last executing test programs: 1m19.699528577s ago: executing program 4 (id=2610): r0 = socket(0x40000000015, 0x5, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000002300)) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x640100fe}, 0x10) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x7, &(0x7f00000005c0)=[0xffffffffffffffff, 0xee01, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee01]) r4 = eventfd(0x9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYRESHEX=r5, @ANYBLOB="edfdea2573ab70ab2d85faf3dc04d8436eee9a1aec0df35f65d6920a9e8d7a6c579a135cb2cfb6812c7c574ae2bccb6dfa67be942893f67a026ddb88ac895682a7335e496d3bf8afceb44b457f98beca8f8af121db25c6b51ebdcd1c1bdcdf334b05ea8764fc04528b9d5cca43cd61c2a622d9d330f0980243154bac90f9e220c60b5638cc3810e079e4b62b9ad064a81d0f", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_GARBAGE_COLLECT(r5, 0x4004f506, &(0x7f00000002c0)) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r8, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) keyctl$get_persistent(0x16, r7, r8) r9 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r10) chown(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, r10) r11 = gettid() r12 = geteuid() r13 = getgid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000680)={0x0, 0x0}) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) r16 = accept4$x25(r0, 0x0, &(0x7f00000007c0), 0x0) sendmsg$unix(r0, &(0x7f0000000940)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)="a784c49c83cad3b87936a1ee1af69b6224d6f08b3bca5899d96471160301f41e0c4f4677b9288b24a36dad0b45285d673da714eff5638540c98b86cd", 0x3c}, {&(0x7f0000000140)="c58183f0919837811f0e0b351f899f02be7aac77503f8ece1b28e87ce89478b55f9bfe6157191167433acb84b253faf3d19b266bccf5e4c9c5b598cf72173d3e7423c31559827b6e2c5b8713e8793cb4f67012e5815398f65fb3740055d8e1d20ac2e33e45981abb955170e004b2080233188fb00c7d287c31dd2c05f48556d494a37a46abee2f101ff036a1fc2e57dc3cea0f03c0401b34190c4d2b7170c503ad852b62de8f7a8a64f595a11f64ab974cd4a6be75ec3e6f47e9d402bd82f108f00cdbca25d38f1269f76fe532ce9714399c7da4c901bf3ba989c7acf5a7a86620f83f0f37f02d7c11ac5c4435641f633a977c187527", 0xf6}], 0x2, &(0x7f0000000b00)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYBLOB="1c000800000000000000220005000000", @ANYRES32, @ANYRES32=r7, @ANYRES32=r10, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="000000001b2bc30b3b676d4201060000002a1a30e32034b8c877c89264000000020000", @ANYRES32=r14, @ANYRES32=r15, @ANYRES32=0xee01, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r16, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1], 0x128}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 1m19.641567733s ago: executing program 4 (id=2611): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00000004000000080000000700000000000000", @ANYRES32, @ANYBLOB='\x00'/14, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/25], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000010000000000000000008510000006", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff0000"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x10, &(0x7f0000000300)={0x0, 0x1, 0x3}) 1m19.507099666s ago: executing program 4 (id=2612): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x47, &(0x7f00000000c0)}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x41100}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) getitimer(0x0, &(0x7f0000000000)) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000fcb000), 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="850000002e0000001600000000f390bdcd8000000000000095400000000000002a8a7c612f3ed23fe89ce9237346cc7d8a6a80b8d1edcff038ae414012ed885b5f4055ce6b5b8fcce0f2b2bbb92abad37979137e"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff, 0x40f00, 0x0, '\x00', 0x0, @sk_skb}, 0x94) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="190000000400"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x100000000000009}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0xfffffffffffffffd}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = signalfd(0xffffffffffffffff, 0x0, 0x0) faccessat2(r6, 0x0, 0x2, 0x1100) 1m19.46906095s ago: executing program 4 (id=2613): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008842, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==") syz_open_procfs(0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x801460, 0x0, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) r2 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) preadv2(r2, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0) r3 = syz_clone(0x1000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) migrate_pages(r3, 0x7, 0x0, &(0x7f0000000240)=0x8000000000000001) 1m19.122406915s ago: executing program 4 (id=2614): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) utimensat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x100) 1m18.647254272s ago: executing program 4 (id=2616): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x6) ioctl$TCSBRKP(r2, 0x5425, 0x80000000) 1m18.647137752s ago: executing program 32 (id=2616): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r1}, 0x10) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x6) ioctl$TCSBRKP(r2, 0x5425, 0x80000000) 1m16.138515382s ago: executing program 3 (id=2635): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008842, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x801460, 0x0, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) modify_ldt$write(0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='kfree\x00', r3}, 0x18) creat(&(0x7f0000000100)='./bus\x00', 0x0) r4 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) preadv2(r4, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0) r5 = syz_clone(0x1000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) migrate_pages(r5, 0x7, 0x0, &(0x7f0000000240)=0x8000000000000001) 1m15.227776552s ago: executing program 3 (id=2640): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket$isdn(0x22, 0x3, 0x2) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000054850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB='\r\t\x00'/20, @ANYRES32=0x0, @ANYRESOCT=r0, @ANYRESOCT=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000200000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x919, 0x4352, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffc, 0x1}, 0x18404, 0x0, 0xfffffffe, 0x6, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = perf_event_open$cgroup(&(0x7f00000003c0)={0x1, 0x80, 0x3, 0x1b, 0xa, 0xa, 0x0, 0x7fffffffffffffff, 0x10, 0x6, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f00000001c0), 0xc}, 0x2, 0x0, 0xb, 0x3, 0x3, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8}, 0xffffffffffffffff, 0x4, r3, 0xb) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400, 0xf, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0xaf1d, 0x0, @perf_bp={&(0x7f0000000180), 0x3}, 0x100410, 0x403, 0x6, 0x1, 0x9, 0x9, 0xfffd, 0x0, 0x5, 0x0, 0x3}, 0x0, 0x1, r4, 0x1) syz_clone(0x840000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2a, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf4039, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x1, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200b}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r6) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x300000c, 0x51031, 0xffffffffffffffff, 0x0) r7 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x100, 0x4, 0x20}, &(0x7f0000010080), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') 1m14.188293987s ago: executing program 3 (id=2644): r0 = socket(0x40000000015, 0x5, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000002300)) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x640100fe}, 0x10) lstat(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x7, &(0x7f00000005c0)=[0xffffffffffffffff, 0xee01, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xee01]) r4 = eventfd(0x9) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000600)={0x0, 0x0}) r6 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000a00)=ANY=[@ANYRESHEX=r6, @ANYBLOB="edfdea2573ab70ab2d85faf3dc04d8436eee9a1aec0df35f65d6920a9e8d7a6c579a135cb2cfb6812c7c574ae2bccb6dfa67be942893f67a026ddb88ac895682a7335e496d3bf8afceb44b457f98beca8f8af121db25c6b51ebdcd1c1bdcdf334b05ea8764fc04528b9d5cca43cd61c2a622d9d330f0980243154bac90f9e220c60b5638cc3810e079e4b62b9ad064a81d0f", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$F2FS_IOC_GARBAGE_COLLECT(r6, 0x4004f506, &(0x7f00000002c0)) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0}, &(0x7f00000003c0)=0xc) r9 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@secondary) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r9, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain) keyctl$get_persistent(0x16, r8, r9) r10 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r10, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r11) chown(&(0x7f0000000080)='./file0\x00', 0xffffffffffffffff, r11) r12 = gettid() r13 = geteuid() r14 = getgid() ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000680)={0x0, 0x0}) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) r17 = accept4$x25(r0, 0x0, &(0x7f00000007c0), 0x0) sendmsg$unix(r0, &(0x7f0000000940)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000100)="a784c49c83cad3b87936a1ee1af69b6224d6f08b3bca5899d96471160301f41e0c4f4677b9288b24a36dad0b45285d673da714eff5638540c98b86cd", 0x3c}, {&(0x7f0000000140)="c58183f0919837811f0e0b351f899f02be7aac77503f8ece1b28e87ce89478b55f9bfe6157191167433acb84b253faf3d19b266bccf5e4c9c5b598cf72173d3e7423c31559827b6e2c5b8713e8793cb4f67012e5815398f65fb3740055d8e1d20ac2e33e45981abb955170e004b2080233188fb00c7d287c31dd2c05f48556d494a37a46abee2f101ff036a1fc2e57dc3cea0f03c0401b34190c4d2b7170c503ad852b62de8f7a8a64f595a11f64ab974cd4a6be75ec3e6f47e9d402bd82f108f00cdbca25d38f1269f76fe532ce9714399c7da4c901bf3ba989c7acf5a7a86620f83f0f37f02d7c11ac5c4435641f633a977c187527", 0xf6}], 0x2, &(0x7f0000000b00)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r4, @ANYRES32=r1, @ANYBLOB="1c000800000000000000220005000000", @ANYRES32=r5, @ANYRES32=r8, @ANYRES32=r11, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="000000001b2bc30b3b676d4201060000002a1a30e32034b8c877c89264000000020000", @ANYRES32=r15, @ANYRES32=r16, @ANYRES32=0xee01, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r17, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1], 0x128}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 1m14.129259933s ago: executing program 3 (id=2647): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000001c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008842, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$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") syz_open_procfs(0x0, 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x801460, 0x0, 0x2, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) r3 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x100) preadv2(r3, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x100000}], 0x2, 0x0, 0x0, 0x0) r4 = syz_clone(0x1000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) migrate_pages(r4, 0x7, 0x0, &(0x7f0000000240)=0x8000000000000001) 1m13.723114743s ago: executing program 3 (id=2653): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd6b}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 1m13.239003112s ago: executing program 3 (id=2666): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x20000000000000ee, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000680)='host1x_cdma_push\x00', r1, 0x0, 0x9}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r4}, 0x18) perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7fffffffffffffff, 0xffffffff}, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_read_part_table(0x59d, &(0x7f0000000000)="$eJzs0r1Le1cYB/CTgIRCJSKCgx0Eg0ujQhx0SAYrMWQxIlYcnAUHHQQHB0mJzr78A4pvIC5iZ0cxgijESTKKc0FxyZTS9hZq7dIWU/rj81ku55znuc89fG/gfy0efmo2m7EQQjPx97u/P8tPFHunxqZnQoiF+RBC/puvfz2JRRW/v/UiWpeidTGRqR3cjr+eddz1PVRTR/Ho/DIewg8hhKWn4+S/vRtfvvPcdXJjc6WwtZZbfCysPw8vDOR7tvPLuyOH2fJsd3Yu+rEu462Zn6qNntw3Sy977YNt1VojcxPVpWOfM5//1p/z3++q1CuNyf7T1aF0Z/2qvBPl/iZ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgk53nrpMbmyuFrbXc4mNh/Xl4YSDfs51f3h05zJZnu7Nz8d/qLuOtmZ+qjZ7cN0sve+2DbdVaI3MT1aVjH1q/+/FzPokW+ja8z3+/q1KvNCb7T1eH0p31q/JOlPvbx/wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5SfqLYOzU2PRNCLMyHEMbjHce/7DcT7+suomcp2i8mMrWD2/HXs467vodq6mgqEcIfW5aejpNfteoS/GM/BwAA//8394ZP") r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r5, r7, 0x25, 0x0, @void}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 1m13.238751942s ago: executing program 33 (id=2666): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x20000000000000ee, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f0000000680)='host1x_cdma_push\x00', r1, 0x0, 0x9}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x40010) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='kfree\x00', r4}, 0x18) perf_event_open(&(0x7f0000000800)={0x3, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x7fffffffffffffff, 0xffffffff}, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_read_part_table(0x59d, &(0x7f0000000000)="$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") r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000580)={'veth0_to_team\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={r5, r7, 0x25, 0x0, @void}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) r8 = socket(0x10, 0x803, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800}) 8.6221274s ago: executing program 1 (id=3689): msgsnd(0x0, 0x0, 0x2000, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r1}, 0x18) msgrcv(0x0, &(0x7f0000001080)={0x0, ""/1}, 0x2000, 0x2, 0x3000) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000004c0)={{0x0, 0xee00, 0x0, 0x0, 0x0, 0x0, 0xfffe}, 0x0, 0x0, 0xb, 0x6f76, 0x7, 0x0, 0x1, 0x8, 0x7f, 0x3}) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x739, 0x40200003, 0x0, 0x6, 0x7}) setrlimit(0x40000000000008, &(0x7f0000000080)={0x0, 0x6}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xc880, &(0x7f0000000540)={0xa, 0x4e1c, 0x6, @empty, 0x8}, 0x1c) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r4}, 0x18) sendmsg$tipc(r3, 0x0, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r5}, 0x4) signalfd(r4, &(0x7f0000000180)={[0x8]}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYRESDEC=r2], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000005600)='sys_enter\x00', r6, 0x0, 0x2}, 0x18) 7.743274618s ago: executing program 2 (id=3700): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d6163767461703002000000000000001400"], 0xe8}}, 0x0) 7.684551604s ago: executing program 2 (id=3702): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$9p_rdma(&(0x7f0000000240), &(0x7f00000003c0)='./file0\x00', &(0x7f0000001400), 0x0, &(0x7f0000000140)={'trans=rdma,', {}, 0x2c, {[{@common=@privport}]}}) (fail_nth: 4) 7.370365375s ago: executing program 2 (id=3705): r0 = syz_io_uring_setup(0x14d9, &(0x7f0000000480)={0x0, 0x5121, 0x0, 0x3, 0x257}, &(0x7f00000001c0)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_SYMLINKAT={0x26, 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 6.986449903s ago: executing program 2 (id=3707): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_clone(0xa1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x1ffffffffffffdf4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESOCT=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getpid() bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r2 = socket(0xa, 0x5, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x40000, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x73) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kmem_cache_free\x00', r3}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) shmdt(0x0) r4 = epoll_create1(0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000700)={'syztnl0\x00', &(0x7f0000000500)={'ip_vti0\x00', 0x0, 0x8, 0x7, 0x8, 0xe, {{0x8, 0x4, 0x2, 0x4, 0x20, 0x68, 0x0, 0x4, 0x4, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0xc, 0xb0, 0x3, 0xa, [{@private=0xa010102, 0x1}]}]}}}}}) r6 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'team_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000004000000000000000100000095000000"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x40, '\x00', r7, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xe, 0x1}, {0x0, 0x3}}}, 0x24}}, 0x800) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000940)={'ip6_vti0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000a00)={'syztnl1\x00', &(0x7f0000000980)={'ip6tnl0\x00', 0x0, 0x2f, 0x2, 0x8b, 0xfffffff8, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x7, 0x30f70c75, 0x1ce}}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000a40)={'veth0_to_hsr\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000a80)={'vcan0\x00', 0x0}) getsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000ac0), &(0x7f0000000b00)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_GET(r2, &(0x7f0000000d00)={&(0x7f0000000200), 0xc, &(0x7f0000000cc0)={&(0x7f0000000d40)={0x14c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x4}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x4}]}, 0x14c}, 0x1, 0x0, 0x0, 0x20000014}, 0x20000040) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000100)={0x2017be01}) 6.688649243s ago: executing program 2 (id=3710): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f0000000400)={[{@resuid}, {@delalloc}, {@bsdgroups}]}, 0x3, 0x56d, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) r2 = openat(r1, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r2, 0x0, 0xee01) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x10, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000181100", @ANYRES32=r0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000001180)='damon_aggregated\x00', r4, 0x0, 0x800}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000240), &(0x7f00000003c0)}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5, 0x0, 0xb}, 0x18) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3, 0x1}, 0x10, 0x0, r3}, 0x94) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 6.286416543s ago: executing program 2 (id=3715): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(r2, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r1, 0x0, 0x0, 0x400000000000000) 4.535371428s ago: executing program 5 (id=3736): sendmsg$key(0xffffffffffffffff, 0x0, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000801, 0xee00, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) 4.471610434s ago: executing program 5 (id=3737): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x34120, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4000}, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0xa) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x7, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000001000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f00000006c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000002200afffb85749dd34bde951900"/29, @ANYRES32, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x480d0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000600"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x10, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x64, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x2}, 0x18) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x9}}}, 0x24}}, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x2) 4.379667523s ago: executing program 5 (id=3738): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e0000000400000008", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/25], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000), 0x0) r2 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x10, &(0x7f0000000300)={0x0, 0x1, 0x3}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x48800, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) 4.295024002s ago: executing program 5 (id=3740): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x1}, 0x50) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'ip6tnl0\x00', 0x0, 0x4, 0x58, 0xd, 0x6, 0x40, @mcast2, @remote, 0x0, 0x80, 0x0, 0x400000}}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x9, [@enum64={0xc, 0x2, 0x0, 0x13, 0x0, 0xe, [{0x2, 0x6, 0x9}, {0x4, 0x1, 0xe}]}, @volatile={0xa, 0x0, 0x0, 0x9, 0x2}, @fwd={0xf}, @func={0xd, 0x0, 0x0, 0xc, 0x3}]}, {0x0, [0x2e, 0x61, 0x1e, 0x0, 0x30, 0x2e, 0x0]}}, &(0x7f0000000340)=""/49, 0x69, 0x31, 0x1, 0x800}, 0x28) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001580)=@bpf_lsm={0x1d, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0xc5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000480)='GPL\x00', 0x7, 0x1000, &(0x7f00000004c0)=""/4096, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000014c0)={0x4, 0x5}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f0000001500)=[{0x0, 0x3, 0xa, 0x4}, {0x2, 0x1, 0x7, 0x1}, {0x1, 0x5, 0xb, 0x8}, {0x0, 0x5, 0x8, 0x5}, {0x5, 0x2, 0xe, 0x4}, {0x0, 0x4, 0xf, 0x8}, {0x3, 0x1, 0x8, 0x7}], 0x10, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000016c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001640), &(0x7f0000001680)}, 0x20) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001700)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x2}, 0x50) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000001780)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001800), &(0x7f0000001840)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001900)={0x17, 0x16, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, [@map_idx={0x18, 0xe, 0x5, 0x0, 0xc}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x76a}, @map_fd={0x18, 0x6, 0x1, 0x0, r0}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000140)='GPL\x00', 0x2, 0x5e, &(0x7f0000000180)=""/94, 0xc0e00, 0x10, '\x00', r1, @cgroup_sysctl, r2, 0x8, &(0x7f00000003c0)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, &(0x7f00000018c0)=[0xffffffffffffffff, r4, 0x1, r5, r6, r7, r8], 0x0, 0x10, 0xcdad}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000019c0)={0x1b, 0x0, 0x0, 0x4, 0x0, r8, 0x4, '\x00', r1, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x50) r9 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001a40), 0x80880, 0x0) ioctl$SNAPSHOT_S2RAM(r9, 0x330b) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001a80)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r10 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000001ac0), 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001b80)={{r8, 0xffffffffffffffff}, &(0x7f0000001b00), &(0x7f0000001b40)=r6}, 0x20) ioctl$TIOCSCTTY(r6, 0x540e, 0xfff) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000001bc0)={0x3, 0x3, 0x3}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000001c00)={0x8, 0x5, {0x100000000, @struct={0x2}, 0x0, 0x8, 0xafae, 0x3, 0x7f, 0x1, 0xc0, @usage, 0xe, 0x7c, [0x1, 0x1, 0x8000, 0x1, 0x400000000000, 0x1]}, {0x4, @struct={0xca3, 0x6}, 0x0, 0x0, 0xf, 0xc3a6, 0xff, 0x10000000000, 0xa0, @usage=0x401, 0x1, 0xd, [0x0, 0xbe2, 0x8000000000000000, 0x0, 0x1ff, 0x9]}, {0x0, @usage=0x1, 0x0, 0x930, 0x0, 0x8001, 0x2, 0x0, 0x4, @struct={0x5, 0x9}, 0x0, 0x3, [0xc, 0x0, 0x400, 0x7, 0x5, 0x9361]}, {0x7ff, 0x9}}) ioctl$BTRFS_IOC_DEV_INFO(r5, 0xd000941e, &(0x7f0000002000)={r12, "b742fdf9bad8b5a54d00ebd6b0ea8e13"}) mkdirat(r6, &(0x7f0000003000)='./file0\x00', 0xc) r13 = syz_io_uring_complete(0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000003240)={r6, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003340)={0x6, 0x15, &(0x7f0000003040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@ldst={0x3, 0x3, 0x1, 0x4, 0x7, 0x0, 0x10}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r11}}, @call={0x85, 0x0, 0x0, 0x72}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000003100)='syzkaller\x00', 0x56d, 0x6d, &(0x7f0000003140)=""/109, 0x40f00, 0x20, '\x00', r1, 0x25, r6, 0x8, &(0x7f00000031c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000003200)={0x1, 0xf, 0x9, 0xef}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000003280)=[r13, r14, r11], &(0x7f00000032c0)=[{0x3, 0x5, 0x4, 0x5}, {0x1, 0x1, 0x9, 0x1}, {0x3, 0x2, 0xc, 0x9}, {0x3, 0x2, 0x3, 0xb}, {0x4, 0x4, 0x10, 0x3}, {0x0, 0x1, 0xb, 0xb}, {0x5, 0x5, 0xf, 0x4}, {0x3, 0x1, 0xc}], 0x10, 0x4}, 0x94) ptrace$peek(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003400)) r15 = openat2(0xffffffffffffff9c, &(0x7f0000003440)='./file0\x00', &(0x7f0000003480)={0x42040, 0x22, 0x2c}, 0x18) ioctl$sock_inet_SIOCGARP(r15, 0x8954, &(0x7f00000034c0)={{0x2, 0x4e20, @multicast2}, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x20, {0x2, 0x4e24, @empty}, 'ip6gre0\x00'}) setsockopt$inet_IP_XFRM_POLICY(r15, 0x0, 0x11, &(0x7f0000003540)={{{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e20, 0x7fff, 0x4e22, 0x7fff, 0xa, 0x20, 0x0, 0xc, 0x0, 0xee01}, {0x3, 0x4, 0x1a00000, 0x0, 0x410, 0x401, 0x4, 0xeb}, {0x3, 0x6, 0x4, 0x3}, 0x400, 0x0, 0x0, 0x1, 0x5}, {{@in6=@rand_addr=' \x01\x00', 0x4d3, 0xff}, 0xa, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3, 0x1, 0x33, 0x1, 0x101, 0x29d}}, 0xe8) ioctl$AUTOFS_DEV_IOCTL_READY(r13, 0xc0189376, &(0x7f0000003640)={{0x1, 0x1, 0x18, r10, {0x6}}, './file1\x00'}) sendto(r16, &(0x7f0000003680), 0x0, 0x44000, &(0x7f0000003780)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x0, 0x2, {0xa, 0x4e23, 0x7, @mcast2, 0x7}}}, 0x80) 4.261057775s ago: executing program 5 (id=3741): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f0000000400)={[{@resuid}, {@delalloc}, {@bsdgroups}]}, 0x3, 0x56d, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) r2 = openat(r1, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r2, 0x0, 0xee01) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x10, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000181100", @ANYRES32=r0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000001180)='damon_aggregated\x00', r4, 0x0, 0x800}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000240), &(0x7f00000003c0)}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5, 0x0, 0xb}, 0x18) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000100000000000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3, 0x1}, 0x10, 0x0, r3}, 0x94) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 4.0053203s ago: executing program 5 (id=3745): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x18) getegid() 3.866346005s ago: executing program 6 (id=3748): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000180)={[{@dioread_lock}, {@resgid}, {@mblk_io_submit}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@jqfmt_vfsv0}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x10, 0x6, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) inotify_init1(0x0) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 3.665769055s ago: executing program 6 (id=3750): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0xfffffffffffff001}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) ioperm(0x0, 0x2, 0x2) syz_clone(0x308000, 0x0, 0x0, 0x0, 0x0, 0x0) ioperm(0x0, 0x9da9, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r4 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="af", 0x1, 0xffffffffffffffff) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000001480)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='kfree\x00', r6, 0x0, 0x4804}, 0x18) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, &(0x7f0000000200)='asymmetric\x00', &(0x7f00000002c0)) keyctl$KEYCTL_MOVE(0x1e, r4, 0xffffffffffffffff, r5, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x48, r8, 0x1, 0x70bd27, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x80}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x48}}, 0x20000000) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000002c0)='GPL\x00', 0x6a58, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r10, 0x0, 0x7}, 0x18) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="140100002900010000000000fcdbdf250401f2800c0018000bac0f00000000001400010000000000000000000000ffff7f00000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a608004500ac1414bb60898023cc16e797422d79f61dca5c781711f2c371d2a6c536e9e11b75d4a097c5fe4bd3ae5b7f1e9df85ba1ba16c8d77e328ce03aecf0c78a6236d287abcc278a8d7c97bf5a52db47a0ba2a5ef58c6586642a06ae27356a6d656146187da5454db7"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) keyctl$unlink(0x9, r5, r5) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x15) setsockopt$inet6_tcp_int(r11, 0x6, 0x1e, 0x0, 0x0) 3.520665649s ago: executing program 6 (id=3752): bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="160000000000000005000000ff"], 0x50) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) socket$nl_route(0x10, 0x3, 0x0) close(r0) 3.41268167s ago: executing program 6 (id=3755): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000300)=""/180}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) 3.354808606s ago: executing program 6 (id=3756): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200080, &(0x7f0000000400)={[{@resuid}, {@delalloc}, {@bsdgroups}]}, 0x3, 0x56d, &(0x7f0000000c00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x800, 0x0) r2 = openat(r1, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r2, 0x0, 0xee01) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0xfffffffffffffd2d, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x10, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000181100", @ANYRES32=r0], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000001180)='damon_aggregated\x00', r4, 0x0, 0x800}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000240), &(0x7f00000003c0)}, 0x20) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x19, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r5, 0x0, 0xb}, 0x18) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000000010000000000000000008510000006", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000a80)='kfree\x00', r6, 0x0, 0xfffffffffffffffd}, 0x18) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltaction={0x54, 0x18, 0x1, 0x70bd2a, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x8f, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x37}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x3, 0x1}, 0x10, 0x0, r3}, 0x94) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) 2.896053881s ago: executing program 6 (id=3759): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) 1.615182909s ago: executing program 1 (id=3768): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000800000007000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'/25], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000000851000000600000018000000", @ANYRES32=0x0, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x18) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000), 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000880)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000100)="03", 0x1}, {&(0x7f0000000540)="cf597f56376fd90e8f5e68bb012986a1be1cc721139578aefea50b0fd4ca8f937bf3742604d45fdfd814c33b49ce06353952a9f670e400a094a652345aaa825ee777e6fb842ee8f6300b78d0b8534d70b949a0c393896c586d427d70dabfd90ee9805f8d893989640616207d572846a17396335546d94c2e2b23c484f7534e24eb868bd07f6a86598e0d2757ba6bae990ea6919da1d088b8378d1601219d82092209f11de43aec74474d3141f152e9e09b33826f252c795244e7b12cd1f7d57d3d1470f24ba8e9f3e3", 0xc9}, {&(0x7f0000000340)="306a50be5c210e457d4341c4dd", 0xd}, {&(0x7f00000007c0)="111857b6045567a03c9b55055bf9dbfde419b7a79ab021219872e422acf78c3bba6a78d6fa22736696b75f5d476f9f7f0f3d90f0917f8777e9c87895926c2abefc04a9d7713a052fd48849869cdb43893f3982d3f5e3203ffaef5e1f7c14719f715eb39072c987779e7336cac1d59d96e4a4a29fe963c0bd6b1f", 0x7a}], 0x4}], 0x1, 0x0) r3 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x10, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r3, &(0x7f00000003c0)=""/83, 0x53, 0x8000000000002003, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0xffff, @multicast1}, 0x10) mq_timedsend(r3, 0x0, 0x0, 0x0, 0x0) write(r0, 0x0, 0xfffffffffffffcd5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000780)=ANY=[@ANYBLOB="1c0000005e000101000000000600", @ANYRES32=0x0, @ANYBLOB="04"], 0x1c}], 0x1}, 0x800) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000100), 0x2, 0x4fd, &(0x7f0000000b00)="$eJzs3ctvW1kZAPDv3jycyWQmGZgFoAHKMFBQVTtxZ6LRbBhWI4RGQsySRSckThTFiaPYGZrQRbpkj0QlVrDiHwCJBVJX7JFYwI5NWSDxqEANEgsjX19nnIcbq03sNv79pCufe47t75xa9xzrc3NPACPrWkQcRMRkRHwcEbN5fZIf8X77aD3v8aO7y4eP7i4n0Wx+9M8ka2/VRddrWl7O33MqIr7/QcQPkxNB/xhR39vfWKpWKzt5VamxuV2q7+3fXN9cWqusVbbK5cWFxfl3b71TvqCR/vqo9LvffvHhHw6++eNWt2byuu5xXKT20CeO4rSMR8R3LyPYEIzl45l8mhc/1Yu4SGlEfCYi3syu/9kYyz7N445/TN+K/NIGAF5QzeZsNGe7zwGAqy7NcmBJWsxzATORpsViO4f3ekyn1Vq9cWO1tru10s6VzcVEurpercznucK5mEhW18crC1m5c16tlE+c34qI1yLip4WXsvPicq26MswvPgAwwl4+sf7/p9Be/wGAK67r1/zCMPsBAAyO/80HAKPH+g8Ao8f6DwCjx/oPAKPH+g8Ao8f6DwAj5Xsfftg6mof5/a9XPtnb3ah9cnOlUt8obu4uF5drO9vFtVptLbtnz+Z571et1bYX3o7dO6VGpd4o1ff2b2/Wdrcat7P7et+uTAxkVADAk7z25Qd/TiLi4L2XsiO67vd/7lr9xmX3DrhM6bA7AAzN2LA7AAzN6d2+gFEhHw90bdF7r6t66lThpPt9vX2a7xsKPEeuf/4Z8v/AC03+H0bX0+X/fZeHq0D+H0ZXs5nY8x8ARowcP5Cc0979+/98s+ukv9//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4EqayY4kLeZ7gc9EmhaLEa9ExFxMJKvr1cp8RLwaEX8qTBRa5wsRYd8gAHiRpX9L8v2/rs++NXOydbLw30L2GBE/+vlHP7uz1GjsLERMJv86qm/cz+vLw+g/AHCezjrdWcc7Hj+6u9w5Btmfv3+7vbloK+5hfrRbxmM8e5zKcg3T/07y87bW95WxC4h/cC8iPnfW+JMsNzKX73x6Mn4r9isDjZ8ei59mbe3H1r/FZy+gLzBqHrTmn/fPuv7SuJY9nn39T2Uz1LPrzH+Hp+a/9Gj+G+sx/13rN8bbv//OqcrmbLvtXsQXxiMOO2/eNf904ic94r/VZ/y/vPGlN3u1NX8RcT3OGn9yLFapsbldqu/t31zfXFqrrFW2yuXFhcX5d2+9Uy5lOepSJ1N92j/eu/Fqr/it8U/3iD91zvi/1uf4f/m/j3/wlSfE/8ZXz/78X39C/Naa+PU+4y9N/2aqV1sr/kqP8Z/3+d/oM/7Dv+6v9PlUAGAA6nv7G0vVamXnsgvp5YfICknEwQCG0y4UfvWTDwYV6xIL8Xx0Q+F5Kgx7ZgIu26cX/bB7AgAAAAAAAAAAAAAA9DKIPyca9hgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//2KH0wQ=") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f00000002c0)={0x2, 'veth0_macvtap\x00', {0x1}}) writev(r4, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1) 840.539976ms ago: executing program 0 (id=3773): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='proc\x00', 0x401, 0x0) mount$9p_unix(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)='.\x00', &(0x7f0000000280), 0x808008, &(0x7f0000000440)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000002b66d000000000007000000850000006b0000009500000100000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x2, 0x1, 0x1, 0x80, 0x0, 0x7, 0x2000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x9, 0x2, @perf_config_ext={0x1}, 0x1000, 0x4, 0x1, 0x5, 0x38, 0x1, 0x9, 0x0, 0x6040, 0x0, 0x5}, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) pipe(&(0x7f00000001c0)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0x1}, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000300)=@generic={&(0x7f00000002c0)='./file1\x00', 0x0, 0x18}, 0x18) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000340)='mm_vmscan_throttled\x00', r2, 0x0, 0x7fffffffffffffff}, 0x18) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e64000000080002"], 0x10c}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'wg2\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000002110001180090001006c61737400000000480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c000080080003400000000214"], 0xdc}}, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x7, 0x441e, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x10000, 0x8, 0x1, 0x8, 0x2020005, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca6dc55}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x4, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x6}, [@jmp={0x5, 0x0, 0x5, 0x2, 0x3, 0xfffffffffffffffe, 0x10}]}, &(0x7f0000000340)='GPL\x00', 0x7, 0x80, &(0x7f00000006c0)=""/128, 0x41100, 0x34, '\x00', r1, 0x25, r8, 0x8, &(0x7f0000000740)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000780)={0x3, 0x3, 0xb, 0xb674}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0), 0x10, 0x1ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 702.59678ms ago: executing program 0 (id=3774): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x8, 0xf9, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x18) getegid() 651.291365ms ago: executing program 0 (id=3775): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x4, r2, 0x30, r0}, 0x10) 643.789626ms ago: executing program 1 (id=3776): r0 = socket$kcm(0x2, 0x200000000000001, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012", @ANYRES32=0x0], 0x48) syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f00000001c0)={[{@mode={'mode', 0x3d, 0x9}}, {@nojoliet}, {@nojoliet}]}, 0x13, 0x557, &(0x7f0000000540)="$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") mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 503.21201ms ago: executing program 0 (id=3777): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) close(r0) listen(0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) 500.9946ms ago: executing program 1 (id=3778): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000180)={[{@dioread_lock}, {@resgid}, {@mblk_io_submit}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resgid}, {@errors_remount}, {@grpid}, {@jqfmt_vfsv0}]}, 0xfc, 0x58f, &(0x7f0000002d00)="$eJzs3U1rXFUfAPD/nUzSNu3zNIVS1IUUurBSO2kSXyoI1pWIFgu6r0MyDSWTTslMShMLtgu7cSNFELEgfgD3LotfwE9R0EKREnQhQuRO7qTTZCavE2fS+f3gtufMuTfn/nPuOTln7gw3gL51Mv0nF/FiRHydRBxtKstHVnhyZb+lJ7cm0y2J5eVP/kgiyV5r7J9k/x/OMi9ExC9fRpzJra+3urA4UyyXS3NZfrQ2e320urB49upscbo0Xbo2PjFx/o2J8bfferNjsb566a/vPn7wwfmvTi19+9OjY/eSuBBHsrLmOHbhdnPmZPGfLDUYF9bsONaBynpJ0u0TYEcGsn4+GOkYcDQGsl4PPP++iIhloE8l+j/0qcY8oLG279A6eN94/N7KAqge+1Bz/PmV90biYH1tNLyUPLMySte7Ix2oP63j59/v30u32Ph9iEOb5AG25fadiDiXz68f/5Ns/Nu5c/U3jze2to5++/sD3fQgnf+81mr+l1ud/0SL+c/hFn13Jzbv/7lHHaimrXT+907L+e/q0DUykOX+V5/zDSZXrpZL5yLi/xFxOgYPpPmN7uecX3q43K6sef6Xbmn9jblgdh6P8geePWaqWCtGxNBu4m54fCfipXyr+JPV9k9atH/6+7i0xTpOlO6/3K5s8/j31vKPEa+0bP+nd7SSje9Pjtavh9HGVbHen3dP/Nqu/m7Hn7b/8MbxjyTN92ur26/jh4N/l9qVpfEP7+D6H0o+racbneBmsVabG4sYSj5a//r402Mb+cb+afynT63E/+xkJbfh9Z8uvj7bYvx3j99tu2svtP/Uttp/+4mHH37+fbv6tzb+vV5Pnc5eyca/1rJrZasnuNvfHwAAAAAAAPSSXEQciSRXWE3ncoXCyuc7jsdwrlyp1s5cqcxfm4r6d2VHYjDXuNN9tOnzEGPZ52Eb+fE1+YmIOBYR3wwcqucLk5XyVLeDBwAAAAAAAAAAAAAAAAAAgB5xuM33/1O/DXT77IA9V3+wwYFunwXQDZs+8r8TT3oCetKm/R94bun/0L/0f+hfa/t/R54sDOwL/v5D/9L/oX/p/9C/9H8AAAAAAAAAAAAAAAAAAAAAAAAAAADoqEsXL6bb8tKTW5NpfurGwvxM5cbZqVJ1pjA7P1mYrMxdL0xXKtPlUmGyMrvZzytXKtfHxmP+5mitVK2NVhcWL89W5q/VLl+dLU6XLpcG/5OoAAAAAAAAAAAAAAAAAAAAYH+pLizOFMvl0txqIp+VzK0v6tPEu9ETp7GXAa7Y0eH5XolibxLvD/TEaewmcSdr3u0d1aUBCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABa+DcAAP//Rm0oPg==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) fallocate(r0, 0x10, 0x6, 0x9) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000059"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x50000a0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x2000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x67, 0x53c, &(0x7f0000000f40)="$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") fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) 454.339855ms ago: executing program 0 (id=3779): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x3d, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x50) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x1c}, 0x18) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x400, 0x0, 0xffffffffffffffff, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='kfree\x00', r3, 0x0, 0x6}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000007940)={0x0, 0x4000, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0xffe4, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0xfffffdd6}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0xfffffe23, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x6}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@generic={&(0x7f00000001c0)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000020000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0), 0x88002, 0x0) pwritev(r9, &(0x7f0000000100)=[{0x0, 0x72}, {&(0x7f0000000140)="de", 0x1}], 0x2, 0x0, 0x0) setsockopt$MRT6_TABLE(r9, 0x29, 0xcf, &(0x7f0000000500)=0xffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r9, 0xe0, &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xfc, &(0x7f0000000640)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x5d, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f00000007c0)=ANY=[@ANYRES16=r8], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x956}, 0x94) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x48) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r13, 0x0, 0x7fffffffffffffff}, 0x18) r14 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000440), 0x509080, 0x0) r15 = io_uring_setup(0x6b, &(0x7f0000000300)={0x0, 0x4, 0x80, 0x2, 0x2100001a}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r15, 0x1c, 0x200000000000000, 0x0) r16 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x26, &(0x7f0000000280)=ANY=[@ANYBLOB="18000020050000000000000088230000f3081811", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000184a0000060000000000000000000000184a0000ffffffff000000000000000018260000", @ANYRES32=r1, @ANYBLOB="000000008000000018140000", @ANYRES32=r2, @ANYBLOB="000000000000000018180000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYRES16], &(0x7f00000003c0)='syzkaller\x00', 0xe2, 0x0, 0x0, 0x40f00, 0x38, '\x00', r10, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x4, 0xf, 0x0, 0x7}, 0x10, r11, r13, 0x1, &(0x7f00000004c0)=[0x1, r14, r16, 0xffffffffffffffff], &(0x7f0000000500)=[{0x5, 0x5, 0x10, 0xc}], 0x10, 0x5}, 0x94) r17 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r18 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r18, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r18, &(0x7f0000000880)=[{{0x0, 0x0, 0x0}, 0x4fb}], 0x1, 0x12020, 0x0) getsockopt$bt_BT_DEFER_SETUP(r17, 0x112, 0x7, 0x0, 0x0) 308.570229ms ago: executing program 1 (id=3780): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000180)={0x0, 0xf5, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x3a00, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c000180140003000000000000000000000000000000000014000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8000000000000000000000000000aa0c00028005000100000000000800074000000000180006801400040020010000000000000000000000000001"], 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4000894) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="dd99401b1f441a835c3dfe053e0e094515e504b6316f2a67a040e860c8118441fc09df1fd193dfa63fcceb82dbd8c0c71b933214389bdf97fd6c3e72b4b836a0ee9b4d75f459e9e7a400ad5c01c749b8e8c6fc439e19077b742f12af535044eab14e1a16e1ed9b2552408b230507bb3d8db6c4b28f2bc0e55df68ae70f3f51e1a6f9a3931a26f5"], 0x2, 0x699, &(0x7f0000000140)="$eJzs3V9rG9n9x/HPyLIte3+E5dcSQsifk6QLDk2VkbxxMCl01dHInlbSiBm52FBY0o29hMjZNkmh8c3WN/0D2yfQu970og+i0Ot9Fr0pLSztXaE3KnNmJEvRv3ijOLvN+2V2NTrznTnfmaPoy9iaIwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADle1XVLjupBc2fXTOZVo7AxZX26t0XdTBduzuxXcpL/VCjoQtp04Zsnq88n/7uuS+mzSyokDwUdvXP+3XvfyOd6209J6MvQaXf49PnRo/udzv6Tl4hd0Kl3/yYp11taycZkTNCW3wziMGhUtnwTxKHZ3Nhwb2/XYlML6n68F7f9hvEiP9cOI7Pm3TSlzc114xf3wp3mVrVS93uNd79Tdt0N84PldKAlFWNvO6jXg+aWjUlWJzF3zWc/TgP8SsOYg4ed/fVZR5IElV4mqDwrqOyWy6VSuVzauLN5567r5kca3ITj9mkkYu4vWnzNzOeNG5iDXFL//+pIdRXU1I52Zcb+eKoqUqjGhPWZXv1/77Y/td/B+t+r8hek72WrL8rW/yvpsyuT6v+EXIyM3WDcGmdC++l+Fm1GRk/1XEd6pPvqqKN9PZnDvo3M1bns5Qx+tuSrqUCxQgVqqGJbTNZitKkNbcjVh9pWTbGMagpUl69Ye4rVlm9fUZ4i+aqorVCRjNbk6aaMStrUptZl5KuoPYXaUVNbqqqif3e73QM9tOd9fUqO6gWVJgQsDwaVp+xpUv3/yafp6zSr/y71/22Vvg6W04fPp8UAXwHd7Pp/UG72ZldfX0YAAAAAAGDeHPvbd8f+7f6ypK5qQd1333RaAAAAAABgjhx1l3VJTnL9L+myHK7/AQAAAAD4X+PYe+wcSav2Q/3OyZ1QL/NLgIUzSBEAAAAAALwie+f/lSWpayetuCrnVNf/AAAAAADga+A3A3Ps53tz7HZ7f9bPSYpby86f/7msaNE5bu1+yzmsJGsqh1nMyCcA2rWLzrlsol77sCTJPvP8S07WWzYJZn/ewS8OZs3170QvJLC0MLiDCQk4Sc8b+eyZPtO1dJNr2TzzD45ysmvSXlZrQd0vemH9XkmVyrlc299t//zxw19IUf84Dx529osffdJ5YHM5TpqOD5OdfjqUTm78yTjJ5Zmdb8HeczHuiFdU63X522Zj1bH9ur3jX1DlMDfY0bQBOOnzV7qejtn11TR29ag/435y/IXk+EtFO2RDRx8tOidZlF488nEDMSGLgs3iRhpzY+2Gyn9Ll/ujkHMK316QysXRMRjKojyYxexz4fxr5FwMZGEfemsGzsV6ksVfkh1NyGL9dFmMjAgAvCkHuiz7LnRZdhLzfhUqZHW3Vx56b2pfqu7Mru4fDFf3Z7/vdu0GC1I++9vE1F4KSt7R1xxbh5bSQ8pfHPOO7mZ1paAJ7+juK1S3pK8/nXwHUpb2SBb/6Xa790q239+9UFX/MNTdSL9xvbyQnMLbzw5/aifAT3y8//H+43J5fcN933XvlLVoDyN7WBC1BwAwYvZ37MyMcN7XtTTi2oN/vJcuDVW8/+9/pKCoj/SJOnqgW72vELg6fq+rAx9DuJVetWrgqtWcf/ee/V664diSbk28qrO1dCC23I9dVG+T4Up9Erv+mkcBAICzdX1GHR5f/wtD9f+W1tKItYtjr7uHa3l2ddy/pJ8UW5qd/AfzPhsAALwd/OgLZ7X9ayeKgtaHpc3NUqW97Zso9H5ooqC65Zug2fYjb7vS3PJNKwrboRfWTSvSclD1YxPvtFph1Da1MDKtMA527Te/m+yr32O/UWm2Ay9u1f1K7BsvbLYrXttUg9gzrZ3v14N424/sxnHL94Ja4FXaQdg0cbgTeX7RmNj3BwKDqt9sB7UgWWyaVhQ0KtGe+VFY32n4purHXhS02mG6w15fQbMWRg2722K+O+7zAgAAvHWePj96dL/T2X/y4sJKcmmethxrQszowpKePk+uypOWfLaKOYIAAPiKOSngp9io8BoTAgAAAAAAAAAAAAAAAAAAAAAAI2bf0nfKhcVxNwtK/Zafncta9Eud3GI4sh9H807sNAu5027VuyXi6NHnU4JX+i290z8Yc3xmB/j3/5PesS1KW/Lz72tlyuC+joXvHqRndGJMsnLsquX+WOTn/88hWXj8xwmrut1ud/rmy8PncGnaAQ4v5CU9WXqFITj79yIAZ+u/AQAA//9b5DOa") write$binfmt_script(r0, &(0x7f00000012c0)={'#! ', './file0'}, 0xb) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000880)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="199198275ebd44618b3d7988c6b2a5f4a49734a3db2cabf7c1575fa9ce5adc409ff13990c99ff4cc236147d508359bd47509f04a841db7ecc9683aa3c2e4ed6baecd89944d34b75b471f08e75a75cb53ab7e6a005d1ec9480f901a675d0d3673a58d4ea15a0c6993fb06d079e6f7baeb6a8aa31f83", @ANYRES16=r5, @ANYRESHEX=r0], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='kmem_cache_free\x00', r6}, 0x10) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GDTEFACILITIES(r7, 0x89ea, &(0x7f0000000840)) 39.649896ms ago: executing program 0 (id=3781): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc}}, 0x0) 0s ago: executing program 1 (id=3782): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xb, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r1}, 0x10) write$UHID_CREATE2(r0, 0x0, 0x8) kernel console output (not intermixed with test programs): EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.750246][T12735] lo speed is unknown, defaulting to 1000 [ 219.912412][T12743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3162'. [ 219.983108][T12743] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8194 sclass=netlink_route_socket pid=12743 comm=syz.0.3162 [ 220.144346][T12762] loop2: detected capacity change from 0 to 512 [ 220.164949][T12766] 9pnet_fd: p9_fd_create_unix (12766): problem connecting socket: ./file0: -30 [ 220.190058][T12743] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3162'. [ 220.220694][T12762] netlink: 'syz.2.3170': attribute type 3 has an invalid length. [ 220.247156][T12766] loop1: detected capacity change from 0 to 512 [ 220.309210][T12766] ext4 filesystem being mounted at /206/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.415044][T12776] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12776 comm=syz.0.3173 [ 220.512843][T12782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3176'. [ 220.563662][T12782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3176'. [ 220.635953][T12789] netlink: 'syz.2.3181': attribute type 39 has an invalid length. [ 220.676158][T12794] loop5: detected capacity change from 0 to 256 [ 220.677901][T12796] loop1: detected capacity change from 0 to 2048 [ 220.720379][T12796] EXT4-fs (loop1): cluster size (2048) smaller than block size (4096) [ 220.805741][T12803] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 220.814024][T12803] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 220.855004][T12807] 9pnet_fd: p9_fd_create_unix (12807): problem connecting socket: ./file0: -30 [ 220.873838][T12807] loop5: detected capacity change from 0 to 512 [ 220.878099][T12801] netlink: 'syz.0.3184': attribute type 3 has an invalid length. [ 220.896390][T12807] ext4 filesystem being mounted at /113/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.188271][T12819] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3193'. [ 221.241626][T12819] selinux_netlink_send: 2 callbacks suppressed [ 221.241688][T12819] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8194 sclass=netlink_route_socket pid=12819 comm=syz.6.3193 [ 221.289608][T12819] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3193'. [ 221.393818][T12835] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 221.402090][T12835] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 221.411149][T12836] FAULT_INJECTION: forcing a failure. [ 221.411149][T12836] name failslab, interval 1, probability 0, space 0, times 0 [ 221.418544][T12811] loop2: detected capacity change from 0 to 512 [ 221.424014][T12836] CPU: 1 UID: 0 PID: 12836 Comm: syz.5.3198 Not tainted syzkaller #0 PREEMPT(voluntary) [ 221.424052][T12836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 221.424072][T12836] Call Trace: [ 221.424081][T12836] [ 221.424092][T12836] __dump_stack+0x1d/0x30 [ 221.424161][T12836] dump_stack_lvl+0xe8/0x140 [ 221.424189][T12836] dump_stack+0x15/0x1b [ 221.424214][T12836] should_fail_ex+0x265/0x280 [ 221.424269][T12836] should_failslab+0x8c/0xb0 [ 221.424309][T12836] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 221.424417][T12836] ? __alloc_skb+0x101/0x320 [ 221.424461][T12836] __alloc_skb+0x101/0x320 [ 221.424561][T12836] netlink_alloc_large_skb+0xbf/0xf0 [ 221.424621][T12836] netlink_sendmsg+0x3cf/0x6b0 [ 221.424650][T12836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.424678][T12836] __sock_sendmsg+0x145/0x180 [ 221.424713][T12836] ____sys_sendmsg+0x31e/0x4e0 [ 221.424784][T12836] ___sys_sendmsg+0x17b/0x1d0 [ 221.424833][T12836] __x64_sys_sendmsg+0xd4/0x160 [ 221.424867][T12836] x64_sys_call+0x191e/0x3000 [ 221.424898][T12836] do_syscall_64+0xd2/0x200 [ 221.424971][T12836] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 221.425008][T12836] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 221.425073][T12836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.425102][T12836] RIP: 0033:0x7f795931f6c9 [ 221.425123][T12836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.425188][T12836] RSP: 002b:00007f7957d87038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.425266][T12836] RAX: ffffffffffffffda RBX: 00007f7959575fa0 RCX: 00007f795931f6c9 [ 221.425284][T12836] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 221.425301][T12836] RBP: 00007f7957d87090 R08: 0000000000000000 R09: 0000000000000000 [ 221.425318][T12836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.425335][T12836] R13: 00007f7959576038 R14: 00007f7959575fa0 R15: 00007ffc5a6f9298 [ 221.425366][T12836] [ 221.631713][T12837] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 221.642088][T12837] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 221.698345][T12844] veth4: entered promiscuous mode [ 221.703565][T12844] veth4: entered allmulticast mode [ 221.766281][T12811] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.3188: bad orphan inode 11862016 [ 221.800620][T12854] loop6: detected capacity change from 0 to 512 [ 221.829601][T12854] EXT4-fs mount: 6 callbacks suppressed [ 221.829620][T12854] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.847847][T12854] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 221.856592][T12811] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 221.874124][T12854] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.3205: corrupted inode contents [ 221.886531][T12854] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #2: comm syz.6.3205: mark_inode_dirty error [ 221.898118][T12854] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.3205: corrupted inode contents [ 221.910060][T12854] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.3205: mark_inode_dirty error [ 221.922067][T12811] ext4 filesystem being mounted at /587/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 221.983547][ T29] kauditd_printk_skb: 495 callbacks suppressed [ 221.983561][ T29] audit: type=1326 audit(1763214123.529:10083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12855 comm="syz.1.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf48b0f6c9 code=0x7ffc0000 [ 222.017191][T12857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3206'. [ 222.037647][T12857] team0: Port device team_slave_1 removed [ 222.055421][ T29] audit: type=1326 audit(1763214123.559:10084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12855 comm="syz.1.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7fcf48b0f6c9 code=0x7ffc0000 [ 222.079189][ T29] audit: type=1326 audit(1763214123.559:10085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12855 comm="syz.1.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf48b0f6c9 code=0x7ffc0000 [ 222.102854][ T29] audit: type=1326 audit(1763214123.559:10086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12855 comm="syz.1.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fcf48b0f6c9 code=0x7ffc0000 [ 222.127233][ T29] audit: type=1326 audit(1763214123.559:10087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12855 comm="syz.1.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf48b0f6c9 code=0x7ffc0000 [ 222.150857][ T29] audit: type=1326 audit(1763214123.559:10088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12855 comm="syz.1.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf48b0f6c9 code=0x7ffc0000 [ 222.174554][ T29] audit: type=1326 audit(1763214123.559:10089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12855 comm="syz.1.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf48b0f6c9 code=0x7ffc0000 [ 222.198322][ T29] audit: type=1326 audit(1763214123.559:10090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12855 comm="syz.1.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcf48b0f6c9 code=0x7ffc0000 [ 222.222028][ T29] audit: type=1326 audit(1763214123.559:10091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12855 comm="syz.1.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf48b0f6c9 code=0x7ffc0000 [ 222.245642][ T29] audit: type=1326 audit(1763214123.559:10092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12855 comm="syz.1.3206" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf48b0f6c9 code=0x7ffc0000 [ 222.328057][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 222.538012][T12881] loop2: detected capacity change from 0 to 2048 [ 222.595947][T11258] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.652729][T12881] EXT4-fs (loop2): cluster size (2048) smaller than block size (4096) [ 222.820773][T12888] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12888 comm=syz.6.3217 [ 222.879566][T12892] loop1: detected capacity change from 0 to 1024 [ 222.889508][T12892] EXT4-fs: Ignoring removed nobh option [ 222.895294][T12892] EXT4-fs: Ignoring removed bh option [ 222.985799][T12894] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3219'. [ 223.001177][T12892] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.021572][T12894] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8194 sclass=netlink_route_socket pid=12894 comm=syz.6.3219 [ 223.093472][T10060] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.129767][T12899] netlink: 'syz.0.3220': attribute type 3 has an invalid length. [ 223.159107][T12903] loop1: detected capacity change from 0 to 512 [ 223.205630][T12903] netlink: 'syz.1.3222': attribute type 3 has an invalid length. [ 223.225224][T12878] loop5: detected capacity change from 0 to 512 [ 223.302446][T12878] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.3212: bad orphan inode 11862016 [ 223.316086][T12878] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 223.329948][T12921] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12921 comm=syz.0.3229 [ 223.332066][T12922] loop6: detected capacity change from 0 to 512 [ 223.350134][T12919] FAULT_INJECTION: forcing a failure. [ 223.350134][T12919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 223.363283][T12919] CPU: 0 UID: 0 PID: 12919 Comm: syz.1.3227 Not tainted syzkaller #0 PREEMPT(voluntary) [ 223.363315][T12919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 223.363331][T12919] Call Trace: [ 223.363360][T12919] [ 223.363386][T12919] __dump_stack+0x1d/0x30 [ 223.363414][T12919] dump_stack_lvl+0xe8/0x140 [ 223.363440][T12919] dump_stack+0x15/0x1b [ 223.363461][T12919] should_fail_ex+0x265/0x280 [ 223.363531][T12919] should_fail+0xb/0x20 [ 223.363570][T12919] should_fail_usercopy+0x1a/0x20 [ 223.363595][T12919] _copy_from_user+0x1c/0xb0 [ 223.363628][T12919] copy_from_sockptr_offset+0x66/0xa0 [ 223.363659][T12919] do_ip6t_set_ctl+0x5d1/0x840 [ 223.363685][T12919] ? kstrtoull+0x111/0x140 [ 223.363751][T12919] ? __rcu_read_unlock+0x4f/0x70 [ 223.363792][T12919] nf_setsockopt+0x199/0x1b0 [ 223.363833][T12919] ipv6_setsockopt+0x11a/0x130 [ 223.363958][T12919] tcp_setsockopt+0x98/0xb0 [ 223.363984][T12919] sock_common_setsockopt+0x69/0x80 [ 223.364018][T12919] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 223.364052][T12919] __sys_setsockopt+0x184/0x200 [ 223.364225][T12919] __x64_sys_setsockopt+0x64/0x80 [ 223.364332][T12919] x64_sys_call+0x20ec/0x3000 [ 223.364368][T12919] do_syscall_64+0xd2/0x200 [ 223.364395][T12919] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 223.364431][T12919] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 223.364552][T12919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.364579][T12919] RIP: 0033:0x7fcf48b0f6c9 [ 223.364598][T12919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.364622][T12919] RSP: 002b:00007fcf4756f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 223.364646][T12919] RAX: ffffffffffffffda RBX: 00007fcf48d65fa0 RCX: 00007fcf48b0f6c9 [ 223.364681][T12919] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 223.364695][T12919] RBP: 00007fcf4756f090 R08: 0000000000000440 R09: 0000000000000000 [ 223.364711][T12919] R10: 0000200000001240 R11: 0000000000000246 R12: 0000000000000001 [ 223.364725][T12919] R13: 00007fcf48d66038 R14: 00007fcf48d65fa0 R15: 00007fff45b1d078 [ 223.364752][T12919] [ 223.369776][T12878] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 223.404872][T12922] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.555499][T12928] loop2: detected capacity change from 0 to 2048 [ 223.562068][T12922] ext4 filesystem being mounted at /101/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 223.627807][T12922] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.3225: corrupted inode contents [ 223.640384][T12922] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #2: comm syz.6.3225: mark_inode_dirty error [ 223.651940][T12922] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.3225: corrupted inode contents [ 223.653656][ T3543] loop2: p1 < > p3 p4 [ 223.671678][T12922] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.3225: mark_inode_dirty error [ 223.673879][ T3543] loop2: p3 start 458752 is beyond EOD, truncated [ 223.689337][ T3543] loop2: p4 start 268435456 is beyond EOD, truncated [ 223.700388][T12930] loop1: detected capacity change from 0 to 512 [ 223.742809][T12928] loop2: p1 < > p3 p4 [ 223.751355][T12928] loop2: p3 start 458752 is beyond EOD, truncated [ 223.757955][T12928] loop2: p4 start 268435456 is beyond EOD, truncated [ 223.765395][T12930] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 223.787827][T12930] EXT4-fs error (device loop1): ext4_get_journal_inode:5808: comm syz.1.3232: inode #1: comm syz.1.3232: iget: illegal inode # [ 223.804224][T11013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 223.829420][T12930] EXT4-fs (loop1): no journal found [ 223.858296][ T3543] udevd[3543]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 223.889901][T12940] loop5: detected capacity change from 0 to 512 [ 223.935262][T12940] netlink: 'syz.5.3235': attribute type 3 has an invalid length. [ 224.008852][T12936] lo speed is unknown, defaulting to 1000 [ 224.061877][T12943] netlink: 'syz.2.3237': attribute type 10 has an invalid length. [ 224.093577][T12943] team0: Port device dummy0 added [ 224.098258][T12954] loop5: detected capacity change from 0 to 2048 [ 224.105692][T12955] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 224.114720][T12955] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 224.128416][T12954] EXT4-fs (loop5): cluster size (2048) smaller than block size (4096) [ 224.255344][T11258] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.330290][T12965] loop1: detected capacity change from 0 to 128 [ 224.347044][T12943] __nla_validate_parse: 5 callbacks suppressed [ 224.347062][T12943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3237'. [ 224.390923][T12943] netlink: 'syz.2.3237': attribute type 21 has an invalid length. [ 224.399187][T12943] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3237'. [ 224.478998][T12943] netlink: 'syz.2.3237': attribute type 10 has an invalid length. [ 224.521974][T12967] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3244'. [ 224.536157][ T37] kworker/u8:2: attempt to access beyond end of device [ 224.536157][ T37] loop1: rw=1, sector=145, nr_sectors = 8 limit=128 [ 224.558203][T12943] team0: Port device dummy0 removed [ 224.560834][ T37] kworker/u8:2: attempt to access beyond end of device [ 224.560834][ T37] loop1: rw=1, sector=161, nr_sectors = 8 limit=128 [ 224.570275][T12943] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 224.591750][ T37] kworker/u8:2: attempt to access beyond end of device [ 224.591750][ T37] loop1: rw=1, sector=177, nr_sectors = 8 limit=128 [ 224.605738][ T37] kworker/u8:2: attempt to access beyond end of device [ 224.605738][ T37] loop1: rw=1, sector=193, nr_sectors = 8 limit=128 [ 224.623423][ T37] kworker/u8:2: attempt to access beyond end of device [ 224.623423][ T37] loop1: rw=1, sector=209, nr_sectors = 8 limit=128 [ 224.644718][ T37] kworker/u8:2: attempt to access beyond end of device [ 224.644718][ T37] loop1: rw=1, sector=225, nr_sectors = 8 limit=128 [ 224.658358][ T37] kworker/u8:2: attempt to access beyond end of device [ 224.658358][ T37] loop1: rw=1, sector=241, nr_sectors = 8 limit=128 [ 224.671817][ T37] kworker/u8:2: attempt to access beyond end of device [ 224.671817][ T37] loop1: rw=1, sector=257, nr_sectors = 8 limit=128 [ 224.685656][ T37] kworker/u8:2: attempt to access beyond end of device [ 224.685656][ T37] loop1: rw=1, sector=273, nr_sectors = 8 limit=128 [ 224.723384][ T37] kworker/u8:2: attempt to access beyond end of device [ 224.723384][ T37] loop1: rw=1, sector=289, nr_sectors = 8 limit=128 [ 224.728450][T12978] loop6: detected capacity change from 0 to 256 [ 224.851004][T12987] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 224.860477][T12987] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 224.893456][T12990] hsr0: entered promiscuous mode [ 224.899870][T12990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3253'. [ 224.909105][T12990] hsr_slave_0: left promiscuous mode [ 224.918536][T12990] hsr_slave_1: left promiscuous mode [ 224.928120][T12990] hsr0 (unregistering): left promiscuous mode [ 224.976756][T12999] loop5: detected capacity change from 0 to 512 [ 225.008320][T12999] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 225.009478][T12984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3253'. [ 225.022985][T12999] ext4 filesystem being mounted at /123/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 225.082746][T12999] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.3259: Failed to acquire dquot type 0 [ 225.110529][T12999] siw: device registration error -23 [ 225.128467][T11013] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 3: comm syz-executor: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 225.158738][T13013] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3262'. [ 225.168151][T13013] IPVS: Error connecting to the multicast addr [ 225.178516][T11013] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 12: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 225.189313][T13016] loop6: detected capacity change from 0 to 256 [ 225.239158][T13020] loop2: detected capacity change from 0 to 128 [ 225.240944][T11013] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 13: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 225.298161][T11013] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 14: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 225.333793][T11013] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 15: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=32773, rec_len=0, size=2048 fake=0 [ 225.359328][T11013] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 16: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 225.366027][T13031] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13031 comm=syz.1.3272 [ 225.393397][T11013] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 17: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 225.414890][T11013] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 225.429697][T11013] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 19: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 225.454772][T13034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3273'. [ 225.463792][T13034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3273'. [ 225.482317][T13034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3273'. [ 225.501772][T13034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3273'. [ 225.520779][T13041] loop1: detected capacity change from 0 to 2048 [ 225.561144][T13041] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 225.624788][T10060] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.706444][ T58] Bluetooth: hci0: Frame reassembly failed (-84) [ 225.872378][T13056] 9pnet_fd: Insufficient options for proto=fd [ 226.087767][T13058] 9pnet_fd: p9_fd_create_unix (13058): problem connecting socket: ./file0: -30 [ 226.101376][T13058] loop2: detected capacity change from 0 to 512 [ 226.137804][T13058] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.150865][T13058] ext4 filesystem being mounted at /595/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.190697][T13062] loop6: detected capacity change from 0 to 2048 [ 226.212174][T13062] EXT4-fs (loop6): cluster size (2048) smaller than block size (4096) [ 226.221214][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.336344][T13070] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13070 comm=syz.6.3284 [ 226.381026][T13073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8194 sclass=netlink_route_socket pid=13073 comm=syz.6.3285 [ 226.459108][T13077] loop2: detected capacity change from 0 to 1024 [ 226.470735][T13077] EXT4-fs: Ignoring removed orlov option [ 226.479697][T13078] loop6: detected capacity change from 0 to 512 [ 226.508175][T13078] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.520932][T13078] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 226.525433][T13077] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 226.545635][T13078] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.3286: corrupted inode contents [ 226.557675][T13078] EXT4-fs error (device loop6): ext4_dirty_inode:6517: inode #2: comm syz.6.3286: mark_inode_dirty error [ 226.569552][T13078] EXT4-fs error (device loop6): ext4_do_update_inode:5632: inode #2: comm syz.6.3286: corrupted inode contents [ 226.581620][T13078] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.3286: mark_inode_dirty error [ 226.597462][T13068] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 227.207055][ T3318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.234698][ T29] kauditd_printk_skb: 322 callbacks suppressed [ 227.234715][ T29] audit: type=1400 audit(1763214128.779:10413): avc: denied { listen } for pid=13095 comm="syz.2.3290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 227.260601][ T29] audit: type=1400 audit(1763214128.779:10414): avc: denied { read } for pid=13095 comm="syz.2.3290" path="socket:[35493]" dev="sockfs" ino=35493 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 227.303757][T11258] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.348997][T13098] bond1: option all_slaves_active: invalid value (5) [ 227.357370][T13098] bond1 (unregistering): Released all slaves [ 227.477883][ T29] audit: type=1326 audit(1763214129.019:10415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13105 comm="syz.6.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4344f6c9 code=0x7ffc0000 [ 227.508907][T13106] loop6: detected capacity change from 0 to 512 [ 227.540064][ T29] audit: type=1326 audit(1763214129.039:10416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13105 comm="syz.6.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbf4344f6c9 code=0x7ffc0000 [ 227.564270][ T29] audit: type=1326 audit(1763214129.039:10417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13105 comm="syz.6.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4344f6c9 code=0x7ffc0000 [ 227.588332][ T29] audit: type=1326 audit(1763214129.039:10418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13105 comm="syz.6.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fbf4344f6c9 code=0x7ffc0000 [ 227.611956][ T29] audit: type=1326 audit(1763214129.039:10419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13105 comm="syz.6.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4344f6c9 code=0x7ffc0000 [ 227.635742][ T29] audit: type=1326 audit(1763214129.039:10420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13105 comm="syz.6.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf4344f6c9 code=0x7ffc0000 [ 227.659375][ T29] audit: type=1326 audit(1763214129.049:10421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13105 comm="syz.6.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf4344f6c9 code=0x7ffc0000 [ 227.682973][ T29] audit: type=1326 audit(1763214129.049:10422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13105 comm="syz.6.3294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf4344f6c9 code=0x7ffc0000 [ 227.716680][ T3551] Bluetooth: hci0: command 0x1003 tx timeout [ 227.729470][T13109] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13109 comm=syz.6.3295 [ 227.752495][ T3532] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 227.799893][T13111] netlink: 'syz.0.3296': attribute type 1 has an invalid length. [ 228.064515][T13129] loop6: detected capacity change from 0 to 512 [ 228.065050][T13125] loop1: detected capacity change from 0 to 512 [ 228.102048][T13129] EXT4-fs: Ignoring removed oldalloc option [ 228.155089][T13129] EXT4-fs: Mount option(s) incompatible with ext2 [ 228.298500][ T58] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.308910][ T58] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.486926][T13147] bridge0: entered promiscuous mode [ 228.508844][T13150] 9pnet_fd: Insufficient options for proto=fd [ 228.549351][ T58] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.559756][ T58] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.747172][ T58] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 228.757523][ T58] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.953159][T13141] lo speed is unknown, defaulting to 1000 [ 229.005583][ T58] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 229.016033][ T58] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.099497][T13130] lo speed is unknown, defaulting to 1000 [ 229.132625][T13153] 9pnet_fd: p9_fd_create_unix (13153): problem connecting socket: ./file0: -30 [ 229.193829][T13155] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13155 comm=syz.1.3309 [ 229.210732][T13153] loop6: detected capacity change from 0 to 512 [ 229.260997][T13153] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.277309][T13153] ext4 filesystem being mounted at /122/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.325910][ T58] bridge_slave_1: left allmulticast mode [ 229.331602][ T58] bridge_slave_1: left promiscuous mode [ 229.337361][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.344574][T13162] loop1: detected capacity change from 0 to 2048 [ 229.364816][ T58] bridge_slave_0: left allmulticast mode [ 229.370560][ T58] bridge_slave_0: left promiscuous mode [ 229.376487][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.503295][ T58] bridge0 (unregistering): left allmulticast mode [ 229.595619][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.607065][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.617443][ T58] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 229.626919][ T58] bond0 (unregistering): Released all slaves [ 229.636412][ T58] bond1 (unregistering): Released all slaves [ 229.645688][ T58] bond2 (unregistering): Released all slaves [ 229.655958][ T58] bond3 (unregistering): Released all slaves [ 229.675300][ T36] syz0: Port: 1 Link DOWN [ 229.707766][T13173] veth2: entered promiscuous mode [ 229.712821][T13173] veth2: entered allmulticast mode [ 229.723445][T11258] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.851107][ T58] hsr_slave_0: left promiscuous mode [ 229.863136][ T58] hsr_slave_1: left promiscuous mode [ 229.874368][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 229.881794][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 229.906305][ T58] veth1_macvtap: left promiscuous mode [ 229.911964][ T58] veth0_macvtap: left promiscuous mode [ 229.920803][ T58] veth1_vlan: left promiscuous mode [ 229.926318][T13181] loop6: detected capacity change from 0 to 2048 [ 229.929511][ T58] veth0_vlan: left promiscuous mode [ 229.950505][T13181] EXT4-fs (loop6): cluster size (2048) smaller than block size (4096) [ 230.089664][ T58] team0 (unregistering): Port device team_slave_0 removed [ 230.104166][ T37] smc: removing ib device syz0 [ 230.140524][T13190] __nla_validate_parse: 9 callbacks suppressed [ 230.140543][T13190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3321'. [ 230.156464][T13190] hsr_slave_0: left promiscuous mode [ 230.162300][T13190] hsr_slave_1: left promiscuous mode [ 230.172593][T13183] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 230.180843][T13183] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 230.189514][T13130] chnl_net:caif_netlink_parms(): no params data found [ 230.327053][T13130] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.334292][T13130] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.392793][T13130] bridge_slave_0: entered allmulticast mode [ 230.417331][T13130] bridge_slave_0: entered promiscuous mode [ 230.435654][T13130] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.442744][T13130] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.454019][T13207] xt_CT: You must specify a L4 protocol and not use inversions on it [ 230.465223][T13130] bridge_slave_1: entered allmulticast mode [ 230.502554][T13130] bridge_slave_1: entered promiscuous mode [ 230.561405][T13213] loop6: detected capacity change from 0 to 2048 [ 230.574584][T13130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.606804][T13130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.617863][T13213] EXT4-fs (loop6): cluster size (2048) smaller than block size (4096) [ 230.620980][T13204] lo speed is unknown, defaulting to 1000 [ 230.675409][T13215] FAULT_INJECTION: forcing a failure. [ 230.675409][T13215] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.688618][T13215] CPU: 0 UID: 0 PID: 13215 Comm: syz.0.3330 Not tainted syzkaller #0 PREEMPT(voluntary) [ 230.688711][T13215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 230.688724][T13215] Call Trace: [ 230.688731][T13215] [ 230.688738][T13215] __dump_stack+0x1d/0x30 [ 230.688762][T13215] dump_stack_lvl+0xe8/0x140 [ 230.688823][T13215] dump_stack+0x15/0x1b [ 230.688889][T13215] should_fail_ex+0x265/0x280 [ 230.688924][T13215] should_fail+0xb/0x20 [ 230.689038][T13215] should_fail_usercopy+0x1a/0x20 [ 230.689065][T13215] _copy_from_user+0x1c/0xb0 [ 230.689098][T13215] __se_sys_mount+0x10d/0x2e0 [ 230.689125][T13215] ? fput+0x8f/0xc0 [ 230.689147][T13215] ? ksys_write+0x192/0x1a0 [ 230.689234][T13215] __x64_sys_mount+0x67/0x80 [ 230.689267][T13215] x64_sys_call+0x2b51/0x3000 [ 230.689374][T13215] do_syscall_64+0xd2/0x200 [ 230.689447][T13215] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 230.689492][T13215] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 230.689536][T13215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.689558][T13215] RIP: 0033:0x7eff0924f6c9 [ 230.689636][T13215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.689661][T13215] RSP: 002b:00007eff07caf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 230.689688][T13215] RAX: ffffffffffffffda RBX: 00007eff094a5fa0 RCX: 00007eff0924f6c9 [ 230.689703][T13215] RDX: 0000200000000040 RSI: 0000200000000300 RDI: 0000000000000000 [ 230.689715][T13215] RBP: 00007eff07caf090 R08: 0000200000000600 R09: 0000000000000000 [ 230.689726][T13215] R10: 0000000000200080 R11: 0000000000000246 R12: 0000000000000001 [ 230.689798][T13215] R13: 00007eff094a6038 R14: 00007eff094a5fa0 R15: 00007fff49c525e8 [ 230.689822][T13215] [ 230.922826][ T58] ------------[ cut here ]------------ [ 230.927842][T13130] team0: Port device team_slave_0 added [ 230.928359][ T58] WARNING: CPU: 1 PID: 58 at net/xfrm/xfrm_state.c:3306 xfrm_state_fini+0x179/0x1f0 [ 230.943356][ T58] Modules linked in: [ 230.947273][ T58] CPU: 1 UID: 0 PID: 58 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(voluntary) [ 230.947754][T13130] team0: Port device team_slave_1 added [ 230.957034][ T58] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 230.972701][ T58] Workqueue: netns cleanup_net [ 230.977575][ T58] RIP: 0010:xfrm_state_fini+0x179/0x1f0 [ 230.983199][ T58] Code: 48 8d bb 70 0e 00 00 e8 15 36 b7 fc 48 8b bb 70 0e 00 00 e8 19 e5 c3 fc 5b 41 5e 41 5f 5d e9 7e 6f b5 00 cc e8 b8 dc 9b fc 90 <0f> 0b 90 e9 d9 fe ff ff e8 aa dc 9b fc 90 0f 0b 90 4c 89 f7 e8 de [ 231.002965][ T58] RSP: 0018:ffffc900001cbc60 EFLAGS: 00010293 [ 231.009127][ T58] RAX: ffffffff84bb6de8 RBX: ffff88810b610000 RCX: ffff8881015f9080 [ 231.017207][ T58] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff88810b610e40 [ 231.025274][ T58] RBP: ffffffff86c910c0 R08: 0001ffff8684810f R09: 0000000000000000 [ 231.033333][ T58] R10: ffffc900001cbbe8 R11: 0001c900001cbbe8 R12: ffffffff86c910e0 [ 231.041325][ T58] R13: ffff88810b610028 R14: ffff88810b610e40 R15: ffff88810b610000 [ 231.049336][ T58] FS: 0000000000000000(0000) GS:ffff8882aef11000(0000) knlGS:0000000000000000 [ 231.058307][ T58] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 231.064978][ T58] CR2: 00007ffe05c14c6c CR3: 0000000006834000 CR4: 00000000003506f0 [ 231.072998][ T58] Call Trace: [ 231.076303][ T58] [ 231.079256][ T58] xfrm_net_exit+0x2d/0x60 [ 231.083759][ T58] ops_undo_list+0x27b/0x410 [ 231.088420][ T58] cleanup_net+0x2f4/0x4f0 [ 231.092993][ T58] process_scheduled_works+0x4ce/0x9d0 [ 231.098510][ T58] worker_thread+0x582/0x770 [ 231.103205][ T58] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 231.109104][ T58] kthread+0x489/0x510 [ 231.113265][ T58] ? finish_task_switch+0xad/0x2b0 [ 231.118632][ T58] ? __pfx_worker_thread+0x10/0x10 [ 231.123947][ T58] ? __pfx_kthread+0x10/0x10 [ 231.128645][ T58] ret_from_fork+0x122/0x1b0 [ 231.133342][ T58] ? __pfx_kthread+0x10/0x10 [ 231.138043][ T58] ret_from_fork_asm+0x1a/0x30 [ 231.143056][ T58] [ 231.146379][ T58] ---[ end trace 0000000000000000 ]--- [ 231.152909][ T58] ------------[ cut here ]------------ [ 231.158411][ T58] WARNING: CPU: 1 PID: 58 at net/xfrm/xfrm_state.c:3313 xfrm_state_fini+0x1b9/0x1f0 [ 231.167874][ T58] Modules linked in: [ 231.171800][ T58] CPU: 1 UID: 0 PID: 58 Comm: kworker/u8:4 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 231.183153][ T58] Tainted: [W]=WARN [ 231.187008][ T58] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 231.197119][ T58] Workqueue: netns cleanup_net [ 231.201990][ T58] RIP: 0010:xfrm_state_fini+0x1b9/0x1f0 [ 231.207613][ T58] Code: 35 b7 fc 4d 8b 3e e9 06 ff ff ff e8 91 dc 9b fc 90 0f 0b 90 4c 89 f7 e8 c5 35 b7 fc 4d 8b 3e e9 24 ff ff ff e8 78 dc 9b fc 90 <0f> 0b 90 4c 89 f7 e8 ac 35 b7 fc 4d 8b 3e e9 42 ff ff ff e8 5f dc [ 231.227269][ T58] RSP: 0018:ffffc900001cbc60 EFLAGS: 00010293 [ 231.233449][ T58] RAX: ffffffff84bb6e28 RBX: ffff88810b610000 RCX: ffff8881015f9080 [ 231.241445][ T58] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881045bde40 [ 231.249496][ T58] RBP: 0000000000000040 R08: 000188810b610e5f R09: 0000000000000000 [ 231.257694][ T58] R10: ffff8881045bdec0 R11: 00018881045bdebf R12: ffffffff86c910e0 [ 231.265704][ T58] R13: ffff88810b610028 R14: ffff88810b610e58 R15: ffff8881045bde40 [ 231.273829][ T58] FS: 0000000000000000(0000) GS:ffff8882aef11000(0000) knlGS:0000000000000000 [ 231.282797][ T58] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 231.289449][ T58] CR2: 00007ffe05c14c6c CR3: 0000000006834000 CR4: 00000000003506f0 [ 231.297482][ T58] Call Trace: [ 231.300900][ T58] [ 231.303924][ T58] xfrm_net_exit+0x2d/0x60 [ 231.308457][ T58] ops_undo_list+0x27b/0x410 [ 231.313112][ T58] cleanup_net+0x2f4/0x4f0 [ 231.317686][ T58] process_scheduled_works+0x4ce/0x9d0 [ 231.323260][ T58] worker_thread+0x582/0x770 [ 231.327920][ T58] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 231.333804][ T58] kthread+0x489/0x510 [ 231.337896][ T58] ? finish_task_switch+0xad/0x2b0 [ 231.343071][ T58] ? __pfx_worker_thread+0x10/0x10 [ 231.348219][ T58] ? __pfx_kthread+0x10/0x10 [ 231.352910][ T58] ret_from_fork+0x122/0x1b0 [ 231.357596][ T58] ? __pfx_kthread+0x10/0x10 [ 231.362238][ T58] ret_from_fork_asm+0x1a/0x30 [ 231.367080][ T58] [ 231.370151][ T58] ---[ end trace 0000000000000000 ]--- [ 231.376354][ T58] ------------[ cut here ]------------ [ 231.381829][ T58] WARNING: CPU: 1 PID: 58 at net/xfrm/xfrm_state.c:3315 xfrm_state_fini+0x1d2/0x1f0 [ 231.391365][ T58] Modules linked in: [ 231.395471][ T58] CPU: 1 UID: 0 PID: 58 Comm: kworker/u8:4 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 231.406974][ T58] Tainted: [W]=WARN [ 231.410792][ T58] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 231.420897][ T58] Workqueue: netns cleanup_net [ 231.425722][ T58] RIP: 0010:xfrm_state_fini+0x1d2/0x1f0 [ 231.431315][ T58] Code: 35 b7 fc 4d 8b 3e e9 24 ff ff ff e8 78 dc 9b fc 90 0f 0b 90 4c 89 f7 e8 ac 35 b7 fc 4d 8b 3e e9 42 ff ff ff e8 5f dc 9b fc 90 <0f> 0b 90 4c 89 f7 e8 93 35 b7 fc 4d 8b 3e e9 60 ff ff ff 66 66 2e [ 231.451026][ T58] RSP: 0018:ffffc900001cbc60 EFLAGS: 00010293 [ 231.457199][ T58] RAX: ffffffff84bb6e41 RBX: ffff88810b610000 RCX: ffff8881015f9080 [ 231.465205][ T58] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881045bde00 [ 231.473215][ T58] RBP: 0000000000000040 R08: 000188810b610e57 R09: 0000000000000000 [ 231.481504][ T58] R10: 0001888120c4ffc0 R11: 00018881045bde7f R12: ffffffff86c910e0 [ 231.489583][ T58] R13: ffff88810b610028 R14: ffff88810b610e50 R15: ffff8881045bde00 [ 231.497949][ T58] FS: 0000000000000000(0000) GS:ffff8882aef11000(0000) knlGS:0000000000000000 [ 231.506971][ T58] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 231.513925][ T58] CR2: 00007ffe05c14c6c CR3: 0000000006834000 CR4: 00000000003506f0 [ 231.521956][ T58] Call Trace: [ 231.525729][ T58] [ 231.528735][ T58] xfrm_net_exit+0x2d/0x60 [ 231.533316][ T58] ops_undo_list+0x27b/0x410 [ 231.538019][ T58] cleanup_net+0x2f4/0x4f0 [ 231.542546][ T58] process_scheduled_works+0x4ce/0x9d0 [ 231.548129][ T58] worker_thread+0x582/0x770 [ 231.552819][ T58] ? _raw_spin_unlock_irqrestore+0x2b/0x60 [ 231.558724][ T58] kthread+0x489/0x510 [ 231.562812][ T58] ? finish_task_switch+0xad/0x2b0 [ 231.568103][ T58] ? __pfx_worker_thread+0x10/0x10 [ 231.573275][ T58] ? __pfx_kthread+0x10/0x10 [ 231.577958][ T58] ret_from_fork+0x122/0x1b0 [ 231.582579][ T58] ? __pfx_kthread+0x10/0x10 [ 231.587329][ T58] ret_from_fork_asm+0x1a/0x30 [ 231.592416][ T58] [ 231.595489][ T58] ---[ end trace 0000000000000000 ]--- [ 231.604216][T11013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.638623][T13130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.645682][T13130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.671924][T13130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.684061][T13130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.691120][T13130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.717249][T13130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.774758][T13241] loop5: detected capacity change from 0 to 512 [ 231.793044][T13241] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.805656][T13241] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 231.809587][T13249] FAULT_INJECTION: forcing a failure. [ 231.809587][T13249] name failslab, interval 1, probability 0, space 0, times 0 [ 231.828749][T13249] CPU: 0 UID: 0 PID: 13249 Comm: syz.6.3342 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 231.828795][T13249] Tainted: [W]=WARN [ 231.828808][T13249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 231.828828][T13249] Call Trace: [ 231.828837][T13249] [ 231.828851][T13249] __dump_stack+0x1d/0x30 [ 231.828891][T13249] dump_stack_lvl+0xe8/0x140 [ 231.828946][T13249] dump_stack+0x15/0x1b [ 231.828969][T13249] should_fail_ex+0x265/0x280 [ 231.829087][T13249] should_failslab+0x8c/0xb0 [ 231.829124][T13249] kmem_cache_alloc_noprof+0x50/0x480 [ 231.829195][T13249] ? security_file_alloc+0x32/0x100 [ 231.829311][T13249] security_file_alloc+0x32/0x100 [ 231.829346][T13249] init_file+0x5c/0x1d0 [ 231.829424][T13249] alloc_empty_file+0x8b/0x200 [ 231.829463][T13249] path_openat+0x68/0x2170 [ 231.829510][T13249] ? _parse_integer_limit+0x170/0x190 [ 231.829548][T13249] ? kstrtoull+0x111/0x140 [ 231.829614][T13249] ? kstrtouint+0x76/0xc0 [ 231.829690][T13249] do_filp_open+0x109/0x230 [ 231.829733][T13249] do_sys_openat2+0xa6/0x110 [ 231.829835][T13249] __x64_sys_openat+0xf2/0x120 [ 231.829861][T13249] x64_sys_call+0x2eab/0x3000 [ 231.829895][T13249] do_syscall_64+0xd2/0x200 [ 231.829922][T13249] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 231.829957][T13249] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 231.830137][T13249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.830221][T13249] RIP: 0033:0x7fbf4344f6c9 [ 231.830245][T13249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.830326][T13249] RSP: 002b:00007fbf41eaf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 231.830360][T13249] RAX: ffffffffffffffda RBX: 00007fbf436a5fa0 RCX: 00007fbf4344f6c9 [ 231.830376][T13249] RDX: 0000000000511a01 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 231.830393][T13249] RBP: 00007fbf41eaf090 R08: 0000000000000000 R09: 0000000000000000 [ 231.830408][T13249] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000001 [ 231.830428][T13249] R13: 00007fbf436a6038 R14: 00007fbf436a5fa0 R15: 00007ffe05c159c8 [ 231.830495][T13249] [ 231.831984][T13241] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.3338: corrupted inode contents [ 231.889438][T13254] loop6: detected capacity change from 0 to 512 [ 231.907952][T13241] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #2: comm syz.5.3338: mark_inode_dirty error [ 231.945135][T13254] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.953487][T13241] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #2: comm syz.5.3338: corrupted inode contents [ 231.965377][T13130] hsr_slave_0: entered promiscuous mode [ 231.974573][T13241] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.3338: mark_inode_dirty error [ 231.981637][T13254] ext4 filesystem being mounted at /139/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 232.000299][T13130] hsr_slave_1: entered promiscuous mode [ 232.011273][T13254] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.3343: Failed to acquire dquot type 0 [ 232.020161][T13130] debugfs: 'hsr0' already exists in 'hsr' [ 232.060651][T11258] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 3: comm syz-executor: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 232.065283][T13130] Cannot create hsr debugfs directory [ 232.077431][T11258] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 12: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 232.218630][T11258] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 13: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 232.241155][T11258] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 14: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 232.283146][T11258] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 15: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=32773, rec_len=0, size=2048 fake=0 [ 232.307450][T13247] veth4: entered promiscuous mode [ 232.312542][T13247] veth4: entered allmulticast mode [ 232.313618][T11258] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 16: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 232.339520][T11258] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 17: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 232.360301][T11258] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 232.375016][T11258] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 19: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 232.461085][T13267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3347'. [ 232.507482][T13272] FAULT_INJECTION: forcing a failure. [ 232.507482][T13272] name failslab, interval 1, probability 0, space 0, times 0 [ 232.520568][T13272] CPU: 0 UID: 0 PID: 13272 Comm: syz.0.3349 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 232.520600][T13272] Tainted: [W]=WARN [ 232.520608][T13272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 232.520624][T13272] Call Trace: [ 232.520704][T13272] [ 232.520713][T13272] __dump_stack+0x1d/0x30 [ 232.520740][T13272] dump_stack_lvl+0xe8/0x140 [ 232.520766][T13272] dump_stack+0x15/0x1b [ 232.520782][T13272] should_fail_ex+0x265/0x280 [ 232.520822][T13272] should_failslab+0x8c/0xb0 [ 232.520881][T13272] __kmalloc_noprof+0xa5/0x570 [ 232.520961][T13272] ? bpf_test_init+0x86/0x140 [ 232.521053][T13272] bpf_test_init+0x86/0x140 [ 232.521089][T13272] bpf_prog_test_run_skb+0x161/0xbf0 [ 232.521124][T13272] ? __rcu_read_unlock+0x4f/0x70 [ 232.521242][T13272] ? __fget_files+0x184/0x1c0 [ 232.521279][T13272] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 232.521316][T13272] bpf_prog_test_run+0x22a/0x390 [ 232.521402][T13272] __sys_bpf+0x4c0/0x7c0 [ 232.521433][T13272] __x64_sys_bpf+0x41/0x50 [ 232.521464][T13272] x64_sys_call+0x2aee/0x3000 [ 232.521514][T13272] do_syscall_64+0xd2/0x200 [ 232.521534][T13272] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 232.521630][T13272] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 232.521667][T13272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.521693][T13272] RIP: 0033:0x7eff0924f6c9 [ 232.521743][T13272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.521761][T13272] RSP: 002b:00007eff07caf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 232.521779][T13272] RAX: ffffffffffffffda RBX: 00007eff094a5fa0 RCX: 00007eff0924f6c9 [ 232.521791][T13272] RDX: 000000000000001e RSI: 0000200000000080 RDI: 000000000000000a [ 232.521805][T13272] RBP: 00007eff07caf090 R08: 0000000000000000 R09: 0000000000000000 [ 232.521820][T13272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 232.521835][T13272] R13: 00007eff094a6038 R14: 00007eff094a5fa0 R15: 00007fff49c525e8 [ 232.521919][T13272] [ 232.755984][T11013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.766859][ T29] kauditd_printk_skb: 82 callbacks suppressed [ 232.766917][ T29] audit: type=1400 audit(1763214134.309:10503): avc: denied { read } for pid=13269 comm="syz.1.3348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 232.793534][T13270] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3348'. [ 232.809834][T13270] loop1: detected capacity change from 0 to 512 [ 232.817070][ T29] audit: type=1400 audit(1763214134.339:10504): avc: denied { getopt } for pid=13269 comm="syz.1.3348" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 232.840229][T13270] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 232.850387][T13270] EXT4-fs (loop1): invalid journal inode [ 232.913986][T13277] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3350'. [ 232.923104][ T29] audit: type=1326 audit(1763214134.449:10505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.5.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795931f6c9 code=0x7ffc0000 [ 232.946771][ T29] audit: type=1326 audit(1763214134.449:10506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.5.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f795931f6c9 code=0x7ffc0000 [ 232.970356][ T29] audit: type=1326 audit(1763214134.449:10507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.5.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795931f6c9 code=0x7ffc0000 [ 232.994070][ T29] audit: type=1326 audit(1763214134.449:10508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.5.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f795931f6c9 code=0x7ffc0000 [ 232.996762][T13130] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 233.017813][ T29] audit: type=1326 audit(1763214134.449:10509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.5.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795931f6c9 code=0x7ffc0000 [ 233.047890][ T29] audit: type=1326 audit(1763214134.459:10510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.5.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f795931f6c9 code=0x7ffc0000 [ 233.071415][ T29] audit: type=1326 audit(1763214134.459:10511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.5.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795931f6c9 code=0x7ffc0000 [ 233.095047][ T29] audit: type=1326 audit(1763214134.459:10512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13276 comm="syz.5.3350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f795931f6c9 code=0x7ffc0000 [ 233.128420][T13130] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 233.146404][T13277] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3350'. [ 233.153222][T13130] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 233.164891][T13282] 9pnet_fd: p9_fd_create_unix (13282): problem connecting socket: ./file0: -30 [ 233.176417][T13130] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 233.178217][T13282] loop1: detected capacity change from 0 to 512 [ 233.228950][T13282] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.253017][T13282] ext4 filesystem being mounted at /252/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.287189][T13130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.299703][T13130] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.310223][T13295] xt_hashlimit: max too large, truncated to 1048576 [ 233.321723][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.328858][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.367984][T10060] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.379183][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.386310][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.404174][T13130] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 233.414795][T13130] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.435814][T13305] loop1: detected capacity change from 0 to 512 [ 233.485716][T13305] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.504268][T13305] ext4 filesystem being mounted at /253/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 233.540048][T13308] veth6: entered promiscuous mode [ 233.545236][T13308] veth6: entered allmulticast mode [ 233.555170][T13305] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.3359: Failed to acquire dquot type 0 [ 233.574456][T13305] siw: device registration error -23 [ 233.592192][T10060] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz-executor: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 233.625003][T13130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 233.646859][T10060] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 12: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 233.683713][T10060] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 233.731529][T10060] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 14: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 233.760269][T13324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3363'. [ 233.769825][T10060] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 15: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=32773, rec_len=0, size=2048 fake=0 [ 233.800801][T10060] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 16: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 233.822677][T13324] team0: Port device team_slave_1 removed [ 233.829601][T10060] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 17: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 233.857696][T13130] veth0_vlan: entered promiscuous mode [ 233.866261][T13130] veth1_vlan: entered promiscuous mode [ 233.885045][T13130] veth0_macvtap: entered promiscuous mode [ 233.891265][T10060] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 233.910421][T13130] veth1_macvtap: entered promiscuous mode [ 233.931046][T10060] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 19: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 233.958058][T13130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.969685][T13130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.981088][ T52] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.007798][ T52] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.036577][ T52] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.053478][T13332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3364'. [ 234.072704][ T52] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.114699][T13332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3364'. [ 234.189690][T13338] loop2: detected capacity change from 0 to 512 [ 234.207612][T13338] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.220481][T13338] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 234.238917][T13338] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.3301: corrupted inode contents [ 234.262772][T13338] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.3301: mark_inode_dirty error [ 234.284768][T13338] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.3301: corrupted inode contents [ 234.298289][T13338] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.3301: mark_inode_dirty error [ 234.365569][T13349] loop5: detected capacity change from 0 to 128 [ 234.382428][T13345] netlink: 'syz.0.3367': attribute type 4 has an invalid length. [ 234.390310][T13345] netlink: 152 bytes leftover after parsing attributes in process `syz.0.3367'. [ 234.423490][T13349] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 234.448383][T13345] .`: renamed from bond0 (while UP) [ 234.463539][T13349] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.609705][T11013] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 234.662700][T13356] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3370'. [ 234.714100][T13357] IPv6: NLM_F_CREATE should be specified when creating new route [ 234.746033][T13357] siw: device registration error -23 [ 235.000207][T13130] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.564277][T13406] __nla_validate_parse: 1 callbacks suppressed [ 235.564305][T13406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3391'. [ 235.579420][T13406] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3391'. [ 235.654524][T13406] geneve2: entered promiscuous mode [ 235.659822][T13406] geneve2: entered allmulticast mode [ 235.741554][T13409] 9pnet_fd: p9_fd_create_unix (13409): problem connecting socket: ./file0: -30 [ 235.916268][T13411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3393'. [ 235.925221][T13411] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3393'. [ 236.163591][T13427] loop2: detected capacity change from 0 to 1024 [ 236.172481][T13427] EXT4-fs: Ignoring removed orlov option [ 236.228476][T13419] loop5: detected capacity change from 0 to 512 [ 236.237978][T13427] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 236.284206][T13419] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.3397: bad orphan inode 11862016 [ 236.327560][T13419] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 236.343120][T13419] ext4 filesystem being mounted at /144/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.363734][T13421] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 236.416771][T13437] program syz.0.3402 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 236.549975][T11013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 236.640256][T13440] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3403'. [ 236.999887][T13130] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 237.282038][T13453] random: crng reseeded on system resumption [ 237.424898][T13460] FAULT_INJECTION: forcing a failure. [ 237.424898][T13460] name failslab, interval 1, probability 0, space 0, times 0 [ 237.437608][T13460] CPU: 0 UID: 0 PID: 13460 Comm: syz.0.3410 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 237.437649][T13460] Tainted: [W]=WARN [ 237.437673][T13460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 237.437685][T13460] Call Trace: [ 237.437692][T13460] [ 237.437702][T13460] __dump_stack+0x1d/0x30 [ 237.437726][T13460] dump_stack_lvl+0xe8/0x140 [ 237.437758][T13460] dump_stack+0x15/0x1b [ 237.437777][T13460] should_fail_ex+0x265/0x280 [ 237.437820][T13460] should_failslab+0x8c/0xb0 [ 237.437920][T13460] kmem_cache_alloc_noprof+0x50/0x480 [ 237.437947][T13460] ? getname_flags+0x80/0x3b0 [ 237.438052][T13460] getname_flags+0x80/0x3b0 [ 237.438204][T13460] do_sys_openat2+0x60/0x110 [ 237.438230][T13460] __x64_sys_openat+0xf2/0x120 [ 237.438251][T13460] x64_sys_call+0x2eab/0x3000 [ 237.438273][T13460] do_syscall_64+0xd2/0x200 [ 237.438303][T13460] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 237.438358][T13460] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 237.438394][T13460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.438419][T13460] RIP: 0033:0x7eff0924f6c9 [ 237.438499][T13460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.438518][T13460] RSP: 002b:00007eff07caf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 237.438536][T13460] RAX: ffffffffffffffda RBX: 00007eff094a5fa0 RCX: 00007eff0924f6c9 [ 237.438548][T13460] RDX: 000000000000403f RSI: 0000200000005c40 RDI: ffffffffffffff9c [ 237.438606][T13460] RBP: 00007eff07caf090 R08: 0000000000000000 R09: 0000000000000000 [ 237.438618][T13460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.438631][T13460] R13: 00007eff094a6038 R14: 00007eff094a5fa0 R15: 00007fff49c525e8 [ 237.438657][T13460] [ 237.704437][T13466] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3413'. [ 237.713379][T13466] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3413'. [ 238.154997][T13476] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3417'. [ 238.252254][T13480] loop5: detected capacity change from 0 to 2048 [ 238.273496][ T29] kauditd_printk_skb: 256 callbacks suppressed [ 238.273515][ T29] audit: type=1400 audit(1763214139.819:10767): avc: denied { ioctl } for pid=13478 comm="syz.2.3418" path="socket:[36370]" dev="sockfs" ino=36370 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 238.277997][T13479] xt_hashlimit: max too large, truncated to 1048576 [ 238.280007][ T29] audit: type=1400 audit(1763214139.819:10768): avc: denied { bind } for pid=13478 comm="syz.2.3418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 238.341895][T13480] EXT4-fs (loop5): cluster size (2048) smaller than block size (4096) [ 238.772476][T13491] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3422'. [ 238.781442][T13491] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3422'. [ 238.834867][T13491] geneve2: entered promiscuous mode [ 238.840097][T13491] geneve2: entered allmulticast mode [ 238.970658][T13497] xt_CT: You must specify a L4 protocol and not use inversions on it [ 239.202290][T13505] 9pnet_fd: p9_fd_create_unix (13505): problem connecting socket: ./file0: -30 [ 239.245605][T13505] loop5: detected capacity change from 0 to 512 [ 239.303657][T13505] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.352956][T13505] ext4 filesystem being mounted at /161/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.486980][T11013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.506794][T13517] geneve2: entered promiscuous mode [ 239.512181][T13517] geneve2: entered allmulticast mode [ 239.604372][T13523] xt_CT: You must specify a L4 protocol and not use inversions on it [ 239.653403][T11258] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.701078][ T29] audit: type=1400 audit(1763214141.239:10769): avc: granted { setsecparam } for pid=13526 comm="syz.2.3439" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 239.784593][T13537] loop2: detected capacity change from 0 to 512 [ 239.820172][T13537] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.865575][T13544] bridge_slave_1: left allmulticast mode [ 239.871269][T13544] bridge_slave_1: left promiscuous mode [ 239.877037][T13544] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.899552][T13533] infiniband syz0: set active [ 239.904351][T13533] infiniband syz0: added bond_slave_0 [ 239.909872][T13537] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 239.946381][T13544] bridge_slave_0: left allmulticast mode [ 239.952051][T13544] bridge_slave_0: left promiscuous mode [ 239.957939][T13544] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.971804][T13533] RDS/IB: syz0: added [ 239.976877][T13533] smc: adding ib device syz0 with port count 1 [ 239.987397][T13533] smc: ib device syz0 port 1 has no pnetid [ 240.002318][T13537] Quota error (device loop2): do_check_range: Getting block 32773 out of range 1-6 [ 240.011966][T13537] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 240.021384][T13537] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.3441: Failed to acquire dquot type 0 [ 240.044404][T13537] IPv6: NLM_F_CREATE should be specified when creating new route [ 240.094047][T10060] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.127186][T13551] loop1: detected capacity change from 0 to 2048 [ 240.158190][ T29] audit: type=1326 audit(1763214141.699:10770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13552 comm="syz.5.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795931f6c9 code=0x7ffc0000 [ 240.160778][T13553] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8194 sclass=netlink_route_socket pid=13553 comm=syz.5.3445 [ 240.181863][ T29] audit: type=1326 audit(1763214141.699:10771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13552 comm="syz.5.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795931f6c9 code=0x7ffc0000 [ 240.181906][ T29] audit: type=1326 audit(1763214141.699:10772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13552 comm="syz.5.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f795931f6c9 code=0x7ffc0000 [ 240.181943][ T29] audit: type=1326 audit(1763214141.699:10773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13552 comm="syz.5.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795931f6c9 code=0x7ffc0000 [ 240.182009][ T29] audit: type=1326 audit(1763214141.699:10774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13552 comm="syz.5.3445" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795931f6c9 code=0x7ffc0000 [ 240.292842][T13551] loop1: p1 < > p3 p4 [ 240.309199][T13551] loop1: p3 start 458752 is beyond EOD, truncated [ 240.315827][T13551] loop1: p4 start 268435456 is beyond EOD, truncated [ 240.374341][T13537] siw: device registration error -23 [ 240.392777][T13130] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.563606][T13575] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 240.572295][T13575] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 240.666955][T13587] loop5: detected capacity change from 0 to 512 [ 240.716642][T13587] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 240.732671][T13587] ext4 filesystem being mounted at /173/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 240.760179][T13590] loop2: detected capacity change from 0 to 2048 [ 240.788752][T13595] __nla_validate_parse: 15 callbacks suppressed [ 240.788772][T13595] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3462'. [ 240.806725][T13595] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3462'. [ 240.818023][T13587] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.3460: Failed to acquire dquot type 0 [ 240.836444][T13596] lo speed is unknown, defaulting to 1000 [ 240.845726][ T3543] loop2: p1 < > p3 p4 [ 240.854389][ T3543] loop2: p3 start 458752 is beyond EOD, truncated [ 240.860874][ T3543] loop2: p4 start 268435456 is beyond EOD, truncated [ 240.914317][T13590] loop2: p1 < > p3 p4 [ 240.925382][T13590] loop2: p3 start 458752 is beyond EOD, truncated [ 240.932082][T13590] loop2: p4 start 268435456 is beyond EOD, truncated [ 240.976979][ T3005] loop2: p1 < > p3 p4 [ 240.983440][T13590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3461'. [ 240.992445][T13590] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3461'. [ 240.998465][ T3005] loop2: p3 start 458752 is beyond EOD, truncated [ 241.007851][ T3005] loop2: p4 start 268435456 is beyond EOD, truncated [ 241.055722][T13603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3461'. [ 241.070011][ T58] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.088782][ T58] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.098050][ T58] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.110221][ T58] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.198109][T13587] siw: device registration error -23 [ 241.253969][T11013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 241.492207][T13610] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 241.497100][T13617] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3471'. [ 241.501183][T13610] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 241.586400][T13622] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3474'. [ 241.618921][T13622] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3474'. [ 241.630590][T13624] loop6: detected capacity change from 0 to 128 [ 241.739349][T13620] loop2: detected capacity change from 0 to 512 [ 241.787107][T13620] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.3470: bad orphan inode 11862016 [ 241.812313][T13620] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 241.825726][T13620] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.877424][T13632] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3476'. [ 241.887095][T13637] loop1: detected capacity change from 0 to 2048 [ 241.900481][T13632] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8194 sclass=netlink_route_socket pid=13632 comm=syz.5.3476 [ 241.916810][T13632] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3476'. [ 241.926740][ T3543] loop1: p1 < > p3 p4 [ 241.932007][ T3543] loop1: p3 start 458752 is beyond EOD, truncated [ 241.938558][ T3543] loop1: p4 start 268435456 is beyond EOD, truncated [ 241.975544][T13637] loop1: p1 < > p3 p4 [ 241.987127][T13637] loop1: p3 start 458752 is beyond EOD, truncated [ 241.993691][T13637] loop1: p4 start 268435456 is beyond EOD, truncated [ 242.026693][T13130] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 242.076918][T13649] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 242.087113][T13649] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 242.138083][ T3543] udevd[3543]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 242.146132][T13653] 9pnet_fd: p9_fd_create_unix (13653): problem connecting socket: ./file0: -30 [ 242.187522][T13653] loop1: detected capacity change from 0 to 512 [ 242.214862][T13653] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.237453][T13653] ext4 filesystem being mounted at /260/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.321688][T10060] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.366076][T13666] 9pnet_fd: p9_fd_create_unix (13666): problem connecting socket: ./file0: -30 [ 242.386116][T13666] loop1: detected capacity change from 0 to 512 [ 242.412033][T13668] netlink: 'syz.2.3492': attribute type 1 has an invalid length. [ 242.443756][T13666] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 242.463957][T13666] ext4 filesystem being mounted at /262/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.544158][T10060] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.557592][T13674] lo speed is unknown, defaulting to 1000 [ 242.938585][T13691] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13691 comm=syz.0.3500 [ 243.203279][T13721] loop1: detected capacity change from 0 to 1024 [ 243.224509][T13721] EXT4-fs: Ignoring removed orlov option [ 243.238229][T13727] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 243.247356][T13727] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 243.262512][T13731] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13731 comm=syz.5.3517 [ 243.294400][T13721] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 243.338576][ T29] kauditd_printk_skb: 181 callbacks suppressed [ 243.338593][ T29] audit: type=1326 audit(1763214144.879:10954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13698 comm="syz.1.3505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcf48b0df10 code=0x7ffc0000 [ 243.382925][ T29] audit: type=1326 audit(1763214144.889:10955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13741 comm="syz.5.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795931f6c9 code=0x7ffc0000 [ 243.406594][ T29] audit: type=1326 audit(1763214144.889:10956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13741 comm="syz.5.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f795931f6c9 code=0x7ffc0000 [ 243.430305][ T29] audit: type=1326 audit(1763214144.889:10957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13741 comm="syz.5.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795931f6c9 code=0x7ffc0000 [ 243.453993][ T29] audit: type=1326 audit(1763214144.889:10958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13741 comm="syz.5.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f795931f6c9 code=0x7ffc0000 [ 243.477722][ T29] audit: type=1326 audit(1763214144.889:10959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13741 comm="syz.5.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795931f6c9 code=0x7ffc0000 [ 243.501430][ T29] audit: type=1326 audit(1763214144.889:10960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13741 comm="syz.5.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795931f6c9 code=0x7ffc0000 [ 243.525174][ T29] audit: type=1326 audit(1763214144.889:10961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13741 comm="syz.5.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f795931f6c9 code=0x7ffc0000 [ 243.548957][ T29] audit: type=1326 audit(1763214144.889:10962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13741 comm="syz.5.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795931f6c9 code=0x7ffc0000 [ 243.572954][ T29] audit: type=1326 audit(1763214144.889:10963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13741 comm="syz.5.3520" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f795931f6c9 code=0x7ffc0000 [ 243.598366][T13699] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 243.929153][T10060] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.034411][T13767] geneve2: entered promiscuous mode [ 244.039677][T13767] geneve2: entered allmulticast mode [ 244.167580][T13771] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13771 comm=syz.2.3535 [ 244.251920][T13776] loop2: detected capacity change from 0 to 736 [ 244.378149][T13782] syz0: rxe_newlink: already configured on bond_slave_0 [ 244.415644][T13761] loop5: detected capacity change from 0 to 512 [ 244.434732][T13761] EXT4-fs error (device loop5): ext4_orphan_get:1418: comm syz.5.3529: bad orphan inode 11862016 [ 244.446320][T13761] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 244.459347][T13761] ext4 filesystem being mounted at /190/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 244.744462][T13799] loop6: detected capacity change from 0 to 1024 [ 244.761505][T13799] EXT4-fs: Ignoring removed mblk_io_submit option [ 244.790457][T11013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 244.791022][T13799] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 244.854873][T13799] ext4: Unknown parameter 'inode32' [ 244.881300][T13799] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000. [ 244.910009][T13813] loop1: detected capacity change from 0 to 512 [ 244.928405][T13815] 9pnet_fd: p9_fd_create_unix (13815): problem connecting socket: ./file0: -30 [ 244.939616][T13813] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 244.952572][T13813] ext4 filesystem being mounted at /272/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 244.953021][T13815] loop5: detected capacity change from 0 to 512 [ 244.987054][T13813] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.3551: Failed to acquire dquot type 0 [ 245.019594][T13813] siw: device registration error -23 [ 245.021627][T13815] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 245.046365][T13815] ext4 filesystem being mounted at /193/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.048829][T13821] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 245.065384][T10060] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz-executor: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 245.089035][T10060] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 12: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 245.110922][T10060] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 245.132684][T10060] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 14: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 245.153527][T10060] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 15: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=32773, rec_len=0, size=2048 fake=0 [ 245.188504][T10060] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 16: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 245.214685][T10060] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 17: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 245.249839][T10060] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 245.287325][T10060] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 19: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 245.288360][T11013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.436567][T13843] loop2: detected capacity change from 0 to 128 [ 245.449537][T11258] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 245.767875][T13852] loop6: detected capacity change from 0 to 512 [ 245.797686][T13852] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.3564: bad orphan inode 11862016 [ 245.833885][T13852] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 245.851323][T13852] ext4 filesystem being mounted at /162/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.926910][T13877] loop5: detected capacity change from 0 to 1024 [ 245.951196][T13877] EXT4-fs: Ignoring removed mblk_io_submit option [ 245.989828][T13877] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 246.053961][T11013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 246.064569][T11258] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 246.320486][T13900] __nla_validate_parse: 17 callbacks suppressed [ 246.320502][T13900] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3582'. [ 246.335769][T13900] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3582'. [ 246.379792][T13903] loop5: detected capacity change from 0 to 512 [ 246.395460][T13903] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 246.426714][T13903] ext4 filesystem being mounted at /209/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 246.464222][T13903] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.3583: Failed to acquire dquot type 0 [ 246.505204][T13903] siw: device registration error -23 [ 246.515476][T13912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13912 comm=syz.0.3585 [ 246.538293][T11013] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 3: comm syz-executor: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 246.568629][T11013] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 12: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 246.600201][T11013] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 13: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 246.621917][T11013] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 14: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 246.644643][T11013] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 15: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=32773, rec_len=0, size=2048 fake=0 [ 246.668921][T11013] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 16: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 246.697792][T11013] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 17: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 246.718345][T11013] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 246.732998][T11013] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 19: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 247.023887][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 247.204357][T13924] 9pnet_fd: Insufficient options for proto=fd [ 247.236896][T13926] lo speed is unknown, defaulting to 1000 [ 247.813953][T13936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3594'. [ 247.823017][T13936] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3594'. [ 248.042834][T13945] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13945 comm=syz.2.3597 [ 248.202987][T13951] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3601'. [ 248.215238][T13952] loop2: detected capacity change from 0 to 512 [ 248.234073][T13952] ext4 filesystem being mounted at /48/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 248.248088][T13952] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.3599: corrupted inode contents [ 248.260044][T13952] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.3599: mark_inode_dirty error [ 248.272079][T13952] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.3599: corrupted inode contents [ 248.284525][T13952] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.3599: mark_inode_dirty error [ 248.310376][T13951] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3601'. [ 248.536684][T13962] lo speed is unknown, defaulting to 1000 [ 249.073067][ T3532] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 249.079207][ T3551] Bluetooth: hci0: command 0x1003 tx timeout [ 249.147326][ T29] kauditd_printk_skb: 153 callbacks suppressed [ 249.147344][ T29] audit: type=1326 audit(1763214150.689:11113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13967 comm="syz.2.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd29c3f6c9 code=0x7ffc0000 [ 249.149669][T13968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3606'. [ 249.153667][ T29] audit: type=1326 audit(1763214150.689:11114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13967 comm="syz.2.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7fbd29c3f6c9 code=0x7ffc0000 [ 249.209719][ T29] audit: type=1326 audit(1763214150.689:11115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13967 comm="syz.2.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd29c3f6c9 code=0x7ffc0000 [ 249.233413][ T29] audit: type=1326 audit(1763214150.689:11116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13967 comm="syz.2.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7fbd29c3f6c9 code=0x7ffc0000 [ 249.254301][T13970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8194 sclass=netlink_route_socket pid=13970 comm=syz.2.3606 [ 249.257083][ T29] audit: type=1326 audit(1763214150.689:11117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13967 comm="syz.2.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd29c3f6c9 code=0x7ffc0000 [ 249.293330][ T29] audit: type=1326 audit(1763214150.689:11118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13967 comm="syz.2.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd29c3f6c9 code=0x7ffc0000 [ 249.308387][T13968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3606'. [ 249.317021][ T29] audit: type=1326 audit(1763214150.689:11119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13967 comm="syz.2.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd29c3f6c9 code=0x7ffc0000 [ 249.349520][ T29] audit: type=1326 audit(1763214150.689:11120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13967 comm="syz.2.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd29c3f6c9 code=0x7ffc0000 [ 249.373131][ T29] audit: type=1326 audit(1763214150.689:11121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13967 comm="syz.2.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd29c3f6c9 code=0x7ffc0000 [ 249.396822][ T29] audit: type=1326 audit(1763214150.689:11122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13967 comm="syz.2.3606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbd29c3f6c9 code=0x7ffc0000 [ 249.521447][T13981] loop6: detected capacity change from 0 to 1024 [ 249.591443][T13981] EXT4-fs: Ignoring removed mblk_io_submit option [ 249.648776][T13981] ext4: Unknown parameter 'inode32' [ 250.010369][T13983] loop2: detected capacity change from 0 to 512 [ 250.053426][T13983] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.3611: bad orphan inode 11862016 [ 250.084239][T13983] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 250.225655][T13991] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3612'. [ 250.283375][T13991] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3612'. [ 250.459397][T13999] lo speed is unknown, defaulting to 1000 [ 251.289748][T14037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8194 sclass=netlink_route_socket pid=14037 comm=syz.0.3631 [ 251.308988][T14040] netlink: 'syz.6.3632': attribute type 1 has an invalid length. [ 251.384417][T14045] __nla_validate_parse: 8 callbacks suppressed [ 251.384513][T14045] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3635'. [ 251.387200][T14037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3631'. [ 251.586074][T14058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3640'. [ 251.826673][T14075] loop1: detected capacity change from 0 to 736 [ 251.856858][T14052] loop2: detected capacity change from 0 to 512 [ 251.973146][T14052] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.3637: bad orphan inode 11862016 [ 251.991545][T14052] EXT4-fs mount: 7 callbacks suppressed [ 251.991562][T14052] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 252.010049][T14052] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.021120][T14078] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3648'. [ 252.207062][T14092] loop1: detected capacity change from 0 to 512 [ 252.218692][T14092] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 252.264657][T13130] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 252.372160][T14103] loop1: detected capacity change from 0 to 1024 [ 252.391534][T14103] EXT4-fs: Ignoring removed mblk_io_submit option [ 252.430463][T14103] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 252.513124][T14103] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000. [ 252.537901][T10060] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 252.662376][T14118] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 252.714892][T14118] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3661'. [ 252.879473][T14122] loop6: detected capacity change from 0 to 512 [ 252.912006][T14122] EXT4-fs error (device loop6): ext4_orphan_get:1418: comm syz.6.3663: bad orphan inode 11862016 [ 252.931962][T14131] lo speed is unknown, defaulting to 1000 [ 252.934764][T14122] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 252.977239][T14122] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 252.997883][T11013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.264966][T11258] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 253.278931][T14147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3671'. [ 253.328738][T14151] 9pnet_fd: Insufficient options for proto=fd [ 253.337066][T14153] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3674'. [ 253.355599][T14151] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3673'. [ 253.372321][T14153] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3674'. [ 253.482010][T14166] loop2: detected capacity change from 0 to 512 [ 253.492713][T14168] 9pnet_fd: p9_fd_create_unix (14168): problem connecting socket: ./file0: -30 [ 253.509996][T14166] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.522724][T14166] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 253.525164][T14168] loop6: detected capacity change from 0 to 512 [ 253.544656][T14166] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.3676: corrupted inode contents [ 253.556813][T14166] EXT4-fs error (device loop2): ext4_dirty_inode:6517: inode #2: comm syz.2.3676: mark_inode_dirty error [ 253.568306][T14166] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #2: comm syz.2.3676: corrupted inode contents [ 253.580564][T14166] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #2: comm syz.2.3676: mark_inode_dirty error [ 253.616498][T14173] loop1: detected capacity change from 0 to 512 [ 253.627065][T14168] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.640581][T14173] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 253.649965][T14168] ext4 filesystem being mounted at /186/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.666814][T14173] EXT4-fs error (device loop1): __ext4_fill_super:5512: inode #2: comm syz.1.3680: iget: special inode unallocated [ 253.682196][T14173] EXT4-fs (loop1): get root inode failed [ 253.688037][T14173] EXT4-fs (loop1): mount failed [ 253.762330][T14183] loop5: detected capacity change from 0 to 1024 [ 253.769682][T14183] EXT4-fs: Ignoring removed mblk_io_submit option [ 253.791387][T11258] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.807725][T14183] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 253.842814][T14189] syz0: rxe_newlink: already configured on bond_slave_0 [ 253.884801][T14189] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3685'. [ 253.894782][T14191] loop1: detected capacity change from 0 to 512 [ 253.919911][T14191] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.936156][T11013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.936954][T14191] ext4 filesystem being mounted at /288/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 253.984289][T14191] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.3686: Failed to acquire dquot type 0 [ 254.011193][T14191] siw: device registration error -23 [ 254.027909][T10060] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 3: comm syz-executor: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 254.051429][T10060] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 12: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 254.072809][T10060] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 13: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 254.094295][T10060] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 14: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 254.115212][T10060] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 15: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=32773, rec_len=0, size=2048 fake=0 [ 254.136408][T10060] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 16: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 254.158979][T10060] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 17: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 254.181506][T10060] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 254.197104][T10060] EXT4-fs error (device loop1): ext4_readdir:264: inode #2: block 19: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 254.294238][T13130] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.347338][ T29] kauditd_printk_skb: 245 callbacks suppressed [ 254.347353][ T29] audit: type=1326 audit(1763214155.889:11366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.2.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd29c3f6c9 code=0x7ffc0000 [ 254.432332][ T29] audit: type=1326 audit(1763214155.919:11367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.2.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd29c3f6c9 code=0x7ffc0000 [ 254.456232][ T29] audit: type=1326 audit(1763214155.919:11368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.2.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd29c3f6c9 code=0x7ffc0000 [ 254.480003][ T29] audit: type=1326 audit(1763214155.919:11369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.2.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd29c3f6c9 code=0x7ffc0000 [ 254.503615][ T29] audit: type=1326 audit(1763214155.919:11370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.2.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd29c3f6c9 code=0x7ffc0000 [ 254.527411][ T29] audit: type=1326 audit(1763214155.919:11371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.2.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd29c3f6c9 code=0x7ffc0000 [ 254.551178][ T29] audit: type=1326 audit(1763214155.919:11372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.2.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd29c3f6c9 code=0x7ffc0000 [ 254.574801][ T29] audit: type=1326 audit(1763214155.919:11373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.2.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd29c3f6c9 code=0x7ffc0000 [ 254.598645][ T29] audit: type=1326 audit(1763214155.919:11374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.2.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd29c3f6c9 code=0x7ffc0000 [ 254.622335][ T29] audit: type=1326 audit(1763214155.919:11375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14205 comm="syz.2.3693" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd29c3f6c9 code=0x7ffc0000 [ 254.866982][T14222] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 254.996006][T14231] FAULT_INJECTION: forcing a failure. [ 254.996006][T14231] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 255.009229][T14231] CPU: 0 UID: 0 PID: 14231 Comm: syz.2.3702 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 255.009383][T14231] Tainted: [W]=WARN [ 255.009392][T14231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 255.009408][T14231] Call Trace: [ 255.009417][T14231] [ 255.009427][T14231] __dump_stack+0x1d/0x30 [ 255.009489][T14231] dump_stack_lvl+0xe8/0x140 [ 255.009515][T14231] dump_stack+0x15/0x1b [ 255.009534][T14231] should_fail_ex+0x265/0x280 [ 255.009646][T14231] should_fail+0xb/0x20 [ 255.009745][T14231] should_fail_usercopy+0x1a/0x20 [ 255.009770][T14231] _copy_from_user+0x1c/0xb0 [ 255.009797][T14231] memdup_user+0x5e/0xd0 [ 255.009834][T14231] strndup_user+0x68/0xb0 [ 255.009862][T14231] __se_sys_mount+0x8e/0x2e0 [ 255.009885][T14231] ? fput+0x8f/0xc0 [ 255.009943][T14231] ? ksys_write+0x192/0x1a0 [ 255.009992][T14231] __x64_sys_mount+0x67/0x80 [ 255.010020][T14231] x64_sys_call+0x2b51/0x3000 [ 255.010048][T14231] do_syscall_64+0xd2/0x200 [ 255.010075][T14231] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 255.010128][T14231] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 255.010168][T14231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.010218][T14231] RIP: 0033:0x7fbd29c3f6c9 [ 255.010237][T14231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.010273][T14231] RSP: 002b:00007fbd2869f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 255.010297][T14231] RAX: ffffffffffffffda RBX: 00007fbd29e95fa0 RCX: 00007fbd29c3f6c9 [ 255.010312][T14231] RDX: 0000200000001400 RSI: 00002000000003c0 RDI: 0000200000000240 [ 255.010345][T14231] RBP: 00007fbd2869f090 R08: 0000200000000140 R09: 0000000000000000 [ 255.010412][T14231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.010428][T14231] R13: 00007fbd29e96038 R14: 00007fbd29e95fa0 R15: 00007ffee3d5d3c8 [ 255.010455][T14231] [ 255.238654][T14235] loop5: detected capacity change from 0 to 1024 [ 255.245688][T14235] EXT4-fs: Ignoring removed mblk_io_submit option [ 255.318275][T14235] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.323896][T14242] loop6: detected capacity change from 0 to 1024 [ 255.363821][T14242] EXT4-fs: Ignoring removed mblk_io_submit option [ 255.474389][T14242] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 255.737565][T14247] team0: Port device team_slave_1 removed [ 255.930634][T11258] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 255.944079][T11013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.020007][T14256] loop2: detected capacity change from 0 to 512 [ 256.101505][T14256] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.135566][T14263] loop6: detected capacity change from 0 to 736 [ 256.152714][T14256] ext4 filesystem being mounted at /79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 256.257960][T14256] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.3710: Failed to acquire dquot type 0 [ 256.305856][T14265] syz0: rxe_newlink: already configured on bond_slave_0 [ 256.328424][T14256] siw: device registration error -23 [ 256.361358][T13130] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 3: comm syz-executor: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 256.390338][T14270] loop6: detected capacity change from 0 to 128 [ 256.418248][T13130] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 12: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 256.441514][T13130] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 13: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 256.466197][T13130] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 14: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 256.491349][T13130] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 15: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=32773, rec_len=0, size=2048 fake=0 [ 256.512471][T13130] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 16: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 256.534680][T13130] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 17: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 256.556437][T13130] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 256.571241][T13130] EXT4-fs error (device loop2): ext4_readdir:264: inode #2: block 19: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 256.718056][T14276] __nla_validate_parse: 6 callbacks suppressed [ 256.718078][T14276] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3718'. [ 256.762903][T14276] IPVS: Unknown mcast interface: vetN1_macvtap [ 256.828058][ T266] Bluetooth: hci0: Frame reassembly failed (-84) [ 256.929276][T14283] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3721'. [ 256.973513][T14283] IPVS: Unknown mcast interface: ip [ 257.044228][T14286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14286 comm=syz.5.3722 [ 257.064301][T14287] 9pnet_fd: Insufficient options for proto=fd [ 257.296277][T14296] loop5: detected capacity change from 0 to 1024 [ 257.305453][T14296] EXT4-fs: Ignoring removed orlov option [ 257.393673][T14296] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 257.448261][T14291] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 257.539678][T14306] loop6: detected capacity change from 0 to 736 [ 257.653254][T14308] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3730'. [ 257.672970][T14308] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3730'. [ 257.682124][T14308] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3730'. [ 257.771728][T14310] loop6: detected capacity change from 0 to 2048 [ 257.844522][T14310] loop6: p1 < > p3 p4 [ 257.850960][T14310] loop6: p3 start 458752 is beyond EOD, truncated [ 257.857513][T14310] loop6: p4 start 268435456 is beyond EOD, truncated [ 257.889114][T14310] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3731'. [ 257.898109][T14310] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3731'. [ 257.908365][T14310] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3731'. [ 257.947746][T14312] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3732'. [ 258.004755][T11013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.029590][T14314] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3733'. [ 258.063261][T14314] IPVS: Unknown mcast interface: ip [ 258.218337][T14325] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8194 sclass=netlink_route_socket pid=14325 comm=syz.5.3737 [ 258.340219][T14334] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8194 sclass=netlink_route_socket pid=14334 comm=syz.6.3739 [ 258.418604][T14337] loop5: detected capacity change from 0 to 512 [ 258.456952][T14337] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 258.520408][T14337] ext4 filesystem being mounted at /234/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 258.606168][T14337] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.3741: Failed to acquire dquot type 0 [ 258.627326][T14337] siw: device registration error -23 [ 258.644738][T11013] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 3: comm syz-executor: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 258.677034][T11013] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 12: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 258.714413][T11013] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 13: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 258.763151][T11013] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 14: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 258.797726][T14353] loop6: detected capacity change from 0 to 1024 [ 258.811935][T14353] EXT4-fs: Ignoring removed mblk_io_submit option [ 258.816676][T11013] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 15: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=32773, rec_len=0, size=2048 fake=0 [ 258.832918][ T3551] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 258.845647][ T3532] Bluetooth: hci0: command 0x1003 tx timeout [ 258.874974][T14353] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 258.893388][T11013] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 16: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 258.930846][T11013] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 17: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 258.984485][T11258] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 259.008909][T11013] EXT4-fs error (device loop5): ext4_map_blocks:778: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 259.040038][T11013] EXT4-fs error (device loop5): ext4_readdir:264: inode #2: block 19: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 259.092011][T14359] netlink: 'syz.6.3750': attribute type 1 has an invalid length. [ 259.336220][T14374] loop6: detected capacity change from 0 to 512 [ 259.369514][T14374] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 259.442995][T14374] ext4 filesystem being mounted at /217/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 259.480608][ T29] kauditd_printk_skb: 336 callbacks suppressed [ 259.480627][ T29] audit: type=1326 audit(1763214161.019:11708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14377 comm="syz.0.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0924f6c9 code=0x7ffc0000 [ 259.532889][ T29] audit: type=1326 audit(1763214161.019:11709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14377 comm="syz.0.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0924f6c9 code=0x7ffc0000 [ 259.538060][T14374] Quota error (device loop6): do_check_range: Getting block 32773 out of range 1-6 [ 259.556864][ T29] audit: type=1326 audit(1763214161.019:11710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14377 comm="syz.0.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff0924f6c9 code=0x7ffc0000 [ 259.566206][T14374] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 259.589727][ T29] audit: type=1326 audit(1763214161.019:11711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14377 comm="syz.0.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0924f6c9 code=0x7ffc0000 [ 259.589776][ T29] audit: type=1326 audit(1763214161.019:11712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14377 comm="syz.0.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0924f6c9 code=0x7ffc0000 [ 259.599194][T14374] EXT4-fs error (device loop6): ext4_acquire_dquot:6945: comm syz.6.3756: Failed to acquire dquot type 0 [ 259.657712][ T29] audit: type=1326 audit(1763214161.019:11713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14377 comm="syz.0.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7eff0924f6c9 code=0x7ffc0000 [ 259.681479][ T29] audit: type=1326 audit(1763214161.019:11714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14377 comm="syz.0.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0924f6c9 code=0x7ffc0000 [ 259.705122][ T29] audit: type=1326 audit(1763214161.019:11715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14377 comm="syz.0.3757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0924f6c9 code=0x7ffc0000 [ 259.758321][T11258] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 3: comm syz-executor: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 259.790396][T11258] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 12: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 259.832010][T11258] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 13: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0 [ 259.857223][T11258] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 14: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 259.878817][T11258] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 15: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=32773, rec_len=0, size=2048 fake=0 [ 259.905319][T11258] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 16: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0 [ 259.954443][T14389] 9pnet_fd: p9_fd_create_unix (14389): problem connecting socket: ./file0: -30 [ 259.966892][T11258] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 17: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0 [ 259.996631][T11258] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #2: block 18: comm syz-executor: lblock 23 mapped to illegal pblock 18 (length 1) [ 260.019348][T11258] EXT4-fs error (device loop6): ext4_readdir:264: inode #2: block 19: comm syz-executor: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0 [ 260.882200][T10060] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.456945][T14409] loop1: detected capacity change from 0 to 512 [ 261.474027][T14413] siw: device registration error -23 [ 261.527057][T14409] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.3768: bad orphan inode 11862016 [ 261.585056][T14418] IPVS: Unknown mcast interface: ipvla [ 261.591235][T14409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 261.652969][T14409] ext4 filesystem being mounted at /290/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 261.814592][T14424] 9pnet_fd: p9_fd_create_unix (14424): problem connecting socket: ./file0: -30 [ 262.007305][T10060] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 262.063784][T14430] loop1: detected capacity change from 0 to 736 [ 262.181217][T14434] loop1: detected capacity change from 0 to 1024 [ 262.195034][T14434] EXT4-fs: Ignoring removed mblk_io_submit option [ 262.244753][T14434] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 262.245349][T14436] __nla_validate_parse: 13 callbacks suppressed [ 262.245368][T14436] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3779'. [ 262.272137][T14436] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3779'. [ 262.354094][T10060] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.385509][T14436] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3779'. [ 262.395096][T14436] netlink: 196 bytes leftover after parsing attributes in process `syz.0.3779'. [ 262.465649][T14442] loop1: detected capacity change from 0 to 164 [ 262.543164][T14442] bio_check_eod: 30 callbacks suppressed [ 262.543179][T14442] syz.1.3780: attempt to access beyond end of device [ 262.543179][T14442] loop1: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 262.589679][T14442] syz.1.3780: attempt to access beyond end of device [ 262.589679][T14442] loop1: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 262.684359][ T3005] ================================================================== [ 262.692489][ T3005] BUG: KCSAN: data-race in dentry_unlink_inode / step_into [ 262.699726][ T3005] [ 262.702056][ T3005] write to 0xffff88811b137570 of 8 bytes by task 3543 on cpu 0: [ 262.709700][ T3005] dentry_unlink_inode+0x65/0x260 [ 262.714840][ T3005] d_delete+0x164/0x180 [ 262.719014][ T3005] d_delete_notify+0x32/0x100 [ 262.723712][ T3005] vfs_unlink+0x30b/0x420 [ 262.728122][ T3005] do_unlinkat+0x24e/0x480 [ 262.732579][ T3005] __x64_sys_unlink+0x2e/0x40 [ 262.737293][ T3005] x64_sys_call+0x2dcf/0x3000 [ 262.742006][ T3005] do_syscall_64+0xd2/0x200 [ 262.746517][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.752425][ T3005] [ 262.754757][ T3005] read to 0xffff88811b137570 of 8 bytes by task 3005 on cpu 1: [ 262.762336][ T3005] step_into+0x122/0x7f0 [ 262.766601][ T3005] walk_component+0x162/0x220 [ 262.771305][ T3005] path_lookupat+0xfe/0x2a0 [ 262.775834][ T3005] filename_lookup+0x147/0x340 [ 262.780620][ T3005] do_readlinkat+0x7d/0x320 [ 262.785169][ T3005] __x64_sys_readlink+0x47/0x60 [ 262.790029][ T3005] x64_sys_call+0x28de/0x3000 [ 262.794720][ T3005] do_syscall_64+0xd2/0x200 [ 262.799240][ T3005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.805143][ T3005] [ 262.807657][ T3005] value changed: 0xffff88811d42fd88 -> 0x0000000000000000 [ 262.814920][ T3005] [ 262.817253][ T3005] Reported by Kernel Concurrency Sanitizer on: [ 262.823500][ T3005] CPU: 1 UID: 0 PID: 3005 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 262.834367][ T3005] Tainted: [W]=WARN [ 262.838208][ T3005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 262.848274][ T3005] ================================================================== [ 263.977690][T13130] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.012413][T11013] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.045477][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 265.045494][ T29] audit: type=1326 audit(1763214166.589:11795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14450 comm="syz.5.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795931f6c9 code=0x7ffc0000 [ 265.081204][ T29] audit: type=1326 audit(1763214166.619:11796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14450 comm="syz.5.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f795931f6c9 code=0x7ffc0000 [ 265.104959][ T29] audit: type=1326 audit(1763214166.619:11797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14450 comm="syz.5.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795931f6c9 code=0x7ffc0000 [ 265.128589][ T29] audit: type=1326 audit(1763214166.619:11798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14450 comm="syz.5.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795931f6c9 code=0x7ffc0000 [ 265.152197][ T29] audit: type=1326 audit(1763214166.619:11799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14450 comm="syz.5.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f795931f6c9 code=0x7ffc0000 [ 265.175787][ T29] audit: type=1326 audit(1763214166.619:11800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14450 comm="syz.5.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795931f6c9 code=0x7ffc0000 [ 265.199516][ T29] audit: type=1326 audit(1763214166.619:11801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14450 comm="syz.5.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f795931f6c9 code=0x7ffc0000 [ 265.223328][ T29] audit: type=1326 audit(1763214166.619:11802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14450 comm="syz.5.3745" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f795931f6c9 code=0x7ffc0000 [ 265.289938][T11258] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.