last executing test programs: 10m15.806384969s ago: executing program 2 (id=114): setrlimit(0x8, &(0x7f0000000380)) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000540)=""/76, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) utime(0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 10m15.677305132s ago: executing program 2 (id=118): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44880}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25df9bfe, {0x0, 0x0, 0x0, r3, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x8, 0x4, 0x7, 0x8}, 0x39}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x80, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8010}, 0x0) 10m15.489367959s ago: executing program 2 (id=120): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20048884) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004dc0)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10m14.94580619s ago: executing program 2 (id=122): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x8d8, &(0x7f0000000080), 0x3, 0x42f, &(0x7f0000000940)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000880)=@loop={'/dev/loop', 0x0}, &(0x7f0000000840)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b) 10m14.569599025s ago: executing program 2 (id=127): r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback, 0x1}], 0x1c) sendto$inet6(r0, &(0x7f0000001600)="5683", 0x2, 0x40000, 0x0, 0x0) 10m13.899962917s ago: executing program 2 (id=132): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @mcast2, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r0], 0x108}}], 0x2, 0xc040) 10m13.859208271s ago: executing program 32 (id=132): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @mcast2, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r0], 0x108}}], 0x2, 0xc040) 10m2.333658869s ago: executing program 3 (id=237): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) write$binfmt_register(0xffffffffffffffff, &(0x7f00000000c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '/dev/bus/usb/00#/00\\\x00', 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, './file0'}, 0x51) 10m2.214539211s ago: executing program 3 (id=240): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f0000000880)={[{@nouid32}, {@nouser_xattr}, {@prjquota}, {@delalloc}, {@grpquota}, {@nouid32}], [{@func={'func', 0x3d, 'POLICY_CHECK'}}, {@measure}, {@hash}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000080)=@ethtool_wolinfo={0x6, 0x0, 0xffffffff, "6ef3b2f39b00"}}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000000c0)=0x0) prlimit64(r2, 0xa, &(0x7f0000000280)={0x7, 0x9}, &(0x7f0000000900)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000940), &(0x7f0000000980), 0x2, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12}, 0x48) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) 10m1.719883717s ago: executing program 3 (id=247): socket(0x1a, 0x2, 0x92) 10m1.545605123s ago: executing program 3 (id=249): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000140)={[{}, {@oldalloc}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@noquota}, {@jqfmt_vfsv1}]}, 0x3, 0x447, &(0x7f0000000380)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fd0400000000000000c2542ded71038259ca171ce1ac08ef54ecef0e1e14ef3dc177e9b48b00", "f28359738e22924c66810000000000d31cf4965dbdb0aa530000000000000001", [0x200]}) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000100)={'macvtap0\x00', 0x200}) 10m0.859451687s ago: executing program 3 (id=256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x44, 0x0, 0x8, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8917}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_TIMEOUT_UDP_REPLIED={0x8, 0x2, 0x1, 0x0, 0x80000001}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000000}, 0x40) 10m0.085609049s ago: executing program 3 (id=262): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000000c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '/dev/bus/usb/00#/00\\\x00', 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, './file0'}, 0x51) 9m59.999663467s ago: executing program 33 (id=262): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r0, &(0x7f00000000c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x1000, 0x3a, '/dev/bus/usb/00#/00\\\x00', 0x3a, '/dev/bus/usb/00#/00#\x00', 0x3a, './file0'}, 0x51) 6m42.497940469s ago: executing program 4 (id=3372): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000800), 0x8000, 0x0) r2 = dup(r1) ioctl$GIO_UNISCRNMAP(r2, 0x43403d0e, 0x0) 6m42.424953396s ago: executing program 4 (id=3373): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x48, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x7fff, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='mm_migrate_pages\x00', r4, 0x0, 0x5}, 0x18) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000005400019b4abd70010000000007000000", @ANYRES32=r7, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="000002000000000000000000000000000000000186dd"], 0x38}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7ffc1fff}]}) arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000440)) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000eb0626f50000000000080000009500000000000000"], &(0x7f0000000440)='syzkaller\x00', 0x5, 0x1000, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000500)) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000780)) 6m42.329632295s ago: executing program 4 (id=3376): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='xprtrdma_marshal_failed\x00', r1}, 0x18) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="35c6e5832eedd65dee9cc56501000100f100"], 0xa) syz_read_part_table(0x103c, &(0x7f0000001040)="$eJzszjEOQUEYhdE7iEwlswRqq/i1apVNWILEWjQ2p1BLRK+W95Jz6pubL8zS8X15JdftLrdaJD1pPUmN3A/7bEZy/s5qmWet00ay+vFyevy/HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACm5xMAAP//1hgIrg==") 6m41.901982744s ago: executing program 4 (id=3381): syz_mount_image$iso9660(&(0x7f0000000540), &(0x7f00000001c0)='./file1\x00', 0x14004, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0], 0x4, 0x70a, &(0x7f00000232c0)="$eJzs3V+P21gZBvDnJJkkk0JVAapWVbdzOmWlqRhSJ7NNFRUkjHOSMSRxZHtgRkJaFTqDRs0UaItEc9PODX+k5Qtwtzdc8CFW4oKr/RZwBdIKhIR2BUJGPraTTOJkJm3a2aXPb7Qb5/j18etjr896xj4GERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERERQVgNw6gItO3uzq6czWq4Tif5ksXU/Ki2FdyMJm7OW+dKuF5AhP+gWMRbUfFbXxmFXA7/tY6r0berKIYfRQwuXL5098u5TLL8nIRfBBat8PHTwYN7/f7+ozPEZrFw9ecJmTMEtVTX9hy7Y7aUtD1H1ms149Z205NNu628Pc9XHWm5KuM7rtywbspKvb4lVXnP2em2GmZbJYV3vl41jJr8TiHa0QDKnrVtt9t2t6VjwtlhzB35/g+iAGV2pDw47O9vjeXzLK2Nw6BKSvKZ8eAwqHra5laNarVSqVYrtdv123cMIzdVYISEMYSpiKUftHSeMvHxusAiyzt5E72kjNX4j/FnAbRRRBc72IVM/bHQgAsHnRnzY0n//84tNXe94/1/0suvjGZfge7/r0Xfrs3q/2fkIiH1AmlzxIzyxX5WdEYSj/EUAzzAPfTRxz4eLaFuCbn20jXkjbgll5LPzJ8WFLqw4cGBjQ5MtPBFyLhEoo4aajDwHrbRhAeJJmy0oeBhDx58qPCIyoeZKpjw4cCFxAYs3IREBXXUsQUJhTL24GAHXbTQgIlPgiA4wKFu9604n+cpW40kqDJjIwrIJcfdPqpztnZW///DZ9HScf9vsP9/U0XHQSH6+GheDNFnQBBf/y9o7dVkQ0RERERERESvgtC/fRf6r/JvAwjQtNvKOBFTOLfsiIiIiIiIiGgZBIICrkJEd+XjbYjp638iIiIiIiIi+nwT+hk7AaCkb+oXo8elzvJLgOxrSJGIiIiIiIiIXpJ+8v9aHgj0Xf5rEAtd/xMRERERERHR58Cvx8bYz2XjMXaD5M/6GQBrfymID/9egLsijnu7XxVHZjjHPIpjpu4A8JtXxMV4oF79kQegv1nqqojXJoF/Jb99CH18kD7W//MgIoRwJxLIZ8crmJGACNdcy8Xf8D6uR4tcj8eZvz/IQM+JRhQuNe22KltO+24Fpnkx46td/+cPD38BuMPtPDjs75d/9JP+fZ3LcVh0fBRW+uxEOpn0xhjl8kSPt6CfuUgb3XgVzWSVv+l2SkKv10i2PwvzKDO+onk7oLYKRFv5S6xH+2w9iGJLg+GI+wJY04M/VMp6l53YendFjLKoTG552o6YseVFncWNKObGxo3oI2mTsJ6MKH4tC1TLk/sgTHQsi+p4Fqe3hfjHRPvPzwKiGLbFVpjFH8OKJtri+x9GC2/1dpPhMc6SxdRRQER0Xg5GvZAexHxqjP2ke0hOamfvd5AD4rPcjN59tJYg7j+S3v3J74Koh8oCufhvE+lrSfoVhGf0DaHryUcDuueupJzRjfKnQRCYF4sYP6P/NwiSDTIW6N2OgyCYPKP/YfQOpDjtqSz+HQTB3YruSX470at+EC7wwcz1eu1qFkUU8OTop/gkmb3/4/2H1epWzXjXMG5XsaL/VyH+yIJ9DxERTTn9HTs6IjMnQryL61Ed1+//7Z1o6kSP96X4lgLtFtDHfWwmrxBYS6+1hAN885/RbQib0VUrsF6KPksDefnS3fCqdhh7KHL6DS+bM6/qdGcZxerbG6rD2OS9Q5NXgKPYrVe8F4iIiF6v9Rn9MHCi/8fJ/r94ov/fxEYUsXEl9bq7NHZL4WZydTy8pB9cOE6NrZye/LeW3BhERERvCOV+LEr+r4Tr2r33KvV6xfS3lXQd67vStRstJe2ur1xr2+y2lOy5ju9YTlv2XBTsVeVJb6fXc1xfNh1X9hzP3tVvfpfxq9891TG7vm15vbYyPSUtp+ubli8btmfJ3s6327a3rVy9sNdTlt20LdO3na70nB3XUmUpPaXGAu2G6vp20w4nu7Ln2h3T3ZPfc9o7HSUbyrNcu+c7UYXJuuxu03E7utoygoVfdEhERPT/6PHTwYN7/f7+o8mJ1fDSPCo5xoyY6Yl8SoUcI4iIiOgzZtRdL7BQ8RUmREREREREREREREREREREREREREREREREU05/pG/BiZW0hwWBYcnPLsYleI7RI4ZT9Qi8bD6fun/SA/u9yOKZYYkAcIalkkciBg8+mhO8OixJmn885niRDHEJeOH2+esXgAu6BFFJbokHwPTzo0s/xtImvnEQteisGD0zdVZhuC9yy//PIZx4+PvpWSJs+SAIgvmLF062Yf7sx3MOwKP8nF2wesrx87rPRET0uv0vAAD//ySOL9Y=") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) clock_settime(0x0, &(0x7f0000000080)={0x0, 0x3938700}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) vmsplice(r3, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x10000003}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x22, 0x1}) io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000010000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='tlb_flush\x00', r7}, 0x18) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000140)={0x84, @dev={0xac, 0x14, 0x14, 0x3f}, 0x4e21, 0x6, 'wlc\x00', 0x9, 0x5, 0x7}, 0x2c) socket$kcm(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r9, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = syz_clone(0x111, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r11) ptrace$setregset(0x4205, r11, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$getregset(0x4204, r11, 0x2, &(0x7f00000003c0)={&(0x7f0000000380)=""/48, 0x30}) 6m40.319886739s ago: executing program 4 (id=3399): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d19f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981179186e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2a434b9048ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d6356e4450d043ed20d313cd56a56d2e4cdf26f19af9a41695a58a9b6b45af1ca939b18d7b57791b99cfc6ec2a0848c29fea4eb8b82395a38e8aca5ab4bfc2ad8acf2e51b766f8ecd16194ad41ec097082f7fa32179ef99dafa6c2aa206a25ddc33e6f0a09169eeff428c71f54e1dfcfcd7cfc8f6e169f11c47d504"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r1, 0x0, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x20000095}, 0x4c080) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='kfree\x00', r7, 0x0, 0xbc3}, 0x18) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[], 0xb4}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000001e80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, r3, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x802}, 0x4000) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x800000, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r1, &(0x7f0000002200)={&(0x7f0000001ec0)=@rc={0x1f, @none, 0x10}, 0x80, &(0x7f00000020c0)=[{&(0x7f0000001f40)="d8724adf4e249bc2a88fd69e7d4ccb40e734e8ffe4742ac12bbcf533e50e520c0a91b9107a145fa8e390322d73e87799f0eb5f3c222673656905ce6049a73f711377b17dd157b373959d5b5562351adf672bae5d72d6f0a4e7933258571bbd2cff433aabc39d201218f0849cc446e24da50b97e0d21be89d8ba35aed07bac47577b27038c681d38c4fd317665bcb8c75123d3ce985e71297cfac49525a73f0fdd35bfed9b07c715eda54444a6d44223e66457611bdf15c5e2ebc68110d19810325638c17", 0xc4}, {&(0x7f0000002040)="8289a126421dba8ec20a5ce33c20243b2ac0da4c3d37c492a80e92ce1b4289252171d5a4ae42904d0b983799b1cbf40d3d1942fda5ca770136ea64cae07ea4b89626eade8d5b693b26fb2769ff06f5e2982ec5875f68ceedf00668757277067fafc998343559b213eec06d7f814a1c0f7dad76551fefcad23103f0c521de", 0x7e}], 0x2, &(0x7f0000002100)=[{0x88, 0x104, 0x6, "41c35065fe64a391421286b3455132c0eaab185ed8552704bf9698c992d83d5a0d2b798a7d40eda76961a2322927720a346ddf747e5621ce27c258bce04c3db3bc13b23ee8348666a1304b0087ad284a4f529957e6c049a4422a75da5f18b4267e5f0f931eb6931b6957e0c0a80d6e481c61dfc6c31488"}, {0x70, 0x103, 0x5, "2fe89a1646d2267a30ac8cca93fbeea6426149a48203a7c0b8220aabfe836da17a8ee4e308f6b2390c524b8b169ce855c1ad3606c056769665de0e4f3b3af965d383e8fa222da621547a7882c1ea354602675920d9e3c7c67eef0963ca"}], 0xf8}, 0x14) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x1, 0x0, 0x7ffc0002}]}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r8}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000001000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) r10 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r10, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r10, &(0x7f0000000000)={0xa, 0xe22, 0x7fffffff, @empty, 0xfffffffe}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@link_local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "108114", 0x48, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "501d85d4c30be8f7096bcac751c47a7064c0905ddbda9581", "babcb20957603da1f0d40bdeece64d1a6888200cff6eb0e27af68eaa18f3616e"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 6m39.97408529s ago: executing program 4 (id=3408): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0x5, &(0x7f0000000240)={@private=0xa010100, @empty, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bf, 0x2, 0x7e, 0x6b}, 0x3c) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0x5, &(0x7f0000000240)={@broadcast, @empty, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x7e, 0x6b}, 0x3c) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000140), 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000780)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000040000001400050003030000080a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 6m39.915603216s ago: executing program 34 (id=3408): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0x5, &(0x7f0000000240)={@private=0xa010100, @empty, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bf, 0x2, 0x7e, 0x6b}, 0x3c) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0x5, &(0x7f0000000240)={@broadcast, @empty, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x7e, 0x6b}, 0x3c) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000140), 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000780)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000040000001400050003030000080a0000005dc00000000001080002000500000014000600ff01000a00f2f3f31f000a"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 52.829451124s ago: executing program 7 (id=8709): bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) 51.979197462s ago: executing program 7 (id=8728): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x89, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8ff20c2c10f0093d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xd6) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)='%pS \x00'}, 0x20) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x50) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c000000000a09040000000000000000020000040900010073797a300000"], 0x74}, 0x1, 0x0, 0x0, 0x8080}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x1f, 0xc, &(0x7f0000000a80)=ANY=[@ANYBLOB="eb1dfec5bfab758909f1bb6fda4760612c7a53bf14a2635336165b7f7e38bf85", @ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) syz_io_uring_complete(0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d6163767461700000000800014000000005"], 0xe8}, 0x1, 0x0, 0x0, 0x40040000}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000300), 0x0}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) ioprio_set$uid(0x3, 0x0, 0x0) r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) sendfile(r6, r6, 0x0, 0x800000009) 51.889052111s ago: executing program 7 (id=8731): r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00'}, 0x18) ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000200)={0x2, 0xa39a}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000) r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) poll(&(0x7f0000000040)=[{r3, 0x1}], 0x1, 0x101) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x281442, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r6, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0\x00'}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r7, 0x20, &(0x7f0000000100)={&(0x7f00000003c0)=""/232, 0xe8, 0x0, &(0x7f0000000680)=""/68, 0x44}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18052000000000000000000000000000b7080000000000007b8af8ff00000000b700e00000bfa100000000000007010000f8ffffffbfa400000000000007040000f0fffdffb702000008", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000680)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x10, 0x40, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0}, 0x119310, 0x1, 0x1, 0x3, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r10 = syz_io_uring_setup(0x497, &(0x7f0000000300)={0x0, 0x4661, 0x800, 0x5, 0x20e}, &(0x7f0000000240)=0x0, &(0x7f0000000680)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r11, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r11, r12, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0xa, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)='./file0\x00', 0xffffffffffffffff, 0x400, 0x1}) io_uring_enter(r10, 0x40f9, 0x217, 0xa5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r9, 0x0, 0xffffffffffffffff}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000980)='./file0\x00', 0x3000010, &(0x7f0000000100), 0x1, 0x519, &(0x7f00000009c0)="$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") 48.121869515s ago: executing program 7 (id=8753): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x262) 47.807764744s ago: executing program 7 (id=8758): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f00000004c0)={0x4, 0xfffffffc, 0x8, 0x16, 0x100, &(0x7f0000000a00)="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"}) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') removexattr(&(0x7f0000000580)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f0000000080)=@known='user.syz\x00') socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = pidfd_getfd(r3, r3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setns(r4, 0x66020000) syz_clone(0x50a60080, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000300)) 47.472698145s ago: executing program 7 (id=8762): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x40080) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000800000000000000100000094", @ANYRES8=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x18) socket$inet6(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x11, 0x0, r0, 0x0, &(0x7f0000000500)="ad824cf8bc2172fff650e77b0ea6a0e758d38b48982540e001dabab724d2845363224b6b1a3729b137c03ef425b1c31d80e163579350ebe9e837c39ca5d760dc26f135a09e1ababa00f1fd3eac76e49b0051fe7a95501bdaee1a208cef40100a38ae198291fd12ab99e8d3071216e4157f88a49cdb974479502bd26a3bf8633466aa4fe03e6ca964ebb9a0a487e13ae5667e1bb2b71d85904619", 0x9a, 0x40000000}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000280)={0x0, r6, 0xd, {0x7, 0xa42}, 0x80}, 0x1) 47.472451195s ago: executing program 35 (id=8762): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x40080) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000800000000000000100000094", @ANYRES8=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x18) socket$inet6(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x11, 0x0, r0, 0x0, &(0x7f0000000500)="ad824cf8bc2172fff650e77b0ea6a0e758d38b48982540e001dabab724d2845363224b6b1a3729b137c03ef425b1c31d80e163579350ebe9e837c39ca5d760dc26f135a09e1ababa00f1fd3eac76e49b0051fe7a95501bdaee1a208cef40100a38ae198291fd12ab99e8d3071216e4157f88a49cdb974479502bd26a3bf8633466aa4fe03e6ca964ebb9a0a487e13ae5667e1bb2b71d85904619", 0x9a, 0x40000000}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000280)={0x0, r6, 0xd, {0x7, 0xa42}, 0x80}, 0x1) 1.472550585s ago: executing program 1 (id=9401): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000008000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000008000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x18) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r2, &(0x7f00000006c0)=ANY=[], 0xff2e) r3 = fsopen(&(0x7f00000004c0)='mqueue\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000001d40)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xaei\xb6\xb7\xc1Y\xd5YG\xf9\xc2\xf1\xa4\xdb$\xf6]\xab\x1a\xdaY\xfb\x03dhS\x97nZ\xf8\xc6\x1f\x03\x00\x00\x00\x00\x00\x00\x00\x9bg-D#g\x16\xf4\xd9\x00\x00\x00\x00\x00eA\x9f\xc3\x11\x18\xe6\xc5\x95\x9e!^W\xf6\xacE\xa3\xc8\xe7\xec\xd6\xbd\x1c+\n\xc7Q( \xba\xff\x17N\x1fB\x91\x15\x83\xec(B\xc5\x05\x9d\xd6\x02|6\xdc\xee$\xb5\x1deC\xfb\xa2\xaa\xe0#\xcb\xde;sA\xad\xa6\xb6P\xa3\xf7\xc3q\xd4\xb6\x95\x02\xd8*\xa8\xd2\x94\xa3\x89\xa9\xa0\xc5\xc9=\xa5^\x00\x00\x00\x00\x00\x00\x00\x00\x00\xef\xcd\xd3\t\x01A\xd5\x81\xc1;9\xeez\xba\x00\x00\x00\xdc\x94\xff)\xa4\xe6\xfb]\x90bG\x11\b\x98#\xaa99ez|\x8b5\x92\xa5\xba\x96\xb3\xb26I\xbb\xdeb\x95?\xc0\x81', &(0x7f0000000200)='sockfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='dE\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='\xd0\x9e^\xa0\xee\xc8\x17T\xb1GI\x90\xe2Q1\xb0\x8f\xe1\xa8\x95\xa0\xcd\fL\xf10x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r6], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) 982.60302ms ago: executing program 6 (id=9413): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000500)='/sys/kernel/notes', 0x800, 0x188) preadv(r0, &(0x7f0000000180)=[{&(0x7f00000012c0)=""/112, 0x6c}], 0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x80, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = getpgrp(0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000000)='net/ip6_mr_cache\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000400)='io_uring_create\x00', r10}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='io_uring_create\x00', r8, 0x0, 0x1}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000200), &(0x7f0000000080)=r2}, 0x20) mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f0000000440)=""/213) shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) 929.666045ms ago: executing program 5 (id=9415): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = socket(0xa, 0x5, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="180100000700002c0000000000000004850000002a00000095"], &(0x7f0000000540)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x4, @loopback}], 0x1c) setsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x265}, 0x8) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000480)=ANY=[@ANYBLOB="211d00000000000007e6"], 0xf0) sendto$inet6(r1, &(0x7f0000000040)="00d8", 0x20a00, 0x44004, &(0x7f0000000100)={0xa, 0x4e24, 0xb, @loopback, 0xc5f}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) mq_open(&(0x7f0000000ac0)='syzkaller\x00', 0x40, 0xc0, &(0x7f0000000b00)={0x2, 0x4, 0x8000000000000001, 0xb}) 922.183165ms ago: executing program 6 (id=9416): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000c80)='kmem_cache_free\x00', r0}, 0x10) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x105, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x11e167, 0x0, 0xfffffffc, 0xb95b5ec032cc8e84}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000003b00)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) unshare(0x20000400) r4 = epoll_create1(0x0) epoll_pwait(r4, 0xfffffffffffffffc, 0x40, 0x8000005, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="c0020000100063d10000000000000000fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000000000000000000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc01000000000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000b000000000000000000000000000000ffffffffffffffff000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000020000000000000000000000bf010100636d61632861657329"], 0x2c0}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) bpf$TOKEN_CREATE(0x24, &(0x7f0000000340)={0x0, r3}, 0x8) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r8}, 0x10) syz_usb_connect(0x5, 0x24, &(0x7f0000000d40)=ANY=[@ANYBLOB="120150028154f25753ff66b153c8010203010902100001f70010af0904d100001b7b7805"], 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r10], 0x20}, 0x1, 0x0, 0x0, 0x80d5}, 0x0) 861.707151ms ago: executing program 5 (id=9417): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55c, &(0x7f00000006c0)="$eJzs3c1vG2kZAPBnJh92u91mC3uAFdCCFgqqajfubrXay7YXEFqthFhxQBy6IXGjqHZdamfZhEpk/4ZFAokT/AkckDgg7YkDN45IHBDSckAqEIEaJJCMZux8NHGIiR17E/9+0mQ+Xs88z9tkPK/fcecNYGJdiYiNiJiNiHciYq67PelOcbszZa97uvl4cWvz8WIS7fbbf0vy8mxbvkNh95jPdY9ZjIhvfi3iu8nBuM219fsLtVr1UXe93Ko/LDfX1q+v1BeWq8vVB5XKrflbN167+WplaHW9XP/Fk6+uvPmtX//qsx/9buMrP8jSutAt26nHkHWqPrMTJzMdEW+eRLAxmOrOZ8ecB8eTRsQnIuIL+fk/F1P5XycAcJa123PRntu7DgCcdWneB5akpYhI024joNTpw3sxzqe1RrN17V5j9cFSp6/shZhJ763UqjcuFf7wvfzFM0m2Pp+X5eX5emXf+s2IuBQRPyqcy9dLi43a0niaPAAw8Z7be/2PiH8W0rRU6mvXHnf1AIBTo3jsPX1ZAABOq+Nf/wGA02rf9f/cuPIAAEanj8//3Zv9GyeeCwAwGv9f///FE8sDABgd9/8BYPK4/gPARPnGW29lU3ur+/zrpXfXVu833r2+VG3eL9VXF0uLjUcPS8uNxnL+zJ76UcerNRoP51+J1ffKrWqzVW6urd+tN1YftO7mz/W+W50ZSa0AgP/l0uUPf59ExMbr5/Ip9ozl4FoNZ1s67gSAsZkaZGcNBDjVPMALJldfl/C8kfDbE88FGI+eD/Mu9lx81k86sw/6CeJ7RvCxcvXT/ff/G+MZzhb9/zC5jtf//8bQ8wBGT/8/TK52O9k/5v/sThEAcCYN8BW+9g+H1QgBxuqowbyPuv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAk+jC7exnkpbyscDT7GdaKkU8HxEvxExyb6VWvRERF+NyRMwUsvX5cScNAAwo/UvSHf/r6tzLF/aXzib/KuTziPj+T9/+8XsLrdaj+Wz733e2F7aHD6vs7jfAuIIAwJDl1+9Kd77ng/zTzceL29Mo83lyJ/7THYp4cWvzcT51SqYj2xhRzNsS5/+RxHR3n2JEvBQRU0OIv/F+RHyqV/2TuJD3gXRGPt0bP7qxnx9p/PSZ+Gle1plnja9PDiEXmDQf3omI273OvzSu5PPe538xf4ca3JM7nYNtv/dt7Yk/3Y001SN+ds5f6TfGK7/5+oGN7blO2fsRL033ip/sxE8Oif9yn/H/+JnPffDGIWXtn0Vcjd7x98Yqt+oPy8219esr9YXl6nL1QaVya/7Wjdduvlop533U5e2e6oP++vq1i4flltX//CHxiz3rP7uz7xf7rP/P//3Odz6/u1rYH//L21v2/f5f7Bm/I7smfqnP+Avnf3no8N1Z/KVD6n/U7/9an/E/+vP6Up8vBQBGoLm2fn+hVqs+Gmgh+xQ6jOMcWMhS7O/F283FwYL+KU6iFsdcmDmpf9VjLxT7zGd6p6043DS+nR2xR1Ha5x/JcRbSoddioIWno4o1vvckYDR2T/pxZwIAAAAAAAAAAAAAABxmFP91adx1BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Oz6bwAAAP//yxbH0Q==") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000c40)={[{@nogrpid}, {@noinit_itable}, {@jqfmt_vfsold}, {@debug}, {@nodiscard}, {@nodiscard}], [{@dont_hash}, {@obj_role={'obj_role', 0x3d, '/\''}}, {@smackfsdef}]}, 0x1, 0x43d, &(0x7f0000000700)="$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") r2 = creat(&(0x7f0000000040)='./bus\x00', 0x4) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x13, 0x1, 0x0, r2, &(0x7f0000000cc0)="3dc2e83aa99a8f28adbad28c76707666c16173987547ee1e7b6233dbe222e795bb91e104060422a72ce90ac91e4c65bd9598eacdf8cafa7fdef4932be74e4a9c6667513b8327ec4e23959eda7dbaaa56e5b30b64b3f0b5f011022fb4f8f51557ecf6bdb3e8f9c0393aeb09c0d3093ef58422ffa0407e48aa2824928f8248875d8491f72e89a73874cd85372df8a68c21b1bee203bfd39200"/162, 0xa2, 0x2000}]) r4 = memfd_create(&(0x7f0000000540)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xe4\x034|k\xab/\x14\xa7)t\xc7YE\xe2\xc8\x95HX\xa9\xff\x00\x00\x81p\xf3%Se\xe5\xd8U\xe3<\xf1\xb3\x9eG\xd9,U\xb1\x92o\xabs\xab\xee\x9cml9]*\xe8\xf1\x03\x00\x00\x00\x00\x00\x00\x00\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x04\x00\x00\x00\x00\x00\x00\x00\xbf3S\xef}\xfd\x16\xbc\xa5^\xff\xf5\x95\xd2q/\xc6\xca\x97\x9d?\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\x04\x00\x00\x00l5\xf3\xbe\" 6\r>\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbbm/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\t\xe2\rh\x8dsx\xaa!\x19\xdc\xdc\xcf\x0f\x9a\xa2o>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f\xe2\\Z\xef\x81\xe1c\xc5\xe6\x00\x00\x009\xcc\xd458\xd6(@\xab\xa9\x00'/322, 0x0) write$bt_hci(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x2b) execveat(r4, &(0x7f0000000300)='./file2\x00', 0x0, 0x0, 0x100) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r5, 0x6628) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x9}, 0x18) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') lseek(r8, 0x1, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000006d85500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ac55038014000080100001800a0001"], 0x565c}}, 0x0) sendto$inet_nvme_icreq_pdu(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r11, 0x40305828, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x100, 0x100000002, 0xfffffffffffffffe}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r9, &(0x7f0000000400)={0x12, 0x10, 0xfa00, {0x0, r10}}, 0x18) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000e8e4b40ce840d4483518110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r12}, 0x10) 748.403001ms ago: executing program 0 (id=9418): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r0, 0x4, 0x9, 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000780)='mm_page_free\x00', r1, 0x0, 0x201}, 0x18) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="09000000040000000800000010"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800002d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) 643.752591ms ago: executing program 8 (id=9419): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000500)='/sys/kernel/notes', 0x800, 0x188) preadv(r0, &(0x7f0000000180)=[{&(0x7f00000012c0)=""/112, 0x6c}], 0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x80, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = getpgrp(0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000000)='net/ip6_mr_cache\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000580)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000400)='io_uring_create\x00', r9}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='io_uring_create\x00', r7, 0x0, 0x1}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) sendto$inet(r6, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) close_range(r3, 0xffffffffffffffff, 0x0) 643.015401ms ago: executing program 0 (id=9420): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5, 0x0, 0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x8000, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2b25}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {0x3, 0x0, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x800}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x62572899, 0x1ff, 0x8, 0x0, 0x3}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x200}, {}, {0x4}, {0x1}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x1, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x20000000, 0x8000, 0x0, 0xe}, {0x3, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x2}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x3}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {0x1}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 620.365043ms ago: executing program 1 (id=9421): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55c, &(0x7f00000006c0)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000c40)={[{@nogrpid}, {@noinit_itable}, {@jqfmt_vfsold}, {@debug}, {@nodiscard}, {@nodiscard}], [{@dont_hash}, {@obj_role={'obj_role', 0x3d, '/\''}}, {@smackfsdef}]}, 0x1, 0x43d, &(0x7f0000000700)="$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") r2 = creat(&(0x7f0000000040)='./bus\x00', 0x4) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x13, 0x1, 0x0, r2, &(0x7f0000000cc0)="3dc2e83aa99a8f28adbad28c76707666c16173987547ee1e7b6233dbe222e795bb91e104060422a72ce90ac91e4c65bd9598eacdf8cafa7fdef4932be74e4a9c6667513b8327ec4e23959eda7dbaaa56e5b30b64b3f0b5f011022fb4f8f51557ecf6bdb3e8f9c0393aeb09c0d3093ef58422ffa0407e48aa2824928f8248875d8491f72e89a73874cd85372df8a68c21b1bee203bfd39200"/162, 0xa2, 0x2000}]) 543.30406ms ago: executing program 0 (id=9422): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2eb2b00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c0004804800018008000100666962003c000280080003400000000c0800014000000002080001400000"], 0x122}, 0x1, 0x0, 0x0, 0x40000}, 0x80d0) r0 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) syz_clone(0x60000400, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000191401"], 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)=""/179, 0xb3}], 0x1) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 536.559831ms ago: executing program 8 (id=9423): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000500)='/sys/kernel/notes', 0x800, 0x188) preadv(r0, &(0x7f0000000180)=[{&(0x7f00000012c0)=""/112, 0x6c}], 0x2, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000640)=[{0x200000000006, 0x0, 0x80, 0x7ffc1ffb}]}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = getpgrp(0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000000)='net/ip6_mr_cache\x00') r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000400)='io_uring_create\x00', r10}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='io_uring_create\x00', r8, 0x0, 0x1}, 0x18) io_uring_setup(0x1de0, &(0x7f00000000c0)={0x0, 0x45d6}) bind$inet(r7, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r7, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) close_range(r4, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000200), &(0x7f0000000080)=r2}, 0x20) r11 = shmget$private(0x0, 0x3000, 0x2, &(0x7f0000ffc000/0x3000)=nil) shmctl$SHM_UNLOCK(r11, 0xc) 467.806957ms ago: executing program 5 (id=9424): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x90}}, 0x4000000) 456.784168ms ago: executing program 8 (id=9425): socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x5, 0x80000000, 0x1, 0x4, 0x9, 0xa4, 0x0, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x6, 0x5, 0x101, 0x1002, 0x9, 0x1, 0x3, 0x1, 0xfffffffa, 0x65, 0xa, 0xd, 0x4, 0x7, 0x5, 0x100000, 0x0, 0x40, 0xd, 0xe, 0x1, 0x100, 0x5, 0x1c00, 0xb, 0x7, 0xbed4, 0x20000008, 0x8000100, 0x3, 0xfffffffe, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x0, 0x400083, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x101, 0x2, 0x180000, 0xf, 0x8b, 0x5, 0x2af, 0x6, 0x5, 0x10, 0x6, 0x9, 0x4, 0x7, 0x4009, 0xfffffffe, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0xe, 0xffffffff, 0x6, 0x6, 0x9, 0x600, 0xfdfffffc, 0x2, 0x2, 0x84, 0x100, 0x6, 0x252, 0x81, 0x3ff, 0x5, 0x20006, 0x5, 0x1, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0x8, 0x3, 0x2, 0x5, 0x8, 0x4000000, 0x8004, 0x2, 0x40, 0xd8, 0x4, 0x6, 0x100, 0x66cd, 0xc, 0x8, 0x1, 0x1fc, 0xc5c, 0x3ff]}}) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r6], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) 419.244602ms ago: executing program 1 (id=9426): socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x5, 0x80000000, 0x1, 0x4, 0x9, 0xa4, 0x0, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x6, 0x5, 0x101, 0x1002, 0x9, 0x1, 0x3, 0x1, 0xfffffffa, 0x65, 0xa, 0xd, 0x4, 0x7, 0x5, 0x100000, 0x0, 0x40, 0xd, 0xe, 0x1, 0x100, 0x5, 0x1c00, 0xb, 0x7, 0xbed4, 0x20000008, 0x8000100, 0x3, 0xfffffffe, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x0, 0x400083, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x101, 0x2, 0x180000, 0xf, 0x8b, 0x5, 0x2af, 0x6, 0x5, 0x10, 0x6, 0x9, 0x4, 0x7, 0x4009, 0xfffffffe, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0xe, 0xffffffff, 0x6, 0x6, 0x9, 0x600, 0xfdfffffc, 0x2, 0x2, 0x84, 0x100, 0x6, 0x252, 0x81, 0x3ff, 0x5, 0x20006, 0x5, 0x1, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0x8, 0x3, 0x2, 0x5, 0x8, 0x4000000, 0x8004, 0x2, 0x40, 0xd8, 0x4, 0x6, 0x100, 0x66cd, 0xc, 0x8, 0x1, 0x1fc, 0xc5c, 0x3ff]}}) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000000)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448cb, 0x0) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fedbdf25080000001800028014000380100001800400030008000100050000000c00018008000100", @ANYRES32=r6], 0x38}, 0x1, 0x0, 0x0, 0x4000814}, 0x0) 418.795851ms ago: executing program 5 (id=9427): symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\v\x00\x00\x00\a\x00\x00\x00\b'], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) 371.545876ms ago: executing program 5 (id=9428): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000e80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) r4 = socket$inet_sctp(0x2, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x9, @remote, 0x3}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='F', 0x1}, {0x0, 0xe0}], 0x2, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0xa, 0x4, 0x28, 0x200000b, r6}}], 0x20, 0x2400e044}, 0x0) 346.275408ms ago: executing program 8 (id=9429): r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x9, @dev={0xfe, 0x80, '\x00', 0x44}, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28, 0x7ffffff7}}], 0x1, 0x2004489c) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000005"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x2017, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @multicast}]}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x45}, 0x8000002) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r7}, 0x10) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nombcache}, {@delalloc}, {@data_err_ignore}, {@nojournal_checksum}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4cd, &(0x7f0000000c80)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpi8Ezi3Xg03jTxqkfjyT8ADx5MDAkxXABPa2Z3pt3ur+7CtqXs55Ns+zwzz8zzPDPzzD77PDsbwMAaS/8kEf+LiFsR8VQtujLBWO3f/btXZx7cvToTi5XKqX+Sarp7aTyTb7c9i4wXIgpfJg07rJm/fOXcdLk8dymLTy6c/2xy/vKV18+enz4zd2buwtSJE8eOHjn+5tQbvVeqRX5pve7t/eLivj3vnr75/kwxXz6S/a+vR1vF3oox1mHdK73t6rG3oy6cNB+na+taGLo2kl3WpbT9Xy0fPL3RBQLWTaVSqQy3X71YaXS9aQmwaSWx0SUANkb+Rp9+/s1f69T1eCzcOVn7AJTW+372qq0pRiFLU2r4fNtPYxHx8eK/36Sv6DQO8ecaFQAAGDi/nMx7go39v0Lsrkv3/2wOZTQino6InRHxTETsiohnI6ppn4uI5xszSCIqHfLf1RBfzv/HbBahcPuRK9lB2v97K5vbWtn/y3t/MTqUxXZE5B3mucPZMRmP0vAnZ8tzR9rsf8sq+df3/9JXmn/eF8zKcbvYMEA3O70w/XC1bXbnesTeYmP9k2J64vJpnCQi9kTE3h72O1oXPvvad/uWIqWV6Vavf1WlxZRez/NxrVS+jXi1dv4XY8X5X84x6Tw/OTkS5bnDk+lVcLhlHr/9fuODdvmvWv+f/mrc5J3jP5961GovSc//trrrP/L52+X6jyYRydJ87XxEZai3PG788VV1v2OHmtc97PW/JfmoGs7b1+fTCwuXjkRsSd5rXj61vG0ez9On9R8/1Lr978y2SY/ECxGRXsQvRsRLEbE/K/uBiDgYES2qtuTXt1/+tN26Lq//NZPWf7bl/W/F+V+er+8ykG+cLhk6d+DWgzY3j+7O/7FqaDxb0vr+l6y4RXRb0kc7egAAALA5FKL63f/CxFK4UJiYqI0B7YpthfLF+YX9EXFhtvaMwGiUCvlIV208uJTk45+jdfGphvjRbNz466Gt1fjEzMXy7EZXHgbc9mqbT5raf+rvHsd5gU2oD/NowCa1WvvffXOdCgKsO+//MLjq2v9imySLvikDTybv/zC4WrX/a/F9x2cX3DNg86toyzDQtH8YXMX4cClcfey55dO2wJPI+z8MpF6f6+8tUBluvWokWvxiwMjaFGNri7w2JJD2rPq4w1JEdJd468NkkXcB2//CQ6G3HQ5H86qh6LRV0sPvOOSB9KismvjM7r5f/PlvovT7svlhuZ2WujzdfQpsyO0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg7/4LAAD///QJ1ng=") r10 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143041, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r10, 0x40305829, &(0x7f0000000080)={0x17c04, 0xffffffffffffffff, 0x9, 0x1002, 0x800000006, 0x1ff}) chdir(0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000740)=@nat={'nat\x00', 0x8, 0x5, 0x6c0, 0xf0, 0xf0, 0xffffffff, 0x390, 0xf0, 0x5f0, 0x5f0, 0xffffffff, 0x5f0, 0x5f0, 0x5, 0x0, {[{{@uncond, 0xb7030000, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@local, @ipv6=@mcast1, @gre_key, @gre_key}}}, {{@uncond, 0x0, 0x168, 0x1b0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev, [], @ipv6=@private1, [], @ipv4=@private, [], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@loopback, @ipv6=@local, @icmp_id, @icmp_id}}}, {{@ipv6={@mcast1, @local, [], [], 'wg1\x00', 'virt_wifi0\x00'}, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4, @ipv4=@empty, @gre_key, @icmp_id}}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'dummy0\x00', 'syzkaller0\x00'}, 0x0, 0x218, 0x260, 0x0, {}, [@common=@inet=@sctp={{0x148}}, @common=@mh={{0x28}, {"0c06"}}]}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x0, @ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x720) 299.778122ms ago: executing program 1 (id=9430): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r2, 0x0) mknod$loop(&(0x7f0000002180)='./file0\x00', 0x800, 0x0) 283.661434ms ago: executing program 0 (id=9431): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000142020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000e02800850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r0, 0x4, 0x9, 0x1}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000780)='mm_page_free\x00', r1, 0x0, 0x201}, 0x18) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="09000000040000000800000010"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/28, 0x1c}], 0x1}}], 0x90}, 0x0) 274.546384ms ago: executing program 1 (id=9432): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000008000000000000001", @ANYRES8=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x18) socket$inet6(0xa, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x11, 0x0, r0, 0x0, &(0x7f0000000500)="ad824cf8bc2172fff650e77b0ea6a0e758d38b48982540e001dabab724d2845363224b6b1a3729b137c03ef425b1c31d80e163579350ebe9e837c39ca5d760dc26f135a09e1ababa00f1fd3eac76e49b0051fe7a95501bdaee1a208cef40100a38ae198291fd12ab99e8d3071216e4157f88a49cdb974479502bd26a3bf8633466aa4fe03e6ca964ebb9a0a487e13ae5667e1bb2b71d85904619", 0x9a, 0x40000000}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000280)={0x0, r6, 0xd, {0x7, 0xa42}, 0x80}, 0x1) 238.201978ms ago: executing program 0 (id=9433): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x70bd2d, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x0, 0x300}, 0x93}, [{0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x9}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x40000000}, {0x1, 0x0, 0x0, 0x4000000, 0x7, 0x80000}, {0x8000, 0x5, 0x0, 0xfffffffc, 0x5}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x800000, 0x0, 0x6}, {0x0, 0xc3}, {0x0, 0x5, 0x0, 0x0, 0x5}, {0x5}, {}, {0x0, 0x10}, {0x0, 0x470a, 0x0, 0x8000000}, {}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x6}, {0x0, 0x0, 0x40000}, {}, {0x0, 0x0, 0x0, 0x1, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {0x20000}, {}, {0x0, 0x7, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x3}, {0x0, 0x8000, 0x0, 0x0, 0x5}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x60569add}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2b25}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {0xffffffff, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffff800}, {0x3, 0x0, 0x0, 0xfff}, {0x0, 0x0, 0x0, 0x800}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0xfffffffd}, {}, {0x0, 0x9, 0x0, 0xffffffff, 0x0, 0x2}, {}, {0x80}, {0x80}, {0x0, 0x0, 0x0, 0x5, 0x5}, {}, {0x0, 0x0, 0x8}, {0x0, 0x2, 0x0, 0x0, 0x9}, {0x62572899, 0x1ff, 0x8, 0x0, 0x3}, {}, {0x0, 0x5}, {0x0, 0x0, 0x0, 0x8510}, {0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0xfffefffd}, {0x0, 0x0, 0x0, 0x1}, {}, {0x5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {0x0, 0x7, 0x0, 0x20000000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x9}, {0x0, 0xfffffffc, 0x200, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x200}, {}, {0x4}, {0x1}, {0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x101, 0x0, 0x0, 0x0, 0xffffffff}, {}, {0x3, 0xfffffffe}, {0x0, 0x0, 0x0, 0x4, 0x9}, {}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x7}, {0x0, 0xb}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x56}, {0x0, 0x0, 0x0, 0xec33, 0x0, 0x4}, {}, {0xb, 0x0, 0x0, 0x0, 0x0, 0xfe1}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0xfffffffc}, {}, {0x0, 0xfffffffd}, {0x6}, {0x7f}, {}, {0x0, 0x8, 0x0, 0x0, 0xfffffffe}, {0x4, 0x2, 0x2000000, 0x2, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xe9d, 0x58a}, {0x2}, {0x2, 0x9, 0x20000000}, {0xfffffffc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x292}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0xe600, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {0x0, 0x5, 0x0, 0x7, 0x1}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x10000000, 0x0, 0x0, 0x0, 0x1, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffc}, {0x3}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x7fffffff}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {}, {}, {0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, {0x6, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffe}, {0x2d, 0x0, 0x10000}, {0x0, 0x0, 0x8000}, {0x20000000, 0x8000, 0x0, 0xe}, {0x3, 0x0, 0x10000}, {0x0, 0x80000000, 0x0, 0x7fff800, 0x4}, {0x0, 0x3}, {0xffffffff, 0x0, 0x0, 0x0, 0xd}], [{}, {}, {0x0, 0x1}, {0x1}, {}, {0x3}, {}, {0x0, 0x1}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x1}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {0x2}, {0x5}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x3}, {}, {0x5}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2, 0x1}, {}, {}, {}, {}, {0x5, 0x1}, {}, {0x1}, {}, {0x2}, {}, {}, {0x4}, {0x3}, {}, {}, {}, {}, {0x0, 0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) 200.873651ms ago: executing program 0 (id=9434): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55c, &(0x7f00000006c0)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000c40)={[{@nogrpid}, {@noinit_itable}, {@jqfmt_vfsold}, {@debug}, {@nodiscard}, {@nodiscard}], [{@dont_hash}, {@obj_role={'obj_role', 0x3d, '/\''}}, {@smackfsdef}]}, 0x1, 0x43d, &(0x7f0000000700)="$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") r2 = creat(&(0x7f0000000040)='./bus\x00', 0x4) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x13, 0x1, 0x0, r2, &(0x7f0000000cc0)="3dc2e83aa99a8f28adbad28c76707666c16173987547ee1e7b6233dbe222e795bb91e104060422a72ce90ac91e4c65bd9598eacdf8cafa7fdef4932be74e4a9c6667513b8327ec4e23959eda7dbaaa56e5b30b64b3f0b5f011022fb4f8f51557ecf6bdb3e8f9c0393aeb09c0d3093ef58422ffa0407e48aa2824928f8248875d8491f72e89a73874cd85372df8a68c21b1bee203bfd39200"/162, 0xa2, 0x2000}]) r4 = memfd_create(&(0x7f0000000540)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xe4\x034|k\xab/\x14\xa7)t\xc7YE\xe2\xc8\x95HX\xa9\xff\x00\x00\x81p\xf3%Se\xe5\xd8U\xe3<\xf1\xb3\x9eG\xd9,U\xb1\x92o\xabs\xab\xee\x9cml9]*\xe8\xf1\x03\x00\x00\x00\x00\x00\x00\x00\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x04\x00\x00\x00\x00\x00\x00\x00\xbf3S\xef}\xfd\x16\xbc\xa5^\xff\xf5\x95\xd2q/\xc6\xca\x97\x9d?\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\x04\x00\x00\x00l5\xf3\xbe\" 6\r>\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbbm/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\t\xe2\rh\x8dsx\xaa!\x19\xdc\xdc\xcf\x0f\x9a\xa2o>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f\xe2\\Z\xef\x81\xe1c\xc5\xe6\x00\x00\x009\xcc\xd458\xd6(@\xab\xa9\x00'/322, 0x0) write$bt_hci(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x2b) execveat(r4, &(0x7f0000000300)='./file2\x00', 0x0, 0x0, 0x100) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r5, 0x6628) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000000085000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7, 0x0, 0x9}, 0x18) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') lseek(r8, 0x1, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000006d85500001e0a05010000000000000000070000000900020073797a31000000000900010073797a3000000000ac55038014000080100001800a0001"], 0x565c}}, 0x0) sendto$inet_nvme_icreq_pdu(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000ac0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r11, 0x40305828, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x100, 0x100000002, 0xfffffffffffffffe}) write$RDMA_USER_CM_CMD_MIGRATE_ID(r9, &(0x7f0000000400)={0x12, 0x10, 0xfa00, {0x0, r10}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="18000000000000e8e4b40ce840d4483518110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$key(0xf, 0x3, 0x2) 45.972425ms ago: executing program 6 (id=9435): r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000a90085100000060000001800"/28, @ANYRES8=r0, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000380)='syzkaller\x00', 0x6}, 0x94) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x1c917, &(0x7f0000000740)={[{@nodelalloc}, {@noblock_validity}, {@errors_remount}, {@data_err_ignore}, {@debug}, {@resgid={'resgid', 0x3d, 0xee01}}, {@noinit_itable}, {@noinit_itable}, {@journal_dev={'journal_dev', 0x3d, 0xafb}, 0x32}]}, 0x9b, 0x4ef, &(0x7f0000000a40)="$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") open_by_handle_at(r1, &(0x7f0000000080)=@FILEID_BTRFS_WITH_PARENT={0x28, 0x4e, {0x5, 0x7fffffffffffffff, 0x0, 0x6, 0x6, 0x3}}, 0x10400) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000180100002020732500000000002020207b1af8ff00000000bfa1000000000000070100000700ffff9702000008000000b703000000000028850000009500000095"], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x2b}, 0x94) write$binfmt_script(r2, &(0x7f0000000240), 0x3af4701e) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2e, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000540)='kfree\x00', r4, 0x0, 0x4}, 0x18) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000003c0)='./bus\x00', 0x0, &(0x7f0000000580)={[{@bsdgroups}, {@nodiscard}, {@nomblk_io_submit}, {@abort}, {@nogrpid}, {@debug}, {@abort}, {@grpquota}, {@barrier}]}, 0x1, 0x520, &(0x7f0000001180)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000004000000410000002000000001000000", @ANYRES32=0x1, @ANYBLOB="ffffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="034000000100"/28], 0x50) ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f0000000140)=0xe32) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000007c0)=0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xb, &(0x7f0000000480)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x38) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000080)='sys_enter\x00', r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000080)='kfree\x00', r7}, 0x18) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) shutdown(0xffffffffffffffff, 0x1) 0s ago: executing program 1 (id=9436): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x55c, &(0x7f00000006c0)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000c40)={[{@nogrpid}, {@noinit_itable}, {@jqfmt_vfsold}, {@debug}, {@nodiscard}, {@nodiscard}], [{@dont_hash}, {@obj_role={'obj_role', 0x3d, '/\''}}, {@smackfsdef}]}, 0x1, 0x43d, &(0x7f0000000700)="$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") io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x13, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000cc0)="3dc2e83aa99a8f28adbad28c76707666c16173987547ee1e7b6233dbe222e795bb91e104060422a72ce90ac91e4c65bd9598eacdf8cafa7fdef4932be74e4a9c6667513b8327ec4e23959eda7dbaaa56e5b30b64b3f0b5f011022fb4f8f51557ecf6bdb3e8f9c0393aeb09c0d3093ef58422ffa0407e48aa2824928f8248875d8491f72e89a73874cd85372df8a68c21b1bee203bfd39200"/162, 0xa2, 0x2000}]) kernel console output (not intermixed with test programs): interface [ 619.910598][T29895] team0: Port device team_slave_0 removed [ 619.916846][T29895] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.925504][T29895] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 619.945851][T29898] bridge0: port 1(team0) entered blocking state [ 619.952451][T29898] bridge0: port 1(team0) entered disabled state [ 619.964423][T19415] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.970418][T29898] team0: entered allmulticast mode [ 619.990551][T29898] team0: entered promiscuous mode [ 620.018716][ T12] hsr_slave_0: left promiscuous mode [ 620.026028][ T12] hsr_slave_1: left promiscuous mode [ 620.038591][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 620.039881][ T3403] hid-generic 0000:0000:0000.0031: unknown main item tag 0x0 [ 620.076154][ T3403] hid-generic 0000:0000:0000.0031: hidraw0: HID v0.00 Device [syz1] on syz0 [ 620.094257][ T12] team0 (unregistering): Port device team_slave_1 removed [ 620.115745][ T12] team0 (unregistering): Port device team_slave_0 removed [ 620.198900][T29862] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.206126][T29862] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.215445][T29862] bridge_slave_0: entered allmulticast mode [ 620.222899][T29862] bridge_slave_0: entered promiscuous mode [ 620.231206][T29862] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.238536][T29862] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.246258][T29862] bridge_slave_1: entered allmulticast mode [ 620.252901][T29862] bridge_slave_1: entered promiscuous mode [ 620.286026][T29862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.318497][T20135] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 620.333802][T29862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.385216][T29936] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #3: comm syz.5.8941: corrupted inode contents [ 620.441193][T29936] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #3: comm syz.5.8941: mark_inode_dirty error [ 620.460483][T29936] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #3: comm syz.5.8941: corrupted inode contents [ 620.462042][T29862] team0: Port device team_slave_0 added [ 620.486221][T29936] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.8941: mark_inode_dirty error [ 620.502290][T29862] team0: Port device team_slave_1 added [ 620.513468][T29936] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.8941: Failed to acquire dquot type 0 [ 620.528348][T29936] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.8941: corrupted inode contents [ 620.541869][T29936] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #16: comm syz.5.8941: mark_inode_dirty error [ 620.542613][T29862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.560361][T29862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.586451][T29862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.598405][T29936] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.8941: corrupted inode contents [ 620.599145][T29862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.613356][T29936] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.8941: mark_inode_dirty error [ 620.617604][T29862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.630864][T29936] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.8941: corrupted inode contents [ 620.655726][T29862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.668983][T29936] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 620.726041][T29936] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.8941: corrupted inode contents [ 620.738735][T29936] EXT4-fs error (device loop5): ext4_truncate:4635: inode #16: comm syz.5.8941: mark_inode_dirty error [ 620.756586][T29936] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 620.780539][T29862] hsr_slave_0: entered promiscuous mode [ 620.786101][T29936] EXT4-fs (loop5): 1 truncate cleaned up [ 620.792416][T29936] ext4 filesystem being mounted at /579/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 620.804139][T29862] hsr_slave_1: entered promiscuous mode [ 620.810582][T29951] netlink: 'syz.0.8943': attribute type 1 has an invalid length. [ 620.811030][T29862] debugfs: 'hsr0' already exists in 'hsr' [ 620.818508][T29951] __nla_validate_parse: 1 callbacks suppressed [ 620.818526][T29951] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8943'. [ 620.824422][T29862] Cannot create hsr debugfs directory [ 620.897576][ T3479] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 620.914416][ T3479] hid-generic 0000:0000:0000.0032: hidraw1: HID v0.00 Device [syz1] on syz0 [ 621.272497][T29990] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #3: comm syz.8.8945: corrupted inode contents [ 621.274652][T29862] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 621.301863][T29862] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 621.314166][T29862] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 621.328011][T29862] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 621.334907][T29990] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #3: comm syz.8.8945: mark_inode_dirty error [ 621.350490][T29990] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #3: comm syz.8.8945: corrupted inode contents [ 621.371553][T29990] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #3: comm syz.8.8945: mark_inode_dirty error [ 621.390818][T29990] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.8945: Failed to acquire dquot type 0 [ 621.395660][T30012] netlink: 'syz.1.8955': attribute type 2 has an invalid length. [ 621.404297][T30000] ext4 filesystem being mounted at /528/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 621.410255][T30012] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8955'. [ 621.429199][T29990] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.8945: corrupted inode contents [ 621.470645][T29862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.472406][T29990] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #16: comm syz.8.8945: mark_inode_dirty error [ 621.485257][T29862] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.502285][T29990] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.8945: corrupted inode contents [ 621.503956][ T1572] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.521631][ T1572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.529791][T29990] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.8945: mark_inode_dirty error [ 621.543163][T29990] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.8945: corrupted inode contents [ 621.555580][T29990] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 621.568345][ T1572] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.575450][ T1572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 621.585668][T29990] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.8945: corrupted inode contents [ 621.609391][T29862] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 621.619967][T29862] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 621.633267][T29990] EXT4-fs error (device loop8): ext4_truncate:4635: inode #16: comm syz.8.8945: mark_inode_dirty error [ 621.644814][T29990] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 621.656350][T21491] loop1: p1 < > p4 [ 621.662378][T21491] loop1: p4 size 8388608 extends beyond EOD, truncated [ 621.686885][T30012] loop1: p1 < > p4 [ 621.688145][T29990] EXT4-fs (loop8): 1 truncate cleaned up [ 621.697854][T29990] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 621.709147][T30012] loop1: p4 size 8388608 extends beyond EOD, truncated [ 621.738359][ T3006] loop1: p1 < > p4 [ 621.752162][ T3006] loop1: p4 size 8388608 extends beyond EOD, truncated [ 621.793498][T29862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.837244][ T29] kauditd_printk_skb: 1325 callbacks suppressed [ 621.837264][ T29] audit: type=1326 audit(2000000154.990:137901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29982 comm="syz.5.8949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5444b365e7 code=0x7ffc0000 [ 621.899504][T21491] udevd[21491]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 621.915993][ T29] audit: type=1326 audit(2000000155.020:137902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29982 comm="syz.5.8949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5444adb829 code=0x7ffc0000 [ 621.939971][ T29] audit: type=1326 audit(2000000155.020:137903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29982 comm="syz.5.8949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5444b365e7 code=0x7ffc0000 [ 621.963889][ T29] audit: type=1326 audit(2000000155.020:137904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29982 comm="syz.5.8949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5444adb829 code=0x7ffc0000 [ 621.988165][ T29] audit: type=1326 audit(2000000155.020:137905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29982 comm="syz.5.8949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f5444b3f749 code=0x7ffc0000 [ 622.012329][ T29] audit: type=1326 audit(2000000155.030:137906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29982 comm="syz.5.8949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5444b365e7 code=0x7ffc0000 [ 622.036774][ T29] audit: type=1326 audit(2000000155.030:137907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29982 comm="syz.5.8949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5444adb829 code=0x7ffc0000 [ 622.060698][ T29] audit: type=1326 audit(2000000155.030:137908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29982 comm="syz.5.8949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f5444b3f749 code=0x7ffc0000 [ 622.084935][ T29] audit: type=1326 audit(2000000155.040:137909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29982 comm="syz.5.8949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5444b365e7 code=0x7ffc0000 [ 622.108763][ T29] audit: type=1326 audit(2000000155.040:137910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=29982 comm="syz.5.8949" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5444adb829 code=0x7ffc0000 [ 622.616274][T30079] set_capacity_and_notify: 4 callbacks suppressed [ 622.616296][T30079] loop8: detected capacity change from 0 to 512 [ 622.693873][T30079] journal_path: Lookup failure for './file0' [ 622.700334][T30079] EXT4-fs: error: could not find journal device path [ 622.936703][T30091] loop5: detected capacity change from 0 to 128 [ 622.984387][T30091] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 623.026964][T30097] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8966'. [ 623.037715][T30091] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 623.055698][T30097] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8966'. [ 623.064796][T30097] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8966'. [ 623.087028][T30099] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8965'. [ 623.223339][T30097] loop0: detected capacity change from 0 to 512 [ 623.286244][T29862] veth0_vlan: entered promiscuous mode [ 623.301788][T30097] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 623.358276][T29862] veth1_vlan: entered promiscuous mode [ 623.373006][T30118] loop5: detected capacity change from 0 to 512 [ 623.393995][T30097] EXT4-fs (loop0): mount failed [ 623.443043][T29862] veth0_macvtap: entered promiscuous mode [ 623.480915][T29862] veth1_macvtap: entered promiscuous mode [ 623.523031][T29862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 623.538795][T30118] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 623.585202][T30118] EXT4-fs (loop5): mount failed [ 623.593293][T29862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 623.633124][ T7700] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.668465][ T7700] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.715958][ T7700] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 623.753625][ T7700] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 624.141704][T30166] netlink: 'syz.6.8970': attribute type 1 has an invalid length. [ 624.149683][T30166] netlink: 224 bytes leftover after parsing attributes in process `syz.6.8970'. [ 624.163681][T30161] loop5: detected capacity change from 0 to 128 [ 624.478054][T30175] netlink: 'syz.1.8975': attribute type 2 has an invalid length. [ 624.486026][T30175] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8975'. [ 624.747492][ T2969] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 624.841598][T30175] loop1: detected capacity change from 0 to 2048 [ 624.855282][ T2969] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [syz1] on syz0 [ 624.997072][T30187] loop6: detected capacity change from 0 to 1024 [ 625.003900][ T7357] loop1: p1 < > p4 [ 625.047505][ T7357] loop1: p4 size 8388608 extends beyond EOD, truncated [ 625.156806][T30175] loop1: p1 < > p4 [ 625.188837][T30175] loop1: p4 size 8388608 extends beyond EOD, truncated [ 625.204873][T30198] loop8: detected capacity change from 0 to 128 [ 625.254343][T30198] msdos: Unknown parameter 'tj' [ 625.287608][T30204] loop6: detected capacity change from 0 to 512 [ 625.298508][T30204] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 625.329321][T21491] udevd[21491]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 625.373400][T30208] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 625.446362][T30204] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.8979: iget: bad i_size value: 38620345925642 [ 625.481423][T30204] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.8979: couldn't read orphan inode 15 (err -117) [ 625.545994][T30204] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.8979: bg 0: block 5: invalid block bitmap [ 625.573684][T30216] loop5: detected capacity change from 0 to 512 [ 625.605964][T30204] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 625.702266][T30216] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #3: comm syz.5.8976: corrupted inode contents [ 625.718728][T30222] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 625.751702][T30216] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #3: comm syz.5.8976: mark_inode_dirty error [ 625.805330][T30216] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #3: comm syz.5.8976: corrupted inode contents [ 625.826494][T30216] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.8976: mark_inode_dirty error [ 625.847070][T30229] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 625.863214][T30216] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.8976: Failed to acquire dquot type 0 [ 625.875032][T30229] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 625.880950][T30216] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.8976: corrupted inode contents [ 625.902321][T30216] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #16: comm syz.5.8976: mark_inode_dirty error [ 625.915787][T30216] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.8976: corrupted inode contents [ 625.928070][T30216] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.8976: mark_inode_dirty error [ 625.940370][T30216] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.8976: corrupted inode contents [ 625.952726][T30216] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 625.961690][T30216] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.8976: corrupted inode contents [ 625.974071][T30216] EXT4-fs error (device loop5): ext4_truncate:4635: inode #16: comm syz.5.8976: mark_inode_dirty error [ 625.986483][T30216] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 625.996501][T30216] EXT4-fs (loop5): 1 truncate cleaned up [ 626.002800][T30216] ext4 filesystem being mounted at /587/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 626.047812][T30233] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 626.057440][T30233] EXT4-fs (loop0): orphan cleanup on readonly fs [ 626.075803][T30233] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.8988: corrupted inode contents [ 626.093722][T30233] EXT4-fs (loop0): Remounting filesystem read-only [ 626.100904][T30233] EXT4-fs (loop0): 1 truncate cleaned up [ 626.107908][ T188] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 626.118912][ T188] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 626.167568][ T188] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 626.171672][T30239] netlink: 'syz.8.8990': attribute type 2 has an invalid length. [ 626.185996][T30239] netlink: 32 bytes leftover after parsing attributes in process `syz.8.8990'. [ 626.225497][T30241] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 626.277803][T21491] loop8: p1 < > p4 [ 626.286661][T21491] loop8: p4 size 8388608 extends beyond EOD, truncated [ 626.288234][T30245] netlink: 'syz.0.8993': attribute type 2 has an invalid length. [ 626.301557][T30245] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8993'. [ 626.326162][T30243] ext4 filesystem being mounted at /588/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 626.342663][T30239] loop8: p1 < > p4 [ 626.366811][T30239] loop8: p4 size 8388608 extends beyond EOD, truncated [ 626.434143][T30245] loop0: p1 < > p4 [ 626.448430][T30245] loop0: p4 size 8388608 extends beyond EOD, truncated [ 626.832282][T30282] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9004'. [ 626.849445][T30285] netlink: 'syz.6.9007': attribute type 1 has an invalid length. [ 626.854558][ T29] kauditd_printk_skb: 976 callbacks suppressed [ 626.854576][ T29] audit: type=1326 audit(2000000160.000:138877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30275 comm="syz.0.9004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed402f749 code=0x7ffc0000 [ 626.923241][ T3938] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 626.947601][ T3938] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [syz1] on syz0 [ 626.988776][ T29] audit: type=1326 audit(2000000160.050:138878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30275 comm="syz.0.9004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ed402f749 code=0x7ffc0000 [ 627.012857][ T29] audit: type=1326 audit(2000000160.050:138879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30275 comm="syz.0.9004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed402f749 code=0x7ffc0000 [ 627.037558][ T29] audit: type=1326 audit(2000000160.050:138880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30275 comm="syz.0.9004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed402f749 code=0x7ffc0000 [ 627.037591][ T29] audit: type=1326 audit(2000000160.070:138881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30275 comm="syz.0.9004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6ed402f749 code=0x7ffc0000 [ 627.037688][ T29] audit: type=1326 audit(2000000160.070:138882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30275 comm="syz.0.9004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed402f749 code=0x7ffc0000 [ 627.037716][ T29] audit: type=1326 audit(2000000160.070:138883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30275 comm="syz.0.9004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6ed402f749 code=0x7ffc0000 [ 627.037739][ T29] audit: type=1326 audit(2000000160.090:138884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30275 comm="syz.0.9004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed402f749 code=0x7ffc0000 [ 627.037771][ T29] audit: type=1400 audit(2000000160.100:138885): avc: denied { bind } for pid=30284 comm="syz.6.9007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 627.037856][ T29] audit: type=1326 audit(2000000160.120:138886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30275 comm="syz.0.9004" exe="/root/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7f6ed402f749 code=0x7ffc0000 [ 627.085656][T30302] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9014'. [ 627.085705][T30302] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9014'. [ 627.085780][T30302] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9014'. [ 627.102314][T30303] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9013'. [ 627.192004][T30304] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 627.192262][T30304] EXT4-fs (loop1): mount failed [ 627.526050][T30314] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #3: comm syz.8.9011: corrupted inode contents [ 627.526257][T30314] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #3: comm syz.8.9011: mark_inode_dirty error [ 627.526783][T30314] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #3: comm syz.8.9011: corrupted inode contents [ 627.526985][T30314] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #3: comm syz.8.9011: mark_inode_dirty error [ 627.527308][T30314] EXT4-fs error (device loop8): ext4_acquire_dquot:6986: comm syz.8.9011: Failed to acquire dquot type 0 [ 627.527982][T30314] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.9011: corrupted inode contents [ 627.528185][T30314] EXT4-fs error (device loop8): ext4_dirty_inode:6502: inode #16: comm syz.8.9011: mark_inode_dirty error [ 627.528363][T30314] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.9011: corrupted inode contents [ 627.528568][T30314] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.9011: mark_inode_dirty error [ 627.528779][T30314] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.9011: corrupted inode contents [ 627.528890][T30314] EXT4-fs error (device loop8) in ext4_orphan_del:303: Corrupt filesystem [ 627.529126][T30314] EXT4-fs error (device loop8): ext4_do_update_inode:5617: inode #16: comm syz.8.9011: corrupted inode contents [ 627.529377][T30314] EXT4-fs error (device loop8): ext4_truncate:4635: inode #16: comm syz.8.9011: mark_inode_dirty error [ 627.529520][T30314] EXT4-fs error (device loop8) in ext4_process_orphan:345: Corrupt filesystem [ 627.529901][T30314] EXT4-fs (loop8): 1 truncate cleaned up [ 627.530467][T30314] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 627.787699][T30326] netlink: 'syz.8.9018': attribute type 2 has an invalid length. [ 627.795594][T30326] netlink: 32 bytes leftover after parsing attributes in process `syz.8.9018'. [ 627.873563][T30326] set_capacity_and_notify: 7 callbacks suppressed [ 627.873595][T30326] loop8: detected capacity change from 0 to 2048 [ 628.016206][T30326] loop8: p1 < > p4 [ 628.132084][T30326] loop8: p4 size 8388608 extends beyond EOD, truncated [ 628.286633][T30357] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9029'. [ 628.336875][T30363] netlink: 'syz.8.9035': attribute type 2 has an invalid length. [ 628.344757][T30363] netlink: 32 bytes leftover after parsing attributes in process `syz.8.9035'. [ 628.440144][T30363] loop8: detected capacity change from 0 to 2048 [ 628.454181][T30371] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 628.506693][T30363] loop8: p1 < > p4 [ 628.526395][T30363] loop8: p4 size 8388608 extends beyond EOD, truncated [ 628.651390][T30381] loop1: detected capacity change from 0 to 128 [ 628.652832][T30383] loop5: detected capacity change from 0 to 1024 [ 628.664977][T30383] EXT4-fs: inline encryption not supported [ 628.677174][T30381] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 628.691204][T30381] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 628.897318][T30397] loop8: detected capacity change from 0 to 512 [ 628.911166][T30397] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 628.927805][T30397] EXT4-fs (loop8): mount failed [ 628.965032][ T3403] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 628.976604][T30406] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 629.018951][ T3403] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz1] on syz0 [ 629.136202][T30415] netlink: 'syz.8.9052': attribute type 1 has an invalid length. [ 629.222440][T30418] loop5: detected capacity change from 0 to 128 [ 629.233705][T30418] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 629.250380][T30418] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 629.254012][T30420] loop8: detected capacity change from 0 to 1024 [ 629.273891][T30420] EXT4-fs: inline encryption not supported [ 629.375828][T30427] loop1: detected capacity change from 0 to 512 [ 629.399355][T30431] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.463310][T30427] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #3: comm syz.1.9049: corrupted inode contents [ 629.540162][T30427] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #3: comm syz.1.9049: mark_inode_dirty error [ 629.552391][T30427] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #3: comm syz.1.9049: corrupted inode contents [ 629.572284][T30443] loop6: detected capacity change from 0 to 512 [ 629.584253][T30427] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.9049: mark_inode_dirty error [ 629.597481][T30443] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 629.606824][T30427] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.9049: Failed to acquire dquot type 0 [ 629.621608][T30431] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.621627][T30427] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.9049: corrupted inode contents [ 629.648298][T30427] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #16: comm syz.1.9049: mark_inode_dirty error [ 629.656446][T30443] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.9060: iget: bad i_size value: 38620345925642 [ 629.660128][T30427] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.9049: corrupted inode contents [ 629.677860][T30443] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.9060: couldn't read orphan inode 15 (err -117) [ 629.710139][T30427] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.9049: mark_inode_dirty error [ 629.722399][T30443] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.9060: bg 0: block 5: invalid block bitmap [ 629.737232][T30443] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 629.748913][T30443] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 629.775366][T30452] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 629.777175][T30427] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.9049: corrupted inode contents [ 629.797740][T30451] loop0: detected capacity change from 0 to 512 [ 629.809783][T30431] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.821076][T30451] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 629.828084][T30427] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 629.841368][T30427] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.9049: corrupted inode contents [ 629.842833][T30451] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.9062: iget: bad i_size value: 38620345925642 [ 629.866968][T30427] EXT4-fs error (device loop1): ext4_truncate:4635: inode #16: comm syz.1.9049: mark_inode_dirty error [ 629.879529][T30451] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.9062: couldn't read orphan inode 15 (err -117) [ 629.883707][T30427] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 629.937122][T30427] EXT4-fs (loop1): 1 truncate cleaned up [ 629.943496][T30427] ext4 filesystem being mounted at /596/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 629.944020][T30431] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.969604][T30451] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.9062: bg 0: block 5: invalid block bitmap [ 629.983088][T30451] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 630.001138][T30451] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 630.038702][ T7700] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.062034][ T7700] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.097503][ T7700] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.115651][ T7700] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.371757][T30467] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 630.394912][ T409] bridge_slave_1: left allmulticast mode [ 630.401046][ T409] bridge_slave_1: left promiscuous mode [ 630.406967][ T409] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.414978][T30467] EXT4-fs (loop1): mount failed [ 630.420470][ T409] bridge_slave_0: left allmulticast mode [ 630.426289][ T409] bridge_slave_0: left promiscuous mode [ 630.432033][ T409] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.496479][T30480] EXT4-fs: inline encryption not supported [ 630.603858][T30492] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 630.623382][T30492] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 630.646235][ T409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.666397][ T409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.686931][ T409] bond0 (unregistering): Released all slaves [ 630.708384][ T409] bond1 (unregistering): Released all slaves [ 630.751584][T30437] chnl_net:caif_netlink_parms(): no params data found [ 630.828977][T30437] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.836533][T30437] bridge0: port 1(bridge_slave_0) entered disabled state [ 630.844178][T30437] bridge_slave_0: entered allmulticast mode [ 630.862386][T30437] bridge_slave_0: entered promiscuous mode [ 630.895051][T30437] bridge0: port 2(bridge_slave_1) entered blocking state [ 630.902271][T30437] bridge0: port 2(bridge_slave_1) entered disabled state [ 630.909883][T30437] bridge_slave_1: entered allmulticast mode [ 630.936583][T30437] bridge_slave_1: entered promiscuous mode [ 630.938002][T30516] netlink: 'syz.6.9079': attribute type 1 has an invalid length. [ 630.951844][T30515] EXT4-fs: inline encryption not supported [ 631.062538][T30437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 631.114006][T30437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 631.257496][T30437] team0: Port device team_slave_0 added [ 631.307733][ T409] hsr_slave_0: left promiscuous mode [ 631.337231][T30540] netlink: 'syz.0.9091': attribute type 2 has an invalid length. [ 631.345290][T30540] __nla_validate_parse: 10 callbacks suppressed [ 631.345310][T30540] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9091'. [ 631.364550][ T409] hsr_slave_1: left promiscuous mode [ 631.384998][ T409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 631.676397][T30551] loop0: p1 < > p4 [ 631.722072][T30559] netlink: 'syz.6.9093': attribute type 2 has an invalid length. [ 631.730009][T30559] netlink: 32 bytes leftover after parsing attributes in process `syz.6.9093'. [ 631.740581][T30551] loop0: p4 size 8388608 extends beyond EOD, truncated [ 631.811995][ T409] team0 (unregistering): Port device team_slave_1 removed [ 631.826920][ T409] team0 (unregistering): Port device team_slave_0 removed [ 631.835317][ T1640] smc: removing ib device syz! [ 631.856436][ T29] kauditd_printk_skb: 751 callbacks suppressed [ 631.856497][ T29] audit: type=1326 audit(2000000165.010:139631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30539 comm="syz.0.9091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6ed4062005 code=0x7ffc0000 [ 631.954619][T30437] team0: Port device team_slave_1 added [ 631.961148][ T29] audit: type=1326 audit(2000000165.040:139632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30539 comm="syz.0.9091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6ed4062005 code=0x7ffc0000 [ 631.985314][ T29] audit: type=1326 audit(2000000165.040:139633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30539 comm="syz.0.9091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6ed4062005 code=0x7ffc0000 [ 632.009326][ T29] audit: type=1326 audit(2000000165.040:139634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30539 comm="syz.0.9091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6ed4062005 code=0x7ffc0000 [ 632.033255][ T29] audit: type=1326 audit(2000000165.050:139635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30539 comm="syz.0.9091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6ed4062005 code=0x7ffc0000 [ 632.057333][ T29] audit: type=1326 audit(2000000165.050:139636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30539 comm="syz.0.9091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6ed4062005 code=0x7ffc0000 [ 632.081719][ T29] audit: type=1326 audit(2000000165.050:139637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30539 comm="syz.0.9091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6ed4062005 code=0x7ffc0000 [ 632.108570][ T29] audit: type=1326 audit(2000000165.050:139638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30539 comm="syz.0.9091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6ed4062005 code=0x7ffc0000 [ 632.132627][ T29] audit: type=1326 audit(2000000165.050:139639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30539 comm="syz.0.9091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6ed4062005 code=0x7ffc0000 [ 632.157141][ T29] audit: type=1326 audit(2000000165.050:139640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30539 comm="syz.0.9091" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6ed4062005 code=0x7ffc0000 [ 632.309843][T30437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.316983][T30437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.343321][T30437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.427849][T30568] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 632.458895][T30437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.466000][T30437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.492178][T30437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.661969][T30437] hsr_slave_0: entered promiscuous mode [ 632.688738][T30437] hsr_slave_1: entered promiscuous mode [ 632.735456][T30561] loop6: p1 < > p4 [ 632.780919][T30566] netlink: 'syz.0.9095': attribute type 2 has an invalid length. [ 632.788796][T30566] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9095'. [ 632.835205][T30561] loop6: p4 size 8388608 extends beyond EOD, truncated [ 632.997218][T30566] set_capacity_and_notify: 7 callbacks suppressed [ 632.997234][T30566] loop0: detected capacity change from 0 to 2048 [ 633.027530][ T3006] loop6: p1 < > p4 [ 633.032044][ T3006] loop6: p4 size 8388608 extends beyond EOD, truncated [ 633.050618][T30592] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9100'. [ 633.076082][T30566] loop0: p1 < > p4 [ 633.113326][T30566] loop0: p4 size 8388608 extends beyond EOD, truncated [ 633.142206][T17471] udevd[17471]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 633.163698][ T3006] loop0: p1 < > p4 [ 633.171523][ T3006] loop0: p4 size 8388608 extends beyond EOD, truncated [ 633.244090][T30604] $Hÿ: renamed from bond0 [ 633.252571][T30604] $Hÿ: entered promiscuous mode [ 633.257819][T30604] bond_slave_0: entered promiscuous mode [ 633.263796][T30604] bond_slave_1: entered promiscuous mode [ 633.270964][T30610] netlink: 'syz.8.9101': attribute type 1 has an invalid length. [ 633.278840][T30610] netlink: 224 bytes leftover after parsing attributes in process `syz.8.9101'. [ 633.384526][T17471] udevd[17471]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 633.432365][T30437] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 633.469798][T30437] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 633.601375][T30437] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 633.661033][T30437] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 633.683553][ T3410] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 633.706317][ T3410] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [syz1] on syz0 [ 633.792099][T30437] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.830125][T30437] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.852610][ T409] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.860073][ T409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 633.897160][T30664] loop6: detected capacity change from 0 to 128 [ 633.909895][T30664] msdos: Unknown parameter 'tj' [ 633.954356][ T409] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.961751][ T409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.008884][T30437] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 634.019454][T30437] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 634.056907][T30677] loop8: detected capacity change from 0 to 512 [ 634.102538][T30677] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 634.137450][T30690] loop0: detected capacity change from 0 to 512 [ 634.164162][T30677] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.9118: iget: bad i_size value: 38620345925642 [ 634.177148][T30437] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 634.184247][T30695] loop1: detected capacity change from 0 to 512 [ 634.212021][T30690] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #3: comm syz.0.9114: corrupted inode contents [ 634.228258][T30695] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 634.237542][T30677] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.9118: couldn't read orphan inode 15 (err -117) [ 634.265256][T30690] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #3: comm syz.0.9114: mark_inode_dirty error [ 634.277144][T30677] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.9118: bg 0: block 5: invalid block bitmap [ 634.301968][T30695] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.9119: iget: bad i_size value: 38620345925642 [ 634.316289][T30677] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 634.326097][T30690] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #3: comm syz.0.9114: corrupted inode contents [ 634.338364][T30690] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.9114: mark_inode_dirty error [ 634.338419][T30695] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.9119: couldn't read orphan inode 15 (err -117) [ 634.350518][T30690] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.9114: Failed to acquire dquot type 0 [ 634.379625][T30690] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.9114: corrupted inode contents [ 634.393209][T30690] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #16: comm syz.0.9114: mark_inode_dirty error [ 634.413130][T30676] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.9119: bg 0: block 5: invalid block bitmap [ 634.426169][T30690] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.9114: corrupted inode contents [ 634.426394][T30676] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 634.453173][T30676] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 634.460373][T30690] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.9114: mark_inode_dirty error [ 634.476088][T30690] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.9114: corrupted inode contents [ 634.488705][T30690] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 634.499878][T30690] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.9114: corrupted inode contents [ 634.522590][T30690] EXT4-fs error (device loop0): ext4_truncate:4635: inode #16: comm syz.0.9114: mark_inode_dirty error [ 634.524280][T30437] veth0_vlan: entered promiscuous mode [ 634.540814][T30690] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 634.549115][T30437] veth1_vlan: entered promiscuous mode [ 634.558109][T30690] EXT4-fs (loop0): 1 truncate cleaned up [ 634.568230][T30437] veth0_macvtap: entered promiscuous mode [ 634.576870][T30690] ext4 filesystem being mounted at /553/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 634.578648][T30437] veth1_macvtap: entered promiscuous mode [ 634.602156][T30437] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.613210][T30437] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.624656][ T409] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.634138][ T409] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.643451][ T409] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.671205][ T409] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 634.729892][T30733] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 634.740323][T30731] loop6: detected capacity change from 0 to 1024 [ 634.747880][T30731] EXT4-fs: inline encryption not supported [ 634.804918][T30735] netlink: 'syz.0.9122': attribute type 1 has an invalid length. [ 634.812774][T30735] netlink: 224 bytes leftover after parsing attributes in process `syz.0.9122'. [ 634.948594][T30749] loop8: detected capacity change from 0 to 1024 [ 634.980159][T30749] EXT4-fs: inline encryption not supported [ 635.065437][ T3479] hid-generic 0000:0000:0000.0037: unknown main item tag 0x0 [ 635.079066][ T3479] hid-generic 0000:0000:0000.0037: hidraw0: HID v0.00 Device [syz1] on syz0 [ 635.197357][T30768] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 635.314179][T30773] loop8: detected capacity change from 0 to 512 [ 635.341053][T30773] EXT4-fs error (device loop8): ext4_iget_extra_inode:5073: inode #15: comm : corrupted in-inode xattr: bad e_name length [ 635.342553][T30779] FAULT_INJECTION: forcing a failure. [ 635.342553][T30779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 635.361515][T30773] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm : couldn't read orphan inode 15 (err -117) [ 635.367925][T30779] CPU: 1 UID: 0 PID: 30779 Comm: syz.5.9135 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 635.367969][T30779] Tainted: [W]=WARN [ 635.367976][T30779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 635.368012][T30779] Call Trace: [ 635.368019][T30779] [ 635.368028][T30779] __dump_stack+0x1d/0x30 [ 635.368054][T30779] dump_stack_lvl+0x95/0xd0 [ 635.368077][T30779] dump_stack+0x15/0x1b [ 635.368097][T30779] should_fail_ex+0x265/0x280 [ 635.368122][T30779] should_fail+0xb/0x20 [ 635.368163][T30779] should_fail_usercopy+0x1a/0x20 [ 635.368187][T30779] strncpy_from_user+0x27/0x260 [ 635.368221][T30779] __se_sys_memfd_create+0x206/0x6b0 [ 635.368338][T30779] __x64_sys_memfd_create+0x31/0x40 [ 635.368486][T30779] x64_sys_call+0x28cb/0x3000 [ 635.368511][T30779] do_syscall_64+0xca/0x2b0 [ 635.368545][T30779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.368624][T30779] RIP: 0033:0x7fbd7703f749 [ 635.368705][T30779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 635.368777][T30779] RSP: 002b:00007fbd75aa6e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 635.368833][T30779] RAX: ffffffffffffffda RBX: 00000000000004ef RCX: 00007fbd7703f749 [ 635.368847][T30779] RDX: 00007fbd75aa6ef0 RSI: 0000000000000000 RDI: 00007fbd770c4960 [ 635.368860][T30779] RBP: 0000200000000a40 R08: 00007fbd75aa6bb7 R09: 00007fbd75aa6e40 [ 635.368874][T30779] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 635.368887][T30779] R13: 00007fbd75aa6ef0 R14: 00007fbd75aa6eb0 R15: 0000200000000740 [ 635.368908][T30779] [ 635.558978][T30773] tipc: Started in network mode [ 635.563957][T30773] tipc: Node identity 2d3675ed16c27fff002e, cluster identity 4711 [ 635.582280][T30783] loop6: detected capacity change from 0 to 512 [ 635.594449][T30785] loop5: detected capacity change from 0 to 512 [ 635.622427][T30785] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 635.647554][T30785] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.9136: iget: bad i_size value: 38620345925642 [ 635.667942][T30783] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #3: comm syz.6.9132: corrupted inode contents [ 635.677263][T30785] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.9136: couldn't read orphan inode 15 (err -117) [ 635.688857][T30761] chnl_net:caif_netlink_parms(): no params data found [ 635.714228][T30785] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.9136: bg 0: block 5: invalid block bitmap [ 635.736729][T30785] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 635.746941][T30783] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #3: comm syz.6.9132: mark_inode_dirty error [ 635.760310][T30783] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #3: comm syz.6.9132: corrupted inode contents [ 635.772996][T30783] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.9132: mark_inode_dirty error [ 635.788291][T30783] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.9132: Failed to acquire dquot type 0 [ 635.806278][T30783] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.9132: corrupted inode contents [ 635.821926][T30795] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9137'. [ 635.873973][T30761] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.881352][T30761] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.889207][T30783] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #16: comm syz.6.9132: mark_inode_dirty error [ 635.901374][T30761] bridge_slave_0: entered allmulticast mode [ 635.908551][T30761] bridge_slave_0: entered promiscuous mode [ 635.912589][T30783] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.9132: corrupted inode contents [ 635.915589][T30761] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.933471][T30761] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.941104][T30761] bridge_slave_1: entered allmulticast mode [ 635.948108][T30761] bridge_slave_1: entered promiscuous mode [ 635.957068][T30783] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.9132: mark_inode_dirty error [ 635.968836][T30783] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.9132: corrupted inode contents [ 635.981562][T30783] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 635.995786][T30783] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.9132: corrupted inode contents [ 636.015712][T30761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 636.025284][T30783] EXT4-fs error (device loop6): ext4_truncate:4635: inode #16: comm syz.6.9132: mark_inode_dirty error [ 636.036991][T30783] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 636.042266][T30761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 636.048913][T30783] EXT4-fs (loop6): 1 truncate cleaned up [ 636.062121][T30783] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 636.108229][T30761] team0: Port device team_slave_0 added [ 636.114919][T30761] team0: Port device team_slave_1 added [ 636.150070][ T1640] bridge_slave_1: left allmulticast mode [ 636.155845][ T1640] bridge_slave_1: left promiscuous mode [ 636.161929][ T1640] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.197547][ T1640] bridge_slave_0: left allmulticast mode [ 636.203250][ T1640] bridge_slave_0: left promiscuous mode [ 636.209250][ T1640] bridge0: port 1(bridge_slave_0) entered disabled state [ 636.308358][ T1640] $Hÿ (unregistering): (slave bond_slave_0): Releasing backup interface [ 636.330009][T30812] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 636.339265][ T1640] bond_slave_0: left promiscuous mode [ 636.360250][ T1640] $Hÿ (unregistering): (slave bond_slave_1): Releasing backup interface [ 636.403986][ T1640] bond_slave_1: left promiscuous mode [ 636.410047][ T1640] $Hÿ (unregistering): Released all slaves [ 636.421313][ T1640] bond1 (unregistering): Released all slaves [ 636.431928][T30761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.439010][T30761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.465158][T30761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.510903][T30761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.518000][T30761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 636.544231][T30761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.592507][T30761] hsr_slave_0: entered promiscuous mode [ 636.600048][T30761] hsr_slave_1: entered promiscuous mode [ 636.621738][T30761] debugfs: 'hsr0' already exists in 'hsr' [ 636.627778][T30761] Cannot create hsr debugfs directory [ 637.008264][ T1640] hsr_slave_0: left promiscuous mode [ 637.017771][ T3410] hid-generic 0000:0000:0000.0038: unknown main item tag 0x0 [ 637.037948][T30829] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 637.095662][ T1640] hsr_slave_1: left promiscuous mode [ 637.120329][ T3410] hid-generic 0000:0000:0000.0038: hidraw0: HID v0.00 Device [syz1] on syz0 [ 637.181510][ T1640] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 637.401809][T30829] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 637.416751][T30835] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 637.448387][T30829] EXT4-fs (loop0): orphan cleanup on readonly fs [ 637.495147][T30829] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 637.591760][T30829] EXT4-fs (loop0): Remounting filesystem read-only [ 637.628821][T30829] EXT4-fs (loop0): 1 truncate cleaned up [ 637.706508][ T29] kauditd_printk_skb: 407 callbacks suppressed [ 637.706528][ T29] audit: type=1326 audit(2000000170.850:140044): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30850 comm="syz.6.9152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74dce4f749 code=0x7ffc0000 [ 637.793570][T30855] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 637.812523][ T29] audit: type=1326 audit(2000000170.890:140045): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30850 comm="syz.6.9152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f74dce4f749 code=0x7ffc0000 [ 637.836376][ T29] audit: type=1326 audit(2000000170.890:140046): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30850 comm="syz.6.9152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74dce4f749 code=0x7ffc0000 [ 637.860957][ T29] audit: type=1326 audit(2000000170.890:140047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30850 comm="syz.6.9152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f74dce4f749 code=0x7ffc0000 [ 638.024677][T30858] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #3: comm syz.5.9149: corrupted inode contents [ 638.040417][T30860] Falling back ldisc for ttyS3. [ 638.069785][ T29] audit: type=1400 audit(2000000171.200:140048): avc: denied { setcheckreqprot } for pid=30859 comm="syz.6.9155" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 638.105891][T30858] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #3: comm syz.5.9149: mark_inode_dirty error [ 638.176545][T30858] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #3: comm syz.5.9149: corrupted inode contents [ 638.245757][T30858] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #3: comm syz.5.9149: mark_inode_dirty error [ 638.261111][ T1640] IPVS: stop unused estimator thread 0... [ 638.285383][T30858] Quota error (device loop5): write_blk: dquota write failed [ 638.312290][T30858] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 638.325784][T30858] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.9149: Failed to acquire dquot type 0 [ 638.338433][ T2134] Quota error (device loop0): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 638.353843][ T2134] EXT4-fs (loop0): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 638.364842][ T2134] Quota error (device loop0): write_blk: dquota write failed [ 638.372446][ T2134] Quota error (device loop0): remove_free_dqentry: Can't write block (8) with free entries [ 638.373696][T30858] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.9149: corrupted inode contents [ 638.382590][ T2134] EXT4-fs (loop0): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 638.383170][ T2134] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 638.414320][T30858] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #16: comm syz.5.9149: mark_inode_dirty error [ 638.427515][T30829] EXT4-fs mount: 50 callbacks suppressed [ 638.427533][T30829] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 638.496678][T30858] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.9149: corrupted inode contents [ 638.502957][ T1051] hid-generic 0000:0000:0000.0039: unknown main item tag 0x0 [ 638.517998][ T1051] hid-generic 0000:0000:0000.0039: hidraw1: HID v0.00 Device [syz1] on syz0 [ 638.528092][T30858] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #16: comm syz.5.9149: mark_inode_dirty error [ 638.539924][T30858] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.9149: corrupted inode contents [ 638.554575][T30882] netlink: 'syz.8.9161': attribute type 2 has an invalid length. [ 638.562419][T30882] netlink: 32 bytes leftover after parsing attributes in process `syz.8.9161'. [ 638.614660][T30858] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 638.638617][T30882] set_capacity_and_notify: 2 callbacks suppressed [ 638.638635][T30882] loop8: detected capacity change from 0 to 2048 [ 638.648688][T30858] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #16: comm syz.5.9149: corrupted inode contents [ 638.683138][T30858] EXT4-fs error (device loop5): ext4_truncate:4635: inode #16: comm syz.5.9149: mark_inode_dirty error [ 638.707490][T30882] loop8: p1 < > p4 [ 638.712732][T30882] loop8: p4 size 8388608 extends beyond EOD, truncated [ 638.719981][T30858] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 638.746137][T30858] EXT4-fs (loop5): 1 truncate cleaned up [ 638.777837][T30858] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 638.821095][T30858] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 638.872080][T21468] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 638.883477][T30761] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 638.901028][T30761] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 638.927183][T21491] udevd[21491]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 638.945079][T30761] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 638.959662][T30761] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 639.018413][T30906] loop0: detected capacity change from 0 to 512 [ 639.022794][T30761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.034979][T30908] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9164'. [ 639.045947][T30437] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.047059][T30906] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 639.068343][T30761] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.078615][ T1572] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.085834][ T1572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.110922][T30761] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 639.116029][T30906] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.9163: iget: bad i_size value: 38620345925642 [ 639.122139][T30761] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 639.124260][ T1572] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.152455][ T1572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 639.174109][T30906] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.9163: couldn't read orphan inode 15 (err -117) [ 639.187968][T30906] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 639.190620][T30913] netlink: 'syz.8.9167': attribute type 2 has an invalid length. [ 639.208734][T30913] netlink: 32 bytes leftover after parsing attributes in process `syz.8.9167'. [ 639.211994][T30916] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 639.220441][T30906] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.9163: bg 0: block 5: invalid block bitmap [ 639.259537][T30906] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 639.295128][T30913] loop8: detected capacity change from 0 to 2048 [ 639.336342][T30922] loop6: detected capacity change from 0 to 512 [ 639.359460][T30913] loop8: p1 < > p4 [ 639.366646][T30913] loop8: p4 size 8388608 extends beyond EOD, truncated [ 639.414306][T30761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.463287][T30922] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #3: comm syz.6.9159: corrupted inode contents [ 639.498567][T30922] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #3: comm syz.6.9159: mark_inode_dirty error [ 639.517627][T30922] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #3: comm syz.6.9159: corrupted inode contents [ 639.561205][T30922] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.9159: mark_inode_dirty error [ 639.587156][T21491] udevd[21491]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 639.593408][T30922] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.9159: Failed to acquire dquot type 0 [ 639.599096][T17471] udevd[17471]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory [ 639.621619][T30761] veth0_vlan: entered promiscuous mode [ 639.635495][T30761] veth1_vlan: entered promiscuous mode [ 639.641888][T30922] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.9159: corrupted inode contents [ 639.672361][T30761] veth0_macvtap: entered promiscuous mode [ 639.680472][T30922] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #16: comm syz.6.9159: mark_inode_dirty error [ 639.703969][T30945] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9173'. [ 639.714483][T30761] veth1_macvtap: entered promiscuous mode [ 639.725881][T30922] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.9159: corrupted inode contents [ 639.731314][T30761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 639.755435][T30922] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.9159: mark_inode_dirty error [ 639.778238][T30922] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.9159: corrupted inode contents [ 639.789238][T30761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 639.798161][T30922] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 639.811848][T21468] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 639.822854][T30922] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.9159: corrupted inode contents [ 639.835309][ T409] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.837125][ T409] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.862645][T30951] netlink: 28 bytes leftover after parsing attributes in process `syz.5.9176'. [ 639.869036][T30922] EXT4-fs error (device loop6): ext4_truncate:4635: inode #16: comm syz.6.9159: mark_inode_dirty error [ 639.883745][T30922] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 639.905038][ T409] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.925284][T30922] EXT4-fs (loop6): 1 truncate cleaned up [ 639.939186][T30922] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 639.953447][T30957] netlink: 48 bytes leftover after parsing attributes in process `syz.5.9178'. [ 639.955647][T30955] netlink: 24 bytes leftover after parsing attributes in process `syz.8.9175'. [ 639.964987][T30922] ext4 filesystem being mounted at /55/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 639.974562][ T409] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.996268][T30957] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9178'. [ 640.005326][T30957] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9178'. [ 640.040136][T30957] loop5: detected capacity change from 0 to 512 [ 640.060907][T30957] EXT4-fs warning (device loop5): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 640.083246][T30964] loop0: detected capacity change from 0 to 512 [ 640.085876][T30957] EXT4-fs (loop5): mount failed [ 640.179706][T30964] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 640.197684][T30964] ext4 filesystem being mounted at /560/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 640.208381][T30960] netlink: 'syz.1.9128': attribute type 1 has an invalid length. [ 640.376279][T30985] FAULT_INJECTION: forcing a failure. [ 640.376279][T30985] name failslab, interval 1, probability 0, space 0, times 0 [ 640.389451][T30985] CPU: 0 UID: 0 PID: 30985 Comm: syz.5.9185 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 640.389493][T30985] Tainted: [W]=WARN [ 640.389502][T30985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 640.389517][T30985] Call Trace: [ 640.389523][T30985] [ 640.389531][T30985] __dump_stack+0x1d/0x30 [ 640.389556][T30985] dump_stack_lvl+0x95/0xd0 [ 640.389576][T30985] dump_stack+0x15/0x1b [ 640.389604][T30985] should_fail_ex+0x265/0x280 [ 640.389633][T30985] should_failslab+0x8c/0xb0 [ 640.389661][T30985] __kmalloc_cache_noprof+0x65/0x4c0 [ 640.389761][T30985] ? alloc_pipe_info+0xae/0x340 [ 640.389787][T30985] alloc_pipe_info+0xae/0x340 [ 640.389889][T30985] splice_direct_to_actor+0x592/0x680 [ 640.389914][T30985] ? __pfx_direct_splice_actor+0x10/0x10 [ 640.389937][T30985] ? selinux_file_permission+0x2ee/0x320 [ 640.389972][T30985] do_splice_direct+0xda/0x150 [ 640.390009][T30985] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 640.390095][T30985] do_sendfile+0x380/0x650 [ 640.390129][T30985] __x64_sys_sendfile64+0x105/0x150 [ 640.390159][T30985] x64_sys_call+0x2db1/0x3000 [ 640.390260][T30985] do_syscall_64+0xca/0x2b0 [ 640.390291][T30985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.390337][T30985] RIP: 0033:0x7fbd7703f749 [ 640.390353][T30985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 640.390370][T30985] RSP: 002b:00007fbd75aa7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 640.390392][T30985] RAX: ffffffffffffffda RBX: 00007fbd77295fa0 RCX: 00007fbd7703f749 [ 640.390408][T30985] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 640.390423][T30985] RBP: 00007fbd75aa7090 R08: 0000000000000000 R09: 0000000000000000 [ 640.390511][T30985] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 640.390523][T30985] R13: 00007fbd77296038 R14: 00007fbd77295fa0 R15: 00007ffcb2eba2d8 [ 640.390540][T30985] [ 640.664767][T29862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.727022][T21468] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 640.886387][T31009] netlink: 'syz.6.9195': attribute type 2 has an invalid length. [ 641.000086][T31009] loop6: detected capacity change from 0 to 2048 [ 641.066608][T21491] loop6: p1 < > p4 [ 641.073638][T21491] loop6: p4 size 8388608 extends beyond EOD, truncated [ 641.115005][T31009] loop6: p1 < > p4 [ 641.120718][T31009] loop6: p4 size 8388608 extends beyond EOD, truncated [ 641.217562][T21491] udevd[21491]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 641.286746][T31026] loop0: detected capacity change from 0 to 512 [ 641.294800][T31028] loop6: detected capacity change from 0 to 512 [ 641.302227][T31028] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 641.343723][T31026] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 641.359604][T31028] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 641.364207][T31026] ext4 filesystem being mounted at /565/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 641.439277][T31028] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #2: block 18: comm syz.6.9202: lblock 23 mapped to illegal pblock 18 (length 1) [ 641.500624][T31028] EXT4-fs error (device loop6): ext4_map_blocks:783: inode #2: block 18: comm syz.6.9202: lblock 23 mapped to illegal pblock 18 (length 1) [ 641.600957][T29862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.648960][T31038] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.714655][T31040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.723526][T31040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.741865][T31040] team0 (unregistering): Port device team_slave_0 removed [ 641.770126][T21468] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.771879][T31040] team0 (unregistering): Port device team_slave_1 removed [ 641.789987][T31044] loop6: detected capacity change from 0 to 512 [ 641.810069][T31044] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 641.820265][T31044] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.9204: iget: bad i_size value: 38620345925642 [ 641.833552][T31044] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.9204: couldn't read orphan inode 15 (err -117) [ 641.834256][T31038] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 641.860112][T31047] netlink: 'syz.5.9206': attribute type 1 has an invalid length. [ 641.905203][T31044] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 641.928669][T31044] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.9204: bg 0: block 5: invalid block bitmap [ 641.955789][T31044] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 641.975359][T31044] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 642.002514][T31038] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.057815][T31038] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.143934][ T1572] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.174699][ T1572] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.183884][ T1572] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.193598][ T1572] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 642.477483][T29862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 642.727523][T31073] __quota_error: 579 callbacks suppressed [ 642.727542][T31073] Quota error (device loop8): v2_read_file_info: Free block number 1 out of range (1, 6). [ 642.744078][T31073] EXT4-fs warning (device loop8): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 642.753832][T31076] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 642.760652][T31073] EXT4-fs (loop8): mount failed [ 642.774713][T31076] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.9217: iget: bad i_size value: 38620345925642 [ 642.791886][T31076] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.9217: couldn't read orphan inode 15 (err -117) [ 642.807421][T31076] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 642.823681][T31076] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.9217: bg 0: block 5: invalid block bitmap [ 642.836599][T31076] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 643.266902][ T29] audit: type=1326 audit(2000000176.420:140620): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31104 comm="syz.0.9229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed402f749 code=0x7ffc0000 [ 643.291968][ T29] audit: type=1326 audit(2000000176.450:140621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31104 comm="syz.0.9229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ed402f749 code=0x7ffc0000 [ 643.316241][ T29] audit: type=1326 audit(2000000176.450:140622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31104 comm="syz.0.9229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed402f749 code=0x7ffc0000 [ 643.340951][ T29] audit: type=1326 audit(2000000176.450:140623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31104 comm="syz.0.9229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed402f749 code=0x7ffc0000 [ 643.372220][ T29] audit: type=1326 audit(2000000176.450:140624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31104 comm="syz.0.9229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ed402f749 code=0x7ffc0000 [ 643.396287][ T29] audit: type=1326 audit(2000000176.450:140625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31104 comm="syz.0.9229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed402f749 code=0x7ffc0000 [ 643.420256][ T29] audit: type=1326 audit(2000000176.450:140626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31104 comm="syz.0.9229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ed402f749 code=0x7ffc0000 [ 643.433940][T31109] __nla_validate_parse: 8 callbacks suppressed [ 643.433959][T31109] netlink: 48 bytes leftover after parsing attributes in process `syz.0.9230'. [ 643.444297][ T29] audit: type=1326 audit(2000000176.450:140627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31104 comm="syz.0.9229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ed402f749 code=0x7ffc0000 [ 643.444330][ T29] audit: type=1326 audit(2000000176.450:140628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31104 comm="syz.0.9229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6ed402f749 code=0x7ffc0000 [ 643.508157][T31109] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9230'. [ 643.517555][T31109] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9230'. [ 643.564723][T30437] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 643.590542][T31109] EXT4-fs warning (device loop0): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 643.607584][T31109] EXT4-fs (loop0): mount failed [ 643.894465][T31138] FAULT_INJECTION: forcing a failure. [ 643.894465][T31138] name failslab, interval 1, probability 0, space 0, times 0 [ 643.907495][T31138] CPU: 1 UID: 0 PID: 31138 Comm: syz.8.9241 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 643.907541][T31138] Tainted: [W]=WARN [ 643.907546][T31138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 643.907554][T31138] Call Trace: [ 643.907559][T31138] [ 643.907565][T31138] __dump_stack+0x1d/0x30 [ 643.907590][T31138] dump_stack_lvl+0x95/0xd0 [ 643.907607][T31138] dump_stack+0x15/0x1b [ 643.907648][T31138] should_fail_ex+0x265/0x280 [ 643.907664][T31138] should_failslab+0x8c/0xb0 [ 643.907680][T31138] kmem_cache_alloc_noprof+0x69/0x4b0 [ 643.907695][T31138] ? audit_log_start+0x342/0x720 [ 643.907716][T31138] audit_log_start+0x342/0x720 [ 643.907779][T31138] ? kstrtouint+0x76/0xc0 [ 643.907793][T31138] audit_seccomp+0x48/0x100 [ 643.907883][T31138] ? __seccomp_filter+0x832/0x1260 [ 643.907901][T31138] __seccomp_filter+0x843/0x1260 [ 643.907924][T31138] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 643.907972][T31138] ? vfs_write+0x7e8/0x960 [ 643.907984][T31138] ? __rcu_read_unlock+0x4f/0x70 [ 643.907999][T31138] ? __fget_files+0x184/0x1c0 [ 643.908020][T31138] __secure_computing+0x82/0x150 [ 643.908037][T31138] syscall_trace_enter+0xcf/0x1e0 [ 643.908094][T31138] do_syscall_64+0xa4/0x2b0 [ 643.908116][T31138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.908132][T31138] RIP: 0033:0x7f63bbe5f749 [ 643.908143][T31138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.908156][T31138] RSP: 002b:00007f63ba8c7038 EFLAGS: 00000246 ORIG_RAX: 000000000000001b [ 643.908202][T31138] RAX: ffffffffffffffda RBX: 00007f63bc0b5fa0 RCX: 00007f63bbe5f749 [ 643.908217][T31138] RDX: 0000200000000440 RSI: 0000000000001000 RDI: 0000200000fff000 [ 643.908225][T31138] RBP: 00007f63ba8c7090 R08: 0000000000000000 R09: 0000000000000000 [ 643.908234][T31138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.908243][T31138] R13: 00007f63bc0b6038 R14: 00007f63bc0b5fa0 R15: 00007fff908581b8 [ 643.908256][T31138] [ 643.912054][T31139] set_capacity_and_notify: 3 callbacks suppressed [ 643.912070][T31139] loop0: detected capacity change from 0 to 512 [ 643.947177][T31141] netlink: 28 bytes leftover after parsing attributes in process `syz.8.9242'. [ 643.951495][T31139] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 644.154120][T31139] EXT4-fs error (device loop0): ext4_orphan_get:1391: inode #15: comm syz.0.9240: iget: bad i_size value: 38620345925642 [ 644.168785][T31139] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.9240: couldn't read orphan inode 15 (err -117) [ 644.184346][T31139] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.206860][T31139] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.9240: bg 0: block 5: invalid block bitmap [ 644.220461][T31139] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 644.231229][T31139] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 644.263307][T31146] loop8: detected capacity change from 0 to 512 [ 644.278128][T31146] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 644.293025][T31146] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.9243: iget: bad i_size value: 38620345925642 [ 644.307422][T31146] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.9243: couldn't read orphan inode 15 (err -117) [ 644.320389][T31146] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.337761][T31146] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.9243: bg 0: block 5: invalid block bitmap [ 644.351101][T31146] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 644.495410][T31156] loop1: detected capacity change from 0 to 128 [ 644.502443][T31156] msdos: Unknown parameter 'tj' [ 644.597727][T31162] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.631446][T31162] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.657911][T21468] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.692900][T31169] loop5: detected capacity change from 0 to 128 [ 644.701553][T31169] msdos: Unknown parameter 'tj' [ 644.704380][T31162] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.720628][T31170] loop6: detected capacity change from 0 to 512 [ 644.737900][ T1051] hid-generic 0000:0000:0000.003A: unknown main item tag 0x0 [ 644.751564][T31170] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 644.761050][ T1051] hid-generic 0000:0000:0000.003A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 644.772715][T31170] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #15: comm syz.6.9250: iget: bad i_size value: 38620345925642 [ 644.788806][T31170] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.9250: couldn't read orphan inode 15 (err -117) [ 644.816051][T31162] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 644.818699][T31170] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.844362][T31170] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.9250: bg 0: block 5: invalid block bitmap [ 644.858252][T31170] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 644.869934][T31170] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 645.050253][T29279] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.073682][T31180] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 645.110920][T31175] loop0: detected capacity change from 0 to 512 [ 645.150284][T31175] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #3: comm syz.0.9252: corrupted inode contents [ 645.164917][T31175] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #3: comm syz.0.9252: mark_inode_dirty error [ 645.177890][T31175] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #3: comm syz.0.9252: corrupted inode contents [ 645.190316][T31175] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #3: comm syz.0.9252: mark_inode_dirty error [ 645.202563][T31175] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.9252: Failed to acquire dquot type 0 [ 645.214886][T31175] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.9252: corrupted inode contents [ 645.227573][T31175] EXT4-fs error (device loop0): ext4_dirty_inode:6502: inode #16: comm syz.0.9252: mark_inode_dirty error [ 645.239614][T31175] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.9252: corrupted inode contents [ 645.251985][T31175] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #16: comm syz.0.9252: mark_inode_dirty error [ 645.265945][T31175] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.9252: corrupted inode contents [ 645.278341][T31175] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem [ 645.294755][T31175] EXT4-fs error (device loop0): ext4_do_update_inode:5617: inode #16: comm syz.0.9252: corrupted inode contents [ 645.314996][T31175] EXT4-fs error (device loop0): ext4_truncate:4635: inode #16: comm syz.0.9252: mark_inode_dirty error [ 645.333906][T31175] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem [ 645.344047][T31175] EXT4-fs (loop0): 1 truncate cleaned up [ 645.350756][T31175] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 645.363496][T31175] ext4 filesystem being mounted at /577/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 645.384844][T31193] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9260'. [ 645.448240][T21468] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 645.520764][T31200] netlink: 'syz.5.9263': attribute type 2 has an invalid length. [ 645.529274][T31200] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9263'. [ 645.554848][T31200] loop5: detected capacity change from 0 to 2048 [ 645.606287][T21491] loop5: p1 < > p4 [ 645.614883][T21491] loop5: p4 size 8388608 extends beyond EOD, truncated [ 645.627403][T31200] loop5: p1 < > p4 [ 645.632261][T31200] loop5: p4 size 8388608 extends beyond EOD, truncated [ 645.705323][T31213] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9268'. [ 645.727146][T31213] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9268'. [ 645.782252][ T3479] hid-generic 0000:0000:0000.003B: unknown main item tag 0x0 [ 645.790465][ T3479] hid-generic 0000:0000:0000.003B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 645.988671][T31224] netlink: 'syz.5.9272': attribute type 2 has an invalid length. [ 645.996773][T31224] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9272'. [ 646.024014][T31224] loop5: detected capacity change from 0 to 2048 [ 646.035285][T31225] loop1: detected capacity change from 0 to 512 [ 646.075114][T31225] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #3: comm syz.1.9269: corrupted inode contents [ 646.088086][T21491] loop5: p1 < > p4 [ 646.091502][T31225] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #3: comm syz.1.9269: mark_inode_dirty error [ 646.093576][T21491] loop5: p4 size 8388608 extends beyond EOD, truncated [ 646.106423][T31225] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #3: comm syz.1.9269: corrupted inode contents [ 646.123265][T31225] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #3: comm syz.1.9269: mark_inode_dirty error [ 646.137635][T31225] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.9269: Failed to acquire dquot type 0 [ 646.138430][T31224] loop5: p1 < > p4 [ 646.153729][T31225] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.9269: corrupted inode contents [ 646.154353][T31224] loop5: p4 size 8388608 extends beyond EOD, truncated [ 646.166832][T31225] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #16: comm syz.1.9269: mark_inode_dirty error [ 646.185508][T31232] netlink: 'syz.8.9273': attribute type 1 has an invalid length. [ 646.193953][T31225] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.9269: corrupted inode contents [ 646.221704][T31225] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #16: comm syz.1.9269: mark_inode_dirty error [ 646.242527][T31225] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.9269: corrupted inode contents [ 646.255765][T31225] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 646.264891][T31225] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #16: comm syz.1.9269: corrupted inode contents [ 646.277419][T31225] EXT4-fs error (device loop1): ext4_truncate:4635: inode #16: comm syz.1.9269: mark_inode_dirty error [ 646.296654][T31225] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 646.327163][T31225] EXT4-fs (loop1): 1 truncate cleaned up [ 646.336381][T31225] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 646.361325][T31225] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 646.492211][T30761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.793821][T31266] netlink: 'syz.1.9285': attribute type 2 has an invalid length. [ 646.803131][ T418] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.833039][ T418] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.847501][ T418] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.859459][ T418] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.869577][T31266] loop1: detected capacity change from 0 to 2048 [ 646.889792][T29862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 646.930041][T31269] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 646.946719][T31266] loop1: p1 < > p4 [ 646.951432][T31266] loop1: p4 size 8388608 extends beyond EOD, truncated [ 646.971435][T31269] ext4 filesystem being mounted at /114/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 647.423246][T29279] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.477839][T31299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.487320][T31299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.571350][T31301] FAULT_INJECTION: forcing a failure. [ 647.571350][T31301] name failslab, interval 1, probability 0, space 0, times 0 [ 647.584688][T31301] CPU: 1 UID: 0 PID: 31301 Comm: syz.1.9297 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 647.584726][T31301] Tainted: [W]=WARN [ 647.584735][T31301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 647.584749][T31301] Call Trace: [ 647.584758][T31301] [ 647.584767][T31301] __dump_stack+0x1d/0x30 [ 647.584791][T31301] dump_stack_lvl+0x95/0xd0 [ 647.584813][T31301] dump_stack+0x15/0x1b [ 647.584836][T31301] should_fail_ex+0x265/0x280 [ 647.584863][T31301] should_failslab+0x8c/0xb0 [ 647.584889][T31301] kmem_cache_alloc_noprof+0x69/0x4b0 [ 647.584914][T31301] ? __anon_vma_prepare+0x70/0x2f0 [ 647.584943][T31301] ? __rcu_read_lock+0x37/0x50 [ 647.584962][T31301] __anon_vma_prepare+0x70/0x2f0 [ 647.584990][T31301] handle_mm_fault+0x1ebf/0x2c60 [ 647.585024][T31301] ? _raw_spin_lock+0x52/0xa0 [ 647.585045][T31301] ? __pte_offset_map_lock+0x1d9/0x240 [ 647.585066][T31301] __get_user_pages+0x1024/0x1ed0 [ 647.585091][T31301] get_user_pages_remote+0x1d5/0x6c0 [ 647.585111][T31301] ? __rcu_read_unlock+0x4f/0x70 [ 647.585126][T31301] __update_ref_ctr+0x8e/0x3a0 [ 647.585147][T31301] uprobe_mmap+0x2de/0xd30 [ 647.585166][T31301] ? vms_complete_munmap_vmas+0x3e6/0x440 [ 647.585187][T31301] __mmap_complete+0x1ed/0x230 [ 647.585201][T31301] mmap_region+0xb86/0x1410 [ 647.585233][T31301] do_mmap+0x9b3/0xbe0 [ 647.585252][T31301] vm_mmap_pgoff+0x17a/0x2e0 [ 647.585272][T31301] ksys_mmap_pgoff+0x268/0x310 [ 647.585289][T31301] x64_sys_call+0x16bb/0x3000 [ 647.585305][T31301] do_syscall_64+0xca/0x2b0 [ 647.585326][T31301] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.585342][T31301] RIP: 0033:0x7ff53341f749 [ 647.585354][T31301] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 647.585367][T31301] RSP: 002b:00007ff531e7f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 647.585382][T31301] RAX: ffffffffffffffda RBX: 00007ff533675fa0 RCX: 00007ff53341f749 [ 647.585391][T31301] RDX: 0000000000000003 RSI: 0000000000004000 RDI: 0000200000ffc000 [ 647.585400][T31301] RBP: 00007ff531e7f090 R08: 000000000000000a R09: 0000000000000000 [ 647.585408][T31301] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 647.585417][T31301] R13: 00007ff533676038 R14: 00007ff533675fa0 R15: 00007ffd3cfb66a8 [ 647.585430][T31301] [ 647.585437][T31301] ref_ctr increment failed for inode: 0x92 offset: 0x4 ref_ctr_offset: 0x2 of mm: 0xffff88810446f2c0 [ 647.738118][ T29] kauditd_printk_skb: 1290 callbacks suppressed [ 647.738200][ T29] audit: type=1326 audit(2000000180.890:141912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31261 comm="syz.0.9283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6ed40265e7 code=0x7ffc0000 [ 647.864448][ T29] audit: type=1326 audit(2000000180.890:141913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31261 comm="syz.0.9283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6ed3fcb829 code=0x7ffc0000 [ 647.888877][ T29] audit: type=1326 audit(2000000180.890:141914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31261 comm="syz.0.9283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f6ed402f749 code=0x7ffc0000 [ 647.912758][ T29] audit: type=1326 audit(2000000180.910:141915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31261 comm="syz.0.9283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6ed40265e7 code=0x7ffc0000 [ 647.937429][ T29] audit: type=1326 audit(2000000180.910:141916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31261 comm="syz.0.9283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6ed3fcb829 code=0x7ffc0000 [ 647.961362][ T29] audit: type=1326 audit(2000000180.910:141917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31261 comm="syz.0.9283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f6ed402f749 code=0x7ffc0000 [ 647.985333][ T29] audit: type=1326 audit(2000000180.910:141918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31261 comm="syz.0.9283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6ed40265e7 code=0x7ffc0000 [ 648.009882][ T29] audit: type=1326 audit(2000000180.910:141919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31261 comm="syz.0.9283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f6ed3fcb829 code=0x7ffc0000 [ 648.035194][ T29] audit: type=1326 audit(2000000180.910:141920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31261 comm="syz.0.9283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7f6ed402f749 code=0x7ffc0000 [ 648.059114][ T29] audit: type=1326 audit(2000000180.930:141921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31261 comm="syz.0.9283" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f6ed40265e7 code=0x7ffc0000 [ 648.107179][T31306] netlink: 'syz.6.9299': attribute type 2 has an invalid length. [ 648.157007][T31315] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 648.180653][T31317] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 648.211117][T31317] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 648.235454][T31317] EXT4-fs (loop0): orphan cleanup on readonly fs [ 648.250346][T31317] EXT4-fs error (device loop0): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 648.265600][T17471] loop6: p1 < > p4 [ 648.270064][T31317] EXT4-fs (loop0): Remounting filesystem read-only [ 648.277629][T17471] loop6: p4 size 8388608 extends beyond EOD, truncated [ 648.286951][T31317] EXT4-fs (loop0): 1 truncate cleaned up [ 648.292928][ T1572] EXT4-fs (loop0): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 648.303654][ T1572] EXT4-fs (loop0): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 648.310696][T31325] netlink: 'syz.8.9307': attribute type 2 has an invalid length. [ 648.353471][T31306] loop6: p1 < > p4 [ 648.359449][ T1572] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 648.370659][T31306] loop6: p4 size 8388608 extends beyond EOD, truncated [ 648.379156][T31317] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 648.416192][T21491] loop8: p1 < > p4 [ 648.420863][T21491] loop8: p4 size 8388608 extends beyond EOD, truncated [ 648.448767][T21468] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 648.460572][T31325] loop8: p1 < > p4 [ 648.465316][T31325] loop8: p4 size 8388608 extends beyond EOD, truncated [ 648.489185][ T3006] loop8: p1 < > p4 [ 648.501793][ T3006] loop8: p4 size 8388608 extends beyond EOD, truncated [ 648.676257][T21491] udevd[21491]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 648.700441][ T2969] hid-generic 0000:0000:0000.003C: unknown main item tag 0x0 [ 648.728283][ T2969] hid-generic 0000:0000:0000.003C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 648.741062][T21491] udevd[21491]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 648.806625][T21491] udevd[21491]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory [ 648.863508][T31349] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 649.004365][T31356] __nla_validate_parse: 11 callbacks suppressed [ 649.004382][T31356] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 649.026778][T31357] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9317'. [ 649.176036][T31367] set_capacity_and_notify: 4 callbacks suppressed [ 649.176056][T31367] loop6: detected capacity change from 0 to 512 [ 649.237999][T31371] loop5: detected capacity change from 0 to 512 [ 649.268709][T31367] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #3: comm syz.6.9313: corrupted inode contents [ 649.285421][T31371] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 649.298878][T31367] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #3: comm syz.6.9313: mark_inode_dirty error [ 649.311527][T31367] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #3: comm syz.6.9313: corrupted inode contents [ 649.333098][T31367] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #3: comm syz.6.9313: mark_inode_dirty error [ 649.347765][T31371] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 649.367771][T31367] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.9313: Failed to acquire dquot type 0 [ 649.380661][T31367] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.9313: corrupted inode contents [ 649.396745][T31367] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #16: comm syz.6.9313: mark_inode_dirty error [ 649.412647][T31367] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.9313: corrupted inode contents [ 649.436427][T31367] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #16: comm syz.6.9313: mark_inode_dirty error [ 649.448407][T31371] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #2: block 18: comm syz.5.9324: lblock 23 mapped to illegal pblock 18 (length 1) [ 649.463513][T31384] netlink: 'syz.8.9325': attribute type 1 has an invalid length. [ 649.471483][T31384] netlink: 224 bytes leftover after parsing attributes in process `syz.8.9325'. [ 649.492096][T31367] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.9313: corrupted inode contents [ 649.494124][T31386] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 649.506229][T31367] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 649.523653][T31367] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #16: comm syz.6.9313: corrupted inode contents [ 649.537557][T31367] EXT4-fs error (device loop6): ext4_truncate:4635: inode #16: comm syz.6.9313: mark_inode_dirty error [ 649.549744][T31367] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 649.559252][T31367] EXT4-fs (loop6): 1 truncate cleaned up [ 649.570229][T31367] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 649.584137][T31367] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 649.595155][T31389] FAULT_INJECTION: forcing a failure. [ 649.595155][T31389] name failslab, interval 1, probability 0, space 0, times 0 [ 649.608303][T31389] CPU: 0 UID: 0 PID: 31389 Comm: syz.0.9328 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 649.608372][T31389] Tainted: [W]=WARN [ 649.608380][T31389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 649.608391][T31389] Call Trace: [ 649.608459][T31389] [ 649.608467][T31389] __dump_stack+0x1d/0x30 [ 649.608495][T31389] dump_stack_lvl+0x95/0xd0 [ 649.608657][T31389] dump_stack+0x15/0x1b [ 649.608710][T31389] should_fail_ex+0x265/0x280 [ 649.608739][T31389] should_failslab+0x8c/0xb0 [ 649.608764][T31389] __kmalloc_cache_noprof+0x65/0x4c0 [ 649.608791][T31389] ? kobject_uevent_env+0x1c0/0x570 [ 649.608835][T31389] kobject_uevent_env+0x1c0/0x570 [ 649.608851][T31389] ? set_capacity_and_notify+0xce/0x230 [ 649.608868][T31389] kobject_uevent+0x1d/0x30 [ 649.608941][T31389] lo_ioctl+0xbcd/0x12b0 [ 649.608955][T31389] ? avc_has_extended_perms+0x609/0x800 [ 649.608983][T31389] ? blkdev_common_ioctl+0xbf0/0x1f90 [ 649.609030][T31389] ? do_vfs_ioctl+0x866/0xe10 [ 649.609050][T31389] ? selinux_file_ioctl+0x308/0x3a0 [ 649.609069][T31389] ? __pfx_lo_ioctl+0x10/0x10 [ 649.609135][T31389] ? __pfx_blkdev_ioctl+0x10/0x10 [ 649.609148][T31389] blkdev_ioctl+0x37d/0x460 [ 649.609221][T31389] ? __pfx_blkdev_ioctl+0x10/0x10 [ 649.609234][T31389] __se_sys_ioctl+0xce/0x140 [ 649.609287][T31389] __x64_sys_ioctl+0x43/0x50 [ 649.609306][T31389] x64_sys_call+0x14b0/0x3000 [ 649.609322][T31389] do_syscall_64+0xca/0x2b0 [ 649.609344][T31389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.609415][T31389] RIP: 0033:0x7f6ed402f749 [ 649.609427][T31389] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 649.609440][T31389] RSP: 002b:00007f6ed2a8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 649.609532][T31389] RAX: ffffffffffffffda RBX: 00007f6ed4285fa0 RCX: 00007f6ed402f749 [ 649.609541][T31389] RDX: 0000000000000000 RSI: 0000000000004c07 RDI: 0000000000000003 [ 649.609550][T31389] RBP: 00007f6ed2a8f090 R08: 0000000000000000 R09: 0000000000000000 [ 649.609610][T31389] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.609619][T31389] R13: 00007f6ed4286038 R14: 00007f6ed4285fa0 R15: 00007ffdd88a4538 [ 649.609632][T31389] [ 649.611941][T30437] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 649.879350][T31391] netlink: 12 bytes leftover after parsing attributes in process `+}[@'. [ 650.044624][T29862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.158730][T31415] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 650.204254][T31419] loop0: detected capacity change from 0 to 1024 [ 650.226154][T31419] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 650.250150][T31423] netlink: 64 bytes leftover after parsing attributes in process `syz.8.9341'. [ 650.319722][T31425] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=31425 comm=syz.8.9341 [ 650.335890][T21468] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 650.437741][T31432] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9343'. [ 650.536159][T31443] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.568749][T31445] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 650.628572][T31443] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.646703][T31450] loop8: detected capacity change from 0 to 512 [ 650.664321][T31450] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 650.677328][ T421] smc: removing ib device syz1 [ 650.703870][T31450] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.9348: iget: bad i_size value: 38620345925642 [ 650.722313][T31450] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.9348: couldn't read orphan inode 15 (err -117) [ 650.738812][T31450] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 650.753142][T31443] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.778932][T31450] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.9348: bg 0: block 5: invalid block bitmap [ 650.807411][T31450] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 650.829058][T31461] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.844720][T31450] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 650.914507][T31461] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.932551][T31443] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.961121][T31468] loop1: detected capacity change from 0 to 512 [ 650.969833][T31468] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 650.986093][T31461] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.007046][T31468] EXT4-fs error (device loop1): ext4_orphan_get:1391: inode #15: comm syz.1.9352: iget: bad i_size value: 38620345925642 [ 651.028070][T31468] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.9352: couldn't read orphan inode 15 (err -117) [ 651.041453][T31468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 651.105835][T31468] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.9352: bg 0: block 5: invalid block bitmap [ 651.118764][T31468] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 651.129493][T31468] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 651.130728][ T418] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.171317][T31461] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.183870][ T418] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.206965][ T418] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.221315][ T418] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.261992][ T1572] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.273666][ T1572] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.283440][T31485] netlink: 24 bytes leftover after parsing attributes in process `syz.5.9360'. [ 651.295740][ T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.325980][ T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 651.383550][T29279] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.429169][T31451] chnl_net:caif_netlink_parms(): no params data found [ 651.536286][T31451] bridge0: port 1(bridge_slave_0) entered blocking state [ 651.543501][T31451] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.552603][T31451] bridge_slave_0: entered allmulticast mode [ 651.566914][T31451] bridge_slave_0: entered promiscuous mode [ 651.576390][T31451] bridge0: port 2(bridge_slave_1) entered blocking state [ 651.583502][T31451] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.591060][T31451] bridge_slave_1: entered allmulticast mode [ 651.597761][T31451] bridge_slave_1: entered promiscuous mode [ 651.662203][T31451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 651.674154][T31451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 651.685937][T30761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 651.719180][T31451] team0: Port device team_slave_0 added [ 651.735221][T31451] team0: Port device team_slave_1 added [ 651.778113][T31451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 651.785245][T31451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.811397][T31451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 651.819006][T31509] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9365'. [ 651.823041][T31451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 651.838247][T31451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 651.865108][T31451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 651.940607][T31451] hsr_slave_0: entered promiscuous mode [ 651.947230][T31451] hsr_slave_1: entered promiscuous mode [ 651.953552][T31451] debugfs: 'hsr0' already exists in 'hsr' [ 651.959568][T31451] Cannot create hsr debugfs directory [ 652.011993][T22402] team0: left allmulticast mode [ 652.017085][T22402] team0: left promiscuous mode [ 652.022428][T22402] bridge0: port 1(team0) entered disabled state [ 652.117693][T22402] bond0 (unregistering): Released all slaves [ 652.126292][T22402] bond1 (unregistering): Released all slaves [ 652.302158][T22402] hsr_slave_0: left promiscuous mode [ 652.311574][T22402] hsr_slave_1: left promiscuous mode [ 652.373465][T31540] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9374'. [ 652.488999][T31555] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9377'. [ 652.500569][T31555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.519968][T31555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.763069][ T29] kauditd_printk_skb: 807 callbacks suppressed [ 652.763088][ T29] audit: type=1326 audit(2000000185.910:142719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31569 comm="syz.5.9382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7703f749 code=0x7ffc0000 [ 652.820424][ T29] audit: type=1326 audit(2000000185.950:142720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31569 comm="syz.5.9382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7703f749 code=0x7ffc0000 [ 652.844537][ T29] audit: type=1326 audit(2000000185.960:142721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31569 comm="syz.5.9382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd7703f749 code=0x7ffc0000 [ 652.869112][ T29] audit: type=1326 audit(2000000185.960:142722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31569 comm="syz.5.9382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7703f749 code=0x7ffc0000 [ 652.893767][ T29] audit: type=1326 audit(2000000185.960:142723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31569 comm="syz.5.9382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7703f749 code=0x7ffc0000 [ 652.918729][ T29] audit: type=1326 audit(2000000185.960:142724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31569 comm="syz.5.9382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd7703f749 code=0x7ffc0000 [ 652.942844][ T29] audit: type=1326 audit(2000000185.960:142725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31569 comm="syz.5.9382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7703f749 code=0x7ffc0000 [ 652.966878][ T29] audit: type=1326 audit(2000000185.960:142726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31569 comm="syz.5.9382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7703f749 code=0x7ffc0000 [ 652.991469][ T29] audit: type=1326 audit(2000000185.960:142727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31569 comm="syz.5.9382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7fbd7703f749 code=0x7ffc0000 [ 653.015655][ T29] audit: type=1326 audit(2000000185.960:142728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31569 comm="syz.5.9382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd7703f749 code=0x7ffc0000 [ 653.228363][T31625] loop6: detected capacity change from 0 to 512 [ 653.236672][T31625] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 653.258769][T31625] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 653.272251][T31625] EXT4-fs (loop6): orphan cleanup on readonly fs [ 653.281218][T31625] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 653.299554][T31625] EXT4-fs (loop6): Remounting filesystem read-only [ 653.307110][T31625] EXT4-fs (loop6): 1 truncate cleaned up [ 653.313224][ T2134] EXT4-fs (loop6): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 653.323853][ T2134] EXT4-fs (loop6): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 653.337411][ T2134] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 653.370577][T31625] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 653.405452][T31451] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 653.413179][T29862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 653.425456][T31451] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 653.442474][T31451] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 653.460527][T31451] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 653.489664][T31639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.499832][T31639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.553502][T31451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 653.589358][T31451] 8021q: adding VLAN 0 to HW filter on device team0 [ 653.625887][ T1640] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.633074][ T1640] bridge0: port 1(bridge_slave_0) entered forwarding state [ 653.646676][ T409] bridge0: port 2(bridge_slave_1) entered blocking state [ 653.654247][ T409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 653.711977][T31652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 653.727828][T31652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 653.780699][T31451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 653.855289][T31451] veth0_vlan: entered promiscuous mode [ 653.863647][T31451] veth1_vlan: entered promiscuous mode [ 653.891866][T31451] veth0_macvtap: entered promiscuous mode [ 653.900535][T31451] veth1_macvtap: entered promiscuous mode [ 653.913018][T31451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 653.931352][T31451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 653.953973][T31665] loop1: detected capacity change from 0 to 512 [ 653.962851][ T7700] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.981550][T11882] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.993861][T11882] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.003285][T11882] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.017936][T31665] EXT4-fs warning (device loop1): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 654.046718][T31665] EXT4-fs (loop1): mount failed [ 654.281222][T31686] vhci_hcd vhci_hcd.3: default hub control req: 8013 v0000 i0000 l31125 [ 654.339053][T31693] __nla_validate_parse: 8 callbacks suppressed [ 654.339069][T31693] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9404'. [ 654.360312][T31692] loop8: detected capacity change from 0 to 512 [ 654.361142][T31697] netlink: 48 bytes leftover after parsing attributes in process `syz.6.9409'. [ 654.386154][T31692] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 654.407998][T31697] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9409'. [ 654.417196][T31697] netlink: 20 bytes leftover after parsing attributes in process `syz.6.9409'. [ 654.429445][T31692] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 654.478598][T31692] EXT4-fs error (device loop8): ext4_map_blocks:783: inode #2: block 18: comm syz.8.9407: lblock 23 mapped to illegal pblock 18 (length 1) [ 654.493237][T31697] loop6: detected capacity change from 0 to 512 [ 654.521195][T29279] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.543062][T31697] EXT4-fs warning (device loop6): ext4_enable_quotas:7221: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 654.560388][T31697] EXT4-fs (loop6): mount failed [ 654.630668][T31713] loop8: detected capacity change from 0 to 512 [ 654.676704][T31713] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 654.711749][T31713] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 654.720840][T31713] EXT4-fs (loop8): orphan cleanup on readonly fs [ 654.730448][T31713] EXT4-fs error (device loop8): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 654.747320][T31713] EXT4-fs (loop8): Remounting filesystem read-only [ 654.754129][T31713] EXT4-fs (loop8): 1 truncate cleaned up [ 654.760204][ T1640] EXT4-fs (loop8): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 654.771011][ T1640] EXT4-fs (loop8): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 654.775109][T31722] loop5: detected capacity change from 0 to 512 [ 654.785763][ T1640] EXT4-fs (loop8): Quota write (off=8, len=24) cancelled because transaction is not started [ 654.801238][T31719] netlink: 16 bytes leftover after parsing attributes in process `syz.6.9416'. [ 654.811666][T31713] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 654.827596][T31722] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 654.838179][T31719] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 654.850372][T31719] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 654.872815][T31719] team0 (unregistering): Port device team_slave_0 removed [ 654.885777][T31722] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 654.886225][T31719] team0 (unregistering): Port device team_slave_1 removed [ 654.919550][T29279] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 654.953150][T31722] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #2: block 18: comm syz.5.9417: lblock 23 mapped to illegal pblock 18 (length 1) [ 654.972666][T31722] EXT4-fs error (device loop5): ext4_map_blocks:783: inode #2: block 18: comm syz.5.9417: lblock 23 mapped to illegal pblock 18 (length 1) [ 654.990352][T31732] loop1: detected capacity change from 0 to 512 [ 655.018582][T31732] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 655.059754][T31732] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 655.092456][T30437] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.096120][T31732] EXT4-fs error (device loop1): ext4_map_blocks:783: inode #2: block 18: comm syz.1.9421: lblock 23 mapped to illegal pblock 18 (length 1) [ 655.116967][T31740] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9422'. [ 655.172042][T30761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 655.256106][T31753] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.308581][T31753] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.357794][T31753] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.379801][T31765] loop8: detected capacity change from 0 to 512 [ 655.396507][T31765] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 655.408181][T31767] loop0: detected capacity change from 0 to 512 [ 655.414994][T31765] EXT4-fs error (device loop8): ext4_orphan_get:1391: inode #15: comm syz.8.9429: iget: bad i_size value: 38620345925642 [ 655.429484][T31753] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.447526][T31765] EXT4-fs error (device loop8): ext4_orphan_get:1396: comm syz.8.9429: couldn't read orphan inode 15 (err -117) [ 655.470919][T31765] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 655.476635][T31767] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 655.485834][T31765] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm syz.8.9429: bg 0: block 5: invalid block bitmap [ 655.514934][T31765] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 655.535991][T31767] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 655.548581][T31765] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 655.563088][T31772] loop6: detected capacity change from 0 to 512 [ 655.583088][ T409] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.600623][T31767] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #2: block 18: comm syz.0.9434: lblock 23 mapped to illegal pblock 18 (length 1) [ 655.608080][ T409] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.625412][T31772] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 655.640364][T31767] EXT4-fs error (device loop0): ext4_map_blocks:783: inode #2: block 18: comm syz.0.9434: lblock 23 mapped to illegal pblock 18 (length 1) [ 655.645180][T31774] loop1: detected capacity change from 0 to 512 [ 655.659078][ T409] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.671080][T31774] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 655.689933][ T409] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 655.690899][T31772] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 655.711342][T31772] EXT4-fs (loop6): orphan cleanup on readonly fs [ 655.720074][T31772] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 655.720730][T31774] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 655.736172][T31772] EXT4-fs (loop6): Remounting filesystem read-only [ 655.754886][T31772] EXT4-fs (loop6): 1 truncate cleaned up [ 655.761718][ T421] EXT4-fs (loop6): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 655.761842][ T2995] ================================================================== [ 655.772309][ T421] EXT4-fs (loop6): Quota write (off=8192, len=1024) cancelled because transaction is not started [ 655.780535][ T2995] BUG: KCSAN: data-race in _prb_read_valid / data_alloc [ 655.798230][ T2995] [ 655.800651][ T2995] write to 0xffffffff8687a2e8 of 8 bytes by task 421 on cpu 1: [ 655.808292][ T2995] data_alloc+0x310/0x390 [ 655.812754][ T2995] prb_reserve+0x8d7/0xad0 [ 655.817438][ T2995] vprintk_store+0x53c/0x830 [ 655.822143][ T2995] vprintk_emit+0x15a/0x5c0 [ 655.826656][ T2995] vprintk_default+0x26/0x30 [ 655.831578][ T2995] vprintk+0x1d/0x30 [ 655.835922][ T2995] _printk+0x79/0xa0 [ 655.840001][ T2995] __ext4_msg+0x18f/0x1a0 [ 655.844337][ T2995] ext4_quota_write+0x109/0x360 [ 655.849287][ T2995] remove_free_dqentry+0x5ae/0x670 [ 655.854405][ T2995] remove_tree+0x8ae/0x1120 [ 655.859027][ T2995] remove_tree+0x633/0x1120 [ 655.863712][ T2995] remove_tree+0x633/0x1120 [ 655.868230][ T2995] remove_tree+0x633/0x1120 [ 655.872736][ T2995] qtree_release_dquot+0x16e/0x180 [ 655.877850][ T2995] v2_release_dquot+0x98/0xd0 [ 655.882544][ T2995] dquot_release+0x10e/0x210 [ 655.887403][ T2995] ext4_release_dquot+0x1e4/0x460 [ 655.892613][ T2995] quota_release_workfn+0x256/0x530 [ 655.897997][ T2995] process_scheduled_works+0x4ce/0x9d0 [ 655.903477][ T2995] worker_thread+0x582/0x770 [ 655.908078][ T2995] kthread+0x489/0x510 [ 655.912422][ T2995] ret_from_fork+0x149/0x290 [ 655.917546][ T2995] ret_from_fork_asm+0x1a/0x30 [ 655.922338][ T2995] [ 655.924748][ T2995] read to 0xffffffff8687a2e8 of 16 bytes by task 2995 on cpu 0: [ 655.932735][ T2995] _prb_read_valid+0x1bc/0x920 [ 655.937516][ T2995] prb_read_valid+0x3c/0x60 [ 655.942030][ T2995] syslog_print+0xeb/0x540 [ 655.946639][ T2995] do_syslog+0x52b/0x7e0 [ 655.950896][ T2995] __x64_sys_syslog+0x41/0x50 [ 655.955588][ T2995] x64_sys_call+0x27ce/0x3000 [ 655.960537][ T2995] do_syscall_64+0xca/0x2b0 [ 655.965052][ T2995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.970976][ T2995] [ 655.973352][ T2995] Reported by Kernel Concurrency Sanitizer on: [ 655.979858][ T2995] CPU: 0 UID: 0 PID: 2995 Comm: klogd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 655.990922][ T2995] Tainted: [W]=WARN [ 655.994732][ T2995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 656.005155][ T2995] ================================================================== [ 656.015973][ T421] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 656.027068][T31772] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 656.054214][T31451] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.088127][T29279] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.124899][T30761] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 656.147380][T29862] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.