last executing test programs: 1m21.016136792s ago: executing program 3 (id=653): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x4000010) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 1m20.990934322s ago: executing program 3 (id=654): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvfrom$inet(0xffffffffffffffff, &(0x7f00000000c0)=""/167, 0xa7, 0x3, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) socket(0x10, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, 0x0, 0x20008810) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x2, &(0x7f0000000000)=""/126, &(0x7f0000000080)=0x7e) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macvlan1\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89b0, &(0x7f0000000080)) r5 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000000000), 0x4) setsockopt$inet6_int(r5, 0x29, 0x16, &(0x7f0000fcb000)=0xfffffffc, 0x4) fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c00)=ANY=[@ANYRES32=r2], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000600)=@raw=[@map_fd={0x18, 0x9}, @tail_call, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}], 0x0, 0x7, 0x33, &(0x7f00000002c0)=""/51, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000400)=[{0x4, 0x4, 0xd}, {0x1, 0x1, 0x6, 0x6}], 0x10, 0x8000}, 0x94) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@getchain={0x34, 0x11, 0x1, 0x2000000, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {}, {}, {0xfff1, 0x5}}, [{0x8, 0xb, 0x8b9d}, {0x8, 0xb, 0xc}]}, 0x34}}, 0x0) r10 = msgget$private(0x0, 0xfffffffffffffffd) msgrcv(r10, 0x0, 0x0, 0x1, 0x0) 1m20.11171311s ago: executing program 3 (id=666): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000100000000000000064000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) 1m20.07870927s ago: executing program 3 (id=667): r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000005, 0x50032, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f0000000140), 0x2, 0xbca, &(0x7f0000000600)="$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") r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x11, r1, 0x3000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) fallocate(r2, 0x0, 0x0, 0x1000f4) r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x389b0d52417bb201) pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x6a000}], 0x1, 0x7000, 0x0, 0x3) syz_io_uring_submit(r0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, 0x0, r5, &(0x7f0000000100)='./file0\x00', 0x204) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000040), 0x81, r4}, 0x38) r6 = fsopen(&(0x7f0000000500)='btrfs\x00', 0x1) fsmount(r6, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000300)={{{@in=@multicast1, @in=@dev}}, {{@in=@private}, 0x0, @in6}}, &(0x7f00000004c0)=0xe8) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x8402, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000980)='mm_page_free\x00', r7, 0x0, 0x6}, 0x18) mount(&(0x7f0000000080)=@sr0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000001c0)='cramfs\x00', 0x8000, &(0x7f0000000200)='syzkaller\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0xfffff000) 1m19.899460114s ago: executing program 3 (id=669): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000001811", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[], 0x15) r3 = dup(r2) write$P9_RLERRORu(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r3, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) lchown(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) 1m19.06636798s ago: executing program 3 (id=677): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000100000000000000064000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) 1m19.021704421s ago: executing program 32 (id=677): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000100000000000000064000001811", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) 42.216105478s ago: executing program 1 (id=1316): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x19a) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x70000, 0x181) rmdir(&(0x7f0000000000)='./file0\x00') r3 = open_tree(r2, &(0x7f0000000280)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0) 42.166719909s ago: executing program 1 (id=1317): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000001850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@resuid}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x8c9}}, {@grpquota}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000300)="$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") 41.771390266s ago: executing program 1 (id=1323): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000001811", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r2, 0x0, 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) lchown(&(0x7f0000000700)='./file0\x00', 0x0, 0x0) 41.714041987s ago: executing program 1 (id=1326): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000008c0), r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0x1, 0x4, 0x0, 0x8, 0x3e, 0x9, 0xe8, 0xa0, 0x4, 0x3, 0xfe, 0x3, 0x6, 0x1}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e1f, @local}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={r3, 0x716a, 0x10}, 0xc) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000040018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x24}}, 0x0) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00') sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf250100000007000700e0000001080002000500000008000800001e01010c0001"], 0x38}, 0x1, 0x0, 0x0, 0x40010}, 0x80) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = dup(r8) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaafffffff5"], 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0xa) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) fsetxattr$security_selinux(r9, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x20, r7, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) 41.416145484s ago: executing program 1 (id=1327): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x19a) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x70000, 0x181) rmdir(&(0x7f0000000000)='./file0\x00') r3 = open_tree(r2, &(0x7f0000000280)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x0) 41.202128527s ago: executing program 1 (id=1334): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x2}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x48, 0x2, [@TCA_BASIC_EMATCHES={0x44, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x24, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT]}]}}]}]}]}}]}, 0x78}}, 0x0) 41.160205338s ago: executing program 33 (id=1334): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x2}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x78, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x48, 0x2, [@TCA_BASIC_EMATCHES={0x44, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}, @TCF_EM_META={0x24, 0x2, 0x0, 0x0, {{0x0, 0x4, 0x4}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT]}]}}]}]}]}}]}, 0x78}}, 0x0) 7.70178192s ago: executing program 4 (id=1921): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000050000000000000000001811", @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xb0a54e68b1cd2fdb, 0x103) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065fffff530000008003950323030302e75"], 0x15) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[], 0x15) r2 = dup(r1) write$P9_RLERRORu(r2, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @ib_path={0x0}}, 0x20) write$binfmt_elf64(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) lchown(0x0, 0x0, 0x0) 7.631690821s ago: executing program 4 (id=1923): r0 = fsopen(&(0x7f0000000380)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000001300)=""/244, 0xfdef}], 0x1) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000001200)={0x0, 0xffffff1e, 0xffffffff, 0x4, 0x16, "001bf100eeff0000a2c2000100000000002000"}) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x0, 0x4, 0xae, 0x2, 0xe, 0x450e}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x3, 0x9}}]}}}]}, 0x58}}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r5 = syz_open_pts(r1, 0x101) r6 = dup3(r5, r1, 0x0) syz_io_uring_setup(0x88c, &(0x7f0000000140)={0x0, 0xaee2, 0x80, 0x2, 0xbfdffffc}, &(0x7f0000001240)=0x0, 0x0) syz_io_uring_submit(r7, 0x0, 0x0) ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000040)={0x3, 0x0, 0x13, 0x14, 0x66, &(0x7f0000001400)}) write$UHID_INPUT(r6, &(0x7f00000001c0)={0xa, {"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", 0x1000}}, 0xffffff5c) 7.494555234s ago: executing program 4 (id=1928): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="1c0000003e000781fcfffffff6dbdf25017c00000800038043"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 7.453916225s ago: executing program 4 (id=1930): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = syz_clone(0x40000200, 0x0, 0xffffffffffffff41, 0x0, 0x0, 0x0) r2 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000000f80), 0xd}, 0x0, 0x100000000, 0x400, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe01}, r1, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x4, 0x7}, 0x0, 0x0, 0x0, 0xf, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) r7 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018ed8, &(0x7f0000000180)={[{@sysvgroups}, {@noload}, {@nobh}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {@errors_continue}, {@quota}]}, 0x1, 0x644, &(0x7f00000006c0)="$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") bpf$ENABLE_STATS(0x20, &(0x7f0000000440), 0x2) r8 = open(&(0x7f0000001500)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0x210301, 0x0) unshare(0x20060400) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r10}, 0x10) r12 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$KDFONTOP_SET(r12, 0x4b72, &(0x7f0000000080)={0x0, 0x3000002, 0x14, 0x1b, 0x100, &(0x7f00000000c0)="387ed7626d850509a2d6c1aa38f15cd00f85c263cb226db671261fff7ce9c555f189afae3530db6dd493f28fd988721b9ae21b3e3b4523ae2594f47d8f62b480c4160b1f90ac9c41fae6ab12ac4c113fef588684ef495689092883b902a41cd75387ef6f7bc7d460d5e665f398ff95596dc94ec97003a3db08e500c2fb07e11aa4031a61c51caf7a65a2b613bda33f3eaeae635d7cd81761e74c38a7695800a15516eb337056e02335f9a7d10aa2eaf7beb7e1f7a1e850ecb3421143c5c4ded0f083a0c524dcf320827266819b6a952db5bc96141b26c54db857edbcbbc81c7af7aadf50bc549974b6401a19cdb130282b955592efa94242065a4c8d695a2cdd9ada350defd58c775b92d348305774d3a256c7520b285d8da0dbf5e20d604413ed2ddf9bcbf881cae811852806175d63892a15234fbcd7a88a0a0aea45d19148f0e7dada7d6d0d77881387fdeaa02863be90b88dfff412bff40c31c6415c54ae3335e54a49d315851feffe30d999c36def4df7df747695ef060000001bbe1b649f42f310859122c0d2c1e558dc6586958a28374f386ecf369274e43003a09b5159ea515eb44521901ef0d00baa91c10a8e44a76aac3468a15bd3d45ad389977467f306f9bcde071b30769795eed2f1580414d168f557cd90040c4bd2a3d6bc509254a12cece59181fcb5bad8c24bd9f8f78d17ab01831325501e80d899e9252f99d3a2666343392fda115048e4f4dd9f45657f8224fc78eb1168fe0527fac33466aadf48f16994d29a47778566e0f3945b18914beb66ac9e519bd3330000000000000009a3237aebbe3bed781e39d5a0fb0cdc60e196f2261305feb596b5b66ab89d2d6333f699b16db68986ab3eee7b199fefb5f79ffb2d1050e46982af1c14a88dd9b647ba812f56a8404755c73e74bb90e64bab9647c70ed5afca1c3d87907d14df8aa9df6f40a80ace2bb8a2aad3b0c66915927db4173181943d88c0c76d5969e2053db5bd77fd60ba0f012139929ccfec965c1f769785a4d23332d71f0875e3146afef5b20cc306d3ecee65944fe9829e0ad0c3f6bb2fdc1bc31152538db50f47dc38ba908a0d808687e478a609fe0daa0000000000000000e7f2e98597e27f3e1dba9c3c16e9fab3bda6ed33cb1c75513e2264b69d4794ded98eff9aa53d22eb77c9d93169c04ab2490bf28106f770e07eb7a9e8fd4e71929f918b98c4cbfcb11a90139264a9ee807c973167f493760278df0cc34be9e8f86f948d9a62e63ad6ca9d174d2465380b1a00ddc42915e4f3a5db640600000095a3d63904c9ecd1c313c08e29b814bd8fed1ab6d2846c73345962895d289ac77152cac2e04c93a5470774975b42091f218dd1e68a15f8226577bf9481ae0555db64a717eb23a811356d00000000ddffffff00"}) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffffff, &(0x7f0000004040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r13, 0x0, 0x100) fstat(r7, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r5, &(0x7f0000001480)=[{{&(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f0000000f40)=[{&(0x7f0000000600)="6303746b8cef3edfa548ab86348106101ef2f1eb644dc44d00b9882b94c7efe1676cd06cc7e0711efe72a49a9571148cee62cf2c9383728b60dfa3b850ac19f8055978d0340dfc8393fd760fb1a537ce90387a13d3f899bf9db0b0f13354505e14ceab7fdba11166e4be15716bfc6ad353e9b10819dfe5e400603440bc0d0385208a350a6b6d4caf5db412c591b699cd633da745fb5743cc3940a1b6e459bf6ef3e3cce8251fee38b1707471", 0xac}, {&(0x7f0000000d40)="d268cb07da4575a633be7eecb7e92044958ab701ffd4162a09a0e0bad48cc3e61c756b38ec3b4502050f7141a21681d2184a19891c1299ac0ca8d7ad6b4560b1ebda739d3bed8e67d8e73c2d3599b4f2c9553ee9c1df77fd412d308c8d83153f03162dea1129e3f9f90de3dac2c4b5547649ed24b683addd18a06a44857d0c6fc683d4996578d987a4ce6708d8d2d77a7a8cbd41d173ef049bf5bd9522fe966ecc241abd1b8ed43a952f93b443d948cb8d6a520c4775c74a911093ca211073377dc19e8c71254e335ef71ebb0601a8357a4c80c93dcfea268b9c2d0ea269bf3c982be87be6e071f2d233d80f7760b828f2d9", 0xf2}, {&(0x7f0000000540)="ff4b883f1706a13bc1a2c02f2e1751f3046e710b2301bd50c7591f58c676f545be927de86b42e7434203b4c2aadcaf6443b26944c850866582adf00929d160ecd0c88990f1eec8e0497415100b5be8c9e5ab6a48e03c2445f6f6cf667a87c0e240854167a960b6f5b8561efac7ae780f31", 0x71}, {&(0x7f0000000e40)="1a33317ad5524bc20030519e8983588c3268e1a78844f83e273e499d19646f79526dbc7278631f88d844e5f5a08ee37cf74052ccf1d8a5df8962725bb62652f2f60c59b5bc5443d1d099864a0accb3e0dddb1ae8c4df58ea805b3e70953a154b4b99be5ee800549ee9920a5352976c32d19cb95178153423dc1bad5dc04275866a3fe55e4e83b842f2a3b8aff3ddf585cfaae8c01c9887b82a54c77b69980a25efc8f8d5901100d4fdda962c9515d556ca3973294c322c7242777f0e25a3767e489f83a4", 0xc4}], 0x4, &(0x7f0000002500)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32, @ANYRES32=r4, @ANYRES32=r11, @ANYRES32=r10, @ANYBLOB="000000002c000000000000000100000001000000", @ANYRES32=r8, @ANYRES32=r12, @ANYRES32=r10, @ANYRES32, @ANYRES32=r6, @ANYRES32=r11, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r6, @ANYRES32=r11, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r11, @ANYBLOB="4400000000000023010000004f48b8d5526a1c79b43702000000a5b3e82782a92eb94d3739506566a99259fb616ca03e8d49acfcafcc1288f9a662eaf3503ca5bcb85a2cd5d329ad3a201d1b13da623be9723fb0e591c309c93b764e80896cd4659879b6b44ab64c3986cd8cc0375ce3c9981bfdccec69c9ce55effa801beeb6d96ae2c1a0968ba272d6b69b8a205d5c2cb3a6f302975881497b", @ANYRES32=r3, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB='\x00\x00\x00\x00'], 0x118, 0x60040}}, {{0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000001200)="49b77a3d00fa30df813096c3", 0xc}, {&(0x7f0000001240)="efb672f1687d3aa15c67448f0f271f3114a5dec12918c29a194a28d0843d0421f79a4a6e4469160ed2055a95ce63359130ac23fbf1b686ba134be619e3a2a748a7cc3c33e2a98e03ae8c52dd3d23f5f36d18fb1d38d19ae9c17250af5429f2380f30811220ec85d9d81767605a37fb77b02faae22fcd3655bb972045caa9f3823bf5873763afb0df917f19cdd1ccf0955ebc5909160c149c91f670bbc704400db27c7a918e050918a4161ca32e93e5364906c7978ff8438b045092184da643b9a9426ee232b527530248f3a717fa61dfd56c0c7f9e8c59ac3c", 0xd9}, {&(0x7f0000001340)="9608e10044cdb3e7bf6d66d7f48fbb239d58c964a1179d32583d27557c21f3d6b54b9380e11a5b9a4ca2a679ca8b42759a54f88995389b74d24e7f5aab675c9e649e6dcd434b0b4108f6760e2a528b47ae7cb653e47ac2a3520715e9030e9b2125731900b01619d898ee91db65e8923b84f808bec5ae9f9635e0112cb9ad59aa594b8ede3ca369749c9d2dd81f0062a48292fe21f995a3648aa0e264a80fe585f2f0788195524582caaa535dac4018bfc45796c00c791a063e0fda6c5384add45a4837a3bd3df4033840ebc7d06ec7eae72a2bb9f02d90f90be930b1d416f4488ef424", 0xe3}], 0x3, 0x0, 0x0, 0x4000003}}], 0x2, 0x800) ioctl$FS_IOC_GETFSMAP(r8, 0xc0c0583b, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 6.282506938s ago: executing program 4 (id=1949): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000840000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x51}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x18, 0x2, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@CTA_FILTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x890) 5.551161802s ago: executing program 4 (id=1959): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002cc0)=@newlink={0x30, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37, 0x40024}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_NET_NS_PID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x880) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20040040) setresgid(0x0, 0xee01, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), 0x0}, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 5.551013572s ago: executing program 34 (id=1959): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002cc0)=@newlink={0x30, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xec37, 0x40024}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_NET_NS_PID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x880) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x20040040) setresgid(0x0, 0xee01, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r2 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), 0x0}, 0x20) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0) pwritev2(r3, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5412, 0x0, 0x0) 4.165572449s ago: executing program 5 (id=1987): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f0000000240)=0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x9, 0xc, 0x1400}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32=r4, @ANYBLOB=' '], 0x38}}, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f0000000d40)={0x0, 0x0, {0xffffffffffffffff, 0x3, 0x40000000, 0x0, 0x3834}, 0x8}) 3.851794825s ago: executing program 5 (id=1989): prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180020000008002b000000000002000000040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r4 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r4, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r7 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r7, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r6, 0x1, 0x3, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000580)={0x8c, 0x3, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0x6}, [@CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0x0, 0x8000]}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x477}, @CTA_NAT_DST={0x40, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x3c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e20}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e22}]}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x12000000}]}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x1]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x840}, 0xc01) 2.01882785s ago: executing program 5 (id=2004): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000001300)=""/238, 0xee}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1.822811944s ago: executing program 2 (id=2007): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', 0xffffffffffffffff, 0x0, 0x100000000}, 0x18) socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000480)={0x0, 0x8, 0x3, [0x7, 0xb, 0x3]}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b70400000000000085"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) 1.732963276s ago: executing program 2 (id=2008): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x64, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d00010075"], 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = io_uring_setup(0x6cf9, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x22000406, &(0x7f00000005c0)={[{@noinit_itable}, {@noblock_validity}, {@dioread_lock}, {@prjquota}, {@auto_da_alloc}, {@grpjquota, 0x2e}, {@nouid32}, {@dax_never}, {@jqfmt_vfsv1}, {@grpid}], [], 0x2c}, 0x1, 0x4bf, &(0x7f0000000c00)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x603}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x488, &(0x7f0000001f80)="$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") r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x82400, 0x184) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0x1c, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040050}, 0x20000010) symlink(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') getdents(r3, 0x0, 0x40) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=[0x0, 0x0]}, 0x20) msgget(0x2, 0x6e) bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) openat$selinux_access(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300001e880000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r6 = socket$inet_icmp(0x2, 0x2, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x300}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) ioctl$sock_inet_SIOCADDRT(r6, 0x890b, &(0x7f00000002c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e21, @private=0xa010100}, 0x200, 0x0, 0x0, 0x0, 0x8bee, &(0x7f0000000200)='veth0_macvtap\x00', 0x5, 0x100000000, 0x1}) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) sendmmsg$inet6(r4, &(0x7f0000000540)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x3, @loopback, 0x3}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000240)="dc", 0x1}], 0x1}}], 0x1, 0x3404c891) 1.431059192s ago: executing program 7 (id=1960): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x21}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x10000}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000010080)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x1f1040, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ec0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r7}, @IFLA_HSR_SLAVE2={0x8, 0x2, r8}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0) openat(r4, &(0x7f0000000180)='./file0\x00', 0xc080, 0x181) 1.283883265s ago: executing program 7 (id=2011): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x2c020400) r1 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x1452, 0x800, 0x80400002, 0x2d4}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x84, 0x0, 0x1}) io_uring_enter(r1, 0x8ba, 0x696d, 0x20, 0x0, 0x0) 1.208674926s ago: executing program 5 (id=2012): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="1c0000003e000781fcfffffff6dbdf25017c00000800038043"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 1.146957387s ago: executing program 5 (id=2013): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x64, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') r3 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) r6 = timerfd_create(0x0, 0x0) poll(&(0x7f0000000200)=[{r6, 0x400}], 0x1, 0x5ac2) timerfd_settime(r6, 0x3, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x8003ff, 0x0, 0x23e650d3, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, 0x100, 0x0, 0xfffffffffffffffd, 0x9, 0x6, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x1}) mq_timedreceive(r5, &(0x7f000001d600)=""/102378, 0x18fea, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}]}}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0) 985.384191ms ago: executing program 7 (id=2018): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) 961.522021ms ago: executing program 7 (id=2020): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000700)='./file0\x00', 0x90) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000a40)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000c80)=ANY=[@ANYRESOCT=r0, @ANYRES16=0x0, @ANYRESDEC=0x0, @ANYRES16=0x0, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c0001802e821dae59735d58163fb129130308000100b00a3838f91e651b22f60b9912587a582e1cd94ac4f853daebb0c48c83e5847e2450d54ab729a7fafdea08b9350f355b3d6443d91559112403500afeff64d592e8cf614b290f060a9a2abf0a490497f87e43a95e3d58cada32df807c4d3042ed243987", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="08000100000000000c00030002000000000000004c0007800c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0c0001800800010042f6aed58b552e945c8d0ea3d864a03921e9f88ae3eef2d421c397262aee8808750f078e5c8f24b6b51d018a", @ANYRES32, @ANYBLOB="0c00018008000100", @ANYRES32, @ANYBLOB="0c00030004000000000000000c000300ff07000000000000"], 0xf0}, 0x1, 0x0, 0x0, 0x4000050}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a300000000008000a40ffffffff580000000c0a010100000000000000000a0000060900020073797a30000000000900010073797a31000000012c0003802800008004000180200007800e000100636f6e6e6c696d69740000000c000280080001"], 0xbc}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$inet6(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000280)=@udp}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\b\x00'/14, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = gettid() prlimit64(r6, 0xb, &(0x7f0000000200)={0xffffffffffff407f, 0x1}, &(0x7f0000000300)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x0, 0x2, 0xfffffe81, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="070000000400000008"], 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e40)=@bpf_tracing={0x1a, 0x1f, &(0x7f0000000900)=@ringbuf={{}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ldst={0x1, 0x2ca90e0a3ae9f28a, 0x1, 0x8, 0x4, 0x100, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x39}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000380)='syzkaller\x00', 0xdde, 0x18, &(0x7f0000000400)=""/24, 0x41100, 0x9, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xa556, r3, 0x1, &(0x7f00000006c0)=[r2, r7, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000b40)=[{0x4, 0x5, 0xb, 0x5}], 0x10, 0xd6f}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r8, 0x0, 0xfffffffffffffffd}, 0x18) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 918.415962ms ago: executing program 7 (id=2022): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000001300)=""/238, 0xee}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 792.229145ms ago: executing program 2 (id=2026): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 620.141388ms ago: executing program 2 (id=2031): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 417.414812ms ago: executing program 0 (id=2037): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ptype\x00') pread64(r0, &(0x7f0000000000)=""/81, 0x51, 0x2f) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000066000000004b64ffec850000006d000000c50000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x2, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x2}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xd}]}, 0x28}, 0x1, 0x0, 0x0, 0x448c0}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0x0, 0x0, 0x0, 0x9, 0x80350, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1e, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = getpid() r4 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x58412, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7bffffff}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x16, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xfff, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r5) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1f, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70200005245855db7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000bf020000000000008500000084000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$kcm(0xa, 0x3, 0x3a) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0xf242, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x541b, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={0x60, 0x1403, 0x1, 0x70bd28, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'erspan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x4000) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) close(r9) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8b26, &(0x7f0000000080)={'wlan1\x00', @random="000000f91100"}) 381.013332ms ago: executing program 2 (id=2038): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="0300"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x18) r2 = socket$kcm(0x21, 0x2, 0x2) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 310.679263ms ago: executing program 6 (id=2039): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000840), 0x81, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000080)='./file2\x00', 0x1808004, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x4, 0x7cc, &(0x7f0000002200)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f0000000640)=ANY=[@ANYBLOB="20000000020000001d"], 0x202400) 304.323994ms ago: executing program 0 (id=2040): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f0000000240)=0x8) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x9, 0xc, 0x1400}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000d40)={0x0, 0x0, {0xffffffffffffffff, 0x3, 0x40000000, 0x0, 0x3834}, 0x8}) 241.714835ms ago: executing program 5 (id=2041): socket$rds(0x15, 0x5, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) r2 = socket(0x28, 0x5, 0x0) r3 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r3, 0x4) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0xffffff1c, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x40000) accept4$unix(r3, 0x0, 0x0, 0x800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) r4 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0) 241.091995ms ago: executing program 0 (id=2042): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 227.192145ms ago: executing program 6 (id=2043): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="16000000000000000400000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x2c020400) r1 = syz_io_uring_setup(0x1725, &(0x7f0000000100)={0x0, 0x1452, 0x800, 0x80400002, 0x2d4}, &(0x7f0000000300)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000240)=0xfffffc04, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000180)=@IORING_OP_MKDIRAT={0x25, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x84, 0x0, 0x1}) io_uring_enter(r1, 0x8ba, 0x696d, 0x20, 0x0, 0x0) 143.153027ms ago: executing program 0 (id=2044): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r1, 0x1, 0x2, 0x0, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000040)}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32], 0x0, 0x200000, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0a7d6851c30e7af2a4eabb2421e7b54f3a7b4274d6b6a292f14c0e9c40f1cc18b8e42f16f00e5087ca0fc40e6021b", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fedbdf25020000000800040006000000080006000700000008000400010000000800040008000000"], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0x41009432, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="120000000200000008000000ebd0000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0], 0x50) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVex@De', 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c8}}, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYRESHEX, @ANYRES16=0x0, @ANYRES64, @ANYRES32], 0x1, 0x27f, &(0x7f0000002cc0)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0xdd) getdents64(r4, 0x0, 0x0) write$UHID_DESTROY(r3, &(0x7f0000000080), 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) 129.846367ms ago: executing program 6 (id=2045): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x12, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) 93.587308ms ago: executing program 6 (id=2046): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x0, 0x0, 0x35d}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x78}}, 0x0) 55.903859ms ago: executing program 0 (id=2047): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff0000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000240)='kfree\x00', r1, 0x0, 0x4ab}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="1c0000003e000781fcfffffff6dbdf25017c00000800038043"], 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 55.522319ms ago: executing program 6 (id=2048): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x78, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x64, 0x1, [@m_tunnel_key={0x60, 0x1, 0x0, 0x0, {{0xf}, {0x30, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x2, 0x0, 0x0, 0x35d}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @loopback}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @broadcast}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x78}}, 0x0) 45.628349ms ago: executing program 7 (id=2049): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x84) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r4, &(0x7f00000001c0)=[{&(0x7f0000001300)=""/238, 0xee}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r5}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 28.441109ms ago: executing program 6 (id=2050): socket$key(0xf, 0x3, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0401000010000700000000000000000000000000000000000000ffffac14143eac1414bb0000000000000000000000004e201000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b0000002001000000000000000000000000000005000000000000000000000000000000020000000000000000ff0000000000000000001000000000feffffffffff"], 0x104}}, 0x4) 6.13045ms ago: executing program 2 (id=2051): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000014c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a000000ff03ffd311a400100100001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x9}, 0x94) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x1) fallocate(r6, 0x0, 0x0, 0x2000402) unshare(0x40000) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x4, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xd, 0xe}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0x54, 0x2, [@TCA_ROUTE4_ACT={0x50, 0x6, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x4005, 0x20, 0x7, 0x8}, 0x7e}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xfc, 0x3}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20008010}, 0x0) 0s ago: executing program 0 (id=2052): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000080)='kmem_cache_free\x00', r1, 0x0, 0x100000000}, 0x18) r2 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000001640)=ANY=[@ANYBLOB="0002020100000008ff"], 0x18) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000480)={0x0, 0x8, 0x2, [0xb, 0x3]}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1c0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000700)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000440)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): : ext4_quota_off:7221: inode #3: comm syz.0.1391: mark_inode_dirty error [ 120.117962][ T7586] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 120.227964][ T7594] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1400'. [ 120.240925][ T7593] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1400'. [ 120.274408][ T7596] loop5: detected capacity change from 0 to 8192 [ 120.394161][ T7606] loop2: detected capacity change from 0 to 512 [ 120.475596][ T7609] lo speed is unknown, defaulting to 1000 [ 120.577983][ T7620] loop2: detected capacity change from 0 to 2048 [ 120.640796][ T3484] loop2: p2 p3 p7 [ 120.664535][ T7625] loop5: detected capacity change from 0 to 764 [ 120.688486][ T7620] loop2: p2 p3 p7 [ 120.697205][ T7629] loop6: detected capacity change from 0 to 1024 [ 120.717039][ T7629] EXT4-fs: Ignoring removed bh option [ 120.731841][ T7627] lo speed is unknown, defaulting to 1000 [ 120.740747][ T7629] EXT4-fs: inline encryption not supported [ 120.746681][ T7625] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 120.771996][ T7629] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 120.793572][ T7629] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.1412: lblock 2 mapped to illegal pblock 2 (length 1) [ 120.836305][ T3787] udevd[3787]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 120.848346][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 120.860008][ T7629] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.1412: lblock 0 mapped to illegal pblock 48 (length 1) [ 120.860755][ T3484] udevd[3484]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 120.891197][ T3787] udevd[3787]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 120.902347][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 120.913340][ T3484] udevd[3484]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 120.931588][ T7629] EXT4-fs error (device loop6): ext4_acquire_dquot:6937: comm syz.6.1412: Failed to acquire dquot type 0 [ 120.974165][ T7643] loop2: detected capacity change from 0 to 1024 [ 120.981890][ T7643] EXT4-fs: Ignoring removed bh option [ 120.993105][ T7643] EXT4-fs: inline encryption not supported [ 121.001263][ T7629] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 121.002464][ T7643] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 121.023898][ T7629] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.1412: mark_inode_dirty error [ 121.049742][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1418'. [ 121.052504][ T7646] loop5: detected capacity change from 0 to 1024 [ 121.068617][ T7643] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.1416: lblock 2 mapped to illegal pblock 2 (length 1) [ 121.086454][ T7629] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 121.099354][ T7646] EXT4-fs: Ignoring removed nobh option [ 121.105038][ T7646] EXT4-fs: Ignoring removed bh option [ 121.110872][ T7629] EXT4-fs (loop6): 1 orphan inode deleted [ 121.122862][ T7648] loop4: detected capacity change from 0 to 512 [ 121.124508][ T7643] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.1416: lblock 0 mapped to illegal pblock 48 (length 1) [ 121.130658][ T3433] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:8: lblock 1 mapped to illegal pblock 1 (length 1) [ 121.153565][ T7643] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.1416: Failed to acquire dquot type 0 [ 121.170799][ T3433] EXT4-fs error (device loop6): ext4_release_dquot:6973: comm kworker/u8:8: Failed to release dquot type 0 [ 121.183998][ T7643] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 121.207062][ T7643] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.1416: mark_inode_dirty error [ 121.230032][ T7629] EXT4-fs error (device loop6): __ext4_get_inode_loc:4861: comm syz.6.1412: Invalid inode table block 1 in block_group 0 [ 121.244448][ T7629] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 121.254305][ T7629] EXT4-fs error (device loop6): ext4_quota_off:7221: inode #3: comm syz.6.1412: mark_inode_dirty error [ 121.265862][ T7643] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 121.277068][ T7643] EXT4-fs (loop2): 1 orphan inode deleted [ 121.291052][ T139] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:4: lblock 1 mapped to illegal pblock 1 (length 1) [ 121.315345][ T7656] validate_nla: 4 callbacks suppressed [ 121.315361][ T7656] netlink: 'syz.5.1419': attribute type 3 has an invalid length. [ 121.316825][ T7654] netlink: 'syz.0.1420': attribute type 4 has an invalid length. [ 121.321322][ T7656] netlink: 'syz.5.1419': attribute type 3 has an invalid length. [ 121.356786][ T139] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u8:4: Failed to release dquot type 0 [ 121.370744][ T7643] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz.2.1416: Invalid inode table block 1 in block_group 0 [ 121.384135][ T7643] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem [ 121.432078][ T7643] EXT4-fs error (device loop2): ext4_quota_off:7221: inode #3: comm syz.2.1416: mark_inode_dirty error [ 121.505530][ T7674] 9pnet_fd: Insufficient options for proto=fd [ 121.525060][ T7675] vhci_hcd: USB_PORT_FEAT_LINK_STATE req not supported for USB 2.0 roothub [ 121.576948][ T29] kauditd_printk_skb: 145 callbacks suppressed [ 121.576967][ T29] audit: type=1400 audit(121.558:4905): avc: denied { ioctl } for pid=7677 comm="syz.2.1428" path="socket:[20160]" dev="sockfs" ino=20160 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 121.577774][ T7678] FAULT_INJECTION: forcing a failure. [ 121.577774][ T7678] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 121.622557][ T7678] CPU: 0 UID: 0 PID: 7678 Comm: syz.2.1428 Not tainted syzkaller #0 PREEMPT(voluntary) [ 121.622590][ T7678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 121.622610][ T7678] Call Trace: [ 121.622618][ T7678] [ 121.622626][ T7678] __dump_stack+0x1d/0x30 [ 121.622776][ T7678] dump_stack_lvl+0xe8/0x140 [ 121.622801][ T7678] dump_stack+0x15/0x1b [ 121.622822][ T7678] should_fail_ex+0x265/0x280 [ 121.622860][ T7678] should_fail+0xb/0x20 [ 121.622887][ T7678] should_fail_usercopy+0x1a/0x20 [ 121.622921][ T7678] _copy_to_user+0x20/0xa0 [ 121.622961][ T7678] simple_read_from_buffer+0xb5/0x130 [ 121.623024][ T7678] proc_fail_nth_read+0x10e/0x150 [ 121.623061][ T7678] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 121.623096][ T7678] vfs_read+0x1a5/0x770 [ 121.623123][ T7678] ? __rcu_read_unlock+0x4f/0x70 [ 121.623151][ T7678] ? __fget_files+0x184/0x1c0 [ 121.623264][ T7678] ksys_read+0xda/0x1a0 [ 121.623294][ T7678] __x64_sys_read+0x40/0x50 [ 121.623355][ T7678] x64_sys_call+0x27bc/0x2ff0 [ 121.623382][ T7678] do_syscall_64+0xd2/0x200 [ 121.623421][ T7678] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 121.623487][ T7678] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 121.623665][ T7678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.623692][ T7678] RIP: 0033:0x7f5d3ad3d5bc [ 121.623712][ T7678] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 121.623735][ T7678] RSP: 002b:00007f5d397a7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 121.623759][ T7678] RAX: ffffffffffffffda RBX: 00007f5d3af85fa0 RCX: 00007f5d3ad3d5bc [ 121.623775][ T7678] RDX: 000000000000000f RSI: 00007f5d397a70a0 RDI: 0000000000000007 [ 121.623791][ T7678] RBP: 00007f5d397a7090 R08: 0000000000000000 R09: 0000000000000000 [ 121.623856][ T7678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.623949][ T7678] R13: 00007f5d3af86038 R14: 00007f5d3af85fa0 R15: 00007ffe0f446468 [ 121.623975][ T7678] [ 121.840981][ T7682] loop4: detected capacity change from 0 to 1024 [ 121.852484][ T7682] EXT4-fs: Ignoring removed nobh option [ 121.858151][ T7682] EXT4-fs: Ignoring removed bh option [ 121.901051][ T29] audit: type=1400 audit(121.878:4906): avc: denied { read write } for pid=7688 comm="syz.2.1432" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 121.925424][ T29] audit: type=1400 audit(121.878:4907): avc: denied { ioctl open } for pid=7688 comm="syz.2.1432" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 121.930433][ T7685] atomic_op ffff888109935d28 conn xmit_atomic 0000000000000000 [ 122.004218][ T7690] loop2: detected capacity change from 0 to 2048 [ 122.017587][ T7690] EXT4-fs: Ignoring removed mblk_io_submit option [ 122.035541][ T7698] netdevsim netdevsim6: loading /lib/firmware/. failed with error -22 [ 122.043772][ T7698] netdevsim netdevsim6: Direct firmware load for . failed with error -22 [ 122.056211][ T7701] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=7701 comm=syz.5.1439 [ 122.083241][ T7690] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1432: bg 0: block 234: padding at end of block bitmap is not set [ 122.115268][ T7709] rdma_op ffff888109943180 conn xmit_rdma 0000000000000000 [ 122.126284][ T7690] EXT4-fs (loop2): Remounting filesystem read-only [ 122.182556][ T7713] loop0: detected capacity change from 0 to 1024 [ 122.208522][ T7717] loop4: detected capacity change from 0 to 512 [ 122.330546][ T7724] loop5: detected capacity change from 0 to 2048 [ 122.365474][ T29] audit: type=1400 audit(122.318:4908): avc: denied { mounton } for pid=7723 comm="syz.5.1445" path="/syzcgroup/unified/syz5/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 122.399372][ T7731] atomic_op ffff888109943928 conn xmit_atomic 0000000000000000 [ 122.501899][ T7727] netlink: 404 bytes leftover after parsing attributes in process `syz.0.1441'. [ 122.580372][ T7742] rdma_op ffff888109943980 conn xmit_rdma 0000000000000000 [ 122.652553][ T7748] loop4: detected capacity change from 0 to 512 [ 122.661910][ T7748] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 122.670801][ T29] audit: type=1400 audit(122.628:4909): avc: denied { ioctl } for pid=7747 comm="syz.4.1454" path="socket:[19377]" dev="sockfs" ino=19377 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 122.697968][ T7755] netlink: 'syz.2.1456': attribute type 3 has an invalid length. [ 122.706309][ T7755] netlink: 'syz.2.1456': attribute type 3 has an invalid length. [ 122.777250][ T7760] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.784513][ T7760] bridge0: port 1(bridge_slave_0) entered disabled state [ 122.838872][ T7760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.859597][ T7760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.898858][ T3426] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.922677][ T3426] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.942895][ T3426] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.953459][ T3426] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.973247][ T29] audit: type=1400 audit(122.948:4910): avc: denied { write } for pid=7770 comm="syz.5.1462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 123.000088][ T7772] netlink: 'syz.6.1464': attribute type 4 has an invalid length. [ 123.047862][ T7778] rdma_op ffff888103506580 conn xmit_rdma 0000000000000000 [ 123.110975][ T29] audit: type=1326 audit(123.088:4911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.6.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88ce6eba9 code=0x7ffc0000 [ 123.134156][ T29] audit: type=1326 audit(123.088:4912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.6.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88ce6eba9 code=0x7ffc0000 [ 123.157009][ T29] audit: type=1326 audit(123.088:4913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.6.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff88ce6eba9 code=0x7ffc0000 [ 123.180358][ T29] audit: type=1326 audit(123.088:4914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7783 comm="syz.6.1469" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88ce6eba9 code=0x7ffc0000 [ 123.255857][ T7786] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1468'. [ 123.786028][ T7810] rdma_op ffff888109936d80 conn xmit_rdma 0000000000000000 [ 123.809718][ T7813] FAULT_INJECTION: forcing a failure. [ 123.809718][ T7813] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 123.823050][ T7813] CPU: 1 UID: 0 PID: 7813 Comm: syz.6.1480 Not tainted syzkaller #0 PREEMPT(voluntary) [ 123.823116][ T7813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 123.823169][ T7813] Call Trace: [ 123.823177][ T7813] [ 123.823186][ T7813] __dump_stack+0x1d/0x30 [ 123.823213][ T7813] dump_stack_lvl+0xe8/0x140 [ 123.823237][ T7813] dump_stack+0x15/0x1b [ 123.823257][ T7813] should_fail_ex+0x265/0x280 [ 123.823286][ T7813] should_fail_alloc_page+0xf2/0x100 [ 123.823412][ T7813] __alloc_frozen_pages_noprof+0xff/0x360 [ 123.823455][ T7813] alloc_pages_bulk_noprof+0x4b8/0x540 [ 123.823498][ T7813] ? __kmalloc_noprof+0x364/0x3e0 [ 123.823586][ T7813] ? copy_splice_read+0xc2/0x660 [ 123.823614][ T7813] copy_splice_read+0xf3/0x660 [ 123.823646][ T7813] sock_splice_read+0xa5/0xb0 [ 123.823765][ T7813] ? __pfx_sock_splice_read+0x10/0x10 [ 123.823806][ T7813] splice_file_to_pipe+0x241/0x3a0 [ 123.823899][ T7813] do_splice+0xc4d/0x10b0 [ 123.823921][ T7813] ? __ia32_sys_rt_sigreturn+0x2a8/0x350 [ 123.824002][ T7813] ? __rcu_read_unlock+0x4f/0x70 [ 123.824030][ T7813] ? __fget_files+0x184/0x1c0 [ 123.824107][ T7813] __se_sys_splice+0x26c/0x3a0 [ 123.824129][ T7813] __x64_sys_splice+0x78/0x90 [ 123.824173][ T7813] x64_sys_call+0x28a3/0x2ff0 [ 123.824200][ T7813] do_syscall_64+0xd2/0x200 [ 123.824262][ T7813] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 123.824310][ T7813] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 123.824349][ T7813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.824372][ T7813] RIP: 0033:0x7ff88ce6eba9 [ 123.824394][ T7813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.824417][ T7813] RSP: 002b:00007ff88b8cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000113 [ 123.824441][ T7813] RAX: ffffffffffffffda RBX: 00007ff88d0b5fa0 RCX: 00007ff88ce6eba9 [ 123.824453][ T7813] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000003 [ 123.824465][ T7813] RBP: 00007ff88b8cf090 R08: 0000000000000007 R09: 0000000000000009 [ 123.824477][ T7813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.824489][ T7813] R13: 00007ff88d0b6038 R14: 00007ff88d0b5fa0 R15: 00007fff62602d38 [ 123.824584][ T7813] [ 124.113530][ T7820] atomic_op ffff888103505528 conn xmit_atomic 0000000000000000 [ 124.120199][ T7815] loop2: detected capacity change from 0 to 512 [ 124.148683][ T7815] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 124.152239][ T7824] loop4: detected capacity change from 0 to 1024 [ 124.170919][ T7824] EXT4-fs: Ignoring removed nobh option [ 124.176747][ T7824] EXT4-fs: Ignoring removed bh option [ 124.238623][ T7815] EXT4-fs (loop2): orphan cleanup on readonly fs [ 124.280983][ T7831] loop4: detected capacity change from 0 to 1024 [ 124.310871][ T7815] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 124.355428][ T7831] EXT4-fs: Ignoring removed nobh option [ 124.361194][ T7831] EXT4-fs: Ignoring removed bh option [ 124.385041][ T7413] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set [ 124.421886][ T7837] lo speed is unknown, defaulting to 1000 [ 124.436474][ T7815] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 124.475234][ T7815] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #16: comm syz.2.1481: casefold flag without casefold feature [ 124.528601][ T7848] loop4: detected capacity change from 0 to 2048 [ 124.589735][ T7848] EXT4-fs: Ignoring removed mblk_io_submit option [ 124.605723][ T7815] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1481: couldn't read orphan inode 16 (err -117) [ 124.732725][ T7860] netlink: 'syz.6.1496': attribute type 1 has an invalid length. [ 124.790251][ T7862] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=7862 comm=syz.6.1496 [ 124.966483][ T7866] atomic_op ffff888103505528 conn xmit_atomic 0000000000000000 [ 125.187375][ T7870] netlink: 'syz.6.1499': attribute type 3 has an invalid length. [ 125.196412][ T7870] netlink: 'syz.6.1499': attribute type 3 has an invalid length. [ 125.371058][ T7886] loop6: detected capacity change from 0 to 512 [ 125.537637][ T7899] vhci_hcd: invalid port number 96 [ 125.542827][ T7899] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 125.605401][ T7899] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 125.641344][ T7904] netlink: 'syz.4.1512': attribute type 4 has an invalid length. [ 125.799123][ T7918] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1519'. [ 125.820383][ T7922] loop6: detected capacity change from 0 to 764 [ 125.857383][ T7922] rock: directory entry would overflow storage [ 125.863580][ T7922] rock: sig=0x4f50, size=4, remaining=3 [ 125.869347][ T7922] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 126.021704][ T7929] lo speed is unknown, defaulting to 1000 [ 126.046469][ T7933] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1524'. [ 126.074906][ T7933] netem: change failed [ 126.358214][ T7945] vhci_hcd: invalid port number 96 [ 126.363398][ T7945] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 126.397666][ T7945] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 126.631003][ T7955] loop4: detected capacity change from 0 to 512 [ 126.645870][ T7951] loop0: detected capacity change from 0 to 4096 [ 126.676349][ T7951] EXT4-fs: Ignoring removed nomblk_io_submit option [ 126.733600][ T7955] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1530: corrupted inode contents [ 126.769746][ T7955] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.1530: mark_inode_dirty error [ 126.786852][ T7965] loop6: detected capacity change from 0 to 512 [ 126.793506][ T7965] EXT4-fs: Ignoring removed bh option [ 126.816261][ T7965] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 126.826994][ T7968] batadv1: left allmulticast mode [ 126.832096][ T7968] batadv1: left promiscuous mode [ 126.837348][ T7968] bridge0: port 1(batadv1) entered disabled state [ 126.844161][ T7955] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1530: corrupted inode contents [ 126.865875][ T7965] EXT4-fs (loop6): 1 truncate cleaned up [ 126.867804][ T7955] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.1530: mark_inode_dirty error [ 126.933928][ T7955] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1530'. [ 126.957272][ T7955] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1530'. [ 127.025221][ T7977] loop6: detected capacity change from 0 to 1024 [ 127.076079][ T7977] EXT4-fs: Ignoring removed nobh option [ 127.081988][ T7977] EXT4-fs: Ignoring removed bh option [ 127.224648][ T29] kauditd_printk_skb: 208 callbacks suppressed [ 127.224744][ T29] audit: type=1326 audit(127.198:5123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7986 comm="syz.6.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88ce6eba9 code=0x7ffc0000 [ 127.320433][ T29] audit: type=1326 audit(127.238:5124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7986 comm="syz.6.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88ce6eba9 code=0x7ffc0000 [ 127.344294][ T29] audit: type=1326 audit(127.238:5125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7986 comm="syz.6.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff88ce6eba9 code=0x7ffc0000 [ 127.367969][ T29] audit: type=1326 audit(127.238:5126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7986 comm="syz.6.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88ce6eba9 code=0x7ffc0000 [ 127.391486][ T29] audit: type=1326 audit(127.238:5127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7986 comm="syz.6.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff88ce6eba9 code=0x7ffc0000 [ 127.415038][ T29] audit: type=1326 audit(127.238:5128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7986 comm="syz.6.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88ce6eba9 code=0x7ffc0000 [ 127.438633][ T29] audit: type=1326 audit(127.238:5129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7986 comm="syz.6.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88ce6eba9 code=0x7ffc0000 [ 127.462279][ T29] audit: type=1326 audit(127.238:5130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7986 comm="syz.6.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff88ce6eba9 code=0x7ffc0000 [ 127.485813][ T29] audit: type=1326 audit(127.238:5131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7986 comm="syz.6.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88ce6eba9 code=0x7ffc0000 [ 127.509536][ T29] audit: type=1326 audit(127.238:5132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7986 comm="syz.6.1543" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff88ce6eba9 code=0x7ffc0000 [ 127.607746][ T7998] loop0: detected capacity change from 0 to 764 [ 127.612306][ T7996] netlink: 'syz.2.1547': attribute type 4 has an invalid length. [ 127.641868][ T7998] rock: directory entry would overflow storage [ 127.648204][ T7998] rock: sig=0x4f50, size=4, remaining=3 [ 127.654358][ T7998] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 127.683891][ T8000] loop2: detected capacity change from 0 to 1024 [ 127.724004][ T8000] EXT4-fs: mb_optimize_scan should be set to 0 or 1. [ 127.749422][ T8002] loop4: detected capacity change from 0 to 1024 [ 127.784403][ T8004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1550'. [ 127.788290][ T8002] EXT4-fs: Ignoring removed orlov option [ 128.025647][ T8018] loop4: detected capacity change from 0 to 764 [ 128.043456][ T8018] rock: directory entry would overflow storage [ 128.050476][ T8018] rock: sig=0x4f50, size=4, remaining=3 [ 128.056131][ T8018] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 128.069219][ T8022] netlink: 'syz.5.1556': attribute type 4 has an invalid length. [ 128.190120][ T8030] loop2: detected capacity change from 0 to 512 [ 128.274551][ T8035] atomic_op ffff888103507d28 conn xmit_atomic 0000000000000000 [ 128.310601][ T8040] FAULT_INJECTION: forcing a failure. [ 128.310601][ T8040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 128.323788][ T8040] CPU: 0 UID: 0 PID: 8040 Comm: syz.0.1562 Not tainted syzkaller #0 PREEMPT(voluntary) [ 128.323937][ T8040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 128.323949][ T8040] Call Trace: [ 128.323956][ T8040] [ 128.323964][ T8040] __dump_stack+0x1d/0x30 [ 128.323986][ T8040] dump_stack_lvl+0xe8/0x140 [ 128.324004][ T8040] dump_stack+0x15/0x1b [ 128.324020][ T8040] should_fail_ex+0x265/0x280 [ 128.324048][ T8040] should_fail+0xb/0x20 [ 128.324114][ T8040] should_fail_usercopy+0x1a/0x20 [ 128.324156][ T8040] _copy_from_user+0x1c/0xb0 [ 128.324194][ T8040] ___sys_recvmsg+0xaa/0x370 [ 128.324231][ T8040] do_recvmmsg+0x1ef/0x540 [ 128.324334][ T8040] ? fput+0x8f/0xc0 [ 128.324365][ T8040] __x64_sys_recvmmsg+0xe5/0x170 [ 128.324400][ T8040] x64_sys_call+0x27a6/0x2ff0 [ 128.324425][ T8040] do_syscall_64+0xd2/0x200 [ 128.324529][ T8040] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 128.324563][ T8040] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 128.324602][ T8040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.324669][ T8040] RIP: 0033:0x7fe150ebeba9 [ 128.324685][ T8040] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.324758][ T8040] RSP: 002b:00007fe14f927038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 128.324788][ T8040] RAX: ffffffffffffffda RBX: 00007fe151105fa0 RCX: 00007fe150ebeba9 [ 128.324808][ T8040] RDX: 040000000000038f RSI: 0000200000000d40 RDI: 0000000000000003 [ 128.324900][ T8040] RBP: 00007fe14f927090 R08: 0000000000000000 R09: 0000000000000000 [ 128.324916][ T8040] R10: 0000000000010020 R11: 0000000000000246 R12: 0000000000000001 [ 128.324932][ T8040] R13: 00007fe151106038 R14: 00007fe151105fa0 R15: 00007ffe23bcbfd8 [ 128.324955][ T8040] [ 128.520104][ T8045] loop4: detected capacity change from 0 to 2048 [ 128.527768][ T8042] netlink: 'syz.5.1565': attribute type 4 has an invalid length. [ 128.551199][ T8048] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1567'. [ 128.564378][ T8050] FAULT_INJECTION: forcing a failure. [ 128.564378][ T8050] name failslab, interval 1, probability 0, space 0, times 0 [ 128.577954][ T8050] CPU: 0 UID: 0 PID: 8050 Comm: syz.0.1568 Not tainted syzkaller #0 PREEMPT(voluntary) [ 128.577982][ T8050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 128.577996][ T8050] Call Trace: [ 128.578004][ T8050] [ 128.578012][ T8050] __dump_stack+0x1d/0x30 [ 128.578107][ T8050] dump_stack_lvl+0xe8/0x140 [ 128.578130][ T8050] dump_stack+0x15/0x1b [ 128.578151][ T8050] should_fail_ex+0x265/0x280 [ 128.578180][ T8050] should_failslab+0x8c/0xb0 [ 128.578249][ T8050] kmem_cache_alloc_node_noprof+0x57/0x320 [ 128.578287][ T8050] ? __alloc_skb+0x101/0x320 [ 128.578316][ T8050] __alloc_skb+0x101/0x320 [ 128.578396][ T8050] netlink_alloc_large_skb+0xba/0xf0 [ 128.578425][ T8050] netlink_sendmsg+0x3cf/0x6b0 [ 128.578461][ T8050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 128.578493][ T8050] __sock_sendmsg+0x145/0x180 [ 128.578550][ T8050] ____sys_sendmsg+0x345/0x4e0 [ 128.578579][ T8050] ___sys_sendmsg+0x17b/0x1d0 [ 128.578629][ T8050] __sys_sendmmsg+0x178/0x300 [ 128.578669][ T8050] __x64_sys_sendmmsg+0x57/0x70 [ 128.578767][ T8050] x64_sys_call+0x1c4a/0x2ff0 [ 128.578826][ T8050] do_syscall_64+0xd2/0x200 [ 128.578860][ T8050] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 128.578887][ T8050] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 128.578937][ T8050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.579021][ T8050] RIP: 0033:0x7fe150ebeba9 [ 128.579040][ T8050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.579060][ T8050] RSP: 002b:00007fe14f927038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 128.579122][ T8050] RAX: ffffffffffffffda RBX: 00007fe151105fa0 RCX: 00007fe150ebeba9 [ 128.579137][ T8050] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000007 [ 128.579151][ T8050] RBP: 00007fe14f927090 R08: 0000000000000000 R09: 0000000000000000 [ 128.579205][ T8050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 128.579216][ T8050] R13: 00007fe151106038 R14: 00007fe151105fa0 R15: 00007ffe23bcbfd8 [ 128.579238][ T8050] [ 128.689596][ T2994] loop4: p2 p3 p7 [ 128.746079][ T8056] netlink: 'syz.0.1570': attribute type 3 has an invalid length. [ 128.807163][ T8056] netlink: 'syz.0.1570': attribute type 3 has an invalid length. [ 128.821067][ T8045] loop4: p2 p3 p7 [ 129.390736][ T8070] atomic_op ffff888109935d28 conn xmit_atomic 0000000000000000 [ 129.506413][ T8075] netlink: 4 bytes leftover after parsing attributes in process `+}[@'. [ 129.559329][ T8080] bridge_slave_0: left allmulticast mode [ 129.565112][ T8080] bridge_slave_0: left promiscuous mode [ 129.571103][ T8080] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.594389][ T8081] loop4: detected capacity change from 0 to 764 [ 129.597496][ T8083] netlink: 'syz.0.1579': attribute type 10 has an invalid length. [ 129.608639][ T8083] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1579'. [ 129.622017][ T8081] rock: directory entry would overflow storage [ 129.628963][ T8081] rock: sig=0x4f50, size=4, remaining=3 [ 129.634575][ T8081] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 129.654232][ T8080] bridge_slave_1: left allmulticast mode [ 129.660182][ T8080] bridge_slave_1: left promiscuous mode [ 129.665903][ T8080] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.684556][ T8080] : (slave bond_slave_0): Releasing backup interface [ 129.704471][ T8080] : (slave bond_slave_1): Releasing backup interface [ 129.736608][ T8080] team0: Port device team_slave_0 removed [ 129.752367][ T8080] team0: Port device team_slave_1 removed [ 129.762878][ T8080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.770413][ T8080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 129.779524][ T8080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.787361][ T8080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 129.821615][ T8083] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 129.832682][ T8083] batman_adv: batadv0: Adding interface: veth1_vlan [ 129.839526][ T8083] batman_adv: batadv0: The MTU of interface veth1_vlan is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.869897][ T8083] batman_adv: batadv0: Interface activated: veth1_vlan [ 129.931315][ T8098] loop0: detected capacity change from 0 to 512 [ 129.964109][ T8103] atomic_op ffff888109937928 conn xmit_atomic 0000000000000000 [ 130.039136][ T8113] loop0: detected capacity change from 0 to 2048 [ 130.053550][ T8120] FAULT_INJECTION: forcing a failure. [ 130.053550][ T8120] name failslab, interval 1, probability 0, space 0, times 0 [ 130.067088][ T8120] CPU: 0 UID: 0 PID: 8120 Comm: syz.4.1590 Not tainted syzkaller #0 PREEMPT(voluntary) [ 130.067116][ T8120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 130.067127][ T8120] Call Trace: [ 130.067134][ T8120] [ 130.067142][ T8120] __dump_stack+0x1d/0x30 [ 130.067162][ T8120] dump_stack_lvl+0xe8/0x140 [ 130.067186][ T8120] dump_stack+0x15/0x1b [ 130.067208][ T8120] should_fail_ex+0x265/0x280 [ 130.067236][ T8120] should_failslab+0x8c/0xb0 [ 130.067261][ T8120] kmem_cache_alloc_noprof+0x50/0x310 [ 130.067288][ T8120] ? vm_area_alloc+0x2c/0xb0 [ 130.067323][ T8120] vm_area_alloc+0x2c/0xb0 [ 130.067359][ T8120] mmap_region+0xaa2/0x1630 [ 130.067415][ T8120] do_mmap+0x9b3/0xbe0 [ 130.067460][ T8120] vm_mmap_pgoff+0x17a/0x2e0 [ 130.067495][ T8120] ksys_mmap_pgoff+0xc2/0x310 [ 130.067516][ T8120] ? __x64_sys_mmap+0x49/0x70 [ 130.067543][ T8120] x64_sys_call+0x14a3/0x2ff0 [ 130.067564][ T8120] do_syscall_64+0xd2/0x200 [ 130.067599][ T8120] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 130.067628][ T8120] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 130.067656][ T8120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.067677][ T8120] RIP: 0033:0x7f58ab1eebe3 [ 130.067691][ T8120] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 130.067712][ T8120] RSP: 002b:00007f58a9c4ee18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 130.067735][ T8120] RAX: ffffffffffffffda RBX: 000000000000056e RCX: 00007f58ab1eebe3 [ 130.067749][ T8120] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 130.067762][ T8120] RBP: 00002000000019c2 R08: 00000000ffffffff R09: 0000000000000000 [ 130.067776][ T8120] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000006 [ 130.067789][ T8120] R13: 00007f58a9c4eef0 R14: 00007f58a9c4eeb0 R15: 0000200000000080 [ 130.067811][ T8120] [ 130.301703][ T8126] FAULT_INJECTION: forcing a failure. [ 130.301703][ T8126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 130.315107][ T8126] CPU: 1 UID: 0 PID: 8126 Comm: syz.4.1592 Not tainted syzkaller #0 PREEMPT(voluntary) [ 130.315180][ T8126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 130.315262][ T8126] Call Trace: [ 130.315269][ T8126] [ 130.315277][ T8126] __dump_stack+0x1d/0x30 [ 130.315303][ T8126] dump_stack_lvl+0xe8/0x140 [ 130.315329][ T8126] dump_stack+0x15/0x1b [ 130.315349][ T8126] should_fail_ex+0x265/0x280 [ 130.315380][ T8126] should_fail+0xb/0x20 [ 130.315519][ T8126] should_fail_usercopy+0x1a/0x20 [ 130.315552][ T8126] copy_folio_from_iter_atomic+0x278/0x11b0 [ 130.315599][ T8126] ? shmem_write_begin+0xa8/0x190 [ 130.315624][ T8126] ? shmem_write_begin+0xe1/0x190 [ 130.315649][ T8126] generic_perform_write+0x2c2/0x490 [ 130.315773][ T8126] shmem_file_write_iter+0xc5/0xf0 [ 130.315803][ T8126] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 130.315826][ T8126] vfs_write+0x527/0x960 [ 130.315857][ T8126] ksys_write+0xda/0x1a0 [ 130.315962][ T8126] __x64_sys_write+0x40/0x50 [ 130.315986][ T8126] x64_sys_call+0x27fe/0x2ff0 [ 130.316009][ T8126] do_syscall_64+0xd2/0x200 [ 130.316050][ T8126] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 130.316102][ T8126] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 130.316139][ T8126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.316233][ T8126] RIP: 0033:0x7f58ab1ed65f [ 130.316249][ T8126] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 130.316271][ T8126] RSP: 002b:00007f58a9c4edf0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 130.316359][ T8126] RAX: ffffffffffffffda RBX: 0000000000040000 RCX: 00007f58ab1ed65f [ 130.316374][ T8126] RDX: 0000000000040000 RSI: 00007f58a182f000 RDI: 0000000000000006 [ 130.316438][ T8126] RBP: 0000000000000000 R08: 0000000000000000 R09: 000000000000043d [ 130.316515][ T8126] R10: 00000000000003b6 R11: 0000000000000293 R12: 0000000000000006 [ 130.316531][ T8126] R13: 00007f58a9c4eef0 R14: 00007f58a9c4eeb0 R15: 00007f58a182f000 [ 130.316557][ T8126] [ 130.319021][ T8123] netlink: 'syz.5.1591': attribute type 4 has an invalid length. [ 130.347154][ T8126] loop4: detected capacity change from 0 to 512 [ 130.555351][ T3787] loop0: p2 p3 p7 [ 130.561223][ T8126] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 130.603151][ T8113] loop0: p2 p3 p7 [ 130.610346][ T8126] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 130.626243][ T8126] EXT4-fs (loop4): 1 truncate cleaned up [ 130.652606][ T2994] loop0: p2 p3 p7 [ 130.769927][ T8154] 9pnet_fd: Insufficient options for proto=fd [ 130.808216][ T8152] ipvlan2: entered promiscuous mode [ 130.814022][ T8152] bridge0: port 3(ipvlan2) entered blocking state [ 130.820620][ T8152] bridge0: port 3(ipvlan2) entered disabled state [ 130.859174][ T8152] ipvlan2: entered allmulticast mode [ 130.864507][ T8152] bridge0: entered allmulticast mode [ 130.883872][ T8152] ipvlan2: left allmulticast mode [ 130.889008][ T8152] bridge0: left allmulticast mode [ 130.900122][ T8161] loop2: detected capacity change from 0 to 512 [ 130.912587][ T8159] netlink: 'syz.4.1597': attribute type 3 has an invalid length. [ 130.929729][ T8159] netlink: 'syz.4.1597': attribute type 3 has an invalid length. [ 130.968804][ T8167] FAULT_INJECTION: forcing a failure. [ 130.968804][ T8167] name failslab, interval 1, probability 0, space 0, times 0 [ 130.981708][ T8167] CPU: 0 UID: 0 PID: 8167 Comm: syz.5.1600 Not tainted syzkaller #0 PREEMPT(voluntary) [ 130.981779][ T8167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 130.981795][ T8167] Call Trace: [ 130.981803][ T8167] [ 130.981812][ T8167] __dump_stack+0x1d/0x30 [ 130.981834][ T8167] dump_stack_lvl+0xe8/0x140 [ 130.981853][ T8167] dump_stack+0x15/0x1b [ 130.981870][ T8167] should_fail_ex+0x265/0x280 [ 130.981907][ T8167] should_failslab+0x8c/0xb0 [ 130.981945][ T8167] kmem_cache_alloc_node_noprof+0x57/0x320 [ 130.981985][ T8167] ? __alloc_skb+0x101/0x320 [ 130.982065][ T8167] __alloc_skb+0x101/0x320 [ 130.982091][ T8167] tc_ctl_action+0x64b/0x830 [ 130.982275][ T8167] ? __pfx_tc_ctl_action+0x10/0x10 [ 130.982346][ T8167] rtnetlink_rcv_msg+0x657/0x6d0 [ 130.982389][ T8167] ? avc_has_perm_noaudit+0x1b1/0x200 [ 130.982428][ T8167] netlink_rcv_skb+0x123/0x220 [ 130.982559][ T8167] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 130.982680][ T8167] rtnetlink_rcv+0x1c/0x30 [ 130.982718][ T8167] netlink_unicast+0x5bd/0x690 [ 130.982854][ T8167] netlink_sendmsg+0x58b/0x6b0 [ 130.982892][ T8167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 130.982927][ T8167] __sock_sendmsg+0x145/0x180 [ 130.982971][ T8167] ____sys_sendmsg+0x31e/0x4e0 [ 130.983104][ T8167] ___sys_sendmsg+0x17b/0x1d0 [ 130.983165][ T8167] __x64_sys_sendmsg+0xd4/0x160 [ 130.983204][ T8167] x64_sys_call+0x191e/0x2ff0 [ 130.983232][ T8167] do_syscall_64+0xd2/0x200 [ 130.983286][ T8167] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 130.983317][ T8167] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 130.983416][ T8167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.983444][ T8167] RIP: 0033:0x7f934a0ceba9 [ 130.983462][ T8167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.983484][ T8167] RSP: 002b:00007f9348b37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 130.983549][ T8167] RAX: ffffffffffffffda RBX: 00007f934a315fa0 RCX: 00007f934a0ceba9 [ 130.983566][ T8167] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006 [ 130.983581][ T8167] RBP: 00007f9348b37090 R08: 0000000000000000 R09: 0000000000000000 [ 130.983596][ T8167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 130.983611][ T8167] R13: 00007f934a316038 R14: 00007f934a315fa0 R15: 00007ffce2dad818 [ 130.983630][ T8167] [ 131.295224][ T8182] netlink: 'syz.4.1603': attribute type 3 has an invalid length. [ 131.626919][ T8198] 9pnet_fd: Insufficient options for proto=fd [ 131.639483][ T8201] rdma_op ffff888109935d80 conn xmit_rdma 0000000000000000 [ 131.729471][ T8208] loop4: detected capacity change from 0 to 2048 [ 131.791331][ T3787] loop4: p2 p3 p7 [ 131.822626][ T8217] loop6: detected capacity change from 0 to 1024 [ 131.835319][ T8208] loop4: p2 p3 p7 [ 131.876489][ T8217] EXT4-fs (loop6): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 131.887664][ T8217] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869) [ 131.971678][ T8217] JBD2: no valid journal superblock found [ 131.977626][ T8217] EXT4-fs (loop6): Could not load journal inode [ 131.990596][ T8222] loop4: detected capacity change from 0 to 512 [ 132.058053][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 132.061128][ T3787] udevd[3787]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 132.078549][ T3484] udevd[3484]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 132.138187][ T8231] atomic_op ffff888109934d28 conn xmit_atomic 0000000000000000 [ 132.234343][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 132.249725][ T3484] udevd[3484]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 132.261298][ T3787] udevd[3787]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 132.299637][ T8243] 9pnet_fd: Insufficient options for proto=fd [ 132.418217][ T29] kauditd_printk_skb: 2087 callbacks suppressed [ 132.418235][ T29] audit: type=1400 audit(132.398:7220): avc: denied { nlmsg_write } for pid=8253 comm="syz.4.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 132.561429][ T29] audit: type=1326 audit(132.448:7221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.5.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934a0ceba9 code=0x7ffc0000 [ 132.585350][ T29] audit: type=1326 audit(132.458:7222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.5.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934a0ceba9 code=0x7ffc0000 [ 132.608320][ T29] audit: type=1326 audit(132.458:7223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.5.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f934a0ceba9 code=0x7ffc0000 [ 132.611934][ T8262] loop0: detected capacity change from 0 to 1024 [ 132.631328][ T29] audit: type=1326 audit(132.458:7224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.5.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934a0ceba9 code=0x7ffc0000 [ 132.631364][ T29] audit: type=1326 audit(132.458:7225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.5.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934a0ceba9 code=0x7ffc0000 [ 132.631468][ T29] audit: type=1326 audit(132.458:7226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.5.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f934a0ceba9 code=0x7ffc0000 [ 132.631560][ T29] audit: type=1326 audit(132.458:7227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.5.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934a0ceba9 code=0x7ffc0000 [ 132.631592][ T29] audit: type=1326 audit(132.458:7228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.5.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f934a0ceba9 code=0x7ffc0000 [ 132.631626][ T29] audit: type=1326 audit(132.458:7229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8256 comm="syz.5.1621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934a0ceba9 code=0x7ffc0000 [ 132.815646][ T8262] EXT4-fs mount: 63 callbacks suppressed [ 132.815666][ T8262] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.840683][ T8262] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.1628: Allocating blocks 385-513 which overlap fs metadata [ 132.863005][ T8262] EXT4-fs (loop0): pa ffff8881069b5690: logic 16, phys. 129, len 24 [ 132.871193][ T8262] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8 [ 132.886866][ T8269] loop2: detected capacity change from 0 to 764 [ 132.905837][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.919012][ T8269] rock: directory entry would overflow storage [ 132.925266][ T8269] rock: sig=0x4f50, size=4, remaining=3 [ 132.931064][ T8269] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 133.044469][ T8279] 9pnet_fd: Insufficient options for proto=fd [ 133.093094][ T8283] loop6: detected capacity change from 0 to 1024 [ 133.099770][ T8285] validate_nla: 11 callbacks suppressed [ 133.099784][ T8285] netlink: 'syz.0.1636': attribute type 3 has an invalid length. [ 133.113623][ T8285] netlink: 'syz.0.1636': attribute type 3 has an invalid length. [ 133.134550][ T8283] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 133.158569][ T8283] netlink: 104 bytes leftover after parsing attributes in process `syz.6.1635'. [ 133.191153][ T7295] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.191188][ T8292] loop0: detected capacity change from 0 to 512 [ 133.237053][ T8292] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.302601][ T8299] loop4: detected capacity change from 0 to 512 [ 133.346740][ T8304] lo speed is unknown, defaulting to 1000 [ 133.396925][ T8311] netlink: 'syz.4.1643': attribute type 3 has an invalid length. [ 133.403798][ T8313] 9pnet_fd: Insufficient options for proto=fd [ 133.406834][ T8311] netlink: 'syz.4.1643': attribute type 3 has an invalid length. [ 133.525932][ T8320] netlink: 'syz.2.1647': attribute type 3 has an invalid length. [ 133.533807][ T8320] netlink: 'syz.2.1647': attribute type 3 has an invalid length. [ 133.576502][ T8322] bridge_slave_0: left allmulticast mode [ 133.582256][ T8322] bridge_slave_0: left promiscuous mode [ 133.588153][ T8322] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.598408][ T8322] bridge_slave_1: left allmulticast mode [ 133.604184][ T8322] bridge_slave_1: left promiscuous mode [ 133.610066][ T8322] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.622655][ T8322] bond0: (slave bond_slave_0): Releasing backup interface [ 133.634603][ T8322] bond0: (slave bond_slave_1): Releasing backup interface [ 133.646391][ T8322] team0: Port device team_slave_0 removed [ 133.653443][ T8322] team0: Port device team_slave_1 removed [ 133.660859][ T8322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.663800][ T8326] loop4: detected capacity change from 0 to 512 [ 133.676117][ T8322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.683933][ T8322] batman_adv: batadv0: Removing interface: veth1_vlan [ 133.708239][ T8326] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.763621][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.825155][ T8334] FAULT_INJECTION: forcing a failure. [ 133.825155][ T8334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 133.834683][ T8340] netlink: 'syz.2.1655': attribute type 3 has an invalid length. [ 133.839396][ T8334] CPU: 0 UID: 0 PID: 8334 Comm: syz.4.1652 Not tainted syzkaller #0 PREEMPT(voluntary) [ 133.839432][ T8334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 133.839449][ T8334] Call Trace: [ 133.839458][ T8334] [ 133.839467][ T8334] __dump_stack+0x1d/0x30 [ 133.839496][ T8334] dump_stack_lvl+0xe8/0x140 [ 133.839576][ T8334] dump_stack+0x15/0x1b [ 133.839627][ T8334] should_fail_ex+0x265/0x280 [ 133.839728][ T8334] should_fail+0xb/0x20 [ 133.839763][ T8334] should_fail_usercopy+0x1a/0x20 [ 133.839799][ T8334] _copy_from_user+0x1c/0xb0 [ 133.839850][ T8334] kstrtouint_from_user+0x69/0xf0 [ 133.839888][ T8334] ? 0xffffffff81000000 [ 133.839906][ T8334] ? selinux_file_permission+0x1e4/0x320 [ 133.840015][ T8334] proc_fail_nth_write+0x50/0x160 [ 133.840055][ T8334] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 133.840096][ T8334] vfs_write+0x266/0x960 [ 133.840127][ T8334] ? vfs_read+0x4e6/0x770 [ 133.840158][ T8334] ? __rcu_read_unlock+0x4f/0x70 [ 133.840189][ T8334] ? __fget_files+0x184/0x1c0 [ 133.840286][ T8334] ksys_write+0xda/0x1a0 [ 133.840320][ T8334] __x64_sys_write+0x40/0x50 [ 133.840415][ T8334] x64_sys_call+0x27fe/0x2ff0 [ 133.840465][ T8334] do_syscall_64+0xd2/0x200 [ 133.840510][ T8334] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 133.840570][ T8334] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 133.840613][ T8334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.840642][ T8334] RIP: 0033:0x7f58ab1ed65f [ 133.840661][ T8334] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 133.840704][ T8334] RSP: 002b:00007f58a9c4f030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 133.840730][ T8334] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f58ab1ed65f [ 133.840747][ T8334] RDX: 0000000000000001 RSI: 00007f58a9c4f0a0 RDI: 0000000000000007 [ 133.840765][ T8334] RBP: 00007f58a9c4f090 R08: 0000000000000000 R09: 0000000000000000 [ 133.840780][ T8334] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 133.840797][ T8334] R13: 00007f58ab436038 R14: 00007f58ab435fa0 R15: 00007ffd179eaa68 [ 133.840849][ T8334] [ 134.064079][ T8340] netlink: 'syz.2.1655': attribute type 3 has an invalid length. [ 134.073259][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.153967][ T8351] netlink: 'syz.2.1660': attribute type 4 has an invalid length. [ 134.173436][ T8354] loop4: detected capacity change from 0 to 512 [ 134.219711][ T8354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.266538][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.275863][ T8367] loop0: detected capacity change from 0 to 1024 [ 134.276387][ T8367] EXT4-fs: Ignoring removed bh option [ 134.297137][ T8369] IPVS: set_ctl: invalid protocol: 47 255.255.255.255:20000 [ 134.319177][ T8367] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 134.342026][ T8369] 9pnet: Could not find request transport: f [ 134.353352][ T8374] loop4: detected capacity change from 0 to 2048 [ 134.361345][ T8374] EXT4-fs: Ignoring removed mblk_io_submit option [ 134.422481][ T8374] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 134.444814][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 134.446607][ T8385] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 134.494146][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 134.532052][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.580582][ T8393] atomic_op ffff88811a72c928 conn xmit_atomic 0000000000000000 [ 134.605691][ T8396] netlink: 'syz.6.1674': attribute type 4 has an invalid length. [ 134.628512][ T8397] FAULT_INJECTION: forcing a failure. [ 134.628512][ T8397] name failslab, interval 1, probability 0, space 0, times 0 [ 134.641321][ T8397] CPU: 0 UID: 0 PID: 8397 Comm: syz.0.1675 Not tainted syzkaller #0 PREEMPT(voluntary) [ 134.641351][ T8397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 134.641446][ T8397] Call Trace: [ 134.641453][ T8397] [ 134.641484][ T8397] __dump_stack+0x1d/0x30 [ 134.641511][ T8397] dump_stack_lvl+0xe8/0x140 [ 134.641544][ T8397] dump_stack+0x15/0x1b [ 134.641560][ T8397] should_fail_ex+0x265/0x280 [ 134.641583][ T8397] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 134.641609][ T8397] ? __kthread_create_on_node+0x76/0x230 [ 134.641672][ T8397] should_failslab+0x8c/0xb0 [ 134.641697][ T8397] __kmalloc_cache_noprof+0x4c/0x320 [ 134.641733][ T8397] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 134.641764][ T8397] __kthread_create_on_node+0x76/0x230 [ 134.641889][ T8397] ? __pfx_rxrpc_io_thread+0x10/0x10 [ 134.641951][ T8397] kthread_create_on_node+0x89/0xc0 [ 134.641997][ T8397] ? _raw_spin_unlock+0x26/0x50 [ 134.642029][ T8397] rxrpc_lookup_local+0x963/0xc70 [ 134.642058][ T8397] ? __pfx_rxrpc_encap_rcv+0x10/0x10 [ 134.642151][ T8397] ? __pfx_rxrpc_encap_err_rcv+0x10/0x10 [ 134.642193][ T8397] rxrpc_sendmsg+0x2f3/0x590 [ 134.642227][ T8397] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 134.642391][ T8397] __sock_sendmsg+0x145/0x180 [ 134.642434][ T8397] ____sys_sendmsg+0x31e/0x4e0 [ 134.642470][ T8397] ___sys_sendmsg+0x17b/0x1d0 [ 134.642521][ T8397] __x64_sys_sendmsg+0xd4/0x160 [ 134.642622][ T8397] x64_sys_call+0x191e/0x2ff0 [ 134.642644][ T8397] do_syscall_64+0xd2/0x200 [ 134.642679][ T8397] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 134.642710][ T8397] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 134.642801][ T8397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.642839][ T8397] RIP: 0033:0x7fe150ebeba9 [ 134.642883][ T8397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 134.642907][ T8397] RSP: 002b:00007fe14f927038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 134.642929][ T8397] RAX: ffffffffffffffda RBX: 00007fe151105fa0 RCX: 00007fe150ebeba9 [ 134.642943][ T8397] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006 [ 134.642971][ T8397] RBP: 00007fe14f927090 R08: 0000000000000000 R09: 0000000000000000 [ 134.642984][ T8397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 134.643000][ T8397] R13: 00007fe151106038 R14: 00007fe151105fa0 R15: 00007ffe23bcbfd8 [ 134.643024][ T8397] [ 134.671273][ T8401] loop4: detected capacity change from 0 to 512 [ 134.916230][ T8401] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.953458][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.968455][ T8410] syzkaller0: entered promiscuous mode [ 134.974585][ T8410] syzkaller0: entered allmulticast mode [ 135.000110][ T8413] loop4: detected capacity change from 0 to 512 [ 135.023550][ T8413] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 135.037429][ T8413] EXT4-fs (loop4): 1 truncate cleaned up [ 135.043567][ T8413] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.139410][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.201383][ T8429] loop4: detected capacity change from 0 to 1024 [ 135.234139][ T8429] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.258847][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.324629][ T8442] loop6: detected capacity change from 0 to 512 [ 135.341310][ T8442] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.372992][ T7295] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.402346][ T8448] netlink: 220 bytes leftover after parsing attributes in process `syz.6.1692'. [ 135.413821][ T8448] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=8448 comm=syz.6.1692 [ 135.522020][ T8458] FAULT_INJECTION: forcing a failure. [ 135.522020][ T8458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 135.535296][ T8458] CPU: 1 UID: 0 PID: 8458 Comm: syz.5.1696 Not tainted syzkaller #0 PREEMPT(voluntary) [ 135.535394][ T8458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 135.535411][ T8458] Call Trace: [ 135.535419][ T8458] [ 135.535428][ T8458] __dump_stack+0x1d/0x30 [ 135.535455][ T8458] dump_stack_lvl+0xe8/0x140 [ 135.535480][ T8458] dump_stack+0x15/0x1b [ 135.535500][ T8458] should_fail_ex+0x265/0x280 [ 135.535590][ T8458] should_fail+0xb/0x20 [ 135.535611][ T8458] should_fail_usercopy+0x1a/0x20 [ 135.535637][ T8458] strncpy_from_user+0x25/0x230 [ 135.535679][ T8458] ? kmem_cache_alloc_noprof+0x186/0x310 [ 135.535721][ T8458] ? getname_flags+0x80/0x3b0 [ 135.535751][ T8458] getname_flags+0xae/0x3b0 [ 135.535781][ T8458] path_setxattrat+0x223/0x310 [ 135.535873][ T8458] __x64_sys_setxattr+0x6e/0x90 [ 135.535906][ T8458] x64_sys_call+0xad2/0x2ff0 [ 135.535933][ T8458] do_syscall_64+0xd2/0x200 [ 135.536001][ T8458] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 135.536068][ T8458] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 135.536108][ T8458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.536155][ T8458] RIP: 0033:0x7f934a0ceba9 [ 135.536170][ T8458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.536192][ T8458] RSP: 002b:00007f9348b37038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 135.536245][ T8458] RAX: ffffffffffffffda RBX: 00007f934a315fa0 RCX: 00007f934a0ceba9 [ 135.536260][ T8458] RDX: 0000200000001440 RSI: 0000200000002a40 RDI: 0000200000002a00 [ 135.536273][ T8458] RBP: 00007f9348b37090 R08: 0000000000000003 R09: 0000000000000000 [ 135.536288][ T8458] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000001 [ 135.536301][ T8458] R13: 00007f934a316038 R14: 00007f934a315fa0 R15: 00007ffce2dad818 [ 135.536382][ T8458] [ 135.733397][ T8460] rdma_op ffff8881170ae180 conn xmit_rdma 0000000000000000 [ 135.742345][ T8456] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1695'. [ 135.751469][ T8456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1695'. [ 135.780820][ T8468] loop4: detected capacity change from 0 to 256 [ 135.799160][ T8468] FAT-fs (loop4): Directory bread(block 1285) failed [ 135.811045][ T8468] FAT-fs (loop4): Directory bread(block 1285) failed [ 135.818287][ T8468] FAT-fs (loop4): Directory bread(block 1285) failed [ 135.826620][ T8468] FAT-fs (loop4): Directory bread(block 1285) failed [ 135.926646][ T8477] loop0: detected capacity change from 0 to 1024 [ 135.947588][ T8477] EXT4-fs: Ignoring removed nobh option [ 135.953321][ T8477] EXT4-fs: Ignoring removed bh option [ 135.987755][ T8477] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.987790][ T8481] loop2: detected capacity change from 0 to 1024 [ 135.989970][ T8481] EXT4-fs: Ignoring removed nobh option [ 136.013075][ T8481] EXT4-fs: Ignoring removed bh option [ 136.020470][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.029630][ T8481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 136.087145][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.089484][ T8492] loop0: detected capacity change from 0 to 2048 [ 136.119365][ T8492] EXT4-fs: Ignoring removed mblk_io_submit option [ 136.138665][ T8495] loop2: detected capacity change from 0 to 1024 [ 136.157529][ T8492] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.161557][ T8495] EXT4-fs: Ignoring removed mblk_io_submit option [ 136.178987][ T8495] EXT4-fs: Ignoring removed bh option [ 136.187844][ T8495] ext3: Unknown parameter 'smackfsroot' [ 136.201297][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.362250][ T8514] netlink: 156 bytes leftover after parsing attributes in process `syz.5.1714'. [ 136.372187][ T8514] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1714'. [ 136.382019][ T8514] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1714'. [ 136.532648][ T8521] lo speed is unknown, defaulting to 1000 [ 136.745924][ T8521] loop0: detected capacity change from 0 to 512 [ 136.780269][ T8521] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 136.789523][ T8521] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 136.811342][ T8521] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 136.832917][ T8521] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 136.841029][ T8521] System zones: 0-2, 18-18, 34-35 [ 136.847522][ T8521] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 136.942900][ T8529] loop4: detected capacity change from 0 to 1024 [ 136.966045][ T8529] EXT4-fs: Ignoring removed nobh option [ 136.971690][ T8529] EXT4-fs: Ignoring removed bh option [ 137.037715][ T8529] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.134691][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.146881][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.163391][ T8516] loop2: detected capacity change from 0 to 32768 [ 137.292849][ T8552] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1725'. [ 137.491718][ T29] kauditd_printk_skb: 811 callbacks suppressed [ 137.491734][ T29] audit: type=1400 audit(137.468:8041): avc: denied { create } for pid=8564 comm="syz.2.1729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 137.519538][ T29] audit: type=1400 audit(137.468:8042): avc: denied { setopt } for pid=8564 comm="syz.2.1729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 137.538707][ T29] audit: type=1400 audit(137.468:8043): avc: denied { bind } for pid=8564 comm="syz.2.1729" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 137.557611][ T29] audit: type=1400 audit(137.468:8044): avc: denied { name_bind } for pid=8564 comm="syz.2.1729" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 137.578817][ T29] audit: type=1400 audit(137.468:8045): avc: denied { node_bind } for pid=8564 comm="syz.2.1729" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 137.599300][ T29] audit: type=1400 audit(137.468:8046): avc: denied { mount } for pid=8564 comm="syz.2.1729" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 137.621370][ T29] audit: type=1400 audit(137.478:8047): avc: denied { write } for pid=8564 comm="syz.2.1729" name="xfrm_stat" dev="proc" ino=4026532549 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 137.643995][ T29] audit: type=1400 audit(137.478:8048): avc: denied { write } for pid=8564 comm="syz.2.1729" lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 137.663893][ T29] audit: type=1400 audit(137.478:8049): avc: denied { connect } for pid=8564 comm="syz.2.1729" lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 137.684061][ T29] audit: type=1400 audit(137.478:8050): avc: denied { name_connect } for pid=8564 comm="syz.2.1729" dest=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 137.750731][ T2957] IPVS: starting estimator thread 0... [ 137.854857][ T8577] IPVS: using max 2256 ests per chain, 112800 per kthread [ 137.877197][ T8590] loop0: detected capacity change from 0 to 512 [ 137.900486][ T8590] EXT4-fs: Ignoring removed bh option [ 137.911686][ T8590] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 137.942294][ T8590] EXT4-fs (loop0): 1 truncate cleaned up [ 137.956853][ T8590] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 138.072269][ T8590] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.129502][ T8570] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1732'. [ 138.248092][ T8605] validate_nla: 10 callbacks suppressed [ 138.248107][ T8605] netlink: 'syz.6.1745': attribute type 1 has an invalid length. [ 138.261531][ T8605] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1745'. [ 138.293004][ T8605] loop6: detected capacity change from 0 to 512 [ 138.311838][ T8605] ext4: Unknown parameter 'smackfsfloor' [ 138.365247][ T8618] 9pnet_fd: Insufficient options for proto=fd [ 138.396963][ T8624] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1751'. [ 138.411213][ T8624] netem: change failed [ 138.571815][ T8639] FAULT_INJECTION: forcing a failure. [ 138.571815][ T8639] name failslab, interval 1, probability 0, space 0, times 0 [ 138.585362][ T8639] CPU: 0 UID: 0 PID: 8639 Comm: syz.0.1755 Not tainted syzkaller #0 PREEMPT(voluntary) [ 138.585444][ T8639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 138.585460][ T8639] Call Trace: [ 138.585466][ T8639] [ 138.585473][ T8639] __dump_stack+0x1d/0x30 [ 138.585494][ T8639] dump_stack_lvl+0xe8/0x140 [ 138.585542][ T8639] dump_stack+0x15/0x1b [ 138.585608][ T8639] should_fail_ex+0x265/0x280 [ 138.585637][ T8639] should_failslab+0x8c/0xb0 [ 138.585662][ T8639] __kmalloc_cache_node_noprof+0x54/0x320 [ 138.585693][ T8639] ? __get_vm_area_node+0x106/0x1d0 [ 138.585746][ T8639] __get_vm_area_node+0x106/0x1d0 [ 138.585959][ T8639] __vmalloc_node_range_noprof+0x273/0xe00 [ 138.586002][ T8639] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 138.586044][ T8639] ? avc_has_extended_perms+0x73d/0x940 [ 138.586131][ T8639] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 138.586166][ T8639] __vmalloc_noprof+0x83/0xc0 [ 138.586196][ T8639] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 138.586236][ T8639] ? ppp_poll+0xe1/0x170 [ 138.586259][ T8639] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 138.586284][ T8639] ? bpf_prog_alloc+0x2a/0x150 [ 138.586326][ T8639] ? ppp_poll+0xe1/0x170 [ 138.586349][ T8639] bpf_prog_alloc+0x3c/0x150 [ 138.586382][ T8639] ? ppp_poll+0xe1/0x170 [ 138.586406][ T8639] bpf_prog_create+0x73/0x130 [ 138.586446][ T8639] ? __pfx_ppp_ioctl+0x10/0x10 [ 138.586548][ T8639] ppp_get_filter+0x113/0x160 [ 138.586577][ T8639] ppp_ioctl+0xb93/0x11c0 [ 138.586620][ T8639] ? __fget_files+0x184/0x1c0 [ 138.586649][ T8639] ? __pfx_ppp_ioctl+0x10/0x10 [ 138.586668][ T8639] __se_sys_ioctl+0xce/0x140 [ 138.586692][ T8639] __x64_sys_ioctl+0x43/0x50 [ 138.586736][ T8639] x64_sys_call+0x1816/0x2ff0 [ 138.586759][ T8639] do_syscall_64+0xd2/0x200 [ 138.586841][ T8639] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 138.586920][ T8639] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 138.586959][ T8639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.587005][ T8639] RIP: 0033:0x7fe150ebeba9 [ 138.587020][ T8639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.587037][ T8639] RSP: 002b:00007fe14f927038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.587056][ T8639] RAX: ffffffffffffffda RBX: 00007fe151105fa0 RCX: 00007fe150ebeba9 [ 138.587069][ T8639] RDX: 00002000000003c0 RSI: 0000000040107446 RDI: 0000000000000003 [ 138.587085][ T8639] RBP: 00007fe14f927090 R08: 0000000000000000 R09: 0000000000000000 [ 138.587177][ T8639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.587190][ T8639] R13: 00007fe151106038 R14: 00007fe151105fa0 R15: 00007ffe23bcbfd8 [ 138.587232][ T8639] [ 138.587241][ T8639] syz.0.1755: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null) [ 138.691280][ T8643] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 138.693110][ T8639] ,cpuset= [ 138.698476][ T8643] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 138.698565][ T8643] vhci_hcd vhci_hcd.0: Device attached [ 138.703264][ T8639] /,mems_allowed=0 [ 138.703292][ T8639] CPU: 0 UID: 0 PID: 8639 Comm: syz.0.1755 Not tainted syzkaller #0 PREEMPT(voluntary) [ 138.703320][ T8639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 138.703375][ T8639] Call Trace: [ 138.703384][ T8639] [ 138.703393][ T8639] __dump_stack+0x1d/0x30 [ 138.703422][ T8639] dump_stack_lvl+0xe8/0x140 [ 138.703461][ T8639] dump_stack+0x15/0x1b [ 138.703486][ T8639] warn_alloc+0x12b/0x1a0 [ 138.703538][ T8639] __vmalloc_node_range_noprof+0x297/0xe00 [ 138.703687][ T8639] ? avc_has_extended_perms+0x73d/0x940 [ 138.703729][ T8639] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 138.703784][ T8639] __vmalloc_noprof+0x83/0xc0 [ 138.703820][ T8639] ? bpf_prog_alloc_no_stats+0x47/0x3a0 [ 138.703857][ T8639] ? ppp_poll+0xe1/0x170 [ 138.703899][ T8639] bpf_prog_alloc_no_stats+0x47/0x3a0 [ 138.703936][ T8639] ? bpf_prog_alloc+0x2a/0x150 [ 138.704008][ T8639] ? ppp_poll+0xe1/0x170 [ 138.704034][ T8639] bpf_prog_alloc+0x3c/0x150 [ 138.704069][ T8639] ? ppp_poll+0xe1/0x170 [ 138.704170][ T8639] bpf_prog_create+0x73/0x130 [ 138.704204][ T8639] ? __pfx_ppp_ioctl+0x10/0x10 [ 138.704231][ T8639] ppp_get_filter+0x113/0x160 [ 138.704327][ T8639] ppp_ioctl+0xb93/0x11c0 [ 138.704354][ T8639] ? __fget_files+0x184/0x1c0 [ 138.704390][ T8639] ? __pfx_ppp_ioctl+0x10/0x10 [ 138.704488][ T8639] __se_sys_ioctl+0xce/0x140 [ 138.704516][ T8639] __x64_sys_ioctl+0x43/0x50 [ 138.704541][ T8639] x64_sys_call+0x1816/0x2ff0 [ 138.704585][ T8639] do_syscall_64+0xd2/0x200 [ 138.704630][ T8639] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 138.704699][ T8639] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 138.704741][ T8639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.704850][ T8639] RIP: 0033:0x7fe150ebeba9 [ 138.704973][ T8639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.704997][ T8639] RSP: 002b:00007fe14f927038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 138.705023][ T8639] RAX: ffffffffffffffda RBX: 00007fe151105fa0 RCX: 00007fe150ebeba9 [ 138.705041][ T8639] RDX: 00002000000003c0 RSI: 0000000040107446 RDI: 0000000000000003 [ 138.705058][ T8639] RBP: 00007fe14f927090 R08: 0000000000000000 R09: 0000000000000000 [ 138.705076][ T8639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.705091][ T8639] R13: 00007fe151106038 R14: 00007fe151105fa0 R15: 00007ffe23bcbfd8 [ 138.705145][ T8639] [ 138.705992][ T8639] Mem-Info: [ 138.711883][ T8644] vhci_hcd: cannot find a urb of seqnum 3 max seqnum 1 [ 138.712207][ T8639] active_anon:32052 inactive_anon:3 isolated_anon:0 [ 138.712207][ T8639] active_file:26611 inactive_file:2285 isolated_file:0 [ 138.712207][ T8639] unevictable:0 dirty:433 writeback:3 [ 138.712207][ T8639] slab_reclaimable:3551 slab_unreclaimable:16771 [ 138.712207][ T8639] mapped:35459 shmem:22998 pagetables:1531 [ 138.712207][ T8639] sec_pagetables:0 bounce:0 [ 138.712207][ T8639] kernel_misc_reclaimable:0 [ 138.712207][ T8639] free:1778371 free_pcp:77486 free_cma:0 [ 138.787888][ T3426] vhci_hcd: stop threads [ 138.787901][ T3426] vhci_hcd: release socket [ 138.787910][ T3426] vhci_hcd: disconnect device [ 139.217951][ T8639] Node 0 active_anon:128324kB inactive_anon:12kB active_file:106444kB inactive_file:9140kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:134644kB dirty:1732kB writeback:12kB shmem:91992kB kernel_stack:3776kB pagetables:6240kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 139.246537][ T8639] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 139.275784][ T8639] lowmem_reserve[]: 0 2883 7862 7862 [ 139.281154][ T8639] Node 0 DMA32 free:2949288kB boost:0kB min:4132kB low:7064kB high:9996kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3129332kB managed:2952820kB mlocked:0kB bounce:0kB free_pcp:3532kB local_pcp:3532kB free_cma:0kB [ 139.312325][ T8639] lowmem_reserve[]: 0 0 4978 4978 [ 139.317453][ T8639] Node 0 Normal free:4144440kB boost:0kB min:7184kB low:12280kB high:17376kB reserved_highatomic:0KB free_highatomic:0KB active_anon:128324kB inactive_anon:12kB active_file:106444kB inactive_file:9140kB unevictable:0kB writepending:1744kB present:5242880kB managed:5098240kB mlocked:0kB bounce:0kB free_pcp:306076kB local_pcp:129080kB free_cma:0kB [ 139.350831][ T8639] lowmem_reserve[]: 0 0 0 0 [ 139.355479][ T8639] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 139.368856][ T8639] Node 0 DMA32: 4*4kB (M) 3*8kB (M) 4*16kB (M) 2*32kB (M) 4*64kB (M) 4*128kB (M) 3*256kB (M) 3*512kB (M) 3*1024kB (M) 3*2048kB (M) 717*4096kB (M) = 2949288kB [ 139.385844][ T8639] Node 0 Normal: 116*4kB (UM) 27*8kB (UE) 14*16kB (UME) 11*32kB (UME) 184*64kB (UME) 73*128kB (UME) 40*256kB (UM) 17*512kB (UME) 5*1024kB (UM) 3*2048kB (M) 999*4096kB (UM) = 4144488kB [ 139.405476][ T8639] Node 0 hugepages_total=6 hugepages_free=2 hugepages_surp=2 hugepages_size=2048kB [ 139.414805][ T8639] 51929 total pagecache pages [ 139.419494][ T8639] 12 pages in swap cache [ 139.424084][ T8639] Free swap = 124948kB [ 139.428907][ T8639] Total swap = 124996kB [ 139.433400][ T8639] 2097051 pages RAM [ 139.437282][ T8639] 0 pages HighMem/MovableOnly [ 139.442144][ T8639] 80446 pages reserved [ 139.475368][ T8636] lo speed is unknown, defaulting to 1000 [ 139.662117][ T8650] lo speed is unknown, defaulting to 1000 [ 139.817819][ T8658] vhci_hcd: invalid port number 96 [ 139.823119][ T8658] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 139.886830][ T8658] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 139.972318][ T8669] loop0: detected capacity change from 0 to 1024 [ 140.021053][ T8672] loop6: detected capacity change from 0 to 1024 [ 140.039099][ T8669] EXT4-fs: Ignoring removed orlov option [ 140.044894][ T8669] EXT4-fs: Ignoring removed nomblk_io_submit option [ 140.057104][ T8672] EXT4-fs: Ignoring removed nobh option [ 140.062802][ T8672] EXT4-fs: Ignoring removed bh option [ 140.084363][ T8672] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.182407][ T8681] loop4: detected capacity change from 0 to 1024 [ 140.193792][ T7295] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.205256][ T8681] EXT4-fs: Ignoring removed bh option [ 140.211748][ T8681] EXT4-fs (loop4): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 140.237500][ T8669] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.251819][ T8669] FAULT_INJECTION: forcing a failure. [ 140.251819][ T8669] name failslab, interval 1, probability 0, space 0, times 0 [ 140.264659][ T8669] CPU: 1 UID: 0 PID: 8669 Comm: syz.0.1767 Not tainted syzkaller #0 PREEMPT(voluntary) [ 140.264693][ T8669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 140.264710][ T8669] Call Trace: [ 140.264717][ T8669] [ 140.264726][ T8669] __dump_stack+0x1d/0x30 [ 140.264780][ T8669] dump_stack_lvl+0xe8/0x140 [ 140.264813][ T8669] dump_stack+0x15/0x1b [ 140.264899][ T8669] should_fail_ex+0x265/0x280 [ 140.264931][ T8669] should_failslab+0x8c/0xb0 [ 140.264963][ T8669] kmem_cache_alloc_lru_noprof+0x55/0x310 [ 140.265042][ T8669] ? __d_alloc+0x3d/0x340 [ 140.265081][ T8669] __d_alloc+0x3d/0x340 [ 140.265128][ T8669] ? avc_has_perm_noaudit+0x1b1/0x200 [ 140.265164][ T8669] d_alloc_parallel+0x53/0xc60 [ 140.265225][ T8669] ? selinux_inode_permission+0x62d/0x740 [ 140.265272][ T8669] ? make_vfsuid+0x49/0xa0 [ 140.265305][ T8669] ? lockref_get_not_dead+0x120/0x1c0 [ 140.265345][ T8669] ? __rcu_read_unlock+0x4f/0x70 [ 140.265448][ T8669] __lookup_slow+0x8c/0x250 [ 140.265491][ T8669] lookup_slow+0x3c/0x60 [ 140.265538][ T8669] walk_component+0x1ec/0x220 [ 140.265579][ T8669] path_lookupat+0xfe/0x2a0 [ 140.265627][ T8669] filename_lookup+0x147/0x340 [ 140.265682][ T8669] user_path_at+0x3e/0x130 [ 140.265790][ T8669] __se_sys_mount+0x25b/0x2e0 [ 140.265820][ T8669] ? fput+0x8f/0xc0 [ 140.265941][ T8669] __x64_sys_mount+0x67/0x80 [ 140.265972][ T8669] x64_sys_call+0x2b4d/0x2ff0 [ 140.266000][ T8669] do_syscall_64+0xd2/0x200 [ 140.266066][ T8669] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 140.266097][ T8669] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 140.266137][ T8669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.266164][ T8669] RIP: 0033:0x7fe150ebeba9 [ 140.266184][ T8669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.266219][ T8669] RSP: 002b:00007fe14f927038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 140.266285][ T8669] RAX: ffffffffffffffda RBX: 00007fe151105fa0 RCX: 00007fe150ebeba9 [ 140.266301][ T8669] RDX: 00002000000002c0 RSI: 0000200000000080 RDI: 0000000000000000 [ 140.266317][ T8669] RBP: 00007fe14f927090 R08: 0000200000000240 R09: 0000000000000000 [ 140.266333][ T8669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.266344][ T8669] R13: 00007fe151106038 R14: 00007fe151105fa0 R15: 00007ffe23bcbfd8 [ 140.266370][ T8669] [ 140.516100][ T8682] netlink: 'syz.2.1771': attribute type 4 has an invalid length. [ 140.584595][ T8681] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 140.614051][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.638004][ T8688] netlink: 'syz.2.1774': attribute type 3 has an invalid length. [ 140.650406][ T8688] netlink: 'syz.2.1774': attribute type 3 has an invalid length. [ 140.733003][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.840742][ T8699] netlink: 'syz.0.1778': attribute type 21 has an invalid length. [ 140.848665][ T8699] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1778'. [ 140.868724][ T8699] netlink: 'syz.0.1778': attribute type 4 has an invalid length. [ 140.876715][ T8699] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1778'. [ 140.908601][ T8701] vhci_hcd: invalid port number 96 [ 140.913756][ T8701] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 140.988393][ T8691] loop2: detected capacity change from 0 to 764 [ 141.038281][ T8701] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 141.051535][ T8691] rock: directory entry would overflow storage [ 141.057802][ T8691] rock: sig=0x4f50, size=4, remaining=3 [ 141.063399][ T8691] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 141.227727][ T8706] loop2: detected capacity change from 0 to 2048 [ 141.304335][ T8706] loop2: p2 p3 p7 [ 141.449701][ T8714] batadv2: entered promiscuous mode [ 141.459408][ T6400] udevd[6400]: inotify_add_watch(7, /dev/loop2p7, 10) failed: No such file or directory [ 141.477010][ T8717] loop2: detected capacity change from 0 to 512 [ 141.485371][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 141.496611][ T3787] udevd[3787]: inotify_add_watch(7, /dev/loop2p2, 10) failed: No such file or directory [ 141.525176][ T8717] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.616553][ T8721] netlink: 'syz.0.1787': attribute type 4 has an invalid length. [ 141.726434][ T8717] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.740469][ T8737] loop6: detected capacity change from 0 to 764 [ 141.801490][ T8737] rock: directory entry would overflow storage [ 141.807789][ T8737] rock: sig=0x4f50, size=4, remaining=3 [ 141.813354][ T8737] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 141.942853][ T8742] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 141.949457][ T8742] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 141.957841][ T8742] vhci_hcd vhci_hcd.0: Device attached [ 141.993188][ T8743] vhci_hcd: connection closed [ 142.003545][ T298] vhci_hcd: stop threads [ 142.012845][ T298] vhci_hcd: release socket [ 142.017490][ T298] vhci_hcd: disconnect device [ 142.099261][ T8756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1799'. [ 142.108252][ T8756] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1799'. [ 142.118010][ T8756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1799'. [ 142.126972][ T8756] netlink: 348 bytes leftover after parsing attributes in process `syz.0.1799'. [ 142.137846][ T8756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1799'. [ 142.181113][ T8756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1799'. [ 142.183563][ T8754] tipc: Started in network mode [ 142.195082][ T8754] tipc: Node identity ea66cd584f9c, cluster identity 4711 [ 142.202268][ T8754] tipc: Enabled bearer , priority 0 [ 142.211346][ T8758] netlink: 'syz.0.1799': attribute type 3 has an invalid length. [ 142.220136][ T8753] tipc: Resetting bearer [ 142.251907][ T8753] tipc: Disabling bearer [ 142.433650][ T8764] netlink: 'syz.6.1800': attribute type 4 has an invalid length. [ 142.508354][ T8766] tipc: Enabling of bearer rejected, failed to enable media [ 142.537176][ T8770] netlink: 'syz.6.1803': attribute type 3 has an invalid length. [ 142.546534][ T29] kauditd_printk_skb: 447 callbacks suppressed [ 142.546552][ T29] audit: type=1326 audit(142.508:8498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8751 comm="syz.4.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ab1eeba9 code=0x7ffc0000 [ 142.576554][ T29] audit: type=1326 audit(142.508:8499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8751 comm="syz.4.1797" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ab1eeba9 code=0x7ffc0000 [ 142.642919][ T8773] loop2: detected capacity change from 0 to 764 [ 142.706922][ T8773] rock: directory entry would overflow storage [ 142.713164][ T8773] rock: sig=0x4f50, size=4, remaining=3 [ 142.718807][ T8773] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 142.780362][ T29] audit: type=1326 audit(142.658:8500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8779 comm="syz.6.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88ce6eba9 code=0x7ffc0000 [ 142.804514][ T29] audit: type=1326 audit(142.658:8501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8779 comm="syz.6.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88ce6eba9 code=0x7ffc0000 [ 142.828326][ T29] audit: type=1326 audit(142.668:8502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8779 comm="syz.6.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff88ce6eba9 code=0x7ffc0000 [ 142.851155][ T29] audit: type=1326 audit(142.668:8503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8779 comm="syz.6.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88ce6eba9 code=0x7ffc0000 [ 142.875122][ T29] audit: type=1326 audit(142.668:8504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8779 comm="syz.6.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88ce6eba9 code=0x7ffc0000 [ 142.898863][ T29] audit: type=1326 audit(142.668:8505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8779 comm="syz.6.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff88ce6eba9 code=0x7ffc0000 [ 142.922614][ T29] audit: type=1326 audit(142.668:8506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8779 comm="syz.6.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff88ce6eba9 code=0x7ffc0000 [ 142.924703][ T8784] batadv1: entered promiscuous mode [ 142.946618][ T29] audit: type=1326 audit(142.668:8507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8779 comm="syz.6.1805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff88ce6eba9 code=0x7ffc0000 [ 143.047774][ T8798] SELinux: Context system_u:object_r:load_policy_exec_t:s0 is not valid (left unmapped). [ 143.241294][ T8815] loop6: detected capacity change from 0 to 764 [ 143.297301][ T8815] rock: directory entry would overflow storage [ 143.303523][ T8815] rock: sig=0x4f50, size=4, remaining=3 [ 143.309800][ T8815] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 143.388616][ T8821] loop4: detected capacity change from 0 to 512 [ 143.397883][ T8821] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 143.410945][ T8821] EXT4-fs (loop4): orphan cleanup on readonly fs [ 143.418017][ T8821] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.1821: Failed to acquire dquot type 1 [ 143.431550][ T8821] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1821: bg 0: block 40: padding at end of block bitmap is not set [ 143.447460][ T8821] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem [ 143.457704][ T8821] EXT4-fs (loop4): 1 truncate cleaned up [ 143.476482][ T8821] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 143.501605][ T8821] No source specified [ 143.525849][ T3317] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 143.543629][ T8833] __nla_validate_parse: 10 callbacks suppressed [ 143.543648][ T8833] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1826'. [ 143.574259][ T8829] lo speed is unknown, defaulting to 1000 [ 143.694506][ T8837] lo speed is unknown, defaulting to 1000 [ 143.955720][ T8851] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1832'. [ 143.992259][ T8851] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1832'. [ 144.006707][ T8849] loop0: detected capacity change from 0 to 1024 [ 144.077961][ T8849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.130802][ T8857] loop2: detected capacity change from 0 to 1024 [ 144.151288][ T8857] EXT4-fs: Ignoring removed nobh option [ 144.156951][ T8857] EXT4-fs: Ignoring removed bh option [ 144.262627][ T8857] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 144.285688][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.317981][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.517262][ T8868] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 144.523970][ T8868] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 144.531793][ T8868] vhci_hcd vhci_hcd.0: Device attached [ 144.589357][ T8869] vhci_hcd: connection closed [ 144.589570][ T3433] vhci_hcd: stop threads [ 144.599818][ T3433] vhci_hcd: release socket [ 144.604290][ T3433] vhci_hcd: disconnect device [ 144.613145][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1839'. [ 144.648809][ T8876] delete_channel: no stack [ 144.653801][ T8883] FAULT_INJECTION: forcing a failure. [ 144.653801][ T8883] name failslab, interval 1, probability 0, space 0, times 0 [ 144.667451][ T8883] CPU: 0 UID: 0 PID: 8883 Comm: syz.0.1841 Not tainted syzkaller #0 PREEMPT(voluntary) [ 144.667484][ T8883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 144.667500][ T8883] Call Trace: [ 144.667508][ T8883] [ 144.667517][ T8883] __dump_stack+0x1d/0x30 [ 144.667544][ T8883] dump_stack_lvl+0xe8/0x140 [ 144.667574][ T8883] dump_stack+0x15/0x1b [ 144.667592][ T8883] should_fail_ex+0x265/0x280 [ 144.667681][ T8883] should_failslab+0x8c/0xb0 [ 144.667713][ T8883] kmem_cache_alloc_noprof+0x50/0x310 [ 144.667820][ T8883] ? alloc_empty_file+0x76/0x200 [ 144.667862][ T8883] alloc_empty_file+0x76/0x200 [ 144.667914][ T8883] alloc_file_pseudo+0xc6/0x160 [ 144.667954][ T8883] __shmem_file_setup+0x1de/0x210 [ 144.668051][ T8883] shmem_file_setup+0x3b/0x50 [ 144.668104][ T8883] __se_sys_memfd_create+0x2c3/0x590 [ 144.668133][ T8883] __x64_sys_memfd_create+0x31/0x40 [ 144.668164][ T8883] x64_sys_call+0x2abe/0x2ff0 [ 144.668186][ T8883] do_syscall_64+0xd2/0x200 [ 144.668220][ T8883] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 144.668245][ T8883] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 144.668380][ T8883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.668446][ T8883] RIP: 0033:0x7fe150ebeba9 [ 144.668515][ T8883] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 144.668536][ T8883] RSP: 002b:00007fe14f926e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 144.668559][ T8883] RAX: ffffffffffffffda RBX: 00000000000004f2 RCX: 00007fe150ebeba9 [ 144.668574][ T8883] RDX: 00007fe14f926ef0 RSI: 0000000000000000 RDI: 00007fe150f427e8 [ 144.668589][ T8883] RBP: 0000200000000600 R08: 00007fe14f926bb7 R09: 00007fe14f926e40 [ 144.668604][ T8883] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 144.668616][ T8883] R13: 00007fe14f926ef0 R14: 00007fe14f926eb0 R15: 00002000000002c0 [ 144.668663][ T8883] [ 144.891426][ T8886] 9pnet: Could not find request transport: fd0x0000000000000003 [ 145.227100][ T8906] validate_nla: 2 callbacks suppressed [ 145.227120][ T8906] netlink: 'syz.2.1850': attribute type 4 has an invalid length. [ 145.315647][ T8913] loop2: detected capacity change from 0 to 764 [ 145.339201][ T8913] rock: directory entry would overflow storage [ 145.345543][ T8913] rock: sig=0x4f50, size=4, remaining=3 [ 145.351168][ T8913] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 145.432838][ T8918] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1856'. [ 145.626698][ T8932] SELinux: failed to load policy [ 145.635772][ T8932] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1861'. [ 145.658313][ T8939] netlink: 'syz.2.1864': attribute type 3 has an invalid length. [ 145.680598][ T8939] netlink: 'syz.2.1864': attribute type 3 has an invalid length. [ 145.692676][ T8942] 9pnet: Could not find request transport: fd0x0000000000000003 [ 145.830155][ T8956] loop2: detected capacity change from 0 to 512 [ 145.844507][ T8956] EXT4-fs: Ignoring removed bh option [ 145.865289][ T8956] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 145.874371][ T8956] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 145.888915][ T8951] vhci_hcd: invalid port number 96 [ 145.894079][ T8951] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 145.902369][ T8956] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended [ 145.913590][ T8956] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 145.922540][ T8956] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.953656][ T8956] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1871: bg 0: block 353: padding at end of block bitmap is not set [ 145.999077][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.184615][ T8973] loop0: detected capacity change from 0 to 128 [ 146.205637][ T8973] FAT-fs (loop0): bogus number of reserved sectors [ 146.212298][ T8973] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 146.221719][ T8973] FAT-fs (loop0): Can't find a valid FAT filesystem [ 146.231747][ T8977] 9pnet_fd: Insufficient options for proto=fd [ 146.400092][ T8984] erspan0 speed is unknown, defaulting to 1000 [ 146.407466][ T8984] erspan0 speed is unknown, defaulting to 1000 [ 146.414100][ T8984] erspan0 speed is unknown, defaulting to 1000 [ 146.523341][ T8984] infiniband syz2: set down [ 146.528335][ T8984] infiniband syz2: added erspan0 [ 146.534454][ T23] erspan0 speed is unknown, defaulting to 1000 [ 146.550700][ T8984] RDS/IB: syz2: added [ 146.554957][ T8984] smc: adding ib device syz2 with port count 1 [ 146.561341][ T8984] smc: ib device syz2 port 1 has pnetid [ 146.567731][ T23] erspan0 speed is unknown, defaulting to 1000 [ 146.576881][ T8984] erspan0 speed is unknown, defaulting to 1000 [ 146.667761][ T8984] erspan0 speed is unknown, defaulting to 1000 [ 146.740006][ T8984] erspan0 speed is unknown, defaulting to 1000 [ 146.817012][ T8991] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1880'. [ 146.821935][ T8984] erspan0 speed is unknown, defaulting to 1000 [ 146.944882][ T8993] FAULT_INJECTION: forcing a failure. [ 146.944882][ T8993] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 146.958029][ T8993] CPU: 1 UID: 0 PID: 8993 Comm: syz.0.1882 Not tainted syzkaller #0 PREEMPT(voluntary) [ 146.958058][ T8993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 146.958070][ T8993] Call Trace: [ 146.958077][ T8993] [ 146.958086][ T8993] __dump_stack+0x1d/0x30 [ 146.958133][ T8993] dump_stack_lvl+0xe8/0x140 [ 146.958161][ T8993] dump_stack+0x15/0x1b [ 146.958178][ T8993] should_fail_ex+0x265/0x280 [ 146.958202][ T8993] should_fail+0xb/0x20 [ 146.958226][ T8993] should_fail_usercopy+0x1a/0x20 [ 146.958275][ T8993] _copy_from_iter+0xd2/0xe80 [ 146.958342][ T8993] ? __build_skb_around+0x1a0/0x200 [ 146.958372][ T8993] ? __alloc_skb+0x223/0x320 [ 146.958518][ T8993] netlink_sendmsg+0x471/0x6b0 [ 146.958554][ T8993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.958588][ T8993] __sock_sendmsg+0x145/0x180 [ 146.958641][ T8993] ____sys_sendmsg+0x31e/0x4e0 [ 146.958671][ T8993] ___sys_sendmsg+0x17b/0x1d0 [ 146.958782][ T8993] __x64_sys_sendmsg+0xd4/0x160 [ 146.958822][ T8993] x64_sys_call+0x191e/0x2ff0 [ 146.958907][ T8993] do_syscall_64+0xd2/0x200 [ 146.958951][ T8993] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 146.958996][ T8993] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 146.959087][ T8993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.959182][ T8993] RIP: 0033:0x7fe150ebeba9 [ 146.959202][ T8993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.959226][ T8993] RSP: 002b:00007fe14f927038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.959251][ T8993] RAX: ffffffffffffffda RBX: 00007fe151105fa0 RCX: 00007fe150ebeba9 [ 146.959267][ T8993] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 146.959282][ T8993] RBP: 00007fe14f927090 R08: 0000000000000000 R09: 0000000000000000 [ 146.959299][ T8993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.959397][ T8993] R13: 00007fe151106038 R14: 00007fe151105fa0 R15: 00007ffe23bcbfd8 [ 146.959423][ T8993] [ 147.013522][ T8984] erspan0 speed is unknown, defaulting to 1000 [ 147.199414][ T8997] netlink: 260 bytes leftover after parsing attributes in process `syz.0.1883'. [ 147.226293][ T8999] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1884'. [ 147.258941][ T9000] SELinux: policydb magic number 0x7 does not match expected magic number 0xf97cff8c [ 147.268851][ T9000] SELinux: failed to load policy [ 147.273900][ T8953] netlink: 'syz.6.1869': attribute type 1 has an invalid length. [ 147.282503][ T9001] SELinux: policydb magic number 0x7 does not match expected magic number 0xf97cff8c [ 147.292628][ T9001] SELinux: failed to load policy [ 147.307726][ T8999] netlink: 'syz.0.1884': attribute type 4 has an invalid length. [ 147.316247][ T8999] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1884'. [ 147.338087][ T8953] 8021q: adding VLAN 0 to HW filter on device bond1 [ 147.472512][ T9013] loop4: detected capacity change from 0 to 764 [ 147.491601][ T9011] loop2: detected capacity change from 0 to 2048 [ 147.514666][ T9013] rock: directory entry would overflow storage [ 147.520929][ T9013] rock: sig=0x4f50, size=4, remaining=3 [ 147.526528][ T9013] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 147.556000][ T3787] loop2: p1 < > p4 [ 147.560660][ T3787] loop2: p4 size 8388608 extends beyond EOD, truncated [ 147.593130][ T9011] loop2: p1 < > p4 [ 147.614253][ T9011] loop2: p4 size 8388608 extends beyond EOD, truncated [ 147.618300][ T9008] 9pnet: p9_errstr2errno: server reported unknown error [ 147.634708][ T29] kauditd_printk_skb: 498 callbacks suppressed [ 147.634722][ T29] audit: type=1400 audit(147.608:9004): avc: denied { read write } for pid=9010 comm="syz.2.1889" name="loop2p4" dev="devtmpfs" ino=1622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 147.669564][ T9018] FAULT_INJECTION: forcing a failure. [ 147.669564][ T9018] name failslab, interval 1, probability 0, space 0, times 0 [ 147.682507][ T9018] CPU: 0 UID: 0 PID: 9018 Comm: syz.4.1891 Not tainted syzkaller #0 PREEMPT(voluntary) [ 147.682535][ T9018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 147.682610][ T9018] Call Trace: [ 147.682618][ T9018] [ 147.682627][ T9018] __dump_stack+0x1d/0x30 [ 147.682653][ T9018] dump_stack_lvl+0xe8/0x140 [ 147.682681][ T9018] dump_stack+0x15/0x1b [ 147.682761][ T9018] should_fail_ex+0x265/0x280 [ 147.682786][ T9018] should_failslab+0x8c/0xb0 [ 147.682811][ T9018] kmem_cache_alloc_noprof+0x50/0x310 [ 147.682845][ T9018] ? alloc_empty_file+0x76/0x200 [ 147.682901][ T9018] alloc_empty_file+0x76/0x200 [ 147.682938][ T9018] alloc_file_pseudo+0xc6/0x160 [ 147.682980][ T9018] sock_alloc_file+0x9c/0x1e0 [ 147.683042][ T9018] do_accept+0x1e4/0x3a0 [ 147.683072][ T9018] __sys_accept4+0xbf/0x140 [ 147.683101][ T9018] __x64_sys_accept+0x42/0x50 [ 147.683206][ T9018] x64_sys_call+0x212c/0x2ff0 [ 147.683291][ T9018] do_syscall_64+0xd2/0x200 [ 147.683346][ T9018] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 147.683377][ T9018] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 147.683416][ T9018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.683443][ T9018] RIP: 0033:0x7f58ab1eeba9 [ 147.683498][ T9018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.683520][ T9018] RSP: 002b:00007f58a9c4f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 147.683544][ T9018] RAX: ffffffffffffffda RBX: 00007f58ab435fa0 RCX: 00007f58ab1eeba9 [ 147.683572][ T9018] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 147.683588][ T9018] RBP: 00007f58a9c4f090 R08: 0000000000000000 R09: 0000000000000000 [ 147.683603][ T9018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.683619][ T9018] R13: 00007f58ab436038 R14: 00007f58ab435fa0 R15: 00007ffd179eaa68 [ 147.683642][ T9018] [ 147.875406][ T29] audit: type=1400 audit(147.608:9005): avc: denied { open } for pid=9010 comm="syz.2.1889" path="/dev/loop2p4" dev="devtmpfs" ino=1622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 147.948916][ T3484] udevd[3484]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 147.950724][ T3787] udevd[3787]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 148.064418][ T29] audit: type=1400 audit(148.028:9006): avc: denied { setattr } for pid=9035 comm="syz.0.1897" name="NETLINK" dev="sockfs" ino=24926 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 148.073374][ T3787] udevd[3787]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 148.100843][ T3484] udevd[3484]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 148.124001][ T9037] netlink: 'syz.4.1895': attribute type 4 has an invalid length. [ 148.132642][ T29] audit: type=1400 audit(148.108:9007): avc: denied { setopt } for pid=9035 comm="syz.0.1897" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 148.173330][ T29] audit: type=1400 audit(148.108:9008): avc: denied { read } for pid=9035 comm="syz.0.1897" path="socket:[24939]" dev="sockfs" ino=24939 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 148.281442][ T29] audit: type=1326 audit(148.258:9009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9046 comm="syz.4.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ab1eeba9 code=0x7ffc0000 [ 148.305226][ T29] audit: type=1326 audit(148.258:9010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9046 comm="syz.4.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ab1eeba9 code=0x7ffc0000 [ 148.328831][ T29] audit: type=1326 audit(148.258:9011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9046 comm="syz.4.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f58ab1eeba9 code=0x7ffc0000 [ 148.361747][ T29] audit: type=1326 audit(148.258:9012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9046 comm="syz.4.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ab1eeba9 code=0x7ffc0000 [ 148.385285][ T29] audit: type=1326 audit(148.258:9013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9046 comm="syz.4.1901" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58ab1eeba9 code=0x7ffc0000 [ 148.438829][ T9051] loop0: detected capacity change from 0 to 764 [ 148.475767][ T9051] rock: directory entry would overflow storage [ 148.481981][ T9051] rock: sig=0x4f50, size=4, remaining=3 [ 148.487641][ T9051] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 148.657779][ T9063] loop0: detected capacity change from 0 to 1024 [ 148.664717][ T9063] EXT4-fs: Ignoring removed nomblk_io_submit option [ 148.672149][ T9063] EXT4-fs: Ignoring removed nobh option [ 148.677814][ T9063] EXT4-fs: Ignoring removed bh option [ 148.683304][ T9063] EXT4-fs: Ignoring removed i_version option [ 148.709461][ T9063] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.831977][ T9063] 9pnet: Could not find request transport: f [ 148.844750][ T9077] can0: slcan on ttyS3. [ 148.899455][ T3304] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.980947][ T9079] can0 (unregistered): slcan off ttyS3. [ 148.987866][ T9090] __nla_validate_parse: 3 callbacks suppressed [ 148.987880][ T9090] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1914'. [ 149.014539][ T9090] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1914'. [ 149.047725][ T9095] loop2: detected capacity change from 0 to 512 [ 149.090061][ T9095] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 149.140057][ T9111] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1919'. [ 149.162171][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.173712][ T9111] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1919'. [ 149.198251][ T9111] netem: change failed [ 149.294188][ T9129] rdma_op ffff8881346bd580 conn xmit_rdma 0000000000000000 [ 149.431834][ T9146] loop6: detected capacity change from 0 to 764 [ 149.446278][ T9148] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1927'. [ 149.473458][ T9149] lo speed is unknown, defaulting to 1000 [ 149.484305][ T9146] rock: directory entry would overflow storage [ 149.490629][ T9146] rock: sig=0x4f50, size=4, remaining=3 [ 149.496255][ T9146] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 149.580890][ T9149] erspan0 speed is unknown, defaulting to 1000 [ 149.589593][ T9153] vhci_hcd: invalid port number 96 [ 149.594749][ T9153] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 149.695410][ T9149] loop4: detected capacity change from 0 to 1024 [ 149.708485][ T9153] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 149.741175][ T9149] EXT4-fs: Ignoring removed nobh option [ 149.838815][ T9163] netlink: 'syz.6.1934': attribute type 3 has an invalid length. [ 149.846642][ T9163] netlink: 'syz.6.1934': attribute type 3 has an invalid length. [ 149.871145][ T9149] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 149.916496][ T9149] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz.4.1930: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 149.937235][ T9169] loop6: detected capacity change from 0 to 764 [ 149.978648][ T9149] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1930: couldn't read orphan inode 11 (err -117) [ 149.994300][ T9169] rock: directory entry would overflow storage [ 150.001282][ T9169] rock: sig=0x4f50, size=4, remaining=3 [ 150.006949][ T9169] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 150.036794][ T9149] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 150.126330][ T9149] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 150.153949][ T9182] loop2: detected capacity change from 0 to 2048 [ 150.175328][ T9182] EXT4-fs: Ignoring removed mblk_io_submit option [ 150.225633][ T9182] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 150.313186][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 150.367688][ T9189] vhci_hcd: invalid port number 96 [ 150.372941][ T9189] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 150.412632][ T9194] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1945'. [ 150.428407][ T9189] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 150.483167][ T9194] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1945'. [ 150.505419][ T9194] netem: change failed [ 150.567654][ T3317] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 16: comm syz-executor: path /419/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0 [ 150.624120][ T3317] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11 [ 150.665116][ T3317] EXT4-fs error (device loop4): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11 [ 150.709949][ T9205] FAULT_INJECTION: forcing a failure. [ 150.709949][ T9205] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.723862][ T9205] CPU: 0 UID: 0 PID: 9205 Comm: syz.0.1950 Not tainted syzkaller #0 PREEMPT(voluntary) [ 150.723892][ T9205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 150.723907][ T9205] Call Trace: [ 150.723915][ T9205] [ 150.723923][ T9205] __dump_stack+0x1d/0x30 [ 150.724020][ T9205] dump_stack_lvl+0xe8/0x140 [ 150.724041][ T9205] dump_stack+0x15/0x1b [ 150.724059][ T9205] should_fail_ex+0x265/0x280 [ 150.724086][ T9205] should_fail+0xb/0x20 [ 150.724109][ T9205] should_fail_usercopy+0x1a/0x20 [ 150.724145][ T9205] _copy_from_iter+0xd2/0xe80 [ 150.724182][ T9205] ? __build_skb_around+0x1a0/0x200 [ 150.724209][ T9205] ? __alloc_skb+0x223/0x320 [ 150.724236][ T9205] netlink_sendmsg+0x471/0x6b0 [ 150.724272][ T9205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.724351][ T9205] __sock_sendmsg+0x145/0x180 [ 150.724387][ T9205] ____sys_sendmsg+0x31e/0x4e0 [ 150.724436][ T9205] ___sys_sendmsg+0x17b/0x1d0 [ 150.724481][ T9205] __x64_sys_sendmsg+0xd4/0x160 [ 150.724534][ T9205] x64_sys_call+0x191e/0x2ff0 [ 150.724560][ T9205] do_syscall_64+0xd2/0x200 [ 150.724626][ T9205] ? arch_exit_to_user_mode_prepare+0x27/0x80 [ 150.724654][ T9205] ? irqentry_exit_to_user_mode+0x7e/0xa0 [ 150.724765][ T9205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.724791][ T9205] RIP: 0033:0x7fe150ebeba9 [ 150.724809][ T9205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.724954][ T9205] RSP: 002b:00007fe14f927038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.724977][ T9205] RAX: ffffffffffffffda RBX: 00007fe151105fa0 RCX: 00007fe150ebeba9 [ 150.725027][ T9205] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 150.725106][ T9205] RBP: 00007fe14f927090 R08: 0000000000000000 R09: 0000000000000000 [ 150.725119][ T9205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.725133][ T9205] R13: 00007fe151106038 R14: 00007fe151105fa0 R15: 00007ffe23bcbfd8 [ 150.725156][ T9205] [ 150.937019][ T9155] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.172909][ T9216] rdma_rxe: rxe_newlink: failed to add erspan0 [ 151.270465][ T9223] loop2: detected capacity change from 0 to 764 [ 151.296956][ T9225] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1958'. [ 151.315573][ T9225] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1958'. [ 151.336565][ T9223] rock: directory entry would overflow storage [ 151.342915][ T9223] rock: sig=0x4f50, size=4, remaining=3 [ 151.348618][ T9223] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 151.356800][ T9225] netem: change failed [ 151.385012][ T9231] netlink: 'syz.6.1961': attribute type 4 has an invalid length. [ 151.537746][ T9232] lo speed is unknown, defaulting to 1000 [ 151.586548][ T9257] netlink: 'syz.6.1968': attribute type 3 has an invalid length. [ 151.606757][ T9257] netlink: 'syz.6.1968': attribute type 3 has an invalid length. [ 151.722695][ T9267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1971'. [ 151.780210][ T9267] loop0: detected capacity change from 0 to 128 [ 151.854687][ T9283] loop0: detected capacity change from 0 to 764 [ 151.861521][ T9285] netlink: 'syz.5.1973': attribute type 4 has an invalid length. [ 151.911945][ T9283] rock: directory entry would overflow storage [ 151.918324][ T9283] rock: sig=0x4f50, size=4, remaining=3 [ 151.924144][ T9283] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 151.965011][ T3433] bond0 (unregistering): Released all slaves [ 151.976989][ T3433] bond1 (unregistering): Released all slaves [ 151.986428][ T9232] erspan0 speed is unknown, defaulting to 1000 [ 152.226499][ T9306] lo speed is unknown, defaulting to 1000 [ 152.238206][ T9312] netlink: 'syz.5.1979': attribute type 3 has an invalid length. [ 152.246090][ T9312] netlink: 'syz.5.1979': attribute type 3 has an invalid length. [ 152.257958][ T9318] netlink: 'syz.2.1980': attribute type 3 has an invalid length. [ 152.268171][ T9318] netlink: 'syz.2.1980': attribute type 3 has an invalid length. [ 152.277986][ T3433] hsr_slave_0: left promiscuous mode [ 152.290680][ T3433] hsr_slave_1: left promiscuous mode [ 152.363323][ T9306] erspan0 speed is unknown, defaulting to 1000 [ 152.363466][ T9232] chnl_net:caif_netlink_parms(): no params data found [ 152.422024][ T9323] netem: change failed [ 152.487565][ T9329] vhci_hcd: invalid port number 96 [ 152.492754][ T9329] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 152.501220][ T9232] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.508414][ T9232] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.526024][ T9232] bridge_slave_0: entered allmulticast mode [ 152.533010][ T9232] bridge_slave_0: entered promiscuous mode [ 152.543841][ T9329] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 152.567632][ T9232] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.575664][ T9232] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.593268][ T9232] bridge_slave_1: entered allmulticast mode [ 152.607717][ T9232] bridge_slave_1: entered promiscuous mode [ 152.649192][ T9340] netlink: 'syz.5.1984': attribute type 3 has an invalid length. [ 152.662898][ T9347] rdma_rxe: rxe_newlink: failed to add erspan0 [ 152.669708][ T9340] netlink: 'syz.5.1984': attribute type 3 has an invalid length. [ 152.680107][ T9232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.692360][ T9345] pimreg: entered allmulticast mode [ 152.702486][ T9232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.712265][ T9345] pimreg: left allmulticast mode [ 152.735941][ T29] kauditd_printk_skb: 370 callbacks suppressed [ 152.735958][ T29] audit: type=1326 audit(152.718:9384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934a0ceba9 code=0x7ffc0000 [ 152.771360][ T29] audit: type=1326 audit(152.728:9385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f934a0ceba9 code=0x7ffc0000 [ 152.794989][ T29] audit: type=1326 audit(152.728:9386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934a0ceba9 code=0x7ffc0000 [ 152.818594][ T29] audit: type=1326 audit(152.728:9387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934a0ceba9 code=0x7ffc0000 [ 152.842178][ T29] audit: type=1326 audit(152.728:9388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f934a0ceba9 code=0x7ffc0000 [ 152.850958][ T9358] loop6: detected capacity change from 0 to 512 [ 152.865902][ T29] audit: type=1326 audit(152.728:9389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934a0ceba9 code=0x7ffc0000 [ 152.894849][ T29] audit: type=1326 audit(152.728:9390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f934a0ceba9 code=0x7ffc0000 [ 152.917675][ T29] audit: type=1326 audit(152.728:9391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934a0ceba9 code=0x7ffc0000 [ 152.918266][ T9358] EXT4-fs: Ignoring removed oldalloc option [ 152.941276][ T29] audit: type=1326 audit(152.728:9392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f934a0ceba9 code=0x7ffc0000 [ 152.970041][ T29] audit: type=1326 audit(152.728:9393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9354 comm="syz.5.1987" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934a0ceba9 code=0x7ffc0000 [ 152.982994][ T9358] EXT4-fs (loop6): 1 truncate cleaned up [ 152.999630][ T9358] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 153.013760][ T9232] team0: Port device team_slave_0 added [ 153.026424][ T9232] team0: Port device team_slave_1 added [ 153.079094][ T9232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.086876][ T9232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.112872][ T9232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.126623][ T9232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.133592][ T9232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.160525][ T9232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.577434][ T9375] netem: change failed [ 153.587681][ T9232] hsr_slave_0: entered promiscuous mode [ 153.594656][ T7295] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 153.628555][ T9232] hsr_slave_1: entered promiscuous mode [ 153.648952][ T9379] vhci_hcd: invalid port number 96 [ 153.654115][ T9379] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 153.701653][ T9232] debugfs: 'hsr0' already exists in 'hsr' [ 153.707472][ T9232] Cannot create hsr debugfs directory [ 153.752912][ T9384] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 153.997448][ T9390] loop6: detected capacity change from 0 to 764 [ 154.090639][ T9390] rock: directory entry would overflow storage [ 154.096895][ T9390] rock: sig=0x4f50, size=4, remaining=3 [ 154.102505][ T9390] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 154.251588][ T9406] loop2: detected capacity change from 0 to 512 [ 154.280999][ T9405] loop6: detected capacity change from 0 to 764 [ 154.311948][ T9406] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 154.355626][ T9405] rock: directory entry would overflow storage [ 154.361899][ T9405] rock: sig=0x4f50, size=4, remaining=3 [ 154.367792][ T9405] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 154.422615][ T9232] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 154.447187][ T9232] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 154.513057][ T9232] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 154.545537][ T9232] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 154.594549][ T9232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.610758][ T9232] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.621561][ T298] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.628812][ T298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.700063][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 154.717670][ T298] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.724797][ T298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.774253][ T9428] lo speed is unknown, defaulting to 1000 [ 154.808105][ T9431] loop0: detected capacity change from 0 to 2048 [ 154.857523][ T3787] Alternate GPT is invalid, using primary GPT. [ 154.863863][ T3787] loop0: p1 p2 p3 [ 154.867729][ T3787] loop0: partition table partially beyond EOD, truncated [ 154.881378][ T9232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.923173][ T9431] Alternate GPT is invalid, using primary GPT. [ 154.929559][ T9431] loop0: p1 p2 p3 [ 154.932771][ T9428] erspan0 speed is unknown, defaulting to 1000 [ 154.933289][ T9431] loop0: partition table partially beyond EOD, truncated [ 154.958694][ T9444] vhci_hcd: invalid port number 96 [ 154.963858][ T9444] vhci_hcd: default hub control req: 0300 vfffa i0060 l0 [ 154.977802][ T9444] sch_tbf: peakrate 64 is lower than or equals to rate 17038211371681383082 ! [ 155.034457][ T3295] udevd[3295]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory [ 155.039164][ T3787] udevd[3787]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 155.048082][ T3484] udevd[3484]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 155.183528][ T9458] loop2: detected capacity change from 0 to 512 [ 155.203762][ T9458] EXT4-fs: dax option not supported [ 155.235966][ T9458] loop2: detected capacity change from 0 to 512 [ 155.256315][ T9232] veth0_vlan: entered promiscuous mode [ 155.256850][ T9458] EXT4-fs: Ignoring removed orlov option [ 155.270447][ T9458] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 155.271556][ T9232] veth1_vlan: entered promiscuous mode [ 155.298842][ T9232] veth0_macvtap: entered promiscuous mode [ 155.301984][ T9458] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002] [ 155.307758][ T9232] veth1_macvtap: entered promiscuous mode [ 155.322462][ T9458] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.2008: corrupted in-inode xattr: e_value size too large [ 155.342249][ T9232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.354336][ T9232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.357334][ T9458] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2008: couldn't read orphan inode 15 (err -117) [ 155.377952][ T9458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.378864][ T37] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.428922][ T37] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.438704][ T37] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.449378][ T37] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.488667][ T9466] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 155.554162][ T9466] bond0: entered promiscuous mode [ 155.560108][ T9466] bond_slave_0: entered promiscuous mode [ 155.565883][ T9466] bond_slave_1: entered promiscuous mode [ 155.573853][ T9466] batadv0: entered promiscuous mode [ 155.581532][ T9466] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 155.820235][ T9484] loop0: detected capacity change from 0 to 764 [ 155.843637][ T9484] rock: directory entry would overflow storage [ 155.850052][ T9484] rock: sig=0x4f50, size=4, remaining=3 [ 155.855929][ T9484] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 156.103867][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.124219][ T9508] loop0: detected capacity change from 0 to 764 [ 156.158920][ T9508] rock: directory entry would overflow storage [ 156.165252][ T9508] rock: sig=0x4f50, size=4, remaining=3 [ 156.170954][ T9508] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 156.312628][ T9520] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 156.331970][ T9520] netlink: zone id is out of range [ 156.337183][ T9520] netlink: zone id is out of range [ 156.342336][ T9520] netlink: zone id is out of range [ 156.349254][ T9520] netlink: zone id is out of range [ 156.354448][ T9520] netlink: zone id is out of range [ 156.367285][ T9523] __nla_validate_parse: 2 callbacks suppressed [ 156.367299][ T9523] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2033'. [ 156.367787][ T9520] netlink: zone id is out of range [ 156.373607][ T9523] netem: change failed [ 156.491570][ T9531] rdma_rxe: rxe_newlink: failed to add erspan0 [ 156.596448][ T9537] loop6: detected capacity change from 0 to 764 [ 156.631207][ T9537] rock: directory entry would overflow storage [ 156.638237][ T9537] rock: sig=0x4f50, size=4, remaining=3 [ 156.644007][ T9537] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 156.766221][ T9547] loop0: detected capacity change from 0 to 512 [ 156.772697][ T9549] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2045'. [ 156.783375][ T9549] netem: change failed [ 156.911556][ T2994] ================================================================== [ 156.919703][ T2994] BUG: KCSAN: data-race in d_delete / step_into [ 156.925982][ T2994] [ 156.928314][ T2994] read-write to 0xffff88811a122180 of 4 bytes by task 3295 on cpu 0: [ 156.936378][ T2994] d_delete+0x15a/0x180 [ 156.940558][ T2994] d_delete_notify+0x32/0x100 [ 156.945266][ T2994] vfs_unlink+0x30b/0x420 [ 156.949623][ T2994] do_unlinkat+0x24e/0x480 [ 156.954058][ T2994] __x64_sys_unlink+0x2e/0x40 [ 156.958745][ T2994] x64_sys_call+0x2dc0/0x2ff0 [ 156.963465][ T2994] do_syscall_64+0xd2/0x200 [ 156.967995][ T2994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.973995][ T2994] [ 156.976321][ T2994] read to 0xffff88811a122180 of 4 bytes by task 2994 on cpu 1: [ 156.983893][ T2994] step_into+0xe3/0x820 [ 156.988067][ T2994] walk_component+0x162/0x220 [ 156.992775][ T2994] path_lookupat+0xfe/0x2a0 [ 156.997384][ T2994] filename_lookup+0x147/0x340 [ 157.002169][ T2994] do_readlinkat+0x7d/0x320 [ 157.006679][ T2994] __x64_sys_readlink+0x47/0x60 [ 157.011550][ T2994] x64_sys_call+0x28da/0x2ff0 [ 157.016411][ T2994] do_syscall_64+0xd2/0x200 [ 157.020935][ T2994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.026855][ T2994] [ 157.029181][ T2994] value changed: 0x00300180 -> 0x00004080 [ 157.034897][ T2994] [ 157.037311][ T2994] Reported by Kernel Concurrency Sanitizer on: [ 157.043591][ T2994] CPU: 1 UID: 0 PID: 2994 Comm: udevd Not tainted syzkaller #0 PREEMPT(voluntary) [ 157.052984][ T2994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 157.063050][ T2994] ================================================================== [ 157.079825][ T9562] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2050'. [ 157.092413][ T9565] validate_nla: 13 callbacks suppressed [ 157.092429][ T9565] netlink: 'syz.0.2052': attribute type 3 has an invalid length. [ 157.106565][ T9565] netlink: 'syz.0.2052': attribute type 3 has an invalid length.