last executing test programs: 10m54.139941871s ago: executing program 0 (id=4425): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@multicast2, @multicast1}, &(0x7f00000004c0)=0xc) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r3 = socket(0x18, 0x800, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'vcan0\x00'}}, 0x1e) sendfile(r3, r2, 0x0, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r1, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000640)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000680)=[0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc6, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000780), &(0x7f0000000800), 0x8, 0x89, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) write$evdev(r4, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) semget$private(0x0, 0x4, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x100) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) set_robust_list(&(0x7f0000000640)={0x0, 0x6, &(0x7f0000000480)}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getresuid(&(0x7f0000000180), &(0x7f0000000300), 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff}, 0x800) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000580)=@proc={0x10, 0x0, 0x25dfdbfd, 0x200}, 0xc, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB, @ANYRES32, @ANYBLOB="516d769c39dc2c3beda68a7e0afa19727afbdfa00c63a2251758449e0760c35cd4c4ed2fd8ed391d29402c3fa567122c2ce16dbd4d1970dab6f5ee", @ANYRES8=r11, @ANYRES32=0xffffffffffffffff, @ANYRES16=0xffffffffffffffff, @ANYRESOCT=r8, @ANYRES16=r9], 0x50, 0x24040094}, 0x80) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000b80)=ANY=[@ANYRESDEC=r14, @ANYRES32=0x0, @ANYBLOB="024dbb00c1494e33667df83442c89a1ae323e0a30d18af975af659764ab7d343951309a2f9b8627984d9b59b180a2a9a97c8c7a5586bf1a0a3d845f6f2b5bce60fe70dafd3c5072fcf6d7edbf60eb01333999fab103557102b2071531b6ed232347af52947928397f238badf6a2db52ad1477cf3e53abe8796110f5c234610ac0c13dc57ed198292a1e581b55a1d2bbd6eaeba8a02311ae12cc9df25e3481616746ee537e9bcc7f1e4468dae05", @ANYBLOB="020002", @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB, @ANYRES64, @ANYRESOCT, @ANYBLOB="0200", @ANYRES8, @ANYBLOB="02000200", @ANYRESDEC=r12, @ANYRES8=r11, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b66492", @ANYRESDEC=r13, @ANYRESDEC, @ANYRES64, @ANYBLOB="00000800000000000000aa8f3fa177eab6b2334f0df8", @ANYRES32=0xee00], 0x94, 0x1) 10m53.983296943s ago: executing program 0 (id=4428): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x105042, 0x48) r1 = eventfd(0x0) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000000)={0x0, 0xec25, 0x0, 0x2, 0x40000333}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4000, @fd_index=0x4, 0x0, &(0x7f0000000300)=[{&(0x7f0000001800)=""/211, 0xd3}], 0x1}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff}, 0x13) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000340)='ufshcd_upiu\x00', r6, 0x0, 0xfffffffffffffffd}, 0xffffffffffffff3b) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)=ANY=[]) read$eventfd(r1, &(0x7f0000000240), 0x8) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x33}, 0x1, 0x0, 0x0, 0x4008811}, 0x2400c090) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1c, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x3, 0x0, 0x1}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x401}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x51}, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000001100)="02965d1f5ec3de3d", 0x8}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000000000850000000400000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xf, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000f00)='kfree\x00', r10}, 0x18) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'lo\x00'}) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) 10m53.849464463s ago: executing program 0 (id=4432): r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x34120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) mlock2(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000000080)="1c0000006d0081044e81f782db1f4cb9041c1d0800fe007c05e8fe55", 0x1c}], 0x1}, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x110e22fff6) 10m53.793609518s ago: executing program 0 (id=4435): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x930, &(0x7f0000000800)) ptrace$poke(0x21, r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x58f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50) 10m53.490156653s ago: executing program 0 (id=4440): r0 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000000)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000380)='asymmetric\x00', &(0x7f00000003c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfff7fdfc, {0x0, 0x0, 0x0, r2, {0xb}, {0xffff}, {0x4, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x4a) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$iso9660(&(0x7f0000000cc0), &(0x7f0000000180)='./file0\x00', 0x1004081, &(0x7f0000000b40)=ANY=[@ANYRESOCT=r2, @ANYBLOB="c0da5b74006e9c47add458a1bd748b7ffa5628dc52f84873cbe6a43cfd29e4198255a0610d383b0e46b2b6457282a9f3caef22979e54c145e6a0ce2850a890af7c4e1fa3628453c70aae32270b0042f1532cf08030eccdca96e2c97aae42cf5d9ec5f0afa4fcc53c8f9289677038d09ae2b1bd2271e0a76e6324df3a2b01a9ed0277d7e8d6f7d463ae62692faa55bdb43dc2bea18eea4a635951fd0a220a835fa24d0700c8f8c245d1d7638b2cae5ed3bec0d2f0415ddff7884bb34ab0cb1598e9c7b92a29005e4090ede480b3412f5c33da5e7c8672bda19fd3d989f8336d69d9e70de142973e7e1f53987b2d"], 0x10, 0x803, &(0x7f0000002080)="$eJzs3U9oHOfZAPBnFMl2FD5/Id9HPmMcZ2znA5s6yu4qUSpySDerkTzJalfsropNKYmJ5WAsJyEhpDGlqS9JWwqlpx7TXEMuubUUWuih7anQHHrpoRDIpSUtLZSWUlDZ2V1rJeuP/8hyan4/4X1n33nmnfedHe+zs9LMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQSW2mVConUc8bi6fTzdVmWs35LeYP2vvZmmKL9UYk3X+xb18c6FUd+N/V2Q92H47God6zQ7GvW+yLy/c9eP9T/zM6Mlh+iw7drCObzxobfpJEfLPbqYtnl5eXXrsNHdlF3/lJf2LfdS/yj5Xu41zWyNvNfL46l6V5u5lOT02VHjs1205n83rWPtPuZPNprZVVO81Werx2Ii1PT0+m2cSZ5mJjbqZazwaVTz5aKZWm0mcnFrJqq91sPPbsRLt2Kq/X88ZcEVMpvRndmCe7O+JzeSftZNX5ND1/YXlpcruudoPKa2r2rtlxDj1y/6dvfPLXC0vdHXKzRpL+jlkplyuV8tQT0088WSqNVkqVtRWldeJqRIxEdCNuy07LnXXfBnWj/T3mmhkRK/+9M2/ecItG+vk/6pFHIxbjdKSRxkjxuPozFrWYiVY0Y777/Ldj6+Zfk////7E//Xqr9Q7n/0GWP7A6+2AU+f9w79nhzfJ/f93dN+f1/bnpn9HN2mp82OvNcN3r8VZcjotxNpZjOZbitZtZ4571rd7Gn5GdbW8usmhEHu1oRh7zUS1q0n5NGtMxFVNRiufjVMxGO9KYjTzqkUU7zkQ7OpEVe1QtWpFFNTrRjFakcTxqcSLSKMd0TMdkpJHFRJyJZixGI+ZiJqpFK+fjQrHdJ9f168FvvPDjl37z6Xvd6atB5S0GknQ/zHWD/rJF0DXp/gbyfzdipL9370pOYpfsu8FXdYfeueHWrRT5f/ROdwMAAAC4jZLi2/ckIsbioWJqNq9nX7nT3QIAAAB2UPF3zYe6xVh36qFIusf/pQ0iP971vgEAAAA7IynOsUsiYjwe7k0NTpfa6EsAAAAA4D9Q8fv/w91iPOLtosLxPwAAANxlvrXZNfY/2dO/xm57YW/y0z9HqzWWXFk4/UhyqdqNq166p7dcv/jy1RY7sweT/f1GimJq9PJ9SUSM1rJDyeDql//a2ys/Kx4Prl6AcLNr/SfbdCC27kDxLL4bR3oxR871ynODOb21jM/m9Wyi1qw/VU76X4503nj5wteiGP63G/P7kzh/YXlp4sVXls8VfbnSbeXKpf7l4ZPBUhG9Eyq26MtKfwvEQxuPeKw4EaO/3vHeekvD4+9fTXZk6/Enw+t8J472Yo6O98rxtePf111neeKpclSr+0c62enOGytDo+/3orw68r2D0SY38Cq8E8d6MceOH+sVG/SiMvFf/Za6vXj52l5Uhrf/9W2L6+7Fe0fePv23XzSTbHLNttigF5O32AuAO+V8cdWf1Sx0b5GF/rnS001o6/LuvYMlb+Rd7vzqp4zB8kO5bjSuye7pzWT3d+J4L+Z47/PE6MEN8kppg3f0Vy+8+sv+O/rjH/zgh189/KuP1uX1G+jFB3GiF9Mv4oGfb5hjV/qNrs2q73er3t90ve16JXlz7+RY0rv5UFx+9MKlsy8tvbT0cqUyOVV6vFR6ohJjxUeFfrFJT/uZZ2yb3QOAu9R299j56OtXQze7C0/y+DZH1Q9c/ZOCiXgxXonlOBcni7MNIuLhjVsdH/ozhJPbHLWOD93h5eQ2x5arsZX1sXuPJbFJ7OTQFvu/7xfF32/TCwIAu+DoNnk4ift7898cfB27LuKeJDm5zXH32lx+onfj3MHRcWyey4f9oV9+8bZvEQC4+2Wtz5LxzrtJq5UvPF+eni5XO6eytNWsPZe28pm5LM0bnaxVO1VtzGXpQqvZadYGv7Scydppe3FhodnqpLPNVrrQbOenizu/p/1bv7ez+Wqjk9faC/Ws2s7SWrPRqdY66UzerqULi8/U8/aprFUs3F7IavlsXqt28mYjbTcXW7VsIk3bWTYUmM9kjU4+m2djad5IF1r5fLV1JSLqi/NZOpO1a618odPsNThYV96Ybbbmi2Ynrh3+H3d7ewPA58Hrb12+eHZ5eem1m5v43fUE3+kxAgBrydIAAAAAAAAAAAAAAPD5d+3pet3aGzoRcCxu+vTB1/fGrZx9ePdNfOHD3suyEw3eSjv3rnlN9/R3lju/fW544oWnn764WpOMDm/eZ94+cOr3WQxGt0U7G/9P2ehU13f3R+z50fd6NV/aJDgZ3eGRfhwRN7H4SrJFzO6/FwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAdv4dAAD//9U1TwY=") r4 = syz_open_dev$usbfs(0x0, 0x1ff, 0xa401) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, 0x0) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mlock2(&(0x7f0000495000/0x2000)=nil, 0x2000, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c00"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYRES16=0x0], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='sys_enter\x00', r6, 0x0, 0x5}, 0x18) get_mempolicy(0x0, 0x0, 0x400, &(0x7f0000ffd000/0x2000)=nil, 0x2) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x0) symlinkat(&(0x7f0000000400)='./file0/../file0\x00', r8, &(0x7f0000000080)='./file0\x00') bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x20, &(0x7f0000000400)={&(0x7f0000000380)=""/118, 0x76, 0x0, &(0x7f0000000500)=""/255, 0xff}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1a, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000200000000000000000", @ANYRESOCT=0x0, @ANYBLOB="00000000917fd66c32a088aad3732530957400000100b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000deff008500007b332a938bad26000300000095"], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r9, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=r8, @ANYRESOCT=r8, @ANYRES32=0x0], &(0x7f00000001c0)='GPL\x00', 0x40, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2f, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, r9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r11, 0x0, 0x31, 0x0, 0x100000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) 10m51.948123907s ago: executing program 0 (id=4450): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb030018"], &(0x7f0000000240)=""/194, 0x40, 0xc2, 0xa}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='signal_deliver\x00', r0}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 10m51.905227411s ago: executing program 32 (id=4450): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb030018"], &(0x7f0000000240)=""/194, 0x40, 0xc2, 0xa}, 0x28) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='signal_deliver\x00', r0}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 10m5.105711674s ago: executing program 5 (id=4929): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x783, &(0x7f0000000800)="$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") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x44, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}]}, 0x44}}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x2) 10m5.02892436s ago: executing program 5 (id=4930): bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r2 = socket(0x18, 0x800, 0x0) connect$pppoe(r2, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'vcan0\x00'}}, 0x1e) sendfile(r2, r1, 0x0, 0x8) 10m4.978811284s ago: executing program 5 (id=4932): readv(0xffffffffffffffff, &(0x7f0000000ec0)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1) socket$netlink(0x10, 0x3, 0x4) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x6c140, 0x8) socket$unix(0x1, 0x6, 0x0) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x7, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f0000000280)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000dcc300"/27], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x2000000000000285, &(0x7f0000000500)=ANY=[@ANYRES8=0x0, @ANYRES8=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x403}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000680)=ANY=[@ANYRES32=r8, @ANYRESHEX=r0, @ANYRES64=r7, @ANYRES32=r5, @ANYRESOCT=r4, @ANYRESOCT=r6, @ANYRES16=r9, @ANYRESDEC=r3], &(0x7f0000000240)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) timer_settime(r1, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000200)) r11 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r10}, 0x8) close(r11) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r10, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410884, &(0x7f00000001c0)={[{@nouid32}, {@acl}]}, 0x1, 0x775, &(0x7f0000001180)="$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") r12 = open(&(0x7f0000000080)='./file0/file0\x00', 0x200200, 0x24) pwritev2(r12, &(0x7f0000000e80)=[{0x0}, {0x0}, {&(0x7f0000001000)="68e3", 0x2}], 0x3, 0x33000, 0x0, 0x6) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340), 0x0, 0x0, 0x1) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000030000000000000000000400b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r13, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0xfdaf) 10m4.805539008s ago: executing program 5 (id=4936): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$poke(0x21, r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x58f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50) 10m4.698242867s ago: executing program 5 (id=4938): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000"], 0x18}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000dc0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3f8, 0x248, 0x180, 0x180, 0x180, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x3d0, 0x6, 0x0, {[{{@ip={@local, @rand_addr=0x64010100, 0x0, 0x0, 'veth1_to_bridge\x00', 'ipvlan0\x00', {}, {0xff}, 0x67, 0x2, 0x6d}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xec}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xffffff00, 0xffffffff, 'vlan0\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x1, 0x1, 0x2}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x9, 0xe, @private=0xa010102, 0x4e21}}}, {{@ip={@remote, @empty, 0xffffffff, 0xffffff00, 'nr0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x0, 0x0, 0x34}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}, {[0x0, 0x8], 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x34}, @multicast2, 0x0, 0xffffff00, 'ipvlan0\x00', 'ip_vti0\x00', {0xff}, {}, 0x84, 0x0, 0x30}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}, {0xa02, 0x80, 0x1, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0) 10m4.487308764s ago: executing program 5 (id=4939): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@multicast2, @multicast1}, &(0x7f00000004c0)=0xc) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r3 = socket(0x18, 0x800, 0x0) sendfile(r3, r2, 0x0, 0x8) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) write$evdev(r4, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) semget$private(0x0, 0x4, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x100) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) getresuid(&(0x7f0000000180), &(0x7f0000000300), 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff}, 0x800) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000580)=@proc={0x10, 0x0, 0x25dfdbfd, 0x200}, 0xc, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB, @ANYRES32, @ANYBLOB="516d769c39dc2c3beda68a7e0afa19727afbdfa00c63a2251758449e0760c35cd4c4ed2fd8ed391d29402c3fa567122c2ce16dbd4d1970dab6f5ee", @ANYRES8=r11, @ANYRES32=0xffffffffffffffff, @ANYRES16=0xffffffffffffffff, @ANYRESOCT=r8, @ANYRES16=r9], 0x50, 0x24040094}, 0x80) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000b80)=ANY=[@ANYRESDEC=r14, @ANYRES32=0x0, @ANYBLOB="024dbb00c1494e33667df83442c89a1ae323e0a30d18af975af659764ab7d343951309a2f9b8627984d9b59b180a2a9a97c8c7a5586bf1a0a3d845f6f2b5bce60fe70dafd3c5072fcf6d7edbf60eb01333999fab103557102b2071531b6ed232347af52947928397f238badf6a2db52ad1477cf3e53abe8796110f5c234610ac0c13dc57ed198292a1e581b55a1d2bbd6eaeba8a02311ae12cc9df25e3481616746ee537e9bcc7f1e4468dae05", @ANYBLOB="020002", @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB, @ANYRES64, @ANYRESOCT, @ANYBLOB="0200", @ANYRES8, @ANYBLOB="02000200", @ANYRESDEC=r12, @ANYRES8=r11, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b66492", @ANYRESDEC=r13, @ANYRESDEC, @ANYRES64, @ANYBLOB="00000800000000000000aa8f3fa177eab6b2334f0df8", @ANYRES32=0xee00], 0x94, 0x1) 10m4.487001294s ago: executing program 33 (id=4939): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@multicast2, @multicast1}, &(0x7f00000004c0)=0xc) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r3 = socket(0x18, 0x800, 0x0) sendfile(r3, r2, 0x0, 0x8) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x80000000}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) write$evdev(r4, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) semget$private(0x0, 0x4, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x100) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) getresuid(&(0x7f0000000180), &(0x7f0000000300), 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff}, 0x800) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r11 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000580)=@proc={0x10, 0x0, 0x25dfdbfd, 0x200}, 0xc, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB, @ANYRES32, @ANYBLOB="516d769c39dc2c3beda68a7e0afa19727afbdfa00c63a2251758449e0760c35cd4c4ed2fd8ed391d29402c3fa567122c2ce16dbd4d1970dab6f5ee", @ANYRES8=r11, @ANYRES32=0xffffffffffffffff, @ANYRES16=0xffffffffffffffff, @ANYRESOCT=r8, @ANYRES16=r9], 0x50, 0x24040094}, 0x80) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000b80)=ANY=[@ANYRESDEC=r14, @ANYRES32=0x0, @ANYBLOB="024dbb00c1494e33667df83442c89a1ae323e0a30d18af975af659764ab7d343951309a2f9b8627984d9b59b180a2a9a97c8c7a5586bf1a0a3d845f6f2b5bce60fe70dafd3c5072fcf6d7edbf60eb01333999fab103557102b2071531b6ed232347af52947928397f238badf6a2db52ad1477cf3e53abe8796110f5c234610ac0c13dc57ed198292a1e581b55a1d2bbd6eaeba8a02311ae12cc9df25e3481616746ee537e9bcc7f1e4468dae05", @ANYBLOB="020002", @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB, @ANYRES64, @ANYRESOCT, @ANYBLOB="0200", @ANYRES8, @ANYBLOB="02000200", @ANYRESDEC=r12, @ANYRES8=r11, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b66492", @ANYRESDEC=r13, @ANYRESDEC, @ANYRES64, @ANYBLOB="00000800000000000000aa8f3fa177eab6b2334f0df8", @ANYRES32=0xee00], 0x94, 0x1) 9m17.14821067s ago: executing program 6 (id=5456): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 9m16.990998973s ago: executing program 6 (id=5457): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000200)={@multicast2, @multicast1}, &(0x7f00000004c0)=0xc) r2 = syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') r3 = socket(0x18, 0x800, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x2, @multicast, 'vcan0\x00'}}, 0x1e) sendfile(r3, r2, 0x0, 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000980)={r1, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000640)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, &(0x7f0000000680)=[0x0, 0x0], &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xc6, &(0x7f0000000700)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000780), &(0x7f0000000800), 0x8, 0x89, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) r4 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) write$evdev(r4, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) semget$private(0x0, 0x4, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x100) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) getresuid(&(0x7f0000000180), &(0x7f0000000300), 0x0) pipe2(&(0x7f0000001cc0)={0xffffffffffffffff}, 0x800) stat(&(0x7f0000001c40)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r10 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x854}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000000580)=@proc={0x10, 0x0, 0x25dfdbfd, 0x200}, 0xc, 0x0, 0x0, &(0x7f0000000780)=ANY=[@ANYRESDEC, @ANYRES32, @ANYRES32=0xffffffffffffffff, @ANYBLOB, @ANYRES32, @ANYBLOB="516d769c39dc2c3beda68a7e0afa19727afbdfa00c63a2251758449e0760c35cd4c4ed2fd8ed391d29402c3fa567122c2ce16dbd4d1970dab6f5ee", @ANYRES8=r10, @ANYRES32=0xffffffffffffffff, @ANYRES16=0xffffffffffffffff, @ANYRESOCT=r7, @ANYRES16=r8], 0x50, 0x24040094}, 0x80) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000b80)=ANY=[@ANYRESDEC=r13, @ANYRES32=0x0, @ANYBLOB="024dbb00c1494e33667df83442c89a1ae323e0a30d18af975af659764ab7d343951309a2f9b8627984d9b59b180a2a9a97c8c7a5586bf1a0a3d845f6f2b5bce60fe70dafd3c5072fcf6d7edbf60eb01333999fab103557102b2071531b6ed232347af52947928397f238badf6a2db52ad1477cf3e53abe8796110f5c234610ac0c13dc57ed198292a1e581b55a1d2bbd6eaeba8a02311ae12cc9df25e3481616746ee537e9bcc7f1e4468dae05", @ANYBLOB="020002", @ANYRES32=0x0, @ANYRES32=r9, @ANYBLOB, @ANYRES64, @ANYRESOCT, @ANYBLOB="0200", @ANYRES8, @ANYBLOB="02000200", @ANYRESDEC=r11, @ANYRES8=r10, @ANYBLOB="7de0de6148d7d44c4d01eeff92df69b773e9c6727f8fbda7576c2a151378b66492", @ANYRESDEC=r12, @ANYRESDEC, @ANYRES64, @ANYBLOB="00000800000000000000aa8f3fa177eab6b2334f0df8", @ANYRES32=0xee00], 0x94, 0x1) 9m16.886174091s ago: executing program 6 (id=5458): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) 9m16.258618142s ago: executing program 6 (id=5461): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00'}, 0x10) syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000400007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x930, &(0x7f0000000800)) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x21, 0x0, 0x0, 0x100000, 0x400, 0xffffffffffffffff, 0x58f, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2000000, 0x0, 0x200000000000000}, 0x50) 9m16.147697031s ago: executing program 6 (id=5462): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) 9m12.439785711s ago: executing program 6 (id=5483): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x3a) 9m12.439391101s ago: executing program 34 (id=5483): r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/cgroup.procs\x00', 0xe02, 0x1c0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) sendfile(r1, r0, 0x0, 0x3a) 7m38.17202682s ago: executing program 4 (id=6552): openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000070000002800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fallocate(0xffffffffffffffff, 0x0, 0x6, 0x900000000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x10, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@call={0x85, 0x0, 0x0, 0xa0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c00)={{r0}, &(0x7f0000000b80), &(0x7f0000000bc0)='%pB \x00'}, 0x20) pipe2$9p(0x0, 0xc0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x29) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) gettid() r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000340)={'syz_tun\x00', 0x101}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x60, '\x00', 0x0, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000500)='kmem_cache_free\x00', r5}, 0x18) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x1e, &(0x7f00000001c0)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffd, @loopback, 0x6324}, 0x1c) sendto$inet6(r6, 0x0, 0x2, 0x0, 0x0, 0x0) r7 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) close$binfmt(r7) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) close(r4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r3}, 0x10) r9 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r9}, 0x2c, {[], [], 0x6b}}) 7m38.084144908s ago: executing program 4 (id=6553): r0 = creat(0x0, 0x103) dup2(r0, r0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) r1 = gettid() r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="070000000400000008020000d900000000000000", @ANYRES32, @ANYBLOB="000000009cb9ecb38e156102989411c3910000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000400000000000000010000008e", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000950000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="19"], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000400, &(0x7f0000000080), 0xbe, 0x7c0, &(0x7f0000000f80)="$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") ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x2c, 0xffffffffffbffff8) dup2(r4, r5) fcntl$setown(r4, 0x8, r1) tkill(r1, 0x13) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2060, 0x0) fsetxattr$trusted_overlay_redirect(r6, &(0x7f0000000040), 0x0, 0x0, 0x0) 7m37.960893578s ago: executing program 4 (id=6555): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x50) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000006c0)={0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) semop(0x0, &(0x7f0000001240)=[{0x2, 0x0, 0x3800}], 0x41) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x40000, &(0x7f00000005c0)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYBLOB="a5c910004b722d24b0900236ab966727627d0dd52bf1aac349ac8eafe5f6585da27c2fe78eb5e5b34534b65d9a48bc854e7bd4916d865f826d09928cc1c4dfebf92eef980de168bc091b1452dbd66bd8cc41bc97d6bd5e858650c962c83f2484267af83773661c3d2f4fd85bd0e299a561351cc776fe50c29b5e96d2c19c02fc9a46dccde088bba5e2f8480bc6720de6ebf39f37d1d2a0f766b072fca046d4884ce3c6b19b2028faeb8a", @ANYRES64, @ANYRESOCT], 0xf7, 0x1216, &(0x7f0000002480)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00'}, 0x10) 7m37.706548918s ago: executing program 4 (id=6560): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4048000) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="0204000902000000e4a17c45c8d260c9", 0x10}], 0x7}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='kfree\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@abort}, {}, {@barrier_val={'barrier', 0x3d, 0x1ff}}, {@commit={'commit', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@grpjquota}, {@nodelalloc}, {@noblock_validity}, {@nomblk_io_submit}]}, 0x40, 0x571, &(0x7f0000000500)="$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") syz_clone(0x200, &(0x7f0000000180)="4477faaaeb3a19f2b8313f209adf5bd60106803d720a9099161c080f5f25bb7236d1bfe5f62c97d6d668dee111c3c44523", 0x31, &(0x7f00000001c0), &(0x7f00000002c0), &(0x7f0000000a80)="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") lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000001000000000000000400040000000000100000000000000020"], 0x24, 0x3) 7m36.975997547s ago: executing program 4 (id=6566): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) (fail_nth: 2) 7m36.746560076s ago: executing program 4 (id=6572): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='\t\x00\x00\x00\a\x00\x00'], 0x50) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000006c0)={0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) semop(0x0, &(0x7f0000001240)=[{0x2, 0x0, 0x3800}], 0x41) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x40000, &(0x7f00000005c0)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYBLOB="a5c910004b722d24b0900236ab966727627d0dd52bf1aac349ac8eafe5f6585da27c2fe78eb5e5b34534b65d9a48bc854e7bd4916d865f826d09928cc1c4dfebf92eef980de168bc091b1452dbd66bd8cc41bc97d6bd5e858650c962c83f2484267af83773661c3d2f4fd85bd0e299a561351cc776fe50c29b5e96d2c19c02fc9a46dccde088bba5e2f8480bc6720de6ebf39f37d1d2a0f766b072fca046d4884ce3c6b19b2028faeb8a", @ANYRES64, @ANYRESOCT], 0xf7, 0x1216, &(0x7f0000002480)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00'}, 0x10) 7m36.728339417s ago: executing program 35 (id=6572): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='\t\x00\x00\x00\a\x00\x00'], 0x50) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x200000006c832, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000006c0)={0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) semop(0x0, &(0x7f0000001240)=[{0x2, 0x0, 0x3800}], 0x41) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x40000, &(0x7f00000005c0)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYBLOB="a5c910004b722d24b0900236ab966727627d0dd52bf1aac349ac8eafe5f6585da27c2fe78eb5e5b34534b65d9a48bc854e7bd4916d865f826d09928cc1c4dfebf92eef980de168bc091b1452dbd66bd8cc41bc97d6bd5e858650c962c83f2484267af83773661c3d2f4fd85bd0e299a561351cc776fe50c29b5e96d2c19c02fc9a46dccde088bba5e2f8480bc6720de6ebf39f37d1d2a0f766b072fca046d4884ce3c6b19b2028faeb8a", @ANYRES64, @ANYRESOCT], 0xf7, 0x1216, &(0x7f0000002480)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00'}, 0x10) 2.815451602s ago: executing program 8 (id=16890): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x18) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 2.779266865s ago: executing program 8 (id=16891): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000640)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r1) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 2.667097434s ago: executing program 3 (id=16896): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) lchown(&(0x7f00000000c0)='./file0/file0\x00', 0xee01, 0xffffffffffffffff) 2.293873984s ago: executing program 3 (id=16900): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800042, &(0x7f0000000000), 0xfc, 0x575, &(0x7f0000000180)="$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") sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x104a7000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000700)='.\x00', &(0x7f0000000100)='ocfs2\x00', 0x0, 0x0) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r6, 0x402, 0x2) r7 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) lsm_get_self_attr(0x64, 0xffffffffffffffff, &(0x7f0000000380), 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000380)='asymmetric\x00', &(0x7f00000003c0)) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x2, 0x0, 0x2}}}}]}, 0x4c}}, 0x20000000) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, 0x2}, 0x94) setresuid(0xee01, 0xee00, 0x0) r9 = geteuid() setfsuid(r9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r8, 0x0, 0x1}, 0x18) syz_emit_ethernet(0x66, &(0x7f0000000b80)=ANY=[@ANYBLOB="ffffffffffff6487a2bed3d608"], 0x0) 1.818607923s ago: executing program 8 (id=16904): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000640)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 1.380567778s ago: executing program 3 (id=16911): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x70}, 0x1, 0x0, 0x0, 0x28004000}, 0x40880) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000000c0)='kvm_set_irq\x00', r1, 0x0, 0x20000000}, 0x18) socketpair(0x2a, 0x5, 0xb, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$nl_xfrm(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=@getsa={0x50, 0x12, 0x100, 0x70bd27, 0x25dfdbfc, {@in=@private=0xa010101, 0x4d6, 0xa, 0x2b}, [@address_filter={0x28, 0x1a, {@in6=@mcast2, @in=@multicast2, 0x2, 0x6, 0x3}}]}, 0x50}}, 0x8000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0x7, 0x0, &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00', r5, 0x0, 0xfffffffffffffffc}, 0x4c) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='.\x00', 0x0, 0xa00a, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x7fe, @empty, 0x1}, {0xa, 0x4e20, 0x1ff, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x2}, r4, 0xb}}, 0x48) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000885000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='kfree\x00', r6}, 0x9) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000f80)={0x1, 0xe, 0xfa00, {&(0x7f0000000300), r4}}, 0x18) 1.227525461s ago: executing program 3 (id=16913): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='io_uring_register\x00', r1, 0x0, 0xd9}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x61) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x1d6}, 0x18) setrlimit(0x9, &(0x7f0000000400)={0x0, 0x7}) io_setup(0x2004, &(0x7f0000000680)) io_cancel(0x0, 0x0, 0x0) 1.168022585s ago: executing program 8 (id=16914): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000002c0), 0x1, r0}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x101000, 0x2) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r0, @ANYRES8], 0x30}}, 0x40000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) write$selinux_validatetrans(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x8a) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000000300)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x1e, 0x0, 0x0, 0x3, &(0x7f0000000280)={0x0, 0x989680}}) io_uring_enter(r5, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0xca58c30f81b6079d}) socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0xc, 0xffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x200, r8}, 0x38) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.166158326s ago: executing program 3 (id=16915): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000640)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r1) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 876.868069ms ago: executing program 8 (id=16916): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x408a73, 0x100, 0x0, 0x1b7}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) io_uring_enter(r1, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) 579.991643ms ago: executing program 7 (id=16919): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000009900000001"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000000200)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa0, &(0x7f0000000480)=[{}], 0x8, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x82, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) r1 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0xffffffff, 0x0, 0x0, 0x4, 0x2, 0x1}}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) 548.454306ms ago: executing program 8 (id=16920): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000dd0013c777df82fa1b774bb5c2ef5a778000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0x8, &(0x7f0000000580)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x10, 0x2, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000000)={0x0, r1, 0x3a9, 0x2, 0x7, 0x3}) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001900)="2e00000011008188040900000000000000a1810031000000000f000000028002002d1f00000000000000e2000000", 0x2e}], 0x1}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000400)={r2, 0x0, &(0x7f0000001700)=""/47}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="240000001a00010029bd7000fbdbdf250a008000000400001200000008000100e0000001"], 0x24}, 0x1, 0x0, 0x0, 0x24000050}, 0x20000050) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={0x0}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2101000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0xf8, 0x18, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x800a}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0xa0, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan1\x00'}, {0x14, 0x1, 'pim6reg0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'gretap0\x00'}, {0x14, 0x1, 'ip6gretap0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'pimreg1\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x603, 0x0, 0x0, {0x5, 0x0, 0x4}}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELTABLE={0x190, 0x2, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_USERDATA={0x89, 0x6, "cba9dd7eeb7b5a8db9e3cb356e37da07a06a621bc2a684c80423177183b098a2fcc443543abf9c1ecfe7fa4e6e27ab9b56fcc1bbc5f58a92a785143199b67683e030f50a791b584fce98b5930ba4fa70478bf82281982cce6e9b19ff7e40ac3dc267e4c0966eb7d86666aec44d855d72f332908cce6aee6ea90817bc4302b3f6fe2e8a873c"}, @NFTA_TABLE_USERDATA={0x15, 0x6, "617beb7e3b2946e30e32e13e40a69a2e1d"}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0xc2, 0x6, "f23b3e7f7b7dadd47f90ae8692df3051ae4e6aefc6c17e74c3d62f65f71361b17c3d84afd00d36945631a4a559380d76ee8db41c574223549814bf7b74a26ab4c5a9969d577d7047f5310cd189757eba86cabe3bddd02256564817991f65954ba5d66a0cb930e2585d715df4197f6e4c1732c78ba1ba5f18decf374bbd3b95acb6390461b43adbc5216b40cfb42b819138411fae508cb74c5d489e1ef3cedd4503ef4ce4e1d5fee4fde8cf21e5a8c8dfd72fb075b3dd08f45530a16bc588"}]}, @NFT_MSG_DELSET={0x2c, 0xb, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2a}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x3c}]}, @NFT_MSG_DELCHAIN={0xa8, 0x5, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_HOOK={0x5c, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'wg2\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x44c3a54a}, @NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg1\x00'}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x196b0546}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2f134e5f}]}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}, @NFTA_CHAIN_USERDATA={0x1f, 0xc, "ae56b7284f85ec5dacdc0c56794e2b536b5727006fd3a49eb9e23d"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x3ec}, 0x1, 0x0, 0x0, 0x20000001}, 0x40010) openat(0xffffffffffffff9c, 0x0, 0x105042, 0x1db) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x4100) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x2, 0x0, 0x7ffc0005}]}) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_open_dev$sg(&(0x7f0000000140), 0x10000007, 0x100) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xffff0000, 0x80000001, 0x0, 0x0, 0x80000001}, 0x0, 0x4, 0x4, 0x9, 0x80000001, 0x8, 0x4, 0xfc, 0x0, 0x0, {0x0, 0x0, 0x5, 0x6739, 0x3}}}}]}, 0x78}}, 0x0) vmsplice(r7, &(0x7f0000000080)=[{&(0x7f00000004c0)='|', 0x1}], 0x1, 0x4100000000000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r0}, 0x18) 536.345977ms ago: executing program 7 (id=16921): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xef, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6e", 0x0, 0x8, 0x60000000}, 0x50) 463.805892ms ago: executing program 7 (id=16922): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000540)={0x1, &(0x7f0000000000)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x760, 0xa382) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0, 0xb7, &(0x7f0000000780)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000007c0), &(0x7f0000000800), 0x8, 0xf, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000c00)={0x0, r4}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0xf, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB, @ANYRESOCT=0x0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) fcntl$notify(0xffffffffffffffff, 0x402, 0x8) getdents64(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000380), 0x84d03, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800080000000000000000000000d0e605000000da89409500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r8}, 0x10) umount2(&(0x7f00000002c0)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800702, &(0x7f0000000100)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@noauto_da_alloc}, {@noload}, {@oldalloc}, {@resuid}]}, 0x2, 0x470, &(0x7f0000000dc0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) 407.524687ms ago: executing program 2 (id=16924): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="050000000400000099"], 0x48) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0x34}, 0x1, 0x2, 0x0, 0xc1e5abbfc43abdc7}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYRES16=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) 328.072273ms ago: executing program 2 (id=16925): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='io_uring_register\x00', r1, 0x0, 0xd9}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x61) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x1d6}, 0x18) setrlimit(0x9, &(0x7f0000000400)={0x0, 0x7}) io_setup(0x2004, &(0x7f0000000680)) io_cancel(0x0, 0x0, 0x0) 327.813474ms ago: executing program 3 (id=16926): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000640)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 305.846495ms ago: executing program 2 (id=16928): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000300)={0x10000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x8e}}, 0x6) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) 289.221547ms ago: executing program 1 (id=16929): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) lchown(&(0x7f00000000c0)='./file0/file0\x00', 0xee01, 0xffffffffffffffff) 275.199618ms ago: executing program 1 (id=16930): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18) r1 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x408a73, 0x100, 0x0, 0x1b7}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/15, 0xf}], 0x1}) io_uring_enter(r1, 0x47ba, 0x3000000, 0x0, 0x0, 0x0) 266.011409ms ago: executing program 2 (id=16931): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000200100000102000028"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0xb}, 0x18) r2 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r2, 0x0, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 238.690871ms ago: executing program 2 (id=16932): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d80)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/2566], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xef, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f005dd1be0ffff00fe3a21632f77fbac14141de007031762079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6e", 0x0, 0x8, 0x60000000}, 0x50) 182.973635ms ago: executing program 2 (id=16933): bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffff1) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x141000, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) prlimit64(0x0, 0x8, 0x0, 0x0) shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'gre0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYRESOCT], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaa0780c200001a08004900000000000029107800000000000000000000007ef10e7725827919f94c0019f2c24a00002890780400000000000000000000000000000020029476b3addfab81507b25977f5d530000"], 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) 182.005835ms ago: executing program 7 (id=16934): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000340)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) creat(&(0x7f00000000c0)='./file0\x00', 0x48) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={0x0}}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) open(&(0x7f0000000300)='./file0\x00', 0x145142, 0x102) 144.613928ms ago: executing program 7 (id=16935): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r0, 0x0, 0x8}, 0x18) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)={0x28, 0x18, 0x1, 0x0, 0x0, {0x2}, [@typed={0x8, 0x800, 0x0, 0x0, @ipv4=@multicast2}, @nested={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xc, 0x0, 0x0, @uid=r2}]}]}, 0x28}}, 0x0) 90.661513ms ago: executing program 1 (id=16936): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='io_uring_register\x00', r1, 0x0, 0xd9}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x61) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x1d6}, 0x18) setrlimit(0x9, &(0x7f0000000400)={0x0, 0x7}) io_setup(0x2004, &(0x7f0000000680)) io_cancel(0x0, 0x0, 0x0) 81.945443ms ago: executing program 7 (id=16937): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000640)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r2}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r1) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 30.848528ms ago: executing program 1 (id=16938): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='io_uring_register\x00', r1, 0x0, 0xd9}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="05000000040000000400000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="04", 0x1}], 0x1}, 0x41) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x61) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000004c0)='mm_page_free\x00', 0xffffffffffffffff, 0x0, 0x1d6}, 0x18) setrlimit(0x9, &(0x7f0000000400)={0x0, 0x7}) io_setup(0x2004, &(0x7f0000000680)) io_cancel(0x0, 0x0, 0x0) 14.368829ms ago: executing program 1 (id=16939): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0, 0x0, 0x2}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600000006010000000000000003003e"], 0x5b0) r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_TIMEOUT={0xb, 0x1e, 0x0, 0x0, 0x3, &(0x7f0000000280)={0x0, 0x989680}}) io_uring_enter(r5, 0x6e2, 0x3900, 0x1, 0x0, 0xe00) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x2}) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0xca58c30f81b6079d}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x7, 0xc, 0xffffffff, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x200, r8}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r9, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETLINK(r2, 0x400454cd, 0x30a) kernel console output (not intermixed with test programs): [ 914.420398][T14995] __seccomp_filter+0x69d/0x10d0 [ 914.420455][T14995] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 914.420516][T14995] ? vfs_write+0x7e8/0x960 [ 914.420536][T14995] ? __rcu_read_unlock+0x4f/0x70 [ 914.420560][T14995] ? __fget_files+0x184/0x1c0 [ 914.420664][T14995] __secure_computing+0x82/0x150 [ 914.420683][T14995] syscall_trace_enter+0xcf/0x1e0 [ 914.420707][T14995] do_syscall_64+0xac/0x200 [ 914.420798][T14995] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 914.420822][T14995] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 914.420851][T14995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.420883][T14995] RIP: 0033:0x7fc30302ebe9 [ 914.420898][T14995] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 914.420914][T14995] RSP: 002b:00007fc301a97038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 914.420931][T14995] RAX: ffffffffffffffda RBX: 00007fc303265fa0 RCX: 00007fc30302ebe9 [ 914.420942][T14995] RDX: 0000000000000000 RSI: 00000000000047f6 RDI: 0000000000000007 [ 914.421010][T14995] RBP: 00007fc301a97090 R08: 0000000000000000 R09: 0000000000000000 [ 914.421021][T14995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 914.421086][T14995] R13: 00007fc303266038 R14: 00007fc303265fa0 R15: 00007ffe9f730698 [ 914.421102][T14995] [ 914.682486][T15007] __nla_validate_parse: 5 callbacks suppressed [ 914.682501][T15007] netlink: 92 bytes leftover after parsing attributes in process `syz.2.15608'. [ 914.690294][T15006] loop8: detected capacity change from 0 to 512 [ 914.707699][T15001] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.721975][T15004] netlink: 92 bytes leftover after parsing attributes in process `syz.2.15608'. [ 914.733181][T15006] journal_path: Non-blockdev passed as './bus' [ 914.739483][T15006] EXT4-fs: error: could not find journal device path [ 914.752823][T15001] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.770574][T15015] netfs: Couldn't get user pages (rc=-14) [ 914.775997][T15011] netlink: 14 bytes leftover after parsing attributes in process `syz.7.15611'. [ 914.805318][T15019] netfs: Couldn't get user pages (rc=-14) [ 914.817083][T15001] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.876991][T15001] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 914.974650][ T12] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.008202][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.381675][ T12] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.390169][ T12] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 915.507315][T15060] syzkaller0: entered allmulticast mode [ 915.514045][T15060] syzkaller0: entered promiscuous mode [ 915.522603][T15060] syzkaller0 (unregistering): left allmulticast mode [ 915.529404][T15060] syzkaller0 (unregistering): left promiscuous mode [ 915.631040][T15074] netfs: Couldn't get user pages (rc=-14) [ 915.747702][T15083] netlink: 14 bytes leftover after parsing attributes in process `syz.2.15641'. [ 916.031243][T15114] loop8: detected capacity change from 0 to 1024 [ 916.038058][T15114] EXT4-fs: Ignoring removed bh option [ 916.043761][T15114] EXT4-fs: inline encryption not supported [ 916.050148][T15114] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 916.061128][T15114] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 916.070296][T15114] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.15652: lblock 2 mapped to illegal pblock 2 (length 1) [ 916.084640][T15114] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.15652: lblock 0 mapped to illegal pblock 48 (length 1) [ 916.099131][T15114] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.15652: Failed to acquire dquot type 0 [ 916.111397][T15114] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 916.120984][T15114] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.15652: mark_inode_dirty error [ 916.132719][T15114] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 916.143119][T15114] EXT4-fs (loop8): 1 orphan inode deleted [ 916.149840][T15114] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 916.167128][ T51] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 916.181570][ T51] EXT4-fs error (device loop8): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0 [ 916.202790][ T8108] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 916.212948][ T8108] EXT4-fs error (device loop8): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 916.226050][ T8108] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 916.235957][ T8108] EXT4-fs error (device loop8): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 916.824834][T15147] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15665'. [ 916.840661][T15151] netlink: 14 bytes leftover after parsing attributes in process `syz.2.15666'. [ 916.867121][T15155] loop7: detected capacity change from 0 to 512 [ 916.873834][T15155] journal_path: Non-blockdev passed as './bus' [ 916.880051][T15155] EXT4-fs: error: could not find journal device path [ 916.915933][T15160] netfs: Couldn't get user pages (rc=-14) [ 917.027640][T15168] 9pnet_fd: Insufficient options for proto=fd [ 917.088559][T15172] loop8: detected capacity change from 0 to 512 [ 917.095305][T15172] journal_path: Non-blockdev passed as './bus' [ 917.101642][T15172] EXT4-fs: error: could not find journal device path [ 917.127201][T15176] loop7: detected capacity change from 0 to 512 [ 917.140238][T15176] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 917.172792][T12655] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 917.199981][T15184] loop8: detected capacity change from 0 to 512 [ 917.206869][T15184] journal_path: Non-blockdev passed as './bus' [ 917.213059][T15184] EXT4-fs: error: could not find journal device path [ 917.231402][T15186] netlink: 16 bytes leftover after parsing attributes in process `syz.7.15681'. [ 917.247050][T15188] loop8: detected capacity change from 0 to 512 [ 917.269838][T15190] loop7: detected capacity change from 0 to 2048 [ 917.275362][T15188] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 917.296045][T15190] EXT4-fs (loop7): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 917.309441][ T8108] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 917.378466][T15201] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.15683: bg 0: block 120: padding at end of block bitmap is not set [ 917.650280][T15210] 9pnet_fd: Insufficient options for proto=fd [ 918.074357][T12655] EXT4-fs (loop7): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 918.095785][T15235] loop7: detected capacity change from 0 to 512 [ 918.121058][T15235] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 918.148859][T15244] netfs: Couldn't get user pages (rc=-14) [ 918.164159][T12655] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 918.433520][T15259] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15711'. [ 918.487514][ T29] kauditd_printk_skb: 1703 callbacks suppressed [ 918.487526][ T29] audit: type=1400 audit(39331.094:102433): avc: denied { setopt } for pid=15269 comm="syz.8.15715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 918.534759][T15274] loop8: detected capacity change from 0 to 512 [ 918.541124][ T29] audit: type=1326 audit(39331.147:102434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15275 comm="syz.3.15718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8fcffebe9 code=0x7ffc0000 [ 918.564551][ T29] audit: type=1326 audit(39331.147:102435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15275 comm="syz.3.15718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8fcffebe9 code=0x7ffc0000 [ 918.588001][ T29] audit: type=1326 audit(39331.147:102436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15275 comm="syz.3.15718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8fcffebe9 code=0x7ffc0000 [ 918.611445][ T29] audit: type=1326 audit(39331.147:102437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15275 comm="syz.3.15718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8fcffebe9 code=0x7ffc0000 [ 918.635160][ T29] audit: type=1326 audit(39331.147:102438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15275 comm="syz.3.15718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8fcffebe9 code=0x7ffc0000 [ 918.658540][ T29] audit: type=1326 audit(39331.147:102439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15275 comm="syz.3.15718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc8fcffebe9 code=0x7ffc0000 [ 918.681845][ T29] audit: type=1326 audit(39331.147:102440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15275 comm="syz.3.15718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8fcffebe9 code=0x7ffc0000 [ 918.705132][ T29] audit: type=1326 audit(39331.157:102441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15275 comm="syz.3.15718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc8fcffebe9 code=0x7ffc0000 [ 918.716935][T15274] journal_path: Non-blockdev passed as './bus' [ 918.728435][ T29] audit: type=1326 audit(39331.157:102442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15275 comm="syz.3.15718" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8fcffebe9 code=0x7ffc0000 [ 918.758123][T15274] EXT4-fs: error: could not find journal device path [ 918.851642][T15292] loop8: detected capacity change from 0 to 2048 [ 918.906460][T15292] EXT4-fs (loop8): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 918.906935][T15299] netfs: Couldn't get user pages (rc=-14) [ 918.945390][T15304] syzkaller0: entered allmulticast mode [ 918.951268][T15304] syzkaller0: entered promiscuous mode [ 918.958224][T15304] syzkaller0 (unregistering): left allmulticast mode [ 918.964971][T15304] syzkaller0 (unregistering): left promiscuous mode [ 918.974087][T15305] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.15726: bg 0: block 120: padding at end of block bitmap is not set [ 919.030059][T15309] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15733'. [ 919.135333][T15327] netfs: Couldn't get user pages (rc=-14) [ 919.649703][ T8108] EXT4-fs (loop8): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 919.688860][T15338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15745'. [ 919.723072][T15345] netlink: 14 bytes leftover after parsing attributes in process `syz.8.15747'. [ 919.798315][T15347] syzkaller0: entered allmulticast mode [ 919.805286][T15347] syzkaller0: entered promiscuous mode [ 919.812409][T15347] syzkaller0 (unregistering): left allmulticast mode [ 919.819125][T15347] syzkaller0 (unregistering): left promiscuous mode [ 920.531987][T15376] syzkaller0: entered allmulticast mode [ 920.537717][T15376] syzkaller0: entered promiscuous mode [ 920.544563][T15376] syzkaller0 (unregistering): left allmulticast mode [ 920.551339][T15376] syzkaller0 (unregistering): left promiscuous mode [ 920.867353][T15391] 9pnet_fd: Insufficient options for proto=fd [ 921.025913][T15405] FAULT_INJECTION: forcing a failure. [ 921.025913][T15405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 921.039162][T15405] CPU: 1 UID: 0 PID: 15405 Comm: syz.3.15774 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 921.039194][T15405] Tainted: [W]=WARN [ 921.039202][T15405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 921.039216][T15405] Call Trace: [ 921.039222][T15405] [ 921.039229][T15405] __dump_stack+0x1d/0x30 [ 921.039276][T15405] dump_stack_lvl+0xe8/0x140 [ 921.039294][T15405] dump_stack+0x15/0x1b [ 921.039449][T15405] should_fail_ex+0x265/0x280 [ 921.039473][T15405] should_fail+0xb/0x20 [ 921.039493][T15405] should_fail_usercopy+0x1a/0x20 [ 921.039566][T15405] copy_fpstate_to_sigframe+0x628/0x7d0 [ 921.039602][T15405] ? copy_fpstate_to_sigframe+0xe6/0x7d0 [ 921.039652][T15405] ? x86_task_fpu+0x36/0x60 [ 921.039682][T15405] get_sigframe+0x34d/0x490 [ 921.039702][T15405] ? get_signal+0xdc8/0xf70 [ 921.039768][T15405] x64_setup_rt_frame+0xa8/0x580 [ 921.039788][T15405] arch_do_signal_or_restart+0x27c/0x480 [ 921.039813][T15405] exit_to_user_mode_loop+0x7a/0x100 [ 921.039833][T15405] do_syscall_64+0x1d6/0x200 [ 921.039940][T15405] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 921.039970][T15405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.040038][T15405] RIP: 0033:0x7fc8fcffd69f [ 921.040052][T15405] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 921.040068][T15405] RSP: 002b:00007fc8fba67030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 921.040087][T15405] RAX: 0000000000000001 RBX: 0000000000000004 RCX: 00007fc8fcffd69f [ 921.040101][T15405] RDX: 0000000000000001 RSI: 00007fc8fba67090 RDI: 0000000000000004 [ 921.040115][T15405] RBP: 00007fc8fba67090 R08: 0000000000000000 R09: 00007fc8fba66df7 [ 921.040154][T15405] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 921.040165][T15405] R13: 00007fc8fd236038 R14: 00007fc8fd235fa0 R15: 00007ffd221b7948 [ 921.040182][T15405] [ 921.270906][T15412] loop7: detected capacity change from 0 to 512 [ 921.273207][T15410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15777'. [ 921.282718][T15412] journal_path: Non-blockdev passed as './bus' [ 921.292439][T15412] EXT4-fs: error: could not find journal device path [ 921.322670][T15419] 9pnet_fd: Insufficient options for proto=fd [ 921.771242][T15449] loop8: detected capacity change from 0 to 16384 [ 921.904599][T15457] random: crng reseeded on system resumption [ 921.928732][T15460] netfs: Couldn't get user pages (rc=-14) [ 921.934801][T15449] loop7: detected capacity change from 0 to 512 [ 921.951250][T15449] EXT4-fs: Ignoring removed oldalloc option [ 921.963680][T15449] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.15793: Parent and EA inode have the same ino 15 [ 921.979301][T15449] EXT4-fs (loop7): 1 orphan inode deleted [ 921.985457][T15449] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 922.000349][T15454] loop8: detected capacity change from 16384 to 16383 [ 922.128482][T15465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15798'. [ 922.153000][T12655] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 922.225059][T15475] syzkaller0: entered allmulticast mode [ 922.233866][T15475] syzkaller0: entered promiscuous mode [ 922.241839][T15475] syzkaller0 (unregistering): left allmulticast mode [ 922.248574][T15475] syzkaller0 (unregistering): left promiscuous mode [ 922.449831][T15512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15817'. [ 922.583153][T15530] syzkaller0: entered allmulticast mode [ 922.590276][T15530] syzkaller0: entered promiscuous mode [ 922.598012][T15530] syzkaller0 (unregistering): left allmulticast mode [ 922.604731][T15530] syzkaller0 (unregistering): left promiscuous mode [ 922.629051][T15534] loop8: detected capacity change from 0 to 512 [ 922.635789][T15534] journal_path: Non-blockdev passed as './bus' [ 922.641992][T15534] EXT4-fs: error: could not find journal device path [ 922.686323][T15540] loop8: detected capacity change from 0 to 512 [ 922.693556][T15540] journal_path: Non-blockdev passed as './bus' [ 922.699771][T15540] EXT4-fs: error: could not find journal device path [ 922.796888][T15552] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15834'. [ 922.837651][T15561] netlink: 4 bytes leftover after parsing attributes in process `syz.1.15838'. [ 922.889021][T15574] syzkaller0: entered allmulticast mode [ 922.895773][T15574] syzkaller0: entered promiscuous mode [ 922.906138][T15574] syzkaller0 (unregistering): left allmulticast mode [ 922.912899][T15574] syzkaller0 (unregistering): left promiscuous mode [ 923.066115][T15598] netlink: 'syz.8.15855': attribute type 1 has an invalid length. [ 923.108144][T15598] 8021q: adding VLAN 0 to HW filter on device bond1 [ 923.111856][T15596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15853'. [ 923.136652][T15598] syzkaller1: entered promiscuous mode [ 923.142303][T15598] syzkaller1: entered allmulticast mode [ 923.150830][T15608] loop7: detected capacity change from 0 to 1024 [ 923.158004][T15608] EXT4-fs: Ignoring removed bh option [ 923.164223][T15608] EXT4-fs: inline encryption not supported [ 923.174314][T15608] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 923.186779][T15608] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 923.213102][T15608] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.15857: lblock 2 mapped to illegal pblock 2 (length 1) [ 923.215357][T15619] netlink: 14 bytes leftover after parsing attributes in process `syz.1.15861'. [ 923.230947][T15608] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.15857: lblock 0 mapped to illegal pblock 48 (length 1) [ 923.255918][T15608] __quota_error: 1309 callbacks suppressed [ 923.256002][T15608] Quota error (device loop7): v2_write_file_info: Can't write info structure [ 923.270710][T15608] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.15857: Failed to acquire dquot type 0 [ 923.299710][T15608] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 923.314835][ T29] audit: type=1326 audit(39336.165:103751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15618 comm="syz.1.15861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9cb59ebe9 code=0x7ffc0000 [ 923.317370][T15630] loop8: detected capacity change from 0 to 512 [ 923.338205][ T29] audit: type=1326 audit(39336.165:103752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15618 comm="syz.1.15861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9cb59ebe9 code=0x7ffc0000 [ 923.346139][T15608] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.15857: mark_inode_dirty error [ 923.381525][T15608] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 923.393961][T15608] EXT4-fs (loop7): 1 orphan inode deleted [ 923.401214][T15608] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 923.402195][ T29] audit: type=1326 audit(39336.228:103753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15618 comm="syz.1.15861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9cb59ebe9 code=0x7ffc0000 [ 923.417755][T15630] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 923.437083][ T29] audit: type=1326 audit(39336.228:103754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15618 comm="syz.1.15861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9cb59ebe9 code=0x7ffc0000 [ 923.472806][ T29] audit: type=1326 audit(39336.228:103755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15618 comm="syz.1.15861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9cb59ebe9 code=0x7ffc0000 [ 923.496175][ T29] audit: type=1326 audit(39336.239:103756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15618 comm="syz.1.15861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd9cb59d550 code=0x7ffc0000 [ 923.519499][ T29] audit: type=1326 audit(39336.239:103757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15618 comm="syz.1.15861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9cb59ebe9 code=0x7ffc0000 [ 923.542845][ T29] audit: type=1326 audit(39336.239:103758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15618 comm="syz.1.15861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9cb59ebe9 code=0x7ffc0000 [ 923.566147][ T29] audit: type=1326 audit(39336.239:103759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15618 comm="syz.1.15861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd9cb59ebe9 code=0x7ffc0000 [ 923.590450][ T12] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 923.622666][ T12] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:0: Failed to release dquot type 0 [ 923.635221][T12655] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 923.635685][ T8108] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 923.654584][T12655] EXT4-fs error (device loop7): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 923.674572][T12655] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 923.684652][T12655] EXT4-fs error (device loop7): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 923.731119][T15654] netlink: 'syz.2.15874': attribute type 1 has an invalid length. [ 923.745901][T15654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 923.764737][T15654] syzkaller1: entered promiscuous mode [ 923.770368][T15654] syzkaller1: entered allmulticast mode [ 923.915831][T15669] syzkaller0: entered allmulticast mode [ 923.921664][T15669] syzkaller0: entered promiscuous mode [ 923.928511][T15669] syzkaller0 (unregistering): left allmulticast mode [ 923.935249][T15669] syzkaller0 (unregistering): left promiscuous mode [ 924.266695][T15709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15899'. [ 924.351705][T15715] syzkaller0: entered allmulticast mode [ 924.357851][T15715] syzkaller0: entered promiscuous mode [ 924.366936][T15715] syzkaller0 (unregistering): left allmulticast mode [ 924.373805][T15715] syzkaller0 (unregistering): left promiscuous mode [ 924.531633][T15727] loop7: detected capacity change from 0 to 512 [ 924.540497][T15727] journal_path: Non-blockdev passed as './bus' [ 924.546896][T15727] EXT4-fs: error: could not find journal device path [ 924.714348][T15753] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15918'. [ 924.832940][T15765] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15922'. [ 924.894954][T15776] loop7: detected capacity change from 0 to 1024 [ 924.902031][T15776] EXT4-fs: Ignoring removed bh option [ 924.907473][T15776] EXT4-fs: inline encryption not supported [ 924.914837][T15776] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 924.931006][T15776] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 924.942505][T15776] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.15926: lblock 2 mapped to illegal pblock 2 (length 1) [ 924.956999][T15776] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.15926: lblock 0 mapped to illegal pblock 48 (length 1) [ 924.971542][T15776] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.15926: Failed to acquire dquot type 0 [ 924.986039][T15776] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 924.995956][T15776] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.15926: mark_inode_dirty error [ 925.008219][T15776] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 925.013319][T15781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15929'. [ 925.018594][T15776] EXT4-fs (loop7): 1 orphan inode deleted [ 925.033771][T15776] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 925.047649][ T7532] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 925.062033][ T7532] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:8: Failed to release dquot type 0 [ 925.076401][T12655] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 925.085737][T12655] EXT4-fs error (device loop7): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 925.099271][T12655] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 925.109922][T12655] EXT4-fs error (device loop7): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 925.212004][T15813] loop7: detected capacity change from 0 to 512 [ 925.219111][T15813] journal_path: Non-blockdev passed as './bus' [ 925.225344][T15813] EXT4-fs: error: could not find journal device path [ 925.236601][T15817] netlink: 14 bytes leftover after parsing attributes in process `syz.1.15942'. [ 925.297222][T15819] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15944'. [ 925.355999][T15837] FAULT_INJECTION: forcing a failure. [ 925.355999][T15837] name failslab, interval 1, probability 0, space 0, times 0 [ 925.368742][T15837] CPU: 0 UID: 0 PID: 15837 Comm: syz.3.15948 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 925.368776][T15837] Tainted: [W]=WARN [ 925.368783][T15837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 925.368796][T15837] Call Trace: [ 925.368803][T15837] [ 925.368811][T15837] __dump_stack+0x1d/0x30 [ 925.368878][T15837] dump_stack_lvl+0xe8/0x140 [ 925.368895][T15837] dump_stack+0x15/0x1b [ 925.368938][T15837] should_fail_ex+0x265/0x280 [ 925.368962][T15837] should_failslab+0x8c/0xb0 [ 925.368986][T15837] kmem_cache_alloc_noprof+0x50/0x310 [ 925.369014][T15837] ? audit_log_start+0x365/0x6c0 [ 925.369064][T15837] audit_log_start+0x365/0x6c0 [ 925.369094][T15837] audit_seccomp+0x48/0x100 [ 925.369121][T15837] ? __seccomp_filter+0x68c/0x10d0 [ 925.369145][T15837] __seccomp_filter+0x69d/0x10d0 [ 925.369207][T15837] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 925.369235][T15837] ? vfs_write+0x7e8/0x960 [ 925.369260][T15837] __secure_computing+0x82/0x150 [ 925.369280][T15837] syscall_trace_enter+0xcf/0x1e0 [ 925.369373][T15837] do_syscall_64+0xac/0x200 [ 925.369403][T15837] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 925.369428][T15837] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 925.369454][T15837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.369475][T15837] RIP: 0033:0x7fc8fcffebe9 [ 925.369494][T15837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 925.369510][T15837] RSP: 002b:00007fc8fba67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000073 [ 925.369528][T15837] RAX: ffffffffffffffda RBX: 00007fc8fd235fa0 RCX: 00007fc8fcffebe9 [ 925.369539][T15837] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 925.369623][T15837] RBP: 00007fc8fba67090 R08: 0000000000000000 R09: 0000000000000000 [ 925.369637][T15837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 925.369649][T15837] R13: 00007fc8fd236038 R14: 00007fc8fd235fa0 R15: 00007ffd221b7948 [ 925.369668][T15837] [ 925.645228][T15846] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15955'. [ 925.703562][T15856] FAULT_INJECTION: forcing a failure. [ 925.703562][T15856] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 925.716752][T15856] CPU: 0 UID: 0 PID: 15856 Comm: syz.7.15959 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 925.716857][T15856] Tainted: [W]=WARN [ 925.716943][T15856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 925.716958][T15856] Call Trace: [ 925.716963][T15856] [ 925.716969][T15856] __dump_stack+0x1d/0x30 [ 925.716990][T15856] dump_stack_lvl+0xe8/0x140 [ 925.717011][T15856] dump_stack+0x15/0x1b [ 925.717046][T15856] should_fail_ex+0x265/0x280 [ 925.717068][T15856] should_fail+0xb/0x20 [ 925.717088][T15856] should_fail_usercopy+0x1a/0x20 [ 925.717108][T15856] _copy_to_user+0x20/0xa0 [ 925.717170][T15856] simple_read_from_buffer+0xb5/0x130 [ 925.717191][T15856] proc_fail_nth_read+0x10e/0x150 [ 925.717215][T15856] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 925.717245][T15856] vfs_read+0x1a8/0x770 [ 925.717326][T15856] ? __rcu_read_unlock+0x4f/0x70 [ 925.717347][T15856] ? __fget_files+0x184/0x1c0 [ 925.717367][T15856] ? __sys_setsockopt+0x18e/0x200 [ 925.717389][T15856] ksys_read+0xda/0x1a0 [ 925.717522][T15856] __x64_sys_read+0x40/0x50 [ 925.717546][T15856] x64_sys_call+0x27bc/0x2ff0 [ 925.717567][T15856] do_syscall_64+0xd2/0x200 [ 925.717643][T15856] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 925.717670][T15856] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 925.717694][T15856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.717751][T15856] RIP: 0033:0x7fc30302d5fc [ 925.717768][T15856] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 925.717818][T15856] RSP: 002b:00007fc301a97030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 925.717839][T15856] RAX: ffffffffffffffda RBX: 00007fc303265fa0 RCX: 00007fc30302d5fc [ 925.717852][T15856] RDX: 000000000000000f RSI: 00007fc301a970a0 RDI: 0000000000000004 [ 925.717897][T15856] RBP: 00007fc301a97090 R08: 0000000000000000 R09: 0000000000000000 [ 925.717964][T15856] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 925.717976][T15856] R13: 00007fc303266038 R14: 00007fc303265fa0 R15: 00007ffe9f730698 [ 925.717992][T15856] [ 925.955521][T15862] loop7: detected capacity change from 0 to 2048 [ 925.970440][T15862] EXT4-fs (loop7): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 925.988517][T15862] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.15960: bg 0: block 120: padding at end of block bitmap is not set [ 926.273361][T15870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15962'. [ 926.515901][T15881] syzkaller0: entered allmulticast mode [ 926.521884][T15881] syzkaller0: entered promiscuous mode [ 926.529109][T15881] syzkaller0 (unregistering): left allmulticast mode [ 926.535885][T15881] syzkaller0 (unregistering): left promiscuous mode [ 927.611940][T15923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15987'. [ 927.684872][T15930] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15988'. [ 927.745754][T15937] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15990'. [ 927.754613][T15942] loop8: detected capacity change from 0 to 1024 [ 927.763462][T15942] EXT4-fs: Ignoring removed bh option [ 927.769968][T15942] EXT4-fs: inline encryption not supported [ 927.776169][T15942] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 927.787117][T15942] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 927.796308][T15942] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.15991: lblock 2 mapped to illegal pblock 2 (length 1) [ 927.810547][T15942] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.15991: lblock 0 mapped to illegal pblock 48 (length 1) [ 927.826412][T15942] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.15991: Failed to acquire dquot type 0 [ 927.841202][T15942] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 927.864129][T15942] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.15991: mark_inode_dirty error [ 927.877737][T15942] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 927.888539][T15942] EXT4-fs (loop8): 1 orphan inode deleted [ 927.896037][T15942] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 927.908832][ T1456] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 927.938872][ T1456] EXT4-fs error (device loop8): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 0 [ 927.960713][ T8108] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 927.981709][ T8108] EXT4-fs error (device loop8): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 928.008653][ T8108] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 928.018439][ T8108] EXT4-fs error (device loop8): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 928.039928][ T29] kauditd_printk_skb: 1069 callbacks suppressed [ 928.039944][ T29] audit: type=1326 audit(39341.111:104820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.2.16000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbd11e9ebe9 code=0x7ffc0000 [ 928.081019][ T29] audit: type=1326 audit(39341.132:104821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15963 comm="syz.1.16003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9cb59ebe9 code=0x7ffc0000 [ 928.081662][T15961] random: crng reseeded on system resumption [ 928.104574][ T29] audit: type=1326 audit(39341.132:104822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15963 comm="syz.1.16003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9cb59ebe9 code=0x7ffc0000 [ 928.133828][ T29] audit: type=1326 audit(39341.132:104823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15963 comm="syz.1.16003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fd9cb59ebe9 code=0x7ffc0000 [ 928.157333][ T29] audit: type=1326 audit(39341.153:104824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15963 comm="syz.1.16003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd9cb59ec23 code=0x7ffc0000 [ 928.180525][ T29] audit: type=1326 audit(39341.153:104825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15963 comm="syz.1.16003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd9cb59ec23 code=0x7ffc0000 [ 928.203712][ T29] audit: type=1326 audit(39341.153:104826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15959 comm="syz.2.16000" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbd11e9ebe9 code=0x7ffc0000 [ 928.227441][ T29] audit: type=1326 audit(39341.153:104827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15963 comm="syz.1.16003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9cb59ebe9 code=0x7ffc0000 [ 928.250787][ T29] audit: type=1326 audit(39341.163:104828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15963 comm="syz.1.16003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9cb59ebe9 code=0x7ffc0000 [ 928.274311][ T29] audit: type=1326 audit(39341.163:104829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15963 comm="syz.1.16003" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9cb59ebe9 code=0x7ffc0000 [ 928.378141][T15988] FAULT_INJECTION: forcing a failure. [ 928.378141][T15988] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 928.391335][T15988] CPU: 0 UID: 0 PID: 15988 Comm: syz.3.16012 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 928.391370][T15988] Tainted: [W]=WARN [ 928.391376][T15988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 928.391391][T15988] Call Trace: [ 928.391398][T15988] [ 928.391407][T15988] __dump_stack+0x1d/0x30 [ 928.391505][T15988] dump_stack_lvl+0xe8/0x140 [ 928.391522][T15988] dump_stack+0x15/0x1b [ 928.391538][T15988] should_fail_ex+0x265/0x280 [ 928.391561][T15988] should_fail+0xb/0x20 [ 928.391601][T15988] should_fail_usercopy+0x1a/0x20 [ 928.391626][T15988] _copy_from_user+0x1c/0xb0 [ 928.391719][T15988] ___sys_sendmsg+0xc1/0x1d0 [ 928.391792][T15988] __x64_sys_sendmsg+0xd4/0x160 [ 928.391820][T15988] x64_sys_call+0x191e/0x2ff0 [ 928.391842][T15988] do_syscall_64+0xd2/0x200 [ 928.391891][T15988] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 928.391917][T15988] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 928.391973][T15988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.391997][T15988] RIP: 0033:0x7fc8fcffebe9 [ 928.392012][T15988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 928.392032][T15988] RSP: 002b:00007fc8fba67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 928.392053][T15988] RAX: ffffffffffffffda RBX: 00007fc8fd235fa0 RCX: 00007fc8fcffebe9 [ 928.392127][T15988] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 928.392138][T15988] RBP: 00007fc8fba67090 R08: 0000000000000000 R09: 0000000000000000 [ 928.392149][T15988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 928.392161][T15988] R13: 00007fc8fd236038 R14: 00007fc8fd235fa0 R15: 00007ffd221b7948 [ 928.392180][T15988] [ 928.596167][T15994] loop8: detected capacity change from 0 to 16384 [ 928.614740][T15996] syzkaller0: entered allmulticast mode [ 928.620875][T15996] syzkaller0: entered promiscuous mode [ 928.629018][T15996] syzkaller0 (unregistering): left allmulticast mode [ 928.635842][T15996] syzkaller0 (unregistering): left promiscuous mode [ 928.710594][T15998] random: crng reseeded on system resumption [ 928.768190][T15997] loop8: detected capacity change from 16384 to 16383 [ 928.819474][T12655] EXT4-fs (loop7): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 928.843400][T16008] loop7: detected capacity change from 0 to 512 [ 928.850580][T16008] journal_path: Non-blockdev passed as './bus' [ 928.856812][T16008] EXT4-fs: error: could not find journal device path [ 928.902146][T16018] bridge0: port 3(gretap0) entered blocking state [ 928.908653][T16018] bridge0: port 3(gretap0) entered disabled state [ 928.943440][T16018] gretap0: entered allmulticast mode [ 928.960491][T16018] gretap0: entered promiscuous mode [ 928.965376][T16028] FAULT_INJECTION: forcing a failure. [ 928.965376][T16028] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 928.978851][T16028] CPU: 1 UID: 0 PID: 16028 Comm: syz.1.16032 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 928.978946][T16028] Tainted: [W]=WARN [ 928.978953][T16028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 928.978967][T16028] Call Trace: [ 928.978979][T16028] [ 928.978988][T16028] __dump_stack+0x1d/0x30 [ 928.979012][T16028] dump_stack_lvl+0xe8/0x140 [ 928.979055][T16028] dump_stack+0x15/0x1b [ 928.979073][T16028] should_fail_ex+0x265/0x280 [ 928.979097][T16028] should_fail+0xb/0x20 [ 928.979119][T16028] should_fail_usercopy+0x1a/0x20 [ 928.979140][T16028] strncpy_from_user+0x25/0x230 [ 928.979166][T16028] ? kmem_cache_alloc_noprof+0x186/0x310 [ 928.979212][T16028] ? getname_flags+0x80/0x3b0 [ 928.979241][T16028] getname_flags+0xae/0x3b0 [ 928.979269][T16028] __x64_sys_unlinkat+0x70/0xb0 [ 928.979341][T16028] x64_sys_call+0x2ede/0x2ff0 [ 928.979362][T16028] do_syscall_64+0xd2/0x200 [ 928.979468][T16028] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 928.979519][T16028] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 928.979544][T16028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 928.979566][T16028] RIP: 0033:0x7fd9cb59ebe9 [ 928.979640][T16028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 928.979657][T16028] RSP: 002b:00007fd9ca007038 EFLAGS: 00000246 ORIG_RAX: 0000000000000107 [ 928.979700][T16028] RAX: ffffffffffffffda RBX: 00007fd9cb7d5fa0 RCX: 00007fd9cb59ebe9 [ 928.979712][T16028] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 928.979725][T16028] RBP: 00007fd9ca007090 R08: 0000000000000000 R09: 0000000000000000 [ 928.979736][T16028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 928.979748][T16028] R13: 00007fd9cb7d6038 R14: 00007fd9cb7d5fa0 R15: 00007ffef349de08 [ 928.979763][T16028] [ 929.191564][T16035] loop8: detected capacity change from 0 to 16384 [ 929.306432][T16048] random: crng reseeded on system resumption [ 929.310964][T16047] loop8: detected capacity change from 16384 to 16383 [ 929.397986][T16058] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 929.643034][T16077] loop8: detected capacity change from 0 to 1024 [ 929.655889][T16077] EXT4-fs: Ignoring removed bh option [ 929.662141][T16077] EXT4-fs: inline encryption not supported [ 929.668574][T16077] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 929.684169][T16077] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 929.698856][T16077] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.16051: lblock 2 mapped to illegal pblock 2 (length 1) [ 929.713887][T16077] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.16051: lblock 0 mapped to illegal pblock 48 (length 1) [ 929.728547][T16077] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.16051: Failed to acquire dquot type 0 [ 929.740516][T16077] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 929.750788][T16077] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.16051: mark_inode_dirty error [ 929.762601][T16077] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 929.773160][T16077] EXT4-fs (loop8): 1 orphan inode deleted [ 929.779542][T16077] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 929.796557][ T168] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 929.820528][ T168] EXT4-fs error (device loop8): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 929.842089][ T8108] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 929.852944][ T8108] EXT4-fs error (device loop8): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 929.869437][T16086] __nla_validate_parse: 3 callbacks suppressed [ 929.869451][T16086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16054'. [ 929.885757][ T8108] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 929.895543][ T8108] EXT4-fs error (device loop8): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 929.899310][T16094] random: crng reseeded on system resumption [ 929.946590][T16100] syzkaller0: entered allmulticast mode [ 929.952774][T16100] syzkaller0: entered promiscuous mode [ 929.960936][T16100] syzkaller0 (unregistering): left allmulticast mode [ 929.967721][T16100] syzkaller0 (unregistering): left promiscuous mode [ 930.138382][T16114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16067'. [ 930.417480][T16142] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16078'. [ 930.915772][T16163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16086'. [ 931.228234][T16183] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16103'. [ 931.264077][T16191] loop8: detected capacity change from 0 to 16384 [ 931.318645][T16193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16097'. [ 931.387671][T16202] random: crng reseeded on system resumption [ 931.444648][T16199] loop8: detected capacity change from 16384 to 16383 [ 931.546947][T16215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16106'. [ 931.690196][T16237] netlink: 14 bytes leftover after parsing attributes in process `syz.3.16116'. [ 932.070578][T16246] loop7: detected capacity change from 0 to 512 [ 932.078846][T16246] journal_path: Non-blockdev passed as './bus' [ 932.085118][T16246] EXT4-fs: error: could not find journal device path [ 932.121718][T14938] hid_parser_main: 33 callbacks suppressed [ 932.121738][T14938] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 932.135068][T14938] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 932.142522][T14938] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 932.153301][T14938] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 932.160743][T14938] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 932.168272][T14938] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 932.175654][T14938] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 932.183141][T14938] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 932.190851][T14938] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 932.198350][T14938] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 932.205822][T14938] hid-generic 0000:0000:0000.0003: item fetching failed at offset 16/43 [ 932.221167][T16249] sch_tbf: peakrate 127 is lower than or equals to rate 4294934529 ! [ 932.230162][T14938] hid-generic 0000:0000:0000.0003: probe with driver hid-generic failed with error -22 [ 932.294483][T16253] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16121'. [ 932.295998][T16259] loop7: detected capacity change from 0 to 1024 [ 932.310300][T16259] EXT4-fs: Ignoring removed bh option [ 932.316022][T16259] EXT4-fs: inline encryption not supported [ 932.322596][T16259] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 932.339040][T16259] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 932.370870][T16259] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.16123: lblock 2 mapped to illegal pblock 2 (length 1) [ 932.405985][T16259] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.16123: lblock 0 mapped to illegal pblock 48 (length 1) [ 932.465150][T16259] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.16123: Failed to acquire dquot type 0 [ 932.477142][T16259] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 932.491573][T16259] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.16123: mark_inode_dirty error [ 932.512806][T16259] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 932.525026][T16259] EXT4-fs (loop7): 1 orphan inode deleted [ 932.532306][T16259] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 932.545623][ T51] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 932.578100][ T51] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0 [ 932.617432][T16275] loop8: detected capacity change from 0 to 512 [ 932.624122][T16275] journal_path: Non-blockdev passed as './bus' [ 932.630448][T16275] EXT4-fs: error: could not find journal device path [ 932.642516][T12655] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 932.656972][T12655] EXT4-fs error (device loop7): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 932.670290][T12655] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 932.681350][T12655] EXT4-fs error (device loop7): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 932.810667][ T29] kauditd_printk_skb: 1603 callbacks suppressed [ 932.810682][ T29] audit: type=1326 audit(39346.129:106427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16278 comm="syz.8.16133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d781ebe9 code=0x7ffc0000 [ 932.840284][ T29] audit: type=1326 audit(39346.129:106428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16278 comm="syz.8.16133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d781ebe9 code=0x7ffc0000 [ 932.899367][ T29] audit: type=1326 audit(39346.224:106429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16278 comm="syz.8.16133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb8d781ebe9 code=0x7ffc0000 [ 932.922900][ T29] audit: type=1326 audit(39346.224:106430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16278 comm="syz.8.16133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d781ebe9 code=0x7ffc0000 [ 932.946300][ T29] audit: type=1326 audit(39346.224:106431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16278 comm="syz.8.16133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d781ebe9 code=0x7ffc0000 [ 932.969774][ T29] audit: type=1326 audit(39346.224:106432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16278 comm="syz.8.16133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fb8d781ebe9 code=0x7ffc0000 [ 932.993005][ T29] audit: type=1326 audit(39346.224:106433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16278 comm="syz.8.16133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d781ebe9 code=0x7ffc0000 [ 933.016351][ T29] audit: type=1326 audit(39346.224:106434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16278 comm="syz.8.16133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d781ebe9 code=0x7ffc0000 [ 933.039697][ T29] audit: type=1326 audit(39346.224:106435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16278 comm="syz.8.16133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb8d781ebe9 code=0x7ffc0000 [ 933.062918][ T29] audit: type=1400 audit(39346.224:106436): avc: denied { name_bind } for pid=16278 comm="syz.8.16133" src=3618 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 933.123987][T16291] loop8: detected capacity change from 0 to 512 [ 933.134399][T16291] journal_path: Non-blockdev passed as './bus' [ 933.140745][T16291] EXT4-fs: error: could not find journal device path [ 933.175553][T16298] syzkaller0: entered allmulticast mode [ 933.205563][T16303] loop8: detected capacity change from 0 to 1024 [ 933.213498][T16303] EXT4-fs: Ignoring removed bh option [ 933.219200][T16303] EXT4-fs: inline encryption not supported [ 933.220408][T16298] syzkaller0: entered promiscuous mode [ 933.226555][T16303] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 933.236795][T16295] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16138'. [ 933.241747][T16303] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 933.258798][T16303] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 2: comm syz.8.16141: lblock 2 mapped to illegal pblock 2 (length 1) [ 933.259151][T16298] syzkaller0 (unregistering): left allmulticast mode [ 933.274594][T16303] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 48: comm syz.8.16141: lblock 0 mapped to illegal pblock 48 (length 1) [ 933.279615][T16298] syzkaller0 (unregistering): left promiscuous mode [ 933.295801][T16303] EXT4-fs error (device loop8): ext4_acquire_dquot:6937: comm syz.8.16141: Failed to acquire dquot type 0 [ 933.312940][T16303] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 933.324331][T16303] EXT4-fs error (device loop8): ext4_evict_inode:254: inode #11: comm syz.8.16141: mark_inode_dirty error [ 933.335927][T16303] EXT4-fs warning (device loop8): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 933.347789][T16303] EXT4-fs (loop8): 1 orphan inode deleted [ 933.355012][T16303] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 933.370311][ T51] EXT4-fs error (device loop8): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 933.403128][ T51] EXT4-fs error (device loop8): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0 [ 933.423737][ T8108] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 933.434410][ T8108] EXT4-fs error (device loop8): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 933.462409][ T8108] EXT4-fs error (device loop8) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 933.473863][ T8108] EXT4-fs error (device loop8): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 933.541571][T16314] sg_write: data in/out 11329/120 bytes for SCSI command 0x0-- guessing data in; [ 933.541571][T16314] program syz.2.16145 not setting count and/or reply_len properly [ 933.582023][T16338] loop7: detected capacity change from 0 to 512 [ 933.591074][T16338] journal_path: Non-blockdev passed as './bus' [ 933.597409][T16338] EXT4-fs: error: could not find journal device path [ 933.659321][T16348] loop7: detected capacity change from 0 to 1024 [ 933.673483][T16348] EXT4-fs: Ignoring removed bh option [ 933.689923][T16354] loop8: detected capacity change from 0 to 16384 [ 933.692985][T16348] EXT4-fs: inline encryption not supported [ 933.717493][T16348] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 933.738992][T16348] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 933.750366][T16348] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.16159: lblock 2 mapped to illegal pblock 2 (length 1) [ 933.770462][T16348] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.16159: lblock 0 mapped to illegal pblock 48 (length 1) [ 933.792903][T16348] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.16159: Failed to acquire dquot type 0 [ 933.826187][T16364] loop8: detected capacity change from 16384 to 16383 [ 933.851147][T16348] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 933.858979][T16364] random: crng reseeded on system resumption [ 933.883441][T16348] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.16159: mark_inode_dirty error [ 933.895029][T16348] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 933.910744][T16348] EXT4-fs (loop7): 1 orphan inode deleted [ 933.921316][T16348] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 933.934117][ T168] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 933.965706][ T168] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 934.000521][T12655] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 934.022669][T12655] EXT4-fs error (device loop7): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 934.041001][T12655] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 934.062657][T12655] EXT4-fs error (device loop7): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 934.118999][T16392] loop7: detected capacity change from 0 to 512 [ 934.131675][T16392] journal_path: Non-blockdev passed as './bus' [ 934.137888][T16392] EXT4-fs: error: could not find journal device path [ 934.207305][T16403] FAULT_INJECTION: forcing a failure. [ 934.207305][T16403] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 934.220523][T16403] CPU: 0 UID: 0 PID: 16403 Comm: syz.3.16180 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 934.220557][T16403] Tainted: [W]=WARN [ 934.220564][T16403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 934.220576][T16403] Call Trace: [ 934.220582][T16403] [ 934.220590][T16403] __dump_stack+0x1d/0x30 [ 934.220629][T16403] dump_stack_lvl+0xe8/0x140 [ 934.220649][T16403] dump_stack+0x15/0x1b [ 934.220667][T16403] should_fail_ex+0x265/0x280 [ 934.220687][T16403] should_fail+0xb/0x20 [ 934.220702][T16403] should_fail_usercopy+0x1a/0x20 [ 934.220763][T16403] _copy_from_user+0x1c/0xb0 [ 934.220793][T16403] get_user_ifreq+0x53/0x110 [ 934.220818][T16403] sock_ioctl+0x54e/0x610 [ 934.220842][T16403] ? __pfx_sock_ioctl+0x10/0x10 [ 934.220880][T16403] __se_sys_ioctl+0xcb/0x140 [ 934.220900][T16403] __x64_sys_ioctl+0x43/0x50 [ 934.220922][T16403] x64_sys_call+0x1816/0x2ff0 [ 934.220969][T16403] do_syscall_64+0xd2/0x200 [ 934.221062][T16403] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 934.221188][T16403] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 934.221211][T16403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 934.221287][T16403] RIP: 0033:0x7fc8fcffebe9 [ 934.221303][T16403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 934.221321][T16403] RSP: 002b:00007fc8fba67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 934.221342][T16403] RAX: ffffffffffffffda RBX: 00007fc8fd235fa0 RCX: 00007fc8fcffebe9 [ 934.221354][T16403] RDX: 0000200000000680 RSI: 00000000000089f2 RDI: 0000000000000004 [ 934.221427][T16403] RBP: 00007fc8fba67090 R08: 0000000000000000 R09: 0000000000000000 [ 934.221439][T16403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 934.221452][T16403] R13: 00007fc8fd236038 R14: 00007fc8fd235fa0 R15: 00007ffd221b7948 [ 934.221469][T16403] [ 934.469451][T16417] syzkaller0: entered allmulticast mode [ 934.484614][T16417] syzkaller0: entered promiscuous mode [ 934.494650][T16417] syzkaller0 (unregistering): left allmulticast mode [ 934.501421][T16417] syzkaller0 (unregistering): left promiscuous mode [ 934.587963][T16423] syzkaller0: entered allmulticast mode [ 934.598991][T16423] syzkaller0: entered promiscuous mode [ 934.606447][T16423] syzkaller0 (unregistering): left allmulticast mode [ 934.613205][T16423] syzkaller0 (unregistering): left promiscuous mode [ 934.658525][T16427] bond_slave_0: entered promiscuous mode [ 934.664248][T16427] bond_slave_1: entered promiscuous mode [ 934.670622][T16427] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 934.679911][T16427] bond_slave_0: left promiscuous mode [ 934.685329][T16427] bond_slave_1: left promiscuous mode [ 934.694635][T16433] loop7: detected capacity change from 0 to 4096 [ 934.703197][T16433] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 934.754982][T12655] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 934.817325][T16451] loop7: detected capacity change from 0 to 1024 [ 934.824019][T16451] EXT4-fs: Ignoring removed bh option [ 934.829777][T16451] EXT4-fs: inline encryption not supported [ 934.836997][T16451] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 934.856994][T16451] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 934.866402][T16451] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.16200: lblock 2 mapped to illegal pblock 2 (length 1) [ 934.880692][T16451] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.16200: lblock 0 mapped to illegal pblock 48 (length 1) [ 934.895566][T16451] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.16200: Failed to acquire dquot type 0 [ 934.911129][T16451] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 934.922035][T16451] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.16200: mark_inode_dirty error [ 934.936752][T16451] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 934.948235][T16451] EXT4-fs (loop7): 1 orphan inode deleted [ 934.954983][T16451] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 934.967592][ T12] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:0: lblock 1 mapped to illegal pblock 1 (length 1) [ 934.982032][ T12] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:0: Failed to release dquot type 0 [ 935.002331][T12655] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 935.011942][T12655] EXT4-fs error (device loop7): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 935.025138][T12655] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 935.034854][T12655] EXT4-fs error (device loop7): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 935.061230][T16473] loop7: detected capacity change from 0 to 1024 [ 935.067893][T16473] EXT4-fs: Ignoring removed bh option [ 935.073330][T16473] EXT4-fs: inline encryption not supported [ 935.079554][T16473] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 935.091043][T16473] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 935.100094][T16473] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.16209: lblock 2 mapped to illegal pblock 2 (length 1) [ 935.114455][T16473] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.16209: lblock 0 mapped to illegal pblock 48 (length 1) [ 935.129734][T16473] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.16209: Failed to acquire dquot type 0 [ 935.142483][T16473] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 935.152595][T16473] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.16209: mark_inode_dirty error [ 935.166600][T16473] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 935.179228][T16473] EXT4-fs (loop7): 1 orphan inode deleted [ 935.184823][T16482] __nla_validate_parse: 7 callbacks suppressed [ 935.184839][T16482] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16214'. [ 935.185462][T16473] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 935.212734][ T51] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 935.227228][ T51] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:3: Failed to release dquot type 0 [ 935.230026][T16482] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16214'. [ 935.258044][T12655] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 935.267855][T12655] EXT4-fs error (device loop7): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 935.270566][T16484] netlink: 14 bytes leftover after parsing attributes in process `syz.1.16216'. [ 935.282032][T12655] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 935.299468][T12655] EXT4-fs error (device loop7): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 935.393005][T16493] syzkaller0: entered allmulticast mode [ 935.399121][T16493] syzkaller0: entered promiscuous mode [ 935.405926][T16493] syzkaller0 (unregistering): left allmulticast mode [ 935.412747][T16493] syzkaller0 (unregistering): left promiscuous mode [ 935.558821][T16503] loop7: detected capacity change from 0 to 512 [ 935.565739][T16503] journal_path: Non-blockdev passed as './bus' [ 935.572058][T16503] EXT4-fs: error: could not find journal device path [ 935.756873][T16510] FAULT_INJECTION: forcing a failure. [ 935.756873][T16510] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 935.769988][T16510] CPU: 0 UID: 0 PID: 16510 Comm: syz.7.16227 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 935.770027][T16510] Tainted: [W]=WARN [ 935.770033][T16510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 935.770045][T16510] Call Trace: [ 935.770053][T16510] [ 935.770061][T16510] __dump_stack+0x1d/0x30 [ 935.770083][T16510] dump_stack_lvl+0xe8/0x140 [ 935.770130][T16510] dump_stack+0x15/0x1b [ 935.770212][T16510] should_fail_ex+0x265/0x280 [ 935.770233][T16510] should_fail+0xb/0x20 [ 935.770253][T16510] should_fail_usercopy+0x1a/0x20 [ 935.770278][T16510] _copy_from_user+0x1c/0xb0 [ 935.770315][T16510] ___sys_sendmsg+0xc1/0x1d0 [ 935.770364][T16510] __x64_sys_sendmsg+0xd4/0x160 [ 935.770398][T16510] x64_sys_call+0x191e/0x2ff0 [ 935.770471][T16510] do_syscall_64+0xd2/0x200 [ 935.770501][T16510] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 935.770527][T16510] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 935.770629][T16510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 935.770653][T16510] RIP: 0033:0x7fc30302ebe9 [ 935.770669][T16510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 935.770721][T16510] RSP: 002b:00007fc301a97038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 935.770814][T16510] RAX: ffffffffffffffda RBX: 00007fc303265fa0 RCX: 00007fc30302ebe9 [ 935.770828][T16510] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000007 [ 935.770842][T16510] RBP: 00007fc301a97090 R08: 0000000000000000 R09: 0000000000000000 [ 935.770855][T16510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 935.770866][T16510] R13: 00007fc303266038 R14: 00007fc303265fa0 R15: 00007ffe9f730698 [ 935.770882][T16510] [ 935.981486][T16516] loop7: detected capacity change from 0 to 512 [ 936.000722][T16516] EXT4-fs (loop7): too many log groups per flexible block group [ 936.008588][T16516] EXT4-fs (loop7): failed to initialize mballoc (-12) [ 936.015824][T16516] EXT4-fs (loop7): mount failed [ 936.044828][T16524] syzkaller0: entered allmulticast mode [ 936.050664][T16524] syzkaller0: entered promiscuous mode [ 936.058541][T16524] syzkaller0 (unregistering): left allmulticast mode [ 936.065412][T16524] syzkaller0 (unregistering): left promiscuous mode [ 936.086690][T16530] FAULT_INJECTION: forcing a failure. [ 936.086690][T16530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 936.099853][T16530] CPU: 0 UID: 0 PID: 16530 Comm: syz.7.16245 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 936.099892][T16530] Tainted: [W]=WARN [ 936.099900][T16530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 936.099914][T16530] Call Trace: [ 936.099922][T16530] [ 936.099981][T16530] __dump_stack+0x1d/0x30 [ 936.100005][T16530] dump_stack_lvl+0xe8/0x140 [ 936.100049][T16530] dump_stack+0x15/0x1b [ 936.100112][T16530] should_fail_ex+0x265/0x280 [ 936.100131][T16530] should_fail+0xb/0x20 [ 936.100148][T16530] should_fail_usercopy+0x1a/0x20 [ 936.100170][T16530] _copy_from_user+0x1c/0xb0 [ 936.100249][T16530] __sys_bpf+0x178/0x7b0 [ 936.100286][T16530] __x64_sys_bpf+0x41/0x50 [ 936.100366][T16530] x64_sys_call+0x2aea/0x2ff0 [ 936.100392][T16530] do_syscall_64+0xd2/0x200 [ 936.100421][T16530] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 936.100527][T16530] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 936.100562][T16530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 936.100587][T16530] RIP: 0033:0x7fc30302ebe9 [ 936.100605][T16530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 936.100622][T16530] RSP: 002b:00007fc301a97038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 936.100640][T16530] RAX: ffffffffffffffda RBX: 00007fc303265fa0 RCX: 00007fc30302ebe9 [ 936.100655][T16530] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 936.100669][T16530] RBP: 00007fc301a97090 R08: 0000000000000000 R09: 0000000000000000 [ 936.100741][T16530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 936.100753][T16530] R13: 00007fc303266038 R14: 00007fc303265fa0 R15: 00007ffe9f730698 [ 936.100770][T16530] [ 936.431908][T16547] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16240'. [ 937.088237][T16555] netlink: 14 bytes leftover after parsing attributes in process `syz.2.16246'. [ 937.177682][T16566] syzkaller0: entered allmulticast mode [ 937.184358][T16566] syzkaller0: entered promiscuous mode [ 937.192739][T16566] syzkaller0 (unregistering): left allmulticast mode [ 937.199493][T16566] syzkaller0 (unregistering): left promiscuous mode [ 937.579043][ T29] kauditd_printk_skb: 932 callbacks suppressed [ 937.579059][ T29] audit: type=1326 audit(39351.148:107357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16592 comm="syz.8.16263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d781ebe9 code=0x7ffc0000 [ 937.609120][ T29] audit: type=1326 audit(39351.148:107358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16592 comm="syz.8.16263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d781ebe9 code=0x7ffc0000 [ 937.615753][T16595] loop8: detected capacity change from 0 to 512 [ 937.632528][ T29] audit: type=1326 audit(39351.148:107359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16554 comm="syz.2.16246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd11e95ba7 code=0x7ffc0000 [ 937.640364][T16595] journal_path: Non-blockdev passed as './bus' [ 937.662312][ T29] audit: type=1326 audit(39351.148:107360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16554 comm="syz.2.16246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd11e3adb9 code=0x7ffc0000 [ 937.668505][T16595] EXT4-fs: error: could not find journal device path [ 937.698516][ T29] audit: type=1326 audit(39351.148:107361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16554 comm="syz.2.16246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fbd11e9ebe9 code=0x7ffc0000 [ 937.721924][ T29] audit: type=1326 audit(39351.148:107362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16592 comm="syz.8.16263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7fb8d781ebe9 code=0x7ffc0000 [ 937.745392][ T29] audit: type=1326 audit(39351.148:107363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16592 comm="syz.8.16263" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb8d781ebe9 code=0x7ffc0000 [ 937.768708][ T29] audit: type=1326 audit(39351.158:107364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16554 comm="syz.2.16246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd11e95ba7 code=0x7ffc0000 [ 937.792006][ T29] audit: type=1326 audit(39351.158:107365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16554 comm="syz.2.16246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd11e3adb9 code=0x7ffc0000 [ 937.815203][ T29] audit: type=1326 audit(39351.158:107366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16554 comm="syz.2.16246" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7fbd11e9ebe9 code=0x7ffc0000 [ 937.955200][T16601] syzkaller0: entered allmulticast mode [ 937.961205][T16601] syzkaller0: entered promiscuous mode [ 937.968611][T16601] syzkaller0 (unregistering): left allmulticast mode [ 937.975348][T16601] syzkaller0 (unregistering): left promiscuous mode [ 938.071650][T16607] loop7: detected capacity change from 0 to 512 [ 938.078407][T16607] journal_path: Non-blockdev passed as './bus' [ 938.084719][T16607] EXT4-fs: error: could not find journal device path [ 938.182314][T16617] netlink: 14 bytes leftover after parsing attributes in process `syz.1.16276'. [ 938.223633][T16619] loop7: detected capacity change from 0 to 512 [ 938.230592][T16619] journal_path: Non-blockdev passed as './bus' [ 938.236768][T16619] EXT4-fs: error: could not find journal device path [ 938.358690][T16629] loop7: detected capacity change from 0 to 512 [ 938.367474][T16629] journal_path: Non-blockdev passed as './bus' [ 938.373838][T16629] EXT4-fs: error: could not find journal device path [ 938.505939][T16635] loop7: detected capacity change from 0 to 512 [ 938.513653][T16635] journal_path: Non-blockdev passed as './bus' [ 938.519913][T16635] EXT4-fs: error: could not find journal device path [ 939.420869][T16678] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16302'. [ 939.698208][T16699] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16312'. [ 939.786116][T16706] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16314'. [ 940.148048][T16731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16324'. [ 940.203539][T16738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16326'. [ 940.260364][T16750] syzkaller0: entered allmulticast mode [ 940.267652][T16750] syzkaller0: entered promiscuous mode [ 940.278360][T16750] syzkaller0 (unregistering): left allmulticast mode [ 940.283652][T16752] loop8: detected capacity change from 0 to 16384 [ 940.285216][T16750] syzkaller0 (unregistering): left promiscuous mode [ 940.414269][T16760] random: crng reseeded on system resumption [ 940.436924][T16759] loop8: detected capacity change from 16384 to 16383 [ 940.484067][T16766] netlink: 14 bytes leftover after parsing attributes in process `syz.7.16339'. [ 940.618457][T16776] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16342'. [ 940.710197][T16781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16343'. [ 941.345910][T16795] 9pnet: Could not find request transport: xen [ 941.438837][T16803] loop7: detected capacity change from 0 to 1024 [ 941.446719][T16803] EXT4-fs: Ignoring removed bh option [ 941.453117][T16803] EXT4-fs: inline encryption not supported [ 941.460753][T16803] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 941.471757][T16803] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 941.482260][T16803] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.16350: lblock 2 mapped to illegal pblock 2 (length 1) [ 941.497366][T16803] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.16350: lblock 0 mapped to illegal pblock 48 (length 1) [ 941.511976][T16803] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.16350: Failed to acquire dquot type 0 [ 941.530866][T16803] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 941.541632][T16803] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.16350: mark_inode_dirty error [ 941.553436][T16803] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 941.564437][T16803] EXT4-fs (loop7): 1 orphan inode deleted [ 941.568033][T16815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16354'. [ 941.570690][T16803] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 941.594965][T10718] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:9: lblock 1 mapped to illegal pblock 1 (length 1) [ 941.624721][T10718] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:9: Failed to release dquot type 0 [ 941.640830][T12655] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 941.651549][T12655] EXT4-fs error (device loop7): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 941.666109][T12655] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 941.675723][T12655] EXT4-fs error (device loop7): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 941.711464][T16824] syzkaller0: entered allmulticast mode [ 941.717408][T16824] syzkaller0: entered promiscuous mode [ 941.724726][T16824] syzkaller0 (unregistering): left allmulticast mode [ 941.731554][T16824] syzkaller0 (unregistering): left promiscuous mode [ 942.256201][T16895] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16392'. [ 942.265409][T16895] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16392'. [ 942.285195][T16895] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16392'. [ 942.294312][T16895] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16392'. [ 942.350288][ T29] kauditd_printk_skb: 2612 callbacks suppressed [ 942.350328][ T29] audit: type=1326 audit(39356.156:109973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16821 comm="syz.7.16355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc303025ba7 code=0x7ffc0000 [ 942.382222][ T29] audit: type=1326 audit(39356.187:109974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16821 comm="syz.7.16355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc302fcadb9 code=0x7ffc0000 [ 942.405685][ T29] audit: type=1326 audit(39356.187:109975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16821 comm="syz.7.16355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc303025ba7 code=0x7ffc0000 [ 942.429051][ T29] audit: type=1326 audit(39356.187:109976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16821 comm="syz.7.16355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc302fcadb9 code=0x7ffc0000 [ 942.442381][T16917] loop8: detected capacity change from 0 to 16384 [ 942.452369][ T29] audit: type=1326 audit(39356.187:109977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16821 comm="syz.7.16355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fc30302ebe9 code=0x7ffc0000 [ 942.483894][ T29] audit: type=1326 audit(39356.219:109978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16913 comm="syz.1.16399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9cb59ebe9 code=0x7ffc0000 [ 942.507270][ T29] audit: type=1326 audit(39356.219:109979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16913 comm="syz.1.16399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9cb59ebe9 code=0x7ffc0000 [ 942.530577][ T29] audit: type=1326 audit(39356.219:109980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16913 comm="syz.1.16399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9cb59ebe9 code=0x7ffc0000 [ 942.554334][ T29] audit: type=1326 audit(39356.219:109981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16913 comm="syz.1.16399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9cb59ebe9 code=0x7ffc0000 [ 942.577678][ T29] audit: type=1326 audit(39356.219:109982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16913 comm="syz.1.16399" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9cb59ebe9 code=0x7ffc0000 [ 942.702603][T16919] loop8: detected capacity change from 16384 to 16383 [ 942.820028][T16917] random: crng reseeded on system resumption [ 942.906645][T16945] syzkaller0: entered allmulticast mode [ 942.923569][T16945] syzkaller0: entered promiscuous mode [ 942.952396][T16945] syzkaller0 (unregistering): left allmulticast mode [ 942.959213][T16945] syzkaller0 (unregistering): left promiscuous mode [ 943.150808][T16952] syzkaller0: entered allmulticast mode [ 943.179798][T16952] syzkaller0: entered promiscuous mode [ 943.200379][T16952] syzkaller0 (unregistering): left allmulticast mode [ 943.207147][T16952] syzkaller0 (unregistering): left promiscuous mode [ 943.448264][T16968] Falling back ldisc for ttyS3. [ 943.707819][T10718] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.735595][T16982] chnl_net:caif_netlink_parms(): no params data found [ 943.796450][T10718] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.849754][T16982] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.856913][T16982] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.873344][T16982] bridge_slave_0: entered allmulticast mode [ 943.880039][T16982] bridge_slave_0: entered promiscuous mode [ 943.886975][T16982] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.894080][T16982] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.901362][T16982] bridge_slave_1: entered allmulticast mode [ 943.908143][T16982] bridge_slave_1: entered promiscuous mode [ 943.948377][T10718] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 943.970293][T16982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 943.996861][T16982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 944.007250][T10718] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.055132][T16982] team0: Port device team_slave_0 added [ 944.062813][T17039] loop7: detected capacity change from 0 to 1024 [ 944.063181][T16982] team0: Port device team_slave_1 added [ 944.069752][T17039] EXT4-fs: Ignoring removed bh option [ 944.080522][T17039] EXT4-fs: inline encryption not supported [ 944.087740][T17039] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 944.098977][T17039] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 944.108467][T17039] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 2: comm syz.7.16445: lblock 2 mapped to illegal pblock 2 (length 1) [ 944.123284][T17039] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 48: comm syz.7.16445: lblock 0 mapped to illegal pblock 48 (length 1) [ 944.138578][T17039] EXT4-fs error (device loop7): ext4_acquire_dquot:6937: comm syz.7.16445: Failed to acquire dquot type 0 [ 944.144620][T16982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 944.157081][T16982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 944.157100][T17039] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 944.183050][T16982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 944.203868][T16982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 944.211094][T16982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 944.219243][T17039] EXT4-fs error (device loop7): ext4_evict_inode:254: inode #11: comm syz.7.16445: mark_inode_dirty error [ 944.237148][T16982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 944.259573][T17039] EXT4-fs warning (device loop7): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 944.280981][T17039] EXT4-fs (loop7): 1 orphan inode deleted [ 944.293276][ T1456] EXT4-fs error (device loop7): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 944.300452][T16982] hsr_slave_0: entered promiscuous mode [ 944.315951][T17039] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 944.324618][ T1456] EXT4-fs error (device loop7): ext4_release_dquot:6973: comm kworker/u8:6: Failed to release dquot type 0 [ 944.329115][T16982] hsr_slave_1: entered promiscuous mode [ 944.346649][T10718] bridge_slave_1: left allmulticast mode [ 944.352385][T10718] bridge_slave_1: left promiscuous mode [ 944.358206][T10718] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.366278][T10718] bridge_slave_0: left allmulticast mode [ 944.371989][T10718] bridge_slave_0: left promiscuous mode [ 944.377674][T10718] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.386369][T12655] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 944.395763][T12655] EXT4-fs error (device loop7): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 944.409011][T12655] EXT4-fs error (device loop7) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 944.418719][T12655] EXT4-fs error (device loop7): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error [ 944.476620][T10718] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 944.486666][T10718] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 944.496410][T10718] bond0 (unregistering): Released all slaves [ 944.505399][T10718] bond1 (unregistering): Released all slaves [ 944.550842][T10718] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 944.558281][T10718] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 944.579386][T10718] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 944.587106][T10718] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 944.598095][T10718] veth1_macvtap: left promiscuous mode [ 944.603676][T10718] veth0_macvtap: left promiscuous mode [ 944.651917][T10718] team0 (unregistering): Port device team_slave_1 removed [ 944.662736][T10718] team0 (unregistering): Port device team_slave_0 removed [ 945.114251][T16982] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 945.123105][T16982] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 945.132287][T16982] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 945.144616][T16982] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 945.177702][T16982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 945.191246][T16982] 8021q: adding VLAN 0 to HW filter on device team0 [ 945.200970][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 945.208105][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 945.220724][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 945.227980][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 945.283914][T16982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 945.378081][T16982] veth0_vlan: entered promiscuous mode [ 945.385784][T16982] veth1_vlan: entered promiscuous mode [ 945.400801][T16982] veth0_macvtap: entered promiscuous mode [ 945.408048][T16982] veth1_macvtap: entered promiscuous mode [ 945.418057][T16982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 945.429241][T16982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 945.439558][ T7532] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.449049][ T7532] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.459600][ T7532] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.469099][ T7532] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.549758][T17135] __nla_validate_parse: 9 callbacks suppressed [ 945.549772][T17135] netlink: 14 bytes leftover after parsing attributes in process `syz.3.16473'. [ 945.875293][T17146] loop7: detected capacity change from 0 to 512 [ 945.882400][T17146] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 945.893380][T17146] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.16477: bad orphan inode 15 [ 945.904155][T17146] ext4_test_bit(bit=14, block=18) = 1 [ 945.909560][T17146] is_bad_inode(inode)=0 [ 945.913758][T17146] NEXT_ORPHAN(inode)=1023 [ 945.918085][T17146] max_ino=32 [ 945.921393][T17146] i_nlink=0 [ 945.925620][T17146] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2962: inode #15: comm syz.7.16477: corrupted xattr block 19: invalid header [ 945.939663][T17146] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 945.949202][T17146] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 945.994791][T17152] syzkaller0: entered allmulticast mode [ 946.001268][T17152] syzkaller0: entered promiscuous mode [ 946.065974][T17152] syzkaller0 (unregistering): left allmulticast mode [ 946.072755][T17152] syzkaller0 (unregistering): left promiscuous mode [ 946.717616][T12655] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 946.756169][T17179] loop8: detected capacity change from 0 to 1024 [ 946.776968][T17179] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 947.037218][T17209] 9pnet_fd: Insufficient options for proto=fd [ 947.217257][ T29] kauditd_printk_skb: 1614 callbacks suppressed [ 947.217273][ T29] audit: type=1326 audit(39361.185:111594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17163 comm="syz.2.16483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd11e95ba7 code=0x7ffc0000 [ 947.246911][ T29] audit: type=1326 audit(39361.185:111595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17163 comm="syz.2.16483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd11e3adb9 code=0x7ffc0000 [ 947.270209][ T29] audit: type=1326 audit(39361.185:111596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17163 comm="syz.2.16483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fbd11e9ebe9 code=0x7ffc0000 [ 947.293645][ T29] audit: type=1326 audit(39361.196:111597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17163 comm="syz.2.16483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd11e95ba7 code=0x7ffc0000 [ 947.316883][ T29] audit: type=1326 audit(39361.196:111598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17163 comm="syz.2.16483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd11e3adb9 code=0x7ffc0000 [ 947.340095][ T29] audit: type=1326 audit(39361.196:111599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17163 comm="syz.2.16483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fbd11e9ebe9 code=0x7ffc0000 [ 947.363452][ T29] audit: type=1400 audit(39361.196:111600): avc: denied { watch } for pid=17205 comm="syz.1.16504" path="/557" dev="tmpfs" ino=2992 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 947.385412][ T29] audit: type=1326 audit(39361.206:111601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17163 comm="syz.2.16483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd11e95ba7 code=0x7ffc0000 [ 947.408707][ T29] audit: type=1326 audit(39361.206:111602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17163 comm="syz.2.16483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd11e3adb9 code=0x7ffc0000 [ 947.432114][ T29] audit: type=1326 audit(39361.206:111603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17163 comm="syz.2.16483" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fbd11e9ebe9 code=0x7ffc0000 [ 948.612694][T17288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16537'. [ 948.680306][T17293] 9pnet_fd: Insufficient options for proto=fd [ 948.859843][T17310] loop8: detected capacity change from 0 to 16384 [ 948.968407][T17318] 9pnet_fd: Insufficient options for proto=fd [ 949.004680][T17319] random: crng reseeded on system resumption [ 949.055360][T17314] loop8: detected capacity change from 16384 to 16383 [ 949.100042][T17325] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16552'. [ 949.228622][T17346] netlink: 14 bytes leftover after parsing attributes in process `syz.3.16560'. [ 950.098305][T17366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16568'. [ 950.412200][T17393] syzkaller0: entered allmulticast mode [ 950.418233][T17393] syzkaller0: entered promiscuous mode [ 950.426010][T17393] syzkaller0 (unregistering): left allmulticast mode [ 950.432828][T17393] syzkaller0 (unregistering): left promiscuous mode [ 950.444450][T17389] loop8: detected capacity change from 0 to 1024 [ 950.451759][T17389] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 950.505250][T17398] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16580'. [ 950.587582][T17408] syzkaller0: entered allmulticast mode [ 950.593743][T17408] syzkaller0: entered promiscuous mode [ 950.602286][T17408] syzkaller0 (unregistering): left allmulticast mode [ 950.609037][T17408] syzkaller0 (unregistering): left promiscuous mode [ 950.669000][T17413] loop7: detected capacity change from 0 to 1024 [ 950.676429][T17413] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 951.002163][T17437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16599'. [ 951.294243][T17463] netem: change failed [ 951.638686][T17475] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16614'. [ 951.988991][ T29] kauditd_printk_skb: 1475 callbacks suppressed [ 951.989005][ T29] audit: type=1326 audit(39366.277:113079): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17486 comm="syz.2.16618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd11e95ba7 code=0x7ffc0000 [ 952.018586][ T29] audit: type=1326 audit(39366.277:113080): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17486 comm="syz.2.16618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd11e3adb9 code=0x7ffc0000 [ 952.042004][ T29] audit: type=1326 audit(39366.277:113081): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17486 comm="syz.2.16618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fbd11e9ebe9 code=0x7ffc0000 [ 952.065367][ T29] audit: type=1326 audit(39366.277:113082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17486 comm="syz.2.16618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd11e95ba7 code=0x7ffc0000 [ 952.088841][ T29] audit: type=1326 audit(39366.277:113083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17486 comm="syz.2.16618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd11e3adb9 code=0x7ffc0000 [ 952.112054][ T29] audit: type=1326 audit(39366.277:113084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17486 comm="syz.2.16618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fbd11e9ebe9 code=0x7ffc0000 [ 952.135392][ T29] audit: type=1326 audit(39366.277:113085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17486 comm="syz.2.16618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd11e95ba7 code=0x7ffc0000 [ 952.158706][ T29] audit: type=1326 audit(39366.277:113086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17486 comm="syz.2.16618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbd11e3adb9 code=0x7ffc0000 [ 952.182013][ T29] audit: type=1326 audit(39366.277:113087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17486 comm="syz.2.16618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fbd11e9ebe9 code=0x7ffc0000 [ 952.205292][ T29] audit: type=1326 audit(39366.277:113088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17486 comm="syz.2.16618" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbd11e95ba7 code=0x7ffc0000 [ 952.807569][T17505] chnl_net:caif_netlink_parms(): no params data found [ 952.850234][T17505] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.857360][T17505] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.864834][T17505] bridge_slave_0: entered allmulticast mode [ 952.871245][T17505] bridge_slave_0: entered promiscuous mode [ 952.878248][T17505] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.885430][T17505] bridge0: port 2(bridge_slave_1) entered disabled state [ 952.892678][T17505] bridge_slave_1: entered allmulticast mode [ 952.899101][T17505] bridge_slave_1: entered promiscuous mode [ 952.916084][T17505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 952.927014][T17505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 953.012470][T17525] netem: change failed [ 953.032156][T17505] team0: Port device team_slave_0 added [ 953.045367][T17505] team0: Port device team_slave_1 added [ 953.083481][T17505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.090516][T17505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.116915][T17505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.130413][T17505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.137594][T17505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.163607][T17505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.204399][T17505] hsr_slave_0: entered promiscuous mode [ 953.210644][T17505] hsr_slave_1: entered promiscuous mode [ 953.216497][T17505] debugfs: 'hsr0' already exists in 'hsr' [ 953.222285][T17505] Cannot create hsr debugfs directory [ 953.268643][T17505] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.342115][T17505] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.363761][T17529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16629'. [ 953.410714][T17505] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.464800][T17505] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 953.499448][T17540] loop8: detected capacity change from 0 to 512 [ 953.506109][T17540] journal_path: Non-blockdev passed as './bus' [ 953.512263][T17540] EXT4-fs: error: could not find journal device path [ 953.540776][T17505] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 953.555892][T17505] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 953.571858][T17505] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 953.592112][T17505] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 953.626650][T17505] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.633814][T17505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 953.641130][T17505] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.648260][T17505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.703078][T17505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 953.714846][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.723324][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.736960][T17505] 8021q: adding VLAN 0 to HW filter on device team0 [ 953.746472][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.753614][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.764789][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.771876][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 953.854194][T17505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 953.917232][T17505] veth0_vlan: entered promiscuous mode [ 953.924939][T17505] veth1_vlan: entered promiscuous mode [ 953.939575][T17505] veth0_macvtap: entered promiscuous mode [ 953.946985][T17505] veth1_macvtap: entered promiscuous mode [ 953.957487][T17505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 953.968548][T17505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 953.980896][ T1456] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.990216][ T1456] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.000666][ T1456] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.010450][ T1456] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.041564][T17586] loop8: detected capacity change from 0 to 16384 [ 954.162330][T17586] random: crng reseeded on system resumption [ 954.189001][T17587] loop8: detected capacity change from 16384 to 16383 [ 954.372609][T17603] loop8: detected capacity change from 0 to 16384 [ 954.390514][T17600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16649'. [ 954.510098][T17613] random: crng reseeded on system resumption [ 954.570000][T17608] loop8: detected capacity change from 16384 to 16383 [ 955.379166][T17651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16666'. [ 955.715489][T17685] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16681'. [ 956.526612][T17711] syzkaller0: entered allmulticast mode [ 956.532929][T17711] syzkaller0: entered promiscuous mode [ 956.539708][T17711] syzkaller0 (unregistering): left allmulticast mode [ 956.546523][T17711] syzkaller0 (unregistering): left promiscuous mode [ 956.931993][ T29] kauditd_printk_skb: 1868 callbacks suppressed [ 956.932010][ T29] audit: type=1326 audit(39371.453:114957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17743 comm="syz.3.16705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8fcffebe9 code=0x7ffc0000 [ 956.962166][ T29] audit: type=1326 audit(39371.453:114958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17743 comm="syz.3.16705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc8fcffebe9 code=0x7ffc0000 [ 956.985610][ T29] audit: type=1326 audit(39371.474:114959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17743 comm="syz.3.16705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc8fcffec23 code=0x7ffc0000 [ 957.008803][ T29] audit: type=1326 audit(39371.474:114960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17743 comm="syz.3.16705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc8fcffec23 code=0x7ffc0000 [ 957.031957][ T29] audit: type=1326 audit(39371.474:114961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17743 comm="syz.3.16705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8fcffebe9 code=0x7ffc0000 [ 957.055267][ T29] audit: type=1326 audit(39371.474:114962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17743 comm="syz.3.16705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8fcffebe9 code=0x7ffc0000 [ 957.078717][ T29] audit: type=1326 audit(39371.474:114963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17743 comm="syz.3.16705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8fcffebe9 code=0x7ffc0000 [ 957.102071][ T29] audit: type=1326 audit(39371.474:114964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17743 comm="syz.3.16705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8fcffebe9 code=0x7ffc0000 [ 957.125417][ T29] audit: type=1326 audit(39371.474:114965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17743 comm="syz.3.16705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fc8fcffebe9 code=0x7ffc0000 [ 957.148785][ T29] audit: type=1326 audit(39371.474:114966): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17743 comm="syz.3.16705" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8fcffebe9 code=0x7ffc0000 [ 957.508655][T17746] syzkaller0: entered allmulticast mode [ 957.514542][T17746] syzkaller0: entered promiscuous mode [ 957.521379][T17746] syzkaller0 (unregistering): left allmulticast mode [ 957.528146][T17746] syzkaller0 (unregistering): left promiscuous mode [ 957.622936][T17760] netlink: 14 bytes leftover after parsing attributes in process `syz.2.16713'. [ 957.730821][T17777] loop8: detected capacity change from 0 to 1024 [ 957.746789][T17777] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 957.872965][T17791] loop8: detected capacity change from 0 to 512 [ 957.887522][T17791] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 957.954621][T16982] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 957.979272][T17801] loop8: detected capacity change from 0 to 1024 [ 957.986053][T17801] EXT4-fs: Ignoring removed nobh option [ 958.000738][T17801] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 958.015818][T17801] EXT4-fs warning (device loop8): ext4_rename_delete:3731: inode #12: comm syz.8.16729: Deleting old file: nlink 2, error=-2 [ 958.040188][T16982] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 958.064715][T17809] loop8: detected capacity change from 0 to 512 [ 958.071664][T17809] journal_path: Non-blockdev passed as './bus' [ 958.077942][T17809] EXT4-fs: error: could not find journal device path [ 958.537947][T17840] loop8: detected capacity change from 0 to 16384 [ 958.662988][T17846] random: crng reseeded on system resumption [ 958.675370][T17843] loop8: detected capacity change from 16384 to 16383 [ 958.764317][T17853] random: crng reseeded on system resumption [ 958.779318][T17853] loop7: detected capacity change from 0 to 512 [ 958.786691][T17853] EXT4-fs: Ignoring removed oldalloc option [ 958.794425][T17853] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.16749: Parent and EA inode have the same ino 15 [ 958.807222][T17853] EXT4-fs (loop7): 1 orphan inode deleted [ 958.814857][T17853] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 958.834842][T17857] loop8: detected capacity change from 0 to 164 [ 958.842063][T12655] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 958.844517][T17857] syz.8.16750: attempt to access beyond end of device [ 958.844517][T17857] loop8: rw=524288, sector=263328, nr_sectors = 4 limit=164 [ 958.865749][T17857] syz.8.16750: attempt to access beyond end of device [ 958.865749][T17857] loop8: rw=0, sector=263328, nr_sectors = 4 limit=164 [ 958.884136][T17859] netlink: 14 bytes leftover after parsing attributes in process `syz.7.16751'. [ 958.903168][T17857] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 959.887793][T17939] netlink: 14 bytes leftover after parsing attributes in process `syz.1.16786'. [ 959.906201][T17939] hsr_slave_0: left promiscuous mode [ 959.919480][T17939] hsr_slave_1: left promiscuous mode [ 959.932691][T17941] loop8: detected capacity change from 0 to 512 [ 959.939725][T17941] journal_path: Non-blockdev passed as './bus' [ 959.945942][T17941] EXT4-fs: error: could not find journal device path [ 959.973005][T17944] loop7: detected capacity change from 0 to 2048 [ 959.987028][T17946] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16789'. [ 959.997878][T17944] EXT4-fs (loop7): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 960.016712][T17944] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.16788: bg 0: block 120: padding at end of block bitmap is not set [ 960.146543][T17964] loop8: detected capacity change from 0 to 512 [ 960.153503][T17964] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 960.162697][T17964] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.16795: bad orphan inode 15 [ 960.173107][T17964] ext4_test_bit(bit=14, block=18) = 1 [ 960.178489][T17964] is_bad_inode(inode)=0 [ 960.182698][T17964] NEXT_ORPHAN(inode)=1023 [ 960.187005][T17964] max_ino=32 [ 960.190274][T17964] i_nlink=0 [ 960.193561][T17964] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2962: inode #15: comm syz.8.16795: corrupted xattr block 19: invalid header [ 960.207866][T17964] EXT4-fs warning (device loop8): ext4_evict_inode:274: xattr delete (err -117) [ 960.217289][T17964] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 960.652928][T17970] syzkaller0: entered allmulticast mode [ 960.660919][T17970] syzkaller0: entered promiscuous mode [ 960.669182][T17970] syzkaller0 (unregistering): left allmulticast mode [ 960.676011][T17970] syzkaller0 (unregistering): left promiscuous mode [ 960.798911][T17978] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16800'. [ 960.985073][T16982] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 960.998700][T17999] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16810'. [ 961.012445][T18007] syzkaller0: entered allmulticast mode [ 961.018822][T18007] syzkaller0: entered promiscuous mode [ 961.026644][T18007] syzkaller0 (unregistering): left allmulticast mode [ 961.033749][T18007] syzkaller0 (unregistering): left promiscuous mode [ 961.195148][T18023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16819'. [ 961.404787][T18038] loop8: detected capacity change from 0 to 512 [ 961.418521][T18038] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 961.443020][T18038] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.16824: bad orphan inode 15 [ 961.454591][T18038] ext4_test_bit(bit=14, block=18) = 1 [ 961.460083][T18038] is_bad_inode(inode)=0 [ 961.464251][T18038] NEXT_ORPHAN(inode)=1023 [ 961.468601][T18038] max_ino=32 [ 961.471785][T18038] i_nlink=0 [ 961.476672][T18038] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2962: inode #15: comm syz.8.16824: corrupted xattr block 19: invalid header [ 961.496783][T18038] EXT4-fs warning (device loop8): ext4_evict_inode:274: xattr delete (err -117) [ 961.506275][T18038] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 962.005913][ T29] kauditd_printk_skb: 1934 callbacks suppressed [ 962.005929][ T29] audit: type=1326 audit(39376.787:116901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18053 comm="syz.3.16829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8fcffebe9 code=0x7ffc0000 [ 962.035881][ T29] audit: type=1326 audit(39376.797:116902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18053 comm="syz.3.16829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fc8fcffebe9 code=0x7ffc0000 [ 962.059328][ T29] audit: type=1326 audit(39376.797:116903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18053 comm="syz.3.16829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc8fcffec23 code=0x7ffc0000 [ 962.082539][ T29] audit: type=1326 audit(39376.797:116904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18053 comm="syz.3.16829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc8fcffec23 code=0x7ffc0000 [ 962.106208][ T29] audit: type=1326 audit(39376.797:116905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18053 comm="syz.3.16829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8fcffebe9 code=0x7ffc0000 [ 962.129672][ T29] audit: type=1326 audit(39376.797:116906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18053 comm="syz.3.16829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8fcffebe9 code=0x7ffc0000 [ 962.153088][ T29] audit: type=1326 audit(39376.797:116907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18053 comm="syz.3.16829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc8fcffebe9 code=0x7ffc0000 [ 962.173760][T18057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16830'. [ 962.176388][ T29] audit: type=1326 audit(39376.797:116908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18053 comm="syz.3.16829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8fcffebe9 code=0x7ffc0000 [ 962.208607][ T29] audit: type=1326 audit(39376.797:116909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18053 comm="syz.3.16829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc8fcffebe9 code=0x7ffc0000 [ 962.232009][ T29] audit: type=1326 audit(39376.797:116910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18053 comm="syz.3.16829" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc8fcffebe9 code=0x7ffc0000 [ 962.298068][T16982] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 962.831900][T12655] EXT4-fs (loop7): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 962.861883][T18078] loop8: detected capacity change from 0 to 16384 [ 962.968100][T18085] loop7: detected capacity change from 0 to 512 [ 962.975065][T18085] journal_path: Non-blockdev passed as './bus' [ 962.981291][T18085] EXT4-fs: error: could not find journal device path [ 963.008857][T18078] random: crng reseeded on system resumption [ 963.013610][T18088] loop7: detected capacity change from 0 to 512 [ 963.029079][T18088] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 963.050004][T18083] loop8: detected capacity change from 16384 to 16383 [ 963.071688][T12655] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 963.149816][T18097] loop7: detected capacity change from 0 to 512 [ 963.157827][T18097] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 963.173219][T18097] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.16845: bad orphan inode 15 [ 963.183657][T18101] syzkaller0: entered allmulticast mode [ 963.189499][T18101] syzkaller0: entered promiscuous mode [ 963.190837][T18097] ext4_test_bit(bit=14, block=18) = 1 [ 963.200479][T18097] is_bad_inode(inode)=0 [ 963.204629][T18097] NEXT_ORPHAN(inode)=1023 [ 963.208972][T18097] max_ino=32 [ 963.212248][T18097] i_nlink=0 [ 963.215602][T18097] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2962: inode #15: comm syz.7.16845: corrupted xattr block 19: invalid header [ 963.230688][T18097] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 963.240654][T18097] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 963.242585][T18101] syzkaller0 (unregistering): left allmulticast mode [ 963.259434][T18101] syzkaller0 (unregistering): left promiscuous mode [ 963.623982][T18116] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16851'. [ 963.816273][T18124] loop8: detected capacity change from 0 to 16384 [ 964.439023][T12655] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 964.463536][T18131] random: crng reseeded on system resumption [ 964.580776][T18130] loop8: detected capacity change from 16384 to 16383 [ 964.616349][T18135] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16855'. [ 964.673242][T16982] I/O error, dev loop8, sector 13312 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 2 [ 964.683356][T16982] buffer_io_error: 310 callbacks suppressed [ 964.683392][T16982] Buffer I/O error on dev loop8, logical block 1664, lost async page write [ 964.698101][T16982] Buffer I/O error on dev loop8, logical block 1665, lost async page write [ 964.706785][T16982] Buffer I/O error on dev loop8, logical block 1666, lost async page write [ 964.708986][T18144] loop7: detected capacity change from 0 to 1024 [ 964.715454][T16982] Buffer I/O error on dev loop8, logical block 1667, lost async page write [ 964.715475][T16982] Buffer I/O error on dev loop8, logical block 1668, lost async page write [ 964.715563][T16982] Buffer I/O error on dev loop8, logical block 1669, lost async page write [ 964.723223][T18144] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 964.730421][T16982] Buffer I/O error on dev loop8, logical block 1670, lost async page write [ 964.764426][T16982] Buffer I/O error on dev loop8, logical block 1671, lost async page write [ 964.773173][T16982] Buffer I/O error on dev loop8, logical block 1672, lost async page write [ 964.781796][T16982] Buffer I/O error on dev loop8, logical block 1673, lost async page write [ 964.793296][T16982] I/O error, dev loop8, sector 14336 op 0x1:(WRITE) flags 0x4800 phys_seg 128 prio class 2 [ 964.805677][T16982] I/O error, dev loop8, sector 15360 op 0x1:(WRITE) flags 0x800 phys_seg 64 prio class 2 [ 964.864954][T18163] loop8: detected capacity change from 0 to 512 [ 964.872291][T18163] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 964.882148][T18163] EXT4-fs error (device loop8): ext4_orphan_get:1418: comm syz.8.16867: bad orphan inode 15 [ 964.893464][T18163] ext4_test_bit(bit=14, block=18) = 1 [ 964.898977][T18163] is_bad_inode(inode)=0 [ 964.903133][T18163] NEXT_ORPHAN(inode)=1023 [ 964.907617][T18163] max_ino=32 [ 964.910843][T18163] i_nlink=0 [ 964.916898][T18163] EXT4-fs error (device loop8): ext4_xattr_delete_inode:2962: inode #15: comm syz.8.16867: corrupted xattr block 19: invalid header [ 964.930926][T18163] EXT4-fs warning (device loop8): ext4_evict_inode:274: xattr delete (err -117) [ 964.940413][T18163] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 964.977606][T18173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16871'. [ 965.462912][T18195] syzkaller0: entered allmulticast mode [ 965.468639][T18195] syzkaller0: entered promiscuous mode [ 965.475590][T18195] syzkaller0 (unregistering): left allmulticast mode [ 965.482298][T18195] syzkaller0 (unregistering): left promiscuous mode [ 965.705223][T16982] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 965.755082][T18213] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16886'. [ 965.832915][T18229] loop7: detected capacity change from 0 to 512 [ 965.858264][T18229] journal_path: Non-blockdev passed as './bus' [ 965.864490][T18229] EXT4-fs: error: could not find journal device path [ 966.439217][T18256] loop8: detected capacity change from 0 to 16384 [ 966.661811][T18262] random: crng reseeded on system resumption [ 966.757813][T18258] loop8: detected capacity change from 16384 to 16383 [ 966.771150][ T29] kauditd_printk_skb: 620 callbacks suppressed [ 966.771167][ T29] audit: type=1326 audit(39381.784:117531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18269 comm="syz.1.16908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401231ebe9 code=0x7ffc0000 [ 966.801202][ T29] audit: type=1326 audit(39381.795:117532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18269 comm="syz.1.16908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f401231ebe9 code=0x7ffc0000 [ 966.824640][ T29] audit: type=1326 audit(39381.795:117533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18269 comm="syz.1.16908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401231ebe9 code=0x7ffc0000 [ 966.848035][ T29] audit: type=1326 audit(39381.795:117534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18269 comm="syz.1.16908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f401231ebe9 code=0x7ffc0000 [ 966.871281][ T29] audit: type=1326 audit(39381.795:117535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18269 comm="syz.1.16908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401231ebe9 code=0x7ffc0000 [ 966.894887][ T29] audit: type=1326 audit(39381.795:117536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18269 comm="syz.1.16908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f401231ebe9 code=0x7ffc0000 [ 966.918399][ T29] audit: type=1326 audit(39381.795:117537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18269 comm="syz.1.16908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401231ebe9 code=0x7ffc0000 [ 966.942057][ T29] audit: type=1326 audit(39381.795:117538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18269 comm="syz.1.16908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f401231ebe9 code=0x7ffc0000 [ 966.946971][T18273] loop7: detected capacity change from 0 to 512 [ 966.965482][ T29] audit: type=1326 audit(39381.795:117539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18269 comm="syz.1.16908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f401231ebe9 code=0x7ffc0000 [ 966.977191][T18273] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 966.995313][ T29] audit: type=1326 audit(39381.795:117540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18269 comm="syz.1.16908" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f401231ebe9 code=0x7ffc0000 [ 967.005317][T18273] EXT4-fs error (device loop7): ext4_orphan_get:1418: comm syz.7.16910: bad orphan inode 15 [ 967.080639][T18273] ext4_test_bit(bit=14, block=18) = 1 [ 967.086471][T18273] is_bad_inode(inode)=0 [ 967.090618][T18273] NEXT_ORPHAN(inode)=1023 [ 967.094956][T18273] max_ino=32 [ 967.098186][T18273] i_nlink=0 [ 967.101665][T18273] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2962: inode #15: comm syz.7.16910: corrupted xattr block 19: invalid header [ 967.115689][T18273] EXT4-fs warning (device loop7): ext4_evict_inode:274: xattr delete (err -117) [ 967.125290][T18273] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 967.810072][T12655] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 967.975387][T18313] netlink: 14 bytes leftover after parsing attributes in process `syz.8.16920'. [ 967.984954][T18313] hsr_slave_0: left promiscuous mode [ 967.991728][T18313] hsr_slave_1: left promiscuous mode [ 968.020288][T18317] loop8: detected capacity change from 0 to 16384 [ 968.158556][T18324] random: crng reseeded on system resumption [ 968.204445][T18317] loop7: detected capacity change from 0 to 512 [ 968.211357][T18319] loop8: detected capacity change from 16384 to 16383 [ 968.219081][T18317] EXT4-fs: Ignoring removed oldalloc option [ 968.227375][T18317] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.16922: Parent and EA inode have the same ino 15 [ 968.251965][T18317] EXT4-fs (loop7): 1 orphan inode deleted [ 968.261324][T18317] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 968.338073][T12655] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 968.577635][T18361] ================================================================== [ 968.585746][T18361] BUG: KCSAN: data-race in io_flush_timeouts / io_issue_sqe [ 968.593045][T18361] [ 968.595353][T18361] read-write to 0xffff88810bb05a10 of 4 bytes by task 18359 on cpu 1: [ 968.603483][T18361] io_issue_sqe+0x19c/0x970 [ 968.607967][T18361] io_wq_submit_work+0x3f7/0x5f0 [ 968.612883][T18361] io_worker_handle_work+0x44e/0x9b0 [ 968.618148][T18361] io_wq_worker+0x22e/0x870 [ 968.622632][T18361] ret_from_fork+0xda/0x150 [ 968.627122][T18361] ret_from_fork_asm+0x1a/0x30 [ 968.631866][T18361] [ 968.634171][T18361] read to 0xffff88810bb05a10 of 4 bytes by task 18361 on cpu 0: [ 968.641783][T18361] io_flush_timeouts+0x56/0x1d0 [ 968.646703][T18361] __io_commit_cqring_flush+0xeb/0x100 [ 968.652149][T18361] io_issue_sqe+0x7cb/0x970 [ 968.656630][T18361] io_wq_submit_work+0x3f7/0x5f0 [ 968.661570][T18361] io_worker_handle_work+0x44e/0x9b0 [ 968.666853][T18361] io_wq_worker+0x22e/0x870 [ 968.671333][T18361] ret_from_fork+0xda/0x150 [ 968.675834][T18361] ret_from_fork_asm+0x1a/0x30 [ 968.680584][T18361] [ 968.682888][T18361] value changed: 0x00000485 -> 0x00000486 [ 968.688599][T18361] [ 968.690905][T18361] Reported by Kernel Concurrency Sanitizer on: [ 968.697034][T18361] CPU: 0 UID: 0 PID: 18361 Comm: iou-wrk-18358 Tainted: G W syzkaller #0 PREEMPT(voluntary) [ 968.708654][T18361] Tainted: [W]=WARN [ 968.712435][T18361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 968.722469][T18361] ==================================================================