ 263.880958][T21868] RAX: ffffffffffffffda RBX: 00007fd8392a5fa0 RCX: 00007fd83904eec9 [ 263.880968][T21868] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000001004 [ 263.880978][T21868] RBP: 00007fd837ab7090 R08: 0000000000000000 R09: 0000000000000000 [ 263.880988][T21868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 263.880998][T21868] R13: 00007fd8392a6038 R14: 00007fd8392a5fa0 R15: 00007ffdd840ae08 [ 263.881049][T21868] [ 264.171320][T21871] loop6: detected capacity change from 0 to 512 [ 264.213592][T21871] ext4 filesystem being mounted at /491/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.255819][T21879] netlink: 10 bytes leftover after parsing attributes in process `syz.1.6520'. [ 264.280621][T21879] dummy0: Caught tx_queue_len zero misconfig [ 264.287766][T21879] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1795 sclass=netlink_route_socket pid=21879 comm=syz.1.6520 [ 264.301825][T21879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6520'. [ 264.312203][T21879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6520'. [ 264.370726][T21891] hub 2-0:1.0: USB hub found [ 264.377612][T21891] hub 2-0:1.0: 8 ports detected [ 264.525323][T21902] loop9: detected capacity change from 0 to 512 [ 264.555687][T21902] ext4 filesystem being mounted at /326/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.106498][T21909] loop5: detected capacity change from 0 to 512 [ 265.136280][T21909] ext4 filesystem being mounted at /534/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.151776][T21914] loop2: detected capacity change from 0 to 512 [ 265.215304][T21914] ext4 filesystem being mounted at /443/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.271638][ T29] kauditd_printk_skb: 345 callbacks suppressed [ 265.271721][ T29] audit: type=1326 audit(1759336367.312:8292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21910 comm="syz.2.6529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b83c6eec9 code=0x7ffc0000 [ 265.363809][T21926] loop2: detected capacity change from 0 to 164 [ 265.378633][ T29] audit: type=1326 audit(1759336367.312:8293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21910 comm="syz.2.6529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b83c6eec9 code=0x7ffc0000 [ 265.402614][ T29] audit: type=1326 audit(1759336367.312:8294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21910 comm="syz.2.6529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f7b83c6eec9 code=0x7ffc0000 [ 265.426244][ T29] audit: type=1326 audit(1759336367.312:8295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21910 comm="syz.2.6529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b83c6eec9 code=0x7ffc0000 [ 265.449891][ T29] audit: type=1326 audit(1759336367.312:8296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21910 comm="syz.2.6529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7b83c6eec9 code=0x7ffc0000 [ 265.473892][ T29] audit: type=1326 audit(1759336367.312:8297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21910 comm="syz.2.6529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b83c6eec9 code=0x7ffc0000 [ 265.497618][ T29] audit: type=1326 audit(1759336367.312:8298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21910 comm="syz.2.6529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f7b83c6eec9 code=0x7ffc0000 [ 265.521467][ T29] audit: type=1400 audit(1759336367.362:8299): avc: denied { append } for pid=21919 comm="syz.6.6531" name="vsock" dev="devtmpfs" ino=257 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 265.544375][ T29] audit: type=1326 audit(1759336367.362:8300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21910 comm="syz.2.6529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b83c6eec9 code=0x7ffc0000 [ 265.568454][ T29] audit: type=1326 audit(1759336367.362:8301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21910 comm="syz.2.6529" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b83c6eec9 code=0x7ffc0000 [ 265.569874][T21926] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 265.650092][T21932] loop5: detected capacity change from 0 to 512 [ 265.683398][T21936] loop1: detected capacity change from 0 to 1024 [ 265.700469][T21936] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 265.712790][T21932] ext4 filesystem being mounted at /535/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.726070][T21936] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:483: comm syz.1.6536: Invalid block bitmap block 0 in block_group 0 [ 265.740016][T21936] EXT4-fs error (device loop1): ext4_acquire_dquot:6943: comm syz.1.6536: Failed to acquire dquot type 0 [ 265.751948][T21936] EXT4-fs error (device loop1): ext4_free_blocks:6696: comm syz.1.6536: Freeing blocks not in datazone - block = 0, count = 4096 [ 265.766817][T21936] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz.1.6536: Invalid inode bitmap blk 0 in block_group 0 [ 265.780692][T21936] EXT4-fs error (device loop1) in ext4_free_inode:361: Corrupt filesystem [ 265.790909][ T41] EXT4-fs error (device loop1): ext4_release_dquot:6979: comm kworker/u8:2: Failed to release dquot type 0 [ 265.800302][T21936] EXT4-fs (loop1): 1 orphan inode deleted [ 265.816751][T21936] netlink: 'syz.1.6536': attribute type 13 has an invalid length. [ 265.824722][T21936] netlink: 'syz.1.6536': attribute type 27 has an invalid length. [ 265.840930][T21926] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 265.843655][T21942] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 265.849490][T21926] Symlink component flag not implemented [ 265.862542][T21926] Symlink component flag not implemented [ 265.868797][T21926] Symlink component flag not implemented (7) [ 265.874903][T21926] Symlink component flag not implemented (116) [ 265.955669][T21950] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 265.983676][T21957] siw: device registration error -23 [ 266.289976][T22017] loop2: detected capacity change from 0 to 1024 [ 266.298065][T22017] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 266.337463][T22017] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.6550: Invalid block bitmap block 0 in block_group 0 [ 266.352447][T22017] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.6550: Failed to acquire dquot type 0 [ 266.365433][T22017] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.6550: Freeing blocks not in datazone - block = 0, count = 4096 [ 266.379424][T22017] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.6550: Invalid inode bitmap blk 0 in block_group 0 [ 266.392350][T21968] EXT4-fs error (device loop2): ext4_release_dquot:6979: comm kworker/u8:17: Failed to release dquot type 0 [ 266.405934][T22017] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 266.417275][T22017] EXT4-fs (loop2): 1 orphan inode deleted [ 266.450706][T22026] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6554'. [ 266.463371][T22017] netlink: 'syz.2.6550': attribute type 13 has an invalid length. [ 266.471232][T22017] netlink: 'syz.2.6550': attribute type 27 has an invalid length. [ 266.479810][T22026] netlink: 312 bytes leftover after parsing attributes in process `syz.1.6554'. [ 266.519839][T22028] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 266.561703][T22031] loop1: detected capacity change from 0 to 512 [ 266.598485][T22031] ext4 filesystem being mounted at /409/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.603745][T22035] siw: device registration error -23 [ 266.620182][T22039] loop2: detected capacity change from 0 to 512 [ 266.657150][T22039] ext4 filesystem being mounted at /450/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 266.732233][T22045] loop9: detected capacity change from 0 to 7 [ 266.742790][T22045] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.754693][T22045] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.762598][T22045] loop9: unable to read partition table [ 266.777491][T22045] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 266.777491][T22045] ) failed (rc=-5) [ 266.792553][ T6880] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.800831][ T6880] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.810617][ T6880] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.821725][T22049] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.830064][ T6880] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.838363][ T6880] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.880594][T22045] loop6: detected capacity change from 0 to 2048 [ 266.906985][ T2988] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.961039][ T2988] Buffer I/O error on dev loop9, logical block 0, async page read [ 266.968938][ T2988] loop9: unable to read partition table [ 266.972372][T22063] loop2: detected capacity change from 0 to 1024 [ 266.985601][T22063] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 267.031656][T22067] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 267.119806][T14596] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 267.139737][T22063] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.6567: Invalid block bitmap block 0 in block_group 0 [ 267.158902][T14596] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 267.164271][T22063] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.6567: Failed to acquire dquot type 0 [ 267.181944][T22063] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.6567: Freeing blocks not in datazone - block = 0, count = 4096 [ 267.197053][T22063] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.6567: Invalid inode bitmap blk 0 in block_group 0 [ 267.210060][T22063] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 267.218944][T21965] EXT4-fs error (device loop2): ext4_release_dquot:6979: comm kworker/u8:14: Failed to release dquot type 0 [ 267.235482][T22063] EXT4-fs (loop2): 1 orphan inode deleted [ 267.238136][T22079] loop1: detected capacity change from 0 to 512 [ 267.273768][T22079] ext4 filesystem being mounted at /411/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.304963][T22063] netlink: 'syz.2.6567': attribute type 13 has an invalid length. [ 267.304982][T22063] netlink: 'syz.2.6567': attribute type 27 has an invalid length. [ 267.460055][T22091] loop2: detected capacity change from 0 to 512 [ 267.477683][T22091] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 267.500817][T22091] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.6576: invalid indirect mapped block 4294967295 (level 1) [ 267.516477][T22091] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.6576: invalid indirect mapped block 4294967295 (level 1) [ 267.530990][T22091] EXT4-fs (loop2): 2 truncates cleaned up [ 267.578390][T22082] sctp: [Deprecated]: syz.6.6570 (pid 22082) Use of struct sctp_assoc_value in delayed_ack socket option. [ 267.578390][T22082] Use struct sctp_sack_info instead [ 267.638426][T22100] siw: device registration error -23 [ 267.657568][T22105] __nla_validate_parse: 1 callbacks suppressed [ 267.657652][T22105] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6582'. [ 267.666578][T22107] loop9: detected capacity change from 0 to 7 [ 267.681162][T22105] netlink: 312 bytes leftover after parsing attributes in process `syz.5.6582'. [ 267.690303][T22105] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6582'. [ 267.696878][ T3293] loop9: unable to read partition table [ 267.705528][T22107] loop9: unable to read partition table [ 267.712157][T22107] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 267.712157][T22107] ) failed (rc=-5) [ 267.745632][T22111] loop5: detected capacity change from 0 to 512 [ 267.763474][T22114] loop2: detected capacity change from 0 to 512 [ 267.779027][T22111] ext4 filesystem being mounted at /547/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.799767][T22114] ext4 filesystem being mounted at /456/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.956899][T22121] loop2: detected capacity change from 0 to 1024 [ 267.969406][T22121] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 267.994853][T22123] loop5: detected capacity change from 0 to 512 [ 268.009884][T22128] FAULT_INJECTION: forcing a failure. [ 268.009884][T22128] name failslab, interval 1, probability 0, space 0, times 0 [ 268.022713][T22128] CPU: 0 UID: 0 PID: 22128 Comm: syz.9.6590 Not tainted syzkaller #0 PREEMPT(voluntary) [ 268.022741][T22128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 268.022829][T22128] Call Trace: [ 268.022836][T22128] [ 268.022845][T22128] __dump_stack+0x1d/0x30 [ 268.022864][T22128] dump_stack_lvl+0xe8/0x140 [ 268.022884][T22128] dump_stack+0x15/0x1b [ 268.022901][T22128] should_fail_ex+0x265/0x280 [ 268.022955][T22128] should_failslab+0x8c/0xb0 [ 268.022983][T22128] kmem_cache_alloc_noprof+0x50/0x310 [ 268.023006][T22128] ? skb_clone+0x151/0x1f0 [ 268.023030][T22128] skb_clone+0x151/0x1f0 [ 268.023064][T22128] __netlink_deliver_tap+0x2c9/0x500 [ 268.023092][T22128] netlink_unicast+0x66b/0x690 [ 268.023111][T22128] netlink_sendmsg+0x58b/0x6b0 [ 268.023132][T22128] ? __pfx_netlink_sendmsg+0x10/0x10 [ 268.023154][T22128] __sock_sendmsg+0x142/0x180 [ 268.023180][T22128] ____sys_sendmsg+0x31e/0x4e0 [ 268.023279][T22128] ___sys_sendmsg+0x17b/0x1d0 [ 268.023312][T22128] __x64_sys_sendmsg+0xd4/0x160 [ 268.023349][T22128] x64_sys_call+0x191e/0x3000 [ 268.023366][T22128] do_syscall_64+0xd2/0x200 [ 268.023392][T22128] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 268.023414][T22128] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 268.023538][T22128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.023560][T22128] RIP: 0033:0x7f750d6ceec9 [ 268.023573][T22128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.023614][T22128] RSP: 002b:00007f750c12f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.023633][T22128] RAX: ffffffffffffffda RBX: 00007f750d925fa0 RCX: 00007f750d6ceec9 [ 268.023647][T22128] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 268.023734][T22128] RBP: 00007f750c12f090 R08: 0000000000000000 R09: 0000000000000000 [ 268.023747][T22128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.023758][T22128] R13: 00007f750d926038 R14: 00007f750d925fa0 R15: 00007ffe51926df8 [ 268.023773][T22128] [ 268.027546][T22121] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.6588: Invalid block bitmap block 0 in block_group 0 [ 268.068579][T22130] loop1: detected capacity change from 0 to 512 [ 268.086657][T22121] EXT4-fs error (device loop2): ext4_acquire_dquot:6943: comm syz.2.6588: Failed to acquire dquot type 0 [ 268.155294][T22123] ext4 filesystem being mounted at /548/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.157633][T22121] EXT4-fs error (device loop2): ext4_free_blocks:6696: comm syz.2.6588: Freeing blocks not in datazone - block = 0, count = 4096 [ 268.287346][T22121] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz.2.6588: Invalid inode bitmap blk 0 in block_group 0 [ 268.300129][T22121] EXT4-fs error (device loop2) in ext4_free_inode:361: Corrupt filesystem [ 268.309099][ T31] EXT4-fs error (device loop2): ext4_release_dquot:6979: comm kworker/u8:1: Failed to release dquot type 0 [ 268.321036][T22121] EXT4-fs (loop2): 1 orphan inode deleted [ 268.328547][T22130] ext4 filesystem being mounted at /416/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 268.349578][T22141] dummy0: Caught tx_queue_len zero misconfig [ 268.367966][ T3382] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 268.387667][T22121] netlink: 'syz.2.6588': attribute type 13 has an invalid length. [ 268.394717][T22145] loop9: detected capacity change from 0 to 7 [ 268.395637][T22121] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6588'. [ 268.402047][T22145] loop9: unable to read partition table [ 268.417930][ T3382] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 268.420768][T22145] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 268.420768][T22145] ) failed (rc=-5) [ 268.587328][T22155] 8021q: adding VLAN 0 to HW filter on device bond1 [ 268.606284][T22155] bond0: (slave bond1): Enslaving as an active interface with an up link [ 268.625859][T22157] FAULT_INJECTION: forcing a failure. [ 268.625859][T22157] name failslab, interval 1, probability 0, space 0, times 0 [ 268.638529][T22157] CPU: 0 UID: 0 PID: 22157 Comm: syz.2.6600 Not tainted syzkaller #0 PREEMPT(voluntary) [ 268.638552][T22157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 268.638563][T22157] Call Trace: [ 268.638619][T22157] [ 268.638626][T22157] __dump_stack+0x1d/0x30 [ 268.638647][T22157] dump_stack_lvl+0xe8/0x140 [ 268.638667][T22157] dump_stack+0x15/0x1b [ 268.638748][T22157] should_fail_ex+0x265/0x280 [ 268.638769][T22157] ? audit_log_d_path+0x8d/0x150 [ 268.638787][T22157] should_failslab+0x8c/0xb0 [ 268.638804][T22157] __kmalloc_cache_noprof+0x4c/0x320 [ 268.638840][T22157] audit_log_d_path+0x8d/0x150 [ 268.638857][T22157] audit_log_d_path_exe+0x42/0x70 [ 268.638885][T22157] audit_log_task+0x1e9/0x250 [ 268.638909][T22157] ? kstrtouint+0x76/0xc0 [ 268.638927][T22157] audit_seccomp+0x61/0x100 [ 268.638953][T22157] ? __seccomp_filter+0x82d/0x1250 [ 268.639054][T22157] __seccomp_filter+0x83e/0x1250 [ 268.639152][T22157] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 268.639182][T22157] ? vfs_write+0x7e8/0x960 [ 268.639249][T22157] ? __rcu_read_unlock+0x4f/0x70 [ 268.639273][T22157] ? __fget_files+0x184/0x1c0 [ 268.639295][T22157] __secure_computing+0x82/0x150 [ 268.639321][T22157] syscall_trace_enter+0xcf/0x1e0 [ 268.639435][T22157] do_syscall_64+0xac/0x200 [ 268.639497][T22157] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 268.639554][T22157] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 268.639582][T22157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.639604][T22157] RIP: 0033:0x7f7b83c6eec9 [ 268.639621][T22157] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.639639][T22157] RSP: 002b:00007f7b826cf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 268.639660][T22157] RAX: ffffffffffffffda RBX: 00007f7b83ec5fa0 RCX: 00007f7b83c6eec9 [ 268.639718][T22157] RDX: 0000200000000180 RSI: 0000000000000000 RDI: 0000000000000000 [ 268.639732][T22157] RBP: 00007f7b826cf090 R08: 0000000000000000 R09: 0000000000000000 [ 268.639745][T22157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.639758][T22157] R13: 00007f7b83ec6038 R14: 00007f7b83ec5fa0 R15: 00007ffeff58b9a8 [ 268.639778][T22157] [ 268.641153][T22159] loop1: detected capacity change from 0 to 512 [ 268.883831][T22159] EXT4-fs error (device loop1): __ext4_fill_super:5510: inode #2: comm syz.1.6599: casefold flag without casefold feature [ 268.932093][T22159] EXT4-fs (loop1): get root inode failed [ 268.937828][T22159] EXT4-fs (loop1): mount failed [ 268.965302][T22171] netlink: 'syz.6.6604': attribute type 1 has an invalid length. [ 268.991484][T22175] dummy0: Caught tx_queue_len zero misconfig [ 269.029778][T22182] loop9: detected capacity change from 0 to 7 [ 269.041281][T22182] loop9: unable to read partition table [ 269.041337][T22171] 8021q: adding VLAN 0 to HW filter on device bond2 [ 269.047112][T22182] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 269.047112][T22182] ) failed (rc=-5) [ 269.081837][T22186] loop9: detected capacity change from 0 to 512 [ 269.098233][T22181] 8021q: adding VLAN 0 to HW filter on device bond1 [ 269.111873][T22181] bond0: (slave bond1): Enslaving as an active interface with an up link [ 269.121085][T22155] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22155 comm=syz.1.6599 [ 269.167376][T22191] loop5: detected capacity change from 0 to 512 [ 269.180548][T22192] FAULT_INJECTION: forcing a failure. [ 269.180548][T22192] name failslab, interval 1, probability 0, space 0, times 0 [ 269.193313][T22192] CPU: 0 UID: 0 PID: 22192 Comm: syz.6.6612 Not tainted syzkaller #0 PREEMPT(voluntary) [ 269.193375][T22192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 269.193385][T22192] Call Trace: [ 269.193392][T22192] [ 269.193399][T22192] __dump_stack+0x1d/0x30 [ 269.193420][T22192] dump_stack_lvl+0xe8/0x140 [ 269.193438][T22192] dump_stack+0x15/0x1b [ 269.193473][T22192] should_fail_ex+0x265/0x280 [ 269.193491][T22192] ? alloc_fs_context+0x44/0x4e0 [ 269.193519][T22192] should_failslab+0x8c/0xb0 [ 269.193583][T22192] __kmalloc_cache_noprof+0x4c/0x320 [ 269.193609][T22192] alloc_fs_context+0x44/0x4e0 [ 269.193641][T22192] fs_context_for_mount+0x22/0x30 [ 269.193666][T22192] do_new_mount+0xe9/0x600 [ 269.193744][T22192] ? security_capable+0x83/0x90 [ 269.193765][T22192] path_mount+0x4a4/0xb30 [ 269.193798][T22192] ? user_path_at+0x109/0x130 [ 269.193826][T22192] __se_sys_mount+0x28f/0x2e0 [ 269.193881][T22192] ? fput+0x8f/0xc0 [ 269.193956][T22192] __x64_sys_mount+0x67/0x80 [ 269.193987][T22192] x64_sys_call+0x2b51/0x3000 [ 269.194081][T22192] do_syscall_64+0xd2/0x200 [ 269.194107][T22192] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 269.194129][T22192] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 269.194169][T22192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.194190][T22192] RIP: 0033:0x7f01b3e0eec9 [ 269.194227][T22192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.194243][T22192] RSP: 002b:00007f01b286f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 269.194262][T22192] RAX: ffffffffffffffda RBX: 00007f01b4065fa0 RCX: 00007f01b3e0eec9 [ 269.194318][T22192] RDX: 0000200000000080 RSI: 0000200000000000 RDI: 0000000000000000 [ 269.194331][T22192] RBP: 00007f01b286f090 R08: 0000200000000280 R09: 0000000000000000 [ 269.194348][T22192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 269.194432][T22192] R13: 00007f01b4066038 R14: 00007f01b4065fa0 R15: 00007ffcde7aa7b8 [ 269.194450][T22192] [ 269.195155][T22159] bond0: (slave bond1): Releasing backup interface [ 269.223269][T22186] EXT4-fs error (device loop9): __ext4_fill_super:5510: inode #2: comm syz.9.6609: casefold flag without casefold feature [ 269.265725][T22197] loop6: detected capacity change from 0 to 512 [ 269.275566][T22186] EXT4-fs (loop9): get root inode failed [ 269.388286][T22191] EXT4-fs error (device loop5): __ext4_fill_super:5510: inode #2: comm syz.5.6610: casefold flag without casefold feature [ 269.394818][T22186] EXT4-fs (loop9): mount failed [ 269.447402][T22191] EXT4-fs (loop5): get root inode failed [ 269.453221][T22191] EXT4-fs (loop5): mount failed [ 269.463326][T22185] 8021q: adding VLAN 0 to HW filter on device bond2 [ 269.472923][T22197] ext4 filesystem being mounted at /505/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.505762][T22185] bond0: (slave bond2): Enslaving as an active interface with an up link [ 269.606093][T22181] bond0: (slave bond1): Releasing backup interface [ 269.659858][T22216] loop2: detected capacity change from 0 to 512 [ 269.713427][T22191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22191 comm=syz.5.6610 [ 269.739507][T22216] ext4 filesystem being mounted at /464/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 269.751803][T22185] bond0: (slave bond2): Releasing backup interface [ 269.855044][T22225] netlink: 'syz.9.6622': attribute type 2 has an invalid length. [ 269.965630][T22231] loop6: detected capacity change from 0 to 512 [ 270.008531][T22233] netlink: 228 bytes leftover after parsing attributes in process `syz.5.6625'. [ 270.160343][T22244] netlink: 10 bytes leftover after parsing attributes in process `syz.5.6629'. [ 270.226129][T22231] ext4 filesystem being mounted at /510/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.278298][ T29] kauditd_printk_skb: 575 callbacks suppressed [ 270.278311][ T29] audit: type=1326 audit(1759336372.322:8865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22230 comm="syz.6.6624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b3e0eec9 code=0x7ffc0000 [ 270.308561][ T29] audit: type=1326 audit(1759336372.322:8866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22230 comm="syz.6.6624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b3e0eec9 code=0x7ffc0000 [ 270.332239][ T29] audit: type=1326 audit(1759336372.322:8867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22230 comm="syz.6.6624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f01b3e0eec9 code=0x7ffc0000 [ 270.355717][ T29] audit: type=1326 audit(1759336372.322:8868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22230 comm="syz.6.6624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01b3e0eec9 code=0x7ffc0000 [ 270.379257][ T29] audit: type=1326 audit(1759336372.322:8869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22230 comm="syz.6.6624" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f01b3e0eec9 code=0x7ffc0000 [ 270.403008][ T29] audit: type=1400 audit(1759336372.322:8870): avc: denied { module_request } for pid=22230 comm="syz.6.6624" kmod="fs-ceph" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 270.437573][ T29] audit: type=1400 audit(1759336372.382:8871): avc: denied { add_name } for pid=22230 comm="syz.6.6624" name="file2" dev="loop6" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 270.460135][ T29] audit: type=1400 audit(1759336372.382:8872): avc: denied { link } for pid=22230 comm="syz.6.6624" name="file2" dev="loop6" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 270.482310][ T29] audit: type=1400 audit(1759336372.392:8873): avc: denied { read } for pid=22230 comm="syz.6.6624" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 270.505592][ T29] audit: type=1400 audit(1759336372.392:8874): avc: denied { open } for pid=22230 comm="syz.6.6624" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 270.690992][T22273] siw: device registration error -23 [ 270.691264][T22270] loop2: detected capacity change from 0 to 2048 [ 270.705841][T22274] netlink: 'syz.5.6640': attribute type 5 has an invalid length. [ 270.740849][T22281] netlink: 10 bytes leftover after parsing attributes in process `syz.5.6643'. [ 270.801966][T22285] loop9: detected capacity change from 0 to 7 [ 270.807683][T22289] loop2: detected capacity change from 0 to 512 [ 270.809495][T22285] loop9: unable to read partition table [ 270.818518][T22288] loop5: detected capacity change from 0 to 512 [ 270.821626][T22285] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 270.821626][T22285] ) failed (rc=-5) [ 270.849112][T22283] loop1: detected capacity change from 0 to 2048 [ 270.870708][T22289] ext4 filesystem being mounted at /466/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.898650][T22288] ext4 filesystem being mounted at /562/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.008543][T22307] loop2: detected capacity change from 0 to 512 [ 271.025506][T22301] loop6: detected capacity change from 0 to 512 [ 271.043221][T22307] ext4 filesystem being mounted at /467/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.065737][T22301] ext4 filesystem being mounted at /515/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.067257][T22304] loop5: detected capacity change from 0 to 512 [ 271.150392][T22313] loop1: detected capacity change from 0 to 512 [ 271.165898][T22304] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 271.195362][T22304] EXT4-fs (loop5): orphan cleanup on readonly fs [ 271.218259][T22313] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 271.233467][T22304] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #16: comm syz.5.6649: corrupted inode contents [ 271.233505][T22313] EXT4-fs (loop1): orphan cleanup on readonly fs [ 271.237564][T22320] 9pnet: Could not find request transport: fd0xffffffffffffffff [ 271.259167][T22304] EXT4-fs (loop5): Remounting filesystem read-only [ 271.261427][T22313] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #16: comm syz.1.6652: corrupted inode contents [ 271.281853][T22304] EXT4-fs (loop5): 1 truncate cleaned up [ 271.288026][T22313] EXT4-fs (loop1): Remounting filesystem read-only [ 271.290540][ T31] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 271.297699][T22313] EXT4-fs (loop1): 1 truncate cleaned up [ 271.305815][ T31] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 271.323646][ T31] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 271.340707][ T31] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 271.351302][ T31] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 271.363212][ T31] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 271.392071][T22329] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6657'. [ 271.398520][T22331] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6656'. [ 271.420561][T22329] netlink: 312 bytes leftover after parsing attributes in process `syz.6.6657'. [ 271.437812][T22326] lo speed is unknown, defaulting to 1000 [ 271.447180][T22329] loop6: detected capacity change from 0 to 256 [ 271.450351][T22331] dummy0: Caught tx_queue_len zero misconfig [ 271.461373][T22333] loop5: detected capacity change from 0 to 128 [ 271.474297][T22333] FAT-fs (loop5): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 271.499377][T22333] FAT-fs (loop5): error, corrupted file size (i_pos 548, 512) [ 271.507087][T22333] FAT-fs (loop5): Filesystem has been set read-only [ 271.545968][T22333] FAT-fs (loop5): error, invalid FAT chain (i_pos 548, last_block 8) [ 271.567215][T22338] loop1: detected capacity change from 0 to 512 [ 271.576349][T22340] loop9: detected capacity change from 0 to 512 [ 271.618307][T22340] ext4 filesystem being mounted at /345/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.659878][T22346] loop6: detected capacity change from 0 to 2048 [ 271.659865][T22338] ext4 filesystem being mounted at /426/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.698716][T22351] loop5: detected capacity change from 0 to 512 [ 271.757877][T22351] ext4 filesystem being mounted at /565/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 271.796545][T14596] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 271.818056][T14596] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 271.950723][T22373] netlink: 'syz.1.6670': attribute type 1 has an invalid length. [ 272.018932][T22383] loop9: detected capacity change from 0 to 7 [ 272.026372][T22383] buffer_io_error: 26 callbacks suppressed [ 272.026384][T22383] Buffer I/O error on dev loop9, logical block 0, async page read [ 272.041641][T22383] Buffer I/O error on dev loop9, logical block 0, async page read [ 272.049548][T22383] loop9: unable to read partition table [ 272.055438][T22383] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 272.055438][T22383] ) failed (rc=-5) [ 272.059143][ T3293] Buffer I/O error on dev loop9, logical block 0, async page read [ 272.078708][T22383] Buffer I/O error on dev loop9, logical block 0, async page read [ 272.103117][ T3293] Buffer I/O error on dev loop9, logical block 0, async page read [ 272.111211][ T3293] Buffer I/O error on dev loop9, logical block 0, async page read [ 272.112154][T22380] veth0: entered promiscuous mode [ 272.119228][ T3293] Buffer I/O error on dev loop9, logical block 0, async page read [ 272.132135][ T3293] Buffer I/O error on dev loop9, logical block 0, async page read [ 272.170998][T22387] loop9: detected capacity change from 0 to 7 [ 272.181093][T22387] Buffer I/O error on dev loop9, logical block 0, async page read [ 272.189842][T22387] Buffer I/O error on dev loop9, logical block 0, async page read [ 272.192284][T22378] veth0: left promiscuous mode [ 272.197734][T22387] loop9: unable to read partition table [ 272.208306][T22387] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 272.208306][T22387] ) failed (rc=-5) [ 272.252365][T22393] loop2: detected capacity change from 0 to 512 [ 272.268267][T22387] loop1: detected capacity change from 0 to 2048 [ 272.274815][T22393] EXT4-fs: Ignoring removed mblk_io_submit option [ 272.275487][ T2988] loop9: unable to read partition table [ 272.306771][T22393] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 272.310916][T22399] loop5: detected capacity change from 0 to 512 [ 272.331954][T22393] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 272.348130][T22397] loop9: detected capacity change from 0 to 512 [ 272.361029][T22399] ext4 filesystem being mounted at /569/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.363200][T16170] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 272.391033][T22393] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 272.418625][T22393] EXT4-fs (loop2): orphan cleanup on readonly fs [ 272.428459][T22397] ext4 filesystem being mounted at /348/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 272.439934][T22393] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz.2.6677: Invalid block bitmap block 0 in block_group 0 [ 272.454000][T16170] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 272.464359][T22393] EXT4-fs (loop2): Remounting filesystem read-only [ 272.470999][T22393] EXT4-fs (loop2): 1 orphan inode deleted [ 272.568875][T22414] FAULT_INJECTION: forcing a failure. [ 272.568875][T22414] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 272.582085][T22414] CPU: 0 UID: 0 PID: 22414 Comm: syz.9.6684 Not tainted syzkaller #0 PREEMPT(voluntary) [ 272.582117][T22414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 272.582128][T22414] Call Trace: [ 272.582133][T22414] [ 272.582140][T22414] __dump_stack+0x1d/0x30 [ 272.582160][T22414] dump_stack_lvl+0xe8/0x140 [ 272.582214][T22414] dump_stack+0x15/0x1b [ 272.582231][T22414] should_fail_ex+0x265/0x280 [ 272.582255][T22414] should_fail+0xb/0x20 [ 272.582274][T22414] should_fail_usercopy+0x1a/0x20 [ 272.582297][T22414] _copy_to_user+0x20/0xa0 [ 272.582402][T22414] simple_read_from_buffer+0xb5/0x130 [ 272.582427][T22414] proc_fail_nth_read+0x10e/0x150 [ 272.582447][T22414] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 272.582552][T22414] vfs_read+0x1a5/0x770 [ 272.582581][T22414] ? __rcu_read_unlock+0x4f/0x70 [ 272.582604][T22414] ? __fget_files+0x184/0x1c0 [ 272.582677][T22414] ksys_read+0xda/0x1a0 [ 272.582705][T22414] __x64_sys_read+0x40/0x50 [ 272.582747][T22414] x64_sys_call+0x27c0/0x3000 [ 272.582767][T22414] do_syscall_64+0xd2/0x200 [ 272.582791][T22414] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 272.582812][T22414] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 272.582913][T22414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.582951][T22414] RIP: 0033:0x7f750d6cd8dc [ 272.582966][T22414] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 272.582981][T22414] RSP: 002b:00007f750c12f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 272.582997][T22414] RAX: ffffffffffffffda RBX: 00007f750d925fa0 RCX: 00007f750d6cd8dc [ 272.583007][T22414] RDX: 000000000000000f RSI: 00007f750c12f0a0 RDI: 0000000000000005 [ 272.583018][T22414] RBP: 00007f750c12f090 R08: 0000000000000000 R09: 0000000000000000 [ 272.583040][T22414] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000001 [ 272.583100][T22414] R13: 00007f750d926038 R14: 00007f750d925fa0 R15: 00007ffe51926df8 [ 272.583123][T22414] [ 272.812426][T22420] __nla_validate_parse: 3 callbacks suppressed [ 272.812441][T22420] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6687'. [ 272.826000][T22422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6689'. [ 272.850999][T22424] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6688'. [ 272.854862][T22426] netlink: 'syz.9.6690': attribute type 2 has an invalid length. [ 272.863712][T22420] netlink: 312 bytes leftover after parsing attributes in process `syz.6.6687'. [ 272.876638][T22420] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6687'. [ 272.890304][T22424] netlink: 312 bytes leftover after parsing attributes in process `syz.5.6688'. [ 272.899493][T22424] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6688'. [ 272.912776][T22427] loop6: detected capacity change from 0 to 256 [ 272.984927][T22435] netlink: 10 bytes leftover after parsing attributes in process `syz.2.6693'. [ 273.020301][T22440] siw: device registration error -23 [ 273.087346][T22450] loop9: detected capacity change from 0 to 512 [ 273.141038][T22450] ext4 filesystem being mounted at /351/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.178906][T22454] loop1: detected capacity change from 0 to 2048 [ 273.243903][T22466] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6704'. [ 273.252889][T22466] netlink: 312 bytes leftover after parsing attributes in process `syz.9.6704'. [ 273.274383][T22466] loop9: detected capacity change from 0 to 256 [ 273.280465][T22472] siw: device registration error -23 [ 273.326839][T22476] netlink: 'syz.1.6709': attribute type 2 has an invalid length. [ 273.471472][T22481] loop9: detected capacity change from 0 to 7 [ 273.479721][T22481] loop9: unable to read partition table [ 273.485909][T22481] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 273.485909][T22481] ) failed (rc=-5) [ 273.549573][ T2988] loop9: unable to read partition table [ 273.619113][T22489] loop9: detected capacity change from 0 to 2048 [ 273.628135][T22491] loop5: detected capacity change from 0 to 512 [ 273.654512][T22491] ext4 filesystem being mounted at /578/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.754578][T22502] siw: device registration error -23 [ 273.841246][T22509] loop9: detected capacity change from 0 to 7 [ 273.856675][T22507] 8021q: adding VLAN 0 to HW filter on device bond1 [ 273.865195][T22507] bond0: (slave bond1): Enslaving as an active interface with an up link [ 273.883019][T22509] loop9: unable to read partition table [ 273.892570][T22509] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 273.892570][T22509] ) failed (rc=-5) [ 274.036757][ T2988] loop9: unable to read partition table [ 274.055043][T22509] loop5: detected capacity change from 0 to 2048 [ 274.090984][T22511] loop2: detected capacity change from 0 to 512 [ 274.176888][T22518] loop6: detected capacity change from 0 to 512 [ 274.194109][T13950] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 274.209304][T22519] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=22519 comm=syz.9.6720 [ 274.241048][T22507] bond0: (slave bond1): Releasing backup interface [ 274.252039][T13950] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 274.270629][T22518] ext4 filesystem being mounted at /522/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.286614][T22487] ================================================================== [ 274.294689][T22487] BUG: KCSAN: data-race in __filemap_remove_folio / folio_mapping [ 274.302482][T22487] [ 274.304791][T22487] write to 0xffffea0005038258 of 8 bytes by task 22492 on cpu 0: [ 274.312517][T22487] __filemap_remove_folio+0x1a5/0x2a0 [ 274.317893][T22487] filemap_remove_folio+0x6d/0x1d0 [ 274.322999][T22487] truncate_inode_folio+0x42/0x50 [ 274.328019][T22487] shmem_undo_range+0x244/0xa80 [ 274.332928][T22487] shmem_fallocate+0x799/0x840 [ 274.337681][T22487] vfs_fallocate+0x3b3/0x400 [ 274.342295][T22487] __x64_sys_fallocate+0x7a/0xd0 [ 274.347252][T22487] x64_sys_call+0x2518/0x3000 [ 274.352348][T22487] do_syscall_64+0xd2/0x200 [ 274.356834][T22487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.362703][T22487] [ 274.365021][T22487] read to 0xffffea0005038258 of 8 bytes by task 22487 on cpu 1: [ 274.372681][T22487] folio_mapping+0xa1/0x120 [ 274.377175][T22487] move_folios_to_lru+0x128/0x6a0 [ 274.382205][T22487] evict_folios+0x317a/0x3540 [ 274.386891][T22487] try_to_shrink_lruvec+0x5b5/0x950 [ 274.392082][T22487] shrink_lruvec+0x22e/0x1b50 [ 274.396742][T22487] shrink_node+0x686/0x2120 [ 274.401243][T22487] do_try_to_free_pages+0x3f6/0xcd0 [ 274.406422][T22487] try_to_free_mem_cgroup_pages+0x1ab/0x410 [ 274.412390][T22487] try_charge_memcg+0x358/0x9e0 [ 274.417230][T22487] obj_cgroup_charge_pages+0xa6/0x150 [ 274.422577][T22487] __memcg_kmem_charge_page+0x9f/0x170 [ 274.428014][T22487] __alloc_frozen_pages_noprof+0x188/0x360 [ 274.433814][T22487] alloc_pages_mpol+0xb3/0x250 [ 274.438568][T22487] alloc_pages_noprof+0x90/0x130 [ 274.443481][T22487] __vmalloc_node_range_noprof+0x6f2/0xe00 [ 274.449451][T22487] bpf_map_area_alloc+0xfa/0x150 [ 274.454375][T22487] htab_map_alloc+0x2a8/0x6d0 [ 274.459047][T22487] map_create+0x83d/0xda0 [ 274.463368][T22487] __sys_bpf+0x54e/0x7c0 [ 274.467596][T22487] __x64_sys_bpf+0x41/0x50 [ 274.471995][T22487] x64_sys_call+0x2aee/0x3000 [ 274.476659][T22487] do_syscall_64+0xd2/0x200 [ 274.481140][T22487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.487009][T22487] [ 274.489308][T22487] value changed: 0xffff88812fa39c18 -> 0x0000000000000000 [ 274.496387][T22487] [ 274.498687][T22487] Reported by Kernel Concurrency Sanitizer on: [ 274.504822][T22487] CPU: 1 UID: 0 PID: 22487 Comm: syz.1.6714 Not tainted syzkaller #0 PREEMPT(voluntary) [ 274.514685][T22487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 274.524737][T22487] ================================================================== [ 274.555196][T22511] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 274.582002][T22511] EXT4-fs (loop2): orphan cleanup on readonly fs [ 274.669432][T22511] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #16: comm syz.2.6722: corrupted inode contents [ 274.705902][T22511] EXT4-fs (loop2): Remounting filesystem read-only [ 274.714863][T22511] EXT4-fs (loop2): 1 truncate cleaned up [ 274.720974][T21979] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 274.731558][T21979] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 274.746293][T21979] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 274.803429][T22487] syz.1.6714 (22487) used greatest stack depth: 8680 bytes left [ 275.742605][T22221] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set