last executing test programs: 2m32.583194595s ago: executing program 1 (id=2227): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000200009500"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) (async, rerun: 32) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/pm_trace', 0x200000, 0x138) (async, rerun: 32) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x3, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @mcast2, 0x2}, r5, 0xb}}, 0x48) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = dup(r6) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) (async, rerun: 32) sendmsg$inet6(r6, 0x0, 0x4048043) (async, rerun: 32) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x4008005) (async, rerun: 64) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (rerun: 64) memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") creat(&(0x7f0000000100)='./bus\x00', 0x0) r4 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) 2m31.930127465s ago: executing program 1 (id=2232): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) bind$unix(0xffffffffffffffff, 0x0, 0x0) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) 2m30.720782654s ago: executing program 1 (id=2248): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000023c0)={'veth1_to_batadv\x00'}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000100000018000000", @ANYRES16, @ANYBLOB="0000000000000200b7080000000000007b8af8ff00000000bfa2000000000000e8010000f8ffffffb7f8487e802c9e9b9c501b7e03000008000000b7040000f66f63bb8510b3183cca00000043000000955736eb4100c7f13fd79a389637da3546517a972203bba648a6a4"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0xffffffffffffffff, 0xffffffffffffffae, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00'}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000680)={@map, 0xb, 0x1, 0x1, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000040)=[0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0], &(0x7f0000000100)}, 0x40) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r4, 0x0, r3, 0x0, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) ioctl$int_in(r3, 0x5452, &(0x7f0000000100)=0x3ff) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4) getsockname$packet(r5, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000002080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', 0x44) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000002af3e0f32415d6351cf91000370401000000b8dbdf2500000000", @ANYRES32=r6, @ANYBLOB="890c0400000000002c0012800900010069706970000000001c00028008000200ac1414bb06000f0002000000060010000b000000"], 0x4c}, 0x1, 0x0, 0x0, 0x44801}, 0x0) socket$inet(0x2, 0x2, 0x0) fcntl$setstatus(r3, 0x4, 0x7c00) dup3(r4, r3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = epoll_create(0x3ff) r8 = epoll_create1(0x80000) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000740)=ANY=[@ANYBLOB="200000003702000183000000000000000100010000000000", @ANYRES32=0x0, @ANYBLOB="e9ff2023"], 0x20) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000240)={0xa0000000}) epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r8, &(0x7f0000000280)={0x2000000}) sendmsg$IPSET_CMD_PROTOCOL(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="2c000000010605"], 0x2c}, 0x1, 0x0, 0x0, 0x40001d0}, 0x0) 2m30.117659573s ago: executing program 1 (id=2252): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18010000010000000000000004000000850000007b00000095a4675ddf914d6bda468d6a68d86318144a61259ec3bac6d19a18f9ec7955bb7689396089ac65a3d6eed617ba4e9ee16bcb9edbc282939344b88eba8e2449aedae79d8c7627c48f2ff3531ff37d235708f589d2ffa3a7fbde1d99f41d96c000064edd915ce107d048292056b3099705ef7c74cbe664dde1945d0bf7a4ebe3eb6f8779775ae327addb"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8}, 0x94) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) shutdown(r2, 0x1) sendto$inet6(r2, 0x0, 0x0, 0x40000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000208000c10f00000010ffff000036d9", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000ffffff1938120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m30.109365133s ago: executing program 32 (id=2252): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e0000", @ANYRES32, @ANYBLOB="0000000000000008b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000180a0500000000000000000002000000300003802c00038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18010000010000000000000004000000850000007b00000095a4675ddf914d6bda468d6a68d86318144a61259ec3bac6d19a18f9ec7955bb7689396089ac65a3d6eed617ba4e9ee16bcb9edbc282939344b88eba8e2449aedae79d8c7627c48f2ff3531ff37d235708f589d2ffa3a7fbde1d99f41d96c000064edd915ce107d048292056b3099705ef7c74cbe664dde1945d0bf7a4ebe3eb6f8779775ae327addb"], &(0x7f00000003c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8}, 0x94) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) shutdown(r2, 0x1) sendto$inet6(r2, 0x0, 0x0, 0x40000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000208000c10f00000010ffff000036d9", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000400000000ffffff1938120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2m28.669232986s ago: executing program 0 (id=2283): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x2000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x4db1, 0x2}, 0x0, 0x0) 2m28.550080188s ago: executing program 0 (id=2287): mknodat$null(0xffffffffffffff9c, 0x0, 0x0, 0x103) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xf6, 0x31c, &(0x7f0000000780)="$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") 2m28.425978559s ago: executing program 0 (id=2291): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x25c, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@printk={@ld}, @call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000040), &(0x7f0000000180)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_kthread_work_queue_work\x00', r2}, 0x10) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) r3 = socket(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="ffff01ff000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xf, &(0x7f0000000300)=ANY=[@ANYRES32], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b100bf800", 0x33fe0}], 0x1}, 0x0) getsockopt$WPAN_WANTLQI(r3, 0x0, 0x3, &(0x7f0000000380), &(0x7f00000003c0)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='cachefiles_ondemand_open\x00', r4, 0x0, 0x6}, 0x18) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f00000002c0)={r5}) r6 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) ioctl$EVIOCGRAB(r6, 0x40044590, &(0x7f0000000200)) ioctl$EVIOCGABS20(r6, 0x40044591, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) syslog(0x9, &(0x7f0000001a00)=""/4103, 0x1007) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0xfffffebd, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000340)='kfree\x00', r7, 0x0, 0xffffffffffffffff}, 0x18) 2m28.337570961s ago: executing program 3 (id=2294): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/11], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000001f000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000020000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002100)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x80000000, 0x0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xb, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff35, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x1]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0x6, 0xffffffff, 0x7f, 0x401, 0x2, 0x0, 0x2, 0x80000000, 0x4, 0x5, 0x8, 0x0, 0x7fff, 0x75ba, 0x7fffffff, 0x5, 0xffffffff, 0x7ff, 0x2, 0x9, 0x2, 0x0, 0x1000, 0x1, 0x3, 0x6, 0x0, 0xfa, 0x4, 0x0, 0xf, 0x80000001, 0x7, 0xfffffffb, 0x1, 0x20, 0x5, 0x8, 0x1, 0x2f2, 0x7fff, 0x0, 0x81, 0x206, 0x1ff, 0x7, 0x3, 0x5, 0x3, 0x9, 0x1000, 0x401, 0x1, 0x6, 0x7, 0x2, 0x4, 0x7f, 0x5, 0xfffffffb, 0x1, 0x4, 0x5, 0x8, 0x2000009, 0x9, 0x10, 0x9, 0x7, 0xffffff00, 0x97, 0x0, 0x4, 0x8, 0x8, 0x1, 0x958, 0x1fe, 0x4, 0x6, 0x7, 0x80, 0x5, 0xe53, 0x0, 0xfffffffe, 0x4, 0x8, 0x9, 0x7fff, 0x30, 0x8, 0xfffffff7, 0x4, 0x9, 0x1, 0x4, 0x7, 0x9, 0x5, 0x7, 0x6, 0x0, 0x5, 0x2, 0x7, 0x3, 0xcdd, 0x2, 0xd67, 0x7, 0x4, 0x25, 0x9dc5, 0x7, 0xfffffff7, 0x2, 0x400, 0x8, 0x0, 0x7, 0x5, 0x9, 0xa, 0xa, 0x9, 0x5, 0xdb5, 0x101, 0x4, 0x74e4, 0x7fff, 0x7, 0x7ff, 0x1, 0xd70, 0x1, 0x8, 0xa, 0x7, 0x1, 0x82, 0x52e, 0x7, 0x1, 0x5, 0x26, 0x1, 0x1b2a, 0x81, 0x9, 0x1c, 0x767, 0x7, 0x9, 0x10, 0xc2a, 0xff, 0x7, 0x6, 0x7, 0x3, 0xfffffff4, 0x8, 0x3, 0xfff, 0x8, 0x2, 0x5, 0x6, 0x3, 0xd7c3, 0x2, 0x10000, 0x7fff, 0x5, 0x5, 0x0, 0xfffffff7, 0x4, 0x2, 0x0, 0x6ee1847d, 0x10001, 0x7ff, 0x1, 0xf0, 0x7, 0x2, 0x7, 0x4, 0x6, 0x4, 0x7, 0x2, 0x0, 0x1, 0x4, 0x3, 0xfff, 0x80000001, 0x7, 0x676, 0x3, 0x9, 0x2, 0x4, 0x7fff, 0x4a5, 0x23, 0x4, 0x9, 0x8, 0x0, 0x8000, 0xa, 0x9, 0xca000000, 0x2, 0xfffffffa, 0x3, 0x7, 0x9, 0x7, 0x65fe, 0x9, 0x6, 0x4, 0x80000000, 0x5, 0x801, 0xb848, 0x6, 0x6, 0x800, 0x7, 0x1, 0xb, 0x80, 0x2, 0x3, 0x6, 0x9, 0x4, 0x4, 0xc, 0x80000001, 0x5, 0x5, 0x10000002, 0xb, 0x7, 0x5, 0x2, 0x4]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x1, 0x7, 0x4, 0x1, {0x7, 0x0, 0x3, 0x7, 0x7, 0x80000001}, {0x4, 0x2, 0x2, 0xa, 0x1ff, 0x1c0000}, 0x9, 0xbc, 0xdf72c67}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) 2m28.329828311s ago: executing program 3 (id=2295): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f00000000c0)={0x8, {"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", 0x1000}}, 0x1006) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000080)='mem\x00\x10\x00\x00\x00\x00\x00\x00I\xa2l') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r1, 0x0, 0x0) 2m28.313353491s ago: executing program 3 (id=2296): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1b, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1004}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xeb48195b69e85694, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000004700)) r3 = socket$netlink(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0}, 0x18) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) 2m28.234315983s ago: executing program 0 (id=2298): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x2000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) 2m28.229168852s ago: executing program 3 (id=2299): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$eJzs3V1rHFUYAOB3Nkm/tSmUoiIS6IWV2k2T+FFBsF6KFgt6X5dkGmo23ZLdlCYW2l7YG2+kCCIWxB/gvZfFP+CvKGihSAl64U1kNrPtNtnN52q2zvPAtOfMzObM2TPv2Xd2dtkACmsk+6cU8WLcjK+TiMNt2wYj3ziyst/So+uT2ZLE8vInfySR5Ota+yf5/wfzygsR8cuXESdLa9utLyzOVKrVdC6vjzZmr4zWFxZPXZqtTKfT6eXxiYkzb06Mv/P2Wz3r62vn//ru43sfnPnq+NK3Pz04cieJs3Eo39bejx242V4ZiZH8ORmKs6t2HOtBY/0k2e0DYFsG8jgfimwOOBwDedQD/383ImIZKKhE/ENBtfKA1rV9j66DnxkP31+5AFrb/8GV90ZiX/Pa6MBS8tSVUXa9O9yD9rM2fv797p1siQ3eh7jRg/YAWm7eiojTg4Nr578kn/+273TzzeP1rW6jaK8/sJvuZfnP653yn9Lj/Cc65D8HO8Tudmwc/6UHPWimqyz/e7dj/vt46hoeyGvPNXO+oeTipWp6OiKej4gTMbQ3q693P+fM0v3lbtva879sydpv5YL5cTwY3Pv0Y6YqjcpO+tzu4a2Il57kv0msmf/3NXPd1eOfPR/nN9nGsfTuK922bdz/dr3PgJd/jHi14/g/uaOVrH9/crR5Poy2zoq1/rx97Ndu7W+t/72Xjf+B9fs/nLTfr61vvY0f9v2ddtu23fN/T/Jps7wnX3et0mjMjUXsST5au378yWNb9db+Wf9PHF9//ut0/u+PiM822f/bR2933bUfxn9qS+O/9cL9D7/4vlv7mxv/N5qlE/mazcx/mz3AnTx3AAAAAAAA0G9KEXEoklL5cblUKpdXPt9xNA6UqrV64+TF2vzlqWh+V3Y4hkqtO92H2z4PMZZ/HrZVH19Vn4iIIxHxzcD+Zr08WatO7XbnAQAAAAAAAAAAAAAAAAAAoE8c7PL9/8xvA7t9dMC/zk9+Q3FtGP+9+KUnoC95/Yfi6hL/pgUoAIEOxSX+objEPxSX+IfiEv9QXOIfAAAAAAAAAAAAAAAAAAAAAAAAAAAAeur8uXPZsrz06PpkVp+6ujA/U7t6aiqtz5Rn5yfLk7W5K+XpWm26mpYna7Mb/b1qrXZlbDzmr4020npjtL6weGG2Nn+5ceHSbGU6vZAO/Se9AgAAAAAAAAAAAAAAAAAAgGdLfWFxplKtpnMKXQvvxW4fxucv7+ThSedRTto6uGJbTQz2yzAp9LSwyxMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALT5JwAA//821zOC") open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x2000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) 2m28.060445115s ago: executing program 0 (id=2303): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="170000000000000004000000fd"], 0x50) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x40047451, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x10000}, 0x18) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3014850, &(0x7f00000006c0)={[{@noquota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@noauto_da_alloc}, {@dioread_lock}]}, 0x3, 0x4c5, &(0x7f0000001cc0)="$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") setitimer(0x1, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0x400, &(0x7f0000000080)=ANY=[@ANYBLOB='mpol=bind:N-', @ANYRESOCT]) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r4 = fcntl$dupfd(r3, 0x0, r3) readv(r4, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) write$selinux_load(r4, &(0x7f0000000300)={0xf97cff8c, 0x8, 'SE Linux', "36b30d40d3a890c65db3b2f9bf487d164f66bbef01ce70955b77917caba5c2273db080f5b4f79aec2e8a14e1ef364ce80c2756558c455b6b6f7d775842c18caf9eaf8b33db1b274d21ca364f9b8c8652fa51f68f86e657d9f1dc0a721283f0fa7fff9aa8f8170e1ed4ae032bbb6e71f9c7a09828a2c0b624a762359e85c38187ce43530cd261ab14c16c7782cc0be4ed12b3399ef1a27c6c60de57bac725a6ca582171351f7f06ebd29bd78ee789204acdcaca9b7c47279e951b5ad5b1af0bf3cd8a78203376aeaf108f"}, 0xda) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001340)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a320000000008004100736977001400330073797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) 2m27.895865138s ago: executing program 3 (id=2305): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x1000000}, 0x18) write$tun(r0, &(0x7f00000003c0)=ANY=[], 0xfdef) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0xf03, 0x4, 0x5}, 0x50) r2 = socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x10003}, 0x18) socket$tipc(0x1e, 0x5, 0x0) accept4(r2, 0x0, 0x0, 0x400000000000000) unshare(0x4040600) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x0, 0x5000, 0xffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8003, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2m27.1044208s ago: executing program 3 (id=2312): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000007000000010001004900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000080a7df08f945ac85"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sysinfo(&(0x7f0000000340)=""/193) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) shutdown(r5, 0x1) splice(r5, 0x0, r4, 0x0, 0x2, 0x0) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2m27.09264012s ago: executing program 33 (id=2312): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000007000000010001004900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000080a7df08f945ac85"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sysinfo(&(0x7f0000000340)=""/193) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) shutdown(r5, 0x1) splice(r5, 0x0, r4, 0x0, 0x2, 0x0) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 2m27.056868441s ago: executing program 0 (id=2314): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x2000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) 2m27.056107491s ago: executing program 34 (id=2314): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000200), 0x3, 0x570, &(0x7f0000000680)="$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") open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0x20) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x2000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) 1m45.186326215s ago: executing program 6 (id=2730): openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x3, 0x4, &(0x7f0000001000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000001100)=ANY=[@ANYRES32], 0x48) r2 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r3, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r4, 0x30e0}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0effffffb]}, 0x8) dup2(r3, r4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) fcntl$setown(r4, 0x8, r2) tkill(r2, 0x13) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r5}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m44.336565988s ago: executing program 6 (id=2739): unshare(0x20000600) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x700, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4000}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x3fff}]}}]}, 0x40}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x28000, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b000000000000000000000000800000000000005d426db60d0bb680905744cfed3e1ed93a179e661d885493d5e9995ebc8c751f050ec9720732cab79556ed9cc4eb1b772bdc094b5f29887a03c7ea31941a0cd46d9d1e02316a0a4e0a2045c946e7c5e31b2a53903d82def0109f66aeee2929783e0e16d73108a27d6acf83207736285bee4701bba5b5d729f427c6952c29523ec6707414f2e2d54e9cd127ba284aaa1da3461f09ea953f654f9d0e", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r6 = dup(r5) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0xc}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r9, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x0, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0x0, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0xd4b, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0xfffffffe, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x10001, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 1m44.27019569s ago: executing program 6 (id=2740): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x60000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x3) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x420000, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90124fc60100c020000040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)={0xc0002, 0x6, 0x8}, 0x18) r4 = openat(r3, &(0x7f0000000080)='./file0\x00', 0x6e1c0, 0x97) openat$cgroup(r2, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0) syz_emit_ethernet(0x56, &(0x7f00000022c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "8400", 0x20, 0x2c, 0x0, @remote, @local, {[@dstopts={0x73, 0x2, '\x00', [@hao={0xc9, 0x10, @mcast2}]}]}}}}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x84022, &(0x7f0000000400)=ANY=[@ANYBLOB="6e725f696e6f6465733d352c75737271756f74615f696e6f64655f686172646c696d69743d6d7431702c008ea5a82e0bf29b099ffff962d9f35bc447536ea842fe7e473a8f113ce55c9cf57d35f913774063bfe4522050e5f2e668689212e450953c442dd18819e4d116e85456f183cfa20efd8b5e54ac0c1a1ac0f98331f59864bc139b78c4c24359742fc7f17f3e7aeb2a18c98091b0f050ee7ce9a59bc1bc65e4422aa220081649c1cc043276757616215c855440e327c4b65643b2a34c6e4a0d751a633bd509"]) r5 = perf_event_open(&(0x7f0000000200)={0x4, 0x80, 0x0, 0x2, 0xff, 0x81, 0x0, 0x1000, 0x10000, 0x4, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1ed, 0x1, @perf_config_ext={0x2, 0x3}, 0x3, 0x3, 0x1, 0x5, 0x24, 0x3ff, 0x7, 0x0, 0x7, 0x0, 0x3}, 0xffffffffffffffff, 0x10, r4, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r5, 0x2405, r4) 1m44.26752834s ago: executing program 6 (id=2741): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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") r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x47, 0x0, 0x0, @tick, {0x40, 0xff}, {0x0, 0x9}, @queue={0xee, {0x7, 0xc9a}}}, {0x0, 0x0, 0x0, 0x0, @time={0x367f, 0xfffffffd}, {}, {0x80}, @time=@time={0x9, 0x1}}], 0x38) read$snapshot(r2, 0x0, 0xffffffbf) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) acct(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000080)='./file0\x00', 0x2000, 0x392) r3 = creat(&(0x7f0000000240)='./file1\x00', 0x0) r4 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) write(r4, &(0x7f0000000180)="2cd889f0253e14", 0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) r5 = openat$selinux_policy(0xffffff9c, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004880}, 0x8000002) r7 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r7, &(0x7f0000000400)=[{0x0}, {&(0x7f0000001680)=""/4096, 0x1000}, {0x0}], 0x3, 0xff, 0x9) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_submit(0x0, 0x0, 0x0) mmap(&(0x7f0000b07000/0x4000)=nil, 0x4000, 0x100000a, 0x2010, r6, 0x0) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r5, 0x80045301, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 1m44.116767652s ago: executing program 6 (id=2742): add_key$keyring(&(0x7f0000000300), 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x3b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0xe, 0xf, &(0x7f0000000640)=@raw=[@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xffffffffffffffff}], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, 0xd}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r1, &(0x7f00000006c0), &(0x7f00000003c0)=""/14, 0x2}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)={0xa4, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x10, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x4, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6}]}]}]}, 0xa4}}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000380)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={0x0}, 0x18) creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@grpquota}, {@auto_da_alloc}, {@minixdf}]}, 0x1, 0x50c, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101942, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8100100086dd6000000000242b00fe8000000000000000000000000000aafe8000000000000000000000000000aa3c000000000000002c000329640000000000fffd", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x0) socket$pptp(0x18, 0x1, 0x2) keyctl$set_reqkey_keyring(0xe, 0x1) 1m44.054966463s ago: executing program 6 (id=2744): open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x9, 0x4}, 0x8) sendto$inet6(r3, &(0x7f00000002c0)='W', 0x1, 0x4, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @private1, 0x8}, 0x1c) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000080)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @remote, [], [], 'tunl0\x00', 'macsec0\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x7, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@hl={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x16, 0xe, {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000580)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYRES8, @ANYRESDEC, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES16, @ANYRES32, @ANYRES32], 0x50, 0x24040094}, 0x80) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000b00)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES64, @ANYBLOB="020002", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0ffe0500", @ANYRES64, @ANYBLOB="02000000", @ANYRES8, @ANYBLOB="02000300", @ANYRES64, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e74593831c634553c00cb92a5f09f1c013283b5c41e9b48b6df05700293ee4dfd9070d460cc6774ad5cb408f22ce", @ANYRESDEC, @ANYRESDEC=r5, @ANYRES32=0x0, @ANYBLOB="080006", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x1) mount$bpf(0x0, &(0x7f0000000340)='./file1\x00', &(0x7f00000003c0), 0x2080030, &(0x7f0000000900)={[{@gid}, {@mode={'mode', 0x3d, 0x349b}}], [{@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, '{)}['}}, {@subj_user={'subj_user', 0x3d, '{#'}}]}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_timeval(r7, 0x1, 0x43, &(0x7f0000000080)={0x77359400}, 0x10) listen(r8, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) connect$unix(r9, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r7, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) close_range(r0, 0xffffffffffffffff, 0x0) 1m44.040804563s ago: executing program 35 (id=2744): open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x9, 0x4}, 0x8) sendto$inet6(r3, &(0x7f00000002c0)='W', 0x1, 0x4, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @private1, 0x8}, 0x1c) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000080)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @remote, [], [], 'tunl0\x00', 'macsec0\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x7, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@hl={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x16, 0xe, {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000580)=@proc={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYRES8, @ANYRESDEC, @ANYRES32, @ANYRES32, @ANYBLOB="00000000000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYRES16, @ANYRES32, @ANYRES32], 0x50, 0x24040094}, 0x80) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r6 = getegid() fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000b00)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYBLOB="02000400", @ANYRES64, @ANYBLOB="020002", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0ffe0500", @ANYRES64, @ANYBLOB="02000000", @ANYRES8, @ANYBLOB="02000300", @ANYRES64, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYRES8, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b664926695450adc68e74593831c634553c00cb92a5f09f1c013283b5c41e9b48b6df05700293ee4dfd9070d460cc6774ad5cb408f22ce", @ANYRESDEC, @ANYRESDEC=r5, @ANYRES32=0x0, @ANYBLOB="080006", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=0xee00, @ANYBLOB="08000400", @ANYRES32=r6, @ANYBLOB="10000400000000002000000000000000"], 0x94, 0x1) mount$bpf(0x0, &(0x7f0000000340)='./file1\x00', &(0x7f00000003c0), 0x2080030, &(0x7f0000000900)={[{@gid}, {@mode={'mode', 0x3d, 0x349b}}], [{@audit}, {@smackfsfloor={'smackfsfloor', 0x3d, '{)}['}}, {@subj_user={'subj_user', 0x3d, '{#'}}]}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_timeval(r7, 0x1, 0x43, &(0x7f0000000080)={0x77359400}, 0x10) listen(r8, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) connect$unix(r9, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r7, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) close_range(r0, 0xffffffffffffffff, 0x0) 2.390068432s ago: executing program 5 (id=3649): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x4, 0x0, 0x28) socket$kcm(0x10, 0x2, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f00000012c0)='sys_enter\x00', r4}, 0x10) get_robust_list(0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000640)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0ff5b14104fe62cc60e413905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf2364149215108333719acd97cfa107d40224edc5465a93df8513a32ec450bebc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe511195418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4929330142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da8c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000dd11e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15f2a169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f000010000000000000905ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400bee3dfc8fb24f67c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341b74abaa7c95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb232bbdb9dc33cbd7643866fde41f94290c2a5ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595270fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f76dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d2e959efc71f665c4d75cf2458e3322c9062ece84c99a061997a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99f0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d164118e4cbe02400000000ff0700000000cc9d8046c216c1f895778cb25122a2a998de44aeadea2a40da8daccf080842a4867217373934bbd42dcb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcd62981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba495aea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df98674152f94e32409e2a3bce109b60000000000001700d6d5210d7560eb92d6a97a27602b81f76386f1535b1fad6ec9a31137abf9a404abde7750898b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294059323e7a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd704e4214de5946932d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1fc8df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1785eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba891cea599b079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be2f5656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fd78f9743af932cd6db49a47613808bad959719c0000000000378a921c7f7f6933c2e24c7e800003c9e8095e02985f28de0bbc76d58dd92606b1ef6486c85fa3e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6968d12418a4d2a0d086d8438d415d713acebc5b014e61a543a5a391f03daca80f08f0e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e112645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c000000000000000000000000000000a1c3da144589dcaddb71cf9374843e23f992a237a9040747e0434a8a643990b4059a98411ce867d1af7e8ea89f49e6f564d4dce8a7d6939a9214a7f39e83bd247e03a09dba000000000000000000000000aaf033d47249c8444bc13844cbf1be617d82b269e5ea0c0d525603c0ec543ea581f63893ae414a6683e941fdbdff03cfc5f8744583c0aa766a65321f907927a59d75b47f06895e8471ebc2840ce5bd054df223fb09b9c739ad64cfcfd2d498b0f11056f6c40874cb977c99b6bc1a8732198a17e610082b7ce0365f271b11d4b4a3d4c7d0bb273f406ecd4b26c93151c30f5a269991402d109becb1b9bafcb2b47e940000000000e540d8b0db3774effb7469a21f96e2594b2973ebf7a1bd9ace2ed4d6eb1735f85885be5be74dc2ea5d7d499bd28271b98f187f5879b16b409a04d78175cc8d0f707c822805d7011ed4b22419186dd2b22aadf15828db2ca19d79e1bf2f7989237ee5cb2e1eb7b2bfc92d3aa95a26f060935c4fee8b2d7d0bf3c6d82d04329164bd4ee0b8060183f36762b0440d9082d7c8b06e4c2024f77e1018758d28e7ee290f32a48bfc2aa10b3dba9bff00d2410f3477a8e0df689c880dc9a677cfaa16603527c06625a3363744cea5f2d350224cc0fea76c72ca08507235c67346722f20690fde0790f040f5fd3eff75f9b291cc5e9c686ebaadbe756c6fa039ff441e427ed12578d5cb041ebf729cfaa575cc852fbdb54e60435e6d62b9d270433b220ed9ff1ff042b8d3d866231c460765"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000e00)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522ec, 0x0, {0x0, 0x0, 0x74, r8, {0x10, 0xf}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) r10 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r10}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x127081) syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x1, 0x203}, &(0x7f0000000380), &(0x7f00000003c0)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)) 1.678407984s ago: executing program 8 (id=3660): mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x90\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8M$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xe1(\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xd5j*\xad\x18I\xcc\xe9\xaa{]\xef\xfb\xff\xff\xff\xff\xff\xff\xfft\xd0s\xc4\x04\xe0\xa1\xd2@\x06\xc2`H\xf7\xcc\xe3\xa0\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x00\x00\x00', 0x42, 0x0, 0x0) perf_event_open(&(0x7f0000000580)={0x2, 0x80, 0x37, 0x1, 0x0, 0x0, 0x0, 0x17, 0x80, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_config_ext={0x5, 0x8}, 0x4e58, 0x5, 0x0, 0x4, 0x87, 0x9, 0xb, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000740)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000540)=ANY=[@ANYBLOB="666c7573682c757466383d312c6e6f6e756d7461696c3d302c726f6469722c757466383d312c6e6f6e756d7461696c3d302c756e695f786c6174653d312c6e6f6e756d7461696c3d302c756e695f786c6174653d302c757466383d312c756e695f786c6174653d302c757466383d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c646f733178666c6f7070792c726f6469722c73686f72746e616d653d77696e6e742c71756965742c0094f8a04f0973c43c7bcea227ba87b349831c01bc3220ec43c16881ca5a7eb4c441b475069a19ed5992542160cfb3116e6b98cb32f0c11a1425599a6e9e6112e8ccec10c22c03ee6158bae8a13f6c3b4c6a28b970ccddefe85485144c95ae43328f492ad74f0d68df2d1fb7eed626acbfd66c627c439a6358168da3754739b94ec5550af56d20754c3be005251ae53ba42f3c981414a50ff7ada7e00c83b7ff20b21e7744e0f82318bcdcdc17601384088fa9950f4a77772da9105723cb44f1469ae4c6f6a4ea884e464d61cb3a134196eb13fbcaf923e0c1c2c188470a4da78b7ed6d8a89816dcf28a48f0bd4f4a8d69c09f43f35a7633764ca34b8db2f8e7ed083d171d7a5c0b6e4f2bb9c6b3f8f4e97a8306ed4c846ba269edb6379d1d00"/476], 0x0, 0x307, &(0x7f0000000200)="$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") 1.559613645s ago: executing program 8 (id=3665): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000880)={[{@data_err_abort}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@data_err_ignore}, {@lazytime}, {@data_err_ignore}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@data_err_ignore}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0xa20, 0x8000c64) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) 1.528468596s ago: executing program 5 (id=3667): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 1.463982187s ago: executing program 5 (id=3669): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4600, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x2000000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x167842, 0x19) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0xffffffe4}], 0x1, 0x1400, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000005000000005e002200850000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x7, 0x7ffc1ff3}]}) signalfd(0xffffffffffffffff, &(0x7f0000000100)={[0x9]}, 0x8) r2 = dup(r1) r3 = open(0x0, 0x40542, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r5, 0x1, 0x15, &(0x7f0000000000)={0x0, 0x2710}, 0x10) sendmmsg$inet6(r5, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x20086}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f00000071c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)='H', 0x1}], 0x1}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r4}, 0x18) sendfile(r2, r3, 0x0, 0x8000fffffffe) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x19) r6 = syz_open_dev$vcsa(&(0x7f0000000000), 0x6, 0x200) r7 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r8}, 0x18) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x3f0, 0x0, 0x25, 0x148, 0x158, 0x60, 0x358, 0x2a8, 0x2a8, 0x358, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x110, 0x158, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x5e, 0x0, 0x9, 0x0, 0x2, 0xffffffff, 0x7, 0x18}}}, @common=@unspec=@ipvs={{0x48}, {@ipv4=@broadcast, [0x0, 0xffffff00, 0x0, 0xff], 0x4e21, 0x3c, 0x5, 0x4e21, 0x8, 0x8}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0xff000000, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x1a0, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x3, 0x2, 0x4, 'syz0\x00', 0x4}}, @common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0x0, 0x80000, 0x8000}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x450) write$UHID_DESTROY(r6, &(0x7f0000000080), 0x4) syz_io_uring_setup(0x10f, &(0x7f0000000340)={0x0, 0x4db1, 0x2, 0x2, 0xcd, 0x0, r6}, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) 1.443221707s ago: executing program 8 (id=3670): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000007000000010001004900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000080a7df08f945ac85"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sysinfo(&(0x7f0000000340)=""/193) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) shutdown(r5, 0x1) splice(r5, 0x0, r4, 0x0, 0x2, 0x0) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1.28128682s ago: executing program 4 (id=3672): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x4, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0xd, 0x5, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1000, 0x100, 0xa, 0xc, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x290}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xff03}}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 1.2440359s ago: executing program 4 (id=3673): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfe, 0x485, &(0x7f0000000f00)="$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") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) setns(r1, 0x8000000) getdents(r4, 0x0, 0x54) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r5}, &(0x7f0000000a00), &(0x7f0000000a40)=r1}, 0x20) 1.079822663s ago: executing program 7 (id=3677): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000880)={[{@data_err_abort}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@init_itable_val={'init_itable', 0x3d, 0x1}}, {@data_err_ignore}, {@lazytime}, {@data_err_ignore}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {@data_err_ignore}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x0, 0xa20, 0x8000c64) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x2) 1.076261113s ago: executing program 5 (id=3678): r0 = socket(0x2, 0x3, 0x0) setsockopt(r0, 0x0, 0x15, &(0x7f0000000180)="b1", 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000002a40)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1) write$binfmt_script(r3, &(0x7f00000018c0)={'#! ', './control'}, 0xd) setitimer(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYRES64=0x0, @ANYRES8=0x0, @ANYRES16, @ANYBLOB="bd5f827714a0991f0602d411f856d81f8270119b6eb7069c65a16a5f7c29", @ANYRES32, @ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x8}, 0x18) close_range(0xffffffffffffffff, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000080) r5 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffbfffc, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r9, 0x4b68, 0x0) ioctl$KDSKBENT(r8, 0x4b47, &(0x7f0000000500)={0x2, 0xfc, 0x8}) mq_open(&(0x7f0000000100)='\xc3\x91\x946\x1c\x95\x96\xec\xdc\xedGPL\x00', 0x40, 0x80, &(0x7f00000000c0)={0x6, 0x3f8000000000, 0x9, 0x7fffffff}) sendfile(r1, r1, &(0x7f0000000000)=0x4, 0x8001) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c0002", @ANYRES16=r10], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 844.536076ms ago: executing program 7 (id=3679): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 801.528337ms ago: executing program 5 (id=3680): r0 = socket(0x2, 0x3, 0x0) setsockopt(r0, 0x0, 0x15, &(0x7f0000000180)="b1", 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000002a40)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1) write$binfmt_script(r2, &(0x7f00000018c0)={'#! ', './control'}, 0xd) setitimer(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYRES64=0x0, @ANYRES8=0x0, @ANYRES16, @ANYBLOB="bd5f827714a0991f0602d411f856d81f8270119b6eb7069c65a16a5f7c29", @ANYRES32, @ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x8}, 0x18) close_range(0xffffffffffffffff, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000080) r4 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffbfffc, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x10) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r8, 0x4b68, 0x0) ioctl$KDSKBENT(r7, 0x4b47, &(0x7f0000000500)={0x2, 0xfc, 0x8}) mq_open(&(0x7f0000000100)='\xc3\x91\x946\x1c\x95\x96\xec\xdc\xedGPL\x00', 0x40, 0x80, &(0x7f00000000c0)={0x6, 0x3f8000000000, 0x9, 0x7fffffff}) r9 = signalfd(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(r9, 0x4, 0x2c00) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c0002", @ANYRES16=r10], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 784.739157ms ago: executing program 7 (id=3681): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0000000700000000612e615f2e00"/31], &(0x7f0000001240)=""/169, 0x1f, 0xa9, 0x0, 0x3, 0x10000}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0xfe, 0x0, 0x7ffc0002}]}) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) getuid() syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f00000011c0)={[{@bsdgroups}, {@orlov}, {@grpjquota}, {@init_itable_val={'init_itable', 0x3d, 0x6}}, {@debug}, {@resuid}]}, 0x0, 0x5fd, &(0x7f0000000600)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff11}, 0x94) futex(0x0, 0x2, 0x1, &(0x7f0000000400)={0x77359400}, &(0x7f00000004c0)=0x2, 0x2) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080)=0x1, r1, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r1, 0x7}}, 0x48) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000080)=0x1, 0xffffffffffffffff, 0x0, 0x2, 0x4}}, 0x20) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000258f88)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x18}, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x400000000000}) 721.753878ms ago: executing program 2 (id=3683): mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x20, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, 0x0, 0x26, 0x0, 0x8, 0xfffffffd}, 0x28) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) lsm_set_self_attr(0x68, &(0x7f0000000000)={0x0, 0x9, 0x38, 0x18, "f10fb76c50fc5b79e3f1ab6e45cbb80c84493f38b639d74e"}, 0x38, 0x0) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x1e6, @tick=0x9}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000c00)=@mangle={'mangle\x00', 0x1f, 0x6, 0x6a8, 0x0, 0x210, 0x5d8, 0x408, 0x118, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x5d8, 0x6, &(0x7f00000001c0), {[{{@ipv6={@mcast1, @private1, [0xff000000, 0xff000000, 0x0, 0xffffff00], [0x80fc12ceda46c7ec, 0xffffff00, 0xffffff00, 0xff000000], 'caif0\x00', 'veth0_vlan\x00', {0xff}, {0xff}, 0x2b, 0x7, 0x7, 0x1}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x80000001, 0x1, 0x0, [0x5, 0x0, 0x0, 0xd7, 0x9, 0x7, 0x7, 0x7, 0x100, 0x0, 0x5, 0x2, 0x2, 0x1, 0xcbb, 0x5], 0x4}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@icmp6={{0x28}, {0xd, "3501", 0x1}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2b}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x44}, @local, [0x0, 0xffffffff, 0xff], [0x0, 0x0, 0xff000000], 'hsr0\x00', 'caif0\x00', {}, {0xff}, 0x3a, 0x4, 0x5, 0x30}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0x33, 0xd, 0xff, 0x0, 0x10, 0x2001, 0x1001}}]}, @HL={0x28, 'HL\x00', 0x0, {0x3, 0x5}}}, {{@ipv6={@loopback, @private2, [0xff000000], [0xffffffff, 0xffffff00, 0xff0000ff], 'ip6tnl0\x00', 'veth0_to_team\x00', {0xff}, {}, 0x6c, 0x60, 0x5, 0x48}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {'nU'}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x7, 0x1}}}, {{@ipv6={@empty, @empty, [0xffffff00, 0xffffff00, 0xffffffff, 0xffffffff], [0xff000000, 0xff000000, 0x0, 0xff000000], 'macsec0\x00', 'ip6_vti0\x00', {}, {0xff}, 0x6c, 0x6, 0x2, 0x18}, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x3, 'system_u:object_r:public_content_rw_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x708) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_EPOLL_CTL=@mod={0x1d, 0x6, 0x0, 0xffffffffffffffff, &(0x7f0000000580)={0x60000002}, 0xffffffffffffffff, 0x3, 0x0, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300003ae068c8bb9b5efb6a024c1147d46e15bb5170a5b867df2994707b11fef3febb154ffb80e9f4af5cd0f16e8e2bdf5cdd0e6d40a56553a57f37d86f2ebf000000000000000000a6feae3fc58bfd7f4acdc6f263ae9894ca781bbc9cd245b64e4c92259ef5ffb4786ed8e9ce9b3afd0c56eaaeecc396a5befa26adf4c4a424306b3994ea9ed8397acf9535f74a33"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = socket(0x10, 0x3, 0x9) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x25dfdbfc}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={&(0x7f0000000080), 0xc, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1400000010000100000000000000c34775c0000a14000000110001000000000000000000000037dc"], 0x28}}, 0x0) syz_io_uring_setup(0x24fd, &(0x7f0000000b80)={0x0, 0xfffffffd, 0x10100, 0xfffffffc, 0x33a}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000000000006000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004d020000018000000200000000000000080000000000000006000000000000000200000000000000000000000000000000000000000000000000000000000000090000000200000005000000000000003000000000000000c301000000000000730200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00"/576]) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SPLICE={0x1e, 0x21, 0x0, @fd=r4, 0xe5, {}, 0x1, 0x4, 0x1}) 677.605399ms ago: executing program 5 (id=3684): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = dup(0xffffffffffffffff) r2 = syz_io_uring_setup(0x3e, &(0x7f0000000640)={0x0, 0xaddc, 0x10100, 0x1, 0x203, 0x0, r1}, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0, 0x80002101}) io_uring_enter(r2, 0xd81, 0x0, 0x0, 0x0, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x400e, &(0x7f0000000300)={[{@i_version}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@block_validity}, {@sysvgroups}]}, 0x1, 0x42f, &(0x7f0000000940)="$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") setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000001f00)=ANY=[], 0xe00f, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x242, 0x0) ioctl$TIOCMIWAIT(r7, 0x545c, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r6) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x1f00, 0x40, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x224f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x8000000) unshare(0x2c040000) preadv(0xffffffffffffffff, 0x0, 0x0, 0xa6b1, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x0, @hyper}, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r9 = gettid() syz_open_procfs$namespace(r9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x1700, 0x0, 0x0, 0x0, 0x0, 0x0) 552.719531ms ago: executing program 8 (id=3685): syz_open_procfs$namespace(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x4008000) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='hybla\x00', 0x6) shutdown(r0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$netlink(0x10, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x1000) syz_pidfd_open(0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, r3, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x80000, &(0x7f0000000400)=ANY=[@ANYBLOB="74d861af553d00642c7201006e6f3d", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',debug=0x0000000000000004,cache=readahead,access=client,loose,loose,context=sysadm_u,\x00']) socket$igmp6(0xa, 0x3, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x200, 0x0) memfd_create(&(0x7f0000000580)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES64=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 535.509151ms ago: executing program 2 (id=3686): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r0}, 0x18) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d80000001c0081064e81f782db44b9040a1d08040e00000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162756aa5e8d7ce06bbace8017cbec4c", 0x6c}], 0x1, 0x0, 0x0, 0x7400}, 0x48090) 372.990984ms ago: executing program 2 (id=3687): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000019180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10) cachestat(r0, &(0x7f0000000040)={0xfffffffffffffff7, 0x1}, &(0x7f0000000080), 0x0) 240.808806ms ago: executing program 2 (id=3688): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000bbdbdf250100000004000180100002800c00018008000100030000"], 0x28}, 0x1, 0x0, 0x0, 0x4000084}, 0x24040804) 240.149736ms ago: executing program 8 (id=3689): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1a, 0x0, 0x0, 0x2000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000400850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000080), &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r5}, 0x10) r6 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}}) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) shutdown(r8, 0x1) ioctl$BTRFS_IOC_RM_DEV(r7, 0x5000940b, &(0x7f0000001900)={{}, "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"}) r10 = socket$nl_audit(0x10, 0x3, 0x9) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r12, 0x107, 0x5, &(0x7f0000001100)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) close_range(r11, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_LIST_RULES(r10, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x100, 0x70bd2b, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1084}, 0x40000) 226.104056ms ago: executing program 7 (id=3690): r0 = socket(0x2, 0x3, 0x0) setsockopt(r0, 0x0, 0x15, &(0x7f0000000180)="b1", 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000002a40)=[{&(0x7f00000007c0)=""/4096, 0x1000}], 0x1) write$binfmt_script(r3, &(0x7f00000018c0)={'#! ', './control'}, 0xd) setitimer(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYRESDEC, @ANYRES64=0x0, @ANYRES8=0x0, @ANYRES16, @ANYBLOB="bd5f827714a0991f0602d411f856d81f8270119b6eb7069c65a16a5f7c29", @ANYRES32, @ANYRES32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='kfree\x00', r4, 0x0, 0x8}, 0x18) close_range(0xffffffffffffffff, r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000080) r5 = perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffbfffc, 0x2, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6}, &(0x7f0000000180), &(0x7f00000001c0)=r5}, 0x20) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r7}, 0x10) r8 = syz_open_dev$tty20(0xc, 0x4, 0x0) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r9, 0x4b68, 0x0) ioctl$KDSKBENT(r8, 0x4b47, &(0x7f0000000500)={0x2, 0xfc, 0x8}) mq_open(&(0x7f0000000100)='\xc3\x91\x946\x1c\x95\x96\xec\xdc\xedGPL\x00', 0x40, 0x80, &(0x7f00000000c0)={0x6, 0x3f8000000000, 0x9, 0x7fffffff}) sendfile(r1, r1, &(0x7f0000000000)=0x4, 0x8001) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2c00) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c0002", @ANYRES16=r10], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) 221.238236ms ago: executing program 2 (id=3691): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) write(r1, &(0x7f00000004c0)="330000001a005f0214f9f407000904001f000000ff00000000000000c8e7fe37ffbfd0f626a5b0a28aa5ff1e86dc9eeab25e53e32d1d439586a1123a457334f4c64284552b17acdeefdef0491f32fd1f6418e3389867aa1798bd48f32bc56f813bf92cae08d916308e6aefc5f399cffa92501470628ec735b3c7370c827e871ae008ab0c9582a7a12a7b38a22299bdb9585718dff4440d86fe853c179d395d549e6a3ce7cf14654c45c0c34fde1e70f8f787c189c3a021cd51fb26754dfed03fb27ee712ce607213801366a9324f56784c46370ba5d28ce4", 0xd8) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r2, 0x0, 0x5, &(0x7f0000000240)={@local, @empty, 0xfffb, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x96bd, 0x1000000, 0x7e, 0x6b}, 0x3c) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000000080)=0x300, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x286242, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/uevent_helper', 0x460800, 0x1dc) sendfile(r3, r4, 0x0, 0x1000000000004) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffffff9}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x361cd650463bd27e, 0x0, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4f, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x404, &(0x7f0000000200)={[{@nodiscard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@dioread_lock}, {@quota}]}, 0xff, 0x42f, &(0x7f0000000940)="$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") r9 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0x105042, 0x1fa) writev(r9, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r8}, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) 216.388946ms ago: executing program 4 (id=3692): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20) r2 = socket$inet(0x2, 0x3, 0xd) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) 190.646726ms ago: executing program 4 (id=3693): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x4, 0x4, 0x3c8, 0xe8, 0x0, 0x0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xff000000, 0xff, 0xd, 0x5, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x6, 0x8a2d, 0x1000, 0x100, 0xa, 0xc, 'sit0\x00', 'team0\x00', {0xff}, {}, 0x0, 0x290}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0xff03}}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 172.388397ms ago: executing program 4 (id=3694): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_time\x00', 0x26e1, 0x0) close(r4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001200)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r6}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r7, &(0x7f0000000180), 0x40010) write$UHID_INPUT(r1, &(0x7f0000001040)={0xe, {"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", 0x1000}}, 0x1006) 120.537578ms ago: executing program 4 (id=3695): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r2, &(0x7f0000001340)=[{&(0x7f0000000580)=""/148, 0x94}], 0x1) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@minixdf}]}, 0x3, 0x43a, &(0x7f0000000340)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0xe0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000007000000010001004900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000080a7df08f945ac85"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r6, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r6, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) sysinfo(&(0x7f0000000340)=""/193) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000080)='D', 0x1, 0x4014, 0x0, 0x0) shutdown(r5, 0x1) splice(r5, 0x0, r4, 0x0, 0x2, 0x0) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 110.840668ms ago: executing program 7 (id=3696): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb014018000000000000000c0000000c00000005000000030000000000000800000000007f305f00e611e8f5ab575cb932d948230805d39fd3510500a6920d238fc413644fe223b8b2a93fd66b561ad34dd5d5719b22e1e50b7d914eafcedf3569bdf1488032d2ef0f94fc8b8e6324054dc257ac7c084fc0b48447c2875529ae465b054fa147284c319deb652e56009100b5b6c02d22d7463c9015c39ba2520edcc06e60e799d166eee534c201fe129ba45df76dcc5ec980f57ebd31d0decdc6075ab890a58a43cfcc58cf7abafafc574af049fbefd28479e3441f0573c9c8105716b03969133cea6bd0469e0bc3f7016526"], 0x0, 0x29}, 0x28) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000400396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000100)='kfree\x00', r2, 0x0, 0x8000000000}, 0x18) sendmmsg$inet(r1, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r3, 0x11a, 0x3, &(0x7f0000000100)=0x304, 0x4) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) pwritev(r6, 0x0, 0x0, 0xe, 0x9) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000700)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x3, 0x610c0}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_6RD_PREFIXLEN={0x6, 0xd, 0x7}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @private=0xa010100}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x128, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0xd0, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7347878d}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5cefa7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x718d984f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ebdc36a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a630757}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x282a1aa5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59fbc6fd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x33ff1954}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c2c8bda}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x60db440c}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2618ff93}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x10e92438}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bfb1efc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe81477d}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x128}, 0x1, 0x0, 0x0, 0xc000}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000000580)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x9, &(0x7f0000000000)={0xfffffffe}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 78.200999ms ago: executing program 8 (id=3697): open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0)={0xfff9, 0x9, 0x4}, 0x8) sendto$inet6(r2, &(0x7f00000002c0)='W', 0x1, 0x4, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @private1, 0x8}, 0x1c) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000080)=0x4) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) close_range(r0, 0xffffffffffffffff, 0x0) geteuid() newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2100) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x29008, &(0x7f0000000180)={[{@resgid={'resgid', 0x3d, r4}}, {@oldalloc}, {@journal_path={'journal_path', 0x3d, './bus'}}, {@bsdgroups}, {@bsdgroups}, {@noload}], [{@smackfsfloor={'smackfsfloor', 0x3d, 'oldalloc'}}, {@dont_hash}, {@subj_user={'subj_user', 0x3d, 'noload'}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@appraise_type}]}, 0x3, 0x45f, &(0x7f0000000480)="$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") 968.329µs ago: executing program 7 (id=3698): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x30000c6, &(0x7f00000000c0), 0x2, 0x572, &(0x7f0000001600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x14a) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) fallocate(r0, 0x20, 0x0, 0x8000) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0xfeff, &(0x7f0000000100)="e0857f9f582f0300000000000000", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) timer_create(0x2, &(0x7f000049efa0)={0x0, 0x7, 0x4}, &(0x7f0000044000)) r5 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) symlinkat(&(0x7f0000000000)='.\x00', r6, &(0x7f0000000140)='./file0\x00') readlinkat(r6, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f00000002c0)=""/204, 0xcc) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffff]}, 0x0, 0x0, 0x8) timer_create(0x2, 0x0, &(0x7f00000001c0)=0x0) timer_settime(r7, 0x1, &(0x7f0000000180)={{}, {0x77359400}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) 0s ago: executing program 2 (id=3699): syz_open_procfs$namespace(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, 0x0, 0x0, 0x4008000) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='hybla\x00', 0x6) shutdown(r0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) socket$netlink(0x10, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000000), 0x1000) syz_pidfd_open(0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r2, 0x0, r3, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000380), 0x80000, &(0x7f0000000400)=ANY=[@ANYBLOB="74d861af553d00642c7201006e6f3d", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',debug=0x0000000000000004,cache=readahead,access=client,loose,loose,context=sysadm_u,\x00']) socket$igmp6(0xa, 0x3, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x200, 0x0) memfd_create(&(0x7f0000000580)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec=\x9e\xc3\xfd\x85d\x0fl5\xf3\xbe\" 6\r<\xea\x8dz\xcf6\x99\x91\xear8p\xaaR\xd5\xa6\xab#N>\x9a\xdf\xea\x009\xfbB\xc1\xd0_\xc0\'Z\xeb\xd8\xaf\xf0\'J\xe2\xff\xe5x*;(p\xf7p\xce\xbb\xa7\xfe\x04\xd0t\x81\x1a\x1b?m/\x1ex\xf8\x88^\xbaU\xb9\xa6\xab\x8d\a\xa6\"\xd9\x13\xeb\xe2\rh\x8dsx\xaa!\xd5Q\xf8\xce*\x95\x0es\xfaZ\x94t\x19\xdc\xdc\xcf\x0f\x9a\xa2O>\xb9\xfc\x01\fW\xee\xffh\xbd\xb2\xb4z\xeb\x84\x13\x13u\x8f', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES64=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): [ 298.153698][T12967] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #16: comm syz.8.3196: corrupted inode contents [ 298.165976][T12967] EXT4-fs error (device loop8): ext4_dirty_inode:6459: inode #16: comm syz.8.3196: mark_inode_dirty error [ 298.177756][T12967] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #16: comm syz.8.3196: corrupted inode contents [ 298.190691][T12967] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.3196: mark_inode_dirty error [ 298.202611][T12967] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #16: comm syz.8.3196: corrupted inode contents [ 298.214877][T12967] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 298.223732][T12967] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #16: comm syz.8.3196: corrupted inode contents [ 298.238880][T12967] EXT4-fs error (device loop8): ext4_truncate:4597: inode #16: comm syz.8.3196: mark_inode_dirty error [ 298.250387][T12967] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 298.260957][T12967] EXT4-fs (loop8): 1 truncate cleaned up [ 298.267091][T12967] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.279626][T12967] ext4 filesystem being mounted at /81/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 298.507442][T13006] FAULT_INJECTION: forcing a failure. [ 298.507442][T13006] name failslab, interval 1, probability 0, space 0, times 0 [ 298.520185][T13006] CPU: 1 UID: 0 PID: 13006 Comm: syz.5.3210 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(voluntary) [ 298.520219][T13006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 298.520234][T13006] Call Trace: [ 298.520242][T13006] [ 298.520251][T13006] __dump_stack+0x1d/0x30 [ 298.520276][T13006] dump_stack_lvl+0xe8/0x140 [ 298.520300][T13006] dump_stack+0x15/0x1b [ 298.520328][T13006] should_fail_ex+0x265/0x280 [ 298.520366][T13006] should_failslab+0x8c/0xb0 [ 298.520389][T13006] __kmalloc_noprof+0xa5/0x3e0 [ 298.520419][T13006] ? genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 298.520451][T13006] genl_family_rcv_msg_attrs_parse+0x75/0x190 [ 298.520535][T13006] ? xas_load+0x413/0x430 [ 298.520574][T13006] genl_family_rcv_msg_doit+0x48/0x1b0 [ 298.520606][T13006] ? xa_load+0xb1/0xe0 [ 298.520780][T13006] ? genl_get_cmd+0x639/0x660 [ 298.520816][T13006] genl_rcv_msg+0x422/0x460 [ 298.520846][T13006] ? __pfx_netlbl_cipsov4_list+0x10/0x10 [ 298.520928][T13006] netlink_rcv_skb+0x120/0x220 [ 298.520964][T13006] ? __pfx_genl_rcv_msg+0x10/0x10 [ 298.521000][T13006] genl_rcv+0x28/0x40 [ 298.521124][T13006] netlink_unicast+0x5a8/0x680 [ 298.521163][T13006] netlink_sendmsg+0x58b/0x6b0 [ 298.521188][T13006] ? __pfx_netlink_sendmsg+0x10/0x10 [ 298.521212][T13006] __sock_sendmsg+0x145/0x180 [ 298.521238][T13006] ____sys_sendmsg+0x31e/0x4e0 [ 298.521301][T13006] ___sys_sendmsg+0x17b/0x1d0 [ 298.521391][T13006] __x64_sys_sendmsg+0xd4/0x160 [ 298.521430][T13006] x64_sys_call+0x2999/0x2fb0 [ 298.521454][T13006] do_syscall_64+0xd2/0x200 [ 298.521471][T13006] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 298.521551][T13006] ? clear_bhb_loop+0x40/0x90 [ 298.521573][T13006] ? clear_bhb_loop+0x40/0x90 [ 298.521649][T13006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.521675][T13006] RIP: 0033:0x7f1d5906e9a9 [ 298.521693][T13006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.521715][T13006] RSP: 002b:00007f1d576cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 298.521783][T13006] RAX: ffffffffffffffda RBX: 00007f1d59295fa0 RCX: 00007f1d5906e9a9 [ 298.521803][T13006] RDX: 0000000020000060 RSI: 0000200000000080 RDI: 0000000000000004 [ 298.521819][T13006] RBP: 00007f1d576cf090 R08: 0000000000000000 R09: 0000000000000000 [ 298.521834][T13006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 298.521849][T13006] R13: 0000000000000000 R14: 00007f1d59295fa0 R15: 00007ffc743ec248 [ 298.521929][T13006] [ 299.280475][T13016] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62250 sclass=netlink_route_socket pid=13016 comm=syz.2.3211 [ 299.717078][T11490] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.784219][T13023] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3211'. [ 299.810875][T13024] netlink: 'syz.8.3216': attribute type 4 has an invalid length. [ 299.818638][T13024] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.3216'. [ 299.870981][ T29] audit: type=1326 audit(2000000024.569:8805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13017 comm="syz.5.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5906e9a9 code=0x7ffc0000 [ 299.894502][ T29] audit: type=1326 audit(2000000024.569:8806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13017 comm="syz.5.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5906e9a9 code=0x7ffc0000 [ 300.003157][ T29] audit: type=1326 audit(2000000024.609:8807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13017 comm="syz.5.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f1d5906e9a9 code=0x7ffc0000 [ 300.026600][ T29] audit: type=1326 audit(2000000024.609:8808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13017 comm="syz.5.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5906e9a9 code=0x7ffc0000 [ 300.050188][ T29] audit: type=1326 audit(2000000024.609:8809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13017 comm="syz.5.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5906e9a9 code=0x7ffc0000 [ 300.073741][ T29] audit: type=1326 audit(2000000024.609:8810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13017 comm="syz.5.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f1d5906e9a9 code=0x7ffc0000 [ 300.097253][ T29] audit: type=1326 audit(2000000024.609:8811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13017 comm="syz.5.3215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5906e9a9 code=0x7ffc0000 [ 300.384546][T13041] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3223'. [ 300.493780][T13049] loop8: detected capacity change from 0 to 512 [ 300.519249][T13053] netlink: 132 bytes leftover after parsing attributes in process `syz.7.3227'. [ 300.544769][T13049] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 300.573357][T13049] EXT4-fs (loop8): 1 truncate cleaned up [ 300.581076][T13049] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 300.625882][T13049] EXT4-fs error (device loop8): ext4_append:79: inode #2: comm syz.8.3226: Logical block already allocated [ 300.647782][T13049] EXT4-fs (loop8): Remounting filesystem read-only [ 300.684377][T13049] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 300.741271][T13049] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3226'. [ 300.785332][T11490] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.905008][T13062] loop8: detected capacity change from 0 to 1024 [ 301.013384][T13075] loop8: detected capacity change from 0 to 1024 [ 301.031026][T13075] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 301.161040][T11490] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 301.280930][T13085] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3239'. [ 301.479947][T13090] loop7: detected capacity change from 0 to 512 [ 301.501774][T13090] EXT4-fs (loop7): 1 orphan inode deleted [ 301.508137][T13090] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 301.521193][T13090] ext4 filesystem being mounted at /166/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 301.550813][T13090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.559454][T13090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.583916][T13090] random: crng reseeded on system resumption [ 302.078050][T13122] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3250'. [ 302.132207][T13129] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62250 sclass=netlink_route_socket pid=13129 comm=syz.8.3246 [ 302.151741][T13131] loop4: detected capacity change from 0 to 1024 [ 302.212071][T13136] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3246'. [ 302.244449][T13140] loop8: detected capacity change from 0 to 512 [ 302.392616][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 302.392633][ T29] audit: type=1326 audit(2000000027.089:8951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13147 comm="syz.4.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2e8ee9a9 code=0x7ffc0000 [ 302.431153][ T29] audit: type=1326 audit(2000000027.119:8952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13147 comm="syz.4.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2e8ee9a9 code=0x7ffc0000 [ 302.454878][ T29] audit: type=1326 audit(2000000027.119:8953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13147 comm="syz.4.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc2e8ee9a9 code=0x7ffc0000 [ 302.478374][ T29] audit: type=1326 audit(2000000027.119:8954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13147 comm="syz.4.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2e8ee9a9 code=0x7ffc0000 [ 302.502051][ T29] audit: type=1326 audit(2000000027.119:8955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13147 comm="syz.4.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2e8ee9a9 code=0x7ffc0000 [ 302.525709][ T29] audit: type=1326 audit(2000000027.119:8956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13147 comm="syz.4.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc2e8ee9a9 code=0x7ffc0000 [ 302.549218][ T29] audit: type=1326 audit(2000000027.119:8957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13147 comm="syz.4.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2e8ee9a9 code=0x7ffc0000 [ 302.572819][ T29] audit: type=1326 audit(2000000027.119:8958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13147 comm="syz.4.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7fdc2e8ee9a9 code=0x7ffc0000 [ 302.596478][ T29] audit: type=1326 audit(2000000027.119:8959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13147 comm="syz.4.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2e8ee9a9 code=0x7ffc0000 [ 302.620003][ T29] audit: type=1326 audit(2000000027.119:8960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13147 comm="syz.4.3258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2e8ee9a9 code=0x7ffc0000 [ 303.100084][T13168] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3263'. [ 303.165667][T13177] netlink: 132 bytes leftover after parsing attributes in process `syz.8.3266'. [ 303.294975][T13181] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62250 sclass=netlink_route_socket pid=13181 comm=syz.8.3267 [ 303.402992][T13189] loop8: detected capacity change from 0 to 1024 [ 304.743640][T13206] loop8: detected capacity change from 0 to 1024 [ 305.109502][T13206] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 305.119498][T13206] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 305.129220][T13206] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 305.141919][T13206] EXT4-fs error (device loop8): ext4_get_journal_inode:5796: inode #5: comm syz.8.3273: unexpected bad inode w/o EXT4_IGET_BAD [ 305.155369][T13206] EXT4-fs (loop8): no journal found [ 305.186166][T13206] loop8: detected capacity change from 0 to 512 [ 305.192801][T13206] EXT4-fs: Ignoring removed nobh option [ 305.212345][T13206] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #3: comm syz.8.3273: corrupted inode contents [ 305.224501][T13206] EXT4-fs error (device loop8): ext4_dirty_inode:6459: inode #3: comm syz.8.3273: mark_inode_dirty error [ 305.236726][T13206] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #3: comm syz.8.3273: corrupted inode contents [ 305.248818][T13206] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #3: comm syz.8.3273: mark_inode_dirty error [ 305.261664][T13206] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.3273: Failed to acquire dquot type 0 [ 305.273708][T13206] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #16: comm syz.8.3273: corrupted inode contents [ 305.285899][T13206] EXT4-fs error (device loop8): ext4_dirty_inode:6459: inode #16: comm syz.8.3273: mark_inode_dirty error [ 305.297796][T13206] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #16: comm syz.8.3273: corrupted inode contents [ 305.310067][T13206] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.3273: mark_inode_dirty error [ 305.321836][T13206] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #16: comm syz.8.3273: corrupted inode contents [ 305.334044][T13206] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 305.342848][T13206] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #16: comm syz.8.3273: corrupted inode contents [ 305.355006][T13206] EXT4-fs error (device loop8): ext4_truncate:4597: inode #16: comm syz.8.3273: mark_inode_dirty error [ 305.366352][T13206] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 305.376603][T13206] EXT4-fs (loop8): 1 truncate cleaned up [ 305.383517][T13206] ext4 filesystem being mounted at /104/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 305.899504][T13231] loop4: detected capacity change from 0 to 1024 [ 305.950443][T13234] IPVS: set_ctl: invalid protocol: 1 224.0.0.2:0 [ 306.097830][T13226] lo speed is unknown, defaulting to 1000 [ 306.209429][T13253] loop7: detected capacity change from 0 to 8192 [ 306.239699][T13255] loop4: detected capacity change from 0 to 512 [ 306.263697][T13226] chnl_net:caif_netlink_parms(): no params data found [ 306.342851][T13255] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 306.366794][T13255] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 306.375619][T13255] EXT4-fs error (device loop4): __ext4_remount:6736: comm syz.4.3284: Abort forced by user [ 306.386144][T13255] EXT4-fs (loop4): Remounting filesystem read-only [ 306.392676][T13255] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 306.431503][T13270] __nla_validate_parse: 1 callbacks suppressed [ 306.431521][T13270] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3287'. [ 306.465173][T13273] loop7: detected capacity change from 0 to 128 [ 306.472453][T13226] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.479544][T13226] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.488921][T13226] bridge_slave_0: entered allmulticast mode [ 306.495769][T13226] bridge_slave_0: entered promiscuous mode [ 306.503074][T13226] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.510372][T13226] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.518550][T13226] bridge_slave_1: entered allmulticast mode [ 306.525906][T13226] bridge_slave_1: entered promiscuous mode [ 306.554497][T13276] loop7: detected capacity change from 0 to 1024 [ 306.573584][T13226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.584580][T13226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.629269][T13226] team0: Port device team_slave_0 added [ 306.642417][T13226] team0: Port device team_slave_1 added [ 306.678118][T13226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.685111][T13226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.711080][T13226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.724209][T13226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.731272][T13226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.757330][T13226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.791271][T13226] hsr_slave_0: entered promiscuous mode [ 306.791463][T13286] loop4: detected capacity change from 0 to 164 [ 306.797340][T13226] hsr_slave_1: entered promiscuous mode [ 306.808938][T13286] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 306.809386][T13226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.820292][T13286] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 306.824785][T13226] Cannot create hsr debugfs directory [ 306.833707][T13286] Symlink component flag not implemented [ 306.843985][T13286] Symlink component flag not implemented [ 306.844223][T13284] loop8: detected capacity change from 0 to 512 [ 306.849790][T13286] Symlink component flag not implemented (7) [ 306.861959][T13286] Symlink component flag not implemented (116) [ 306.862861][T13284] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 306.887314][T13284] EXT4-fs (loop8): 1 truncate cleaned up [ 307.010732][T13301] loop4: detected capacity change from 0 to 1024 [ 307.017735][T13301] EXT4-fs: Ignoring removed nobh option [ 307.023368][T13301] EXT4-fs: Ignoring removed bh option [ 307.043035][T13301] netlink: 'syz.4.3296': attribute type 8 has an invalid length. [ 307.104461][T13309] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3299'. [ 307.115664][ T1036] IPVS: starting estimator thread 0... [ 307.122476][T13309] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3299'. [ 307.133115][T13309] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3299'. [ 307.216622][T13226] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 307.223684][T13310] IPVS: using max 2208 ests per chain, 110400 per kthread [ 307.233765][T13226] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 307.244318][T13226] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 307.253902][T13226] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 307.295064][T13226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.316472][T13226] 8021q: adding VLAN 0 to HW filter on device team0 [ 307.344782][T13226] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 307.355183][T13226] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 307.377839][T13328] loop8: detected capacity change from 0 to 1024 [ 307.411085][ T29] kauditd_printk_skb: 137 callbacks suppressed [ 307.411099][ T29] audit: type=1326 audit(2000000031.999:9096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13315 comm="syz.4.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2e8ee9a9 code=0x7ffc0000 [ 307.440888][ T29] audit: type=1326 audit(2000000031.999:9097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13315 comm="syz.4.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2e8ee9a9 code=0x7ffc0000 [ 307.464369][ T29] audit: type=1326 audit(2000000031.999:9098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13315 comm="syz.4.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc2e8ee9a9 code=0x7ffc0000 [ 307.487790][ T29] audit: type=1326 audit(2000000031.999:9099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13315 comm="syz.4.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2e8ee9a9 code=0x7ffc0000 [ 307.511463][ T29] audit: type=1326 audit(2000000031.999:9100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13315 comm="syz.4.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2e8ee9a9 code=0x7ffc0000 [ 307.535254][ T29] audit: type=1326 audit(2000000031.999:9101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13315 comm="syz.4.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc2e8ee9a9 code=0x7ffc0000 [ 307.559015][ T29] audit: type=1326 audit(2000000031.999:9102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13315 comm="syz.4.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2e8ee9a9 code=0x7ffc0000 [ 307.582557][ T29] audit: type=1326 audit(2000000031.999:9103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13315 comm="syz.4.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2e8ee9a9 code=0x7ffc0000 [ 307.606088][ T29] audit: type=1326 audit(2000000031.999:9104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13315 comm="syz.4.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7fdc2e8ee9a9 code=0x7ffc0000 [ 307.629692][ T29] audit: type=1326 audit(2000000031.999:9105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13315 comm="syz.4.3302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2e8ee9a9 code=0x7ffc0000 [ 307.692432][T11065] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.699527][T11065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.708267][T13328] EXT4-fs (loop8): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 307.718029][T13328] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 307.727748][T13328] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 307.740624][T13328] EXT4-fs error (device loop8): ext4_get_journal_inode:5796: inode #5: comm syz.8.3301: unexpected bad inode w/o EXT4_IGET_BAD [ 307.754546][T13328] EXT4-fs (loop8): no journal found [ 307.812460][T11065] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.819555][T11065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.948981][T13226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.097247][T13344] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3308'. [ 308.189976][T13226] veth0_vlan: entered promiscuous mode [ 308.200753][T13226] veth1_vlan: entered promiscuous mode [ 308.251280][T13226] veth0_macvtap: entered promiscuous mode [ 308.268750][T13328] loop8: detected capacity change from 0 to 512 [ 308.275377][T13328] EXT4-fs: Ignoring removed nobh option [ 308.292141][T13328] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #3: comm syz.8.3301: corrupted inode contents [ 308.304569][T13328] EXT4-fs error (device loop8): ext4_dirty_inode:6459: inode #3: comm syz.8.3301: mark_inode_dirty error [ 308.316802][T13328] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #3: comm syz.8.3301: corrupted inode contents [ 308.329149][T13328] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #3: comm syz.8.3301: mark_inode_dirty error [ 308.342251][T13328] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.3301: Failed to acquire dquot type 0 [ 308.354338][T13328] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #16: comm syz.8.3301: corrupted inode contents [ 308.366663][T13328] EXT4-fs error (device loop8): ext4_dirty_inode:6459: inode #16: comm syz.8.3301: mark_inode_dirty error [ 308.378377][T13328] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #16: comm syz.8.3301: corrupted inode contents [ 308.391289][T13328] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.3301: mark_inode_dirty error [ 308.402934][T13328] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #16: comm syz.8.3301: corrupted inode contents [ 308.415246][T13328] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 308.422015][T13226] veth1_macvtap: entered promiscuous mode [ 308.431624][T13328] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #16: comm syz.8.3301: corrupted inode contents [ 308.437222][T13226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.451376][T13328] EXT4-fs error (device loop8): ext4_truncate:4597: inode #16: comm syz.8.3301: mark_inode_dirty error [ 308.462896][T13328] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 308.472619][T13328] EXT4-fs (loop8): 1 truncate cleaned up [ 308.479216][T13328] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.484229][T13226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.529884][T13226] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.538735][T13226] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.547508][T13226] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.556279][T13226] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.681624][T13358] loop4: detected capacity change from 0 to 1024 [ 308.698348][T13358] EXT4-fs: Ignoring removed orlov option [ 308.708051][T13358] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 308.720759][T13360] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13360 comm=syz.2.3280 [ 308.733336][T13360] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13360 comm=syz.2.3280 [ 308.746960][T13358] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 308.758465][T13358] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0000] [ 308.779455][T13358] System zones: 0-1, 3-12 [ 308.794936][T13358] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #3: block 1: comm syz.4.3310: lblock 1 mapped to illegal pblock 1 (length 1) [ 308.848852][T13358] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3310: Failed to acquire dquot type 0 [ 308.880234][T13358] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.3310: Freeing blocks not in datazone - block = 0, count = 4096 [ 308.898251][T13374] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3312'. [ 308.929984][T13358] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.3310: Invalid inode bitmap blk 0 in block_group 0 [ 308.943150][T13358] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 308.952371][T13358] EXT4-fs (loop4): 1 orphan inode deleted [ 309.048571][T11065] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:34: lblock 1 mapped to illegal pblock 1 (length 1) [ 309.067142][T11065] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:34: Failed to release dquot type 0 [ 309.171346][T13387] FAULT_INJECTION: forcing a failure. [ 309.171346][T13387] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.184448][T13387] CPU: 1 UID: 0 PID: 13387 Comm: syz.4.3315 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(voluntary) [ 309.184478][T13387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 309.184529][T13387] Call Trace: [ 309.184540][T13387] [ 309.184545][T13387] __dump_stack+0x1d/0x30 [ 309.184560][T13387] dump_stack_lvl+0xe8/0x140 [ 309.184631][T13387] dump_stack+0x15/0x1b [ 309.184642][T13387] should_fail_ex+0x265/0x280 [ 309.184661][T13387] should_fail+0xb/0x20 [ 309.184677][T13387] should_fail_usercopy+0x1a/0x20 [ 309.184730][T13387] _copy_from_user+0x1c/0xb0 [ 309.184782][T13387] ____sys_sendmsg+0x1c5/0x4e0 [ 309.184805][T13387] ___sys_sendmsg+0x17b/0x1d0 [ 309.184832][T13387] __x64_sys_sendmsg+0xd4/0x160 [ 309.184900][T13387] x64_sys_call+0x2999/0x2fb0 [ 309.184976][T13387] do_syscall_64+0xd2/0x200 [ 309.184996][T13387] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 309.185028][T13387] ? clear_bhb_loop+0x40/0x90 [ 309.185042][T13387] ? clear_bhb_loop+0x40/0x90 [ 309.185071][T13387] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.185122][T13387] RIP: 0033:0x7fdc2e8ee9a9 [ 309.185131][T13387] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.185187][T13387] RSP: 002b:00007fdc2cf2e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.185199][T13387] RAX: ffffffffffffffda RBX: 00007fdc2eb16080 RCX: 00007fdc2e8ee9a9 [ 309.185208][T13387] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000008 [ 309.185216][T13387] RBP: 00007fdc2cf2e090 R08: 0000000000000000 R09: 0000000000000000 [ 309.185224][T13387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 309.185231][T13387] R13: 0000000000000000 R14: 00007fdc2eb16080 R15: 00007fff30870618 [ 309.185243][T13387] [ 309.221988][T13390] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62250 sclass=netlink_route_socket pid=13390 comm=syz.8.3316 [ 309.275685][T13392] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62250 sclass=netlink_route_socket pid=13392 comm=syz.5.3318 [ 309.386023][T13395] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3316'. [ 309.407308][T13392] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3318'. [ 309.539847][T13406] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62250 sclass=netlink_route_socket pid=13406 comm=syz.8.3319 [ 309.647213][T13410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.655721][T13410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.664869][T13410] random: crng reseeded on system resumption [ 309.683798][T13412] loop7: detected capacity change from 0 to 512 [ 309.690794][T13412] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 309.702134][T13412] EXT4-fs (loop7): 1 truncate cleaned up [ 309.806477][T13416] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 310.091141][T13436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62250 sclass=netlink_route_socket pid=13436 comm=syz.7.3331 [ 310.092946][T13437] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3334'. [ 310.114590][T13438] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62250 sclass=netlink_route_socket pid=13438 comm=syz.2.3333 [ 310.120311][T13433] netlink: 'syz.4.3334': attribute type 8 has an invalid length. [ 310.157783][T13440] FAULT_INJECTION: forcing a failure. [ 310.157783][T13440] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 310.158138][T13441] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3331'. [ 310.170903][T13440] CPU: 1 UID: 0 PID: 13440 Comm: syz.4.3335 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(voluntary) [ 310.171018][T13440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 310.171033][T13440] Call Trace: [ 310.171040][T13440] [ 310.171048][T13440] __dump_stack+0x1d/0x30 [ 310.171072][T13440] dump_stack_lvl+0xe8/0x140 [ 310.171094][T13440] dump_stack+0x15/0x1b [ 310.171113][T13440] should_fail_ex+0x265/0x280 [ 310.171195][T13440] should_fail+0xb/0x20 [ 310.171226][T13440] should_fail_usercopy+0x1a/0x20 [ 310.171321][T13440] _copy_from_iter+0xcf/0xe40 [ 310.171383][T13440] ? __build_skb_around+0x1a0/0x200 [ 310.171457][T13440] ? __alloc_skb+0x223/0x320 [ 310.171492][T13440] netlink_sendmsg+0x471/0x6b0 [ 310.171516][T13440] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.171538][T13440] __sock_sendmsg+0x145/0x180 [ 310.171604][T13440] ____sys_sendmsg+0x31e/0x4e0 [ 310.171644][T13440] ___sys_sendmsg+0x17b/0x1d0 [ 310.171695][T13440] __x64_sys_sendmsg+0xd4/0x160 [ 310.171789][T13440] x64_sys_call+0x2999/0x2fb0 [ 310.171945][T13440] do_syscall_64+0xd2/0x200 [ 310.172011][T13440] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 310.172042][T13440] ? clear_bhb_loop+0x40/0x90 [ 310.172066][T13440] ? clear_bhb_loop+0x40/0x90 [ 310.172104][T13440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.172128][T13440] RIP: 0033:0x7fdc2e8ee9a9 [ 310.172145][T13440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.172166][T13440] RSP: 002b:00007fdc2cf4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.172187][T13440] RAX: ffffffffffffffda RBX: 00007fdc2eb15fa0 RCX: 00007fdc2e8ee9a9 [ 310.172212][T13440] RDX: 0000000004000000 RSI: 0000200000000280 RDI: 000000000000000a [ 310.172227][T13440] RBP: 00007fdc2cf4f090 R08: 0000000000000000 R09: 0000000000000000 [ 310.172241][T13440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 310.172254][T13440] R13: 0000000000000000 R14: 00007fdc2eb15fa0 R15: 00007fff30870618 [ 310.172275][T13440] [ 310.219579][T13444] lo speed is unknown, defaulting to 1000 [ 310.301152][T13448] loop4: detected capacity change from 0 to 512 [ 310.309831][T13449] loop9: detected capacity change from 0 to 7 [ 310.311120][T13448] ext4: Bad value for 'journal_dev' [ 310.315212][T13449] buffer_io_error: 1239 callbacks suppressed [ 310.315226][T13449] Buffer I/O error on dev loop9, logical block 0, async page read [ 310.340511][T13450] loop7: detected capacity change from 0 to 512 [ 310.348326][T13449] Buffer I/O error on dev loop9, logical block 0, async page read [ 310.379131][T13450] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 310.383239][T13449] loop9: unable to read partition table [ 310.388209][T13449] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 310.388209][T13449] ) failed (rc=-5) [ 310.411509][T13450] EXT4-fs (loop7): 1 truncate cleaned up [ 310.473282][T13450] EXT4-fs mount: 23 callbacks suppressed [ 310.473295][T13450] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 311.128069][T10115] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 311.147903][T13459] loop7: detected capacity change from 0 to 128 [ 311.485605][T13468] FAULT_INJECTION: forcing a failure. [ 311.485605][T13468] name failslab, interval 1, probability 0, space 0, times 0 [ 311.498267][T13468] CPU: 1 UID: 0 PID: 13468 Comm: syz.2.3344 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(voluntary) [ 311.498296][T13468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 311.498311][T13468] Call Trace: [ 311.498318][T13468] [ 311.498326][T13468] __dump_stack+0x1d/0x30 [ 311.498372][T13468] dump_stack_lvl+0xe8/0x140 [ 311.498393][T13468] dump_stack+0x15/0x1b [ 311.498410][T13468] should_fail_ex+0x265/0x280 [ 311.498448][T13468] should_failslab+0x8c/0xb0 [ 311.498476][T13468] kmem_cache_alloc_node_noprof+0x57/0x320 [ 311.498515][T13468] ? __alloc_skb+0x101/0x320 [ 311.498550][T13468] __alloc_skb+0x101/0x320 [ 311.498604][T13468] netlink_alloc_large_skb+0xba/0xf0 [ 311.498640][T13468] netlink_sendmsg+0x3cf/0x6b0 [ 311.498661][T13468] ? __pfx_netlink_sendmsg+0x10/0x10 [ 311.498680][T13468] __sock_sendmsg+0x145/0x180 [ 311.498754][T13468] ____sys_sendmsg+0x31e/0x4e0 [ 311.498838][T13468] ___sys_sendmsg+0x17b/0x1d0 [ 311.498959][T13468] __x64_sys_sendmsg+0xd4/0x160 [ 311.499004][T13468] x64_sys_call+0x2999/0x2fb0 [ 311.499041][T13468] do_syscall_64+0xd2/0x200 [ 311.499062][T13468] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 311.499090][T13468] ? clear_bhb_loop+0x40/0x90 [ 311.499111][T13468] ? clear_bhb_loop+0x40/0x90 [ 311.499228][T13468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.499253][T13468] RIP: 0033:0x7f46850be9a9 [ 311.499267][T13468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.499289][T13468] RSP: 002b:00007f468371f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 311.499310][T13468] RAX: ffffffffffffffda RBX: 00007f46852e5fa0 RCX: 00007f46850be9a9 [ 311.499325][T13468] RDX: 0000000000040004 RSI: 0000200000000280 RDI: 0000000000000008 [ 311.499341][T13468] RBP: 00007f468371f090 R08: 0000000000000000 R09: 0000000000000000 [ 311.499360][T13468] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 311.499372][T13468] R13: 0000000000000000 R14: 00007f46852e5fa0 R15: 00007ffdfc3c66a8 [ 311.499457][T13468] [ 312.270048][T13476] xt_CT: You must specify a L4 protocol and not use inversions on it [ 312.413700][T13481] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62250 sclass=netlink_route_socket pid=13481 comm=syz.7.3348 [ 312.482168][T13488] __nla_validate_parse: 1 callbacks suppressed [ 312.482184][T13488] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3348'. [ 312.517207][T13485] loop4: detected capacity change from 0 to 1024 [ 312.540949][T13485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.541155][T13487] loop8: detected capacity change from 0 to 512 [ 312.561699][T13487] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 312.572858][ T29] kauditd_printk_skb: 300 callbacks suppressed [ 312.572871][ T29] audit: type=1400 audit(2000000037.269:9399): avc: denied { execute } for pid=13484 comm="syz.4.3350" name="file2" dev="loop4" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 312.605177][T13487] EXT4-fs (loop8): 1 truncate cleaned up [ 312.611321][T13487] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.654557][T12141] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.692759][ T29] audit: type=1326 audit(2000000037.389:9400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13500 comm="syz.7.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4f9de9a9 code=0x7ffc0000 [ 312.716524][ T29] audit: type=1326 audit(2000000037.389:9401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13500 comm="syz.7.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4f9de9a9 code=0x7ffc0000 [ 312.743642][T11490] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.744587][ T29] audit: type=1326 audit(2000000037.439:9402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13500 comm="syz.7.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fed4f9de9a9 code=0x7ffc0000 [ 312.776123][ T29] audit: type=1326 audit(2000000037.439:9403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13500 comm="syz.7.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4f9de9a9 code=0x7ffc0000 [ 312.799732][ T29] audit: type=1326 audit(2000000037.439:9404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13500 comm="syz.7.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4f9de9a9 code=0x7ffc0000 [ 312.823344][ T29] audit: type=1326 audit(2000000037.439:9405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13500 comm="syz.7.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fed4f9de9a9 code=0x7ffc0000 [ 312.847014][ T29] audit: type=1326 audit(2000000037.439:9406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13500 comm="syz.7.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4f9de9a9 code=0x7ffc0000 [ 312.870856][ T29] audit: type=1326 audit(2000000037.439:9407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13500 comm="syz.7.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fed4f9de9a9 code=0x7ffc0000 [ 312.894463][ T29] audit: type=1326 audit(2000000037.439:9408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13500 comm="syz.7.3355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7fed4f9de9a9 code=0x7ffc0000 [ 312.959095][T13517] FAULT_INJECTION: forcing a failure. [ 312.959095][T13517] name failslab, interval 1, probability 0, space 0, times 0 [ 312.971843][T13517] CPU: 1 UID: 0 PID: 13517 Comm: syz.2.3360 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(voluntary) [ 312.971872][T13517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 312.971885][T13517] Call Trace: [ 312.971891][T13517] [ 312.971899][T13517] __dump_stack+0x1d/0x30 [ 312.971937][T13517] dump_stack_lvl+0xe8/0x140 [ 312.971974][T13517] dump_stack+0x15/0x1b [ 312.971994][T13517] should_fail_ex+0x265/0x280 [ 312.972030][T13517] should_failslab+0x8c/0xb0 [ 312.972114][T13517] __kmalloc_noprof+0xa5/0x3e0 [ 312.972141][T13517] ? kobject_get_path+0x92/0x1c0 [ 312.972168][T13517] kobject_get_path+0x92/0x1c0 [ 312.972218][T13517] input_devices_seq_show+0x36/0x470 [ 312.972252][T13517] seq_read_iter+0x62a/0x940 [ 312.972286][T13517] seq_read+0x1f7/0x240 [ 312.972319][T13517] ? __pfx_seq_read+0x10/0x10 [ 312.972353][T13517] proc_reg_read+0x128/0x1c0 [ 312.972380][T13517] ? __pfx_proc_reg_read+0x10/0x10 [ 312.972464][T13517] vfs_readv+0x3f8/0x690 [ 312.972498][T13517] __x64_sys_preadv+0xfd/0x1c0 [ 312.972522][T13517] x64_sys_call+0x1503/0x2fb0 [ 312.972680][T13517] do_syscall_64+0xd2/0x200 [ 312.972701][T13517] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 312.972728][T13517] ? clear_bhb_loop+0x40/0x90 [ 312.972751][T13517] ? clear_bhb_loop+0x40/0x90 [ 312.972774][T13517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.972813][T13517] RIP: 0033:0x7f46850be9a9 [ 312.972828][T13517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 312.972848][T13517] RSP: 002b:00007f468371f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 312.972990][T13517] RAX: ffffffffffffffda RBX: 00007f46852e5fa0 RCX: 00007f46850be9a9 [ 312.973006][T13517] RDX: 0000000000000001 RSI: 00002000000015c0 RDI: 0000000000000005 [ 312.973021][T13517] RBP: 00007f468371f090 R08: 000000000000d215 R09: 0000000000000000 [ 312.973035][T13517] R10: 00000000000000f0 R11: 0000000000000246 R12: 0000000000000001 [ 312.973049][T13517] R13: 0000000000000000 R14: 00007f46852e5fa0 R15: 00007ffdfc3c66a8 [ 312.973068][T13517] [ 313.069599][T13529] loop8: detected capacity change from 0 to 128 [ 313.078922][T13530] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62250 sclass=netlink_route_socket pid=13530 comm=syz.7.3361 [ 313.177809][T13536] loop4: detected capacity change from 0 to 512 [ 313.241001][T13536] EXT4-fs (loop4): 1 orphan inode deleted [ 313.247232][T13536] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.260158][ T2254] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 313.272773][T13536] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 313.286213][T13534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.291423][T13542] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3369'. [ 313.296446][T13534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.303816][ T1036] IPVS: starting estimator thread 0... [ 313.314299][T13534] random: crng reseeded on system resumption [ 313.318706][T13542] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3369'. [ 313.333313][T13542] netlink: 68 bytes leftover after parsing attributes in process `syz.8.3369'. [ 313.393701][T13545] loop8: detected capacity change from 0 to 512 [ 313.404931][T13545] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 313.409290][T13543] IPVS: using max 2832 ests per chain, 141600 per kthread [ 313.419051][T13545] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00dc018, mo2=0002] [ 313.432096][T13545] System zones: 1-12 [ 313.438382][T13545] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3370: bg 0: block 337: padding at end of block bitmap is not set [ 313.457484][T13545] EXT4-fs (loop8): 1 truncate cleaned up [ 313.467713][T13545] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 313.494732][T11490] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 313.645033][T13558] loop8: detected capacity change from 0 to 164 [ 314.507873][T13574] loop8: detected capacity change from 0 to 512 [ 314.521904][T13574] EXT4-fs (loop8): 1 orphan inode deleted [ 314.528137][T13574] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.540723][T11065] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:34: Failed to release dquot type 1 [ 314.552599][T13574] ext4 filesystem being mounted at /118/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 314.568525][T13574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.577265][T13574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.586480][T13574] random: crng reseeded on system resumption [ 314.762326][T13591] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3384'. [ 315.030920][T13601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62250 sclass=netlink_route_socket pid=13601 comm=syz.2.3386 [ 315.096462][T13602] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3386'. [ 315.596796][T13610] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3390'. [ 315.607440][T13610] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3390'. [ 315.617604][T13610] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3390'. [ 316.135178][T12141] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.159809][T13630] loop4: detected capacity change from 0 to 1024 [ 316.171320][T13630] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 316.273090][T13640] loop7: detected capacity change from 0 to 1024 [ 316.280251][T13640] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 316.292583][T13640] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.3400: Invalid block bitmap block 0 in block_group 0 [ 316.306231][T13640] EXT4-fs (loop7): Remounting filesystem read-only [ 316.313219][T13640] EXT4-fs (loop7): 1 orphan inode deleted [ 316.319602][T13640] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.997333][T12141] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.181443][T13654] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3404'. [ 317.292057][T13656] loop4: detected capacity change from 0 to 512 [ 317.298794][T13656] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 317.310230][T13656] EXT4-fs (loop4): 1 truncate cleaned up [ 317.311767][T13658] binfmt_misc: register: failed to install interpreter file ./file2 [ 317.316398][T13656] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.354839][T13663] ref_ctr increment failed for inode: 0xc4 offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88814fb9a100 [ 317.420021][T12141] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.438300][T13669] loop4: detected capacity change from 0 to 128 [ 317.450575][T13662] uprobe: syz.2.3407:13662 failed to unregister, leaking uprobe [ 317.457595][T13669] FAULT_INJECTION: forcing a failure. [ 317.457595][T13669] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 317.471444][T13669] CPU: 1 UID: 0 PID: 13669 Comm: syz.4.3409 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(voluntary) [ 317.471481][T13669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 317.471494][T13669] Call Trace: [ 317.471526][T13669] [ 317.471535][T13669] __dump_stack+0x1d/0x30 [ 317.471560][T13669] dump_stack_lvl+0xe8/0x140 [ 317.471579][T13669] dump_stack+0x15/0x1b [ 317.471636][T13669] should_fail_ex+0x265/0x280 [ 317.471672][T13669] should_fail_alloc_page+0xf2/0x100 [ 317.471700][T13669] alloc_pages_bulk_noprof+0xef/0x540 [ 317.471738][T13669] copy_splice_read+0xf3/0x5f0 [ 317.471777][T13669] ? __pfx_filemap_splice_read+0x10/0x10 [ 317.471830][T13669] splice_direct_to_actor+0x290/0x680 [ 317.471950][T13669] ? __pfx_direct_splice_actor+0x10/0x10 [ 317.471992][T13669] do_splice_direct+0xda/0x150 [ 317.472085][T13669] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 317.472124][T13669] do_sendfile+0x380/0x650 [ 317.472156][T13669] __x64_sys_sendfile64+0x105/0x150 [ 317.472184][T13669] x64_sys_call+0xb39/0x2fb0 [ 317.472219][T13669] do_syscall_64+0xd2/0x200 [ 317.472237][T13669] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 317.472268][T13669] ? clear_bhb_loop+0x40/0x90 [ 317.472365][T13669] ? clear_bhb_loop+0x40/0x90 [ 317.472392][T13669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.472417][T13669] RIP: 0033:0x7fdc2e8ee9a9 [ 317.472435][T13669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.472509][T13669] RSP: 002b:00007fdc2cf4f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 317.472599][T13669] RAX: ffffffffffffffda RBX: 00007fdc2eb15fa0 RCX: 00007fdc2e8ee9a9 [ 317.472615][T13669] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000007 [ 317.472631][T13669] RBP: 00007fdc2cf4f090 R08: 0000000000000000 R09: 0000000000000000 [ 317.472645][T13669] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 317.472657][T13669] R13: 0000000000000000 R14: 00007fdc2eb15fa0 R15: 00007fff30870618 [ 317.472676][T13669] [ 317.696981][T11490] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.728633][T13672] netlink: 'syz.8.3410': attribute type 3 has an invalid length. [ 317.760911][ T29] kauditd_printk_skb: 229 callbacks suppressed [ 317.760924][ T29] audit: type=1400 audit(2000000042.459:9632): avc: denied { write } for pid=13671 comm="syz.8.3410" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 317.787732][ T29] audit: type=1326 audit(2000000042.459:9633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13679 comm="syz.4.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2e8ee9a9 code=0x7ffc0000 [ 317.787768][ T29] audit: type=1326 audit(2000000042.459:9634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13679 comm="syz.4.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc2e8ee9a9 code=0x7ffc0000 [ 317.787800][ T29] audit: type=1326 audit(2000000042.459:9635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13679 comm="syz.4.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2e8ee9a9 code=0x7ffc0000 [ 317.787852][ T29] audit: type=1326 audit(2000000042.459:9636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13679 comm="syz.4.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc2e8ee9a9 code=0x7ffc0000 [ 317.787884][ T29] audit: type=1326 audit(2000000042.459:9637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13679 comm="syz.4.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2e8ee9a9 code=0x7ffc0000 [ 317.787912][ T29] audit: type=1326 audit(2000000042.459:9638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13679 comm="syz.4.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=303 compat=0 ip=0x7fdc2e8ee9a9 code=0x7ffc0000 [ 317.929402][ T29] audit: type=1326 audit(2000000042.459:9639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13679 comm="syz.4.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2e8ee9a9 code=0x7ffc0000 [ 317.952959][ T29] audit: type=1326 audit(2000000042.459:9640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13679 comm="syz.4.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7fdc2e8ee9a9 code=0x7ffc0000 [ 317.976561][ T29] audit: type=1326 audit(2000000042.459:9641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13679 comm="syz.4.3414" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2e8ee9a9 code=0x7ffc0000 [ 318.011627][T13684] loop8: detected capacity change from 0 to 512 [ 318.031188][T13684] EXT4-fs (loop8): 1 orphan inode deleted [ 318.037447][T13684] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 318.050534][ T2254] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:6: Failed to release dquot type 1 [ 318.088882][T13684] ext4 filesystem being mounted at /120/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 318.113041][T13688] binfmt_misc: register: failed to install interpreter file ./file2 [ 318.136449][T13684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.145087][T13684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.154178][T13684] random: crng reseeded on system resumption [ 319.297806][T10115] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.392719][T13711] FAULT_INJECTION: forcing a failure. [ 319.392719][T13711] name failslab, interval 1, probability 0, space 0, times 0 [ 319.392750][T13711] CPU: 1 UID: 0 PID: 13711 Comm: syz.7.3423 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(voluntary) [ 319.392818][T13711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 319.392899][T13711] Call Trace: [ 319.392906][T13711] [ 319.392913][T13711] __dump_stack+0x1d/0x30 [ 319.392934][T13711] dump_stack_lvl+0xe8/0x140 [ 319.392954][T13711] dump_stack+0x15/0x1b [ 319.392990][T13711] should_fail_ex+0x265/0x280 [ 319.393106][T13711] ? con_set_unimap+0x4af/0x6f0 [ 319.393134][T13711] should_failslab+0x8c/0xb0 [ 319.393161][T13711] __kmalloc_cache_noprof+0x4c/0x320 [ 319.393189][T13711] ? down+0x48/0x60 [ 319.393278][T13711] con_set_unimap+0x4af/0x6f0 [ 319.393309][T13711] vt_ioctl+0xfbb/0x1880 [ 319.393340][T13711] ? tty_jobctrl_ioctl+0x29e/0x810 [ 319.393409][T13711] tty_ioctl+0x7db/0xb80 [ 319.393443][T13711] ? __pfx_tty_ioctl+0x10/0x10 [ 319.393547][T13711] __se_sys_ioctl+0xce/0x140 [ 319.393604][T13711] __x64_sys_ioctl+0x43/0x50 [ 319.393635][T13711] x64_sys_call+0x19a8/0x2fb0 [ 319.393758][T13711] do_syscall_64+0xd2/0x200 [ 319.393776][T13711] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 319.393866][T13711] ? clear_bhb_loop+0x40/0x90 [ 319.393888][T13711] ? clear_bhb_loop+0x40/0x90 [ 319.393911][T13711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.393938][T13711] RIP: 0033:0x7fed4f9de9a9 [ 319.394016][T13711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.394038][T13711] RSP: 002b:00007fed4e047038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.394059][T13711] RAX: ffffffffffffffda RBX: 00007fed4fc05fa0 RCX: 00007fed4f9de9a9 [ 319.394075][T13711] RDX: 00002000000005c0 RSI: 0000000000004b67 RDI: 0000000000000006 [ 319.394090][T13711] RBP: 00007fed4e047090 R08: 0000000000000000 R09: 0000000000000000 [ 319.394128][T13711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.394140][T13711] R13: 0000000000000000 R14: 00007fed4fc05fa0 R15: 00007ffdd2b53478 [ 319.394160][T13711] [ 320.019550][T13718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3425'. [ 320.043332][T13718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3425'. [ 320.133718][T13731] loop7: detected capacity change from 0 to 512 [ 320.150005][T13731] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 320.216937][T13731] EXT4-fs (loop7): 1 truncate cleaned up [ 320.223176][T13731] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 320.349830][T13743] loop4: detected capacity change from 0 to 1024 [ 320.357390][T13743] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 320.367148][T13743] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 320.376823][T13743] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 320.388535][T13743] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: inode #5: comm syz.4.3431: unexpected bad inode w/o EXT4_IGET_BAD [ 320.401910][T13743] EXT4-fs (loop4): no journal found [ 320.423541][T13743] loop4: detected capacity change from 0 to 512 [ 320.430213][T13743] EXT4-fs: Ignoring removed nobh option [ 320.471103][T13743] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #3: comm syz.4.3431: corrupted inode contents [ 320.483730][T13743] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #3: comm syz.4.3431: mark_inode_dirty error [ 320.498436][T13743] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #3: comm syz.4.3431: corrupted inode contents [ 320.510931][T13743] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.3431: mark_inode_dirty error [ 320.522827][T13743] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3431: Failed to acquire dquot type 0 [ 320.534885][T13743] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3431: corrupted inode contents [ 320.548241][T13743] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #16: comm syz.4.3431: mark_inode_dirty error [ 320.561224][T13743] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3431: corrupted inode contents [ 320.573462][T13743] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.3431: mark_inode_dirty error [ 320.585128][T13743] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3431: corrupted inode contents [ 320.597230][T13743] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 320.606189][T13743] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3431: corrupted inode contents [ 320.618311][T13743] EXT4-fs error (device loop4): ext4_truncate:4597: inode #16: comm syz.4.3431: mark_inode_dirty error [ 320.629775][T13743] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 320.639226][T13743] EXT4-fs (loop4): 1 truncate cleaned up [ 320.645701][T13743] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 320.658307][T13743] ext4 filesystem being mounted at /97/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 320.859984][T13752] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3436'. [ 321.239222][T11490] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.250635][T10115] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.316574][T13754] loop8: detected capacity change from 0 to 1024 [ 321.338073][T13754] EXT4-fs: Ignoring removed orlov option [ 321.351428][T13754] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 321.370193][T13754] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 321.393178][T13754] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0000] [ 321.412129][T13760] loop7: detected capacity change from 0 to 512 [ 321.420582][T13754] System zones: 0-1, 3-12 [ 321.429008][T13760] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 321.442312][T13754] EXT4-fs error (device loop8): ext4_map_blocks:816: inode #3: block 1: comm syz.8.3438: lblock 1 mapped to illegal pblock 1 (length 1) [ 321.468800][T13760] EXT4-fs (loop7): 1 truncate cleaned up [ 321.475764][T13754] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.3438: Failed to acquire dquot type 0 [ 321.497734][T13760] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.510505][T13754] EXT4-fs error (device loop8): ext4_free_blocks:6587: comm syz.8.3438: Freeing blocks not in datazone - block = 0, count = 4096 [ 321.548923][T13754] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.3438: Invalid inode bitmap blk 0 in block_group 0 [ 321.563383][T10951] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 321.602996][T13754] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 321.622469][T10951] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:8: Failed to release dquot type 0 [ 321.659536][T13754] EXT4-fs (loop8): 1 orphan inode deleted [ 321.679938][T13754] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 321.734730][T13754] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.038247][T12141] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.086009][T13775] loop8: detected capacity change from 0 to 1024 [ 322.104880][T13775] EXT4-fs: Ignoring removed orlov option [ 322.115989][T13775] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 322.135195][T13775] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 322.159433][T13775] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0000] [ 322.188091][T13775] System zones: 0-1, 3-12 [ 322.203073][T10115] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.213567][T13775] EXT4-fs error (device loop8): ext4_map_blocks:816: inode #3: block 1: comm syz.8.3445: lblock 1 mapped to illegal pblock 1 (length 1) [ 322.223611][T13781] loop7: detected capacity change from 0 to 1024 [ 322.239567][T13775] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.3445: Failed to acquire dquot type 0 [ 322.253317][T13775] EXT4-fs error (device loop8): ext4_free_blocks:6587: comm syz.8.3445: Freeing blocks not in datazone - block = 0, count = 4096 [ 322.270386][T13781] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.293077][T13775] EXT4-fs error (device loop8): ext4_read_inode_bitmap:139: comm syz.8.3445: Invalid inode bitmap blk 0 in block_group 0 [ 322.319607][T11065] EXT4-fs error (device loop8): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:34: lblock 1 mapped to illegal pblock 1 (length 1) [ 322.343432][T13784] loop4: detected capacity change from 0 to 512 [ 322.359420][T13775] EXT4-fs error (device loop8) in ext4_free_inode:361: Corrupt filesystem [ 322.380615][T13784] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 322.398193][T13775] EXT4-fs (loop8): 1 orphan inode deleted [ 322.407112][T13784] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 322.416282][T11065] EXT4-fs error (device loop8): ext4_release_dquot:6969: comm kworker/u8:34: Failed to release dquot type 0 [ 322.438545][T13775] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 322.453175][T13784] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.3444: corrupted in-inode xattr: e_value size too large [ 322.478465][T13775] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.487790][T13784] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.3444: couldn't read orphan inode 15 (err -117) [ 322.510502][T13784] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.580574][T13790] loop8: detected capacity change from 0 to 1024 [ 322.632080][T13790] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 322.772066][T13796] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3448'. [ 322.790022][T11490] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.897947][T13798] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=13798 comm=syz.8.3449 [ 322.910548][T13798] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=13798 comm=syz.8.3449 [ 322.958752][ T29] kauditd_printk_skb: 232 callbacks suppressed [ 322.958768][ T29] audit: type=1326 audit(2000000047.649:9865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13799 comm="syz.5.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5906e9a9 code=0x7ffc0000 [ 322.988619][ T29] audit: type=1326 audit(2000000047.649:9866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13799 comm="syz.5.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5906e9a9 code=0x7ffc0000 [ 323.028499][T13804] loop8: detected capacity change from 0 to 1024 [ 323.070996][T10115] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.089519][ T29] audit: type=1326 audit(2000000047.739:9867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13799 comm="syz.5.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f1d5906e9a9 code=0x7ffc0000 [ 323.093740][T13804] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.113040][ T29] audit: type=1326 audit(2000000047.739:9868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13799 comm="syz.5.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5906e9a9 code=0x7ffc0000 [ 323.150022][ T29] audit: type=1326 audit(2000000047.739:9869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13799 comm="syz.5.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5906e9a9 code=0x7ffc0000 [ 323.173555][ T29] audit: type=1326 audit(2000000047.749:9870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13799 comm="syz.5.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f1d5906e9a9 code=0x7ffc0000 [ 323.196968][ T29] audit: type=1326 audit(2000000047.749:9871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13799 comm="syz.5.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5906e9a9 code=0x7ffc0000 [ 323.220622][ T29] audit: type=1326 audit(2000000047.749:9872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13799 comm="syz.5.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5906e9a9 code=0x7ffc0000 [ 323.244162][ T29] audit: type=1326 audit(2000000047.759:9873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13799 comm="syz.5.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f1d5906e9a9 code=0x7ffc0000 [ 323.267580][ T29] audit: type=1326 audit(2000000047.759:9874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13799 comm="syz.5.3450" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5906e9a9 code=0x7ffc0000 [ 323.320704][T13812] binfmt_misc: register: failed to install interpreter file ./file2 [ 323.423094][T12141] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.586070][T13821] loop7: detected capacity change from 0 to 512 [ 323.597479][T13821] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 323.611094][T13821] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 323.638967][T13821] EXT4-fs error (device loop7): ext4_iget_extra_inode:5035: inode #15: comm syz.7.3454: corrupted in-inode xattr: e_value size too large [ 323.653804][T13821] EXT4-fs error (device loop7): ext4_orphan_get:1398: comm syz.7.3454: couldn't read orphan inode 15 (err -117) [ 323.666823][T13821] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 323.679784][T13816] loop4: detected capacity change from 0 to 512 [ 323.694787][T13816] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 323.709005][T13816] EXT4-fs (loop4): 1 truncate cleaned up [ 323.722724][T13816] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.844362][T12141] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.867570][T13830] bridge0: port 3(syz_tun) entered blocking state [ 323.874205][T13830] bridge0: port 3(syz_tun) entered disabled state [ 323.885230][T11490] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 323.901472][T13830] syz_tun: entered allmulticast mode [ 323.912845][T13830] syz_tun: entered promiscuous mode [ 323.918849][T13830] bridge0: port 3(syz_tun) entered blocking state [ 323.925389][T13830] bridge0: port 3(syz_tun) entered forwarding state [ 323.938396][T13832] syz_tun: left allmulticast mode [ 323.943501][T13832] syz_tun: left promiscuous mode [ 323.948560][T13832] bridge0: port 3(syz_tun) entered disabled state [ 323.965221][T13832] bridge_slave_0: left allmulticast mode [ 323.970941][T13832] bridge_slave_0: left promiscuous mode [ 323.976709][T13832] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.987083][T13832] bridge_slave_1: left allmulticast mode [ 323.992772][T13832] bridge_slave_1: left promiscuous mode [ 323.998419][T13832] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.011557][T13832] bond0: (slave bond_slave_0): Releasing backup interface [ 324.022012][T13832] bond0: (slave bond_slave_1): Releasing backup interface [ 324.035889][T13832] team0: Port device team_slave_0 removed [ 324.046166][T13832] team0: Port device team_slave_1 removed [ 324.087593][T13834] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62250 sclass=netlink_route_socket pid=13834 comm=syz.8.3459 [ 324.110092][T13838] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3460'. [ 324.162311][T13845] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3459'. [ 324.178329][T13840] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3461'. [ 324.283703][T13852] loop8: detected capacity change from 0 to 512 [ 324.301440][T13852] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 324.319837][T13852] EXT4-fs (loop8): 1 truncate cleaned up [ 324.340623][T13852] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.469939][T13860] binfmt_misc: register: failed to install interpreter file ./file2 [ 324.540237][T10115] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 324.565763][T13866] loop7: detected capacity change from 0 to 128 [ 324.579007][T13868] loop4: detected capacity change from 0 to 512 [ 324.592747][T13868] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 324.611435][T13868] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 324.627855][T13872] bio_check_eod: 212 callbacks suppressed [ 324.627872][T13872] syz.7.3468: attempt to access beyond end of device [ 324.627872][T13872] loop7: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 324.650506][T13868] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.3465: corrupted in-inode xattr: e_value size too large [ 324.664772][T13872] syz.7.3468: attempt to access beyond end of device [ 324.664772][T13872] loop7: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 324.678279][T13868] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.3465: couldn't read orphan inode 15 (err -117) [ 324.704218][T13868] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 324.718663][T13872] syz.7.3468: attempt to access beyond end of device [ 324.718663][T13872] loop7: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 324.749726][T13872] syz.7.3468: attempt to access beyond end of device [ 324.749726][T13872] loop7: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 324.766092][T13872] syz.7.3468: attempt to access beyond end of device [ 324.766092][T13872] loop7: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 324.781228][T13872] syz.7.3468: attempt to access beyond end of device [ 324.781228][T13872] loop7: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 324.802196][T13872] syz.7.3468: attempt to access beyond end of device [ 324.802196][T13872] loop7: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 324.817607][T13872] syz.7.3468: attempt to access beyond end of device [ 324.817607][T13872] loop7: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 324.831701][T13872] syz.7.3468: attempt to access beyond end of device [ 324.831701][T13872] loop7: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 324.845684][T13872] syz.7.3468: attempt to access beyond end of device [ 324.845684][T13872] loop7: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 324.971765][T13880] loop7: detected capacity change from 0 to 512 [ 324.993507][T13880] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 325.022928][T13880] EXT4-fs (loop7): 1 truncate cleaned up [ 325.029387][T13880] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.101316][T11490] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.113080][T13886] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3472'. [ 325.255304][T13893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62250 sclass=netlink_route_socket pid=13893 comm=syz.8.3473 [ 325.341842][T13894] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3473'. [ 325.355119][T12141] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.441632][T13907] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 325.594820][T13927] loop4: detected capacity change from 0 to 512 [ 325.601907][T13927] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 325.630184][T13927] EXT4-fs (loop4): 1 truncate cleaned up [ 325.636501][T13927] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 325.782710][T10115] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 325.918735][T13941] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62250 sclass=netlink_route_socket pid=13941 comm=syz.7.3488 [ 325.987866][T13942] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3488'. [ 326.393104][T12141] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.416989][T13965] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3496'. [ 326.507608][T13969] loop8: detected capacity change from 0 to 512 [ 326.520761][T13969] EXT4-fs: Ignoring removed nobh option [ 326.540897][T13969] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #3: comm syz.8.3495: corrupted inode contents [ 326.562124][T13969] EXT4-fs error (device loop8): ext4_dirty_inode:6459: inode #3: comm syz.8.3495: mark_inode_dirty error [ 326.574206][T13969] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #3: comm syz.8.3495: corrupted inode contents [ 326.588571][T13969] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #3: comm syz.8.3495: mark_inode_dirty error [ 326.600391][T13969] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.3495: Failed to acquire dquot type 0 [ 326.672791][T13978] loop4: detected capacity change from 0 to 1024 [ 326.680197][T13978] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 326.689947][T13978] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869) [ 326.699611][T13978] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 326.711052][T13978] EXT4-fs error (device loop4): ext4_get_journal_inode:5796: inode #5: comm syz.4.3498: unexpected bad inode w/o EXT4_IGET_BAD [ 326.725551][T13978] EXT4-fs (loop4): no journal found [ 326.742627][T13978] loop4: detected capacity change from 0 to 512 [ 326.749340][T13978] EXT4-fs: Ignoring removed nobh option [ 326.831204][T13978] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #3: comm syz.4.3498: corrupted inode contents [ 326.845016][T13978] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #3: comm syz.4.3498: mark_inode_dirty error [ 326.857179][T13978] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #3: comm syz.4.3498: corrupted inode contents [ 326.869954][T13978] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.3498: mark_inode_dirty error [ 326.881886][T13978] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3498: Failed to acquire dquot type 0 [ 326.894110][T13978] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3498: corrupted inode contents [ 326.906461][T13978] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #16: comm syz.4.3498: mark_inode_dirty error [ 326.918426][T13978] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3498: corrupted inode contents [ 326.930894][T13978] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.3498: mark_inode_dirty error [ 326.942713][T13978] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3498: corrupted inode contents [ 326.956019][T13978] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 326.964770][T13978] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3498: corrupted inode contents [ 326.977342][T13978] EXT4-fs error (device loop4): ext4_truncate:4597: inode #16: comm syz.4.3498: mark_inode_dirty error [ 326.989788][T13978] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 326.999574][T13978] EXT4-fs (loop4): 1 truncate cleaned up [ 327.006321][T13978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.018952][T13978] ext4 filesystem being mounted at /110/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.564793][T13969] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #16: comm syz.8.3495: corrupted inode contents [ 327.576888][T13969] EXT4-fs error (device loop8): ext4_dirty_inode:6459: inode #16: comm syz.8.3495: mark_inode_dirty error [ 327.588592][T13969] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #16: comm syz.8.3495: corrupted inode contents [ 327.600808][T13969] EXT4-fs error (device loop8): __ext4_ext_dirty:206: inode #16: comm syz.8.3495: mark_inode_dirty error [ 328.325176][T12141] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.329262][T13969] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #16: comm syz.8.3495: corrupted inode contents [ 328.360363][T13969] EXT4-fs error (device loop8) in ext4_orphan_del:305: Corrupt filesystem [ 328.379255][T13969] EXT4-fs error (device loop8): ext4_do_update_inode:5568: inode #16: comm syz.8.3495: corrupted inode contents [ 328.438060][T13969] EXT4-fs error (device loop8): ext4_truncate:4597: inode #16: comm syz.8.3495: mark_inode_dirty error [ 328.467889][ T29] kauditd_printk_skb: 250 callbacks suppressed [ 328.467904][ T29] audit: type=1326 audit(2000000053.159:10121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14013 comm="syz.4.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2e8ee9a9 code=0x7ffc0000 [ 328.497906][ T29] audit: type=1326 audit(2000000053.159:10122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14013 comm="syz.4.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2e8ee9a9 code=0x7ffc0000 [ 328.521558][ T29] audit: type=1326 audit(2000000053.159:10123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14013 comm="syz.4.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fdc2e8ee9a9 code=0x7ffc0000 [ 328.524196][T14015] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3511'. [ 328.545146][ T29] audit: type=1326 audit(2000000053.159:10124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14013 comm="syz.4.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2e8ee9a9 code=0x7ffc0000 [ 328.545182][ T29] audit: type=1326 audit(2000000053.159:10125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14013 comm="syz.4.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2e8ee9a9 code=0x7ffc0000 [ 328.601540][ T29] audit: type=1326 audit(2000000053.159:10126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14013 comm="syz.4.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdc2e8ee9a9 code=0x7ffc0000 [ 328.625095][ T29] audit: type=1326 audit(2000000053.159:10127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14013 comm="syz.4.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2e8ee9a9 code=0x7ffc0000 [ 328.648674][ T29] audit: type=1326 audit(2000000053.159:10128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14013 comm="syz.4.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2e8ee9a9 code=0x7ffc0000 [ 328.672415][ T29] audit: type=1326 audit(2000000053.159:10129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14013 comm="syz.4.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fdc2e8ee9a9 code=0x7ffc0000 [ 328.695931][ T29] audit: type=1326 audit(2000000053.159:10130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14013 comm="syz.4.3511" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2e8ee9a9 code=0x7ffc0000 [ 328.809221][T13969] EXT4-fs error (device loop8) in ext4_process_orphan:347: Corrupt filesystem [ 328.846306][T13969] EXT4-fs (loop8): 1 truncate cleaned up [ 328.853701][T13969] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.870469][T13969] ext4 filesystem being mounted at /133/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.954821][T14037] loop7: detected capacity change from 0 to 1024 [ 328.971118][T14037] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.045166][T10115] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.102530][T11490] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.145436][T14051] loop7: detected capacity change from 0 to 512 [ 329.152087][T14051] EXT4-fs: Ignoring removed i_version option [ 329.158320][T14051] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 329.169846][T14051] EXT4-fs (loop7): 1 truncate cleaned up [ 329.175846][T14051] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.192445][T14049] binfmt_misc: register: failed to install interpreter file ./file2 [ 329.273295][T14047] loop8: detected capacity change from 0 to 512 [ 329.280261][T14047] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 329.292882][T14047] EXT4-fs (loop8): 1 truncate cleaned up [ 329.298956][T14047] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.407384][T11490] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.546559][T14063] loop8: detected capacity change from 0 to 512 [ 329.553893][T14063] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 329.568416][T14063] EXT4-fs (loop8): 1 truncate cleaned up [ 329.577772][T14063] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 329.661342][T14073] loop4: detected capacity change from 0 to 1024 [ 329.668359][T14073] EXT4-fs: Ignoring removed nobh option [ 329.670794][T11490] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.674025][T14073] EXT4-fs: inline encryption not supported [ 329.714586][T14073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.767709][T14073] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4113: comm syz.4.3529: Allocating blocks 385-513 which overlap fs metadata [ 329.768871][T14081] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14081 comm=syz.8.3530 [ 329.794258][T14081] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14081 comm=syz.8.3530 [ 329.832762][T14073] EXT4-fs (loop4): pa ffff8881069d8bd0: logic 16, phys. 129, len 24 [ 329.840907][T14073] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 329.872377][T14073] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 329.884688][T14073] EXT4-fs (loop4): This should not happen!! Data will be lost [ 329.884688][T14073] [ 329.894374][T14073] EXT4-fs (loop4): Total free blocks count 0 [ 329.900373][T14073] EXT4-fs (loop4): Free/Dirty block details [ 329.906281][T14073] EXT4-fs (loop4): free_blocks=128 [ 329.911448][T14073] EXT4-fs (loop4): dirty_blocks=0 [ 329.916469][T14073] EXT4-fs (loop4): Block reservation details [ 329.922477][T14073] EXT4-fs (loop4): i_reserved_data_blocks=0 [ 330.088302][T10115] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 330.191336][T14088] loop7: detected capacity change from 0 to 1024 [ 330.222052][T14088] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 330.327091][T14099] netlink: 'syz.7.3536': attribute type 29 has an invalid length. [ 330.450527][T14103] FAULT_INJECTION: forcing a failure. [ 330.450527][T14103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.463695][T14103] CPU: 1 UID: 0 PID: 14103 Comm: syz.2.3537 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(voluntary) [ 330.463724][T14103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 330.463738][T14103] Call Trace: [ 330.463745][T14103] [ 330.463754][T14103] __dump_stack+0x1d/0x30 [ 330.463784][T14103] dump_stack_lvl+0xe8/0x140 [ 330.463806][T14103] dump_stack+0x15/0x1b [ 330.463823][T14103] should_fail_ex+0x265/0x280 [ 330.463906][T14103] should_fail+0xb/0x20 [ 330.464003][T14103] should_fail_usercopy+0x1a/0x20 [ 330.464054][T14103] _copy_from_user+0x1c/0xb0 [ 330.464074][T14103] ___sys_recvmsg+0xaa/0x370 [ 330.464153][T14103] ? 0xffffffff81000000 [ 330.464168][T14103] ? __rcu_read_unlock+0x4f/0x70 [ 330.464216][T14103] __x64_sys_recvmsg+0xd1/0x160 [ 330.464270][T14103] x64_sys_call+0xf19/0x2fb0 [ 330.464294][T14103] do_syscall_64+0xd2/0x200 [ 330.464312][T14103] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 330.464425][T14103] ? clear_bhb_loop+0x40/0x90 [ 330.464449][T14103] ? clear_bhb_loop+0x40/0x90 [ 330.464476][T14103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.464502][T14103] RIP: 0033:0x7f46850be9a9 [ 330.464517][T14103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.464535][T14103] RSP: 002b:00007f468371f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 330.464579][T14103] RAX: ffffffffffffffda RBX: 00007f46852e5fa0 RCX: 00007f46850be9a9 [ 330.464595][T14103] RDX: 0000000000002000 RSI: 0000200000000500 RDI: 0000000000000005 [ 330.464611][T14103] RBP: 00007f468371f090 R08: 0000000000000000 R09: 0000000000000000 [ 330.464625][T14103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.464641][T14103] R13: 0000000000000000 R14: 00007f46852e5fa0 R15: 00007ffdfc3c66a8 [ 330.464663][T14103] [ 330.789745][T14111] loop4: detected capacity change from 0 to 512 [ 330.799673][T14111] EXT4-fs: Ignoring removed i_version option [ 330.816117][T14111] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 330.837524][T14111] EXT4-fs (loop4): 1 truncate cleaned up [ 331.082808][T14115] loop7: detected capacity change from 0 to 512 [ 331.100207][T14115] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 331.122435][T14115] EXT4-fs (loop7): 1 truncate cleaned up [ 331.225590][T14126] loop8: detected capacity change from 0 to 512 [ 331.225722][T14127] loop7: detected capacity change from 0 to 128 [ 331.238758][T14126] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 331.260958][T14126] EXT4-fs (loop8): 1 truncate cleaned up [ 331.291870][T14129] bio_check_eod: 101 callbacks suppressed [ 331.291886][T14129] syz.7.3543: attempt to access beyond end of device [ 331.291886][T14129] loop7: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 331.343703][T14129] syz.7.3543: attempt to access beyond end of device [ 331.343703][T14129] loop7: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 331.363858][T14129] syz.7.3543: attempt to access beyond end of device [ 331.363858][T14129] loop7: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 331.377742][T14129] syz.7.3543: attempt to access beyond end of device [ 331.377742][T14129] loop7: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 331.391626][T14129] syz.7.3543: attempt to access beyond end of device [ 331.391626][T14129] loop7: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 331.405436][T14129] syz.7.3543: attempt to access beyond end of device [ 331.405436][T14129] loop7: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 331.419133][T14129] syz.7.3543: attempt to access beyond end of device [ 331.419133][T14129] loop7: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 331.433618][T14129] syz.7.3543: attempt to access beyond end of device [ 331.433618][T14129] loop7: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 331.447217][T14129] syz.7.3543: attempt to access beyond end of device [ 331.447217][T14129] loop7: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 331.463200][T14129] syz.7.3543: attempt to access beyond end of device [ 331.463200][T14129] loop7: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 331.512869][T14133] loop7: detected capacity change from 0 to 512 [ 331.532615][T14133] EXT4-fs (loop7): 1 orphan inode deleted [ 331.538979][T14133] ext4 filesystem being mounted at /227/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 331.551019][T11066] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:35: Failed to release dquot type 1 [ 331.649027][T14142] random: crng reseeded on system resumption [ 331.664688][T14141] loop4: detected capacity change from 0 to 512 [ 331.702269][T14141] EXT4-fs (loop4): 1 orphan inode deleted [ 331.708618][T14141] ext4 filesystem being mounted at /119/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 331.719708][T11066] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:35: Failed to release dquot type 1 [ 331.740214][T14141] random: crng reseeded on system resumption [ 332.361382][T14160] loop7: detected capacity change from 0 to 128 [ 332.395403][T14162] netlink: 260 bytes leftover after parsing attributes in process `syz.5.3551'. [ 332.517098][T14167] loop4: detected capacity change from 0 to 512 [ 332.564234][T14172] loop4: detected capacity change from 0 to 512 [ 332.580471][T14172] EXT4-fs: Ignoring removed i_version option [ 332.591610][T14172] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 332.604840][T14172] EXT4-fs (loop4): 1 truncate cleaned up [ 332.648625][T14170] loop7: detected capacity change from 0 to 512 [ 332.655517][T14170] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 332.667033][T14170] EXT4-fs (loop7): 1 truncate cleaned up [ 332.780562][T14189] loop7: detected capacity change from 0 to 128 [ 332.836711][T14194] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3564'. [ 332.904573][T14203] loop7: detected capacity change from 0 to 1024 [ 333.049923][T14213] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62250 sclass=netlink_route_socket pid=14213 comm=syz.8.3568 [ 333.060377][T14215] FAULT_INJECTION: forcing a failure. [ 333.060377][T14215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 333.075851][T14215] CPU: 1 UID: 0 PID: 14215 Comm: syz.7.3570 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(voluntary) [ 333.075977][T14215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 333.075992][T14215] Call Trace: [ 333.075999][T14215] [ 333.076008][T14215] __dump_stack+0x1d/0x30 [ 333.076033][T14215] dump_stack_lvl+0xe8/0x140 [ 333.076057][T14215] dump_stack+0x15/0x1b [ 333.076082][T14215] should_fail_ex+0x265/0x280 [ 333.076203][T14215] should_fail+0xb/0x20 [ 333.076236][T14215] should_fail_usercopy+0x1a/0x20 [ 333.076274][T14215] _copy_from_iter+0xcf/0xe40 [ 333.076324][T14215] ? __build_skb_around+0x1a0/0x200 [ 333.076360][T14215] ? __alloc_skb+0x223/0x320 [ 333.076396][T14215] netlink_sendmsg+0x471/0x6b0 [ 333.076454][T14215] ? __pfx_netlink_sendmsg+0x10/0x10 [ 333.076478][T14215] __sock_sendmsg+0x145/0x180 [ 333.076507][T14215] ____sys_sendmsg+0x31e/0x4e0 [ 333.076606][T14215] ___sys_sendmsg+0x17b/0x1d0 [ 333.076659][T14215] __x64_sys_sendmsg+0xd4/0x160 [ 333.076782][T14215] x64_sys_call+0x2999/0x2fb0 [ 333.076807][T14215] do_syscall_64+0xd2/0x200 [ 333.076826][T14215] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 333.076859][T14215] ? clear_bhb_loop+0x40/0x90 [ 333.076956][T14215] ? clear_bhb_loop+0x40/0x90 [ 333.076983][T14215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.077009][T14215] RIP: 0033:0x7fed4f9de9a9 [ 333.077027][T14215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.077048][T14215] RSP: 002b:00007fed4e047038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 333.077080][T14215] RAX: ffffffffffffffda RBX: 00007fed4fc05fa0 RCX: 00007fed4f9de9a9 [ 333.077106][T14215] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 333.077119][T14215] RBP: 00007fed4e047090 R08: 0000000000000000 R09: 0000000000000000 [ 333.077197][T14215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 333.077211][T14215] R13: 0000000000000000 R14: 00007fed4fc05fa0 R15: 00007ffdd2b53478 [ 333.077232][T14215] [ 333.659519][T14229] loop4: detected capacity change from 0 to 512 [ 333.666109][T14229] EXT4-fs: Ignoring removed nobh option [ 333.960241][T14233] netlink: 'syz.5.3576': attribute type 21 has an invalid length. [ 333.990871][T14233] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3576'. [ 333.999960][T14233] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3576'. [ 334.098283][T14235] FAULT_INJECTION: forcing a failure. [ 334.098283][T14235] name failslab, interval 1, probability 0, space 0, times 0 [ 334.110980][T14235] CPU: 1 UID: 0 PID: 14235 Comm: syz.5.3577 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(voluntary) [ 334.111035][T14235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 334.111058][T14235] Call Trace: [ 334.111065][T14235] [ 334.111072][T14235] __dump_stack+0x1d/0x30 [ 334.111142][T14235] dump_stack_lvl+0xe8/0x140 [ 334.111166][T14235] dump_stack+0x15/0x1b [ 334.111220][T14235] should_fail_ex+0x265/0x280 [ 334.111253][T14235] should_failslab+0x8c/0xb0 [ 334.111276][T14235] kmem_cache_alloc_node_noprof+0x57/0x320 [ 334.111428][T14235] ? __alloc_skb+0x101/0x320 [ 334.111462][T14235] __alloc_skb+0x101/0x320 [ 334.111492][T14235] netlink_alloc_large_skb+0xba/0xf0 [ 334.111584][T14235] netlink_sendmsg+0x3cf/0x6b0 [ 334.111609][T14235] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.111633][T14235] __sock_sendmsg+0x145/0x180 [ 334.111661][T14235] ____sys_sendmsg+0x31e/0x4e0 [ 334.111704][T14235] ___sys_sendmsg+0x17b/0x1d0 [ 334.111798][T14235] __x64_sys_sendmsg+0xd4/0x160 [ 334.111857][T14235] x64_sys_call+0x2999/0x2fb0 [ 334.111885][T14235] do_syscall_64+0xd2/0x200 [ 334.111907][T14235] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 334.112006][T14235] ? clear_bhb_loop+0x40/0x90 [ 334.112028][T14235] ? clear_bhb_loop+0x40/0x90 [ 334.112059][T14235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.112086][T14235] RIP: 0033:0x7f1d5906e9a9 [ 334.112116][T14235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.112135][T14235] RSP: 002b:00007f1d576cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.112154][T14235] RAX: ffffffffffffffda RBX: 00007f1d59295fa0 RCX: 00007f1d5906e9a9 [ 334.112170][T14235] RDX: 00000000000400c0 RSI: 0000200000000280 RDI: 0000000000000007 [ 334.112186][T14235] RBP: 00007f1d576cf090 R08: 0000000000000000 R09: 0000000000000000 [ 334.112235][T14235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.112249][T14235] R13: 0000000000000000 R14: 00007f1d59295fa0 R15: 00007ffc743ec248 [ 334.112271][T14235] [ 334.526476][T14239] FAULT_INJECTION: forcing a failure. [ 334.526476][T14239] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.539624][T14239] CPU: 1 UID: 0 PID: 14239 Comm: syz.5.3579 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(voluntary) [ 334.539658][T14239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 334.539670][T14239] Call Trace: [ 334.539676][T14239] [ 334.539726][T14239] __dump_stack+0x1d/0x30 [ 334.539751][T14239] dump_stack_lvl+0xe8/0x140 [ 334.539835][T14239] dump_stack+0x15/0x1b [ 334.539852][T14239] should_fail_ex+0x265/0x280 [ 334.539885][T14239] should_fail+0xb/0x20 [ 334.539939][T14239] should_fail_usercopy+0x1a/0x20 [ 334.539973][T14239] _copy_from_iter+0xcf/0xe40 [ 334.540006][T14239] ? __build_skb_around+0x1a0/0x200 [ 334.540059][T14239] ? __alloc_skb+0x223/0x320 [ 334.540097][T14239] netlink_sendmsg+0x471/0x6b0 [ 334.540122][T14239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 334.540144][T14239] __sock_sendmsg+0x145/0x180 [ 334.540171][T14239] ____sys_sendmsg+0x31e/0x4e0 [ 334.540279][T14239] ___sys_sendmsg+0x17b/0x1d0 [ 334.540470][T14239] __x64_sys_sendmsg+0xd4/0x160 [ 334.540511][T14239] x64_sys_call+0x2999/0x2fb0 [ 334.540563][T14239] do_syscall_64+0xd2/0x200 [ 334.540581][T14239] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 334.540609][T14239] ? clear_bhb_loop+0x40/0x90 [ 334.540634][T14239] ? clear_bhb_loop+0x40/0x90 [ 334.540686][T14239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.540748][T14239] RIP: 0033:0x7f1d5906e9a9 [ 334.540763][T14239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 334.540784][T14239] RSP: 002b:00007f1d576cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 334.540807][T14239] RAX: ffffffffffffffda RBX: 00007f1d59295fa0 RCX: 00007f1d5906e9a9 [ 334.540823][T14239] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 334.540839][T14239] RBP: 00007f1d576cf090 R08: 0000000000000000 R09: 0000000000000000 [ 334.540858][T14239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.540874][T14239] R13: 0000000000000000 R14: 00007f1d59295fa0 R15: 00007ffc743ec248 [ 334.540895][T14239] [ 334.857369][T14229] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #3: comm syz.4.3574: corrupted inode contents [ 334.869682][T14229] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #3: comm syz.4.3574: mark_inode_dirty error [ 334.883384][T14229] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #3: comm syz.4.3574: corrupted inode contents [ 334.895783][T14229] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.3574: mark_inode_dirty error [ 334.909350][T14229] __quota_error: 135 callbacks suppressed [ 334.909366][T14229] Quota error (device loop4): write_blk: dquota write failed [ 334.922517][T14229] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 334.932502][T14229] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3574: Failed to acquire dquot type 0 [ 335.508318][T14229] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3574: corrupted inode contents [ 335.520593][T14229] EXT4-fs error (device loop4): ext4_dirty_inode:6459: inode #16: comm syz.4.3574: mark_inode_dirty error [ 335.532238][T14229] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3574: corrupted inode contents [ 335.544434][T14229] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.3574: mark_inode_dirty error [ 335.556078][T14229] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3574: corrupted inode contents [ 335.568056][T14229] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem [ 335.576891][T14229] EXT4-fs error (device loop4): ext4_do_update_inode:5568: inode #16: comm syz.4.3574: corrupted inode contents [ 335.589258][T14229] EXT4-fs error (device loop4): ext4_truncate:4597: inode #16: comm syz.4.3574: mark_inode_dirty error [ 335.600838][T14229] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem [ 335.614988][T14229] EXT4-fs (loop4): 1 truncate cleaned up [ 335.621141][T14229] ext4 filesystem being mounted at /123/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 335.713181][T14267] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3588'. [ 335.728823][T14261] loop7: detected capacity change from 0 to 1024 [ 335.806885][T14274] netlink: 4436 bytes leftover after parsing attributes in process `syz.4.3590'. [ 335.816932][T14274] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096 [ 335.826849][ T29] audit: type=1326 audit(2000000060.519:10262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14271 comm="syz.5.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5906e9a9 code=0x7ffc0000 [ 335.850467][ T29] audit: type=1326 audit(2000000060.519:10263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14271 comm="syz.5.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5906e9a9 code=0x7ffc0000 [ 335.874151][ T29] audit: type=1326 audit(2000000060.519:10264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14271 comm="syz.5.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f1d5906e9a9 code=0x7ffc0000 [ 335.897864][ T29] audit: type=1326 audit(2000000060.519:10265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14271 comm="syz.5.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5906e9a9 code=0x7ffc0000 [ 335.921459][ T29] audit: type=1326 audit(2000000060.519:10266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14271 comm="syz.5.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5906e9a9 code=0x7ffc0000 [ 335.947260][ T29] audit: type=1326 audit(2000000060.519:10267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14271 comm="syz.5.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f1d5906e9a9 code=0x7ffc0000 [ 335.970980][ T29] audit: type=1326 audit(2000000060.519:10268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14271 comm="syz.5.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5906e9a9 code=0x7ffc0000 [ 335.994699][ T29] audit: type=1326 audit(2000000060.519:10269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14271 comm="syz.5.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d5906e9a9 code=0x7ffc0000 [ 336.140749][T14295] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3599'. [ 336.155004][T14297] loop4: detected capacity change from 0 to 512 [ 336.163666][T14297] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 336.177483][T14297] EXT4-fs (loop4): 1 truncate cleaned up [ 336.262606][T14310] pim6reg1: entered promiscuous mode [ 336.267940][T14310] pim6reg1: entered allmulticast mode [ 336.291779][T14313] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62250 sclass=netlink_route_socket pid=14313 comm=syz.2.3603 [ 336.351013][T14311] loop8: detected capacity change from 0 to 512 [ 336.357885][T14311] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 336.369293][T14311] EXT4-fs (loop8): 1 truncate cleaned up [ 336.375362][T14317] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3603'. [ 336.444511][T14322] loop4: detected capacity change from 0 to 1024 [ 336.493567][T14333] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3613'. [ 336.583978][T14345] loop8: detected capacity change from 0 to 128 [ 336.631720][T14348] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3619'. [ 336.667932][T14351] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62250 sclass=netlink_route_socket pid=14351 comm=syz.5.3617 [ 336.748976][T14355] FAULT_INJECTION: forcing a failure. [ 336.748976][T14355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.762149][T14355] CPU: 1 UID: 0 PID: 14355 Comm: syz.7.3620 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(voluntary) [ 336.762184][T14355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 336.762198][T14355] Call Trace: [ 336.762205][T14355] [ 336.762213][T14355] __dump_stack+0x1d/0x30 [ 336.762306][T14355] dump_stack_lvl+0xe8/0x140 [ 336.762330][T14355] dump_stack+0x15/0x1b [ 336.762351][T14355] should_fail_ex+0x265/0x280 [ 336.762389][T14355] should_fail+0xb/0x20 [ 336.762422][T14355] should_fail_usercopy+0x1a/0x20 [ 336.762469][T14355] _copy_from_iter+0xcf/0xe40 [ 336.762534][T14355] ? __build_skb_around+0x1a0/0x200 [ 336.762565][T14355] ? __alloc_skb+0x223/0x320 [ 336.762600][T14355] netlink_sendmsg+0x471/0x6b0 [ 336.762664][T14355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.762686][T14355] __sock_sendmsg+0x145/0x180 [ 336.762711][T14355] ____sys_sendmsg+0x31e/0x4e0 [ 336.762760][T14355] ___sys_sendmsg+0x17b/0x1d0 [ 336.762838][T14355] __x64_sys_sendmsg+0xd4/0x160 [ 336.762876][T14355] x64_sys_call+0x2999/0x2fb0 [ 336.762901][T14355] do_syscall_64+0xd2/0x200 [ 336.762921][T14355] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 336.763009][T14355] ? clear_bhb_loop+0x40/0x90 [ 336.763035][T14355] ? clear_bhb_loop+0x40/0x90 [ 336.763059][T14355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.763190][T14355] RIP: 0033:0x7fed4f9de9a9 [ 336.763206][T14355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.763227][T14355] RSP: 002b:00007fed4e047038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.763249][T14355] RAX: ffffffffffffffda RBX: 00007fed4fc05fa0 RCX: 00007fed4f9de9a9 [ 336.763265][T14355] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000005 [ 336.763280][T14355] RBP: 00007fed4e047090 R08: 0000000000000000 R09: 0000000000000000 [ 336.763294][T14355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.763307][T14355] R13: 0000000000000000 R14: 00007fed4fc05fa0 R15: 00007ffdd2b53478 [ 336.763409][T14355] [ 337.082403][T14363] binfmt_misc: register: failed to install interpreter file ./file2 [ 337.207298][T14380] loop7: detected capacity change from 0 to 1024 [ 337.214200][T14380] EXT4-fs: Ignoring removed nobh option [ 337.219864][T14380] EXT4-fs: inline encryption not supported [ 337.233567][T14380] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.3631: Allocating blocks 385-513 which overlap fs metadata [ 337.248793][T14380] EXT4-fs (loop7): pa ffff888106a5e9a0: logic 16, phys. 129, len 24 [ 337.256893][T14380] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 337.267494][T14380] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28 [ 337.279865][T14380] EXT4-fs (loop7): This should not happen!! Data will be lost [ 337.279865][T14380] [ 337.289624][T14380] EXT4-fs (loop7): Total free blocks count 0 [ 337.295638][T14380] EXT4-fs (loop7): Free/Dirty block details [ 337.301586][T14380] EXT4-fs (loop7): free_blocks=128 [ 337.306852][T14380] EXT4-fs (loop7): dirty_blocks=0 [ 337.312072][T14380] EXT4-fs (loop7): Block reservation details [ 337.318116][T14380] EXT4-fs (loop7): i_reserved_data_blocks=0 [ 337.345969][T14387] loop4: detected capacity change from 0 to 1024 [ 337.352872][T14387] EXT4-fs: Ignoring removed orlov option [ 337.360317][T14387] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 337.369857][T14387] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 337.381581][T14387] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0000] [ 337.390632][T14387] System zones: 0-1, 3-12 [ 337.396148][T14387] EXT4-fs error (device loop4): ext4_map_blocks:816: inode #3: block 1: comm syz.4.3632: lblock 1 mapped to illegal pblock 1 (length 1) [ 337.412101][T14387] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.3632: Failed to acquire dquot type 0 [ 337.424214][T14387] EXT4-fs error (device loop4): ext4_free_blocks:6587: comm syz.4.3632: Freeing blocks not in datazone - block = 0, count = 4096 [ 337.438300][T14387] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.3632: Invalid inode bitmap blk 0 in block_group 0 [ 337.451261][T11069] EXT4-fs error (device loop4): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:38: lblock 1 mapped to illegal pblock 1 (length 1) [ 337.451455][T14387] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem [ 337.479312][T11069] EXT4-fs error (device loop4): ext4_release_dquot:6969: comm kworker/u8:38: Failed to release dquot type 0 [ 337.491431][T14387] EXT4-fs (loop4): 1 orphan inode deleted [ 337.586287][T14403] binfmt_misc: register: failed to install interpreter file ./file2 [ 337.598127][T14404] loop4: detected capacity change from 0 to 512 [ 337.635428][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.642876][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.650336][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.657748][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.665272][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.672679][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.680096][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.687527][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.695020][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.702431][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.710026][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.712624][T14401] lo speed is unknown, defaulting to 1000 [ 337.717414][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.730532][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.730688][T14400] loop8: detected capacity change from 0 to 512 [ 337.737996][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.738028][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.738059][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.738084][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.758549][T14400] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 337.759148][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.776336][T14400] EXT4-fs (loop8): 1 truncate cleaned up [ 337.783719][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.804321][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.811805][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.819333][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.826728][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.834149][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.841549][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.848932][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.856351][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.863769][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.871215][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.878593][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.886060][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.893463][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.900886][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.908315][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.915764][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.923218][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.930685][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.938135][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.945574][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.952980][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.960384][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.967769][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.969467][T14401] netlink: 'syz.2.3634': attribute type 64 has an invalid length. [ 337.975198][ T3386] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 337.999858][ T3386] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz0] on syz1 [ 338.026820][T14421] xt_TPROXY: Can be used only with -p tcp or -p udp [ 338.072014][T14423] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14423 comm=syz.7.3644 [ 338.084619][T14423] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14423 comm=syz.7.3644 [ 338.141834][T14421] wireguard0: entered promiscuous mode [ 338.283039][T14439] __nla_validate_parse: 1 callbacks suppressed [ 338.283057][T14439] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3649'. [ 338.433504][T14431] loop7: detected capacity change from 0 to 512 [ 338.454238][T14431] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 338.483892][T14431] EXT4-fs (loop7): 1 truncate cleaned up [ 338.515969][T14443] loop8: detected capacity change from 0 to 512 [ 338.543478][T14443] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 338.578966][T14443] EXT4-fs (loop8): 1 truncate cleaned up [ 338.761401][T14460] vlan0: entered allmulticast mode [ 338.779582][T14460] dummy0: entered allmulticast mode [ 338.873269][T14465] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14465 comm=syz.8.3656 [ 338.885928][T14465] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14465 comm=syz.8.3656 [ 338.971958][T14476] loop8: detected capacity change from 0 to 128 [ 338.980754][T14474] loop7: detected capacity change from 0 to 512 [ 338.980814][T12141] block device autoloading is deprecated and will be removed. [ 339.016890][T14480] loop7: detected capacity change from 0 to 1024 [ 339.024080][T14480] EXT4-fs: Ignoring removed nobh option [ 339.029807][T14480] EXT4-fs: inline encryption not supported [ 339.043040][T14480] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.3663: Allocating blocks 385-513 which overlap fs metadata [ 339.058024][T14480] EXT4-fs (loop7): pa ffff888106a5eb60: logic 16, phys. 129, len 24 [ 339.066127][T14480] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 339.068931][T14488] loop8: detected capacity change from 0 to 1024 [ 339.083448][T14488] EXT4-fs: Ignoring removed nobh option [ 339.089028][T14488] EXT4-fs: inline encryption not supported [ 339.125084][T14488] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4113: comm syz.8.3665: Allocating blocks 385-513 which overlap fs metadata [ 339.127301][T14496] 9pnet_fd: Insufficient options for proto=fd [ 339.151006][T14488] EXT4-fs (loop8): pa ffff8881069d8cb0: logic 16, phys. 129, len 24 [ 339.159019][T14488] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 339.182221][T14496] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3668'. [ 339.260532][T14492] loop7: detected capacity change from 0 to 512 [ 339.267443][T14492] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 339.279694][T14492] EXT4-fs (loop7): 1 truncate cleaned up [ 339.290441][T14503] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14503 comm=syz.4.3671 [ 339.303185][T14503] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14503 comm=syz.4.3671 [ 339.316962][T14506] loop8: detected capacity change from 0 to 512 [ 339.323910][T14506] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 339.335978][T14506] EXT4-fs (loop8): 1 truncate cleaned up [ 339.497292][T14516] loop7: detected capacity change from 0 to 512 [ 339.567411][T14524] loop7: detected capacity change from 0 to 1024 [ 339.574364][T14524] EXT4-fs: Ignoring removed nobh option [ 339.580017][T14524] EXT4-fs: inline encryption not supported [ 339.597788][T14524] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4113: comm syz.7.3677: Allocating blocks 385-513 which overlap fs metadata [ 339.624178][T14527] loop4: detected capacity change from 0 to 512 [ 339.637840][T14527] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 339.647886][T14527] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 339.656488][T14527] EXT4-fs error (device loop4): ext4_iget_extra_inode:5035: inode #15: comm syz.4.3673: corrupted in-inode xattr: e_value size too large [ 339.656869][T14524] EXT4-fs (loop7): pa ffff888106a5e9a0: logic 16, phys. 129, len 24 [ 339.678368][T14527] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.3673: couldn't read orphan inode 15 (err -117) [ 339.678679][T14524] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:5364: group 0, free 0, pa_free 8 [ 339.871302][T14542] loop7: detected capacity change from 0 to 1024 [ 339.887252][T14542] EXT4-fs: Ignoring removed orlov option [ 339.893346][T14542] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 339.902943][T14542] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 339.923641][T14542] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840e01c, mo2=0000] [ 339.942186][T14542] System zones: 0-1, 3-12 [ 339.968190][T14542] EXT4-fs error (device loop7): ext4_map_blocks:816: inode #3: block 1: comm syz.7.3681: lblock 1 mapped to illegal pblock 1 (length 1) [ 339.985409][T14548] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=14548 comm=syz.2.3683 [ 339.997970][T14548] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=14548 comm=syz.2.3683 [ 340.023636][T14542] __quota_error: 314 callbacks suppressed [ 340.023651][T14542] Quota error (device loop7): write_blk: dquota write failed [ 340.036827][T14542] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 340.071550][T14542] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.3681: Failed to acquire dquot type 0 [ 340.119658][T14542] EXT4-fs error (device loop7): ext4_free_blocks:6587: comm syz.7.3681: Freeing blocks not in datazone - block = 0, count = 4096 [ 340.133779][T14542] EXT4-fs error (device loop7): ext4_read_inode_bitmap:139: comm syz.7.3681: Invalid inode bitmap blk 0 in block_group 0 [ 340.135769][ T29] audit: type=1326 audit(2000000064.829:10581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14556 comm="syz.8.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c190e9a9 code=0x7ffc0000 [ 340.147131][T11044] EXT4-fs error (device loop7): ext4_map_blocks:780: inode #3: block 1: comm kworker/u8:13: lblock 1 mapped to illegal pblock 1 (length 1) [ 340.170238][ T29] audit: type=1326 audit(2000000064.829:10582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14556 comm="syz.8.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c190e9a9 code=0x7ffc0000 [ 340.209520][T14542] EXT4-fs error (device loop7) in ext4_free_inode:361: Corrupt filesystem [ 340.218250][T14542] EXT4-fs (loop7): 1 orphan inode deleted [ 340.225334][T11044] Quota error (device loop7): remove_tree: Can't read quota data block 1 [ 340.234149][T11044] EXT4-fs error (device loop7): ext4_release_dquot:6969: comm kworker/u8:13: Failed to release dquot type 0 [ 340.263756][ T29] audit: type=1326 audit(2000000064.919:10583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14556 comm="syz.8.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f56c190e9a9 code=0x7ffc0000 [ 340.287348][ T29] audit: type=1326 audit(2000000064.919:10584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14556 comm="syz.8.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c190e9a9 code=0x7ffc0000 [ 340.310973][ T29] audit: type=1326 audit(2000000064.919:10585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14556 comm="syz.8.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c190e9a9 code=0x7ffc0000 [ 340.334558][ T29] audit: type=1326 audit(2000000064.939:10586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14556 comm="syz.8.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f56c190e9a9 code=0x7ffc0000 [ 340.358253][ T29] audit: type=1326 audit(2000000064.939:10587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14556 comm="syz.8.3685" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f56c190e9a9 code=0x7ffc0000 [ 340.570547][T14589] loop7: detected capacity change from 0 to 1024 [ 340.584291][T14589] EXT4-fs mount: 52 callbacks suppressed [ 340.584306][T14589] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 340.584365][T14591] loop4: detected capacity change from 0 to 512 [ 340.584470][T14589] ================================================================== [ 340.590055][T14589] BUG: KCSAN: data-race in data_push_tail / vsnprintf [ 340.590103][T14589] [ 340.590112][T14589] write to 0xffffffff88e6a657 of 32 bytes by task 14591 on cpu 1: [ 340.590133][T14589] vsnprintf+0x2ce/0x890 [ 340.590161][T14589] vscnprintf+0x41/0x90 [ 340.590190][T14589] printk_sprint+0x30/0x2d0 [ 340.590210][T14589] vprintk_store+0x599/0x860 [ 340.590232][T14589] vprintk_emit+0x178/0x650 [ 340.590253][T14589] vprintk_default+0x26/0x30 [ 340.590273][T14589] vprintk+0x1d/0x30 [ 340.590307][T14589] _printk+0x79/0xa0 [ 340.590339][T14589] set_capacity_and_notify+0x14c/0x1f0 [ 340.590378][T14589] loop_set_size+0x2e/0x70 [ 340.590414][T14589] loop_configure+0x8d3/0xa50 [ 340.590450][T14589] lo_ioctl+0x559/0x15d0 [ 340.590484][T14589] blkdev_ioctl+0x352/0x440 [ 340.590519][T14589] __se_sys_ioctl+0xce/0x140 [ 340.590549][T14589] __x64_sys_ioctl+0x43/0x50 [ 340.590583][T14589] x64_sys_call+0x19a8/0x2fb0 [ 340.590610][T14589] do_syscall_64+0xd2/0x200 [ 340.590633][T14589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.590659][T14589] [ 340.590666][T14589] read to 0xffffffff88e6a658 of 8 bytes by task 14589 on cpu 0: [ 340.590684][T14589] data_push_tail+0xfd/0x420 [ 340.590719][T14589] data_alloc+0xbf/0x2b0 [ 340.590755][T14589] prb_reserve+0x808/0xaf0 [ 340.590790][T14589] vprintk_store+0x56d/0x860 [ 340.590810][T14589] vprintk_emit+0x178/0x650 [ 340.590830][T14589] vprintk_default+0x26/0x30 [ 340.590849][T14589] vprintk+0x1d/0x30 [ 340.590875][T14589] _printk+0x79/0xa0 [ 340.590908][T14589] __ext4_msg+0x18f/0x1a0 [ 340.590933][T14589] ext4_fill_super+0x2d05/0x34e0 [ 340.590958][T14589] get_tree_bdev_flags+0x291/0x300 [ 340.590995][T14589] get_tree_bdev+0x1f/0x30 [ 340.591030][T14589] ext4_get_tree+0x1c/0x30 [ 340.591053][T14589] vfs_get_tree+0x54/0x1d0 [ 340.591092][T14589] do_new_mount+0x207/0x680 [ 340.591125][T14589] path_mount+0x4a4/0xb20 [ 340.591156][T14589] __se_sys_mount+0x28f/0x2e0 [ 340.591192][T14589] __x64_sys_mount+0x67/0x80 [ 340.591231][T14589] x64_sys_call+0xd36/0x2fb0 [ 340.591258][T14589] do_syscall_64+0xd2/0x200 [ 340.591280][T14589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.591306][T14589] [ 340.591312][T14589] value changed: 0x0000000100000710 -> 0x2064657463657465 [ 340.591327][T14589] [ 340.591332][T14589] Reported by Kernel Concurrency Sanitizer on: [ 340.591345][T14589] CPU: 0 UID: 0 PID: 14589 Comm: syz.7.3698 Not tainted 6.16.0-rc6-syzkaller-00205-gd786aba32000 #0 PREEMPT(voluntary) [ 340.591381][T14589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 340.591400][T14589] ================================================================== [ 340.623139][T14591] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 340.629351][T14591] EXT4-fs (loop4): 1 truncate cleaned up [ 340.643348][T14593] loop8: detected capacity change from 0 to 512 [ 340.650435][T14591] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 341.369763][T12141] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 341.411857][T10115] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.