last executing test programs: 57.078860269s ago: executing program 3 (id=1814): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000f"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = fsopen(&(0x7f0000000400)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000240)=',-\x10*\x00', &(0x7f0000000380)='\x15\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000140)='syzkaller\x00', &(0x7f0000001140)='\xf1\x95\xb3>-\x8c\xd4M\x01\xfa\xe2{eED\x0e\xaaPV\x11\xff\xb6j\xd4~6\x82^\x9b b', 0x0) io_setup(0x7f, &(0x7f0000000000)=0x0) io_cancel(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0xf85, r2, &(0x7f0000000500)="0ccab38f8489e0f9c38910446f20294c1054425ed89429aa3845a60ff85a16e27c65e4f4bac6322b695597f9f7ce892d691a42af0b5ec79dd53246096f096998f54e01e8728c241c554f08723c168db1fb196732acf1c152c6bd46fce0d7d84161ba22e403e723fd655b7603e61cfd911e3f79b1dc9daba89bf472a135a32a968d5fdba354cd8663c541ea84e40e73aa97146008a37ef8e4c0d72eba99db89ca3e56c972fc24dceaefc266522a73cb943e213b8a83e7047f7224", 0xba, 0x42}, &(0x7f0000000180)) close(r2) 57.024193784s ago: executing program 3 (id=1815): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRES32=r2], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r3, 0x0, 0x178}, 0x18) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x44f0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) getpid() r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x82, 0x0) write$binfmt_aout(r7, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r7, 0x540a, 0x2) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000380)={{{@in=@private=0xa010101, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa417}, {0x0, 0x0, 0xa}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4002, 0x23}, 0x0, @in=@multicast2, 0x0, 0x3, 0x0, 0xfd}}, 0xe8) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r9 = socket(0x10, 0x803, 0x0) getsockname$packet(r9, 0x0, &(0x7f00000001c0)) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r10, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) 56.167282298s ago: executing program 3 (id=1829): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x124}}, 0x0) 56.137318541s ago: executing program 3 (id=1831): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000479b3a0e0000b702000014000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0), 0x0, 0x835, 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = getpgrp(0x0) r7 = syz_pidfd_open(r6, 0x0) fsetxattr$trusted_overlay_nlink(r7, &(0x7f00000018c0), 0x0, 0x0, 0x3) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010003000000000000002600000018000180140002006c6f"], 0x2c}}, 0x0) perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") r8 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r8) ptrace$setregs(0xd, r8, 0x930, &(0x7f0000000800)) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r8, 0x12) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x6, 0x1, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000fc0600000000000000000000850000004100000018110000", @ANYRES64=r9, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r10, 0x0, 0xff91, 0x0, &(0x7f0000000300)="0000091651c0eb9d3f1d1dd8a067fd32952be521c3772b0a1f82287f5f4afa3c46b2b59b6920900b5adb8de6b89f8fb04e3eed22335e825e621739c83a9855f06ccc9f2de25a4b2df3b65cf8637df6482eb42a0f3ac0878f8ddb842193", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r11 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r11, &(0x7f00000001c0)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r13}, 0x10) 56.030842792s ago: executing program 3 (id=1833): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x1}, 0x50) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) 55.738710411s ago: executing program 3 (id=1839): perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffe, 0x0, @perf_config_ext={0x8, 0x800000006}, 0x88, 0x98, 0x0, 0x6, 0x8, 0x5, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x10, 0xffffffffffffffff, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0xa0683, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000100)=0x1) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) rt_sigpending(0x0, 0x0) r2 = dup(r1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='setgroups\x00') r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pread64(r4, &(0x7f0000001240)=""/102400, 0x200000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0x5, &(0x7f000001a240)=ANY=[@ANYBLOB="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", @ANYRES64=r5], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="fa82", 0x3802}], 0x1}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000700)=[{0x1, 0x2, {0x1, 0x1}, {0x2, 0x1}, 0xff, 0x2}, {0x1, 0x0, {0x1, 0x1}, {0x0, 0xff, 0x4}, 0xff, 0xfc}, {0x2, 0x3, {0x2, 0x1, 0x2}, {0x2, 0x1a5f8b80dce44f5e, 0x1}, 0xff, 0x2}, {0x2, 0x0, {0x0, 0xf0, 0x4}, {0x1, 0xf0, 0x1}, 0x2}, {0x1, 0x1, {0x2, 0xf1, 0x4}, {0x1, 0xff}, 0x0, 0xfd}, {0x2, 0x2, {0x2, 0xf0, 0x2}, {0x2, 0x5d984236da6d175f, 0x4}, 0xfe, 0x2}, {0x3, 0x2, {0x3, 0x0, 0x2}, {0x0, 0x0, 0x3}, 0xfd, 0x73da7b2470814bd1}, {0x1, 0x3, {0x2, 0xf0, 0x1}, {0x2, 0xf0, 0x4}, 0xfd, 0x1}], 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0900000001000000e27f000001000000120000", @ANYRES32=0x0, @ANYBLOB="dffde562db8a1e4c87003ed73d3acf0053e96a285e65fcbcea930f0644bc8a90edd08215585d8ee6bed57a22b704afbb879bce8df1b3c84a2970"], 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) pipe(&(0x7f0000000340)={0xffffffffffffffff}) close(r8) 55.738139191s ago: executing program 32 (id=1839): perf_event_open(&(0x7f0000000140)={0x4, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x7, 0x8604, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffdffffe, 0x0, @perf_config_ext={0x8, 0x800000006}, 0x88, 0x98, 0x0, 0x6, 0x8, 0x5, 0xb, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0x10, 0xffffffffffffffff, 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0xa0683, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000100)=0x1) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) rt_sigpending(0x0, 0x0) r2 = dup(r1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32], 0x48) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='setgroups\x00') r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) pread64(r4, &(0x7f0000001240)=""/102400, 0x200000, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0x5, &(0x7f000001a240)=ANY=[@ANYBLOB="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", @ANYRES64=r5], &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="fa82", 0x3802}], 0x1}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) setsockopt$SO_J1939_FILTER(r2, 0x6b, 0x1, &(0x7f0000000700)=[{0x1, 0x2, {0x1, 0x1}, {0x2, 0x1}, 0xff, 0x2}, {0x1, 0x0, {0x1, 0x1}, {0x0, 0xff, 0x4}, 0xff, 0xfc}, {0x2, 0x3, {0x2, 0x1, 0x2}, {0x2, 0x1a5f8b80dce44f5e, 0x1}, 0xff, 0x2}, {0x2, 0x0, {0x0, 0xf0, 0x4}, {0x1, 0xf0, 0x1}, 0x2}, {0x1, 0x1, {0x2, 0xf1, 0x4}, {0x1, 0xff}, 0x0, 0xfd}, {0x2, 0x2, {0x2, 0xf0, 0x2}, {0x2, 0x5d984236da6d175f, 0x4}, 0xfe, 0x2}, {0x3, 0x2, {0x3, 0x0, 0x2}, {0x0, 0x0, 0x3}, 0xfd, 0x73da7b2470814bd1}, {0x1, 0x3, {0x2, 0xf0, 0x1}, {0x2, 0xf0, 0x4}, 0xfd, 0x1}], 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0900000001000000e27f000001000000120000", @ANYRES32=0x0, @ANYBLOB="dffde562db8a1e4c87003ed73d3acf0053e96a285e65fcbcea930f0644bc8a90edd08215585d8ee6bed57a22b704afbb879bce8df1b3c84a2970"], 0x50) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) pipe(&(0x7f0000000340)={0xffffffffffffffff}) close(r8) 11.161402737s ago: executing program 2 (id=2564): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x80078b, &(0x7f00000003c0)={[{@nodioread_nolock}, {@journal_dev={'journal_dev', 0x3d, 0x103}}, {@debug}, {@init_itable}, {@auto_da_alloc}, {@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0x8d55}}]}, 0x0, 0x489, &(0x7f0000000a00)="$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") r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = epoll_create1(0x0) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000440)={r0, 0x8, 0x1, 0xd397}) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000003000)=@nat={'nat\x00', 0x1b, 0x5, 0x5b0, 0x230, 0x230, 0xffffffff, 0x230, 0x230, 0x518, 0x518, 0xffffffff, 0x518, 0x518, 0x5, &(0x7f0000000480), {[{{@ip={@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff, 0xffffffff, 'dvmrp1\x00', 'veth0_to_batadv\x00', {}, {}, 0x1d, 0x2, 0x7a}, 0x0, 0xb0, 0xe8, 0x0, {}, [@common=@set={{0x40}, {{0x4, [0x3, 0x1, 0x5, 0x7, 0x0, 0x4], 0x3, 0x3}}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x9, @multicast2, @dev={0xac, 0x14, 0x14, 0x1c}, @port=0x4e21, @gre_key=0x9}}}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x2, 0x2}}, @common=@set={{0x40}, {{0xffffffffffffffff, [0x2, 0x6, 0x4, 0x4, 0x6, 0x2], 0x1}}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x18, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv4=@remote, @port=0x4e21, @gre_key=0xd7}}}, {{@uncond, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[0x4e21, 0x4e22], [0x4e23, 0x4e23], [0x3, 0x6, 0x7, 0x2, 0xb5, 0x401, 0xe, 0x2, 0xffffffff, 0x6, 0x2, 0x40, 0x2, 0xffffffc0, 0xfffffff8, 0xf, 0x7, 0xffffff66, 0x1, 0xffffffff, 0x8, 0xfffffff8, 0x8dc, 0x6, 0x2b, 0x200, 0xdd59, 0x9, 0x3, 0x7, 0x78, 0x4, 0x5, 0x8001, 0x8, 0x7f, 0x462c, 0x0, 0xcb91, 0x4, 0x9, 0x1, 0x3, 0x401, 0x5e0c6090, 0x8, 0x9, 0x8, 0x6, 0x1, 0x5, 0x2, 0x7, 0x1, 0x2, 0xc, 0x80, 0x3, 0x694, 0x6, 0x7, 0x3, 0x31e4, 0xfff], 0x5, [{0x9, 0x23, 0x7e}, {0xc4, 0x42, 0xff}, {0xa7, 0x1, 0x6}, {0x34, 0x8, 0x49}], 0x1, 0x5}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xa, @loopback, @broadcast, @icmp_id=0x64, @icmp_id=0x68}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x22}, @remote, 0xffffffff, 0xffffffff, 'vlan0\x00', 'dvmrp0\x00', {0xff}, {}, 0x0, 0x3, 0x2}, 0x0, 0xb8, 0xf8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x1}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "7ab713662ea7e754019e86dcfd6dc799e553f797a3164f51906e887fed4c"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x610) socket(0x1e, 0x805, 0x0) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) (async) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x1, 0x1, 0x9, 0x0, 0xfffffffffffffffc, 0x7fffffff, 0x2}, 0x0, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000001c0)={r7, &(0x7f0000000080), 0x0}, 0x20) (async) timer_create(0x4, &(0x7f0000000100)={0x0, 0x10, 0x4, @thr={&(0x7f0000000f80)="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", &(0x7f0000002000)="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"}}, &(0x7f0000000200)=0x0) timer_settime(r8, 0x1, &(0x7f0000000500)={{0x77359400}, {0x0, 0x3938700}}, &(0x7f0000000540)) (async) timer_settime(r8, 0x1, &(0x7f0000000280)={{}, {0x77359400}}, &(0x7f0000000300)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f00000002c0)={0xa0000014}) (async) close_range(r2, r3, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) (async) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdedn\xe5+\xf0', 0xffffffffffffffff) 11.067194876s ago: executing program 2 (id=2566): r0 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0xa00, 0x81, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x10007ffffffff}, 0x18) r2 = socket(0x10, 0x3, 0x6) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000008c80)=ANY=[@ANYBLOB=',\x00\x00\x00&'], 0x2c}}, 0x800) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r3, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x0, 0x0, 0x130, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'veth0_to_bridge\x00'}, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f67b23ffdfa27f907a03732da3acbc6518e62a77ca06f258762e88c0d9f9d2f413b94a105f4bdf01425ce81c5d000000000000000500ffffffff00"}}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = fsopen(&(0x7f0000000240)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r5, 0x2, &(0x7f0000000080)='seclabel', &(0x7f00000000c0)='<', 0x1) writev(r0, &(0x7f0000000600)=[{&(0x7f0000000580)="e542ed61bdc43efea2bb4bacc80f5d407ba5d4de81b77422b489", 0x1a}, {&(0x7f00000005c0)="721cba7543d7139b2440fea764c238cf2a2d6f9885c705d27aa85e7952269da7756bc0ad6a80", 0x26}], 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r6 = socket(0x28, 0x5, 0x0) fcntl$lock(r6, 0x5, &(0x7f00000003c0)={0x1, 0x0, 0x80000001, 0x2}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r8 = dup2(r6, r3) ioctl$PPPIOCGL2TPSTATS(r8, 0x80487436, &(0x7f00000004c0)="e28da9af616e6c25d33e") sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000180100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000008740000000c0a95c900000000000000000100000008000440000000000900010073797a300000000038000380340000800400018004000680140007800c000100636f756e7465720004000280140001800c0001"], 0xe4}}, 0x0) 10.938703369s ago: executing program 2 (id=2567): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400001cb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x18) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000380)={0x43, 0x4, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f0000000400)={&(0x7f00000008c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4008030) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x57, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r5}, 0x10) pidfd_send_signal(0xffffffffffffffff, 0x2, 0x0, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f80)="$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") fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) 10.905435162s ago: executing program 2 (id=2568): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x80000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20040084) syz_mount_image$ext4(&(0x7f0000000640)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000300)={[{@dioread_lock}, {@jqfmt_vfsv1}, {@nouid32}, {@grpquota}]}, 0xfc, 0x580, &(0x7f0000000f80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x2, 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) syz_io_uring_setup(0x47a8, 0x0, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x3, 0x6, @remote}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44080) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r2, &(0x7f0000000600)=[{&(0x7f0000000780)=""/219, 0xdb}], 0x1, 0x5, 0x4) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) r3 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000340)) ioctl$PAGEMAP_SCAN(r3, 0xc0606610, &(0x7f0000000a40)={0x60, 0x2, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0xfffffffffffffff9, 0x0, 0x0, 0x7fff, 0x24, 0x8, 0x10, 0x3}) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x4c10, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x101101, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 10.070621964s ago: executing program 2 (id=2582): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x3}, @IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x44}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000001c0)={[{0x2b, 'cpu'}]}, 0x5) 8.790866709s ago: executing program 2 (id=2602): r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xffffffffffffffa0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) close(r0) 8.790726979s ago: executing program 33 (id=2602): r0 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x100202, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0xffffffffffffffa0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) close(r0) 3.738311704s ago: executing program 1 (id=2669): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) (async) r2 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) (async) r3 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x47}, &(0x7f00000004c0)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0}) (async) io_uring_enter(r3, 0x3498, 0x969, 0xffff000000000000, 0x0, 0x0) (async) dup3(r3, r1, 0x80000) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) io_setup(0x6, &(0x7f0000001000)=0x0) io_destroy(r6) 3.590767048s ago: executing program 1 (id=2672): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRES32=r2], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r3, 0x0, 0x178}, 0x18) r4 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r5 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r5, 0x0) write$selinux_load(r4, &(0x7f0000000000)=ANY=[], 0x44f0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x6) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x82, 0x0) write$binfmt_aout(r8, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r8, 0x540a, 0x2) ioctl$TCXONC(r8, 0x540a, 0x3) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)) r9 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000380)={{{@in=@private=0xa010101, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa417}, {0x0, 0x0, 0xa}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4002, 0x23}, 0x0, @in=@multicast2, 0x0, 0x3, 0x0, 0xfd}}, 0xe8) process_vm_writev(r6, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r10 = socket(0x10, 0x803, 0x0) getsockname$packet(r10, 0x0, &(0x7f00000001c0)) r11 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r11, 0x400, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r12, 0x0, &(0x7f0000001700)=""/53}, 0x20) 3.57927311s ago: executing program 1 (id=2673): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00', r0}, 0x10) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f00000001c0)=@keyring) (fail_nth: 4) 3.564734931s ago: executing program 1 (id=2674): bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x8, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xb, &(0x7f0000001880)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x7}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2208c08, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0xa) 3.525278885s ago: executing program 1 (id=2675): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x8, 0xd9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000010bc0)='kfree\x00', r1}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) 2.814507885s ago: executing program 5 (id=2690): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000180)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1}, 0x4) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000c40)='sys_enter\x00', r2}, 0x10) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) (async, rerun: 64) r3 = epoll_create1(0x0) (async, rerun: 32) r4 = epoll_create1(0x0) (async, rerun: 32) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000000d}) (async) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000400)={0xa}) (async, rerun: 32) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) (async, rerun: 32) epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0) (async) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) (async, rerun: 64) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48) (rerun: 64) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r8, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9, 0x0, 0x1000000000000}, 0x18) (async, rerun: 32) r10 = socket(0x840000000002, 0x3, 0xff) (rerun: 32) setsockopt$SO_BINDTODEVICE(r10, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) (async) sendmmsg$inet(r10, &(0x7f0000000300)=[{{&(0x7f0000000140)={0x2, 0x4e1d, @remote}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a90500040000746400009e150451160200000064c6", 0x15}, {&(0x7f0000000000)="17460081ba60ccbb9d000000000000", 0xf}], 0x2}}, {{&(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000380)="5825be06007d2c3edc00b2081d1e55c10d82d842008b007ca274818926407b35", 0x20}], 0x1}}], 0x2, 0x4004040) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x5, @empty, 0x6}, 0x1c) add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f00000000c0)={'fscrypt:', @desc4}, &(0x7f0000000100)={0x0, "9810c4fe6fcb37aa0c5f0c98b97d662a7df3fd44615e3a6c79eb5cba206305e7ec7ee330dd26a9630c6dbba3cbb66ade26e9a8b614e8dd493a0acd7d4121bf55", 0x1b}, 0x48, 0xfffffffffffffffe) 2.45153008s ago: executing program 5 (id=2694): socketpair$unix(0x1, 0x2, 0x0, 0x0) process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x60000004, &(0x7f0000000100)="b9ff03076044238cb89e14f088470de0ffff00184000633c77fbac141412e000002062079f4b4d2f87e5feca6aab845013f2325f1a3903050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x18) (async) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x8) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001500)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000198500000071000000850000005000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x18) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640000000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140640101020c000280080001407f0000018c5bccc67ab416aa38d3309f72fa4129cb87ee0922d8dd956fe0feb10e66c9dcd2eca6adf652b784"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) (async) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) (async) sync() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x94) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='mm_page_free\x00', r6, 0x0, 0x8080000001}, 0x18) (async) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x2) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x100, 0x6}, 0x4) 2.372285718s ago: executing program 5 (id=2695): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x1d6}, 0x18) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r6, &(0x7f000000b100)={0x0, 0x0, &(0x7f000000b0c0)={&(0x7f000000af00)={0x58, r7, 0x1, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0x16, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x64000840}, 0x2000c044) sendmsg$DEVLINK_CMD_SB_GET(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x88, r7, 0x800, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xede}}]}, 0x88}}, 0x40) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r8, r4, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000340)=ANY=[], 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, &(0x7f00000005c0)=[{{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}], 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r10}, 0x18) setsockopt$CAN_RAW_FILTER(r9, 0x65, 0x1, 0x0, 0x0) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r11, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[], 0x0) 2.345235431s ago: executing program 5 (id=2698): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(r0, 0x0, 0x0) getdents(r0, 0xfffffffffffffffd, 0xbb) bpf$PROG_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.108964174s ago: executing program 6 (id=2702): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4) r1 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r4}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xa, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x98}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000240)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffd}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000012c0)={0x64, 0x19, 0x1, 0x70bd2a, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@typed={0xc, 0xbf, 0x0, 0x0, @u64=0xd}, @typed={0x8, 0x92, 0x0, 0x0, @pid}, @nested={0x35, 0x3b, 0x0, 0x1, [@generic="f483ad37650415c8cb0193c30d50a1016a64a0c0a2168d0e9c599b2956d827b5a543a421b2824b8dcea3a1cee57e717e7d"]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r6, 0x5000940a, &(0x7f0000001340)={{r6}, "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"}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) recvmmsg$unix(r6, &(0x7f0000000480)=[{{&(0x7f0000000300), 0x6e, &(0x7f0000000280)=[{&(0x7f0000000580)=""/105, 0x69}, {&(0x7f0000000700)=""/209, 0xd1}, {&(0x7f0000000800)=""/95, 0x5f}], 0x3, &(0x7f0000000880)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x68}}], 0x1, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='kmem_cache_free\x00', r7, 0x0, 0x8a}, 0x18) r10 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x2) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) r11 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) ppoll(&(0x7f0000000280)=[{r11, 0x1021}, {r11, 0x2452}], 0x2, 0x0, 0x0, 0x0) write$evdev(r11, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r10, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x0, 0x100804, 0x0, 0xa, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x4}) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r8, &(0x7f0000000600)={0x50000000}) 1.859556228s ago: executing program 0 (id=2706): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$TUNSETIFF(r2, 0xb701, 0x0) r11 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x58, r11, 0x1, 0x70bd2b, 0xfffffffd, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x62}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x58}}, 0x0) r12 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r12}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r13 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x100) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r14, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x24, r15, 0x20, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r16}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x8847}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) readv(r13, &(0x7f0000000300)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1) 1.835811241s ago: executing program 6 (id=2707): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20f, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41002, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r0}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x24, r2, 0xfc5, 0x0, 0x0, {{0x11}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x8, 0x2a, [@perr={0x84, 0xffffffffffffff21}]}]}, 0x24}}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r3, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x48}]}, 0x24}}, 0x0) 1.707475263s ago: executing program 6 (id=2708): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000002300)={&(0x7f0000000040)=@id={0x1e, 0x3, 0x0, {0x4e22, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x44}, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000002000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x0, {0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x480c0}, 0x0) accept4(r0, 0x0, 0x0, 0x400000000000000) 1.706903913s ago: executing program 0 (id=2709): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(r0, 0x0, 0x0) getdents(r0, 0xfffffffffffffffd, 0xbb) bpf$PROG_LOAD(0x5, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 1.683747246s ago: executing program 6 (id=2710): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000440)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x1400) 1.662105358s ago: executing program 6 (id=2711): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRES32=r1], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', r2, 0x0, 0x178}, 0x18) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) r4 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r4, 0x0) write$selinux_load(r3, &(0x7f0000000000)=ANY=[], 0x44f0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) getpid() r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x82, 0x0) write$binfmt_aout(r6, &(0x7f0000000340)=ANY=[], 0xff2e) ioctl$TCXONC(r6, 0x540a, 0x2) ioctl$TCXONC(r6, 0x540a, 0x3) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000380)={{{@in=@private=0xa010101, @in6=@loopback, 0x4e24, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa417}, {0x0, 0x0, 0xa}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4002, 0x23}, 0x0, @in=@multicast2, 0x0, 0x3, 0x0, 0xfd}}, 0xe8) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) r8 = socket(0x10, 0x803, 0x0) getsockname$packet(r8, 0x0, &(0x7f00000001c0)) r9 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r9, 0x400, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) 1.313934932s ago: executing program 4 (id=2714): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b0000000700000008000000a6ad6a1a05"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ebff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0x4}]}]}, @NFT_MSG_DELSETELEM={0x20, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.286500704s ago: executing program 4 (id=2715): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r1, 0x9, 0xf5) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) r3 = dup(r2) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x200000, 0x200000}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000400)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000900)={0x78, r4, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x5e}}}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xc}, @NL80211_ATTR_BSS_BASIC_RATES={0xd, 0x24, [{0x9, 0x1}, {0x5, 0x1}, {0x6c, 0x1}, {0x1b}, {0xc, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x36}, {0x36, 0x1}]}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x8}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x8}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x16dc}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) write(r5, &(0x7f0000005c00), 0x0) r6 = openat$nci(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000ae000000b703000007000000850000000e000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000040)={0xffffff0c, 0x1a80000000000000, 0x7fffffffffffffff, 0x9}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) pwrite64(r7, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f00000001c0)={0x0, @multicast1, @private}, &(0x7f00000002c0)=0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x1a, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b000000080000000c000000ffffff"], 0x48) syz_emit_ethernet(0x11f, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) write$nci(r6, 0x0, 0xfffffeea) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0x300, 0xfffe, 0x101}}) 1.047498248s ago: executing program 1 (id=2676): perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x1080}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents(r0, 0xfffffffffffffffd, 0xbb) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 793.542293ms ago: executing program 6 (id=2716): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) signalfd4(r2, &(0x7f00000001c0)={[0x4]}, 0x8, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) r3 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x4, &(0x7f00000002c0)=[{0x0, 0x5a, 0x5, 0x5}, {0xe, 0x1, 0x46, 0x101}, {0xfe3, 0x66, 0x4, 0xf91}, {0x3, 0x6, 0x10, 0x3}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f00000007c0)={0x6, 0x4, "c9b41978cf5cc8dee0aea6800d551afc54a57aed1ace7ed58a62524e24e1db8304cd73c72d0ebccb23928b11f1631c02a0d1b34bebf7ad8b8214d9316029daef60f3445d2e117b553a4748bb41796395f8c450eeafad879f6488ac41563045272dce12c0c9493cd8573681245abdfde91883541018ce5cfcc11af737041c90f829721f878a59a3a15972bca4344872266a19bb35c6a94de9db9d2bbecad393bb6aaff38664be6958b2c17337fe8cd384df8cf1da6d59f95a7d353d5eb87725a07789d4d7bbd4784019c234c721f73c6f0f21ab97fd156c22f164ce5471629ef6171d7c443c2b09cd3759cfe05ed52f18852910156f2121609ebb1e19659483aa"}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0xe0}) r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r4, 0x5393, &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000440)='kfree\x00', 0xffffffffffffffff, 0x0, 0x5}, 0x18) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) sendmsg$inet_sctp(r5, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @private=0xa010101}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000540)='\x00', 0x1}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) rt_sigaction(0x17, &(0x7f0000000000)={0xfffffffffffffffc, 0x44000006, 0x0}, 0x0, 0x8, &(0x7f0000000440)) r6 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r6, 0x2007ffc) sendfile(r6, r6, 0x0, 0x800000009) fremovexattr(r6, &(0x7f0000000280)=@random={'user.', '\xb0-:\\\x00'}) 748.859527ms ago: executing program 0 (id=2717): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x100002, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r1}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x2404c854) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9e3fe3d86e6c1d000014a10dfe000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700", 0x5a}, {&(0x7f0000000000)="29dd", 0x2}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x4080) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f0000000240)='./cgroup/../file0\x00') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x3, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0x25, r0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) syz_emit_ethernet(0x3e, &(0x7f0000001b80)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x4, 0x6, "e08bbb", 0x8, 0x3c, 0x1, @remote, @local, {[@routing={0x33, 0x0, 0x0, 0x3}]}}}}}, 0x0) 648.857267ms ago: executing program 0 (id=2718): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 609.89745ms ago: executing program 0 (id=2719): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000f40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x4}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = memfd_secret(0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000f00)='kfree\x00', r3}, 0x18) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{r4}, &(0x7f00000008c0), &(0x7f0000000880)=r5}, 0x20) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000200)=ANY=[], 0xc0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffff05850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r6}, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000080)={[{@nombcache}, {@dioread_lock}, {@nodiscard}, {@nomblk_io_submit}, {@noblock_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x44f, &(0x7f00000010c0)="$eJzs3M1vFGUYAPBnZtsiX7YifvChVtHY+NHSgsrBgxpNPGhiogc81rYQZKGG1kQI0WoMHg2Jd+PRxL/Ak16MejLxqndDQgwX0NOa2Z1pt8t2ocu2g+zvlwy873z0fZ6deXffmbfbAPrWaPZPErEjIv6IiOFGdfUOo43/rl05P/PPlfMzSdRqb/+d1Pe7euX8TLFrcdz2vDKWRqSfJ7GvTbsLZ8+dnK5W587k9YnFUx9MLJw99+yJU9PH547PnZ46cuTwockXnp96rid5ZjFd3fvx/P49r7978c2Zoxff++W7pMi/JY9VlrpucrTTxidqta5/8O1oZ1M5GSgxENalEhHZ6Rqs9//hqMTKyRuO1z4rNThgQ9Vqtdr2tTcv1YA7WBJlRwCUo/igz+5/i2WThh63hcsvN26Asryv5Utjy0Ck+T6DLfe3vTQaEUeX/v06W6LTcwgAgB75IRv/PNNu/JfG/U373Z3PDY1ExD0RsSsi7o2I3RFxX0R93wci4sF1tt86SXL9+Ce91FViNykb/72Yz22tHv8Vo78YqeS1nfX8B5NjJ6pzB/PXZCwGt2T1yQ5t/Pjq71+uta15/JctWfvFWDCP49LAltXHzE4vTt9Kzs0ufxqxd6Bd/snyTEASEXsiYm+XbZx46tv9a227cf4d9GCeqfZNxJON878ULfkXks7zkxN3RXXu4ERxVVzv198uvLVW+7eUfw9k539b2+t/Of+RpHm+dmH9bVz484s172m6vf6Hknfq5aF83UfTi4tnJiOGkjcaQTevn1o5tqgX+2f5jx1o3/93xcorsS8isov4oYh4OCIeyWN/NCIei4gDHfL/+ZXH3+8+/42V5T+7rvO/UhiK1jXtC5WTP32/qtGR9eSfnf/D9dJYvuZm3v9uJq7urmYAAAD4/0kjYkck6fhyOU3Hxxu/L787tqXV+YXFp4/Nf3h6tvEdgZEYTIsnXcNNz0Mn89v6oj7VUj+UPzf+qrK1Xh+fma/Olp089Lnta/T/zF+VsqMDNpzva0H/0v+hf+n/0L/0f+hfbfr/1jLiADZfu8//T0qIA9h8Lf1/edrvpRJiATaX+3/oX/o/9C/9H/rSwta48ZfkFTagUPx9hXLDqES3h0da/mt4xxQG84vhdonn5HS1xDclAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAHvovAAD//+qG390=") r7 = open(&(0x7f00000000c0)='.\x00', 0x48800, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x40) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f0000001600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x100}}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r9}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) sysinfo(&(0x7f0000000f80)=""/154) pwrite64(r8, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') getdents(r7, &(0x7f0000001fc0)=""/184, 0xb8) syz_open_procfs$pagemap(0x0, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r10, &(0x7f0000001440)=""/126, 0x7e, 0x41) 558.887005ms ago: executing program 4 (id=2720): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0xfff, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xcb3a}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) linkat(0xffffffffffffffff, &(0x7f0000000440)='./file0/file0\x00', 0xffffffffffffffff, 0x0, 0x1400) 395.812781ms ago: executing program 5 (id=2721): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r1}, 0x18) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000017c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8, &(0x7f00000005c0)={[{}, {@errors_remount}]}, 0x4, 0x50a, &(0x7f00000018c0)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) truncate(&(0x7f00000000c0)='./file1\x00', 0x80000000008008) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1f, 0xb, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) read(r2, 0x0, 0x0) 289.895602ms ago: executing program 4 (id=2722): bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2fffffffd}, 0xc) close(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0xf, &(0x7f0000000040)={@private1, 0x0}, &(0x7f00000000c0)=0x14) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@bloom_filter={0x1e, 0x20000000, 0x1, 0x2, 0x200, r1, 0xb4, '\x00', r2, 0xffffffffffffffff, 0x4, 0x2, 0x5, 0x10}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4006, 0x5, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) 144.110936ms ago: executing program 4 (id=2723): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x0, 0xc, &(0x7f0000000d80)=ANY=[@ANYBLOB="1816c8e88a965a6ab89fe720f4470d1b7141bee486cdd19ff1aea5dcd76145fc3f21d79e2aad5a0096c76abb4717bd5e60c6d8fac67df88c4fc3ec6c30d2462231742b", @ANYRES32=r0, @ANYRESDEC=r0], 0x0, 0x1ffffffc, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0x2000000000003}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095da0cc4d9883212891423fc09d5417321663e22e14b1ea45055322d4d50b9d67ea5e492f4170b1b3b5d9f"], 0x0}, 0x94) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1c) (async) r5 = syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000001c0)={[], [{@func={'func', 0x3d, 'FILE_CHECK'}}]}, 0x1, 0x571, &(0x7f0000000780)="$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") (async, rerun: 64) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) (rerun: 64) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000001600)=""/4094, 0xffe}], 0x1, 0xf0, 0xd215) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000380)={&(0x7f0000000d00)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00012abd00"/14], 0x14}, 0x1, 0x0, 0x0, 0x400c0}, 0x8080) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2000, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000fc0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000000800450000b00000000000329078000000000000000000004e20009c90780100000004000000d57e190d681e6e1d16c1711bbd8adbf65bd84695bdc9557b378a02340c68117aa1b390b0b4170e157cddfb9792c8e37bafb99e319950347e93f4d34870ee24c0ea06d56270e45c8d3e7d708161ba81dd33c54b03acae6f69000000000000000810000000000000000000000000000038f5e54b3dc7c070b4d66f0f9565df74d2653a13d554fee0e7be27c873db314db8172fa3f4dce7a80a4b55922313656bae11b60addcdb47638315cccace3930274d6"], 0x0) (async) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000e00)=ANY=[@ANYRES16=r4, @ANYRES8=r1, @ANYRES32=r2, @ANYRES16=r1, @ANYRES32=r3, @ANYRES16=r7, @ANYBLOB="fa7307d0035b6034f3dc43dd9030eed8e42bbf87822ac53b9954e49722e29170675169081c0c2bb905e00c07acf210fbae5bf16ad6ce4b46eebb0bd2dde13cfd162f1039c6f5be594a55b0af224584ee84b23b11c3ede9cf09921b2ade9227990e92e5f202c0da7e19782d5a0784593995557163c57f7b7a089a586e0f397a2063166442e6c66d629e9126fd6362ed202e33"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4e}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0x1, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000d40)='/proc/self/attr/keycreate\x00', 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0xd, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async, rerun: 32) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) (async) lsetxattr$security_selinux(&(0x7f0000000280)='./bus\x00', &(0x7f0000000240), &(0x7f0000000100)='system_u:object_r:gpg_exec_t:s0\x00', 0x20, 0x2) (async) renameat2(0xffffffffffffff9c, &(0x7f0000000340)='./bus/file0\x00', r5, &(0x7f00000003c0)='./file0\x00', 0x4) (async, rerun: 64) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) (async, rerun: 64) madvise(&(0x7f0000416000/0xf000)=nil, 0xf000, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) (async, rerun: 32) socket(0x3, 0x2, 0x6) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) 142.310516ms ago: executing program 5 (id=2724): r0 = syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x1204018, &(0x7f0000000240)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6"], 0x1, 0x56f, &(0x7f0000000b00)="$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") bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="4459efc10fba602341840544e0c3cf7318060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b7", @ANYBLOB="8b4e5913fbc2b437901605997579938343b45b1e5ab6a8ce8296bea13ab5680d9004bf506b498d"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) sched_setscheduler(r2, 0x5, &(0x7f0000000180)=0x1000) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pwrite64(r3, 0x0, 0x0, 0xffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x1018}, './file0\x00'}) 119.788429ms ago: executing program 4 (id=2725): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='mlxsw_sp_acl_tcam_vregion_migrate_end\x00', r0, 0x0, 0xffffffffffffb5c3}, 0x18) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="0203000303"], 0x18}, 0x1, 0x7}, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x94) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0x206801, 0x0) fcntl$setlease(r1, 0x400, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='leases_conflict\x00'}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f00000005c0)="f5", 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e20, 0xfffffffc, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x0, 0x5}, 0x8) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x38}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000003c0001800c00010062697477697365002c000280080003400000000408000140000000140800024000000012040005800c000480070002006eee7e000900010073797a30"], 0x110}}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000080)={[{@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@init_itable_val={'init_itable', 0x3d, 0x7ab4}}, {@jqfmt_vfsv0}]}, 0x80, 0x63c, &(0x7f0000001bc0)="$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") r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r5, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x2, 0x14}) 0s ago: executing program 0 (id=2726): r0 = gettid() r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000240)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x18) pidfd_send_signal(0xffffffffffffffff, 0x11, 0x0, 0x1000000) timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) msgctl$IPC_RMID(0x0, 0x0) kernel console output (not intermixed with test programs): 6] loop2: detected capacity change from 0 to 512 [ 136.174382][ T9506] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 136.207813][ T9506] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 136.263187][ T9515] loop5: detected capacity change from 0 to 512 [ 136.269979][ T9515] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.277070][ T9515] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 136.291398][ T9515] EXT4-fs (loop5): 1 truncate cleaned up [ 136.297930][ T9515] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.334936][ T9506] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 136.454678][ T9525] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 136.602953][ T8403] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.605306][ T9537] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 136.633277][ T9541] loop5: detected capacity change from 0 to 512 [ 136.640995][ T9541] EXT4-fs: Ignoring removed nobh option [ 136.646633][ T9541] EXT4-fs: Ignoring removed orlov option [ 136.652514][ T9541] ext4: Unknown parameter 'mask' [ 136.673222][ T9541] loop5: detected capacity change from 0 to 764 [ 136.680158][ T9541] iso9660: Unknown parameter '' [ 136.732865][ T9545] netlink: 'syz.1.2240': attribute type 21 has an invalid length. [ 136.745278][ T9545] loop1: detected capacity change from 0 to 128 [ 136.819793][ T9555] loop5: detected capacity change from 0 to 512 [ 136.826727][ T9555] EXT4-fs: Ignoring removed nomblk_io_submit option [ 136.838266][ T9555] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 136.849215][ T9555] EXT4-fs (loop5): 1 truncate cleaned up [ 136.855678][ T9555] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.873252][ T9558] loop1: detected capacity change from 0 to 1024 [ 136.880380][ T9558] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 136.889563][ T9558] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 136.909348][ T9558] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 136.930035][ T9558] EXT4-fs (loop1): orphan cleanup on readonly fs [ 136.943862][ T8179] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 136.953654][ T9558] EXT4-fs error (device loop1): ext4_free_blocks:6706: comm syz.1.2245: Freeing blocks not in datazone - block = 0, count = 4096 [ 137.031804][ T9558] EXT4-fs (loop1): Remounting filesystem read-only [ 137.064003][ T9558] EXT4-fs (loop1): 1 orphan inode deleted [ 137.081692][ T9558] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 137.144634][ T9558] EXT4-fs (loop1): shut down requested (0) [ 137.206332][ T9572] loop2: detected capacity change from 0 to 512 [ 137.238253][ T8403] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.247822][ T9572] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.255453][ T9572] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 137.272183][ T9572] EXT4-fs (loop2): 1 truncate cleaned up [ 137.279185][ T9572] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.300314][ T9575] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 137.386038][ T9581] __nla_validate_parse: 9 callbacks suppressed [ 137.386053][ T9581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2252'. [ 137.460052][ T9585] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.2253'. [ 137.564926][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.595755][ T9598] loop0: detected capacity change from 0 to 512 [ 137.619093][ T9598] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.632127][ T9603] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 137.644871][ T9598] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 137.660844][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.677348][ T9598] EXT4-fs (loop0): 1 truncate cleaned up [ 137.699975][ T9598] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.766658][ T9612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2264'. [ 137.852304][ T9620] loop5: detected capacity change from 0 to 164 [ 137.877012][ T9620] ISOFS: unable to read i-node block [ 137.890273][ T9628] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.2269'. [ 137.926022][ T9630] loop2: detected capacity change from 0 to 512 [ 137.939637][ T9630] EXT4-fs: Ignoring removed nomblk_io_submit option [ 137.957400][ T9630] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 138.007827][ T9643] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2276'. [ 138.028121][ T9637] loop1: detected capacity change from 0 to 512 [ 138.040746][ T9644] loop4: detected capacity change from 0 to 1024 [ 138.048284][ T9637] EXT4-fs: Ignoring removed nobh option [ 138.048729][ T9630] EXT4-fs (loop2): 1 truncate cleaned up [ 138.053897][ T9637] EXT4-fs: Ignoring removed orlov option [ 138.053980][ T9637] ext4: Unknown parameter 'mask' [ 138.060367][ T9644] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 138.073064][ T9637] loop1: detected capacity change from 0 to 764 [ 138.085427][ T9637] iso9660: Unknown parameter '' [ 138.089614][ T9630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.093102][ T9644] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 138.124433][ T9644] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 138.132498][ T9644] EXT4-fs (loop4): orphan cleanup on readonly fs [ 138.157434][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.183035][ T9644] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.2272: Freeing blocks not in datazone - block = 0, count = 4096 [ 138.200378][ T9654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2280'. [ 138.233935][ T9644] EXT4-fs (loop4): Remounting filesystem read-only [ 138.240702][ T9644] EXT4-fs (loop4): 1 orphan inode deleted [ 138.247129][ T9644] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 138.277479][ T9644] EXT4-fs (loop4): shut down requested (0) [ 138.289155][ T9662] FAULT_INJECTION: forcing a failure. [ 138.289155][ T9662] name failslab, interval 1, probability 0, space 0, times 0 [ 138.301889][ T9662] CPU: 1 UID: 0 PID: 9662 Comm: syz.0.2282 Not tainted syzkaller #0 PREEMPT(voluntary) [ 138.302000][ T9662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 138.302017][ T9662] Call Trace: [ 138.302026][ T9662] [ 138.302036][ T9662] __dump_stack+0x1d/0x30 [ 138.302063][ T9662] dump_stack_lvl+0xe8/0x140 [ 138.302133][ T9662] dump_stack+0x15/0x1b [ 138.302155][ T9662] should_fail_ex+0x265/0x280 [ 138.302199][ T9662] should_failslab+0x8c/0xb0 [ 138.302232][ T9662] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 138.302259][ T9662] ? __d_alloc+0x3d/0x340 [ 138.302326][ T9662] __d_alloc+0x3d/0x340 [ 138.302357][ T9662] ? mpol_shared_policy_init+0xbd/0x4c0 [ 138.302383][ T9662] d_alloc_pseudo+0x1e/0x80 [ 138.302422][ T9662] alloc_file_pseudo+0x71/0x160 [ 138.302518][ T9662] __shmem_file_setup+0x1de/0x210 [ 138.302557][ T9662] shmem_file_setup+0x3b/0x50 [ 138.302612][ T9662] __se_sys_memfd_create+0x2c3/0x590 [ 138.302720][ T9662] __x64_sys_memfd_create+0x31/0x40 [ 138.302746][ T9662] x64_sys_call+0x2ac2/0x3000 [ 138.302844][ T9662] do_syscall_64+0xd2/0x200 [ 138.302871][ T9662] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 138.302914][ T9662] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 138.302941][ T9662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.302963][ T9662] RIP: 0033:0x7ff5b950eec9 [ 138.302982][ T9662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.303004][ T9662] RSP: 002b:00007ff5b7f76e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 138.303044][ T9662] RAX: ffffffffffffffda RBX: 0000000000000545 RCX: 00007ff5b950eec9 [ 138.303057][ T9662] RDX: 00007ff5b7f76ef0 RSI: 0000000000000000 RDI: 00007ff5b9592960 [ 138.303071][ T9662] RBP: 0000200000001300 R08: 00007ff5b7f76bb7 R09: 00007ff5b7f76e40 [ 138.303087][ T9662] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 138.303102][ T9662] R13: 00007ff5b7f76ef0 R14: 00007ff5b7f76eb0 R15: 00002000000001c0 [ 138.303187][ T9662] [ 138.550588][ T9669] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.2283'. [ 138.636380][ T9676] loop0: detected capacity change from 0 to 512 [ 138.643667][ T9676] EXT4-fs: Ignoring removed nobh option [ 138.648067][ T9674] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2287'. [ 138.649273][ T9676] EXT4-fs: Ignoring removed orlov option [ 138.649404][ T9676] ext4: Unknown parameter 'mask' [ 138.696249][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.701154][ T9676] loop0: detected capacity change from 0 to 764 [ 138.712114][ T9676] iso9660: Unknown parameter '' [ 138.758501][ T9680] netlink: 'syz.5.2289': attribute type 4 has an invalid length. [ 138.770182][ T9680] netlink: 'syz.5.2289': attribute type 4 has an invalid length. [ 138.793338][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.844162][ T9695] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.2297'. [ 138.904262][ T9700] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2299'. [ 139.004316][ T9709] loop1: detected capacity change from 0 to 512 [ 139.010999][ T9709] EXT4-fs: Ignoring removed nobh option [ 139.016597][ T9709] EXT4-fs: Ignoring removed orlov option [ 139.022514][ T9709] ext4: Unknown parameter 'mask' [ 139.033505][ T9709] loop1: detected capacity change from 0 to 764 [ 139.040377][ T9709] iso9660: Unknown parameter '' [ 139.061794][ T9703] loop4: detected capacity change from 0 to 512 [ 139.088961][ T9703] EXT4-fs: Ignoring removed nomblk_io_submit option [ 139.117397][ T9703] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 139.174625][ T9703] EXT4-fs (loop4): 1 truncate cleaned up [ 139.190962][ T9703] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.310235][ T9719] loop0: detected capacity change from 0 to 1024 [ 139.364115][ T9719] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 139.385161][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.400467][ T9719] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 139.570140][ T9719] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 139.578487][ T9719] EXT4-fs (loop0): orphan cleanup on readonly fs [ 139.586099][ T9719] EXT4-fs error (device loop0): ext4_free_blocks:6706: comm syz.0.2307: Freeing blocks not in datazone - block = 0, count = 4096 [ 139.599715][ T9719] EXT4-fs (loop0): Remounting filesystem read-only [ 139.606301][ T9719] EXT4-fs (loop0): 1 orphan inode deleted [ 139.612730][ T9719] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 139.643681][ T9719] EXT4-fs (loop0): shut down requested (0) [ 139.777828][ T9755] loop2: detected capacity change from 0 to 512 [ 139.796389][ T9755] EXT4-fs: Ignoring removed nobh option [ 139.802005][ T9755] EXT4-fs: Ignoring removed orlov option [ 139.807880][ T9755] ext4: Unknown parameter 'mask' [ 139.820367][ T9744] loop5: detected capacity change from 0 to 512 [ 139.833324][ T9755] loop2: detected capacity change from 0 to 764 [ 139.840150][ T9755] iso9660: Unknown parameter '' [ 139.876477][ T9744] EXT4-fs error (device loop5): ext4_init_orphan_info:581: comm syz.5.2314: inode #0: comm syz.5.2314: iget: illegal inode # [ 139.917148][ T9744] EXT4-fs (loop5): get orphan inode failed [ 139.933262][ T9744] EXT4-fs (loop5): mount failed [ 140.010763][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.130692][ T9744] loop5: detected capacity change from 0 to 1024 [ 140.335738][ T9744] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.2314: Failed to acquire dquot type 0 [ 140.364650][ T9779] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.376788][ T9744] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 140.424864][ T9744] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.2314: corrupted inode contents [ 140.457279][ T9744] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #13: comm syz.5.2314: mark_inode_dirty error [ 140.471951][ T9779] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.512906][ T9744] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.2314: corrupted inode contents [ 140.535794][ T9779] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.546435][ T9744] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.2314: mark_inode_dirty error [ 140.594032][ T9784] tipc: Enabling of bearer rejected, already enabled [ 140.614550][ T9744] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.2314: corrupted inode contents [ 140.634606][ T9744] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 140.645056][ T9779] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.677894][ T9744] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.2314: corrupted inode contents [ 140.709545][ T9744] EXT4-fs error (device loop5): ext4_truncate:4637: inode #13: comm syz.5.2314: mark_inode_dirty error [ 140.744104][ T37] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.752429][ T37] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.775541][ T9744] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 140.785200][ T37] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.793506][ T37] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.821586][ T9744] EXT4-fs (loop5): 1 truncate cleaned up [ 140.862086][ T29] kauditd_printk_skb: 928 callbacks suppressed [ 140.862101][ T29] audit: type=1326 audit(4097.100:33654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9785 comm="syz.1.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b77f1eec9 code=0x7ffc0000 [ 140.880177][ T9744] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.923601][ T29] audit: type=1326 audit(4097.140:33655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9785 comm="syz.1.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b77f1eec9 code=0x7ffc0000 [ 140.946794][ T29] audit: type=1326 audit(4097.140:33656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9785 comm="syz.1.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b77f1eec9 code=0x7ffc0000 [ 140.969825][ T29] audit: type=1326 audit(4097.140:33657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9785 comm="syz.1.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b77f1eec9 code=0x7ffc0000 [ 140.992887][ T29] audit: type=1326 audit(4097.140:33658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9785 comm="syz.1.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b77f1eec9 code=0x7ffc0000 [ 141.015945][ T29] audit: type=1326 audit(4097.140:33659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9785 comm="syz.1.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b77f1eec9 code=0x7ffc0000 [ 141.038962][ T29] audit: type=1326 audit(4097.140:33660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9785 comm="syz.1.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b77f1eec9 code=0x7ffc0000 [ 141.061950][ T29] audit: type=1326 audit(4097.140:33661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9785 comm="syz.1.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b77f1eec9 code=0x7ffc0000 [ 141.084998][ T29] audit: type=1326 audit(4097.140:33662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9785 comm="syz.1.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b77f1eec9 code=0x7ffc0000 [ 141.107999][ T29] audit: type=1326 audit(4097.140:33663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9785 comm="syz.1.2327" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0b77f1eec9 code=0x7ffc0000 [ 141.144599][ T9788] loop1: detected capacity change from 0 to 512 [ 141.162585][ T9788] EXT4-fs (loop1): Invalid default hash set in the superblock [ 141.184217][ T8403] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.355410][ T9800] loop5: detected capacity change from 0 to 1024 [ 141.362603][ T9800] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 141.373006][ T9800] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 141.400621][ T9800] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 141.423821][ T9800] EXT4-fs (loop5): orphan cleanup on readonly fs [ 141.437805][ T9798] loop0: detected capacity change from 0 to 512 [ 141.454031][ T9798] EXT4-fs: Ignoring removed nomblk_io_submit option [ 141.461027][ T9798] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 141.481436][ T9800] EXT4-fs error (device loop5): ext4_free_blocks:6706: comm syz.5.2332: Freeing blocks not in datazone - block = 0, count = 4096 [ 141.530356][ T9800] EXT4-fs (loop5): Remounting filesystem read-only [ 141.563781][ T9800] EXT4-fs (loop5): 1 orphan inode deleted [ 141.601827][ T9800] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 141.622984][ T9805] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 141.674444][ T9798] EXT4-fs (loop0): 1 truncate cleaned up [ 141.680470][ T9798] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.693623][ T9800] EXT4-fs (loop5): shut down requested (0) [ 141.773836][ T9814] loop1: detected capacity change from 0 to 512 [ 141.787350][ T9814] EXT4-fs: Ignoring removed nobh option [ 141.793008][ T9814] EXT4-fs: Ignoring removed orlov option [ 141.824404][ T9814] ext4: Unknown parameter 'mask' [ 141.849665][ T9814] loop1: detected capacity change from 0 to 764 [ 141.869323][ T9814] iso9660: Unknown parameter '' [ 142.093539][ T9823] loop1: detected capacity change from 0 to 512 [ 142.147324][ T9823] EXT4-fs error (device loop1): ext4_init_orphan_info:581: comm syz.1.2340: inode #0: comm syz.1.2340: iget: illegal inode # [ 142.174224][ T8403] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.188062][ T9823] EXT4-fs (loop1): get orphan inode failed [ 142.212003][ T9823] EXT4-fs (loop1): mount failed [ 142.242077][ T9829] loop5: detected capacity change from 0 to 512 [ 142.255061][ T9829] EXT4-fs: Ignoring removed nobh option [ 142.260701][ T9829] EXT4-fs: Ignoring removed orlov option [ 142.288363][ T9829] ext4: Unknown parameter 'mask' [ 142.334425][ T9829] loop5: detected capacity change from 0 to 764 [ 142.345556][ T9829] iso9660: Unknown parameter '' [ 142.360906][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.452451][ T9837] loop5: detected capacity change from 0 to 512 [ 142.473969][ T9837] EXT4-fs: Ignoring removed nomblk_io_submit option [ 142.484748][ T9823] loop1: detected capacity change from 0 to 1024 [ 142.493657][ T9837] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 142.516539][ T9837] EXT4-fs (loop5): 1 truncate cleaned up [ 142.522767][ T9837] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 142.555032][ T9823] EXT4-fs error (device loop1): ext4_acquire_dquot:6945: comm syz.1.2340: Failed to acquire dquot type 0 [ 142.580682][ T9841] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 142.601794][ T9823] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 142.694044][ T9823] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.2340: corrupted inode contents [ 142.747163][ T9849] __nla_validate_parse: 4 callbacks suppressed [ 142.747183][ T9849] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2347'. [ 142.773414][ T9823] EXT4-fs error (device loop1): ext4_dirty_inode:6517: inode #13: comm syz.1.2340: mark_inode_dirty error [ 142.821119][ T9823] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.2340: corrupted inode contents [ 142.867475][ T9823] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.2340: mark_inode_dirty error [ 142.883957][ T8403] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.899980][ T9823] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.2340: corrupted inode contents [ 142.951687][ T9823] EXT4-fs error (device loop1) in ext4_orphan_del:301: Corrupt filesystem [ 142.975426][ T9823] EXT4-fs error (device loop1): ext4_do_update_inode:5632: inode #13: comm syz.1.2340: corrupted inode contents [ 143.017833][ T9823] EXT4-fs error (device loop1): ext4_truncate:4637: inode #13: comm syz.1.2340: mark_inode_dirty error [ 143.055455][ T9823] EXT4-fs error (device loop1) in ext4_process_orphan:343: Corrupt filesystem [ 143.069133][ T9869] FAULT_INJECTION: forcing a failure. [ 143.069133][ T9869] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 143.082316][ T9869] CPU: 0 UID: 0 PID: 9869 Comm: syz.5.2354 Not tainted syzkaller #0 PREEMPT(voluntary) [ 143.082352][ T9869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 143.082442][ T9869] Call Trace: [ 143.082449][ T9869] [ 143.082458][ T9869] __dump_stack+0x1d/0x30 [ 143.082614][ T9869] dump_stack_lvl+0xe8/0x140 [ 143.082637][ T9869] dump_stack+0x15/0x1b [ 143.082665][ T9869] should_fail_ex+0x265/0x280 [ 143.082775][ T9869] should_fail+0xb/0x20 [ 143.082818][ T9869] should_fail_usercopy+0x1a/0x20 [ 143.082841][ T9869] _copy_from_user+0x1c/0xb0 [ 143.082944][ T9869] kstrtouint_from_user+0x69/0xf0 [ 143.082983][ T9869] ? 0xffffffff81000000 [ 143.082997][ T9869] ? selinux_file_permission+0x1e4/0x320 [ 143.083030][ T9869] proc_fail_nth_write+0x50/0x160 [ 143.083081][ T9869] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 143.083180][ T9869] vfs_write+0x269/0x960 [ 143.083243][ T9869] ? vfs_read+0x4e6/0x770 [ 143.083271][ T9869] ? __rcu_read_unlock+0x4f/0x70 [ 143.083382][ T9869] ? __fget_files+0x184/0x1c0 [ 143.083419][ T9869] ksys_write+0xda/0x1a0 [ 143.083451][ T9869] __x64_sys_write+0x40/0x50 [ 143.083553][ T9869] x64_sys_call+0x2802/0x3000 [ 143.083582][ T9869] do_syscall_64+0xd2/0x200 [ 143.083615][ T9869] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 143.083648][ T9869] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 143.083691][ T9869] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.083720][ T9869] RIP: 0033:0x7f5022d7d97f [ 143.083740][ T9869] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 143.083810][ T9869] RSP: 002b:00007f50217df030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 143.083830][ T9869] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5022d7d97f [ 143.083848][ T9869] RDX: 0000000000000001 RSI: 00007f50217df0a0 RDI: 0000000000000008 [ 143.083865][ T9869] RBP: 00007f50217df090 R08: 0000000000000000 R09: 0000000000000000 [ 143.083882][ T9869] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 143.083950][ T9869] R13: 00007f5022fd6038 R14: 00007f5022fd5fa0 R15: 00007fff1448add8 [ 143.083977][ T9869] [ 143.154323][ T9872] loop0: detected capacity change from 0 to 512 [ 143.314606][ T9872] EXT4-fs: Ignoring removed nobh option [ 143.314963][ T9823] EXT4-fs (loop1): 1 truncate cleaned up [ 143.320301][ T9872] EXT4-fs: Ignoring removed orlov option [ 143.320402][ T9872] ext4: Unknown parameter 'mask' [ 143.349344][ T9871] loop0: detected capacity change from 0 to 764 [ 143.356146][ T9871] iso9660: Unknown parameter '' [ 143.372415][ T9823] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 143.520599][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.640328][ T9883] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 143.668919][ T9885] SELinux: policydb magic number 0x4c0 does not match expected magic number 0xf97cff8c [ 143.694012][ T9885] SELinux: failed to load policy [ 143.773845][ T9890] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2361'. [ 143.910332][ T9900] loop1: detected capacity change from 0 to 512 [ 143.924068][ T9900] EXT4-fs: Ignoring removed nomblk_io_submit option [ 143.938584][ T9900] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 143.964792][ T9900] EXT4-fs (loop1): 1 truncate cleaned up [ 143.971203][ T9900] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 144.013933][ T9905] FAULT_INJECTION: forcing a failure. [ 144.013933][ T9905] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 144.027215][ T9905] CPU: 0 UID: 0 PID: 9905 Comm: syz.2.2366 Not tainted syzkaller #0 PREEMPT(voluntary) [ 144.027259][ T9905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 144.027272][ T9905] Call Trace: [ 144.027278][ T9905] [ 144.027287][ T9905] __dump_stack+0x1d/0x30 [ 144.027313][ T9905] dump_stack_lvl+0xe8/0x140 [ 144.027339][ T9905] dump_stack+0x15/0x1b [ 144.027422][ T9905] should_fail_ex+0x265/0x280 [ 144.027546][ T9905] should_fail+0xb/0x20 [ 144.027588][ T9905] should_fail_usercopy+0x1a/0x20 [ 144.027617][ T9905] _copy_from_user+0x1c/0xb0 [ 144.027650][ T9905] ___sys_sendmsg+0xc1/0x1d0 [ 144.027753][ T9905] __sys_sendmmsg+0x178/0x300 [ 144.027792][ T9905] __x64_sys_sendmmsg+0x57/0x70 [ 144.027819][ T9905] x64_sys_call+0x1c4a/0x3000 [ 144.027841][ T9905] do_syscall_64+0xd2/0x200 [ 144.027926][ T9905] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 144.027978][ T9905] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 144.028008][ T9905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.028202][ T9905] RIP: 0033:0x7f023027eec9 [ 144.028222][ T9905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.028246][ T9905] RSP: 002b:00007f022ecdf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 144.028270][ T9905] RAX: ffffffffffffffda RBX: 00007f02304d5fa0 RCX: 00007f023027eec9 [ 144.028282][ T9905] RDX: 000000000000003f RSI: 00002000000000c0 RDI: 0000000000000003 [ 144.028298][ T9905] RBP: 00007f022ecdf090 R08: 0000000000000000 R09: 0000000000000000 [ 144.028375][ T9905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.028391][ T9905] R13: 00007f02304d6038 R14: 00007f02304d5fa0 R15: 00007ffd0e1dae38 [ 144.028418][ T9905] [ 144.238761][ T9911] loop2: detected capacity change from 0 to 512 [ 144.263155][ T9911] EXT4-fs: Ignoring removed nobh option [ 144.268864][ T9911] EXT4-fs: Ignoring removed orlov option [ 144.275020][ T9911] ext4: Unknown parameter 'mask' [ 144.288716][ T9911] loop2: detected capacity change from 0 to 764 [ 144.301595][ T9911] iso9660: Unknown parameter '' [ 144.362044][ T9919] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 144.405063][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.430406][ T9925] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2373'. [ 144.454606][ T9927] program syz.2.2372 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.540159][ T9934] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2377'. [ 144.608387][ T9941] FAULT_INJECTION: forcing a failure. [ 144.608387][ T9941] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 144.621694][ T9941] CPU: 1 UID: 0 PID: 9941 Comm: syz.5.2379 Not tainted syzkaller #0 PREEMPT(voluntary) [ 144.621729][ T9941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 144.621745][ T9941] Call Trace: [ 144.621751][ T9941] [ 144.621758][ T9941] __dump_stack+0x1d/0x30 [ 144.621786][ T9941] dump_stack_lvl+0xe8/0x140 [ 144.621884][ T9941] dump_stack+0x15/0x1b [ 144.621907][ T9941] should_fail_ex+0x265/0x280 [ 144.622017][ T9941] should_fail_alloc_page+0xf2/0x100 [ 144.622056][ T9941] __alloc_frozen_pages_noprof+0xff/0x360 [ 144.622157][ T9941] alloc_pages_mpol+0xb3/0x260 [ 144.622191][ T9941] folio_alloc_mpol_noprof+0x39/0x80 [ 144.622268][ T9941] shmem_get_folio_gfp+0x3cf/0xd60 [ 144.622320][ T9941] ? simple_xattr_get+0xb9/0x120 [ 144.622370][ T9941] shmem_write_begin+0xa8/0x190 [ 144.622468][ T9941] generic_perform_write+0x184/0x490 [ 144.622515][ T9941] ? _raw_spin_unlock+0x26/0x50 [ 144.622561][ T9941] shmem_file_write_iter+0xc5/0xf0 [ 144.622592][ T9941] iter_file_splice_write+0x666/0xa60 [ 144.622681][ T9941] ? __pfx_iter_file_splice_write+0x10/0x10 [ 144.622712][ T9941] direct_splice_actor+0x156/0x2a0 [ 144.622742][ T9941] ? splice_shrink_spd+0x21/0x70 [ 144.622818][ T9941] splice_direct_to_actor+0x312/0x680 [ 144.622887][ T9941] ? __pfx_direct_splice_actor+0x10/0x10 [ 144.622964][ T9941] do_splice_direct+0xda/0x150 [ 144.622993][ T9941] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 144.623032][ T9941] do_sendfile+0x380/0x650 [ 144.623143][ T9941] __x64_sys_sendfile64+0x105/0x150 [ 144.623190][ T9941] x64_sys_call+0x2bb4/0x3000 [ 144.623242][ T9941] do_syscall_64+0xd2/0x200 [ 144.623269][ T9941] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 144.623312][ T9941] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 144.623407][ T9941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.623441][ T9941] RIP: 0033:0x7f5022d7eec9 [ 144.623461][ T9941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.623487][ T9941] RSP: 002b:00007f50217df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 144.623513][ T9941] RAX: ffffffffffffffda RBX: 00007f5022fd5fa0 RCX: 00007f5022d7eec9 [ 144.623531][ T9941] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000006 [ 144.623551][ T9941] RBP: 00007f50217df090 R08: 0000000000000000 R09: 0000000000000000 [ 144.623644][ T9941] R10: 0000080000000007 R11: 0000000000000246 R12: 0000000000000001 [ 144.623658][ T9941] R13: 00007f5022fd6038 R14: 00007f5022fd5fa0 R15: 00007fff1448add8 [ 144.623684][ T9941] [ 144.880980][ T9938] loop4: detected capacity change from 0 to 512 [ 144.940748][ T9944] loop5: detected capacity change from 0 to 764 [ 144.950279][ T9943] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2380'. [ 144.950303][ T9945] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2380'. [ 144.950329][ T9945] bridge_slave_1: left allmulticast mode [ 144.968161][ T9945] bridge_slave_1: left promiscuous mode [ 144.979509][ T9945] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.988124][ T9944] rock: directory entry would overflow storage [ 144.994366][ T9944] rock: sig=0x4f50, size=4, remaining=3 [ 144.999956][ T9944] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 145.028692][ T9938] EXT4-fs error (device loop4): ext4_init_orphan_info:581: comm syz.4.2378: inode #0: comm syz.4.2378: iget: illegal inode # [ 145.051415][ T9938] EXT4-fs (loop4): get orphan inode failed [ 145.058407][ T9945] bridge_slave_0: left allmulticast mode [ 145.064130][ T9945] bridge_slave_0: left promiscuous mode [ 145.065065][ T9938] EXT4-fs (loop4): mount failed [ 145.069871][ T9945] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.173114][ T9952] loop1: detected capacity change from 0 to 512 [ 145.202894][ T9952] EXT4-fs: Ignoring removed nobh option [ 145.208700][ T9952] EXT4-fs: Ignoring removed orlov option [ 145.224323][ T9952] ext4: Unknown parameter 'mask' [ 145.244256][ T9952] loop1: detected capacity change from 0 to 764 [ 145.254047][ T9952] iso9660: Unknown parameter '' [ 145.289531][ T9960] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2385'. [ 145.301453][ T9961] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 145.347224][ T9938] loop4: detected capacity change from 0 to 1024 [ 145.359544][ T9938] /dev/loop4: Can't open blockdev [ 145.510083][ T9975] loop2: detected capacity change from 0 to 1024 [ 145.521782][ T9975] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 145.550065][ T9975] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 145.580675][ T9975] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 145.600744][ T9975] EXT4-fs (loop2): orphan cleanup on readonly fs [ 145.616873][ T9975] EXT4-fs error (device loop2): ext4_free_blocks:6706: comm syz.2.2390: Freeing blocks not in datazone - block = 0, count = 4096 [ 145.652416][ T9975] EXT4-fs (loop2): Remounting filesystem read-only [ 145.671140][ T9975] EXT4-fs (loop2): 1 orphan inode deleted [ 145.684142][ T9975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 145.712765][ T9975] EXT4-fs (loop2): shut down requested (0) [ 145.920248][ T9981] netlink: 'syz.0.2391': attribute type 1 has an invalid length. [ 145.928193][ T9981] netlink: 'syz.0.2391': attribute type 4 has an invalid length. [ 145.936024][ T9981] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2391'. [ 145.945800][ T9981] netlink: 'syz.0.2391': attribute type 1 has an invalid length. [ 145.953612][ T9981] netlink: 'syz.0.2391': attribute type 4 has an invalid length. [ 145.961403][ T9981] netlink: 9462 bytes leftover after parsing attributes in process `syz.0.2391'. [ 146.216123][ T9992] loop5: detected capacity change from 0 to 512 [ 146.226312][ T9992] EXT4-fs: Ignoring removed nobh option [ 146.232007][ T9992] EXT4-fs: Ignoring removed orlov option [ 146.257741][ T9992] ext4: Unknown parameter 'mask' [ 146.264883][ T29] kauditd_printk_skb: 939 callbacks suppressed [ 146.264900][ T29] audit: type=1400 audit(4102.510:34601): avc: denied { ioctl } for pid=9988 comm="syz.0.2395" path="socket:[28092]" dev="sockfs" ino=28092 ioctlcmd=0x2100 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 146.303946][ T9992] loop5: detected capacity change from 0 to 764 [ 146.310462][ T9992] iso9660: Unknown parameter '' [ 146.323782][ T3317] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.339796][ T9994] loop1: detected capacity change from 0 to 512 [ 146.346515][ T9994] EXT4-fs: Ignoring removed nomblk_io_submit option [ 146.353605][ T9994] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 146.377959][ T9996] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 146.400953][ T9994] EXT4-fs (loop1): 1 truncate cleaned up [ 146.425192][ T9994] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 146.513615][ T29] audit: type=1326 audit(4102.750:34602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9993 comm="syz.1.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b77f1eec9 code=0x7ffc0000 [ 146.536636][ T29] audit: type=1326 audit(4102.750:34603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9993 comm="syz.1.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b77f1eec9 code=0x7ffc0000 [ 146.559604][ T29] audit: type=1326 audit(4102.750:34604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9993 comm="syz.1.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b77f1eec9 code=0x7ffc0000 [ 146.582573][ T29] audit: type=1326 audit(4102.750:34605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9993 comm="syz.1.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b77f1eec9 code=0x7ffc0000 [ 146.605671][ T29] audit: type=1326 audit(4102.750:34606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9993 comm="syz.1.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b77f1eec9 code=0x7ffc0000 [ 146.628659][ T29] audit: type=1326 audit(4102.750:34607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9993 comm="syz.1.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f0b77f1eec9 code=0x7ffc0000 [ 146.651610][ T29] audit: type=1326 audit(4102.750:34608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9993 comm="syz.1.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b77f1eec9 code=0x7ffc0000 [ 146.674581][ T29] audit: type=1326 audit(4102.750:34609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9993 comm="syz.1.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b77f1eec9 code=0x7ffc0000 [ 146.697602][ T29] audit: type=1326 audit(4102.750:34610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9993 comm="syz.1.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0b77f1eec9 code=0x7ffc0000 [ 146.734848][T10003] loop5: detected capacity change from 0 to 512 [ 146.823000][T10003] EXT4-fs error (device loop5): ext4_init_orphan_info:581: comm syz.5.2400: inode #0: comm syz.5.2400: iget: illegal inode # [ 146.848792][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.875587][T10003] EXT4-fs (loop5): get orphan inode failed [ 146.886354][T10003] EXT4-fs (loop5): mount failed [ 147.147475][T10023] loop1: detected capacity change from 0 to 1024 [ 147.241033][T10023] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 147.303710][T10023] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 147.324027][T10023] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 147.333746][T10023] EXT4-fs (loop1): orphan cleanup on readonly fs [ 147.355466][T10003] loop5: detected capacity change from 0 to 1024 [ 147.363807][T10023] EXT4-fs error (device loop1): ext4_free_blocks:6706: comm syz.1.2406: Freeing blocks not in datazone - block = 0, count = 4096 [ 147.405594][T10023] EXT4-fs (loop1): Remounting filesystem read-only [ 147.422960][T10023] EXT4-fs (loop1): 1 orphan inode deleted [ 147.440603][T10023] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 147.456819][T10003] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.2400: Failed to acquire dquot type 0 [ 147.490302][T10023] EXT4-fs (loop1): shut down requested (0) [ 147.496586][T10003] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 147.533600][T10003] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.2400: corrupted inode contents [ 147.550368][T10003] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #13: comm syz.5.2400: mark_inode_dirty error [ 147.566348][T10003] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.2400: corrupted inode contents [ 147.582362][T10003] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.2400: mark_inode_dirty error [ 147.601655][T10032] SELinux: policydb magic number 0x4c0 does not match expected magic number 0xf97cff8c [ 147.601943][T10003] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.2400: corrupted inode contents [ 147.628086][T10032] SELinux: failed to load policy [ 147.634854][T10003] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 147.646383][T10003] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.2400: corrupted inode contents [ 147.660266][T10003] EXT4-fs error (device loop5): ext4_truncate:4637: inode #13: comm syz.5.2400: mark_inode_dirty error [ 147.682620][T10003] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 147.696846][T10003] EXT4-fs (loop5): 1 truncate cleaned up [ 147.712005][T10003] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 147.757927][ T8403] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.781948][T10038] loop5: detected capacity change from 0 to 512 [ 147.789070][T10038] EXT4-fs: Ignoring removed nobh option [ 147.794756][T10038] EXT4-fs: Ignoring removed orlov option [ 147.800516][T10038] ext4: Unknown parameter 'mask' [ 147.812064][T10038] loop5: detected capacity change from 0 to 764 [ 147.818602][T10038] iso9660: Unknown parameter '' [ 147.912551][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 147.973338][T10053] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2414'. [ 148.162865][T10056] loop1: detected capacity change from 0 to 512 [ 148.189988][T10056] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.204007][T10056] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 148.220963][T10062] FAULT_INJECTION: forcing a failure. [ 148.220963][T10062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.234144][T10062] CPU: 1 UID: 0 PID: 10062 Comm: syz.5.2417 Not tainted syzkaller #0 PREEMPT(voluntary) [ 148.234186][T10062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 148.234203][T10062] Call Trace: [ 148.234211][T10062] [ 148.234221][T10062] __dump_stack+0x1d/0x30 [ 148.234267][T10062] dump_stack_lvl+0xe8/0x140 [ 148.234292][T10062] dump_stack+0x15/0x1b [ 148.234316][T10062] should_fail_ex+0x265/0x280 [ 148.234364][T10062] should_fail+0xb/0x20 [ 148.234465][T10062] should_fail_usercopy+0x1a/0x20 [ 148.234521][T10062] _copy_from_user+0x1c/0xb0 [ 148.234631][T10062] vt_ioctl+0x98f/0x18a0 [ 148.234685][T10062] tty_ioctl+0x7d8/0xb80 [ 148.234752][T10062] ? __pfx_tty_ioctl+0x10/0x10 [ 148.234778][T10062] __se_sys_ioctl+0xce/0x140 [ 148.234803][T10062] __x64_sys_ioctl+0x43/0x50 [ 148.234848][T10062] x64_sys_call+0x1816/0x3000 [ 148.234876][T10062] do_syscall_64+0xd2/0x200 [ 148.234906][T10062] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 148.234993][T10062] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 148.235021][T10062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.235048][T10062] RIP: 0033:0x7f5022d7eec9 [ 148.235100][T10062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.235124][T10062] RSP: 002b:00007f50217df038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.235148][T10062] RAX: ffffffffffffffda RBX: 00007f5022fd5fa0 RCX: 00007f5022d7eec9 [ 148.235244][T10062] RDX: 0000200000000700 RSI: 0000000000004b72 RDI: 0000000000000007 [ 148.235260][T10062] RBP: 00007f50217df090 R08: 0000000000000000 R09: 0000000000000000 [ 148.235346][T10062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.235359][T10062] R13: 00007f5022fd6038 R14: 00007f5022fd5fa0 R15: 00007fff1448add8 [ 148.235391][T10062] [ 148.257224][T10056] EXT4-fs (loop1): 1 truncate cleaned up [ 148.429457][T10056] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 148.456069][T10072] loop2: detected capacity change from 0 to 512 [ 148.487949][T10072] EXT4-fs: Ignoring removed nobh option [ 148.493594][T10072] EXT4-fs: Ignoring removed orlov option [ 148.503659][T10072] ext4: Unknown parameter 'mask' [ 148.514165][T10072] loop2: detected capacity change from 0 to 764 [ 148.520798][T10072] iso9660: Unknown parameter '' [ 148.581821][T10077] loop2: detected capacity change from 0 to 128 [ 148.601335][T10077] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 148.601430][T10077] EXT4-fs: failed to create workqueue [ 148.613467][T10074] SELinux: ebitmap: truncated map [ 148.616428][T10077] EXT4-fs (loop2): mount failed [ 148.622621][T10074] SELinux: failed to load policy [ 148.669000][T10084] FAULT_INJECTION: forcing a failure. [ 148.669000][T10084] name failslab, interval 1, probability 0, space 0, times 0 [ 148.681705][T10084] CPU: 1 UID: 0 PID: 10084 Comm: syz.2.2424 Not tainted syzkaller #0 PREEMPT(voluntary) [ 148.681740][T10084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 148.681758][T10084] Call Trace: [ 148.681765][T10084] [ 148.681774][T10084] __dump_stack+0x1d/0x30 [ 148.681804][T10084] dump_stack_lvl+0xe8/0x140 [ 148.681878][T10084] dump_stack+0x15/0x1b [ 148.681900][T10084] should_fail_ex+0x265/0x280 [ 148.681943][T10084] should_failslab+0x8c/0xb0 [ 148.681978][T10084] kmem_cache_alloc_noprof+0x50/0x480 [ 148.682135][T10084] ? skb_clone+0x151/0x1f0 [ 148.682231][T10084] skb_clone+0x151/0x1f0 [ 148.682270][T10084] __netlink_deliver_tap+0x2c9/0x500 [ 148.682325][T10084] netlink_unicast+0x66b/0x690 [ 148.682354][T10084] netlink_sendmsg+0x58b/0x6b0 [ 148.682427][T10084] ? __pfx_netlink_sendmsg+0x10/0x10 [ 148.682456][T10084] __sock_sendmsg+0x145/0x180 [ 148.682480][T10084] ____sys_sendmsg+0x31e/0x4e0 [ 148.682630][T10084] ___sys_sendmsg+0x17b/0x1d0 [ 148.682683][T10084] __x64_sys_sendmsg+0xd4/0x160 [ 148.682716][T10084] x64_sys_call+0x191e/0x3000 [ 148.682792][T10084] do_syscall_64+0xd2/0x200 [ 148.682819][T10084] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 148.682888][T10084] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 148.682918][T10084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.682961][T10084] RIP: 0033:0x7f023027eec9 [ 148.682980][T10084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.683005][T10084] RSP: 002b:00007f022ecdf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 148.683059][T10084] RAX: ffffffffffffffda RBX: 00007f02304d5fa0 RCX: 00007f023027eec9 [ 148.683119][T10084] RDX: 0000000038000016 RSI: 00002000000001c0 RDI: 0000000000000003 [ 148.683136][T10084] RBP: 00007f022ecdf090 R08: 0000000000000000 R09: 0000000000000000 [ 148.683151][T10084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.683167][T10084] R13: 00007f02304d6038 R14: 00007f02304d5fa0 R15: 00007ffd0e1dae38 [ 148.683193][T10084] [ 148.938598][T10088] netlink: 96 bytes leftover after parsing attributes in process `syz.5.2425'. [ 148.967616][ T3314] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.137745][T10106] tipc: Started in network mode [ 149.142777][T10106] tipc: Node identity 124ebb85f189, cluster identity 4711 [ 149.149982][T10106] tipc: Enabled bearer , priority 0 [ 149.176421][T10107] tipc: Enabling of bearer rejected, already enabled [ 149.221136][T10106] tipc: Disabling bearer [ 149.439402][T10115] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 149.459571][T10118] netlink: 'syz.5.2435': attribute type 21 has an invalid length. [ 149.467561][T10118] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2435'. [ 149.477135][T10115] SELinux: failed to load policy [ 149.482196][T10118] netlink: 'syz.5.2435': attribute type 4 has an invalid length. [ 149.490029][T10118] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2435'. [ 149.536652][T10121] netlink: 'syz.2.2436': attribute type 21 has an invalid length. [ 149.554884][T10121] netlink: 'syz.2.2436': attribute type 1 has an invalid length. [ 149.803572][T10127] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2438'. [ 150.551686][T10206] loop0: detected capacity change from 0 to 1024 [ 150.564381][T10206] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 150.583521][T10206] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 150.604040][T10206] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 150.624391][T10206] EXT4-fs (loop0): orphan cleanup on readonly fs [ 150.632764][T10206] EXT4-fs error (device loop0): ext4_free_blocks:6706: comm syz.0.2445: Freeing blocks not in datazone - block = 0, count = 4096 [ 150.646814][T10206] EXT4-fs (loop0): Remounting filesystem read-only [ 150.653441][T10206] EXT4-fs (loop0): 1 orphan inode deleted [ 150.659756][T10206] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 150.684308][T10206] EXT4-fs (loop0): shut down requested (0) [ 150.818614][T10247] loop1: detected capacity change from 0 to 128 [ 150.837659][T10249] xt_TCPMSS: Only works on TCP SYN packets [ 150.955169][T10258] loop5: detected capacity change from 0 to 512 [ 150.971749][T10258] EXT4-fs: Ignoring removed nobh option [ 150.977529][T10258] EXT4-fs: Ignoring removed orlov option [ 150.987856][T10258] ext4: Unknown parameter 'mask' [ 151.015194][T10258] loop5: detected capacity change from 0 to 764 [ 151.027713][T10258] iso9660: Unknown parameter '' [ 151.164540][T10274] loop4: detected capacity change from 0 to 512 [ 151.171230][T10274] EXT4-fs: Ignoring removed nomblk_io_submit option [ 151.178220][T10274] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 151.214884][T10274] EXT4-fs (loop4): 1 truncate cleaned up [ 151.231261][T10274] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.311763][ T29] kauditd_printk_skb: 371 callbacks suppressed [ 151.311781][ T29] audit: type=1326 audit(4107.550:34980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10266 comm="syz.4.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525b1eeec9 code=0x7ffc0000 [ 151.341110][ T29] audit: type=1326 audit(4107.550:34981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10266 comm="syz.4.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525b1eeec9 code=0x7ffc0000 [ 151.364241][ T29] audit: type=1326 audit(4107.550:34982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10266 comm="syz.4.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525b1eeec9 code=0x7ffc0000 [ 151.387399][ T29] audit: type=1326 audit(4107.550:34983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10266 comm="syz.4.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525b1eeec9 code=0x7ffc0000 [ 151.410510][ T29] audit: type=1326 audit(4107.550:34984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10266 comm="syz.4.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525b1eeec9 code=0x7ffc0000 [ 151.433572][ T29] audit: type=1326 audit(4107.550:34985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10266 comm="syz.4.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f525b1eeec9 code=0x7ffc0000 [ 151.456537][ T29] audit: type=1326 audit(4107.550:34986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10266 comm="syz.4.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525b1eeec9 code=0x7ffc0000 [ 151.479583][ T29] audit: type=1326 audit(4107.550:34987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10266 comm="syz.4.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525b1eeec9 code=0x7ffc0000 [ 151.502670][ T29] audit: type=1326 audit(4107.550:34988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10266 comm="syz.4.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f525b1eeec9 code=0x7ffc0000 [ 151.525735][ T29] audit: type=1326 audit(4107.550:34989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10266 comm="syz.4.2458" exe="/root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f525b1eeec9 code=0x7ffc0000 [ 151.685037][T10291] ip6tnl1: entered promiscuous mode [ 151.690378][T10291] ip6tnl1: entered allmulticast mode [ 151.696218][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.775940][T10297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2466'. [ 151.799173][T10297] lo speed is unknown, defaulting to 1000 [ 151.826069][T10297] lo speed is unknown, defaulting to 1000 [ 151.832428][T10297] lo speed is unknown, defaulting to 1000 [ 151.844713][T10297] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 151.871740][T10297] lo speed is unknown, defaulting to 1000 [ 151.890161][T10297] lo speed is unknown, defaulting to 1000 [ 151.901620][T10297] lo speed is unknown, defaulting to 1000 [ 151.922820][T10297] lo speed is unknown, defaulting to 1000 [ 151.932975][T10307] loop1: detected capacity change from 0 to 1024 [ 151.939344][T10297] lo speed is unknown, defaulting to 1000 [ 151.947968][T10305] loop5: detected capacity change from 0 to 512 [ 151.967706][T10305] EXT4-fs error (device loop5): ext4_init_orphan_info:581: comm syz.5.2467: inode #0: comm syz.5.2467: iget: illegal inode # [ 151.982164][T10305] EXT4-fs (loop5): get orphan inode failed [ 151.990697][T10305] EXT4-fs (loop5): mount failed [ 152.028699][T10310] loop0: detected capacity change from 0 to 512 [ 152.035229][T10307] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 152.035420][T10310] EXT4-fs: Ignoring removed nobh option [ 152.049540][T10310] EXT4-fs: Ignoring removed orlov option [ 152.059677][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.075257][T10307] loop1: detected capacity change from 0 to 128 [ 152.081957][T10310] ext4: Unknown parameter 'mask' [ 152.088882][T10307] FAT-fs (loop1): error, corrupted file size (i_pos 548, 512) [ 152.096501][T10307] FAT-fs (loop1): Filesystem has been set read-only [ 152.101297][T10310] loop0: detected capacity change from 0 to 764 [ 152.110825][T10310] iso9660: Unknown parameter '' [ 152.221339][T10305] loop5: detected capacity change from 0 to 1024 [ 152.283383][T10324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2474'. [ 152.294756][T10325] netlink: 'syz.1.2475': attribute type 11 has an invalid length. [ 152.317758][T10326] loop4: detected capacity change from 0 to 1024 [ 152.332424][T10326] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 152.341759][T10305] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.2467: Failed to acquire dquot type 0 [ 152.367989][T10326] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 152.402050][T10305] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 152.427227][T10305] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.2467: corrupted inode contents [ 152.465705][T10326] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 152.473998][T10326] EXT4-fs (loop4): orphan cleanup on readonly fs [ 152.493909][T10326] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.2476: Freeing blocks not in datazone - block = 0, count = 4096 [ 152.525948][T10305] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #13: comm syz.5.2467: mark_inode_dirty error [ 152.551172][T10326] EXT4-fs (loop4): Remounting filesystem read-only [ 152.551740][T10305] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.2467: corrupted inode contents [ 152.562328][T10326] EXT4-fs (loop4): 1 orphan inode deleted [ 152.583804][T10305] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.2467: mark_inode_dirty error [ 152.605578][T10326] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 152.618370][T10305] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.2467: corrupted inode contents [ 152.652289][T10326] EXT4-fs (loop4): shut down requested (0) [ 152.659806][T10305] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 152.680542][T10305] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.2467: corrupted inode contents [ 152.707852][T10305] EXT4-fs error (device loop5): ext4_truncate:4637: inode #13: comm syz.5.2467: mark_inode_dirty error [ 152.727546][T10305] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 152.747026][T10305] EXT4-fs (loop5): 1 truncate cleaned up [ 152.754923][T10348] loop2: detected capacity change from 0 to 1024 [ 152.778739][T10305] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.812270][T10348] bond1: entered promiscuous mode [ 152.817501][T10348] bond1: entered allmulticast mode [ 152.824340][T10348] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.842142][T10348] bond1 (unregistering): Released all slaves [ 152.910855][ T8403] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.999697][T10367] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2487'. [ 153.008738][T10367] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2487'. [ 153.017847][T10367] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2487'. [ 153.106680][T10375] loop0: detected capacity change from 0 to 512 [ 153.114093][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.123952][T10375] EXT4-fs: Ignoring removed nobh option [ 153.129593][T10375] EXT4-fs: Ignoring removed orlov option [ 153.157953][T10375] ext4: Unknown parameter 'mask' [ 153.187926][T10375] loop0: detected capacity change from 0 to 764 [ 153.215574][T10375] iso9660: Unknown parameter '' [ 153.254252][T10391] FAULT_INJECTION: forcing a failure. [ 153.254252][T10391] name failslab, interval 1, probability 0, space 0, times 0 [ 153.267084][T10391] CPU: 1 UID: 0 PID: 10391 Comm: syz.5.2493 Not tainted syzkaller #0 PREEMPT(voluntary) [ 153.267116][T10391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 153.267131][T10391] Call Trace: [ 153.267137][T10391] [ 153.267146][T10391] __dump_stack+0x1d/0x30 [ 153.267246][T10391] dump_stack_lvl+0xe8/0x140 [ 153.267306][T10391] dump_stack+0x15/0x1b [ 153.267325][T10391] should_fail_ex+0x265/0x280 [ 153.267363][T10391] ? __pfx_sock_alloc_inode+0x10/0x10 [ 153.267513][T10391] should_failslab+0x8c/0xb0 [ 153.267546][T10391] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 153.267581][T10391] ? sock_alloc_inode+0x34/0xa0 [ 153.267678][T10391] ? __pfx_sock_alloc_inode+0x10/0x10 [ 153.267729][T10391] sock_alloc_inode+0x34/0xa0 [ 153.267772][T10391] alloc_inode+0x40/0x170 [ 153.267800][T10391] __sock_create+0x122/0x5b0 [ 153.267892][T10391] sock_create_kern+0x38/0x50 [ 153.267914][T10391] udp_sock_create4+0x66/0x2a0 [ 153.267946][T10391] rxrpc_lookup_local+0x824/0xc70 [ 153.268017][T10391] rxrpc_sendmsg+0x2f3/0x590 [ 153.268049][T10391] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 153.268103][T10391] __sock_sendmsg+0x145/0x180 [ 153.268147][T10391] ____sys_sendmsg+0x31e/0x4e0 [ 153.268249][T10391] ___sys_sendmsg+0x17b/0x1d0 [ 153.268292][T10391] __x64_sys_sendmsg+0xd4/0x160 [ 153.268437][T10391] x64_sys_call+0x191e/0x3000 [ 153.268462][T10391] do_syscall_64+0xd2/0x200 [ 153.268489][T10391] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 153.268528][T10391] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 153.268557][T10391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.268584][T10391] RIP: 0033:0x7f5022d7eec9 [ 153.268598][T10391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.268618][T10391] RSP: 002b:00007f50217df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.268642][T10391] RAX: ffffffffffffffda RBX: 00007f5022fd5fa0 RCX: 00007f5022d7eec9 [ 153.268701][T10391] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000008 [ 153.268718][T10391] RBP: 00007f50217df090 R08: 0000000000000000 R09: 0000000000000000 [ 153.268733][T10391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.268765][T10391] R13: 00007f5022fd6038 R14: 00007f5022fd5fa0 R15: 00007fff1448add8 [ 153.268788][T10391] [ 153.268795][T10391] socket: no more sockets [ 153.457623][T10398] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2488'. [ 153.571308][T10407] loop0: detected capacity change from 0 to 256 [ 153.585099][T10407] FAT-fs (loop0): Directory bread(block 64) failed [ 153.603607][T10407] FAT-fs (loop0): Directory bread(block 65) failed [ 153.619452][T10407] FAT-fs (loop0): Directory bread(block 66) failed [ 153.638873][T10415] loop5: detected capacity change from 0 to 512 [ 153.673978][T10415] EXT4-fs: Ignoring removed nomblk_io_submit option [ 153.693721][T10407] FAT-fs (loop0): Directory bread(block 67) failed [ 153.700607][T10415] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 153.712099][T10407] FAT-fs (loop0): Directory bread(block 68) failed [ 153.724885][T10415] EXT4-fs (loop5): 1 truncate cleaned up [ 153.731033][T10415] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.747597][T10407] FAT-fs (loop0): Directory bread(block 69) failed [ 153.811810][T10407] FAT-fs (loop0): Directory bread(block 70) failed [ 153.924244][T10407] FAT-fs (loop0): Directory bread(block 71) failed [ 153.930904][T10407] FAT-fs (loop0): Directory bread(block 72) failed [ 153.962595][T10468] loop2: detected capacity change from 0 to 512 [ 153.969040][T10407] FAT-fs (loop0): Directory bread(block 73) failed [ 153.984241][T10468] EXT4-fs: Ignoring removed nomblk_io_submit option [ 154.003936][T10407] process 'syz.0.2496' launched '/dev/fd/4' with NULL argv: empty string added [ 154.017652][T10407] bio_check_eod: 14246 callbacks suppressed [ 154.017669][T10407] syz.0.2496: attempt to access beyond end of device [ 154.017669][T10407] loop0: rw=524288, sector=1736, nr_sectors = 32 limit=256 [ 154.021593][T10468] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 154.034614][T10407] syz.0.2496: attempt to access beyond end of device [ 154.034614][T10407] loop0: rw=0, sector=1736, nr_sectors = 8 limit=256 [ 154.061409][T10468] EXT4-fs (loop2): 1 truncate cleaned up [ 154.073369][T10468] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.235934][T10473] loop0: detected capacity change from 0 to 512 [ 154.255272][T10473] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 154.287926][T10473] EXT4-fs (loop0): 1 truncate cleaned up [ 154.310100][T10473] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 154.561571][ T8403] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.713745][T10491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2508'. [ 154.724239][T10491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2508'. [ 154.733119][T10491] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2508'. [ 154.742299][T10491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2508'. [ 154.751199][T10491] netlink: 348 bytes leftover after parsing attributes in process `syz.2.2508'. [ 154.773705][T10491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2508'. [ 154.803199][T10493] lo speed is unknown, defaulting to 1000 [ 154.942965][T10508] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=44816 sclass=netlink_tcpdiag_socket pid=10508 comm=syz.5.2511 [ 154.956271][T10508] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2560 sclass=netlink_tcpdiag_socket pid=10508 comm=syz.5.2511 [ 155.049740][T10508] netlink: 'syz.5.2511': attribute type 5 has an invalid length. [ 155.128819][T10514] FAULT_INJECTION: forcing a failure. [ 155.128819][T10514] name failslab, interval 1, probability 0, space 0, times 0 [ 155.141505][T10514] CPU: 1 UID: 0 PID: 10514 Comm: syz.5.2513 Not tainted syzkaller #0 PREEMPT(voluntary) [ 155.141593][T10514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 155.141606][T10514] Call Trace: [ 155.141612][T10514] [ 155.141620][T10514] __dump_stack+0x1d/0x30 [ 155.141645][T10514] dump_stack_lvl+0xe8/0x140 [ 155.141668][T10514] dump_stack+0x15/0x1b [ 155.141688][T10514] should_fail_ex+0x265/0x280 [ 155.141827][T10514] should_failslab+0x8c/0xb0 [ 155.141860][T10514] kmem_cache_alloc_node_noprof+0x57/0x4a0 [ 155.141894][T10514] ? __alloc_skb+0x101/0x320 [ 155.142021][T10514] __alloc_skb+0x101/0x320 [ 155.142045][T10514] netlink_ack+0xfd/0x500 [ 155.142076][T10514] ? __pfx_taskstats_user_cmd+0x10/0x10 [ 155.142131][T10514] netlink_rcv_skb+0x192/0x220 [ 155.142155][T10514] ? __pfx_genl_rcv_msg+0x10/0x10 [ 155.142210][T10514] genl_rcv+0x28/0x40 [ 155.142230][T10514] netlink_unicast+0x5c0/0x690 [ 155.142308][T10514] netlink_sendmsg+0x58b/0x6b0 [ 155.142337][T10514] ? __pfx_netlink_sendmsg+0x10/0x10 [ 155.142415][T10514] __sock_sendmsg+0x145/0x180 [ 155.142440][T10514] ____sys_sendmsg+0x31e/0x4e0 [ 155.142473][T10514] ___sys_sendmsg+0x17b/0x1d0 [ 155.142528][T10514] __x64_sys_sendmsg+0xd4/0x160 [ 155.142665][T10514] x64_sys_call+0x191e/0x3000 [ 155.142692][T10514] do_syscall_64+0xd2/0x200 [ 155.142720][T10514] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 155.142753][T10514] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 155.142784][T10514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.142805][T10514] RIP: 0033:0x7f5022d7eec9 [ 155.142826][T10514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.142845][T10514] RSP: 002b:00007f50217df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 155.142942][T10514] RAX: ffffffffffffffda RBX: 00007f5022fd5fa0 RCX: 00007f5022d7eec9 [ 155.142958][T10514] RDX: 000000000000c800 RSI: 0000200000000000 RDI: 0000000000000005 [ 155.142973][T10514] RBP: 00007f50217df090 R08: 0000000000000000 R09: 0000000000000000 [ 155.142988][T10514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 155.143020][T10514] R13: 00007f5022fd6038 R14: 00007f5022fd5fa0 R15: 00007fff1448add8 [ 155.143041][T10514] [ 155.426929][T10520] SELinux: ebitmap: truncated map [ 155.447419][T10520] SELinux: failed to load policy [ 155.614511][T10537] SELinux: policydb magic number 0x4c0 does not match expected magic number 0xf97cff8c [ 155.633646][T10537] SELinux: failed to load policy [ 155.673526][T10522] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 155.723344][T10549] loop4: detected capacity change from 0 to 1024 [ 155.730392][T10549] EXT4-fs: quotafile must be on filesystem root [ 155.737943][T10547] 9pnet_fd: p9_fd_create_unix (10547): problem connecting socket: ./file0: -2 [ 155.751128][T10549] loop4: detected capacity change from 0 to 2048 [ 155.797435][T10549] Alternate GPT is invalid, using primary GPT. [ 155.803894][T10549] loop4: p2 p3 p7 [ 155.817437][ T3418] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 155.824978][ T3418] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 155.832498][ T3418] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 155.839921][ T3418] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 155.847361][ T3418] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 155.854804][ T3418] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 155.862199][ T3418] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 155.869640][ T3418] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 155.877076][ T3418] hid-generic 0003:0003:0000.0002: unknown main item tag 0x1 [ 155.884496][ T3418] hid-generic 0003:0003:0000.0002: unknown main item tag 0x0 [ 155.893741][ T3418] hid-generic 0003:0003:0000.0002: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 156.008775][T10566] veth0: entered promiscuous mode [ 156.024507][T10566] loop4: detected capacity change from 0 to 2048 [ 156.048262][T10566] veth0: left promiscuous mode [ 156.092657][T10571] loop4: detected capacity change from 0 to 512 [ 156.113427][T10571] EXT4-fs error (device loop4): ext4_init_orphan_info:581: comm syz.4.2534: inode #0: comm syz.4.2534: iget: illegal inode # [ 156.128537][T10571] EXT4-fs (loop4): get orphan inode failed [ 156.136457][T10571] EXT4-fs (loop4): mount failed [ 156.197937][T10571] loop4: detected capacity change from 0 to 1024 [ 156.217120][T10571] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2534: Failed to acquire dquot type 0 [ 156.232436][T10577] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 156.240123][T10571] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 156.264381][T10571] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.2534: corrupted inode contents [ 156.267870][T10579] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 156.294813][T10571] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #13: comm syz.4.2534: mark_inode_dirty error [ 156.322269][T10571] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.2534: corrupted inode contents [ 156.341708][T10571] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.2534: mark_inode_dirty error [ 156.358039][T10571] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.2534: corrupted inode contents [ 156.371953][T10571] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 156.390540][T10571] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.2534: corrupted inode contents [ 156.395454][T10589] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1013 sclass=netlink_route_socket pid=10589 comm=syz.1.2539 [ 156.404566][T10571] EXT4-fs error (device loop4): ext4_truncate:4637: inode #13: comm syz.4.2534: mark_inode_dirty error [ 156.429010][T10571] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 156.450532][T10571] EXT4-fs (loop4): 1 truncate cleaned up [ 156.475728][T10596] loop0: detected capacity change from 0 to 512 [ 156.489045][T10594] pim6reg: entered allmulticast mode [ 156.502897][T10594] pim6reg: left allmulticast mode [ 156.527564][T10601] loop5: detected capacity change from 0 to 4096 [ 156.534317][T10601] EXT4-fs: Ignoring removed nomblk_io_submit option [ 156.552727][ T29] kauditd_printk_skb: 877 callbacks suppressed [ 156.552749][ T29] audit: type=1400 audit(4112.790:35863): avc: denied { create } for pid=10595 comm="syz.0.2541" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 156.592156][ T29] audit: type=1400 audit(4112.820:35864): avc: denied { create } for pid=10595 comm="syz.0.2541" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 156.627427][T10607] SELinux: ebitmap: truncated map [ 156.633826][T10607] SELinux: failed to load policy [ 156.642228][T10609] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 156.683538][ T29] audit: type=1326 audit(4112.920:35865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10615 comm="syz.5.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5022d7eec9 code=0x7ffc0000 [ 156.706897][ T29] audit: type=1326 audit(4112.920:35866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10615 comm="syz.5.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5022d7eec9 code=0x7ffc0000 [ 156.730367][ T29] audit: type=1326 audit(4112.920:35867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10615 comm="syz.5.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5022d7eec9 code=0x7ffc0000 [ 156.753526][ T29] audit: type=1326 audit(4112.920:35868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10615 comm="syz.5.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f5022d7eec9 code=0x7ffc0000 [ 156.777132][ T29] audit: type=1326 audit(4112.920:35869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10615 comm="syz.5.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5022d7eec9 code=0x7ffc0000 [ 156.800464][ T29] audit: type=1326 audit(4112.920:35870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10615 comm="syz.5.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f5022d7eec9 code=0x7ffc0000 [ 156.823588][ T29] audit: type=1326 audit(4112.920:35871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10615 comm="syz.5.2545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5022d7eec9 code=0x7ffc0000 [ 157.004130][T10637] loop5: detected capacity change from 0 to 512 [ 157.018018][T10637] EXT4-fs error (device loop5): ext4_init_orphan_info:581: comm syz.5.2554: inode #0: comm syz.5.2554: iget: illegal inode # [ 157.032430][T10637] EXT4-fs (loop5): get orphan inode failed [ 157.039041][T10637] EXT4-fs (loop5): mount failed [ 157.101463][T10637] loop5: detected capacity change from 0 to 1024 [ 157.115753][T10637] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5 [ 157.125556][T10637] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.2554: Failed to acquire dquot type 0 [ 157.138619][T10637] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 157.153963][T10637] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.2554: corrupted inode contents [ 157.166802][T10637] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #13: comm syz.5.2554: mark_inode_dirty error [ 157.179541][T10637] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.2554: corrupted inode contents [ 157.192026][T10637] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.2554: mark_inode_dirty error [ 157.204031][T10637] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.2554: corrupted inode contents [ 157.216613][T10637] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 157.226098][T10637] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.2554: corrupted inode contents [ 157.238499][T10637] EXT4-fs error (device loop5): ext4_truncate:4637: inode #13: comm syz.5.2554: mark_inode_dirty error [ 157.249956][T10637] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 157.260609][T10637] EXT4-fs (loop5): 1 truncate cleaned up [ 157.338042][T10643] SELinux: policydb magic number 0x4c0 does not match expected magic number 0xf97cff8c [ 157.348094][T10643] SELinux: failed to load policy [ 157.530218][T10653] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 157.726919][T10670] loop2: detected capacity change from 0 to 512 [ 157.745021][T10670] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c018, mo2=0003] [ 157.758644][T10670] System zones: 1-12 [ 157.762877][T10670] EXT4-fs (loop2): orphan cleanup on readonly fs [ 157.769778][T10670] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.2564: corrupted inode contents [ 157.782151][T10670] EXT4-fs error (device loop2) in ext4_orphan_del:301: Corrupt filesystem [ 157.791152][T10670] EXT4-fs error (device loop2): ext4_do_update_inode:5632: inode #15: comm syz.2.2564: corrupted inode contents [ 157.803685][T10670] EXT4-fs error (device loop2): ext4_evict_inode:302: inode #15: comm syz.2.2564: mark_inode_dirty error [ 157.815247][T10670] EXT4-fs (loop2): 1 orphan inode deleted [ 157.957611][T10682] loop2: detected capacity change from 0 to 512 [ 157.965776][T10682] EXT4-fs (loop2): orphan cleanup on readonly fs [ 157.972784][T10682] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2567: bg 0: block 248: padding at end of block bitmap is not set [ 157.987588][T10682] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.2567: Failed to acquire dquot type 1 [ 157.999610][T10682] EXT4-fs (loop2): 1 truncate cleaned up [ 158.039972][T10688] loop4: detected capacity change from 0 to 1024 [ 158.041211][T10689] loop2: detected capacity change from 0 to 1024 [ 158.047232][T10688] EXT4-fs (loop4): couldn't mount as ext3 due to feature incompatibilities [ 158.069560][T10688] loop4: detected capacity change from 0 to 128 [ 158.080054][T10688] FAT-fs (loop4): error, corrupted file size (i_pos 548, 512) [ 158.087602][T10688] FAT-fs (loop4): Filesystem has been set read-only [ 158.176855][T10697] loop4: detected capacity change from 0 to 1024 [ 158.188524][T10697] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 158.199344][T10697] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 158.211268][T10699] __nla_validate_parse: 13 callbacks suppressed [ 158.211301][T10699] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2572'. [ 158.222751][T10697] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 158.235512][T10697] EXT4-fs (loop4): orphan cleanup on readonly fs [ 158.242112][T10697] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.2570: Freeing blocks not in datazone - block = 0, count = 4096 [ 158.256107][T10697] EXT4-fs (loop4): Remounting filesystem read-only [ 158.262680][T10697] EXT4-fs (loop4): 1 orphan inode deleted [ 158.274447][T10697] EXT4-fs (loop4): shut down requested (0) [ 158.293973][T10705] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 158.350800][T10711] FAULT_INJECTION: forcing a failure. [ 158.350800][T10711] name failslab, interval 1, probability 0, space 0, times 0 [ 158.363579][T10711] CPU: 1 UID: 0 PID: 10711 Comm: syz.5.2576 Not tainted syzkaller #0 PREEMPT(voluntary) [ 158.363614][T10711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 158.363638][T10711] Call Trace: [ 158.363645][T10711] [ 158.363654][T10711] __dump_stack+0x1d/0x30 [ 158.363721][T10711] dump_stack_lvl+0xe8/0x140 [ 158.363754][T10711] dump_stack+0x15/0x1b [ 158.363777][T10711] should_fail_ex+0x265/0x280 [ 158.363822][T10711] ? __pfx_sock_alloc_inode+0x10/0x10 [ 158.364001][T10711] should_failslab+0x8c/0xb0 [ 158.364032][T10711] kmem_cache_alloc_lru_noprof+0x55/0x490 [ 158.364061][T10711] ? sock_alloc_inode+0x34/0xa0 [ 158.364089][T10711] ? __pfx_sock_alloc_inode+0x10/0x10 [ 158.364130][T10711] sock_alloc_inode+0x34/0xa0 [ 158.364156][T10711] alloc_inode+0x40/0x170 [ 158.364187][T10711] __sock_create+0x122/0x5b0 [ 158.364263][T10711] ? __rcu_read_unlock+0x4f/0x70 [ 158.364298][T10711] ? bpf_trace_run4+0x134/0x1d0 [ 158.364358][T10711] sock_create_kern+0x38/0x50 [ 158.364386][T10711] udp_sock_create4+0x66/0x2a0 [ 158.364436][T10711] rxrpc_lookup_local+0x824/0xc70 [ 158.364472][T10711] rxrpc_sendmsg+0x2f3/0x590 [ 158.364513][T10711] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 158.364606][T10711] __sock_sendmsg+0x145/0x180 [ 158.364639][T10711] ____sys_sendmsg+0x31e/0x4e0 [ 158.364679][T10711] ___sys_sendmsg+0x17b/0x1d0 [ 158.364777][T10711] __x64_sys_sendmsg+0xd4/0x160 [ 158.364812][T10711] x64_sys_call+0x191e/0x3000 [ 158.364838][T10711] do_syscall_64+0xd2/0x200 [ 158.364867][T10711] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 158.364965][T10711] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 158.364988][T10711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.365008][T10711] RIP: 0033:0x7f5022d7eec9 [ 158.365088][T10711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.365111][T10711] RSP: 002b:00007f50217df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.365134][T10711] RAX: ffffffffffffffda RBX: 00007f5022fd5fa0 RCX: 00007f5022d7eec9 [ 158.365178][T10711] RDX: 0000000004000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 158.365194][T10711] RBP: 00007f50217df090 R08: 0000000000000000 R09: 0000000000000000 [ 158.365225][T10711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.365242][T10711] R13: 00007f5022fd6038 R14: 00007f5022fd5fa0 R15: 00007fff1448add8 [ 158.365267][T10711] [ 158.365277][T10711] socket: no more sockets [ 158.684475][T10720] FAULT_INJECTION: forcing a failure. [ 158.684475][T10720] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.697666][T10720] CPU: 1 UID: 0 PID: 10720 Comm: syz.5.2579 Not tainted syzkaller #0 PREEMPT(voluntary) [ 158.697710][T10720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 158.697724][T10720] Call Trace: [ 158.697731][T10720] [ 158.697798][T10720] __dump_stack+0x1d/0x30 [ 158.697823][T10720] dump_stack_lvl+0xe8/0x140 [ 158.697847][T10720] dump_stack+0x15/0x1b [ 158.697875][T10720] should_fail_ex+0x265/0x280 [ 158.698012][T10720] should_fail+0xb/0x20 [ 158.698060][T10720] should_fail_usercopy+0x1a/0x20 [ 158.698083][T10720] _copy_from_iter+0xd2/0xe80 [ 158.698105][T10720] ? __build_skb_around+0x1ab/0x200 [ 158.698132][T10720] ? __alloc_skb+0x223/0x320 [ 158.698196][T10720] netlink_sendmsg+0x471/0x6b0 [ 158.698233][T10720] ? __pfx_netlink_sendmsg+0x10/0x10 [ 158.698267][T10720] __sock_sendmsg+0x145/0x180 [ 158.698285][T10720] ____sys_sendmsg+0x31e/0x4e0 [ 158.698332][T10720] ___sys_sendmsg+0x17b/0x1d0 [ 158.698429][T10720] __x64_sys_sendmsg+0xd4/0x160 [ 158.698566][T10720] x64_sys_call+0x191e/0x3000 [ 158.698660][T10720] do_syscall_64+0xd2/0x200 [ 158.698758][T10720] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 158.698794][T10720] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 158.698825][T10720] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.698854][T10720] RIP: 0033:0x7f5022d7eec9 [ 158.698874][T10720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 158.698952][T10720] RSP: 002b:00007f50217df038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 158.698977][T10720] RAX: ffffffffffffffda RBX: 00007f5022fd5fa0 RCX: 00007f5022d7eec9 [ 158.698994][T10720] RDX: 0000000000044000 RSI: 0000200000000540 RDI: 0000000000000003 [ 158.699011][T10720] RBP: 00007f50217df090 R08: 0000000000000000 R09: 0000000000000000 [ 158.699078][T10720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.699142][T10720] R13: 00007f5022fd6038 R14: 00007f5022fd5fa0 R15: 00007fff1448add8 [ 158.699161][T10720] [ 158.704962][T10718] SELinux: ebitmap: truncated map [ 158.837517][ T3317] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /501/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 158.871623][T10718] SELinux: failed to load policy [ 158.939093][ T3317] EXT4-fs error (device loop2): ext4_empty_dir:3086: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 159.002050][T10737] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.016029][ T3317] EXT4-fs warning (device loop2): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 159.043921][ T3317] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /501/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 159.097117][T10741] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2584'. [ 159.112764][ T3317] EXT4-fs error (device loop2): ext4_empty_dir:3086: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 159.118250][T10747] loop9: detected capacity change from 0 to 7 [ 159.132998][T10737] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.138402][T10747] Buffer I/O error on dev loop9, logical block 0, async page read [ 159.156478][T10747] Buffer I/O error on dev loop9, logical block 0, async page read [ 159.164392][T10747] loop9: unable to read partition table [ 159.177727][T10747] loop_reread_partitions: partition scan of loop9 (被xڬdGݡ [ 159.177727][T10747] ) failed (rc=-5) [ 159.191309][ T3317] EXT4-fs warning (device loop2): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 159.204331][ T3317] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /501/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 159.226087][ T3317] EXT4-fs error (device loop2): ext4_empty_dir:3086: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 159.253810][ T3317] EXT4-fs warning (device loop2): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 159.265991][ T3317] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /501/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 159.288118][ T3317] EXT4-fs error (device loop2): ext4_empty_dir:3086: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 159.309450][T10737] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.320554][ T3317] EXT4-fs warning (device loop2): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 159.332814][ T3317] EXT4-fs error (device loop2): ext4_readdir:264: inode #11: block 32: comm syz-executor: path /501/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 159.355551][ T3317] EXT4-fs error (device loop2): ext4_empty_dir:3086: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1 [ 159.377086][T10737] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.391511][ T3317] EXT4-fs warning (device loop2): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 159.434508][ T31] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.463641][ T31] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.482199][ T3317] EXT4-fs warning (device loop2): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 159.484254][ T31] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.513644][ T3317] EXT4-fs warning (device loop2): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 159.528912][ T3317] EXT4-fs warning (device loop2): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 159.540545][ T31] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.579549][ T3317] EXT4-fs warning (device loop2): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 159.601816][ T3317] EXT4-fs warning (device loop2): ext4_empty_dir:3089: inode #11: comm syz-executor: directory missing '.' [ 159.638444][ T23] kernel read not supported for file /450/statm (pid: 23 comm: kworker/1:0) [ 159.722339][T10777] SELinux: ebitmap: truncated map [ 159.730688][T10777] SELinux: failed to load policy [ 160.128522][ T31] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.216179][ T31] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.236438][T10809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2605'. [ 160.258394][T10809] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2605'. [ 160.275724][ T31] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.315106][T10816] loop0: detected capacity change from 0 to 1024 [ 160.322071][T10816] EXT4-fs: Ignoring removed orlov option [ 160.336031][ T31] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.350007][T10803] lo speed is unknown, defaulting to 1000 [ 160.420688][T10803] chnl_net:caif_netlink_parms(): no params data found [ 160.438715][T10829] loop4: detected capacity change from 0 to 512 [ 160.463310][T10829] EXT4-fs error (device loop4): ext4_init_orphan_info:581: comm syz.4.2609: inode #0: comm syz.4.2609: iget: illegal inode # [ 160.484709][T10829] EXT4-fs (loop4): get orphan inode failed [ 160.494883][T10829] EXT4-fs (loop4): mount failed [ 160.494933][T10803] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.494963][T10803] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.495102][T10803] bridge_slave_0: entered allmulticast mode [ 160.495594][T10803] bridge_slave_0: entered promiscuous mode [ 160.527599][T10803] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.534692][T10803] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.541848][T10803] bridge_slave_1: entered allmulticast mode [ 160.591135][T10803] bridge_slave_1: entered promiscuous mode [ 160.626461][T10829] loop4: detected capacity change from 0 to 1024 [ 160.637337][ T31] bridge_slave_1: left allmulticast mode [ 160.643029][ T31] bridge_slave_1: left promiscuous mode [ 160.648707][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.700448][ T31] bridge_slave_0: left allmulticast mode [ 160.706178][ T31] bridge_slave_0: left promiscuous mode [ 160.711981][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.726936][T10829] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2609: Failed to acquire dquot type 0 [ 160.742199][T10829] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 160.758725][ T31] tipc: Resetting bearer [ 160.765571][T10829] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.2609: corrupted inode contents [ 160.785039][T10829] EXT4-fs error (device loop4): ext4_dirty_inode:6517: inode #13: comm syz.4.2609: mark_inode_dirty error [ 160.807884][ T31] tipc: Disabling bearer [ 160.816834][T10829] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.2609: corrupted inode contents [ 160.846235][T10829] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #13: comm syz.4.2609: mark_inode_dirty error [ 160.866003][T10829] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.2609: corrupted inode contents [ 160.879053][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.879562][T10829] EXT4-fs error (device loop4) in ext4_orphan_del:301: Corrupt filesystem [ 160.897290][ T31] bond_slave_0: left allmulticast mode [ 160.903202][T10829] EXT4-fs error (device loop4): ext4_do_update_inode:5632: inode #13: comm syz.4.2609: corrupted inode contents [ 160.917056][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.926316][ T31] bond_slave_1: left allmulticast mode [ 160.926515][T10829] EXT4-fs error (device loop4): ext4_truncate:4637: inode #13: comm syz.4.2609: mark_inode_dirty error [ 160.932909][ T31] bond0 (unregistering): Released all slaves [ 160.953769][T10803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.965628][T10803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.977142][T10829] EXT4-fs error (device loop4) in ext4_process_orphan:343: Corrupt filesystem [ 161.002803][T10829] EXT4-fs (loop4): 1 truncate cleaned up [ 161.003774][T10803] team0: Port device team_slave_0 added [ 161.020496][ T31] tipc: Disabling bearer [ 161.025683][ T31] tipc: Left network mode [ 161.033338][T10803] team0: Port device team_slave_1 added [ 161.048974][ T31] hsr_slave_0: left promiscuous mode [ 161.054843][ T31] hsr_slave_1: left promiscuous mode [ 161.062616][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.070183][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.078804][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.086315][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.097593][ T31] batman_adv: batadv0: Interface deactivated: veth1_vlan [ 161.104750][ T31] batman_adv: batadv0: Removing interface: veth1_vlan [ 161.116109][ T31] veth1_macvtap: left promiscuous mode [ 161.121676][ T31] veth0_macvtap: left promiscuous mode [ 161.127512][ T31] veth1_vlan: left promiscuous mode [ 161.132819][ T31] veth0_vlan: left promiscuous mode [ 161.166445][T10868] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2618'. [ 161.214532][ T31] team0 (unregistering): Port device team_slave_1 removed [ 161.225879][ T31] team0 (unregistering): Port device team_slave_0 removed [ 161.261125][ T31] team0 (unregistering): Port device dummy0 removed [ 161.273992][T10875] loop4: detected capacity change from 0 to 512 [ 161.280730][T10875] EXT4-fs: Ignoring removed nomblk_io_submit option [ 161.287763][T10875] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 161.299065][T10803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.300027][T10875] EXT4-fs (loop4): 1 truncate cleaned up [ 161.306078][T10803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.326365][T10875] EXT4-fs mount: 24 callbacks suppressed [ 161.326386][T10875] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 161.337715][T10803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.376121][T10803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.383115][T10803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 161.409126][T10803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.443734][T10803] hsr_slave_0: entered promiscuous mode [ 161.454254][T10803] hsr_slave_1: entered promiscuous mode [ 161.460161][T10803] debugfs: 'hsr0' already exists in 'hsr' [ 161.465948][T10803] Cannot create hsr debugfs directory [ 161.554950][ T29] kauditd_printk_skb: 420 callbacks suppressed [ 161.554968][ T29] audit: type=1326 audit(4117.790:36287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.4.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f525b221785 code=0x7ffc0000 [ 161.584276][ T29] audit: type=1326 audit(4117.800:36288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.4.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f525b221785 code=0x7ffc0000 [ 161.594095][T10893] SELinux: policydb magic number 0x4c0 does not match expected magic number 0xf97cff8c [ 161.594119][T10893] SELinux: failed to load policy [ 161.604395][ T29] audit: type=1326 audit(4117.800:36289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.4.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f525b221785 code=0x7ffc0000 [ 161.655072][ T29] audit: type=1326 audit(4117.800:36290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.4.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f525b221785 code=0x7ffc0000 [ 161.678235][ T29] audit: type=1326 audit(4117.800:36291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.4.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f525b221785 code=0x7ffc0000 [ 161.701324][ T29] audit: type=1326 audit(4117.800:36292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.4.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f525b221785 code=0x7ffc0000 [ 161.724389][ T29] audit: type=1326 audit(4117.800:36293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.4.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f525b221785 code=0x7ffc0000 [ 161.747483][ T29] audit: type=1326 audit(4117.800:36294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.4.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f525b221785 code=0x7ffc0000 [ 161.770562][ T29] audit: type=1326 audit(4117.800:36295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.4.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f525b221785 code=0x7ffc0000 [ 161.793706][ T29] audit: type=1326 audit(4117.800:36296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10869 comm="syz.4.2619" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f525b221785 code=0x7ffc0000 [ 161.849604][T10803] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 161.859452][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 161.861214][T10803] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 161.897071][T10803] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 161.906565][T10803] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 161.987715][T10803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.999302][T10803] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.015740][T10233] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.022839][T10233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.039448][T10230] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.046561][T10230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.057145][T10916] FAULT_INJECTION: forcing a failure. [ 162.057145][T10916] name failslab, interval 1, probability 0, space 0, times 0 [ 162.069880][T10916] CPU: 0 UID: 0 PID: 10916 Comm: syz.4.2631 Not tainted syzkaller #0 PREEMPT(voluntary) [ 162.069913][T10916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 162.069987][T10916] Call Trace: [ 162.069994][T10916] [ 162.070001][T10916] __dump_stack+0x1d/0x30 [ 162.070023][T10916] dump_stack_lvl+0xe8/0x140 [ 162.070043][T10916] dump_stack+0x15/0x1b [ 162.070059][T10916] should_fail_ex+0x265/0x280 [ 162.070095][T10916] ? alloc_fs_context+0x44/0x4e0 [ 162.070118][T10916] should_failslab+0x8c/0xb0 [ 162.070148][T10916] __kmalloc_cache_noprof+0x4c/0x4a0 [ 162.070203][T10916] alloc_fs_context+0x44/0x4e0 [ 162.070227][T10916] fs_context_for_mount+0x22/0x30 [ 162.070250][T10916] do_new_mount+0xea/0x660 [ 162.070272][T10916] ? security_capable+0x83/0x90 [ 162.070335][T10916] path_mount+0x4a5/0xb70 [ 162.070356][T10916] ? user_path_at+0x109/0x130 [ 162.070458][T10916] __se_sys_mount+0x28c/0x2e0 [ 162.070481][T10916] ? fput+0x8f/0xc0 [ 162.070513][T10916] __x64_sys_mount+0x67/0x80 [ 162.070564][T10916] x64_sys_call+0x2b51/0x3000 [ 162.070587][T10916] do_syscall_64+0xd2/0x200 [ 162.070613][T10916] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 162.070721][T10916] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 162.070744][T10916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.070766][T10916] RIP: 0033:0x7f525b1eeec9 [ 162.070835][T10916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.070854][T10916] RSP: 002b:00007f5259c4f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 162.070950][T10916] RAX: ffffffffffffffda RBX: 00007f525b445fa0 RCX: 00007f525b1eeec9 [ 162.070964][T10916] RDX: 0000200000000300 RSI: 00002000000002c0 RDI: 0000000000000000 [ 162.070980][T10916] RBP: 00007f5259c4f090 R08: 00002000000004c0 R09: 0000000000000000 [ 162.071064][T10916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.071077][T10916] R13: 00007f525b446038 R14: 00007f525b445fa0 R15: 00007ffc67010f28 [ 162.071096][T10916] [ 162.300566][T10918] SELinux: policydb magic number 0x4c0 does not match expected magic number 0xf97cff8c [ 162.324463][T10918] SELinux: failed to load policy [ 162.366793][T10803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.418768][T10928] loop0: detected capacity change from 0 to 512 [ 162.434308][T10928] EXT4-fs: Ignoring removed nomblk_io_submit option [ 162.451423][T10928] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 162.471410][T10928] EXT4-fs (loop0): 1 truncate cleaned up [ 162.484489][T10928] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 162.502966][T10936] cgroup: release_agent respecified [ 162.507191][T10941] lo speed is unknown, defaulting to 1000 [ 162.603689][T10803] veth0_vlan: entered promiscuous mode [ 162.611914][T10803] veth1_vlan: entered promiscuous mode [ 162.634845][T10803] veth0_macvtap: entered promiscuous mode [ 162.647913][T10803] veth1_macvtap: entered promiscuous mode [ 162.663121][T10803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.675028][T10803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.699460][T10233] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.723256][T10233] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.764257][T10233] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.780800][T10233] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.796313][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.945308][T10974] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10974 comm=syz.6.2642 [ 163.015234][T10981] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2645'. [ 163.017235][T10979] SELinux: ebitmap: truncated map [ 163.025217][T10981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2645'. [ 163.030356][T10979] SELinux: failed to load policy [ 163.060938][T10981] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2645'. [ 163.280107][T10996] loop0: detected capacity change from 0 to 4096 [ 163.291521][T10996] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 163.563611][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 163.674493][T11001] loop0: detected capacity change from 0 to 2048 [ 163.696399][T11001] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none. [ 163.909382][T11016] loop5: detected capacity change from 0 to 1024 [ 163.934421][T11016] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 163.955048][T11016] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 164.174264][T11016] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 164.216416][T11016] EXT4-fs (loop5): orphan cleanup on readonly fs [ 164.281749][T11016] EXT4-fs error (device loop5): ext4_free_blocks:6706: comm syz.5.2653: Freeing blocks not in datazone - block = 0, count = 4096 [ 164.374669][T11016] EXT4-fs (loop5): Remounting filesystem read-only [ 164.411662][T11016] EXT4-fs (loop5): 1 orphan inode deleted [ 164.417722][T11022] loop6: detected capacity change from 0 to 8192 [ 164.424553][T11016] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 164.449334][T11014] EXT4-fs (loop5): shut down requested (0) [ 164.455413][T11001] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 164.472218][T11001] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 164.484783][T11001] EXT4-fs (loop0): This should not happen!! Data will be lost [ 164.484783][T11001] [ 164.494607][T11001] EXT4-fs (loop0): Total free blocks count 0 [ 164.500829][T11001] EXT4-fs (loop0): Free/Dirty block details [ 164.506842][T11001] EXT4-fs (loop0): free_blocks=2415919104 [ 164.512583][T11001] EXT4-fs (loop0): dirty_blocks=4864 [ 164.517909][T11001] EXT4-fs (loop0): Block reservation details [ 164.524041][T11001] EXT4-fs (loop0): i_reserved_data_blocks=304 [ 164.588794][ T8403] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 164.603880][ T2313] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 2050 with max blocks 2048 with error 28 [ 164.729540][T11035] loop5: detected capacity change from 0 to 512 [ 164.767193][T11046] loop0: detected capacity change from 0 to 512 [ 164.784358][T11035] EXT4-fs error (device loop5): ext4_init_orphan_info:581: comm syz.5.2659: inode #0: comm syz.5.2659: iget: illegal inode # [ 164.801591][T11035] EXT4-fs (loop5): get orphan inode failed [ 164.810883][T11046] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 164.824167][T11035] EXT4-fs (loop5): mount failed [ 164.925758][T11035] loop5: detected capacity change from 0 to 1024 [ 164.966511][T11035] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.2659: Failed to acquire dquot type 0 [ 164.984701][T11035] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 165.001721][T11035] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.2659: corrupted inode contents [ 165.016021][T11035] EXT4-fs error (device loop5): ext4_dirty_inode:6517: inode #13: comm syz.5.2659: mark_inode_dirty error [ 165.032521][T11035] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.2659: corrupted inode contents [ 165.046661][T11035] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.2659: mark_inode_dirty error [ 165.061124][T11035] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.2659: corrupted inode contents [ 165.076436][T11035] EXT4-fs error (device loop5) in ext4_orphan_del:301: Corrupt filesystem [ 165.087294][T11035] EXT4-fs error (device loop5): ext4_do_update_inode:5632: inode #13: comm syz.5.2659: corrupted inode contents [ 165.101057][T11035] EXT4-fs error (device loop5): ext4_truncate:4637: inode #13: comm syz.5.2659: mark_inode_dirty error [ 165.117524][T11035] EXT4-fs error (device loop5) in ext4_process_orphan:343: Corrupt filesystem [ 165.132750][T11035] EXT4-fs (loop5): 1 truncate cleaned up [ 165.147369][T11035] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 165.165795][T11065] Invalid ELF header magic: != ELF [ 165.191080][ T8403] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.541770][T11087] lo speed is unknown, defaulting to 1000 [ 165.613927][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 165.636080][T11087] chnl_net:caif_netlink_parms(): no params data found [ 165.721417][T11087] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.728848][T11087] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.758387][T11087] bridge_slave_0: entered allmulticast mode [ 165.764937][T11087] bridge_slave_0: entered promiscuous mode [ 165.784125][T11087] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.791262][T11087] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.798568][T11087] bridge_slave_1: entered allmulticast mode [ 165.805159][T11087] bridge_slave_1: entered promiscuous mode [ 165.836038][T11087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.852580][T11116] loop4: detected capacity change from 0 to 164 [ 165.861341][T11087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.887671][T11116] ISOFS: unable to read i-node block [ 165.889787][T11118] SELinux: ebitmap: truncated map [ 165.895270][T11116] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 165.910289][T11087] team0: Port device team_slave_0 added [ 165.917150][T11118] SELinux: failed to load policy [ 165.917418][T11087] team0: Port device team_slave_1 added [ 165.944999][T11087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.952071][T11087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.978084][T11087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.003842][T11087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.010831][T11087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.036796][T11087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.075910][T11087] hsr_slave_0: entered promiscuous mode [ 166.082098][T11087] hsr_slave_1: entered promiscuous mode [ 166.088478][T11087] debugfs: 'hsr0' already exists in 'hsr' [ 166.094318][T11087] Cannot create hsr debugfs directory [ 166.128080][T11137] x_tables: unsorted underflow at hook 3 [ 166.150860][T11137] netlink: 100 bytes leftover after parsing attributes in process `syz.6.2691'. [ 166.187917][T11141] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2692'. [ 166.226588][T11087] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.248439][T11145] FAULT_INJECTION: forcing a failure. [ 166.248439][T11145] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.261664][T11145] CPU: 0 UID: 0 PID: 11145 Comm: syz.6.2693 Not tainted syzkaller #0 PREEMPT(voluntary) [ 166.261753][T11145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 166.261770][T11145] Call Trace: [ 166.261779][T11145] [ 166.261789][T11145] __dump_stack+0x1d/0x30 [ 166.261816][T11145] dump_stack_lvl+0xe8/0x140 [ 166.261841][T11145] dump_stack+0x15/0x1b [ 166.261857][T11145] should_fail_ex+0x265/0x280 [ 166.261973][T11145] should_fail+0xb/0x20 [ 166.262078][T11145] should_fail_usercopy+0x1a/0x20 [ 166.262161][T11145] _copy_from_iter+0xd2/0xe80 [ 166.262185][T11145] ? __rcu_read_unlock+0x4f/0x70 [ 166.262232][T11145] ? mntput_no_expire+0x6f/0x440 [ 166.262281][T11145] copy_page_from_iter+0x178/0x2a0 [ 166.262314][T11145] tun_get_user+0x679/0x26e0 [ 166.262354][T11145] ? ref_tracker_alloc+0x1f2/0x2f0 [ 166.262501][T11145] tun_chr_write_iter+0x15e/0x210 [ 166.262536][T11145] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 166.262606][T11145] vfs_write+0x52a/0x960 [ 166.262644][T11145] ksys_write+0xda/0x1a0 [ 166.262675][T11145] __x64_sys_write+0x40/0x50 [ 166.262762][T11145] x64_sys_call+0x2802/0x3000 [ 166.262783][T11145] do_syscall_64+0xd2/0x200 [ 166.262807][T11145] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 166.262833][T11145] ? irqentry_exit_to_user_mode+0x7b/0xa0 [ 166.262878][T11145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.262913][T11145] RIP: 0033:0x7f9c176ed97f [ 166.263007][T11145] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 166.263031][T11145] RSP: 002b:00007f9c1614f000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 166.263056][T11145] RAX: ffffffffffffffda RBX: 00007f9c17945fa0 RCX: 00007f9c176ed97f [ 166.263074][T11145] RDX: 00000000000000b0 RSI: 0000200000000680 RDI: 00000000000000c8 [ 166.263091][T11145] RBP: 00007f9c1614f090 R08: 0000000000000000 R09: 0000000000000000 [ 166.263105][T11145] R10: 00000000000000b0 R11: 0000000000000293 R12: 0000000000000001 [ 166.263122][T11145] R13: 00007f9c17946038 R14: 00007f9c17945fa0 R15: 00007ffeef4a85d8 [ 166.263142][T11145] [ 166.475078][T11087] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.485263][T11145] x_tables: unsorted underflow at hook 3 [ 166.492330][T11145] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2693'. [ 166.504241][T11145] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 166.511736][T11145] macvlan2: entered allmulticast mode [ 166.517185][T11145] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 166.530511][T11153] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2695'. [ 166.541620][T11087] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.555708][T11155] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2696'. [ 166.599462][T11087] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.618757][T11161] loop6: detected capacity change from 0 to 1024 [ 166.625735][T11161] EXT4-fs: Ignoring removed orlov option [ 166.631422][T11161] EXT4-fs: Ignoring removed nomblk_io_submit option [ 166.645471][T11161] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 166.676793][T11087] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 166.699446][T11087] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 166.710863][T10803] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.723525][T11087] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 166.743306][T11087] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 166.766449][T11165] loop0: detected capacity change from 0 to 8192 [ 166.772855][ T29] kauditd_printk_skb: 666 callbacks suppressed [ 166.772871][ T29] audit: type=1400 audit(4123.010:36961): avc: denied { nlmsg_read } for pid=11166 comm="syz.6.2701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 166.858580][ T29] audit: type=1400 audit(4123.100:36962): avc: denied { ioctl } for pid=11175 comm="syz.6.2702" path="socket:[31310]" dev="sockfs" ino=31310 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 166.893170][T11087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.893927][T11178] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2704'. [ 166.906827][T11087] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.923156][ T2313] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.930323][ T2313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.946850][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.954057][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.994244][ T29] audit: type=1400 audit(4123.240:36963): avc: denied { write } for pid=11175 comm="syz.6.2702" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 167.027974][T11185] loop4: detected capacity change from 0 to 512 [ 167.044019][T11185] EXT4-fs: Ignoring removed nobh option [ 167.049990][T11185] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 167.073347][T11185] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 214 vs 220 free clusters [ 167.092128][T11191] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2706'. [ 167.107919][T11185] EXT4-fs (loop4): 1 truncate cleaned up [ 167.114249][T11185] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 167.123862][ T29] audit: type=1400 audit(4123.330:36964): avc: denied { ioctl } for pid=11189 comm="syz.0.2706" path="pid:[4026532368]" dev="nsfs" ino=4026532368 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 167.198580][T11087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.266459][T11185] bond2: entered promiscuous mode [ 167.271584][T11185] bond2: entered allmulticast mode [ 167.293327][T11185] 8021q: adding VLAN 0 to HW filter on device bond2 [ 167.300086][ T29] audit: type=1326 audit(4123.490:36965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11201 comm="syz.6.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c176eeec9 code=0x7ffc0000 [ 167.323254][ T29] audit: type=1326 audit(4123.490:36966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11201 comm="syz.6.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c176eeec9 code=0x7ffc0000 [ 167.346358][ T29] audit: type=1326 audit(4123.490:36967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11201 comm="syz.6.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c176eeec9 code=0x7ffc0000 [ 167.369425][ T29] audit: type=1326 audit(4123.490:36968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11201 comm="syz.6.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c176eeec9 code=0x7ffc0000 [ 167.392616][ T29] audit: type=1326 audit(4123.490:36969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11201 comm="syz.6.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c176eeec9 code=0x7ffc0000 [ 167.415743][ T29] audit: type=1326 audit(4123.490:36970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11201 comm="syz.6.2710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c176eeec9 code=0x7ffc0000 [ 167.452657][T11205] SELinux: ebitmap: truncated map [ 167.463476][T11205] SELinux: failed to load policy [ 167.524134][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.568419][T11087] veth0_vlan: entered promiscuous mode [ 167.601627][T11087] veth1_vlan: entered promiscuous mode [ 167.651425][T11087] veth0_macvtap: entered promiscuous mode [ 167.669407][T11087] veth1_macvtap: entered promiscuous mode [ 167.719624][T11087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.753401][T11087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.788569][ T293] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.807847][ T293] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.849994][ T293] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.882648][ T293] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.088166][ T293] bridge_slave_1: left allmulticast mode [ 168.093935][ T293] bridge_slave_1: left promiscuous mode [ 168.099628][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.155220][ T293] bridge_slave_0: left allmulticast mode [ 168.160921][ T293] bridge_slave_0: left promiscuous mode [ 168.166704][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.205692][ T293] tipc: Resetting bearer [ 168.400440][T11245] loop0: detected capacity change from 0 to 512 [ 168.417446][T11245] EXT4-fs: Ignoring removed nomblk_io_submit option [ 168.444415][T11245] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 168.468925][ T293] tipc: Disabling bearer [ 168.490117][T11245] EXT4-fs (loop0): 1 truncate cleaned up [ 168.509472][T11245] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.536252][ T293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.546405][ T293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.556555][T11250] loop5: detected capacity change from 0 to 512 [ 168.564636][ T293] bond0 (unregistering): Released all slaves [ 168.573996][ T293] bond1 (unregistering): Released all slaves [ 168.582744][ T293] bond2 (unregistering): Released all slaves [ 168.583075][T11250] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 168.630847][ T293] tipc: Disabling bearer [ 168.635985][ T293] tipc: Left network mode [ 168.661312][T11250] EXT4-fs error (device loop5): ext4_xattr_block_get:597: inode #15: comm syz.5.2721: corrupted xattr block 33: invalid ea_ino [ 168.675867][ T293] hsr_slave_0: left promiscuous mode [ 168.685301][ T293] hsr_slave_1: left promiscuous mode [ 168.690935][ T293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.698416][ T293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.703754][T11250] EXT4-fs (loop5): Remounting filesystem read-only [ 168.712114][T11250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 168.726671][ T293] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.734250][ T293] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.741261][T11250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 168.751138][T11250] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 168.771445][T11260] loop4: detected capacity change from 0 to 512 [ 168.782610][ T293] veth1_macvtap: left promiscuous mode [ 168.782843][ T8403] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.860818][ T293] veth0_macvtap: left promiscuous mode [ 168.874204][T11267] loop4: detected capacity change from 0 to 1024 [ 168.881951][T11267] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 168.890734][ T293] veth1_vlan: left promiscuous mode [ 168.898474][T11266] loop5: detected capacity change from 0 to 164 [ 168.901290][T11267] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 168.909342][ T293] veth0_vlan: left promiscuous mode [ 168.923498][T11266] ISOFS: unable to read i-node block [ 168.929866][T11267] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 168.931040][ T3310] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 168.946972][T11266] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 168.948378][T11267] EXT4-fs (loop4): orphan cleanup on readonly fs [ 168.956101][T11266] ================================================================== [ 168.963800][T11267] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.2725: Freeing blocks not in datazone - block = 0, count = 4096 [ 168.970441][T11266] BUG: KCSAN: data-race in console_flush_all / console_flush_all [ 168.984001][T11267] EXT4-fs (loop4): Remounting filesystem read-only [ 168.991418][T11266] [ 168.991428][T11266] write to 0xffffffff86a24088 of 8 bytes by task 11267 on cpu 0: [ 169.007972][T11266] console_flush_all+0x35b/0x6a0 [ 169.013023][T11266] console_unlock+0xa1/0x2e0 [ 169.017633][T11266] vprintk_emit+0x3b5/0x580 [ 169.022179][T11266] vprintk_default+0x26/0x30 [ 169.026779][T11266] vprintk+0x1d/0x30 [ 169.030694][T11266] _printk+0x79/0xa0 [ 169.034602][T11266] __ext4_msg+0x18f/0x1a0 [ 169.038933][T11266] ext4_orphan_cleanup+0x304/0xa00 [ 169.044061][T11266] ext4_fill_super+0x3483/0x3810 [ 169.049006][T11266] get_tree_bdev_flags+0x291/0x300 [ 169.054134][T11266] get_tree_bdev+0x1f/0x30 [ 169.058560][T11266] ext4_get_tree+0x1c/0x30 [ 169.062977][T11266] vfs_get_tree+0x57/0x1d0 [ 169.067396][T11266] do_new_mount+0x24d/0x660 [ 169.071902][T11266] path_mount+0x4a5/0xb70 [ 169.076239][T11266] __se_sys_mount+0x28c/0x2e0 [ 169.080941][T11266] __x64_sys_mount+0x67/0x80 [ 169.085544][T11266] x64_sys_call+0x2b51/0x3000 [ 169.090221][T11266] do_syscall_64+0xd2/0x200 [ 169.094734][T11266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.100627][T11266] [ 169.102950][T11266] read to 0xffffffff86a24088 of 8 bytes by task 11266 on cpu 1: [ 169.110580][T11266] console_flush_all+0x528/0x6a0 [ 169.115578][T11266] console_unlock+0xa1/0x2e0 [ 169.120177][T11266] vprintk_emit+0x3b5/0x580 [ 169.124695][T11266] vprintk_default+0x26/0x30 [ 169.129292][T11266] vprintk+0x1d/0x30 [ 169.133197][T11266] _printk+0x79/0xa0 [ 169.137126][T11266] isofs_fill_super+0x1199/0x1270 [ 169.142153][T11266] get_tree_bdev_flags+0x291/0x300 [ 169.147278][T11266] get_tree_bdev+0x1f/0x30 [ 169.151705][T11266] isofs_get_tree+0x1c/0x30 [ 169.156215][T11266] vfs_get_tree+0x57/0x1d0 [ 169.160637][T11266] do_new_mount+0x24d/0x660 [ 169.165146][T11266] path_mount+0x4a5/0xb70 [ 169.169512][T11266] __se_sys_mount+0x28c/0x2e0 [ 169.174199][T11266] __x64_sys_mount+0x67/0x80 [ 169.178798][T11266] x64_sys_call+0x2b51/0x3000 [ 169.183492][T11266] do_syscall_64+0xd2/0x200 [ 169.188004][T11266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.193899][T11266] [ 169.196218][T11266] value changed: 0x0000000000001a31 -> 0x0000000000001a32 [ 169.203329][T11266] [ 169.205652][T11266] Reported by Kernel Concurrency Sanitizer on: [ 169.211809][T11266] CPU: 1 UID: 0 PID: 11266 Comm: syz.5.2724 Not tainted syzkaller #0 PREEMPT(voluntary) [ 169.221617][T11266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 169.231680][T11266] ================================================================== [ 169.240835][T11267] EXT4-fs (loop4): 1 orphan inode deleted [ 169.247003][T11267] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 169.264055][T11267] EXT4-fs (loop4): shut down requested (0) [ 169.342697][ T293] team0 (unregistering): Port device team_slave_1 removed [ 169.359763][ T293] team0 (unregistering): Port device team_slave_0 removed [ 169.392045][ T293] team0 (unregistering): Port device dummy0 removed [ 169.422273][ T1037] infiniband syz1: ib_query_port failed (-19) [ 169.657187][ T3311] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.