last executing test programs: 1m23.539913892s ago: executing program 3 (id=33): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000340), &(0x7f00000003c0)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0, 0x100}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r3, 0x0, 0x7}, 0x18) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1m23.378090595s ago: executing program 3 (id=37): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040084) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r3 = socket(0x18, 0x800, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'vcan0\x00'}}, 0x1e) sendfile(r3, r2, 0x0, 0x8) 1m23.337961808s ago: executing program 3 (id=38): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r1}, &(0x7f0000000340), &(0x7f00000003c0)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x3, 0x60, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0, 0x100}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000380)='kmem_cache_free\x00', r3, 0x0, 0x7}, 0x18) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1m23.245764935s ago: executing program 3 (id=41): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0100000006000000080000000800000040000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000f1a8c61b4d73ff4564cd2cf6167c6fa136351125e03818c2fd006010cc749a3270513b95d65f7c00c55a48ba06ce567bf46430f377fcb0e009c0e5d1dc56fe0473098c49d95bd93001000000968dc5e05d48c1dfddcbe2a68497df2d463a5cce23e17ab133ef0c326230adb8a1d1e419e4bd5a30", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000003edda8ca22d907de"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x11}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x5e78601b3b3e2f53, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000001440)={'wlan0\x00', &(0x7f00000002c0)=@ethtool_drvinfo={0x3, "86ae3c99c903754510b8b63656203d6bff710be893ecde11ad36c1a9783267a3", "4d0c5b1284ba45710dbf272f2ffd39af83664e471f40ab32feb1e5a046300017", "3e755aeb181057d78e7a07b3b523c96a6015aa494927a25bd7da8aa0961de61a", "ed856b3115d7346509aba5d604d85736759758ec6d46ea93758cdbb6036d932c", "645eed90d52e1c272140691987a30b2f01095d9d5902a51a78ad1c29fad4fdc2", "1b8aa1d4c55fae4ea0963fb8", 0x6, 0x7fffffff, 0x800, 0x3, 0x1ff}}) r4 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs2/binder-control\x00', 0x2, 0x0) ioctl$BINDER_CTL_ADD(r4, 0xc1086201, &(0x7f0000000980)={'custom0\x00'}) ioctl$BTRFS_IOC_INO_PATHS(r3, 0xc0389423, &(0x7f00000003c0)={0xfffffffffffffff2, 0x0, [0x7ff, 0x2000000000, 0x0, 0x5], &(0x7f0000000480)}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2, 0x0, 0x3}, 0x18) r5 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000005980)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) read$usbfs(r5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0, 0x1000000}, 0x32) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="05000000010000000a0000000813a84dc9ac0e23b0b0482959b75929b4d00b14e3bf58c16c7793ab5d9687020c11b77c1f784c54ee993a2f90802c32d8b90b0882b8b9f60b9af1e7467b88119a2a0453b4e8a666c5bf7294710523036c77c321546f557f9a17ebf85c2c"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r6, @ANYRES16=r1], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000340)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x9, 0x4, 0x7ffc0002}]}) sched_getparam(0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r9, &(0x7f0000005f40)=[{{&(0x7f0000000d00)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYBLOB="20000000000000000000000007000000440cd1700000000700000e0f940401001400000000000000000600000200000002000000000000001100000000000000000000000100000009000000000000001400000000000000eaffffff0100000006000000000000001400000000000000000000000200000006"], 0x80}}, {{&(0x7f00000010c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, 0x0, 0xffffffffffffff9b, &(0x7f00000012c0)=ANY=[], 0x28}}], 0x2, 0x4000004) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r8, 0x3, 0x6}, 0x10) socket$igmp(0x2, 0x3, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7}, 0x18) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r11, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close_range(r10, 0xffffffffffffffff, 0x0) 1m23.108110006s ago: executing program 3 (id=44): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x1, r1, 0x1, 0x1}, 0x14) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x10) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) r3 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x75, 0x0, &(0x7f0000001080)=0x2a) syz_emit_ethernet(0x15, &(0x7f0000000080)=ANY=[], 0x0) 1m23.107004646s ago: executing program 3 (id=46): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000740)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb4eefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000", @ANYRES16, @ANYRESDEC, @ANYRES8, @ANYRESDEC=0x0], 0x1, 0x343, &(0x7f0000000bc0)="$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") syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$inet6(r5, 0x0, 0x4048043) 1m7.579071945s ago: executing program 32 (id=46): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000740)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb4eefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000", @ANYRES16, @ANYRESDEC, @ANYRES8, @ANYRESDEC=0x0], 0x1, 0x343, &(0x7f0000000bc0)="$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") syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$inet6(r5, 0x0, 0x4048043) 45.585697214s ago: executing program 0 (id=564): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2}, 0x94) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000", @ANYRES16, @ANYBLOB="0008263d7000ffdbdf253a00000008000300", @ANYRES32], 0xb8}, 0x1, 0x0, 0x0, 0x190}, 0x20000000) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x5e}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4c000}, 0x4000000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000001780)={0x134, 0x0, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x31a}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x32e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c6}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x97}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xb4f2}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x752254872334f5c8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d0}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7ef33cbc}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8001}]}, 0x134}, 0x1, 0x0, 0x0, 0x24}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r0, 0x0, 0xff}, 0x18) r1 = socket(0x2b, 0x80801, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000010000107000000000000fd000a0000000600010013"], 0x1c}}, 0x0) close(0x3) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 44.271437198s ago: executing program 0 (id=577): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) prctl$PR_SET_NAME(0xf, &(0x7f0000000480)='gtp\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000001c0)='jbd2_checkpoint_stats\x00', r2, 0x0, 0x8000000000003}, 0x18) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000f80)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000700014002020c600e41b0000900ac000a0501000000160012000a00ff150048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x40080) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1b, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r5}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000024000180060005004e230000060001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x4c080) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="010028bd7000fcdbdf2504"], 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000015c0)='kmem_cache_free\x00', r0}, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001600)=ANY=[@ANYBLOB="000000001d299cdef532cf4d5fe18473643734b3cb6195cd4d3367ad6e32f4a0033b63f876ab00846d33ee96ae6655125dfb037283ae925bb89ed65806a9b3b84b4015119309e53e9ffcbda625a09ac9df485271878fa0413fa10a0ba8b831bbac1b09137e576d4a8a39df7d8c6a270d8289c925c3cdfb0912e243e219f8f42c125667bfd416b3a8f3d2ecf8edcb7e906a90449a602572c72ced6b603f1196e22b0553aa6b0ee83aa49e25f8a197d04aec6ef248ef7fad894af28eef1c00", @ANYRES16=r10, @ANYBLOB="010000000000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 44.269101278s ago: executing program 0 (id=578): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x1000}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffe00, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x6}, 0x50) r3 = open(&(0x7f0000000000)='./bus\x00', 0x145d81, 0x4) write$binfmt_misc(r3, &(0x7f0000000780)="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", 0x7d9) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x0, &(0x7f00000003c0)=""/255, &(0x7f00000001c0)=0xff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x6, 0x1, {{0x5, 0x4, 0x0, 0x3d, 0x14, 0x0, 0x2, 0x0, 0x5e55b37311de6d89, 0x0, @loopback, @multicast2}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) 44.103840411s ago: executing program 0 (id=583): add_key$keyring(&(0x7f00000000c0), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) syz_mount_image$iso9660(&(0x7f0000000340), &(0x7f00000001c0)='./file0\x00', 0x4c0, &(0x7f0000000740)={[{@map_acorn}, {@dmode={'dmode', 0x3d, 0x6}}, {@map_acorn}, {@sbsector}, {@block={'block', 0x3d, 0x800}}, {@check_strict}, {@showassoc}, {@sbsector}, {@sbsector}, {@utf8}, {@dmode={'dmode', 0x3d, 0x6}}, {@dmode={'dmode', 0x3d, 0x2}}, {@utf8}, {@hide}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@map_off}, {@hide}], [{@obj_user={'obj_user', 0x3d, '\b\x00re\xe5\x02;WaxEz@\xaf\xf4\xf49\xba]\xca\xa3x\x82\xef\x1e\va\xd0x\x7f:\f\xea\xceXG1\x836\x04\x12I\xecSj\xe5\xc6\x8f\xd2O]\xe40,\xff\xa0$\xf2\x92C\x017.\x06\'R\n\x870\xd2N\x02\x04f\xb5\xe7\x11{\x91\xe0\xcb\x12\xaf\xfe\x8c\x94s\xc7\x0f\x7ft\xf2\x93\x9a\xcb\x8e\f\xa1\"Ev\x8b\x86\xe1\xee\x0e\x83kv;,\f\xf5\xc1Q\xba\x84\xc8\x0f5\x1aw\xa3G\f\xb6\xf22\xdba!\xb8$\xce\xba4\xde\x96\xfd\x14-\x99\xcfz\x83\xdf\xe05$\xfdT\xdd!\x06$'}}, {@measure}]}, 0x0, 0x987, &(0x7f0000001300)="$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") r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') pipe(0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) lseek(r3, 0xfffd, 0x0) pwrite64(r2, 0x0, 0x0, 0x7fffffff) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0xe, 0x2) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000000000)=0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x5a, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6008120000242b0000000000000000000000ffffac1414bbfe8000000000000000000000000000aa3a000000000000000000000000000000000000000000000000000000000c907801000001", @ANYRESOCT=r6, @ANYRES16=r0], 0x0) 43.345889541s ago: executing program 0 (id=592): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb3a}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket$inet(0x2, 0xa, 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40800) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="03000000040000000400000001000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="1800000001"], 0x50) 42.979872961s ago: executing program 0 (id=600): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000", @ANYRES16, @ANYBLOB="0008263d7000ffdbdf253a00000008000300", @ANYRES32=r0], 0xb8}, 0x1, 0x0, 0x0, 0x190}, 0x20000000) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x5, 0x5e}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4c000}, 0x4000000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000001780)={0x134, 0x0, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x31a}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x32e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c6}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x97}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xb4f2}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x752254872334f5c8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d0}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7ef33cbc}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8001}]}, 0x134}, 0x1, 0x0, 0x0, 0x24}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xff}, 0x18) r1 = socket(0x2b, 0x80801, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000010000107000000000000fd000a0000000600010013"], 0x1c}}, 0x0) close(0x3) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 42.97947771s ago: executing program 33 (id=600): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="b8000000", @ANYRES16, @ANYBLOB="0008263d7000ffdbdf253a00000008000300", @ANYRES32=r0], 0xb8}, 0x1, 0x0, 0x0, 0x190}, 0x20000000) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @val={0xc, 0x99, {0x5, 0x5e}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4c000}, 0x4000000) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000001780)={0x134, 0x0, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r0}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8000}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1d}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x31a}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x16ee}], @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xd7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x32e}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x101}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x2c6}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x4}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x97}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x3}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xb4f2}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x1}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x752254872334f5c8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x3d0}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x9}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x7ef33cbc}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x8001}]}, 0x134}, 0x1, 0x0, 0x0, 0x24}, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xff}, 0x18) r1 = socket(0x2b, 0x80801, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000010000107000000000000fd000a0000000600010013"], 0x1c}}, 0x0) close(0x3) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8000000, 0x7fffffe, 0x2d0, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x200, 0xffffffff, 0xffffffff, 0x200, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @mcast1, [0x0, 0x0, 0x0, 0xffffff], [0x0, 0x0, 0x4c62d6309aaa1bde, 0xff000000], 'ip6tnl0\x00', 'nicvf0\x00', {}, {0xff}, 0x3a}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x4, '\x00', 'syz1\x00'}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [], [0x0, 0x0, 0xffffff00, 0xffffff00], 'veth1\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', {0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x330) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000001700)={0x0, 0x0, &(0x7f0000001540)={0x0, 0xd4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) 3.194132157s ago: executing program 1 (id=891): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) r0 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x10, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91103a000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = syz_io_uring_setup(0x5c6, &(0x7f0000000140)={0x0, 0x1001, 0x0, 0x1}, &(0x7f00000001c0)=0x0, &(0x7f0000000580)=0x0) fstat(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x28007c2, &(0x7f0000000680)={[{@delalloc}, {@resuid={'resuid', 0x3d, r7}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid={'resgid', 0x3d, r8}}, {@acl}, {@dax_always}]}, 0x0, 0x483, &(0x7f0000001040)="$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") newfstatat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {r7}}, './file0\x00'}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000004c0)=@IORING_OP_TIMEOUT={0xb, 0x18, 0x0, 0x0, 0x4, &(0x7f0000000280)={0x0, 0x989680}, 0x1, 0x40, 0x1}) io_uring_enter(r4, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x0) read(r9, &(0x7f0000000200)=""/209, 0xd1) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x2c}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="070000000400000000020000db21000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x50) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000000000000000000018120000930c38de072e35d51e0252aa25d892cdd34f53c72d61a095e5d134ee47e71772f24389c46ca67d877a9498a2e14efd63e8129382e5775da5020802abfc6481d05daf0e076a4d6759b2e7724d17820870979ff244", @ANYRES32=r11, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r13}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00', @ANYRES16, @ANYBLOB="bbfb2bbd7000fddbdf25670000000800c400020000000800c3"], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$unix(r15, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="180008000c0000000000000001000000", @ANYRES32=r14, @ANYRES32=r15], 0x18, 0x841}, 0x84) recvmsg$unix(r14, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r12}, 0x18) 2.316035386s ago: executing program 1 (id=897): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x1f, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000240)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) ustat(0x8000000000000001, 0x0) syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000ec0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x21081e, &(0x7f0000000540)={[], [{@func={'func', 0x3d, 'POLICY_CHECK'}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}]}, 0x1, 0x4fa, &(0x7f0000002480)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 2.175388228s ago: executing program 5 (id=900): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r0, 0x0, 0x4804}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000200)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x8001, &(0x7f0000000180)=0x3ff, 0xc, 0x0) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x8001, &(0x7f0000000180)=0x3ff, 0xc, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r5, @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a0043"], 0x40}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000004c0)=""/4096, 0x1000}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002f000b12d25a80648c2594f90124fc60100c034002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r8 = semget(0x2, 0x6, 0x6f0) semop(r8, &(0x7f0000000000)=[{0x4, 0x8000, 0x800}, {0x1, 0xfffd, 0x800}, {0x1, 0x1, 0x1800}], 0x3) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) dup(r2) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r12, 0x1, 0x0, 0x25cfdbfc, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r5, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000740)={0x148, r12, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0x40}, {0x8, 0x15, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xc}, {0x6, 0x11, 0x81}, {0x8, 0x15, 0x9}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xcd}, {0x6, 0x11, 0x800}, {0x8, 0x15, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xa0c}, {0x6, 0x11, 0x3}, {0x8, 0x15, 0x8}}]}, 0x148}, 0x1, 0x0, 0x0, 0x894}, 0x40080) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r9, @ANYRES32=r10, @ANYBLOB="05"], 0x10) 2.095787294s ago: executing program 1 (id=901): bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x9, 0x8, 0x2, 0x0, 0x1, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) acct(&(0x7f0000000d00)='./file0\x00') connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000040)={{0x1, 0x1, 0x4}}) r4 = socket$inet(0x2, 0x1, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r4, 0x0, 0x81, &(0x7f00000001c0)={'nat\x00', 0x0, 0x0, 0x0, [0x4, 0x80, 0xffffffffffffffc0, 0xfff, 0xfffffffffffffff7, 0xd], 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x108) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, &(0x7f0000000100)) syz_clone3(&(0x7f0000000ac0)={0x0, &(0x7f0000000080)=0xffffffffffffffff, &(0x7f0000000340), &(0x7f0000000840), {0xf}, &(0x7f0000000880)=""/249, 0xf9, &(0x7f0000000980)=""/208, &(0x7f0000000a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x5}, 0x58) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000040000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r6, 0x0, 0x1}, 0x18) syz_emit_ethernet(0x66, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}, {{}, {}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) ioctl$FS_IOC_SETFSLABEL(r5, 0x41009432, &(0x7f0000000b40)="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") 1.946437756s ago: executing program 5 (id=906): bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000021007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r2, r3, 0x4, 0x0, @void}, 0x10) 1.89091038s ago: executing program 6 (id=908): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000240), 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, 0x0) set_mempolicy(0x8006, 0x0, 0x5) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='mm_page_alloc\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000004) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x1000000000000008}, 0x18) 1.88765408s ago: executing program 5 (id=909): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) r3 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x4e, 0x1, 0x0, 0x0, 0x0, 0x210e, 0x2040e, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, @perf_config_ext={0x7, 0x400}, 0x11aa0, 0x30, 0x30000, 0x6, 0x18bb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) renameat2(r2, &(0x7f00000010c0)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES8=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a40)={&(0x7f0000000980)='sys_enter\x00', r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='./file0\x00', 0x80000000) r6 = syz_open_dev$vcsu(&(0x7f0000000300), 0x5, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x4, 0x2010, r1, 0x6c084000) timer_settime(0x0, 0x1, 0x0, 0x0) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x2000002, 0x8031, r2, 0x6a855000) madvise(&(0x7f00007fa000/0x3000)=nil, 0x3000, 0x19) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) recvmsg$qrtr(r6, &(0x7f0000001100)={&(0x7f0000001080), 0xc, &(0x7f00000037c0)=[{&(0x7f0000001380)=""/223, 0xdf}, {&(0x7f0000001480)=""/4096, 0x328}, {&(0x7f0000003d80)=""/144, 0x8f}, {&(0x7f0000003680)=""/182, 0xb6}, {&(0x7f0000003cc0)=""/150, 0x96}, {&(0x7f0000003740)=""/122, 0x7a}, {&(0x7f0000003880)=""/184, 0xb8}, {&(0x7f0000003b40)=""/178, 0xb2}, {&(0x7f0000003c00)=""/165, 0xa5}], 0x9, &(0x7f00000039c0)=[{0x28, 0x0, 0x0, ""/17}, {0xd0, 0x0, 0x0, ""/191}, {0x88, 0x0, 0x0, ""/114}], 0x180, 0x40010121}, 0x38, 0x10) mincore(&(0x7f0000197000/0x1000)=nil, 0x1000, &(0x7f0000001280)=""/172) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) r9 = inotify_init1(0x0) inotify_add_watch(r9, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x6000516) setxattr$incfs_metadata(&(0x7f0000000200)='./file1\x00', &(0x7f0000000080), 0x0, 0x0, 0x0) 1.687109037s ago: executing program 6 (id=913): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ff"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffe00, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x6}, 0x50) 1.568024436s ago: executing program 6 (id=915): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@nomblk_io_submit}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@jqfmt_vfsold}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) getpeername$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0}, &(0x7f0000000500)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0xa}}]}}, @TCA_RATE={0x6}]}, 0x4c}}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="50000000100001042abd70000000000000000000", @ANYRES32=r10, @ANYBLOB="824900000000000028003780090001007665746800000000100002"], 0x50}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000780)={'tunl0\x00', 0x0, 0x7800, 0x10, 0x8, 0x7ff, {{0x9, 0x4, 0x2, 0x4, 0x24, 0x68, 0x0, 0x1, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x48, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) r14 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r15, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000840)) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000008c0)) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000000e80)={&(0x7f0000000340), 0xc, &(0x7f0000000e40)={&(0x7f0000000f80)=ANY=[@ANYBLOB="2c040000", @ANYRES16=0x0, @ANYBLOB="040026bd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="fc0002807c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000004c0004000001800103000000050002087800000009000900010000000300051b0300000001007f0005000000f7ffbacf0900000006000509030000000000803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600"/184, @ANYRES32=r16, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400ff030000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="0401028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000700000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001400040004000006040000000500fe090100000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000200000008000600", @ANYRES32=r5, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000008000100", @ANYRES32=r6, @ANYBLOB="0400028008000100", @ANYRES32=r13, @ANYBLOB="b800028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r15, @ANYBLOB="080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040092a700003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=r12, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ff01000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000900000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000a000000080007000000000008000100", @ANYRES32=r16, @ANYBLOB="780002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040000000000"], 0x42c}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f00000000c0)='./file0\x00', 0x200026, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1.110404362s ago: executing program 1 (id=920): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000b00)="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", 0x1000}, {&(0x7f0000000200)="1a1d4728a46e38a37a38173e13dceeb163af698aef6329b49054e101f2613f1778338f7b73834aeb7335a7922cfd6f6fe265abee8f9dc4043e45547078bed837ca900e19bafb581d91503a43b0c625cbf7f488f3718655289ea3650cba6516401888f1c334", 0x65}, {&(0x7f00000003c0)="162bdf6c053f7c695266c0dec1c838528385629be97e03c96726664f43f1f72d08b58f8c92d44f90ebe4c684270b0ff51e5b6450ed8b51b525d6ecb767b279e8a8f021a3173289f87703be820dab65eca08efd8135dab28f5c3630445aaae13ec63d61d0d38a68d60493154e22c21a09c5b7ffca8ac3fb55c7f97222d58ed2f0dfaa08ba5f9acca11e62c01380a2493571076047c2b71623f692e8092b3cc9520d896863fd12317b7d715f646131c30ceed0ac38d39055ee42b8f9acbb420f2794ab3499cf1858c7d86c563a9a0e8dc15a8cc1e8c6e77ef3933fbcac0196536d08c0d0106a7f4747176a38fd2b64f21652d8dedacd42de1b", 0xf8}, {&(0x7f0000001b00)="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", 0x1000}, {&(0x7f0000000280)="0af77b38b9cf246d9708e8a82fefad198893d2900e5af9b359bdd1c9e2155b2dbf6114bdd5eea028dc7b4a619e1350b660202daf6459841390abf706e20bf0f6e582025b17b2d3ac470c52f50a5e8db99d869b49e154", 0x56}], 0x5) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000180)=0x14, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r2}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x3}}, [@TCA_RATE={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8090}, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f00000001c0)=@req3={0x4, 0xfffffffa, 0x8001, 0xf, 0x1dba, 0x2cd4, 0x1fa2}, 0x1c) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TCSETSF(r6, 0x5404, &(0x7f00000005c0)={0x0, 0xc2cf, 0x0, 0x595f314f, 0x19, "00e40000ded0fffdab7923e56de8bd024af900"}) io_setup(0x20fe, &(0x7f00000001c0)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") creat(&(0x7f0000000340)='./bus\x00', 0x182) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x11) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f00000005c0)) pwritev2(r7, &(0x7f0000000cc0)=[{&(0x7f0000000240)=';', 0xffffffbc}], 0x1, 0xfff, 0xc, 0x4) ioctl$EXT4_IOC_MIGRATE(r7, 0x6609) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRESHEX=r8], 0x48) r10 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x2004c000) ioctl$sock_SIOCOUTQ(r10, 0x5411, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r11}, 0x18) 1.048321357s ago: executing program 2 (id=923): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = dup(r2) fsetxattr$security_selinux(r3, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0xa1) 965.906494ms ago: executing program 2 (id=925): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 938.777705ms ago: executing program 5 (id=927): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES64=r1, @ANYRES32=r1, @ANYRES64=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x400000d, 0x5d031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000004c0)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x1f5}}, {@grpjquota, 0x2e}, {@barrier}, {@nolazytime}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x84, 0x4aa, &(0x7f0000000740)="$eJzs3MtvG0UYAPBvN4++m7SURx9QQ0FEFJImLdADh4JA6gUJCQ7lGNJQlaYtaoJEq4oGhMoR8RcARyQkTlw4gYQQcAJxhTtCqlAvLRxQ0Nq7ybqxU8d5GOrfT7IzszvrmW93xx7vZB1A16pkT0nE1oj4NSIGatn6ApXan5vXL0/8df3yRBJzcy//mVTL3bh+eaIoWmy3Jc8MpRHp+0nsbVDv9MVLZ8anpiYv5PmRmbNvjkxfvPTE6bPjpyZPTZ4bO3r0yOHRp58ae3JV4sziurHnnfP7dh9/9aMXJ+bitR8+z9q7NV9fjqNmcMV1VqISc7mFpf3V50dW/Or/LdtK6aS3gw1hWXoiIjtcfdX+PxA9sXDwBuKF9+Yz33aogcCayT6bdixa2pP/Tec/v4A7UaKPQ5cqPvGz77/FYz3HH5127dnsebIa/838UVvTG2n2XXaw9o29p8n2x1ZY/9aIODH798fZIxpehwAAWF1fZ+OfxxuN/9K4p1Ruez6HMhgRByNiZ0TcFRG7IuLuiGrZeyPivmXWX7klv3j88/OmtgJrUTb+eyaf26of/6V5iWQ+t60af1/y+umpyUP5PhmKvg1ZfnSJOr55/pcPm62rlMZ/2SOrvxgL5u34o3dD/TYnx2fGVxBynWvvRuzpbRR/Mj8TkO2B3RGxp43Xz/bZ6cc+25elt29ZvP728S9hFeaZ5j6NeLR2/GfjlvgLSa2mZvOTIxtjavLQSHFWLPbjT1dfKuf7Sum6+De2FtPGdoNtIDv+mxue/3n8RTco5munl1/H1d8+aPqdZvHxT+LEbLlE7fxPS0uy878/eaWa7s+XvT0+M3NhNKI/X1C3fGxh2yJflM/iHzrQuP/vjPjnk3y7vRGRncT3R8QDEbE/b/uDEfFQRBxYIv7vn3v4jaX3UJvn/yrI4j+51PGPGEzK8/VtJHrOfPdVs/pbe/87Uk0N5Utaef9rtYEr2XcAAADwf5FW56CTdLhIly5O7YrN6dT56ZmDlXjr3MnaXPVg9KXFla6B0vXQ0fzacJEfuyV/OCJ2VP/TaFM1PzxxfmpbJwMHqvfq1PX/SNPh4dq635v90wtw51jWPFr57sAvvlz9xgDryv2a0L30f+he+j90L/0fulej/n8l4mYHmgKsM5//0L30f+he+j90L/0futLiW+KLn1tp507/hcTO4yvafM0TcwNr8sqzy9+qZ40ijfKPdjRNJBHRXhWRLl2mv4XaO5ZIb1vmWJu7ZRmJ/XliQ0S0utWVddurnX1fAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWC3/BgAA//+NJdz0") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x2000, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) recvfrom$inet6(r5, 0x0, 0x0, 0x120, 0x0, 0x0) sendmsg$nl_route(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x70bd2c, 0x2, {0x0, 0x0, 0x0, 0x0, 0x401c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) r7 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r7, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) r8 = socket$packet(0x11, 0x2, 0x300) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$packet_tx_ring(r8, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000100)=@req3={0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x861}, 0x1c) sendmsg$inet(r7, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000940b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024) getdents(r4, 0x0, 0x54) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0xffff, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@cswp={0x58, 0x114, 0x7, {{0x1, 0x3}, &(0x7f0000000140)=0x4, 0x0, 0x2, 0x3ff, 0xd, 0x8000000000000000, 0x8, 0x2}}, @mask_fadd={0x58, 0x114, 0x8, {{0xfffffff4, 0x5}, 0x0, 0x0, 0x1c4f, 0x5, 0x8, 0x8, 0x13}}], 0xb0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 938.530665ms ago: executing program 2 (id=928): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffff001}, 0x18) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x8, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7}, 0x94) 913.394078ms ago: executing program 6 (id=929): bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=@newqdisc={0x468, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x43c, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x5ec888eb7598db49}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x1, 0x8, 0x4, 0xff, 0x6}, {0x4, 0x0, 0x3, 0xa159, 0x1000, 0x7}, 0x3, 0x8, 0x41e}}, @TCA_TBF_PTAB={0x404, 0x3, [0x104, 0x2, 0xc, 0xfdf, 0x0, 0x8ba, 0xa1, 0x4d91, 0x7fffffff, 0x63c4, 0x0, 0x7ffd, 0x400, 0x255, 0x6, 0xc, 0xd81, 0x3, 0xa, 0xa, 0x7, 0x6, 0xc, 0x200, 0xfffffffd, 0x5, 0xb96, 0x7, 0x0, 0xffffffff, 0x200, 0x3, 0x80000001, 0x7c, 0xfffffffc, 0x5, 0x3, 0x2, 0x8, 0x6, 0x1, 0xd, 0x80, 0x400, 0x80, 0x90000010, 0x3800000, 0x0, 0xfffff30b, 0x800, 0xf6, 0x81, 0xfffffffa, 0x80, 0x101, 0x3f, 0xfffffbff, 0x36a5, 0x4, 0x6, 0x200, 0x1ba, 0x9, 0xab, 0x6, 0xfffffff7, 0x6, 0x0, 0x3, 0x1, 0x963, 0x1ff, 0x2, 0xfffffffd, 0x6, 0x5, 0x0, 0x3, 0x0, 0xb09, 0x3ff, 0xa, 0x8000, 0x4, 0x8, 0x1000, 0x101, 0x5, 0x3, 0x6, 0x9, 0x3, 0x1, 0x8762, 0x10008e, 0x1, 0xfffff76b, 0x0, 0x4, 0x4275c4e9, 0xb53, 0x5, 0x800, 0x4, 0x955, 0x5, 0x6cdf139e, 0x9, 0x3, 0x5, 0x10001, 0xff, 0x80000001, 0xed2, 0x5, 0xfffffffa, 0x10002, 0x18d0, 0x0, 0x3, 0x9486, 0x80, 0x5, 0x80000000, 0xdb, 0x3, 0x80, 0xffbf7ffc, 0x5, 0x8, 0x7, 0x1, 0x2, 0x8008, 0x2, 0x8, 0x2, 0x81, 0x3, 0x1, 0x6bf, 0x7, 0xea, 0x4, 0xc1, 0x2, 0x40, 0x5, 0x27f, 0x200, 0x7, 0x40, 0x7, 0x4, 0x7, 0xff, 0x400, 0x8, 0x7fffffff, 0xfffffff8, 0x8, 0xfffffff4, 0x8, 0xc, 0x96, 0x6, 0x104, 0x62cc, 0x2, 0x7, 0x2eb7, 0x10001, 0xcbf, 0x10000, 0x101, 0x9, 0xfffffffa, 0x1, 0x8, 0x7, 0x8001, 0xf, 0x5, 0x8, 0x8d, 0xffffffff, 0x2, 0x6, 0x1, 0x61, 0xffffffff, 0x494, 0xb, 0x1, 0x1, 0xd1, 0xd, 0x9, 0x1002, 0xffffffff, 0x6, 0x3, 0xfffffffb, 0xffff, 0xff, 0x5, 0xe, 0xff, 0x2, 0x8cc5, 0x8, 0x159, 0xfffffff7, 0x81, 0x382ae49d, 0x9, 0xffffffff, 0x1ffff, 0xdf3b, 0x8d, 0x6, 0xfffffef7, 0x89c3, 0x6319da67, 0x5, 0x9, 0x2, 0xfffff801, 0x0, 0x5, 0x5, 0x7, 0x7, 0x7f, 0x7, 0x1, 0x0, 0xffffffff, 0xdfed, 0xb, 0x77, 0x7, 0xff, 0xb331, 0x9, 0x6, 0x9, 0x7, 0x5, 0x400, 0x10001, 0x1, 0x800, 0x6000, 0xfe000000, 0xfffffffd]}]}}]}, 0x468}}, 0x0) 898.460379ms ago: executing program 2 (id=930): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x14000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000005880)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x4804}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r6 = accept(r4, 0x0, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) r7 = io_uring_setup(0x3686, &(0x7f0000000a80)={0x0, 0xaffe, 0x0, 0x7, 0x673}) close_range(r7, 0xffffffffffffffff, 0x0) recvmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r9, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 831.921964ms ago: executing program 4 (id=931): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000740)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb4eefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000", @ANYRES16, @ANYRESDEC, @ANYRES8, @ANYRESDEC=0x0], 0x1, 0x343, &(0x7f0000000bc0)="$eJzs3cGLG1UcB/BfY+22tdvsQQQF8aEXvYTd9R8wSAvigrJ2pXoQpu6shkyTJRMqKWJ7E2/+HcWjN0EEz3vx7s3bXjz2UIwk2d1u4u7BQna25POB5L3My5d5k/DC7zJ5+7d/vNveKRs7WT9q76W4EhG1xxErUYtDFw7a2rh/KY57GO/Ub//5+iefff5hc2PjxmZKN5u33l1PKV1/49dvvv3pzd/6L3368/VflmJv5Yv9v9f/2ntl79X9f2593SpTq0ydbj9l6U6328/uFHnabpXtRkofF3lW5qnVKfPe1PhO0d3dHaSss718dbeXl2XKOoPUzgep30393iBlX2WtTmo0Gmn5aiyWZ7nerUebm1lzDpPhDP0we+DK9Mter5mN1vDSf5Jbj+Y6MQDgXJqt/2txeXy8ovr/sET5//X/hUWv/5+F+n8RjOr/Swfrd5r6HwAAAAAAAAAAAAAAngePh8P6cDisH7azj6rnx3z5/hfbsRv3LkcU39/burc1aSfjzZ1oRRF5rEY9nkQMj8T4TsGbH2zcWE1jK7F898EkP2pfmM6vRT1WpvOj51F+LaU0fJDSdP7F8T9aHOXXox4vn5xfn5x/Jn8p3n7rWL4R9fjjy+hGEdsxyj7Nf7eW0vsfbczkl8bvAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAxNNKRE/fvbzROG5/kj/bXX416PDl5f/7VE/fnvxivXaz22gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgUDm4386KIu+dfedhnDI0PFDVxM6+EzG3U/x+LU77nHXOV+fawZo8H/Op+IcJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKvB00++qZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECVysH9dlYUeW+OnaqvEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HnybwAAAP//V3Yinw==") syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$inet6(r5, 0x0, 0x4048043) 739.682981ms ago: executing program 4 (id=932): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000010c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) recvmsg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000001c40)=""/4096, 0x8ec0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) 728.007932ms ago: executing program 6 (id=933): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000810018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r6}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000740)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb4eefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000", @ANYRES16, @ANYRESDEC, @ANYRES8, @ANYRESDEC=0x0], 0x1, 0x343, &(0x7f0000000bc0)="$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") syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaa"], 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$inet6(r5, 0x0, 0x4048043) 673.603526ms ago: executing program 6 (id=934): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20081e, &(0x7f0000000840)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa30}}, {@grpquota}]}, 0x1, 0x52a, &(0x7f0000001440)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a000000010000ffffff7f000000000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES16=0x0, @ANYBLOB, @ANYBLOB='\x00'/28], 0x50) unshare(0x68040200) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x27, 0x1, 0x0, 0x4, 0x0, 0x1000000009, 0x690bb, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0xef, 0x3d27}, 0x4400, 0x32, 0x8000, 0x7, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x3, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x5, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180800"/13], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) getdents64(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000240)="5c00000014006b03c84e21008bf32c19021800f80200000044000200ac14140e05251e6182949a36c23d3b48dfd8cdbf9367b498fa51f60a64c9f4d4938037e786a6d0bdd77f6f60c1504bb9189d9193e9bd1c1b7800000000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r4, 0x20) poll(&(0x7f0000000400)=[{r1}, {r2, 0xe3ee}], 0x2, 0x11ff) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000a40)={0x0, 0x7fffffff, 0x9}) open_tree(0xffffffffffffff9c, 0x0, 0x9001) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000d8ff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) syz_clone3(&(0x7f0000000580)={0x20000, 0x0, 0x0, 0x0, {0x20}, 0x0, 0x0, 0x0, &(0x7f0000000540)=[0x0], 0x1}, 0x58) perf_event_open(0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="5800000002060108000000bca3000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080012400000000211000300686173683a69702c6d61726b"], 0x58}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c0001800800000000fd4ebc08000a400000000205000300020000000900020073797a310000000005000100"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 622.99266ms ago: executing program 4 (id=935): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000180)={0x2002000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="5400ffff0000", 0x6, 0x0, 0x0, 0x2}]) (fail_nth: 4) 580.150374ms ago: executing program 2 (id=936): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000600)='kfree\x00', r3}, 0x18) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2b, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) keyctl$restrict_keyring(0xa, 0x0, &(0x7f0000000300)='asymmetric\x00', &(0x7f00000001c0)='dd:\xff\xffe{') pwritev(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x5, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r1, 0x58, &(0x7f00000004c0)}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000700)={0x0}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) preadv2(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x7) statfs(&(0x7f0000000040)='./file1\x00', 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000007c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@nouid32}, {@resgid}, {@acl}, {@jqfmt_vfsold}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r8, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100280000000000000002000000200001800d0001007564703a73797a32"], 0x34}}, 0x0) 310.559835ms ago: executing program 4 (id=937): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffe00, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x6}, 0x50) 308.946585ms ago: executing program 1 (id=938): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100012, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x43, 0x4}, 0x1}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x4, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) 272.985578ms ago: executing program 4 (id=939): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYRESOCT=r0], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153}, 0x94) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21c91c, &(0x7f0000000440)={[{@nomblk_io_submit}, {@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x200000}}, {@jqfmt_vfsold}, {@noinit_itable}, {@quota}, {@noauto_da_alloc}, {@sysvgroups}, {@resgid, 0x32}]}, 0x1, 0x4e0, &(0x7f0000001a40)="$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") mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="06000000040000"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.current\x00', 0x26e1, 0x0) perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000080)}, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) getpeername$packet(r3, &(0x7f0000000400)={0x11, 0x0, 0x0}, &(0x7f0000000500)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0xa}}]}}, @TCA_RATE={0x6}]}, 0x4c}}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="50000000100001042abd70000000000000000000", @ANYRES32=r10, @ANYBLOB="824900000000000028003780090001007665746800000000100002"], 0x50}, 0x1, 0x0, 0x0, 0xc10}, 0x8000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f00000005c0)={'syztnl1\x00', &(0x7f0000000780)={'tunl0\x00', 0x0, 0x7800, 0x10, 0x8, 0x7ff, {{0x9, 0x4, 0x2, 0x4, 0x24, 0x68, 0x0, 0x1, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0x48, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000800)={'team0\x00', 0x0}) r14 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000005a40)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r15, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0xb4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000840)) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000880)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000008c0)) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000000e80)={&(0x7f0000000340), 0xc, &(0x7f0000000e40)={&(0x7f0000000f80)=ANY=[@ANYBLOB="2c040000", @ANYRES16=0x0, @ANYBLOB="040026bd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="fc0002807c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000004c0004000001800103000000050002087800000009000900010000000300051b0300000001007f0005000000f7ffbacf0900000006000509030000000000803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600"/184, @ANYRES32=r16, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400ff030000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="0401028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000700000044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000001400040004000006040000000500fe090100000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000200000008000600", @ANYRES32=r5, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000008000100", @ANYRES32=r6, @ANYBLOB="0400028008000100", @ANYRES32=r13, @ANYBLOB="b800028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r15, @ANYBLOB="080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040092a700003c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000008000100", @ANYRES32=r12, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400ff01000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000900000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000a000000080007000000000008000100", @ANYRES32=r16, @ANYBLOB="780002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040000000000"], 0x42c}, 0x1, 0x0, 0x0, 0x1}, 0x24000000) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f00000000c0)='./file0\x00', 0x200026, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 271.720319ms ago: executing program 5 (id=940): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0, 0x0, 0xfffffffffffff001}, 0x18) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x8, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x88f8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7}, 0x94) 206.288553ms ago: executing program 1 (id=941): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x2439, 0x0, &(0x7f0000000080), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x43) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000180)='kfree\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000002c0)={[{@norecovery}, {@max_batch_time={'max_batch_time', 0x3d, 0x2327}}]}, 0xee, 0x480, &(0x7f00000012c0)="$eJzs3EtsG0UfAPD/Oq+mjy/5Snm0tBAoiIpH0qQPeuACAokDSEhwKOIUkrQqTRvUBIlWFRQO5YgqcUcckbgjcYILAg4IiSvcUaWq6qWFk9HYu6nj2ImTuHGLfz9pnZndjWb+nh3veMZ2AF1rJD1kEdsj4o+IGKpml54wUv1z68bFqb9vXJzKolx+83pWOe/mjYtTxanF/22rZsrliIGUHGhQ7uV3IiZnZ2fO5fmxhTPvj82fv/DcqTOTJ2dOzpydOHbs8KF9/UcnjmwovlL+N8V1c89Hc3t3v/r2ldenjl959+dvUn2358dr41iXFG2dkeqzW+/R9PDkhgq7q/yaHnbU7Mh6m588ugkVonU9EZGaq6/S/4eiJwYXjw3FK592tHLAHVUul8uN7s+5S2XgPyyLTtcA6IziRp/e/xbbJg097grXXqy+AUpx38q36pHexbmDvrr3t+00EhHHL/3zZdqiHfMQAACr+D6Nf55tNP4rxQM15/0vX0MZjoj/R8TOiLgvInZFxP0RlXMfjIiH1lh+/QrJ8vFP6eq6AmtRGv+9kK9tLR3/FaO/GO7Jczsq8fdlJ07NzhzMn5MD0TeQ8uMrlPHDy79/Hvk4ckvdsdrxX9pS+cVYMK/H1d66CbrpyYXJdsSeXPskYk9vo/izKJZxsojYHRF71lnGqae/3tvs2Orxr2CFdaZWlb+KeKra/pdiSfy3mypruj45/vzRiSNjW2J25uBYcVUs98tvl99oVv6G4m+D1P5bG17/i6vAw9mWiPnzF05X1mvn117G5T8/q+nTS1aXU/ylbyPWfP33Z29V0v35vg8nFxbOjUf0Z68t3z9x+3+LfHF+iv/A/sb9f2dNjR+OiHQR74uIR/JF3NR2j0XE4xGxf4X4f3rpifeaHVvW/oNF/CvMyrdRin96tfaP2vZfe6Ln9I/ftRx/w/Y/XEkdyPe08vrXagU38twBAADAvaJU+Qx8VhpdTJdKo6PVz/Dviq2l2bn5hWdOzH1wdrr6Wfnh6CsVM11DNfOh4/nccJGfqMsfyueNv+gZrORHp+ZmpzsdPHS5bU36f/JXT6drB9xxbVhHA+5R6+v/g22vB7D53P+he+n/0L30f+hejfr/xx2oB7D53P+he+n/0L30f+he+j90pabfjS9t6Cv/HU4Uv52Q9mSrRdo4cb3zUWw4MXgni4hS5wPsikRvyz9msc7EQMNDHXxRAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaKN/AwAA//9cZN73") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f00000004c0)=ANY=[@ANYBLOB="000000004c900200010000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) 162.523917ms ago: executing program 5 (id=942): perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8020, 0x14000, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_config_ext={0x2, 0x6}, 0x8224, 0x2, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000005880)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1b, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r1, 0x0, 0x4804}, 0x18) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$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") quotactl$Q_GETNEXTQUOTA(0xffffffff80000901, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r6 = accept(r4, 0x0, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000300)={0x0, 0xea60}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) io_uring_setup(0x3686, &(0x7f0000000a80)={0x0, 0xaffe, 0x0, 0x7, 0x673}) recvmsg$can_bcm(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r3) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000003040)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r8, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) 46.892496ms ago: executing program 4 (id=943): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000240)=0x5, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000010850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff9ce}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000400)='ex\x0f\xac\xd1\xeb\xf4\xd8&w\xef\x9f`T3%\xfa\xbf\xef\xeb\x8e1w\xfd') setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000005b80)={@loopback, 0x33, r5}) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev\x00') close_range(r6, r6, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0x20, &(0x7f0000000200)={&(0x7f0000000280)=""/241, 0xf1, 0x0, &(0x7f0000000180)=""/26, 0x1a}}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10`\xee\xa9\x8b\x06%\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xa96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xd9Jx\xaa\x8f~\xb94a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xd6m\xf7@]iNP\xf1\x1d\xab\x13\xce\x152s\xb8\x85\x98\x84\xbf\x8c\x80{\x16\t\xd6\x17P3\xe9\xebGKL\xd3\x88\xd2\rLG\x8e\xd6\xa72\xf4\x92\xeb&\xa5\xcc\x14FZN\x98%[p\x989\xf6\xf5\xb6\xedk\xe6\xb0\xa1\x8f\x90\xdb\xd6h)\x0f6\x88\x03P\x8ak\xf9\xc9\x82`\xa7Ku\x99\xab\xd4\xb2\xaa1\x99O\x8b\x99-\xe3', 0x1) r10 = dup(r9) write$binfmt_elf64(r10, &(0x7f00000006c0)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0xff, 0x78, 0xa3, 0x5, 0x2, 0x3e, 0xcd, 0x3c9, 0x40, 0x2ea, 0x10002, 0x5, 0x38, 0x1, 0x6, 0x6b1, 0x400}, [{0x3, 0x81, 0xff, 0x9, 0x8, 0x9, 0x7}]}, 0x78) execveat(r10, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000400)=@generic={&(0x7f00000003c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r13], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r15 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x50) r16 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x2, 0x3, 0xda4, 0x8, 0x40400, 0x1, 0x6, '\x00', r5, 0xffffffffffffffff, 0x2, 0x4, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x7, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x9}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa2e, 0x2a, &(0x7f0000000100)=""/42, 0x41100, 0x2, '\x00', r5, @fallback=0x18, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x3, 0xf, 0x5, 0x3}, 0x10, r7, r4, 0x0, &(0x7f00000005c0)=[r8, r10, r11, r12, r13, r14, r15, r0, r16], 0x0, 0x10, 0x5}, 0x94) 0s ago: executing program 2 (id=944): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000100000000000000", @ANYRES32=0x1], 0x50) r0 = socket$kcm(0xa, 0x5, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x2, 0xfffe, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000000080)='_', 0x1}], 0x1}, 0x865) setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000240), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000580)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x80000380, 0x0, 0x0, 0x800003b0, 0x800003e0], 0x0, 0x0, 0x0}, 0xe8) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r3}) kernel console output (not intermixed with test programs): 73524][ T4956] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.445: corrupted inode contents [ 64.524871][ T4971] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=65535 sclass=netlink_audit_socket pid=4971 comm=syz.5.448 [ 64.556331][ T4956] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.445: mark_inode_dirty error [ 64.590607][ T4956] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.445: corrupted inode contents [ 64.606626][ T4956] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 64.615897][ T4993] FAULT_INJECTION: forcing a failure. [ 64.615897][ T4993] name failslab, interval 1, probability 0, space 0, times 0 [ 64.628627][ T4993] CPU: 0 UID: 0 PID: 4993 Comm: syz.0.452 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 64.628662][ T4993] Tainted: [W]=WARN [ 64.628670][ T4993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 64.628689][ T4993] Call Trace: [ 64.628698][ T4993] [ 64.628705][ T4993] __dump_stack+0x1d/0x30 [ 64.628775][ T4993] dump_stack_lvl+0xe8/0x140 [ 64.628795][ T4993] dump_stack+0x15/0x1b [ 64.628813][ T4993] should_fail_ex+0x265/0x280 [ 64.628835][ T4993] should_failslab+0x8c/0xb0 [ 64.628894][ T4993] kmem_cache_alloc_noprof+0x69/0x4b0 [ 64.628991][ T4993] ? getname_flags+0x80/0x3b0 [ 64.629015][ T4993] ? fput+0x8f/0xc0 [ 64.629042][ T4993] getname_flags+0x80/0x3b0 [ 64.629068][ T4993] __x64_sys_symlinkat+0x40/0x70 [ 64.629136][ T4993] x64_sys_call+0x2a36/0x3000 [ 64.629159][ T4993] do_syscall_64+0xd8/0x2c0 [ 64.629262][ T4993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.629281][ T4993] RIP: 0033:0x7f7c3e9bf749 [ 64.629295][ T4993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 64.629311][ T4993] RSP: 002b:00007f7c3d427038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 64.629328][ T4993] RAX: ffffffffffffffda RBX: 00007f7c3ec15fa0 RCX: 00007f7c3e9bf749 [ 64.629338][ T4993] RDX: 0000200000000140 RSI: ffffffffffffffff RDI: 0000000000000000 [ 64.629404][ T4993] RBP: 00007f7c3d427090 R08: 0000000000000000 R09: 0000000000000000 [ 64.629414][ T4993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 64.629425][ T4993] R13: 00007f7c3ec16038 R14: 00007f7c3ec15fa0 R15: 00007fffeba6b6d8 [ 64.629440][ T4993] [ 64.629816][ T4956] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.445: corrupted inode contents [ 64.816543][ T4995] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 64.828915][ T4956] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.445: mark_inode_dirty error [ 64.865453][ T4956] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 64.928441][ T4956] EXT4-fs (loop2): 1 truncate cleaned up [ 64.938971][ T5007] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.979291][ T4956] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 65.027984][ T5026] EXT4-fs (loop2): shut down requested (1) [ 65.035343][ T5026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.445'. [ 65.044188][ T5026] macvlan0: entered promiscuous mode [ 65.049804][ T5026] netlink: 'syz.2.445': attribute type 1 has an invalid length. [ 65.057479][ T5026] netlink: 'syz.2.445': attribute type 2 has an invalid length. [ 65.065143][ T5026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.445'. [ 65.090444][ T5033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.466'. [ 65.099940][ T5030] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 65.112460][ T5033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 65.119902][ T5033] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 65.143244][ T4956] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 65.164043][ T5033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 65.171492][ T5033] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 65.182016][ T5039] FAULT_INJECTION: forcing a failure. [ 65.182016][ T5039] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 65.194493][ T5036] netlink: 8 bytes leftover after parsing attributes in process `syz.0.466'. [ 65.195145][ T5039] CPU: 0 UID: 0 PID: 5039 Comm: syz.5.468 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 65.195176][ T5039] Tainted: [W]=WARN [ 65.195205][ T5039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 65.195237][ T5039] Call Trace: [ 65.195244][ T5039] [ 65.195252][ T5039] __dump_stack+0x1d/0x30 [ 65.195276][ T5039] dump_stack_lvl+0xe8/0x140 [ 65.195298][ T5039] dump_stack+0x15/0x1b [ 65.195367][ T5039] should_fail_ex+0x265/0x280 [ 65.195390][ T5039] should_fail+0xb/0x20 [ 65.195409][ T5039] should_fail_usercopy+0x1a/0x20 [ 65.195481][ T5039] _copy_to_user+0x20/0xa0 [ 65.195505][ T5039] simple_read_from_buffer+0xb5/0x130 [ 65.195524][ T5039] proc_fail_nth_read+0x10e/0x150 [ 65.195630][ T5039] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 65.195701][ T5039] vfs_read+0x1a8/0x770 [ 65.195728][ T5039] ? __rcu_read_unlock+0x4f/0x70 [ 65.195757][ T5039] ? __fget_files+0x184/0x1c0 [ 65.195779][ T5039] ? mutex_lock+0x58/0x90 [ 65.195804][ T5039] ksys_read+0xda/0x1a0 [ 65.195823][ T5039] __x64_sys_read+0x40/0x50 [ 65.195848][ T5039] x64_sys_call+0x2889/0x3000 [ 65.195872][ T5039] do_syscall_64+0xd8/0x2c0 [ 65.195924][ T5039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.195946][ T5039] RIP: 0033:0x7f925b17e15c [ 65.195961][ T5039] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 65.195980][ T5039] RSP: 002b:00007f9259bdf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 65.195998][ T5039] RAX: ffffffffffffffda RBX: 00007f925b3d5fa0 RCX: 00007f925b17e15c [ 65.196092][ T5039] RDX: 000000000000000f RSI: 00007f9259bdf0a0 RDI: 0000000000000004 [ 65.196104][ T5039] RBP: 00007f9259bdf090 R08: 0000000000000000 R09: 0000000000000000 [ 65.196116][ T5039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 65.196128][ T5039] R13: 00007f925b3d6038 R14: 00007f925b3d5fa0 R15: 00007ffc2aaa1498 [ 65.196146][ T5039] [ 65.213202][ T5041] netlink: 'gtp': attribute type 7 has an invalid length. [ 65.265325][ T5044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.466'. [ 65.303676][ T5048] EXT4-fs: inline encryption not supported [ 65.305406][ T5044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.466'. [ 65.431221][ T5048] EXT4-fs: Ignoring removed orlov option [ 65.437934][ T5048] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 65.457224][ T5046] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 65.478877][ T5036] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 65.522741][ T5048] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 65.579690][ T5048] System zones: 0-1, 3-12 [ 65.829684][ T5073] EXT4-fs: Ignoring removed oldalloc option [ 66.450418][ T5074] EXT4-fs: Ignoring removed oldalloc option [ 66.477085][ T5074] EXT4-fs mount: 62 callbacks suppressed [ 66.477148][ T5074] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.478413][ T5073] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.484051][ T5074] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.477: bg 0: block 88: padding at end of block bitmap is not set [ 66.565264][ T4329] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.594828][ T5090] netlink: 464 bytes leftover after parsing attributes in process `syz.2.481'. [ 66.610638][ T5093] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 66.713621][ T5098] netlink: 'gtp': attribute type 7 has an invalid length. [ 66.719550][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.730603][ T3330] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 66.744730][ T5100] EXT4-fs: Ignoring removed nomblk_io_submit option [ 66.781572][ T5100] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 66.790333][ T5100] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 66.871787][ T5114] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.886802][ T5111] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 66.908862][ T5107] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 66.917591][ T5107] EXT4-fs (loop4): invalid journal inode [ 66.923293][ T5107] EXT4-fs (loop4): can't get journal size [ 66.924256][ T5100] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.483: Allocating blocks 41-42 which overlap fs metadata [ 66.947716][ T5107] EXT4-fs (loop4): 1 truncate cleaned up [ 66.953744][ T5107] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 66.987259][ T5100] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.483: Failed to acquire dquot type 1 [ 66.998754][ T5100] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 67.013669][ T5100] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.483: corrupted inode contents [ 67.033656][ T5100] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.483: mark_inode_dirty error [ 67.056299][ T5114] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.090921][ T5135] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.103795][ T5100] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.483: corrupted inode contents [ 67.119622][ T5100] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.483: mark_inode_dirty error [ 67.120636][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.146524][ T5100] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.483: corrupted inode contents [ 67.172188][ T5100] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 67.181856][ T5114] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.204527][ T5100] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.483: corrupted inode contents [ 67.219752][ T5100] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.483: mark_inode_dirty error [ 67.235384][ T5100] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 67.245784][ T5100] EXT4-fs (loop2): 1 truncate cleaned up [ 67.253623][ T5114] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.258745][ T5100] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.308112][ T5100] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 67.350152][ T5100] EXT4-fs (loop2): shut down requested (1) [ 67.350315][ T5157] netlink: 464 bytes leftover after parsing attributes in process `syz.0.494'. [ 67.357202][ T5100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.483'. [ 67.376886][ T5100] netlink: 'syz.2.483': attribute type 1 has an invalid length. [ 67.384603][ T5100] netlink: 'syz.2.483': attribute type 2 has an invalid length. [ 67.392367][ T5100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.483'. [ 67.405629][ T5100] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 67.415026][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.426198][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.439994][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.471093][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.489949][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.520886][ T5162] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 67.652057][ T5171] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.499: bg 0: block 248: padding at end of block bitmap is not set [ 67.666856][ T5171] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.499: Failed to acquire dquot type 1 [ 67.678605][ T5171] EXT4-fs (loop0): 1 truncate cleaned up [ 67.684899][ T5171] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.697471][ T5171] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 67.716689][ T5171] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.499: Failed to acquire dquot type 1 [ 67.909867][ T5179] EXT4-fs: Ignoring removed oldalloc option [ 67.966363][ T5179] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.987229][ T5179] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.496: bg 0: block 88: padding at end of block bitmap is not set [ 68.023731][ T29] kauditd_printk_skb: 202 callbacks suppressed [ 68.023746][ T29] audit: type=1400 audit(1765914219.514:1299): avc: denied { write } for pid=5184 comm="syz.1.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 68.076543][ T29] audit: type=1400 audit(1765914219.544:1300): avc: denied { setopt } for pid=5184 comm="syz.1.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 68.098549][ T29] audit: type=1326 audit(1765914219.574:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5184 comm="syz.1.502" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f62fea9f749 code=0x0 [ 68.123406][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.157573][ T5190] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 68.159001][ T5191] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.184005][ T5191] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 68.192756][ T5191] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 68.244225][ T5191] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.506: Allocating blocks 41-42 which overlap fs metadata [ 68.259778][ T5191] Quota error (device loop5): write_blk: dquota write failed [ 68.267195][ T5191] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 68.271982][ T5199] tipc: Enabling of bearer rejected, failed to enable media [ 68.276558][ T5191] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.506: Allocating blocks 41-42 which overlap fs metadata [ 68.299857][ T5191] Quota error (device loop5): write_blk: dquota write failed [ 68.307657][ T5191] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 68.318260][ T5191] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.506: Failed to acquire dquot type 1 [ 68.333030][ T5191] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 68.354395][ T5191] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.506: corrupted inode contents [ 68.373926][ T5191] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #12: comm syz.5.506: mark_inode_dirty error [ 68.377007][ T5199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.508'. [ 68.385451][ T5191] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.506: corrupted inode contents [ 68.406983][ T5191] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.506: mark_inode_dirty error [ 68.418805][ T5191] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.506: corrupted inode contents [ 68.431018][ T5191] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 68.439845][ T5191] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.506: corrupted inode contents [ 68.452109][ T5191] EXT4-fs error (device loop5): ext4_truncate:4635: inode #12: comm syz.5.506: mark_inode_dirty error [ 68.463218][ T5203] set_capacity_and_notify: 17 callbacks suppressed [ 68.463233][ T5203] loop0: detected capacity change from 0 to 512 [ 68.463589][ T5191] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 68.479546][ T5203] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 68.493839][ T5191] EXT4-fs (loop5): 1 truncate cleaned up [ 68.503229][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.514842][ T5191] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.557817][ T5215] loop4: detected capacity change from 0 to 512 [ 68.573617][ T5216] FAULT_INJECTION: forcing a failure. [ 68.573617][ T5216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 68.586756][ T5216] CPU: 0 UID: 0 PID: 5216 Comm: syz.2.510 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 68.586833][ T5216] Tainted: [W]=WARN [ 68.586839][ T5216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 68.586851][ T5216] Call Trace: [ 68.586858][ T5216] [ 68.586865][ T5216] __dump_stack+0x1d/0x30 [ 68.586888][ T5216] dump_stack_lvl+0xe8/0x140 [ 68.586908][ T5216] dump_stack+0x15/0x1b [ 68.586988][ T5216] should_fail_ex+0x265/0x280 [ 68.587009][ T5216] should_fail+0xb/0x20 [ 68.587025][ T5216] should_fail_usercopy+0x1a/0x20 [ 68.587046][ T5216] _copy_from_iter+0xcf/0xe70 [ 68.587096][ T5216] ? alloc_pages_mpol+0x217/0x260 [ 68.587148][ T5216] copy_page_from_iter+0x178/0x2a0 [ 68.587243][ T5216] tun_get_user+0x679/0x2670 [ 68.587267][ T5216] ? ref_tracker_alloc+0x1f2/0x2f0 [ 68.587293][ T5216] tun_chr_write_iter+0x15e/0x210 [ 68.587314][ T5216] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 68.587338][ T5216] vfs_write+0x52a/0x960 [ 68.587360][ T5216] ksys_write+0xda/0x1a0 [ 68.587380][ T5216] __x64_sys_write+0x40/0x50 [ 68.587406][ T5216] x64_sys_call+0x2847/0x3000 [ 68.587429][ T5216] do_syscall_64+0xd8/0x2c0 [ 68.587528][ T5216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.587615][ T5216] RIP: 0033:0x7f6939fee1ff [ 68.587631][ T5216] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 68.587646][ T5216] RSP: 002b:00007f6938a4f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 68.587662][ T5216] RAX: ffffffffffffffda RBX: 00007f693a245fa0 RCX: 00007f6939fee1ff [ 68.587705][ T5216] RDX: 000000000000003e RSI: 0000200000000440 RDI: 00000000000000c8 [ 68.587718][ T5216] RBP: 00007f6938a4f090 R08: 0000000000000000 R09: 0000000000000000 [ 68.587730][ T5216] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001 [ 68.587771][ T5216] R13: 00007f693a246038 R14: 00007f693a245fa0 R15: 00007ffc63eedb38 [ 68.587790][ T5216] [ 68.589636][ T5191] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 68.707042][ T5215] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.512: bg 0: block 248: padding at end of block bitmap is not set [ 68.810227][ T5215] Quota error (device loop4): write_blk: dquota write failed [ 68.810936][ T29] audit: type=1326 audit(1765914220.304:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5221 comm="syz.2.513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6939fef749 code=0x7ffc0000 [ 68.817622][ T5215] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 68.860211][ T5215] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.512: Failed to acquire dquot type 1 [ 68.873485][ T5215] EXT4-fs (loop4): 1 truncate cleaned up [ 68.879716][ T5215] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 68.892443][ T5215] ext4 filesystem being mounted at /127/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 68.903684][ T5191] EXT4-fs (loop5): shut down requested (1) [ 68.922504][ T5215] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.512: Failed to acquire dquot type 1 [ 68.937002][ T5191] netlink: 8 bytes leftover after parsing attributes in process `syz.5.506'. [ 68.964091][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.011079][ T5191] netlink: 'syz.5.506': attribute type 1 has an invalid length. [ 69.018792][ T5191] netlink: 'syz.5.506': attribute type 2 has an invalid length. [ 69.026496][ T5191] netlink: 8 bytes leftover after parsing attributes in process `syz.5.506'. [ 69.066125][ T5229] loop0: detected capacity change from 0 to 164 [ 69.076408][ T5229] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 69.091068][ T5191] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 69.104363][ T5229] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 69.112832][ T5231] loop1: detected capacity change from 0 to 512 [ 69.119765][ T5229] Symlink component flag not implemented [ 69.125468][ T5229] Symlink component flag not implemented [ 69.133306][ T5231] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 69.144838][ T5231] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 69.155078][ T5231] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.518: Corrupt directory, running e2fsck is recommended [ 69.223161][ T5234] loop4: detected capacity change from 0 to 1024 [ 69.230229][ T5229] Symlink component flag not implemented (7) [ 69.236208][ T5229] Symlink component flag not implemented (116) [ 69.243096][ T4329] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.254944][ T5234] EXT4-fs: inline encryption not supported [ 69.260953][ T5234] EXT4-fs: Ignoring removed orlov option [ 69.291844][ T5234] EXT4-fs (loop4): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 69.353230][ T5234] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 69.376914][ T5234] System zones: 0-1, 3-12 [ 69.387369][ T5248] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=5248 comm=syz.0.523 [ 69.401308][ T5231] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 69.409365][ T5231] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.518: corrupted in-inode xattr: invalid ea_ino [ 69.424632][ T5231] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.518: couldn't read orphan inode 15 (err -117) [ 69.425017][ T5234] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 69.459669][ T5231] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.459987][ T5250] loop2: detected capacity change from 0 to 512 [ 69.479549][ T5250] EXT4-fs: dax option not supported [ 69.559332][ T5254] loop0: detected capacity change from 0 to 128 [ 69.565607][ T5257] FAULT_INJECTION: forcing a failure. [ 69.565607][ T5257] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.565663][ T5257] CPU: 0 UID: 0 PID: 5257 Comm: syz.5.527 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 69.565693][ T5257] Tainted: [W]=WARN [ 69.565700][ T5257] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 69.565712][ T5257] Call Trace: [ 69.565718][ T5257] [ 69.565725][ T5257] __dump_stack+0x1d/0x30 [ 69.565770][ T5257] dump_stack_lvl+0xe8/0x140 [ 69.565793][ T5257] dump_stack+0x15/0x1b [ 69.565812][ T5257] should_fail_ex+0x265/0x280 [ 69.565833][ T5257] should_fail+0xb/0x20 [ 69.565852][ T5257] should_fail_usercopy+0x1a/0x20 [ 69.565881][ T5257] _copy_from_iter+0xcf/0xe70 [ 69.565907][ T5257] ? lockref_put_return+0xf7/0x130 [ 69.565985][ T5257] ? skb_set_owner_w+0x19b/0x200 [ 69.566012][ T5257] ? sock_alloc_send_pskb+0x44c/0x4e0 [ 69.566060][ T5257] skb_copy_datagram_from_iter+0xb1/0x490 [ 69.566107][ T5257] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 69.566152][ T5257] ? skb_put+0xa9/0xf0 [ 69.566175][ T5257] unix_stream_sendmsg+0x61f/0xb80 [ 69.566264][ T5257] ? __pfx_unix_stream_sendmsg+0x10/0x10 [ 69.566318][ T5257] __sock_sendmsg+0x145/0x180 [ 69.566337][ T5257] __sys_sendto+0x268/0x330 [ 69.566377][ T5257] __x64_sys_sendto+0x76/0x90 [ 69.566405][ T5257] x64_sys_call+0x29a7/0x3000 [ 69.566429][ T5257] do_syscall_64+0xd8/0x2c0 [ 69.566496][ T5257] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.566533][ T5257] RIP: 0033:0x7f925b17f749 [ 69.566548][ T5257] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 69.566566][ T5257] RSP: 002b:00007f9259bdf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 69.566586][ T5257] RAX: ffffffffffffffda RBX: 00007f925b3d5fa0 RCX: 00007f925b17f749 [ 69.566669][ T5257] RDX: 0000000000000003 RSI: 0000200000000600 RDI: 0000000000000005 [ 69.566681][ T5257] RBP: 00007f9259bdf090 R08: 0000000000000000 R09: 0000000000000000 [ 69.566693][ T5257] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 69.566705][ T5257] R13: 00007f925b3d6038 R14: 00007f925b3d5fa0 R15: 00007ffc2aaa1498 [ 69.566723][ T5257] [ 69.567314][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.584178][ T5231] bond2: entered promiscuous mode [ 69.605390][ T5254] EXT4-fs: Ignoring removed nobh option [ 69.745445][ T5261] netlink: 204 bytes leftover after parsing attributes in process `syz.5.529'. [ 69.754500][ T5254] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 69.770569][ T5263] Falling back ldisc for ttyS3. [ 69.834692][ T5254] ext4 filesystem being mounted at /103/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 69.865321][ T5231] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 69.876899][ T5231] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 69.887026][ T5231] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.518: Corrupt directory, running e2fsck is recommended [ 69.903781][ T5268] loop4: detected capacity change from 0 to 512 [ 69.910375][ T5231] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz.1.518: path /142/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 69.917599][ T5268] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 70.025543][ T3330] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.204680][ T5287] loop2: detected capacity change from 0 to 128 [ 70.212937][ T5287] EXT4-fs: Ignoring removed nobh option [ 70.220506][ T5287] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.234763][ T3317] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.245179][ T5288] loop1: detected capacity change from 0 to 512 [ 70.274042][ T5287] ext4 filesystem being mounted at /102/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 70.285561][ T5288] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.535: bg 0: block 248: padding at end of block bitmap is not set [ 70.332493][ T5288] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.535: Failed to acquire dquot type 1 [ 70.358688][ T5291] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.389338][ T5288] EXT4-fs (loop1): 1 truncate cleaned up [ 70.395831][ T5291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.539'. [ 70.414134][ T4774] IPVS: starting estimator thread 0... [ 70.421674][ T5299] netlink: 204 bytes leftover after parsing attributes in process `syz.5.540'. [ 70.422067][ T5288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.454205][ T5295] netlink: 'syz.0.538': attribute type 12 has an invalid length. [ 70.462074][ T5295] netlink: 'syz.0.538': attribute type 29 has an invalid length. [ 70.469971][ T5295] netlink: 'syz.0.538': attribute type 1 has an invalid length. [ 70.477659][ T5295] netlink: 'syz.0.538': attribute type 2 has an invalid length. [ 70.485414][ T5295] netlink: 'syz.0.538': attribute type 1 has an invalid length. [ 70.493271][ T5295] netlink: 228 bytes leftover after parsing attributes in process `syz.0.538'. [ 70.502355][ T5295] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.516770][ T5288] ext4 filesystem being mounted at /144/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.540512][ T5288] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.535: Failed to acquire dquot type 1 [ 70.580708][ T3330] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.619273][ T5300] IPVS: using max 2352 ests per chain, 117600 per kthread [ 70.621302][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.651132][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.728838][ T5309] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 70.868126][ T5325] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 70.895193][ T5332] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 71.049843][ T5333] EXT4-fs: Ignoring removed oldalloc option [ 71.136900][ T3503] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 71.172523][ T5333] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.187557][ T5333] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.548: bg 0: block 88: padding at end of block bitmap is not set [ 71.210468][ T3503] loop0: p1 start 460800 is beyond EOD, truncated [ 71.216912][ T3503] loop0: p2 size 83886080 extends beyond EOD, truncated [ 71.265190][ T3503] loop0: p5 start 460800 is beyond EOD, truncated [ 71.271689][ T3503] loop0: p6 size 83886080 extends beyond EOD, truncated [ 71.291366][ T5340] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 71.302569][ T5340] EXT4-fs (loop5): invalid journal inode [ 71.308226][ T5340] EXT4-fs (loop5): can't get journal size [ 71.317222][ T5340] EXT4-fs (loop5): 1 truncate cleaned up [ 71.323419][ T5340] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.336927][ T5295] loop0: p1 p2 p3 < > p4 < p5 p6 > [ 71.345791][ T5343] EXT4-fs: Ignoring removed nobh option [ 71.347059][ T5295] loop0: p1 start 460800 is beyond EOD, truncated [ 71.356076][ T3321] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 71.357841][ T5295] loop0: p2 size 83886080 extends beyond EOD, truncated [ 71.360649][ T5295] loop0: p5 start 460800 is beyond EOD, truncated [ 71.385647][ T5295] loop0: p6 size 83886080 extends beyond EOD, truncated [ 71.386327][ T5343] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 71.405074][ T3321] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 71.414033][ T5343] ext4 filesystem being mounted at /137/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 71.425568][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.510072][ T3503] udevd[3503]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 71.510099][ T4603] udevd[4603]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 71.511771][ T3590] udevd[3590]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 71.523639][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 71.553714][ T5347] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.569408][ T4329] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.586255][ T3319] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 71.623802][ T3330] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.637326][ T3310] udevd[3310]: inotify_add_watch(7, /dev/loop0p6, 10) failed: No such file or directory [ 71.692998][ T3590] udevd[3590]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 71.707855][ T5347] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in; [ 71.707855][ T5347] program syz.0.556 not setting count and/or reply_len properly [ 71.732590][ T3308] udevd[3308]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 71.747708][ T3503] udevd[3503]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 71.773110][ T5358] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.561: bg 0: block 248: padding at end of block bitmap is not set [ 71.792274][ T5358] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.561: Failed to acquire dquot type 1 [ 71.887223][ T5361] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.562: bg 0: block 248: padding at end of block bitmap is not set [ 71.986602][ T5361] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.562: Failed to acquire dquot type 1 [ 72.012403][ T5371] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 72.037498][ T5358] EXT4-fs (loop4): 1 truncate cleaned up [ 72.080156][ T5358] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.162696][ T3317] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set [ 72.169200][ T5358] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.188167][ T5361] EXT4-fs (loop2): 1 truncate cleaned up [ 72.193203][ T3317] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem [ 72.206301][ T3317] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.215092][ T5358] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.561: Failed to acquire dquot type 1 [ 72.216562][ T5361] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.260233][ T5361] ext4 filesystem being mounted at /107/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 72.287992][ T5361] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.562: Failed to acquire dquot type 1 [ 72.331491][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.342020][ T3319] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.583387][ T5388] FAULT_INJECTION: forcing a failure. [ 72.583387][ T5388] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.596504][ T5388] CPU: 0 UID: 0 PID: 5388 Comm: syz.4.569 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 72.596533][ T5388] Tainted: [W]=WARN [ 72.596539][ T5388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 72.596578][ T5388] Call Trace: [ 72.596586][ T5388] [ 72.596595][ T5388] __dump_stack+0x1d/0x30 [ 72.596619][ T5388] dump_stack_lvl+0xe8/0x140 [ 72.596639][ T5388] dump_stack+0x15/0x1b [ 72.596656][ T5388] should_fail_ex+0x265/0x280 [ 72.596702][ T5388] should_fail+0xb/0x20 [ 72.596797][ T5388] should_fail_usercopy+0x1a/0x20 [ 72.596819][ T5388] _copy_from_user+0x1c/0xb0 [ 72.596845][ T5388] core_sys_select+0x1d3/0x6e0 [ 72.596941][ T5388] ? set_user_sigmask+0x84/0x190 [ 72.596968][ T5388] __se_sys_pselect6+0x213/0x280 [ 72.596988][ T5388] __x64_sys_pselect6+0x78/0x90 [ 72.597008][ T5388] x64_sys_call+0x2e98/0x3000 [ 72.597043][ T5388] do_syscall_64+0xd8/0x2c0 [ 72.597084][ T5388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.597107][ T5388] RIP: 0033:0x7f79555ff749 [ 72.597124][ T5388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.597143][ T5388] RSP: 002b:00007f7954067038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 72.597173][ T5388] RAX: ffffffffffffffda RBX: 00007f7955855fa0 RCX: 00007f79555ff749 [ 72.597186][ T5388] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 72.597197][ T5388] RBP: 00007f7954067090 R08: 0000000000000000 R09: 0000000000000000 [ 72.597208][ T5388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.597218][ T5388] R13: 00007f7955856038 R14: 00007f7955855fa0 R15: 00007ffe65c0cd18 [ 72.597234][ T5388] [ 72.986429][ T5393] EXT4-fs: Ignoring removed oldalloc option [ 73.077381][ T5387] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 73.104491][ T5387] EXT4-fs (loop1): invalid journal inode [ 73.110323][ T5387] EXT4-fs (loop1): can't get journal size [ 73.249015][ T5393] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.292115][ T5387] EXT4-fs (loop1): 1 truncate cleaned up [ 73.298359][ T5387] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 73.374134][ T5405] EXT4-fs: Ignoring removed nomblk_io_submit option [ 73.381796][ T5408] validate_nla: 1 callbacks suppressed [ 73.381811][ T5408] netlink: 'gtp': attribute type 7 has an invalid length. [ 73.382779][ T5405] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 73.390834][ T5409] bridge1: entered promiscuous mode [ 73.394532][ T5405] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 73.403162][ T5409] bridge1: entered allmulticast mode [ 73.468445][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.492082][ T5405] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.575: Allocating blocks 41-42 which overlap fs metadata [ 73.540130][ T29] kauditd_printk_skb: 507 callbacks suppressed [ 73.540201][ T29] audit: type=1400 audit(1765914225.014:1796): avc: denied { ioctl } for pid=5413 comm="syz.0.578" path="socket:[11419]" dev="sockfs" ino=11419 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.548546][ T5417] set_capacity_and_notify: 14 callbacks suppressed [ 73.548561][ T5417] loop2: detected capacity change from 0 to 512 [ 73.585187][ T5405] Quota error (device loop5): write_blk: dquota write failed [ 73.592637][ T5405] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 73.613101][ T3330] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.636410][ T5419] loop4: detected capacity change from 0 to 128 [ 73.645304][ T5417] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 73.654152][ T5421] loop0: detected capacity change from 0 to 1024 [ 73.663996][ T5419] EXT4-fs: Ignoring removed nobh option [ 73.673209][ T5421] EXT4-fs: Ignoring removed oldalloc option [ 73.679183][ T5421] EXT4-fs: Ignoring removed bh option [ 73.690352][ T5405] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 73.700400][ T5405] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.575: Failed to acquire dquot type 1 [ 73.729561][ T5421] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.752222][ T5405] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 73.752813][ T5419] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.766918][ T5405] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.575: corrupted inode contents [ 73.799619][ T5419] ext4 filesystem being mounted at /146/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 73.837268][ T5405] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #12: comm syz.5.575: mark_inode_dirty error [ 73.879227][ T5405] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.575: corrupted inode contents [ 73.909555][ T5405] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.575: mark_inode_dirty error [ 73.946337][ T5405] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.575: corrupted inode contents [ 73.970890][ T29] audit: type=1400 audit(1765914225.354:1797): avc: denied { accept } for pid=5433 comm="syz.1.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 73.971491][ T5436] loop1: detected capacity change from 0 to 1024 [ 74.009692][ T5436] EXT4-fs: inline encryption not supported [ 74.015522][ T5436] EXT4-fs: Ignoring removed orlov option [ 74.019114][ T29] audit: type=1326 audit(1765914225.484:1798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5418 comm="syz.4.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79555ff749 code=0x7ffc0000 [ 74.022303][ T5405] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 74.044513][ T29] audit: type=1326 audit(1765914225.484:1799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5418 comm="syz.4.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79555ff749 code=0x7ffc0000 [ 74.076242][ T29] audit: type=1326 audit(1765914225.494:1800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5418 comm="syz.4.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f79555ff749 code=0x7ffc0000 [ 74.099542][ T29] audit: type=1326 audit(1765914225.494:1801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5418 comm="syz.4.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79555ff749 code=0x7ffc0000 [ 74.123052][ T29] audit: type=1326 audit(1765914225.494:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5418 comm="syz.4.582" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79555ff749 code=0x7ffc0000 [ 74.155457][ T5405] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.575: corrupted inode contents [ 74.168180][ T5436] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 74.187010][ T5405] EXT4-fs error (device loop5): ext4_truncate:4635: inode #12: comm syz.5.575: mark_inode_dirty error [ 74.213359][ T5436] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 74.217469][ T5405] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 74.229246][ T5436] System zones: 0-1, 3-12 [ 74.235415][ T5436] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.235929][ T5405] EXT4-fs (loop5): 1 truncate cleaned up [ 74.268781][ T5405] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 74.294449][ T3330] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.304806][ T3319] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 74.353477][ T5421] hub 4-0:1.0: USB hub found [ 74.361915][ T5421] hub 4-0:1.0: 8 ports detected [ 74.409619][ T5448] netlink: 'gtp': attribute type 7 has an invalid length. [ 74.430461][ T5450] EXT4-fs (loop5): shut down requested (1) [ 74.443669][ T5446] loop2: detected capacity change from 0 to 512 [ 74.459458][ T5446] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 74.467901][ T5405] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 74.477321][ T5446] EXT4-fs (loop2): invalid journal inode [ 74.483056][ T5446] EXT4-fs (loop2): can't get journal size [ 74.496492][ T5446] EXT4-fs (loop2): 1 truncate cleaned up [ 74.502649][ T5446] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.538892][ T5459] loop1: detected capacity change from 0 to 512 [ 74.549815][ T5405] __nla_validate_parse: 1 callbacks suppressed [ 74.549831][ T5405] netlink: 8 bytes leftover after parsing attributes in process `syz.5.575'. [ 74.551103][ T5459] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 74.556086][ T5405] netlink: 'syz.5.575': attribute type 1 has an invalid length. [ 74.584190][ T5405] netlink: 'syz.5.575': attribute type 2 has an invalid length. [ 74.591904][ T5405] netlink: 8 bytes leftover after parsing attributes in process `syz.5.575'. [ 74.608518][ T5405] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 74.649266][ T5462] SELinux: failed to load policy [ 74.655839][ T4329] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.666058][ T5444] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.679480][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.695939][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.737936][ T5464] loop2: detected capacity change from 0 to 1024 [ 74.748221][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.769000][ T5464] EXT4-fs: inline encryption not supported [ 74.774968][ T5464] EXT4-fs: Ignoring removed orlov option [ 74.781200][ T5464] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 74.789638][ T5471] netlink: 'syz.5.598': attribute type 1 has an invalid length. [ 74.800465][ T5464] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e840c018, mo2=0002] [ 74.808868][ T5464] System zones: 0-1, 3-12 [ 74.819617][ T5464] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.834267][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.864447][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.902732][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.981048][ T5497] loop1: detected capacity change from 0 to 512 [ 74.988243][ T5497] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.028984][ T12] bridge_slave_1: left allmulticast mode [ 75.034681][ T12] bridge_slave_1: left promiscuous mode [ 75.040406][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.073173][ T12] bridge_slave_0: left allmulticast mode [ 75.078893][ T12] bridge_slave_0: left promiscuous mode [ 75.084602][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.166183][ T5502] loop2: detected capacity change from 0 to 512 [ 75.173557][ T5502] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 75.182473][ T5502] EXT4-fs (loop2): invalid journal inode [ 75.188158][ T5502] EXT4-fs (loop2): can't get journal size [ 75.196619][ T5502] EXT4-fs (loop2): 1 truncate cleaned up [ 75.202772][ T5502] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.336606][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 75.358212][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 75.380757][ T12] bond0 (unregistering): Released all slaves [ 75.393192][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.482486][ T5530] loop4: detected capacity change from 0 to 512 [ 75.500070][ T5530] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.524166][ T12] hsr_slave_0: left promiscuous mode [ 75.543330][ T12] hsr_slave_1: left promiscuous mode [ 75.545524][ T5535] EXT4-fs: Ignoring removed nobh option [ 75.559216][ T12] veth1_macvtap: left promiscuous mode [ 75.564711][ T12] veth0_macvtap: left promiscuous mode [ 75.572246][ T12] veth1_vlan: left promiscuous mode [ 75.577563][ T12] veth0_vlan: left promiscuous mode [ 75.615794][ T5535] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.654387][ T5535] ext4 filesystem being mounted at /118/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 75.681065][ T5546] FAULT_INJECTION: forcing a failure. [ 75.681065][ T5546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.694285][ T5546] CPU: 0 UID: 0 PID: 5546 Comm: syz.4.618 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 75.694325][ T5546] Tainted: [W]=WARN [ 75.694333][ T5546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 75.694377][ T5546] Call Trace: [ 75.694383][ T5546] [ 75.694391][ T5546] __dump_stack+0x1d/0x30 [ 75.694417][ T5546] dump_stack_lvl+0xe8/0x140 [ 75.694437][ T5546] dump_stack+0x15/0x1b [ 75.694454][ T5546] should_fail_ex+0x265/0x280 [ 75.694539][ T5546] should_fail+0xb/0x20 [ 75.694563][ T5546] should_fail_usercopy+0x1a/0x20 [ 75.694659][ T5546] _copy_from_user+0x1c/0xb0 [ 75.694685][ T5546] core_sys_select+0x1d3/0x6e0 [ 75.694749][ T5546] ? set_user_sigmask+0x84/0x190 [ 75.694778][ T5546] __se_sys_pselect6+0x213/0x280 [ 75.694852][ T5546] ? mutex_unlock+0x4f/0x90 [ 75.694880][ T5546] __x64_sys_pselect6+0x78/0x90 [ 75.694904][ T5546] x64_sys_call+0x2e98/0x3000 [ 75.694980][ T5546] do_syscall_64+0xd8/0x2c0 [ 75.695080][ T5546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.695101][ T5546] RIP: 0033:0x7f79555ff749 [ 75.695115][ T5546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.695132][ T5546] RSP: 002b:00007f7954067038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 75.695232][ T5546] RAX: ffffffffffffffda RBX: 00007f7955855fa0 RCX: 00007f79555ff749 [ 75.695246][ T5546] RDX: 0000200000000000 RSI: 0000200000000100 RDI: 0000000000000040 [ 75.695259][ T5546] RBP: 00007f7954067090 R08: 0000000000000000 R09: 0000000000000000 [ 75.695271][ T5546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.695284][ T5546] R13: 00007f7955856038 R14: 00007f7955855fa0 R15: 00007ffe65c0cd18 [ 75.695302][ T5546] [ 75.919161][ T12] team0 (unregistering): Port device team_slave_1 removed [ 75.949593][ T5557] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 75.962163][ T12] team0 (unregistering): Port device team_slave_0 removed [ 75.962488][ T5560] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.111985][ T5562] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 76.129619][ T5562] EXT4-fs (loop4): invalid journal inode [ 76.135306][ T5562] EXT4-fs (loop4): can't get journal size [ 76.145036][ T5562] EXT4-fs (loop4): 1 truncate cleaned up [ 76.151329][ T5562] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 76.168878][ T5475] chnl_net:caif_netlink_parms(): no params data found [ 76.191981][ T5568] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.222699][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.323200][ T5475] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.330306][ T5475] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.361865][ T5591] EXT4-fs: Ignoring removed nomblk_io_submit option [ 76.381387][ T5591] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 76.390130][ T5591] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 76.394975][ T5475] bridge_slave_0: entered allmulticast mode [ 76.421572][ T5594] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 76.428124][ T5594] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 76.435678][ T5594] vhci_hcd vhci_hcd.0: Device attached [ 76.448289][ T5475] bridge_slave_0: entered promiscuous mode [ 76.461194][ T5598] vhci_hcd: cannot find a urb of seqnum 2097152 max seqnum 0 [ 76.470213][ T5591] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.628: Allocating blocks 41-42 which overlap fs metadata [ 76.488102][ T5475] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.495210][ T5475] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.502663][ T12] IPVS: stop unused estimator thread 0... [ 76.518542][ T921] vhci_hcd vhci_hcd.2: stop threads [ 76.523799][ T921] vhci_hcd vhci_hcd.2: release socket [ 76.529203][ T921] vhci_hcd vhci_hcd.2: disconnect device [ 76.535215][ T5475] bridge_slave_1: entered allmulticast mode [ 76.541899][ T5475] bridge_slave_1: entered promiscuous mode [ 76.560132][ T5591] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.628: Allocating blocks 41-42 which overlap fs metadata [ 76.581479][ T5475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.593737][ T5475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.606362][ T5591] EXT4-fs error (device loop4): ext4_acquire_dquot:6986: comm syz.4.628: Failed to acquire dquot type 1 [ 76.622577][ T5591] EXT4-fs error (device loop4): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 76.639142][ T5591] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.628: corrupted inode contents [ 76.658133][ T5475] team0: Port device team_slave_0 added [ 76.658343][ T5607] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.631: bg 0: block 248: padding at end of block bitmap is not set [ 76.665109][ T5475] team0: Port device team_slave_1 added [ 76.683667][ T5591] EXT4-fs error (device loop4): ext4_dirty_inode:6502: inode #12: comm syz.4.628: mark_inode_dirty error [ 76.704884][ T5607] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.631: Failed to acquire dquot type 1 [ 76.716094][ T5591] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.628: corrupted inode contents [ 76.728522][ T5607] EXT4-fs (loop5): 1 truncate cleaned up [ 76.735224][ T5475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.739607][ T5607] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.742282][ T5475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.778426][ T5475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.789730][ T5591] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #12: comm syz.4.628: mark_inode_dirty error [ 76.792274][ T5475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.807828][ T5475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 76.812210][ T5607] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.631: Failed to acquire dquot type 1 [ 76.833807][ T5475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.857720][ T5591] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.628: corrupted inode contents [ 76.873668][ T5591] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem [ 76.882745][ T5591] EXT4-fs error (device loop4): ext4_do_update_inode:5617: inode #12: comm syz.4.628: corrupted inode contents [ 76.885389][ T5475] hsr_slave_0: entered promiscuous mode [ 76.901185][ T5591] EXT4-fs error (device loop4): ext4_truncate:4635: inode #12: comm syz.4.628: mark_inode_dirty error [ 76.910854][ T5475] hsr_slave_1: entered promiscuous mode [ 76.948702][ T5591] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem [ 76.980538][ T5591] EXT4-fs (loop4): 1 truncate cleaned up [ 77.001338][ T5591] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 77.039899][ T5591] EXT4-fs (loop4): shut down requested (1) [ 77.058195][ T5475] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 77.065315][ T5591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.628'. [ 77.090927][ T5591] netlink: 'syz.4.628': attribute type 1 has an invalid length. [ 77.098639][ T5591] netlink: 'syz.4.628': attribute type 2 has an invalid length. [ 77.106345][ T5591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.628'. [ 77.115504][ T5475] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 77.116782][ T5636] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop4 ino=12 [ 77.134485][ T5475] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 77.144443][ T5475] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 77.165372][ T5580] Alternate GPT is invalid, using primary GPT. [ 77.171864][ T5580] loop1: p2 p3 p7 [ 77.623691][ T5654] EXT4-fs: Ignoring removed oldalloc option [ 77.848289][ T5655] EXT4-fs: Ignoring removed oldalloc option [ 78.399972][ T5475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.161523][ T5475] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.189337][ T5677] set_capacity_and_notify: 10 callbacks suppressed [ 79.189359][ T5677] loop4: detected capacity change from 0 to 512 [ 79.232930][ T5677] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 79.250750][ T4848] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.257816][ T4848] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.285296][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.292388][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.368483][ T5691] loop2: detected capacity change from 0 to 512 [ 79.405067][ T5691] ext4 filesystem being mounted at /126/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 79.433983][ T29] kauditd_printk_skb: 142 callbacks suppressed [ 79.433996][ T29] audit: type=1400 audit(1765914230.924:1937): avc: denied { accept } for pid=5690 comm="syz.2.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.484301][ T29] audit: type=1400 audit(1765914230.974:1938): avc: denied { cpu } for pid=5701 comm="syz.4.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 79.532719][ T29] audit: type=1400 audit(1765914231.004:1939): avc: denied { read } for pid=5690 comm="syz.2.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 79.535543][ T5475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.566922][ T29] audit: type=1326 audit(1765914231.054:1940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.4.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79555ff749 code=0x7ffc0000 [ 79.595507][ T5693] netlink: 'syz.5.650': attribute type 13 has an invalid length. [ 79.620380][ T29] audit: type=1326 audit(1765914231.104:1941): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.4.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f79555ff749 code=0x7ffc0000 [ 79.643752][ T29] audit: type=1326 audit(1765914231.104:1942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.4.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79555ff749 code=0x7ffc0000 [ 79.667099][ T29] audit: type=1326 audit(1765914231.104:1943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.4.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79555ff749 code=0x7ffc0000 [ 79.679067][ T5713] IPv6: NLM_F_CREATE should be specified when creating new route [ 79.690497][ T29] audit: type=1326 audit(1765914231.104:1944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.4.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79555ff749 code=0x7ffc0000 [ 79.690523][ T29] audit: type=1326 audit(1765914231.104:1945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.4.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f79555ff749 code=0x7ffc0000 [ 79.744923][ T29] audit: type=1326 audit(1765914231.104:1946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5707 comm="syz.4.654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79555ff749 code=0x7ffc0000 [ 79.776836][ T5693] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 79.915086][ T5730] netlink: 32 bytes leftover after parsing attributes in process `syz.2.659'. [ 79.974093][ T5736] geneve1: entered promiscuous mode [ 79.980786][ T5736] bond_slave_0: entered promiscuous mode [ 79.986494][ T5736] bond_slave_0: left promiscuous mode [ 80.000161][ T5736] geneve1: left promiscuous mode [ 80.045206][ T5475] veth0_vlan: entered promiscuous mode [ 80.076385][ T5475] veth1_vlan: entered promiscuous mode [ 80.200147][ T5475] veth0_macvtap: entered promiscuous mode [ 80.207838][ T5475] veth1_macvtap: entered promiscuous mode [ 80.221175][ T5475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.232875][ T5475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.244893][ T5756] loop1: detected capacity change from 0 to 128 [ 80.252912][ T2098] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.272589][ T5760] loop4: detected capacity change from 0 to 128 [ 80.297349][ T5760] EXT4-fs: Ignoring removed nobh option [ 80.310749][ T2098] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.337134][ T2098] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.347164][ T2098] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.357975][ T5760] ext4 filesystem being mounted at /164/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 80.370061][ T5755] loop2: detected capacity change from 0 to 1024 [ 80.388629][ T5761] loop5: detected capacity change from 0 to 128 [ 80.405373][ T5755] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 80.545080][ T5775] loop2: detected capacity change from 0 to 512 [ 80.563861][ T5775] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.670: bg 0: block 248: padding at end of block bitmap is not set [ 80.578735][ T5775] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.670: Failed to acquire dquot type 1 [ 80.591360][ T5775] EXT4-fs (loop2): 1 truncate cleaned up [ 80.598480][ T5775] ext4 filesystem being mounted at /134/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 80.740174][ T5793] loop6: detected capacity change from 0 to 128 [ 80.747930][ T5793] EXT4-fs: Ignoring removed nobh option [ 80.774748][ T5793] ext4 filesystem being mounted at /4/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 80.996686][ T5808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.680'. [ 81.005633][ T5808] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 81.083907][ T5818] loop1: detected capacity change from 0 to 512 [ 81.101425][ T5817] loop6: detected capacity change from 0 to 512 [ 81.108146][ T5817] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 81.124645][ T5820] EXT4-fs: Ignoring removed nomblk_io_submit option [ 81.148705][ T5820] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 81.157464][ T5820] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 81.178803][ T5818] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.683: bg 0: block 248: padding at end of block bitmap is not set [ 81.197530][ T5818] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.683: Failed to acquire dquot type 1 [ 81.210953][ T5818] EXT4-fs (loop1): 1 truncate cleaned up [ 81.217066][ T5818] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.250334][ T5820] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.685: Allocating blocks 41-42 which overlap fs metadata [ 81.278101][ T5820] EXT4-fs error (device loop5): ext4_acquire_dquot:6986: comm syz.5.685: Failed to acquire dquot type 1 [ 81.293890][ T5822] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 81.327656][ T5820] EXT4-fs error (device loop5): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 81.333801][ T5822] EXT4-fs error (device loop4): ext4_free_blocks:6728: comm syz.4.686: Freeing blocks not in datazone - block = 0, count = 16 [ 81.346864][ T5820] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.685: corrupted inode contents [ 81.393429][ T5820] EXT4-fs error (device loop5): ext4_dirty_inode:6502: inode #12: comm syz.5.685: mark_inode_dirty error [ 81.415412][ T5820] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.685: corrupted inode contents [ 81.422209][ T5844] EXT4-fs: Ignoring removed nobh option [ 81.451392][ T2076] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u8:13: bg 0: block 112: padding at end of block bitmap is not set [ 81.452992][ T5820] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #12: comm syz.5.685: mark_inode_dirty error [ 81.478509][ T2076] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 81.479166][ T5844] ext4 filesystem being mounted at /13/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 81.490790][ T2076] EXT4-fs (loop4): This should not happen!! Data will be lost [ 81.490790][ T2076] [ 81.510615][ T2076] EXT4-fs (loop4): Total free blocks count 0 [ 81.512598][ T5820] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.685: corrupted inode contents [ 81.516667][ T2076] EXT4-fs (loop4): Free/Dirty block details [ 81.516680][ T2076] EXT4-fs (loop4): free_blocks=16 [ 81.539609][ T2076] EXT4-fs (loop4): dirty_blocks=80 [ 81.544867][ T2076] EXT4-fs (loop4): Block reservation details [ 81.550963][ T2076] EXT4-fs (loop4): i_reserved_data_blocks=5 [ 81.555937][ T5820] EXT4-fs error (device loop5) in ext4_orphan_del:303: Corrupt filesystem [ 81.565896][ T2076] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 29 with max blocks 39 with error 28 [ 81.578301][ T2076] EXT4-fs (loop4): This should not happen!! Data will be lost [ 81.578301][ T2076] [ 81.588500][ T5820] EXT4-fs error (device loop5): ext4_do_update_inode:5617: inode #12: comm syz.5.685: corrupted inode contents [ 81.601029][ T5847] netlink: 72 bytes leftover after parsing attributes in process `syz.1.694'. [ 81.649212][ T5820] EXT4-fs error (device loop5): ext4_truncate:4635: inode #12: comm syz.5.685: mark_inode_dirty error [ 81.689265][ T5820] EXT4-fs error (device loop5) in ext4_process_orphan:345: Corrupt filesystem [ 81.698928][ T5820] EXT4-fs (loop5): 1 truncate cleaned up [ 81.709940][ T5851] netlink: 8 bytes leftover after parsing attributes in process `syz.4.693'. [ 81.874791][ T5864] EXT4-fs (loop5): shut down requested (1) [ 81.919490][ T5859] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.698: bg 0: block 248: padding at end of block bitmap is not set [ 81.970927][ T5864] netlink: 8 bytes leftover after parsing attributes in process `syz.5.685'. [ 81.986942][ T5859] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.698: Failed to acquire dquot type 1 [ 82.028026][ T5820] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 82.080741][ T5859] EXT4-fs (loop2): 1 truncate cleaned up [ 82.101011][ T5876] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop5 ino=12 [ 82.118602][ T5859] ext4 filesystem being mounted at /139/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.134752][ T5877] netlink: 4 bytes leftover after parsing attributes in process `syz.6.700'. [ 82.152237][ T5864] netlink: 'syz.5.685': attribute type 1 has an invalid length. [ 82.160179][ T5864] netlink: 'syz.5.685': attribute type 2 has an invalid length. [ 82.167807][ T5864] netlink: 8 bytes leftover after parsing attributes in process `syz.5.685'. [ 82.318372][ T5884] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 82.330103][ T5884] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 82.340217][ T5884] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.703: Corrupt directory, running e2fsck is recommended [ 82.415314][ T5884] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 82.423665][ T5884] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.703: corrupted in-inode xattr: invalid ea_ino [ 82.438094][ T5884] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.703: couldn't read orphan inode 15 (err -117) [ 82.461798][ T5884] bond1: entered promiscuous mode [ 82.606056][ T5891] FAT-fs (loop2): bogus logical sector size 65535 [ 82.612550][ T5891] FAT-fs (loop2): Can't find a valid FAT filesystem [ 82.625022][ T5895] rdma_op ffff888103b86d80 conn xmit_rdma 0000000000000000 [ 82.656461][ T5899] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 82.741688][ T5899] ext4 filesystem being mounted at /185/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 82.780498][ T5905] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.030716][ T5907] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 83.270023][ T5899] netlink: 'syz.1.708': attribute type 2 has an invalid length. [ 83.495308][ T5922] ext4: Unknown parameter 'func' [ 83.604205][ T5930] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.623963][ T5932] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.835950][ T5943] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 83.877847][ T5945] netlink: 14 bytes leftover after parsing attributes in process `syz.6.721'. [ 83.946218][ T5948] EXT4-fs: Ignoring removed nomblk_io_submit option [ 83.956338][ T5945] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.973778][ T5951] EXT4-fs: Ignoring removed nobh option [ 83.989399][ T5948] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 83.998173][ T5948] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 84.010190][ T5945] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 84.027570][ T5951] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 84.043471][ T5945] bond0 (unregistering): Released all slaves [ 84.052585][ T5948] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.724: Allocating blocks 41-42 which overlap fs metadata [ 84.151794][ T5948] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.724: Allocating blocks 41-42 which overlap fs metadata [ 84.199649][ T5948] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.724: Failed to acquire dquot type 1 [ 84.236029][ T5948] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 84.269224][ T5948] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.724: corrupted inode contents [ 84.301565][ T5967] set_capacity_and_notify: 18 callbacks suppressed [ 84.301581][ T5967] loop6: detected capacity change from 0 to 512 [ 84.336606][ T5948] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.724: mark_inode_dirty error [ 84.361549][ T5967] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 84.399139][ T5948] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.724: corrupted inode contents [ 84.419316][ T5948] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.724: mark_inode_dirty error [ 84.443402][ T29] kauditd_printk_skb: 392 callbacks suppressed [ 84.443416][ T29] audit: type=1400 audit(1765914235.934:2326): avc: denied { sqpoll } for pid=5972 comm="syz.5.733" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 84.459540][ T5948] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.724: corrupted inode contents [ 84.534633][ T5948] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 84.543334][ T5973] loop5: detected capacity change from 0 to 2048 [ 84.565838][ T29] audit: type=1400 audit(1765914236.054:2327): avc: denied { block_suspend } for pid=5972 comm="syz.5.733" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 84.579049][ T5948] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.724: corrupted inode contents [ 84.644965][ T5948] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.724: mark_inode_dirty error [ 84.664656][ T5948] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 84.717975][ T5948] EXT4-fs (loop2): 1 truncate cleaned up [ 84.726656][ T29] audit: type=1326 audit(1765914236.164:2328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5927 comm="syz.1.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f62fea9f807 code=0x7ffc0000 [ 84.750236][ T29] audit: type=1326 audit(1765914236.174:2329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5927 comm="syz.1.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62fea9f749 code=0x7ffc0000 [ 84.773778][ T29] audit: type=1326 audit(1765914236.174:2330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5927 comm="syz.1.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62fea9f749 code=0x7ffc0000 [ 84.797233][ T29] audit: type=1326 audit(1765914236.174:2331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5927 comm="syz.1.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f62fea56bdd code=0x7ffc0000 [ 84.820574][ T29] audit: type=1326 audit(1765914236.174:2332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5927 comm="syz.1.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f62fead3e89 code=0x7ffc0000 [ 84.844051][ T29] audit: type=1326 audit(1765914236.174:2333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5927 comm="syz.1.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f62fea56c47 code=0x7ffc0000 [ 84.867344][ T29] audit: type=1326 audit(1765914236.174:2334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5927 comm="syz.1.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f62fea56357 code=0x7ffc0000 [ 84.891183][ T29] audit: type=1326 audit(1765914236.174:2335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5927 comm="syz.1.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f62fea563b6 code=0x7ffc0000 [ 84.959523][ T5948] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 84.994948][ T5992] EXT4-fs (loop2): shut down requested (1) [ 85.013081][ T5948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.724'. [ 85.033531][ T5948] netlink: 'syz.2.724': attribute type 1 has an invalid length. [ 85.041330][ T5948] netlink: 'syz.2.724': attribute type 2 has an invalid length. [ 85.048989][ T5948] netlink: 8 bytes leftover after parsing attributes in process `syz.2.724'. [ 85.069682][ T5764] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 85.098237][ T5992] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 85.218044][ T5928] syz.1.716 (5928) used greatest stack depth: 7448 bytes left [ 85.263428][ T6006] loop2: detected capacity change from 0 to 128 [ 85.273649][ T6006] EXT4-fs: Ignoring removed nobh option [ 85.295575][ T6006] ext4 filesystem being mounted at /149/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 85.338960][ T6015] loop4: detected capacity change from 0 to 128 [ 85.358221][ T6012] netlink: 4 bytes leftover after parsing attributes in process `syz.1.745'. [ 85.444833][ T6015] FAT-fs (loop4): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 85.458957][ T6021] serio: Serial port ttyS3 [ 85.628509][ T6030] netlink: 'gtp': attribute type 7 has an invalid length. [ 85.637892][ T6031] netlink: 'gtp': attribute type 7 has an invalid length. [ 85.856860][ T6032] loop1: detected capacity change from 0 to 1024 [ 85.863853][ T6032] EXT4-fs: Ignoring removed oldalloc option [ 85.905120][ T6032] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.749: bg 0: block 88: padding at end of block bitmap is not set [ 86.103433][ T6051] netdevsim netdevsim5: Direct firmware load for ./file1 failed with error -2 [ 86.128669][ T6052] loop2: detected capacity change from 0 to 512 [ 86.175901][ T6055] FAULT_INJECTION: forcing a failure. [ 86.175901][ T6055] name failslab, interval 1, probability 0, space 0, times 0 [ 86.188651][ T6055] CPU: 1 UID: 0 PID: 6055 Comm: syz.5.760 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 86.188706][ T6055] Tainted: [W]=WARN [ 86.188712][ T6055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 86.188723][ T6055] Call Trace: [ 86.188729][ T6055] [ 86.188736][ T6055] __dump_stack+0x1d/0x30 [ 86.188763][ T6055] dump_stack_lvl+0xe8/0x140 [ 86.188854][ T6055] dump_stack+0x15/0x1b [ 86.188871][ T6055] should_fail_ex+0x265/0x280 [ 86.188962][ T6055] should_failslab+0x8c/0xb0 [ 86.189050][ T6055] kmem_cache_alloc_noprof+0x69/0x4b0 [ 86.189138][ T6055] ? getname_flags+0x80/0x3b0 [ 86.189161][ T6055] getname_flags+0x80/0x3b0 [ 86.189245][ T6055] user_path_at+0x28/0x130 [ 86.189276][ T6055] __x64_sys_umount+0x85/0xe0 [ 86.189315][ T6055] x64_sys_call+0xd6a/0x3000 [ 86.189336][ T6055] do_syscall_64+0xd8/0x2c0 [ 86.189384][ T6055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.189405][ T6055] RIP: 0033:0x7f925b17f749 [ 86.189421][ T6055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.189440][ T6055] RSP: 002b:00007f9259bdf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 86.189456][ T6055] RAX: ffffffffffffffda RBX: 00007f925b3d5fa0 RCX: 00007f925b17f749 [ 86.189544][ T6055] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000002c0 [ 86.189598][ T6055] RBP: 00007f9259bdf090 R08: 0000000000000000 R09: 0000000000000000 [ 86.189609][ T6055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.189619][ T6055] R13: 00007f925b3d6038 R14: 00007f925b3d5fa0 R15: 00007ffc2aaa1498 [ 86.189635][ T6055] [ 86.406613][ T6052] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.753: bg 0: block 248: padding at end of block bitmap is not set [ 86.508841][ T6063] loop5: detected capacity change from 0 to 512 [ 86.528323][ T6063] ext4: Unknown parameter 'func' [ 86.552908][ T6052] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.753: Failed to acquire dquot type 1 [ 86.676655][ T6052] EXT4-fs (loop2): 1 truncate cleaned up [ 86.766669][ T6052] ext4 filesystem being mounted at /150/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 86.851087][ T6069] netlink: 'gtp': attribute type 7 has an invalid length. [ 86.862986][ T6072] loop1: detected capacity change from 0 to 512 [ 86.879566][ T6072] EXT4-fs: Ignoring removed nomblk_io_submit option [ 86.903382][ T6072] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 86.912216][ T6072] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 87.024507][ T6072] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.763: Allocating blocks 41-42 which overlap fs metadata [ 87.039837][ T6072] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4215: comm syz.1.763: Allocating blocks 41-42 which overlap fs metadata [ 87.053727][ T6072] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.763: Failed to acquire dquot type 1 [ 87.065115][ T6072] EXT4-fs error (device loop1): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 87.068164][ T6079] loop4: detected capacity change from 0 to 128 [ 87.080472][ T6072] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.763: corrupted inode contents [ 87.097676][ T6072] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #12: comm syz.1.763: mark_inode_dirty error [ 87.109136][ T6072] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.763: corrupted inode contents [ 87.121061][ T6072] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #12: comm syz.1.763: mark_inode_dirty error [ 87.132524][ T6072] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.763: corrupted inode contents [ 87.144779][ T6072] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem [ 87.147034][ T6079] EXT4-fs: Ignoring removed nobh option [ 87.159271][ T6072] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #12: comm syz.1.763: corrupted inode contents [ 87.171196][ T6072] EXT4-fs error (device loop1): ext4_truncate:4635: inode #12: comm syz.1.763: mark_inode_dirty error [ 87.185853][ T6072] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem [ 87.201888][ T6079] ext4 filesystem being mounted at /187/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 87.221650][ T6072] EXT4-fs (loop1): 1 truncate cleaned up [ 87.253504][ T6072] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 87.318080][ T6072] EXT4-fs (loop1): shut down requested (1) [ 87.351470][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.763'. [ 87.360806][ T6072] netlink: 'syz.1.763': attribute type 1 has an invalid length. [ 87.368439][ T6072] netlink: 'syz.1.763': attribute type 2 has an invalid length. [ 87.376163][ T6072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.763'. [ 87.387165][ T6072] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop1 ino=12 [ 87.431636][ T6102] loop1: detected capacity change from 0 to 512 [ 87.438603][ T6102] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 87.458541][ T6103] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 87.470130][ T6103] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 87.480254][ T6103] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.776: Corrupt directory, running e2fsck is recommended [ 87.573299][ T6103] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 87.628307][ T6103] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.776: corrupted in-inode xattr: invalid ea_ino [ 87.661796][ T6120] vlan2: entered promiscuous mode [ 87.666977][ T6120] vlan2: entered allmulticast mode [ 87.672118][ T6120] hsr_slave_1: entered allmulticast mode [ 87.699815][ T6103] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.776: couldn't read orphan inode 15 (err -117) [ 87.712993][ T6130] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 87.722858][ T6129] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 87.752591][ T6103] bond2: entered promiscuous mode [ 87.794873][ T6138] FAULT_INJECTION: forcing a failure. [ 87.794873][ T6138] name failslab, interval 1, probability 0, space 0, times 0 [ 87.807559][ T6138] CPU: 1 UID: 0 PID: 6138 Comm: syz.6.786 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 87.807593][ T6138] Tainted: [W]=WARN [ 87.807600][ T6138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 87.807614][ T6138] Call Trace: [ 87.807622][ T6138] [ 87.807630][ T6138] __dump_stack+0x1d/0x30 [ 87.807702][ T6138] dump_stack_lvl+0xe8/0x140 [ 87.807723][ T6138] dump_stack+0x15/0x1b [ 87.807744][ T6138] should_fail_ex+0x265/0x280 [ 87.807767][ T6138] should_failslab+0x8c/0xb0 [ 87.807791][ T6138] kmem_cache_alloc_node_noprof+0x6b/0x4c0 [ 87.807885][ T6138] ? __alloc_skb+0x324/0x4d0 [ 87.807906][ T6138] __alloc_skb+0x324/0x4d0 [ 87.807925][ T6138] ? __alloc_skb+0x24d/0x4d0 [ 87.807948][ T6138] audit_log_start+0x3a0/0x720 [ 87.808020][ T6138] ? kstrtouint+0x76/0xc0 [ 87.808037][ T6138] audit_seccomp+0x48/0x100 [ 87.808068][ T6138] ? __seccomp_filter+0x832/0x1260 [ 87.808166][ T6138] __seccomp_filter+0x843/0x1260 [ 87.808222][ T6138] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 87.808305][ T6138] ? vfs_write+0x7e8/0x960 [ 87.808326][ T6138] ? __cond_resched+0x4e/0x90 [ 87.808354][ T6138] __secure_computing+0x82/0x150 [ 87.808490][ T6138] syscall_trace_enter+0xcf/0x1e0 [ 87.808517][ T6138] do_syscall_64+0xb2/0x2c0 [ 87.808569][ T6138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.808634][ T6138] RIP: 0033:0x7fdc9c97f749 [ 87.808650][ T6138] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.808670][ T6138] RSP: 002b:00007fdc9b3df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 87.808724][ T6138] RAX: ffffffffffffffda RBX: 00007fdc9cbd5fa0 RCX: 00007fdc9c97f749 [ 87.808735][ T6138] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 87.808746][ T6138] RBP: 00007fdc9b3df090 R08: 0000000000000000 R09: 0000000000000000 [ 87.808757][ T6138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.808767][ T6138] R13: 00007fdc9cbd6038 R14: 00007fdc9cbd5fa0 R15: 00007ffcd6df19f8 [ 87.808783][ T6138] [ 88.130455][ T6103] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 88.141971][ T6103] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 88.152149][ T6103] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.776: Corrupt directory, running e2fsck is recommended [ 88.177695][ T6103] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 3: comm syz.4.776: path /188/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 88.737064][ T6159] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 88.752358][ T6164] netlink: 28 bytes leftover after parsing attributes in process `syz.2.791'. [ 88.761455][ T6164] netem: change failed [ 88.776880][ T6166] cgroup: No subsys list or none specified [ 88.841554][ T6148] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 88.857839][ T6171] netlink: 7 bytes leftover after parsing attributes in process `syz.1.793'. [ 88.880137][ T6148] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 32 with error 28 [ 88.892554][ T6148] EXT4-fs (loop5): This should not happen!! Data will be lost [ 88.892554][ T6148] [ 88.902233][ T6148] EXT4-fs (loop5): Total free blocks count 0 [ 88.908228][ T6148] EXT4-fs (loop5): Free/Dirty block details [ 88.914173][ T6148] EXT4-fs (loop5): free_blocks=2415919504 [ 88.919909][ T6148] EXT4-fs (loop5): dirty_blocks=32 [ 88.925018][ T6148] EXT4-fs (loop5): Block reservation details [ 88.931075][ T6148] EXT4-fs (loop5): i_reserved_data_blocks=2 [ 88.945442][ T6171] netlink: 88 bytes leftover after parsing attributes in process `syz.1.793'. [ 89.156385][ T6185] bond0: option packets_per_slave: invalid value (1768304430) [ 89.163897][ T6185] bond0: option packets_per_slave: allowed values 0 - 65535 [ 89.198924][ T6189] EXT4-fs: Ignoring removed nobh option [ 89.290176][ T6189] ext4 filesystem being mounted at /191/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.302155][ T6195] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.321852][ T6185] bond0 (unregistering): Released all slaves [ 89.418858][ T6205] set_capacity_and_notify: 5 callbacks suppressed [ 89.418875][ T6205] loop5: detected capacity change from 0 to 512 [ 89.452726][ T6210] loop6: detected capacity change from 0 to 512 [ 89.464221][ T6205] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 89.479997][ T6210] EXT4-fs: Ignoring removed nomblk_io_submit option [ 89.494561][ T6210] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 89.503371][ T6210] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 89.514572][ T6205] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 89.550474][ T6210] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.801: Allocating blocks 41-42 which overlap fs metadata [ 89.606195][ T6210] __quota_error: 308 callbacks suppressed [ 89.606210][ T6210] Quota error (device loop6): write_blk: dquota write failed [ 89.619422][ T6210] Quota error (device loop6): find_free_dqentry: Can't write quota data block 5 [ 89.701570][ T6210] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 89.718999][ T6210] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.801: Failed to acquire dquot type 1 [ 89.742157][ T6210] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 89.789610][ T6210] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.801: corrupted inode contents [ 89.810717][ T6245] loop2: detected capacity change from 0 to 128 [ 89.820586][ T6247] loop1: detected capacity change from 0 to 512 [ 89.825986][ T6210] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #12: comm syz.6.801: mark_inode_dirty error [ 89.838876][ T6245] EXT4-fs: Ignoring removed nobh option [ 89.844728][ T6210] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.801: corrupted inode contents [ 89.848363][ T6247] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 89.859598][ T6248] netlink: 'syz.5.800': attribute type 2 has an invalid length. [ 89.880561][ T6210] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.801: mark_inode_dirty error [ 89.920128][ T6210] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.801: corrupted inode contents [ 89.925586][ T6245] ext4 filesystem being mounted at /156/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.932497][ T6210] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 89.994413][ T6243] loop4: detected capacity change from 0 to 512 [ 90.004714][ T6243] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 90.004748][ T6210] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.801: corrupted inode contents [ 90.024894][ T6210] EXT4-fs error (device loop6): ext4_truncate:4635: inode #12: comm syz.6.801: mark_inode_dirty error [ 90.036142][ T6243] EXT4-fs (loop4): invalid journal inode [ 90.041920][ T6243] EXT4-fs (loop4): can't get journal size [ 90.047888][ T6210] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 90.049807][ T29] audit: type=1326 audit(1765914241.544:2636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6244 comm="syz.2.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6939fef749 code=0x7ffc0000 [ 90.083449][ T6210] EXT4-fs (loop6): 1 truncate cleaned up [ 90.086959][ T29] audit: type=1326 audit(1765914241.544:2637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6244 comm="syz.2.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f6939fef749 code=0x7ffc0000 [ 90.089703][ T6243] EXT4-fs (loop4): 1 truncate cleaned up [ 90.112950][ T29] audit: type=1326 audit(1765914241.544:2638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6244 comm="syz.2.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6939fef749 code=0x7ffc0000 [ 90.141627][ T29] audit: type=1326 audit(1765914241.544:2639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6244 comm="syz.2.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6939fef749 code=0x7ffc0000 [ 90.165236][ T29] audit: type=1326 audit(1765914241.544:2640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6244 comm="syz.2.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6939fef749 code=0x7ffc0000 [ 90.188638][ T29] audit: type=1326 audit(1765914241.544:2641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6244 comm="syz.2.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6939fef749 code=0x7ffc0000 [ 90.211997][ T29] audit: type=1326 audit(1765914241.544:2642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6244 comm="syz.2.810" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6939fef749 code=0x7ffc0000 [ 90.242750][ T6259] EXT4-fs (loop6): shut down requested (1) [ 90.249676][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.6.801'. [ 90.258818][ T6259] macvlan0: entered promiscuous mode [ 90.266080][ T6259] netlink: 'syz.6.801': attribute type 1 has an invalid length. [ 90.273774][ T6259] netlink: 'syz.6.801': attribute type 2 has an invalid length. [ 90.281558][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.6.801'. [ 90.295283][ T6262] loop1: detected capacity change from 0 to 128 [ 90.305430][ T6262] EXT4-fs: Ignoring removed nobh option [ 90.328336][ T6262] ext4 filesystem being mounted at /206/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 90.362872][ T6259] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 90.372349][ T6210] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 90.567601][ T6283] rdma_op ffff888118c6c180 conn xmit_rdma 0000000000000000 [ 90.676221][ T6304] dvmrp1: entered allmulticast mode [ 90.698071][ T6306] netlink: 124 bytes leftover after parsing attributes in process `syz.4.826'. [ 90.707257][ T6306] netlink: 16 bytes leftover after parsing attributes in process `syz.4.826'. [ 90.753421][ T6311] loop6: detected capacity change from 0 to 512 [ 90.766216][ T6311] EXT4-fs: Ignoring removed nomblk_io_submit option [ 90.789416][ T6317] openvswitch: netlink: Message has 7 unknown bytes. [ 90.796641][ T6311] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 90.805434][ T6311] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 90.877917][ T6311] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.829: Allocating blocks 41-42 which overlap fs metadata [ 90.935646][ T6311] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.829: Failed to acquire dquot type 1 [ 90.994381][ T6311] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 91.016371][ T6311] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.829: corrupted inode contents [ 91.030257][ T6311] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #12: comm syz.6.829: mark_inode_dirty error [ 91.047927][ T6318] loop1: detected capacity change from 0 to 512 [ 91.073317][ T6318] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 91.082002][ T6318] EXT4-fs (loop1): invalid journal inode [ 91.090958][ T6318] EXT4-fs (loop1): can't get journal size [ 91.096849][ T6311] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.829: corrupted inode contents [ 91.119522][ T6311] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.829: mark_inode_dirty error [ 91.131117][ T6318] EXT4-fs (loop1): 1 truncate cleaned up [ 91.137448][ T6311] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.829: corrupted inode contents [ 91.150519][ T6311] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 91.159714][ T6311] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.829: corrupted inode contents [ 91.173185][ T6311] EXT4-fs error (device loop6): ext4_truncate:4635: inode #12: comm syz.6.829: mark_inode_dirty error [ 91.184374][ T6311] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 91.193798][ T6311] EXT4-fs (loop6): 1 truncate cleaned up [ 91.202517][ T6311] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 91.232734][ T6311] EXT4-fs (loop6): shut down requested (1) [ 91.265912][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.6.829'. [ 91.275275][ T6311] netlink: 'syz.6.829': attribute type 1 has an invalid length. [ 91.278801][ T6334] netlink: 'gtp': attribute type 7 has an invalid length. [ 91.282964][ T6311] netlink: 'syz.6.829': attribute type 2 has an invalid length. [ 91.297764][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.6.829'. [ 91.329385][ T6311] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 91.357572][ T6336] loop1: detected capacity change from 0 to 764 [ 91.479984][ T6350] binfmt_misc: register: failed to install interpreter file ./file0 [ 91.568072][ T6366] loop6: detected capacity change from 0 to 128 [ 91.619833][ T6375] EXT4-fs: Ignoring removed nomblk_io_submit option [ 91.640798][ T6366] EXT4-fs: Ignoring removed nobh option [ 91.657980][ T6375] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 91.666737][ T6375] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 91.682850][ T6366] ext4 filesystem being mounted at /43/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 91.720680][ T6381] FAULT_INJECTION: forcing a failure. [ 91.720680][ T6381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 91.733779][ T6381] CPU: 0 UID: 0 PID: 6381 Comm: syz.1.849 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 91.733871][ T6381] Tainted: [W]=WARN [ 91.733877][ T6381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 91.733888][ T6381] Call Trace: [ 91.733923][ T6381] [ 91.733973][ T6381] __dump_stack+0x1d/0x30 [ 91.734040][ T6381] dump_stack_lvl+0xe8/0x140 [ 91.734064][ T6381] dump_stack+0x15/0x1b [ 91.734081][ T6381] should_fail_ex+0x265/0x280 [ 91.734102][ T6381] should_fail+0xb/0x20 [ 91.734149][ T6381] should_fail_usercopy+0x1a/0x20 [ 91.734175][ T6381] _copy_to_user+0x20/0xa0 [ 91.734201][ T6381] simple_read_from_buffer+0xb5/0x130 [ 91.734224][ T6381] proc_fail_nth_read+0x10e/0x150 [ 91.734316][ T6381] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 91.734407][ T6381] vfs_read+0x1a8/0x770 [ 91.734453][ T6381] ? __rcu_read_unlock+0x4f/0x70 [ 91.734471][ T6381] ? __fget_files+0x184/0x1c0 [ 91.734494][ T6381] ? mutex_lock+0x58/0x90 [ 91.734520][ T6381] ksys_read+0xda/0x1a0 [ 91.734541][ T6381] __x64_sys_read+0x40/0x50 [ 91.734618][ T6381] x64_sys_call+0x2889/0x3000 [ 91.734639][ T6381] do_syscall_64+0xd8/0x2c0 [ 91.734669][ T6381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.734692][ T6381] RIP: 0033:0x7f62fea9e15c [ 91.734708][ T6381] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 91.734768][ T6381] RSP: 002b:00007f62fd4ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 91.734788][ T6381] RAX: ffffffffffffffda RBX: 00007f62fecf5fa0 RCX: 00007f62fea9e15c [ 91.734801][ T6381] RDX: 000000000000000f RSI: 00007f62fd4ff0a0 RDI: 0000000000000004 [ 91.734815][ T6381] RBP: 00007f62fd4ff090 R08: 0000000000000000 R09: 0000000000000000 [ 91.734828][ T6381] R10: 000000002400ff14 R11: 0000000000000246 R12: 0000000000000001 [ 91.734840][ T6381] R13: 00007f62fecf6038 R14: 00007f62fecf5fa0 R15: 00007ffd3f133618 [ 91.734855][ T6381] [ 91.970452][ T6375] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4215: comm syz.2.847: Allocating blocks 41-42 which overlap fs metadata [ 92.029682][ T6375] EXT4-fs error (device loop2): ext4_acquire_dquot:6986: comm syz.2.847: Failed to acquire dquot type 1 [ 92.041998][ T6375] EXT4-fs error (device loop2): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 92.057134][ T6375] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.847: corrupted inode contents [ 92.069191][ T6406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.858'. [ 92.099584][ T6375] EXT4-fs error (device loop2): ext4_dirty_inode:6502: inode #12: comm syz.2.847: mark_inode_dirty error [ 92.159458][ T6375] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.847: corrupted inode contents [ 92.192124][ T6375] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.847: mark_inode_dirty error [ 92.210847][ T6375] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.847: corrupted inode contents [ 92.224971][ T6375] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 92.228066][ T6424] EXT4-fs: Ignoring removed nobh option [ 92.240475][ T6375] EXT4-fs error (device loop2): ext4_do_update_inode:5617: inode #12: comm syz.2.847: corrupted inode contents [ 92.253594][ T6424] ext4 filesystem being mounted at /101/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 92.263638][ T6375] EXT4-fs error (device loop2): ext4_truncate:4635: inode #12: comm syz.2.847: mark_inode_dirty error [ 92.309560][ T6375] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 92.432657][ T6375] EXT4-fs (loop2): 1 truncate cleaned up [ 92.529351][ T6375] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 92.570899][ T6441] EXT4-fs (loop2): shut down requested (1) [ 92.587661][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.847'. [ 92.652634][ T6443] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 92.667943][ T6444] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop2 ino=12 [ 92.677394][ T6441] netlink: 'syz.2.847': attribute type 1 has an invalid length. [ 92.685055][ T6441] netlink: 'syz.2.847': attribute type 2 has an invalid length. [ 92.692695][ T6441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.847'. [ 92.781103][ T6448] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 92.794313][ T6448] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 92.804211][ T6448] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 92.815756][ T6450] netlink: 4 bytes leftover after parsing attributes in process `syz.1.874'. [ 92.904248][ T6454] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 93.098455][ T6473] EXT4-fs: Ignoring removed nobh option [ 93.105908][ T6448] EXT4-fs (loop5): failed to initialize system zone (-117) [ 93.121403][ T6473] ext4 filesystem being mounted at /170/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 93.131761][ T6448] EXT4-fs (loop5): mount failed [ 93.218154][ T6478] EXT4-fs: dax option not supported [ 93.356051][ T6484] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 93.688754][ T6477] syz.6.886 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 93.699684][ T6477] CPU: 1 UID: 0 PID: 6477 Comm: syz.6.886 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 93.699719][ T6477] Tainted: [W]=WARN [ 93.699790][ T6477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 93.699801][ T6477] Call Trace: [ 93.699807][ T6477] [ 93.699815][ T6477] __dump_stack+0x1d/0x30 [ 93.699917][ T6477] dump_stack_lvl+0xe8/0x140 [ 93.699937][ T6477] dump_stack+0x15/0x1b [ 93.699953][ T6477] dump_header+0x81/0x240 [ 93.699974][ T6477] oom_kill_process+0x295/0x350 [ 93.699999][ T6477] out_of_memory+0x97b/0xb80 [ 93.700066][ T6477] try_charge_memcg+0x610/0xa10 [ 93.700092][ T6477] charge_memcg+0x51/0xc0 [ 93.700125][ T6477] mem_cgroup_swapin_charge_folio+0xcc/0x150 [ 93.700235][ T6477] __read_swap_cache_async+0x17b/0x2d0 [ 93.700270][ T6477] swap_cluster_readahead+0x262/0x3c0 [ 93.700372][ T6477] swapin_readahead+0xde/0x820 [ 93.700405][ T6477] ? mod_memcg_lruvec_state+0x1a1/0x280 [ 93.700431][ T6477] ? __rcu_read_unlock+0x34/0x70 [ 93.700453][ T6477] ? __rcu_read_unlock+0x4f/0x70 [ 93.700539][ T6477] ? swap_cache_get_folio+0x277/0x280 [ 93.700570][ T6477] do_swap_page+0x2b4/0x21e0 [ 93.700605][ T6477] ? __pfx_default_wake_function+0x10/0x10 [ 93.700687][ T6477] handle_mm_fault+0x9d8/0x2c60 [ 93.700723][ T6477] do_user_addr_fault+0x630/0x1080 [ 93.700815][ T6477] exc_page_fault+0x62/0xa0 [ 93.700838][ T6477] asm_exc_page_fault+0x26/0x30 [ 93.700856][ T6477] RIP: 0033:0x7fdc9c8559ec [ 93.700873][ T6477] Code: 66 0f 1f 44 00 00 69 3d c6 fc ea 00 e8 03 00 00 48 8d 1d c7 05 38 00 e8 c2 9c 12 00 eb 0c 48 81 c3 f0 00 00 00 48 39 eb 74 24 <80> 7b 20 00 74 ee 8b 43 0c 85 c0 74 e7 48 89 df 48 81 c3 f0 00 00 [ 93.700971][ T6477] RSP: 002b:00007ffcd6df1b60 EFLAGS: 00010283 [ 93.700988][ T6477] RAX: 0000000000000000 RBX: 00007fdc9cbd7080 RCX: 0000000000000000 [ 93.701002][ T6477] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000555588077808 [ 93.701015][ T6477] RBP: 00007fdc9cbd7da0 R08: 0000000000000000 R09: 7fffffffffffffff [ 93.701027][ T6477] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000016f0d [ 93.701037][ T6477] R13: 00007ffcd6df1c50 R14: ffffffffffffffff R15: 00007ffcd6df1c70 [ 93.701115][ T6477] [ 93.701195][ T6477] memory: usage 270800kB, limit 307200kB, failcnt 257 [ 93.921880][ T6477] memory+swap: usage 216652kB, limit 9007199254740988kB, failcnt 0 [ 93.929775][ T6477] kmem: usage 216396kB, limit 9007199254740988kB, failcnt 0 [ 93.937056][ T6477] Memory cgroup stats for /syz6: [ 93.937603][ T6477] cache 0 [ 93.945535][ T6477] rss 4096 [ 93.948544][ T6477] shmem 0 [ 93.951559][ T6477] mapped_file 413696 [ 93.955474][ T6477] dirty 0 [ 93.958455][ T6477] writeback 0 [ 93.961756][ T6477] workingset_refault_anon 32 [ 93.966351][ T6477] workingset_refault_file 0 [ 93.970892][ T6477] swap 196608 [ 93.974159][ T6477] swapcached 4096 [ 93.977783][ T6477] pgpgin 12219 [ 93.981176][ T6477] pgpgout 12218 [ 93.984623][ T6477] pgfault 15004 [ 93.988068][ T6477] pgmajfault 21 [ 93.991538][ T6477] inactive_anon 0 [ 93.995154][ T6477] active_anon 4096 [ 93.998855][ T6477] inactive_file 0 [ 94.002503][ T6477] active_file 0 [ 94.006035][ T6477] unevictable 0 [ 94.009524][ T6477] hierarchical_memory_limit 314572800 [ 94.014881][ T6477] hierarchical_memsw_limit 9223372036854771712 [ 94.021058][ T6477] total_cache 0 [ 94.024502][ T6477] total_rss 4096 [ 94.028091][ T6477] total_shmem 0 [ 94.031574][ T6477] total_mapped_file 413696 [ 94.036021][ T6477] total_dirty 0 [ 94.039492][ T6477] total_writeback 0 [ 94.043288][ T6477] total_workingset_refault_anon 32 [ 94.048376][ T6477] total_workingset_refault_file 0 [ 94.053423][ T6477] total_swap 196608 [ 94.057217][ T6477] total_swapcached 4096 [ 94.061470][ T6477] total_pgpgin 12219 [ 94.065349][ T6477] total_pgpgout 12218 [ 94.069387][ T6477] total_pgfault 15004 [ 94.073354][ T6477] total_pgmajfault 21 [ 94.077307][ T6477] total_inactive_anon 0 [ 94.081469][ T6477] total_active_anon 4096 [ 94.085708][ T6477] total_inactive_file 0 [ 94.089960][ T6477] total_active_file 0 [ 94.093924][ T6477] total_unevictable 0 [ 94.097874][ T6477] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.886,pid=6477,uid=0 [ 94.112453][ T6477] Memory cgroup out of memory: Killed process 6477 (syz.6.886) total-vm:94372kB, anon-rss:1264kB, file-rss:22824kB, shmem-rss:0kB, UID:0 pgtables:124kB oom_score_adj:1000 [ 114.567077][ T6500] set_capacity_and_notify: 9 callbacks suppressed [ 114.567095][ T6500] loop6: detected capacity change from 0 to 2048 [ 114.589140][ T29] kauditd_printk_skb: 385 callbacks suppressed [ 114.589194][ T29] audit: type=1400 audit(1765914266.044:3022): avc: denied { read } for pid=6497 comm="syz.4.894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 114.635569][ T6499] loop1: detected capacity change from 0 to 512 [ 114.642458][ T6499] EXT4-fs: dax option not supported [ 114.663927][ T29] audit: type=1400 audit(1765914266.104:3023): avc: denied { connect } for pid=6495 comm="syz.2.892" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 114.684127][ T29] audit: type=1400 audit(1765914266.124:3024): avc: denied { create } for pid=6494 comm="syz.1.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 114.704311][ T29] audit: type=1400 audit(1765914266.124:3025): avc: denied { bind } for pid=6494 comm="syz.1.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 114.948532][ T6513] loop5: detected capacity change from 0 to 1024 [ 114.955444][ T6513] EXT4-fs: Ignoring removed oldalloc option [ 115.166239][ T29] audit: type=1400 audit(1765914266.494:3026): avc: denied { read } for pid=6511 comm="syz.2.895" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 115.168589][ T6503] loop6: p1 < > [ 115.190673][ T29] audit: type=1400 audit(1765914266.494:3027): avc: denied { open } for pid=6511 comm="syz.2.895" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 115.221165][ T29] audit: type=1400 audit(1765914266.494:3028): avc: denied { mount } for pid=6511 comm="syz.2.895" name="/" dev="configfs" ino=312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 115.244034][ T29] audit: type=1400 audit(1765914266.494:3029): avc: denied { search } for pid=6511 comm="syz.2.895" name="/" dev="configfs" ino=312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 115.266410][ T29] audit: type=1400 audit(1765914266.524:3030): avc: denied { search } for pid=6511 comm="syz.2.895" name="/" dev="configfs" ino=312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 115.288454][ T29] audit: type=1400 audit(1765914266.524:3031): avc: denied { read open } for pid=6511 comm="syz.2.895" path="/" dev="configfs" ino=312 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 115.294167][ T6524] loop2: detected capacity change from 0 to 128 [ 115.317927][ T6513] EXT4-fs mount: 85 callbacks suppressed [ 115.317943][ T6513] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 115.349371][ T6524] EXT4-fs: Ignoring removed nobh option [ 115.372219][ T6500] loop6: p1 < > [ 115.372426][ T6524] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 115.399472][ T6524] ext4 filesystem being mounted at /173/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 115.417144][ T3008] loop6: p1 < > [ 115.449183][ T6510] udevd[6510]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 115.464783][ T6527] loop1: detected capacity change from 0 to 512 [ 115.487154][ T6510] udevd[6510]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 115.500010][ T6527] ext4: Unknown parameter 'func' [ 115.546122][ T4329] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 115.580910][ T6532] netlink: 'syz.5.900': attribute type 3 has an invalid length. [ 115.588606][ T6532] netlink: 'syz.5.900': attribute type 7 has an invalid length. [ 115.596325][ T6532] netlink: 'syz.5.900': attribute type 8 has an invalid length. [ 115.604104][ T6532] netlink: 'syz.5.900': attribute type 7 has an invalid length. [ 115.612061][ T6532] __nla_validate_parse: 1 callbacks suppressed [ 115.612162][ T6532] netlink: 198788 bytes leftover after parsing attributes in process `syz.5.900'. [ 115.648294][ T6535] netlink: 'syz.6.899': attribute type 3 has an invalid length. [ 115.733246][ T6532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=6532 comm=syz.5.900 [ 115.750016][ T3321] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 115.763845][ T6535] SELinux: Context system_u:object_r:modules_dep_t:s0 is not valid (left unmapped). [ 116.229744][ T6566] loop6: detected capacity change from 0 to 512 [ 116.236652][ T6556] loop5: detected capacity change from 0 to 8192 [ 116.253706][ T6566] EXT4-fs: Ignoring removed nomblk_io_submit option [ 116.263350][ T6566] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 116.272321][ T6566] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 116.295331][ T6566] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.915: Allocating blocks 41-42 which overlap fs metadata [ 116.301277][ T6571] netlink: 'syz.4.917': attribute type 3 has an invalid length. [ 116.310193][ T6566] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:4215: comm syz.6.915: Allocating blocks 41-42 which overlap fs metadata [ 116.317303][ T6571] netlink: 'syz.4.917': attribute type 7 has an invalid length. [ 116.331716][ T6566] EXT4-fs error (device loop6): ext4_acquire_dquot:6986: comm syz.6.915: Failed to acquire dquot type 1 [ 116.338695][ T6571] netlink: 'syz.4.917': attribute type 8 has an invalid length. [ 116.357590][ T6571] netlink: 'syz.4.917': attribute type 7 has an invalid length. [ 116.365315][ T6571] netlink: 198788 bytes leftover after parsing attributes in process `syz.4.917'. [ 116.376118][ T6566] EXT4-fs error (device loop6): mb_free_blocks:2037: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 116.409722][ T6566] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.915: corrupted inode contents [ 116.433415][ T6566] EXT4-fs error (device loop6): ext4_dirty_inode:6502: inode #12: comm syz.6.915: mark_inode_dirty error [ 116.455043][ T6566] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.915: corrupted inode contents [ 116.467316][ T6566] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #12: comm syz.6.915: mark_inode_dirty error [ 116.467535][ T6566] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.915: corrupted inode contents [ 116.469286][ T6566] EXT4-fs error (device loop6) in ext4_orphan_del:303: Corrupt filesystem [ 116.469422][ T6566] EXT4-fs error (device loop6): ext4_do_update_inode:5617: inode #12: comm syz.6.915: corrupted inode contents [ 116.469689][ T6566] EXT4-fs error (device loop6): ext4_truncate:4635: inode #12: comm syz.6.915: mark_inode_dirty error [ 116.469822][ T6566] EXT4-fs error (device loop6) in ext4_process_orphan:345: Corrupt filesystem [ 116.469984][ T6566] EXT4-fs (loop6): 1 truncate cleaned up [ 116.470435][ T6566] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.592318][ T6566] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 116.614115][ T6566] EXT4-fs (loop6): shut down requested (1) [ 116.618246][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.6.915'. [ 116.635402][ T6586] loop1: detected capacity change from 0 to 512 [ 116.638288][ T6566] netlink: 'syz.6.915': attribute type 1 has an invalid length. [ 116.652121][ T6566] netlink: 8 bytes leftover after parsing attributes in process `syz.6.915'. [ 116.661682][ T6586] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 116.708592][ T6586] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.744982][ T6566] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop6 ino=12 [ 116.745128][ T6586] ext4 filesystem being mounted at /229/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 116.818202][ T6605] loop5: detected capacity change from 0 to 512 [ 116.825213][ T5475] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.844212][ T6605] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 116.855878][ T6605] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 116.866179][ T6605] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.927: Corrupt directory, running e2fsck is recommended [ 116.902343][ T6607] loop2: detected capacity change from 0 to 512 [ 116.935115][ T6612] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 116.938244][ T6605] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 116.945910][ T6607] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 116.952488][ T6605] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.927: corrupted in-inode xattr: invalid ea_ino [ 116.984093][ T6605] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.927: couldn't read orphan inode 15 (err -117) [ 117.006414][ T6607] ext4 filesystem being mounted at /179/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.025230][ T6617] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 117.061552][ T6605] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.090062][ T6586] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #19: comm syz.1.920: corrupted inode contents [ 117.126397][ T6622] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 117.152930][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.163341][ T6586] EXT4-fs error (device loop1): ext4_dirty_inode:6502: inode #19: comm syz.1.920: mark_inode_dirty error [ 117.175454][ T6586] EXT4-fs error (device loop1): ext4_do_update_inode:5617: inode #19: comm syz.1.920: corrupted inode contents [ 117.189001][ T6586] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3000: inode #19: comm syz.1.920: mark_inode_dirty error [ 117.201831][ T6586] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3003: inode #19: comm syz.1.920: mark inode dirty (error -117) [ 117.205647][ T6622] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.214619][ T6586] EXT4-fs warning (device loop1): ext4_evict_inode:273: xattr delete (err -117) [ 117.243332][ T6622] ext4 filesystem being mounted at /59/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 117.259833][ T6605] bond1: entered promiscuous mode [ 117.313428][ T6630] EXT4-fs error (device loop2): ext4_xattr_inode_iget:441: inode #18: comm syz.2.936: iget: bad extra_isize 90 (inode size 256) [ 117.314795][ T6605] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 117.338331][ T6605] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it [ 117.348489][ T6605] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.927: Corrupt directory, running e2fsck is recommended [ 117.361860][ T6605] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 3: comm syz.5.927: path /108/file0: bad entry in directory: directory entry overrun - offset=0, inode=4294967295, rec_len=65552, size=1024 fake=0 [ 117.380852][ T6630] EXT4-fs (loop2): Remounting filesystem read-only [ 117.405350][ T6630] EXT4-fs warning (device loop2): ext4_evict_inode:273: xattr delete (err -30) [ 117.430886][ T3330] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.449645][ T6630] EXT4-fs (loop2): 1 orphan inode deleted [ 117.460985][ T4329] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.471004][ T6630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.484741][ T6637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.939'. [ 117.500568][ T6637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.939'. [ 117.536768][ T6643] tipc: Started in network mode [ 117.541820][ T6643] tipc: Node identity ac14140f, cluster identity 4711 [ 117.583964][ T6643] tipc: New replicast peer: 255.255.255.255 [ 117.590191][ T6643] tipc: Enabled bearer , priority 10 [ 117.622307][ T6643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.936'. [ 117.631695][ T6643] tipc: Disabling bearer [ 117.644948][ T6646] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.692970][ T3321] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.699347][ T6646] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 117.732544][ T3321] ================================================================== [ 117.740668][ T3321] BUG: KCSAN: data-race in __wb_update_bandwidth / percpu_counter_add_batch [ 117.749441][ T3321] [ 117.751765][ T3321] read-write to 0xffff88810097f948 of 8 bytes by interrupt on cpu 1: [ 117.759827][ T3321] percpu_counter_add_batch+0x110/0x130 [ 117.765397][ T3321] __wb_writeout_add+0x42/0x1b0 [ 117.770272][ T3321] __folio_end_writeback+0x14b/0x360 [ 117.775578][ T3321] folio_end_writeback_no_dropbehind+0x6d/0x1b0 [ 117.781928][ T3321] folio_end_writeback+0x1c/0x70 [ 117.786880][ T3321] end_buffer_async_write+0x156/0x1f0 [ 117.792251][ T3321] end_bio_bh_io_sync+0x79/0xa0 [ 117.797097][ T3321] bio_endio+0x37e/0x420 [ 117.801353][ T3321] blk_update_request+0x336/0x730 [ 117.806566][ T3321] blk_mq_end_request+0x26/0x50 [ 117.811417][ T3321] lo_complete_rq+0x98/0x140 [ 117.816603][ T3321] blk_done_softirq+0x77/0xb0 [ 117.821375][ T3321] handle_softirqs+0xba/0x290 [ 117.827291][ T3321] run_ksoftirqd+0x1c/0x30 [ 117.831725][ T3321] smpboot_thread_fn+0x32b/0x530 [ 117.836677][ T3321] kthread+0x489/0x510 [ 117.840750][ T3321] ret_from_fork+0x149/0x290 [ 117.845497][ T3321] ret_from_fork_asm+0x1a/0x30 [ 117.850372][ T3321] [ 117.852695][ T3321] read to 0xffff88810097f948 of 8 bytes by task 3321 on cpu 0: [ 117.860226][ T3321] __wb_update_bandwidth+0x98/0x5d0 [ 117.865436][ T3321] do_writepages+0x2dd/0x310 [ 117.870037][ T3321] filemap_write_and_wait_range+0x144/0x340 [ 117.875922][ T3321] sync_blockdev+0x35/0x50 [ 117.880590][ T3321] ext4_put_super+0x610/0x7d0 [ 117.885258][ T3321] generic_shutdown_super+0xe6/0x210 [ 117.890540][ T3321] kill_block_super+0x2a/0x70 [ 117.895204][ T3321] ext4_kill_sb+0x42/0x80 [ 117.899522][ T3321] deactivate_locked_super+0x75/0x1c0 [ 117.904894][ T3321] deactivate_super+0x97/0xa0 [ 117.909586][ T3321] cleanup_mnt+0x2a9/0x320 [ 117.914175][ T3321] __cleanup_mnt+0x19/0x20 [ 117.918586][ T3321] task_work_run+0x131/0x1a0 [ 117.923196][ T3321] exit_to_user_mode_loop+0x1fe/0x740 [ 117.928561][ T3321] do_syscall_64+0x1ef/0x2c0 [ 117.933448][ T3321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.939332][ T3321] [ 117.941727][ T3321] value changed: 0x0000000000000150 -> 0x0000000000000160 [ 117.948819][ T3321] [ 117.951127][ T3321] Reported by Kernel Concurrency Sanitizer on: [ 117.957276][ T3321] CPU: 0 UID: 0 PID: 3321 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 117.968732][ T3321] Tainted: [W]=WARN [ 117.972532][ T3321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 117.982775][ T3321] ================================================================== [ 117.998101][ T6644] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 118.011000][ T6644] EXT4-fs (loop1): invalid journal inode [ 118.016790][ T6644] EXT4-fs (loop1): can't get journal size [ 118.028480][ T6644] EXT4-fs (loop1): 1 truncate cleaned up [ 118.035385][ T6644] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 118.068386][ T4329] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.121025][ T5475] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.136320][ T3330] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.