last executing test programs: 3m10.637419124s ago: executing program 4 (id=1334): syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feba27d896201001800000000000000bd000000bd00000003000000060000000000000e01000000010000000000000000000009040000000a000000000000020100000100000000000000010000000604000000000000000800000007000000ff0f00000e00000002000006040000000c000000030000000b00000008000000000000000000000a05000000000000000200000d0000000006000000010000000400000003000000030000000200000f010000000100000006000000a400000004000000050000000e0000005e000000"], &(0x7f0000000040)=""/1, 0xdb, 0x1, 0x1, 0xffffffff}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r2}, 0x8) r3 = socket$key(0xf, 0x3, 0x2) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file1\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x1219, &(0x7f0000001100)="$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") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cpuacct.usage_percpu\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000400)="ba", 0xfdef}], 0x1, 0xe7b, 0x0, 0x1) statfs(&(0x7f0000000200)='.\x00', 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x108284, 0x0, 0xfffffffb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$key(r3, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) r7 = syz_io_uring_setup(0xd8, &(0x7f0000000000)={0x0, 0x0, 0x40}, &(0x7f0000000100), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r7, 0xb, &(0x7f00000001c0), 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) 3m9.65916738s ago: executing program 4 (id=1350): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r2, 0x0) write$selinux_load(r1, &(0x7f0000000000)=ANY=[], 0x2000) 3m9.381131065s ago: executing program 4 (id=1357): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) r2 = socket(0x1e, 0x4, 0x0) r3 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) 3m9.333274676s ago: executing program 4 (id=1359): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r0}, 0x18) r1 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) ptrace$pokeuser(0x6, r1, 0x358, 0x0) 3m9.227055847s ago: executing program 4 (id=1362): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='cgroup\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e24, 0x6, @rand_addr=' \x01\x00', 0x2}}, 0x5, 0x12, 0x40, 0x3}, 0x9c) r2 = syz_io_uring_setup(0x466c, &(0x7f0000000280)={0x0, 0x0, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x40, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x1, {0x3}}) io_uring_enter(r2, 0x92c, 0x59f0, 0x44, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r9, @ANYBLOB="080011"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) io_pgetevents(0x0, 0x5, 0x5, &(0x7f0000000180)=[{}, {}, {}, {}, {}], &(0x7f0000000000), &(0x7f0000000100)={&(0x7f0000000080)={[0x4]}, 0x8}) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x143900, 0x184) preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000480)=""/128, 0x80}], 0x1, 0x12e, 0x0) 3m9.016863341s ago: executing program 4 (id=1363): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000090000000000000000002300ee1c4e46968faf8144420000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x58, &(0x7f0000000080)}, 0x10) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='ns\x00') prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xc3ff, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848010000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4058880) getdents(r1, &(0x7f0000001f80)=""/4096, 0x1000) socket$unix(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000340)={[{@grpquota}, {@jqfmt_vfsold}, {@minixdf}], [{@audit}, {@appraise}, {@subj_type={'subj_type', 0x3d, 'grpquota'}}, {@subj_role={'subj_role', 0x3d, '\\-$\\-/'}}, {@fsname={'fsname', 0x3d, '\xfb:@'}}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x48) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000321b8ee000000c00000002000000030000000200008cf60d00000000"], 0x0, 0x26, 0x0, 0x4}, 0x28) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) 2m53.8124666s ago: executing program 32 (id=1363): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000090000000000000000002300ee1c4e46968faf8144420000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r0, 0x58, &(0x7f0000000080)}, 0x10) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r1 = syz_open_procfs(0x0, &(0x7f0000000440)='ns\x00') prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xc3ff, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848010000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x4058880) getdents(r1, &(0x7f0000001f80)=""/4096, 0x1000) socket$unix(0x1, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000340)={[{@grpquota}, {@jqfmt_vfsold}, {@minixdf}], [{@audit}, {@appraise}, {@subj_type={'subj_type', 0x3d, 'grpquota'}}, {@subj_role={'subj_role', 0x3d, '\\-$\\-/'}}, {@fsname={'fsname', 0x3d, '\xfb:@'}}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x48) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x10, &(0x7f0000000580)=ANY=[@ANYRES32=r2, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb0100180000000000321b8ee000000c00000002000000030000000200008cf60d00000000"], 0x0, 0x26, 0x0, 0x4}, 0x28) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x0) 6.293651326s ago: executing program 1 (id=4435): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0\x00', 0x1000000, &(0x7f0000000300)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2cb, &(0x7f0000000cc0)="$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") setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00'}, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001a80)="d8000000180081064e81f782db4cb904021d087cfd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) 6.184714868s ago: executing program 1 (id=4438): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110600", @ANYRES32=r4, @ANYRESDEC=r1], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) unshare(0x40000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe41f}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x20050800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000040), 0x208e24b) socket$inet6_sctp(0xa, 0x5, 0x84) 4.135365642s ago: executing program 1 (id=4462): socket$can_j1939(0x1d, 0x2, 0x7) socket$can_j1939(0x1d, 0x2, 0x7) socketpair(0x23, 0x800, 0x3, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x36, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x10000, 0x0, 0x1, 0x8, 0x20005, 0xb, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e20, 0x0, @loopback, 0x7}}, 0x0, 0x0, 0x47, 0x0, "09be2271b78506e6dd938d324c415acd403a4480fd1afa34432bcdfa64d957e93efafd27ad06a6f589bb643f167cf0fcd370239aaa93f6ded3c5032c96ead0cdc68474d402ab73e482db7ec1e0a57489"}, 0xd8) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000280)="d5", 0x1}], 0x1}}], 0x1, 0x20080058) 3.962973544s ago: executing program 1 (id=4464): getpid() syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={0x0, 0x20}}, 0x0) 3.708253149s ago: executing program 1 (id=4467): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110600", @ANYRES32=r4, @ANYRESDEC=r1], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) ioctl$AUTOFS_IOC_FAIL(r0, 0x4c80, 0xffffffffffffffb6) unshare(0x40000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x88, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xe41f}]}}}]}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x120}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x20050800) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000d80)={[{@mblk_io_submit}, {@dioread_nolock}, {@bh}, {@errors_continue}, {@nouid32}, {@quota}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b70200"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r8, 0xc0105512, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f0000000040), 0x208e24b) socket$inet6_sctp(0xa, 0x5, 0x84) 3.416631274s ago: executing program 0 (id=4470): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001800", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000040)='./file0\x00', 0x4002, &(0x7f0000000140)=ANY=[@ANYBLOB='map=off,cruft,iocharset=ascii,block=0x0000000000000200,unhide,session=0x0000000000000011,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c004238994fceef7f633ea81416b1324d35327f7ace27c590b7f9fb133af0ffd6dfc4d893195864142b1450fbace6795f6e181993255fbbca2cb54fcf79cc53b3a6c3704aed82da89741aad5205bb43ded29cfd65509ff9c85cbdb7337ef48b9412ff439da96bb3f5ac11273d94d3d75d"], 0x1, 0xa2f, &(0x7f0000001580)="$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") execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{0x1}, &(0x7f00000008c0), &(0x7f0000000900)='%pK \x00'}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x9, &(0x7f0000000380)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0x6}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @ldst={0x3, 0x0, 0x2, 0x8, 0x0, 0x100, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000680)='syzkaller\x00', 0x2, 0x33, &(0x7f00000006c0)=""/51, 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0xd, 0x6f4c, 0x101}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, 0x0, 0x275a, 0x0) preadv(r5, &(0x7f0000000140)=[{&(0x7f00000000c0)=""/56, 0x38}], 0x1, 0x8, 0x0) syz_clone3(&(0x7f0000000480)={0x22044000, &(0x7f0000000400), &(0x7f0000000180), &(0x7f0000000300), {0x8}, &(0x7f0000000540)=""/169, 0xa9, &(0x7f0000000400), &(0x7f0000000440)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r7}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r8, 0xf2ffffffffffffff}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xa, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000380)={'ip6tnl0\x00'}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0xfd, 0x0, 0x0, 0x2, 0x88094, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={&(0x7f0000000400), 0x8}, 0x100000, 0xa, 0x0, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0x3) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x9, 0x3, 0x1c0, 0x90, 0xffffffff, 0xffffffff, 0x90, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x220) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00'}, 0x18) 2.507445828s ago: executing program 0 (id=4476): connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0xd9, @empty, 0xff}, 0x1c) socket$packet(0x11, 0x3, 0x300) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) openat(0xffffffffffffff9c, 0x0, 0x0, 0x28) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000380)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r3, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000440)) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0xfc}}, 0x0) 2.367772631s ago: executing program 3 (id=4480): r0 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r0, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) setsockopt$inet6_int(r1, 0x29, 0x16, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='kfree\x00', r2, 0x0, 0x2}, 0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r4, {0x10, 0x4}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2.310437962s ago: executing program 3 (id=4481): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080000000180"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x18) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f00000003c0), 0xfc, 0x53e, &(0x7f0000000940)="$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") 1.947058097s ago: executing program 3 (id=4483): r0 = socket(0x10, 0x3, 0x0) connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r2, 0x2000012, 0x90, 0x0, &(0x7f0000000800)="d645bf98f006312b3051d1c80dee55b4a449a807d224033adc5c569a606326de6cb497829c677c14c1b2bd179cbd44e4c7c25483373d39200f893ba9fd0c5a310e16bed21e7f51080d5260cb44291b1db32e01b368ad9c6b3e891321d954bdc2fbdb7e6733041adeb23f7bb3771b5289c11e71", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x18, 0x0, 0x309, 0x42, 0x0, {0x1d}, [@HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000004) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fedbdf2512010000080009008b6cff000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$P9_RLERRORu(r7, &(0x7f00000004c0)=ANY=[@ANYBLOB="2d00000007020015002f6465762f6275732f7573622f3030232f303023007f0000002a3e08378d131f0db37c101686cf086af0a794b0a1b6bb1ad093eb49a10ce26ef0fd2351bcf32713ae5d7433aa769ecb688ae75e55814a4bdd2032319978cdc041909f63b00a67f77afb1884efc95729b26148251dd29ed91aa102916b63e53e185c10d1dcf3efb746aa9edfd7c52d98e51ddd481038e5ffd8f8e940dafcc94194c2ea340f0775271e6687523f7ec8f0e26536ded2e329000000"], 0x22) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x10, &(0x7f00000004c0)=ANY=[], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r8}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r9 = perf_event_open(&(0x7f0000000000)={0x8, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r9) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r7}, 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = epoll_create1(0x80000) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r12, 0x0, 0x4}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000280)={0x8}) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r9, 0x40042409, 0x1) 1.765136s ago: executing program 3 (id=4484): socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454da, &(0x7f00000001c0)={'bond_slave_0\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x109200, 0x0) ioctl$TUNSETIFF(r2, 0x400454da, &(0x7f0000000140)={'bond0\x00'}) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @mcast1, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "30b00afe4e70"}}}}}}}, 0x0) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}, 0x401}, {{0x0, 0x0, 0x0}, 0x400}], 0x2, 0x1, 0x0) 1.529819914s ago: executing program 0 (id=4485): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0\x00', 0x1000000, &(0x7f0000000300)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2cb, &(0x7f0000000cc0)="$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") setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x894) 1.518279205s ago: executing program 2 (id=4486): getpid() syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000007c0)=ANY=[], 0x20}}, 0x0) 1.481646115s ago: executing program 5 (id=4487): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000001800", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000030000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$iso9660(&(0x7f0000000b00), &(0x7f0000000040)='./file0\x00', 0x4002, &(0x7f0000000140)=ANY=[@ANYBLOB='map=off,cruft,iocharset=ascii,block=0x0000000000000200,unhide,session=0x0000000000000011,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c004238994fceef7f633ea81416b1324d35327f7ace27c590b7f9fb133af0ffd6dfc4d893195864142b1450fbace6795f6e181993255fbbca2cb54fcf79cc53b3a6c3704aed82da89741aad5205bb43ded29cfd65509ff9c85cbdb7337ef48b9412ff439da96bb3f5ac11273d94d3d75d"], 0x1, 0xa2f, &(0x7f0000001580)="$eJzs3ctvXNd9B/DvHfEl2lBlW3VVwbZGMmTTNkuRVC1B8KKWyKFEl4+WpAALbWEZllQIIurCbgHb6EIFiq5q1CiKAk02gZdZGXAW8SbQLlkFWWURIPF/EBhZKQGCCebOUOJjZihSFKnIn89gNPfxO+f87tw792iGM/eEP2b1er28b3P+0vd3M1kePecnv/78i08b93+/lb7sy+vFD5OBJNWk5/flsdI7MbkwP7tJRTeTK0luJ0WS/jQfO9i/Zu5Kiv/Ok/fmb6f4bg63KTawxY1jU3W+1fb6+AMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEfSxOTo6FiRmem5S29XOyuHAO+yfqW6r8pRv4uvVjfR16bZIika9wwMrAz1ffjQvdXPNv45nueac881R/4eyCdPPHvwjWd6KivluyS0Kz78+JOb7y4vX/vg3qLeTQv1P9yctqVve8Uu1OamF+enZ89dqFWnF+erZ0+fHj15cWqxOjWd2uLlxaXabHVioXZuaX6hOjTxSnXs7NlT1drI5flLcxcmR2ZqKwvP/MX46Ojp6lsjf1M7t7A4P3fyrZHFiYvTMzPTcxfKmMbqRsyZxoH419NL1aXaudlq9fqN5WunNkuyETTWdk1R3ZdVQeOb1TQ+Oj4+NjY+Pnb69bOvnxkd7dmwYHSdbIjY+4OWvfODh3IOh22qtPr/zGQ6c7mUt1Nte5vIZBYyn9kO61tW+v8TJ2td213d/6/08ofvrT6Ssv9/oTn3Qqf+v0Mum9/q9WbN2y2/cvswH+eT3My7Wc5yruWDB66xP+sy++2D1ti6VR98azfeLqSWuUxnMfOZzmzOlUuqrSXVnM3pnM5o3snFTGUx1UxlOjOpZTGXs5il1MojaiILqeVcljKfhVQzlIm8kmrGcjZncyrV1DKSy5nPpczlQiZzrqzlem6Uz/upLjneDRq7n6DxLkE73P/XH8X/CfKw7ej5Gx5EvdX/t3uP3gyor0wNTexaVgAAAMBO+vOf5MChp3/8y6Q3z5efy09Nz9RG9zotAAAAYAeVX9d7rvHQ25h6PoX3/wAAAPC4Kcrf2BVJBnO0OdX8JdS++BAAAAAAHhPl3/9faDwMNqaOprh7JZQre50bAAAAsDPuXmM/na6xu+lV+Ivhlcv/Vq82H6+2IlrX+R2cmp6pjUzMz7wxlpfKqwyUvzTYUNu+pOgtf37wao41o44NNh8H19Y40IgaG3ljLK/meGtDhl5sPLw41CZyvBn5cjPy5S6RpxqRAPC4O96lP77f/v/VDDcjho/09CXpOdKmZx3VswLAo2LzMXY2jSj+8t77/95WtWv6/6dz/WjzKwUjeS/vZzlXM1z+2qD8xsGaWv/+s9ZnBne/hjCa4U0+DViJ/dmZSoY7fB7Ql/X1jmd4k08EmrH5h+TUw98RALCLjnfoh7fS/w+vev+fje//7w4tdM1PCgHgkXB3BPuHOLHX2wgArKWXBgAAAAAAAAAAAAAAAAAAAAAAAAAAgJ23o1f7H9hm8V+1xvV7uMMQbJjY33oOtl/P/yTZvZyLRlv9O1dhZQfqqSfZrf21exM5mGz7WW17GPcl2fvt2srEXp6VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2C1Fsq/d8krSn2Q0ycndz2r7isYWdXFr1zLZbT/92w4r/mr1THEnd/JRDuxOTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3x6t6/9X0nx8orkoPZXkRJIrSf5ur3PcSXf2OoEdsn+b5VZd/7+xz1Mv0tPc7Sl6JyYX5mfL8RP6G+u//vyLTxv3VcX777edMrCybnCJVgvrY7/35MrUU2WpwclrH978l/f/uTp5PpX05fzS1Mzk7IWFN+8Vebb4MqmmeV+xku+/nfjRZ222/MvGlra3vt2p8smZ3Njun7Ur3b3dbm4sXxtvtLRUe3vpX//pxkerVj2dY8mLQ8nQ2pb+sXHv0NKx9HZrrfim+M/iQP4vV8r933g2inrR2EV/Um7//us3lq+NvPf+8tUOOR3M0SRXk4H7z+lo5wE5yqOu0ttodbQMavxzqF193cf0aFvjWIdteKo8ZAZb29B3X9tQ3SSBVc97pd36ZkanOmT0TF5qs6fr/UnnjF7qvqfbK74pflFczM/zH6vG/6g09v+JdH51rq2ijFx1pHSMrDQjyy0fX73infWRv/7/+8q+7TA1bNV/rXnxVlad/1v7aofOR/Wi6/loVYtbe12sa3HdUdHldVH2SIfWlWidfTqVaeV5qBnVIc8/zWtJz5FuZ8UNvfVrm53SVsq/2X71dl//3ymG8pvcMv4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw6CuSfe2WV5ITSQ6uzFeT+haq7e+0ojJYbDXFHXXr7j+PhcpWCxR3cicf5cDDSQcAAAAAAACA3XZ+8uvPv/i0cS//Hr/vTr3e+vt+NelJcrD43/2ZXJif3aSi3uRKktuN6YFOQb+rN61d2iiXJ+/N327MHW5bwcH73S4AoLM/BAAA///r9m7p") execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{0x1}, &(0x7f00000008c0), &(0x7f0000000900)='%pK \x00'}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x9, &(0x7f0000000380)=@raw=[@map_idx={0x18, 0x2, 0x5, 0x0, 0x6}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @ldst={0x3, 0x0, 0x2, 0x8, 0x0, 0x100, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe}], &(0x7f0000000680)='syzkaller\x00', 0x2, 0x33, &(0x7f00000006c0)=""/51, 0x41100, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x9, 0x3}, 0x8, 0x10, &(0x7f0000000740)={0x0, 0xd, 0x6f4c, 0x101}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x18) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80800) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) preadv(r5, 0x0, 0x0, 0x8, 0x0) syz_clone3(&(0x7f0000000480)={0x22044000, &(0x7f0000000400), &(0x7f0000000180), &(0x7f0000000300), {0x8}, &(0x7f0000000540)=""/169, 0xa9, &(0x7f0000000400), &(0x7f0000000440)=[0xffffffffffffffff, 0x0], 0x2, {r5}}, 0x58) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r7}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r8, 0xf2ffffffffffffff}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xa, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000380)={'ip6tnl0\x00'}) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xb, 0x2, 0xfd, 0x0, 0x0, 0x2, 0x88094, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, @perf_bp={&(0x7f0000000400), 0x8}, 0x100000, 0xa, 0x0, 0x4}, 0x0, 0xa, 0xffffffffffffffff, 0x3) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0xb, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x9, 0x3, 0x1c0, 0x90, 0xffffffff, 0xffffffff, 0x90, 0xffffffff, 0x150, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffd}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x220) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000340)='kfree\x00'}, 0x18) 1.411820157s ago: executing program 0 (id=4488): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1d, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r0}, 0x18) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x7a, 0x0, 0x0, 0x41000, 0x38, '\x00', 0x0, @lirc_mode2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xd85}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_setup(0x8, &(0x7f0000000600)=0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r3, 0x1, &(0x7f0000000080)=[0x0]) write$binfmt_aout(r1, &(0x7f00000000c0)=ANY=[], 0x20) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) syz_clone(0x630c1100, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x800400, &(0x7f0000000040), 0xfe, 0x45d, &(0x7f0000001480)="$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") ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000b00)=ANY=[@ANYBLOB="000000004c9002000000000003000100000000000000000000000000000000000000000000f00000000000000400000000000000000000000000000000faff00ffffffff0200000000000000000000000d00000b0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffff0000000002000000000200000400000000000000f9ffffffffffffff000000000000000000000000000000000000000002080000876f4c0155a8da0f990af94777435b4486dd39912bd23e01df94e0d92f842e22a1cdd6fc6e72d2574b33cd22190000000000000000"]) syz_emit_ethernet(0x56, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbb3bbbaaaaaaaaaaaa86dd60f4adf700202c00fe80000000000000f2ff000000000000ff0200000000000000000000000000013c000000000000000502"], 0x0) perf_event_open(&(0x7f0000000180)={0x8, 0x80, 0x0, 0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000080), 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x804000, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$getregset(0x4205, r5, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 1.411402907s ago: executing program 2 (id=4489): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000100)='./file0/file1\x00') 1.370020557s ago: executing program 2 (id=4490): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x100, 0x10020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xb, 0xb76e}, 0x100002, 0x0, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000000000000"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x18) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111500008000000060000000000000095"], 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) syz_io_uring_setup(0x24fa, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000400)='kmem_cache_free\x00', r3}, 0x10) open_tree(0xffffffffffffffff, &(0x7f00000009c0)='./file0/file0\x00', 0x1) 1.339816918s ago: executing program 5 (id=4491): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r3], 0x54}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x48010, 0x602a1}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.245175299s ago: executing program 2 (id=4492): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x7}, 0x0, 0x10000, 0x547a, 0x1, 0xa, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0x1, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00'}, 0x80) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000002c0)="e203d9655829dfacef50e723cd6dfb218a3b7d7fafa037c26cbe3aa5aa341fa6af98ee6765c76505552466e81f56fbb1b034128d801e6b52cd60376024ce64cc8fad33f4173123706c481bb1a108170cbced557ecb8f385ab219ed7527707473a4638e4e2b81c5231bb85fbd1fecb4cf3e27958d76680ea13e925dc0a0bf77f3eebb1d991c6ca8c27e4c3e8fb67aa6ef6554603bb00b62aebc85c193413e82929d1bfe1357030991212e7127e2ae8b3ca50268e9f2c5f74930b461493acc93609f2c65c258362e0609146ffcadb9e35e874ec64ca44ac2"}, 0x20) close_range(r2, 0xffffffffffffffff, 0x0) 1.241900609s ago: executing program 5 (id=4493): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 1.20151434s ago: executing program 5 (id=4494): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0xf6d3ce10e3fd626b, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x41, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000003380)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000006cfa000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r6, 0x0, 0xfffffffffffffffe}, 0x18) add_key(&(0x7f0000000340)='logon\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r8}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, 0x0, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x43}}, 0x0) 939.263164ms ago: executing program 3 (id=4495): connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0xd9, @empty, 0xff}, 0x1c) socket$packet(0x11, 0x3, 0x300) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) openat(0xffffffffffffff9c, 0x0, 0x0, 0x28) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000380)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0500000004000000990000000b"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xd, 0x4, 0x4, 0xffffffff, 0x0, r3, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x50) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000000440)) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000)=0x2000000, 0x300) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000005c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0xfc}}, 0x0) 689.061458ms ago: executing program 0 (id=4496): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000f0ffffff7a0af0ff0020000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26ffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f37f3e2c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c1f860d050d694cc7806d294d3665016a7b29da0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d40887c58559b7dcb98a6273b8c651e57f727041c62cea5b7bd24d9f679e4fbe948dfb4cc4a389469608241630459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b83720eca291963eb2d537d8ee4de5c183c960119451c31539b22809e1d7f0cda06a9fa87d64cb89872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebed161980f2fde4f9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da202274f20675eb781925441578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc3600040543a34b195c6a8fc054282cd41b264906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b7e508e4bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d7fcd116bce9c764c714c9402c21d181aac59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af41000000000000007f5ab0d534b8d63e4ca3be71f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af0be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733097f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8a6c769f952283a1f4e3842edb3d42c0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99e85b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5359dbdfbf31a562395020becaf3fd1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4b28288e78980c1184d8223edbc4bf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847a11921f97eba0ea14c4fed9a71eedb97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ca2a4583f3d40e817433d0f4f25cfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b5524642c248aa813edaa626f0000000000000000000000000000000003ba5bac34b611569a451564d3a5400f9097ffe7a37e765bc652be71ee24250d6d9cf19878dd62c53062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89ad07963acbd4dd4dc5b4552591edde7a22ad06f7567e6fec2f65011b579bf609d61a3ff4d6f490824bb035995449fc34106ae6889f036d67b6aaee784f855ebc746ac871b5d2031ac0a252ac1f86e93e245f3793cea80b6de773899d49d11d3b1ed79163b111c976cf840a2ef6214a43338fba8c9edb6be26e68fcc5d47ed74a66ce8aba726ab955b9b32ab1890e84a5e2d7476252af25e5c95c5a8b2b1b5c8a2645b017d23c0f169d6ab529cc889bb07889d9e155114cf3e26a50c527ec6d4021cd2cacfea6d7e41e39e26b3967cad65c648b170f12ea9cc69dcee64be0c27b1f4f7f5ce3e62c35602c9d2921326891901661c85b9ee4a0a0b9636bef4c23788494f094abb91ed813b42828aa93105896e0aee851a8087e169a1d69e841257d9053d0cdc3a6ac4f12084cc6470abebe8b344b1f56690a2687b428686c854c21831da277e8b8a21b7b91a46d22ba083eca7b1f8268048cde7d6f237dca42035881b29ca9c8c2937971821b613894297ff6f7796053a4de1fd77e180cc22b205d43bb4a1b59962c1f605ea1b74587100e8d579f157cb45561c357f9976cec6a43388b3049a0d9c171ff6145266ba119d00000000001ef3794a930eb12f3a6215c510bf0bca70c127e9c70cc7bef921249a7f18a0034ce3264a9e96656b47233e2ed7c76520e649c3fd550bdafd77c5cd72b4446d3e157ddd97e7622a6891fb739acd3b2cdaf65ac78490f0641be6e8c6f55bf3d228786895ff5fd5970faacd8a5025aca0aa1931f477ba06aa60051298c8bf7f3b399194f98dc3f4e8513ad06da09dc393c1284515986b8c70ac69512f6c0c04f42edb3a097a11f2ab480e3e391abffae097752300576337c6dd24c4a98280684aa1fe8c7b43ee8bce05fe979b34da18cdb44dbb030b8009cd3b3b44fd8e7b534acd3f1839cb54817668ab446d3d47848429ea831a57f26c8b05dedddceb24483f8f998b05c3ddf85c3799c9000000000000000000000000001e57cf839eb3150d6a076fb7b86fae98dbb46014f483aecb4ec4f0877371bcae8912c78aff857c669760f0e55041563c5c3e8ee4a0eef885fd43fe34a1febc82370d1d07fdfe705ada4764320889000000000000000000000000000000a790af4fc17872b55b10db99e212d18193235659df45627da300959eafc8bfb44f70d250f8f2e86532700254c9a8b14999f59c8b9034c4bb2448eaeff5db21d4a7f3d974790d4c3cba7c402f50585b9289d86400679e5c2bcacb2841ca074d51fdb4a29e84d72b6c996cfbee06aa52cd632e82ba068e8e1572ef2eb414ba5fccfc3c03e64df6a9cc3936c604aa2c0e2ec7b777475023f29b146af003472ce146a5ff997ba53c51026c0096154f9280a34bbf21d66f57a250b5397766122fc86950ce5252e96868cd04df54764cf2082153d6cedd8aaf9700c734aa4a1cb33a2e0a13c5687be4de327511bff9816d13c3219dac1c1535f10243db6f96960ea6a621f5e1b7babbedf0a6bf0cf74123d2e78d01be2b048883a2459eec630fb0293d28d9799fd3a792caff693fd9f002f14c43fb5a1051cc686b7f114d7927eed559bdf2e8ddea3e61d5d942b63fe90230b2e1948fc563ef94d437281671d2fe5032d2a091fa842b0af2e116ba"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040), 0x10}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000440)="5cdd30", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7737, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 490.848472ms ago: executing program 0 (id=4497): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000500)={0x0, 0x1, 0x8, 0x0, 0x4401}, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x26, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x1}) fcntl$lock(r4, 0x25, &(0x7f00000000c0)={0x2, 0x0, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@fallback=r6, r6, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000300)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@cgroup=r6, r7, 0x2f, 0x2020, 0x4, @void, @void, @value=r8}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x1a, 0x2024, 0x0, @void, @void, @value=r8}, 0x20) r9 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'team_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r10, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@ifindex=r10, r5, 0xb, 0x2000}, 0x20) 422.240223ms ago: executing program 2 (id=4498): prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0\x00', 0x1000000, &(0x7f0000000300)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2cb, &(0x7f0000000cc0)="$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") setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$kcm(r0, 0x0, 0x894) 305.150075ms ago: executing program 2 (id=4499): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x7, 0x8, 0x5, 0x7, 0x0, 0x5, 0x4001, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x40001, 0x2, @perf_config_ext={0x7fff, 0x1}, 0x100997, 0x7ff, 0x7, 0x6, 0x800084, 0x2, 0x5, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12011, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket(0x40000000015, 0x805, 0x0) getsockopt(r1, 0x114, 0x271b, 0x0, &(0x7f00000000c0)) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x18) r3 = syz_io_uring_setup(0x4b5, &(0x7f0000010400)={0x0, 0x86e1, 0x4000, 0x8, 0x3bc}, &(0x7f0000010080), &(0x7f0000000200)) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x862b01) r5 = syz_open_dev$evdev(&(0x7f0000000280), 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) read$hiddev(r5, &(0x7f0000002300)=""/102, 0x66) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) 206.994256ms ago: executing program 5 (id=4500): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x3}, 0x18) symlinkat(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') unlink(&(0x7f0000000100)='./file0/file1\x00') 169.071357ms ago: executing program 5 (id=4501): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0xf6d3ce10e3fd626b, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x41, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b000000000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r5, 0x0, 0xfffffffffffffffe}, 0x18) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/14, @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r8}, 0x18) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0x48, 0x30, 0x3f, 0x0, 0x0, {}, [{0x34, 0x1, [@m_pedit={0x30, 0x1, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000ef0000000000000008000100e000000108000300"], 0x34}}, 0x400c840) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="796100000000000000007e00000008000300", @ANYRES32=0x0, @ANYBLOB="bad47bc51507f9102ce4a823d6bbc0faa694cc27e5b5fcfe9992231dfa8a79b52ecde9b412469541ed261bfdde16bcb44fbce1cd9f0a5cf281908da64ae179cc0e86211af92aedd86993e5fb34b3fe0da59b8ea2c69c830bb85fd10a945253b2a8adbe952cc48819f3252559"], 0x1c}}, 0x4000054) r11 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x40, r11, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x43}}, 0x0) 82.379808ms ago: executing program 3 (id=4502): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x38, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_bp={0x0, 0x7}, 0x0, 0x10000, 0x547a, 0x1, 0xa, 0x20005, 0x2b, 0x0, 0x0, 0x0, 0xffffffffffffff7f}, 0x0, 0x1, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='syzkaller\x00'}, 0x80) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000000, &(0x7f00000006c0), 0x1, 0x512, &(0x7f0000000c40)="$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") open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x2}]}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f00000002c0)="e203d9655829dfacef50e723cd6dfb218a3b7d7fafa037c26cbe3aa5aa341fa6af98ee6765c76505552466e81f56fbb1b034128d801e6b52cd60376024ce64cc8fad33f4173123706c481bb1a108170cbced557ecb8f385ab219ed7527707473a4638e4e2b81c5231bb85fbd1fecb4cf3e27958d76680ea13e925dc0a0bf77f3eebb1d991c6ca8c27e4c3e8fb67aa6ef6554603bb00b62aebc85c193413e82929d1bfe1357030991212e7127e2ae8b3ca50268e9f2c5f74930b461493acc93609f2c65c258362e0609146ffcadb9e35e874ec64ca44ac2"}, 0x20) close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 1 (id=4503): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r3], 0x54}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, 0x48010, 0x602a1}}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): inode #15: comm syz.3.3826: casefold flag without casefold feature [ 375.142828][T16967] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3826: couldn't read orphan inode 15 (err -117) [ 375.233675][T16990] loop2: detected capacity change from 0 to 128 [ 375.247501][T16990] syz.2.3829: attempt to access beyond end of device [ 375.247501][T16990] loop2: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 375.266345][T16990] netlink: 'syz.2.3829': attribute type 10 has an invalid length. [ 375.323471][T17006] pim6reg: entered allmulticast mode [ 375.387758][T17016] pim6reg: left allmulticast mode [ 375.868174][T17072] lo speed is unknown, defaulting to 1000 [ 375.965745][T17072] loop1: detected capacity change from 0 to 512 [ 375.974709][T17072] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3836: bg 0: block 16: invalid block bitmap [ 375.990453][T17072] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 376.006109][T17072] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.3836: invalid indirect mapped block 5 (level 0) [ 376.020128][T17072] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.3836: invalid indirect mapped block 4294967295 (level 1) [ 376.034415][T17072] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.3836: invalid indirect mapped block 4294967295 (level 2) [ 376.048750][T17072] EXT4-fs (loop1): 1 truncate cleaned up [ 376.123652][T17079] lo speed is unknown, defaulting to 1000 [ 376.223859][T17079] loop0: detected capacity change from 0 to 512 [ 376.230945][T17079] EXT4-fs: Ignoring removed mblk_io_submit option [ 376.237508][T17079] EXT4-fs: Ignoring removed bh option [ 376.244000][T17079] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 376.278032][T17079] EXT4-fs (loop0): 1 truncate cleaned up [ 376.440442][ T29] kauditd_printk_skb: 91 callbacks suppressed [ 376.440460][ T29] audit: type=1326 audit(1753668355.792:6907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17088 comm="syz.2.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936dd3e9a9 code=0x7ffc0000 [ 376.486400][T17090] loop2: detected capacity change from 0 to 128 [ 376.543815][T17090] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 376.549633][T17090] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 376.599318][T17094] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 376.622684][T17090] netlink: 'syz.2.3842': attribute type 6 has an invalid length. [ 376.632267][ T29] audit: type=1326 audit(1753668355.832:6908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17088 comm="syz.2.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936dd3e9a9 code=0x7ffc0000 [ 376.632306][ T29] audit: type=1326 audit(1753668355.832:6909): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17088 comm="syz.2.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f936dd3e9a9 code=0x7ffc0000 [ 376.632340][ T29] audit: type=1326 audit(1753668355.832:6910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17088 comm="syz.2.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936dd3e9a9 code=0x7ffc0000 [ 376.632433][ T29] audit: type=1326 audit(1753668355.832:6911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17088 comm="syz.2.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936dd3e9a9 code=0x7ffc0000 [ 376.632465][ T29] audit: type=1326 audit(1753668355.832:6912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17088 comm="syz.2.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f936dd3e9a9 code=0x7ffc0000 [ 376.632632][ T29] audit: type=1326 audit(1753668355.832:6913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17088 comm="syz.2.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f936dd3e9e3 code=0x7ffc0000 [ 376.632694][ T29] audit: type=1326 audit(1753668355.832:6914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17088 comm="syz.2.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f936dd3d45f code=0x7ffc0000 [ 376.632827][ T29] audit: type=1326 audit(1753668355.842:6915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17088 comm="syz.2.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f936dd3ea37 code=0x7ffc0000 [ 376.632869][ T29] audit: type=1326 audit(1753668355.842:6916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17088 comm="syz.2.3842" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f936dd3d310 code=0x7ffc0000 [ 376.647964][T17090] IPVS: stopping master sync thread 17094 ... [ 376.774269][T17099] loop1: detected capacity change from 0 to 512 [ 376.804781][T17097] loop3: detected capacity change from 0 to 1024 [ 376.805300][T17097] EXT4-fs: Ignoring removed nobh option [ 376.805336][T17097] EXT4-fs: Ignoring removed bh option [ 376.808429][T17099] EXT4-fs (loop1): too many log groups per flexible block group [ 376.808671][T17099] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 376.808750][T17099] EXT4-fs (loop1): mount failed [ 376.874809][T17097] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 376.874809][T17097] program syz.3.3845 not setting count and/or reply_len properly [ 376.920624][T17108] __nla_validate_parse: 4 callbacks suppressed [ 376.920641][T17108] netlink: 25 bytes leftover after parsing attributes in process `syz.1.3848'. [ 377.183233][T17114] loop1: detected capacity change from 0 to 1764 [ 377.207362][T17114] siw: device registration error -23 [ 377.351136][T17120] loop3: detected capacity change from 0 to 512 [ 377.380603][T17120] EXT4-fs (loop3): 1 orphan inode deleted [ 377.381368][T17120] ext4 filesystem being mounted at /228/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 377.403564][T17126] loop2: detected capacity change from 0 to 164 [ 377.502842][T17126] 9pnet: Could not find request transport: 0xffffffffffffffff [ 377.730937][T17135] lo speed is unknown, defaulting to 1000 [ 377.765583][T17138] loop2: detected capacity change from 0 to 512 [ 377.772715][T17138] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.3858: bg 0: block 16: invalid block bitmap [ 377.772989][T17138] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 377.773220][T17138] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3858: invalid indirect mapped block 5 (level 0) [ 377.773365][T17138] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3858: invalid indirect mapped block 4294967295 (level 1) [ 377.773496][T17138] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3858: invalid indirect mapped block 4294967295 (level 2) [ 377.773813][T17138] EXT4-fs (loop2): 1 truncate cleaned up [ 377.869322][T17143] netlink: 25 bytes leftover after parsing attributes in process `syz.0.3860'. [ 377.912915][T17145] loop0: detected capacity change from 0 to 164 [ 378.012441][T17150] loop5: detected capacity change from 0 to 512 [ 378.030476][T17150] EXT4-fs (loop5): 1 orphan inode deleted [ 378.053075][T17150] ext4 filesystem being mounted at /419/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 378.064350][ T8762] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:48: Failed to release dquot type 1 [ 378.089523][T17150] random: crng reseeded on system resumption [ 378.132467][T17160] loop2: detected capacity change from 0 to 128 [ 378.152427][T17160] ext4: Unknown parameter 'permit_directio' [ 378.209030][T17165] lo speed is unknown, defaulting to 1000 [ 378.211570][T17171] netlink: 25 bytes leftover after parsing attributes in process `syz.1.3871'. [ 378.222935][T17169] loop2: detected capacity change from 0 to 512 [ 378.231277][T17169] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 378.257057][T17173] loop0: detected capacity change from 0 to 512 [ 378.272749][T17169] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.3870: casefold flag without casefold feature [ 378.357167][T17180] loop1: detected capacity change from 0 to 2048 [ 378.365289][T17169] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.3870: couldn't read orphan inode 15 (err -117) [ 378.380845][T17169] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3870'. [ 378.418722][T17173] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3869: bg 0: block 16: invalid block bitmap [ 378.431996][T17173] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 378.444683][T17173] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.3869: invalid indirect mapped block 5 (level 0) [ 378.464334][T17173] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.3869: invalid indirect mapped block 4294967295 (level 1) [ 378.481137][T17173] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.3869: invalid indirect mapped block 4294967295 (level 2) [ 378.495639][T17186] loop1: detected capacity change from 0 to 128 [ 378.497476][T17173] EXT4-fs (loop0): 1 truncate cleaned up [ 378.502711][T17186] ext4: Unknown parameter 'permit_directio' [ 378.526156][T17187] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3874'. [ 378.635970][T17196] netlink: 'syz.1.3879': attribute type 6 has an invalid length. [ 378.670860][T17198] loop1: detected capacity change from 0 to 1764 [ 378.682209][T17198] siw: device registration error -23 [ 378.694831][T17200] loop0: detected capacity change from 0 to 128 [ 378.702727][T17200] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 378.715092][T17200] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 378.738827][T17201] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 378.758824][T17203] loop1: detected capacity change from 0 to 512 [ 378.759359][T17200] netlink: 'syz.0.3881': attribute type 6 has an invalid length. [ 378.768590][T17203] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3882: bg 0: block 16: invalid block bitmap [ 378.790086][T17203] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 378.799868][T17203] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.3882: invalid indirect mapped block 5 (level 0) [ 378.814079][T17203] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.3882: invalid indirect mapped block 4294967295 (level 1) [ 378.829210][T17203] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.3882: invalid indirect mapped block 4294967295 (level 2) [ 378.856201][T17203] EXT4-fs (loop1): 1 truncate cleaned up [ 378.890369][T17210] loop5: detected capacity change from 0 to 512 [ 378.898027][T17210] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 378.916924][T17210] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.3884: casefold flag without casefold feature [ 378.930188][T17215] loop1: detected capacity change from 0 to 128 [ 378.937152][T17215] ext4: Unknown parameter 'permit_directio' [ 378.941207][T17210] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.3884: couldn't read orphan inode 15 (err -117) [ 378.983176][T17210] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3884'. [ 378.997164][T17221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3888'. [ 379.096143][T17229] netlink: 'syz.1.3892': attribute type 6 has an invalid length. [ 379.113913][T17233] loop0: detected capacity change from 0 to 164 [ 379.118959][T17227] lo speed is unknown, defaulting to 1000 [ 379.146652][T17234] loop5: detected capacity change from 0 to 512 [ 379.166782][T17234] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.3891: bg 0: block 16: invalid block bitmap [ 379.189450][T17240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3893'. [ 379.203014][T17238] loop0: detected capacity change from 0 to 512 [ 379.216760][T17234] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 379.226623][T17234] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.3891: invalid indirect mapped block 5 (level 0) [ 379.227228][T17238] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3896: bg 0: block 16: invalid block bitmap [ 379.257411][T17234] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.3891: invalid indirect mapped block 4294967295 (level 1) [ 379.272475][T17234] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.3891: invalid indirect mapped block 4294967295 (level 2) [ 379.278236][T17238] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 379.294249][T17234] EXT4-fs (loop5): 1 truncate cleaned up [ 379.313207][T17238] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.3896: invalid indirect mapped block 5 (level 0) [ 379.335382][T17247] loop1: detected capacity change from 0 to 128 [ 379.337289][T17238] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.3896: invalid indirect mapped block 4294967295 (level 1) [ 379.356754][T17247] ext4: Unknown parameter 'permit_directio' [ 379.362903][T17238] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.3896: invalid indirect mapped block 4294967295 (level 2) [ 379.406061][T17238] EXT4-fs (loop0): 1 truncate cleaned up [ 379.457141][T17256] FAULT_INJECTION: forcing a failure. [ 379.457141][T17256] name failslab, interval 1, probability 0, space 0, times 0 [ 379.469918][T17256] CPU: 1 UID: 0 PID: 17256 Comm: syz.2.3902 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 379.469972][T17256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 379.469989][T17256] Call Trace: [ 379.469997][T17256] [ 379.470013][T17256] __dump_stack+0x1d/0x30 [ 379.470040][T17256] dump_stack_lvl+0xe8/0x140 [ 379.470067][T17256] dump_stack+0x15/0x1b [ 379.470088][T17256] should_fail_ex+0x265/0x280 [ 379.470151][T17256] should_failslab+0x8c/0xb0 [ 379.470185][T17256] kmem_cache_alloc_noprof+0x50/0x310 [ 379.470217][T17256] ? security_inode_alloc+0x37/0x100 [ 379.470273][T17256] security_inode_alloc+0x37/0x100 [ 379.470309][T17256] inode_init_always_gfp+0x4b7/0x500 [ 379.470414][T17256] alloc_inode+0x58/0x170 [ 379.470446][T17256] alloc_anon_inode+0x1e/0x170 [ 379.470591][T17256] anon_inode_make_secure_inode+0x33/0xf0 [ 379.470697][T17256] __se_sys_memfd_secret+0xd4/0x240 [ 379.470802][T17256] __x64_sys_memfd_secret+0x1f/0x30 [ 379.470838][T17256] x64_sys_call+0x2b30/0x2fb0 [ 379.470864][T17256] do_syscall_64+0xd2/0x200 [ 379.470968][T17256] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 379.471001][T17256] ? clear_bhb_loop+0x40/0x90 [ 379.471028][T17256] ? clear_bhb_loop+0x40/0x90 [ 379.471056][T17256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.471100][T17256] RIP: 0033:0x7f936dd3e9a9 [ 379.471120][T17256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.471143][T17256] RSP: 002b:00007f936c3a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 379.471166][T17256] RAX: ffffffffffffffda RBX: 00007f936df65fa0 RCX: 00007f936dd3e9a9 [ 379.471189][T17256] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 379.471204][T17256] RBP: 00007f936c3a7090 R08: 0000000000000000 R09: 0000000000000000 [ 379.471220][T17256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.471283][T17256] R13: 0000000000000001 R14: 00007f936df65fa0 R15: 00007ffe45b0bbb8 [ 379.471309][T17256] [ 379.723149][T17263] lo speed is unknown, defaulting to 1000 [ 379.742640][T17267] netlink: 'syz.5.3906': attribute type 6 has an invalid length. [ 379.769086][T17269] loop2: detected capacity change from 0 to 512 [ 379.792338][T17269] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.3905: bg 0: block 16: invalid block bitmap [ 379.820066][T17269] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 379.852135][T17269] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3905: invalid indirect mapped block 5 (level 0) [ 379.888328][T17279] loop5: detected capacity change from 0 to 512 [ 379.899670][T17269] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3905: invalid indirect mapped block 4294967295 (level 1) [ 379.914717][T17269] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.3905: invalid indirect mapped block 4294967295 (level 2) [ 379.929657][T17269] EXT4-fs (loop2): 1 truncate cleaned up [ 379.941449][T17279] EXT4-fs (loop5): 1 orphan inode deleted [ 379.950345][T17279] ext4 filesystem being mounted at /427/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 379.994452][T17284] loop3: detected capacity change from 0 to 128 [ 380.003034][T17284] ext4: Unknown parameter 'permit_directio' [ 380.122123][T17290] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3911'. [ 380.131299][T17289] loop2: detected capacity change from 0 to 2048 [ 380.138387][T17289] ext4: Unknown parameter 'obj_role' [ 380.159298][T17289] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3912'. [ 380.209873][T17294] loop2: detected capacity change from 0 to 512 [ 380.227433][T17294] EXT4-fs (loop2): too many log groups per flexible block group [ 380.235283][T17294] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 380.242340][T17294] EXT4-fs (loop2): mount failed [ 380.278265][T17298] pim6reg: entered allmulticast mode [ 380.659281][T17308] loop0: detected capacity change from 0 to 128 [ 380.666959][T17308] ext4: Unknown parameter 'permit_directio' [ 380.733240][T17312] loop5: detected capacity change from 0 to 128 [ 380.740134][T17312] ext4: Unknown parameter 'permit_directio' [ 380.823948][T17319] loop5: detected capacity change from 0 to 512 [ 380.837494][T17319] EXT4-fs (loop5): too many log groups per flexible block group [ 380.845418][T17319] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 380.852295][T17319] EXT4-fs (loop5): mount failed [ 381.293640][T17336] pim6reg: left allmulticast mode [ 381.345443][T17342] loop1: detected capacity change from 0 to 128 [ 381.352509][T17342] ext4: Unknown parameter 'permit_directio' [ 381.399153][T17344] loop1: detected capacity change from 0 to 2048 [ 381.406352][T17344] ext4: Unknown parameter 'obj_role' [ 381.479165][T17350] loop1: detected capacity change from 0 to 512 [ 381.497621][T17350] EXT4-fs (loop1): too many log groups per flexible block group [ 381.505697][T17350] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 381.512585][T17350] EXT4-fs (loop1): mount failed [ 381.537924][ T29] kauditd_printk_skb: 150 callbacks suppressed [ 381.537941][ T29] audit: type=1326 audit(1753668360.892:7066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17353 comm="syz.1.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1bc0ce9a9 code=0x7ffc0000 [ 381.541947][T17354] loop1: detected capacity change from 0 to 128 [ 381.544219][ T29] audit: type=1326 audit(1753668360.892:7067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17353 comm="syz.1.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd1bc0ce9a9 code=0x7ffc0000 [ 381.569589][T17354] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 381.574119][ T29] audit: type=1326 audit(1753668360.892:7068): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17353 comm="syz.1.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1bc0ce9a9 code=0x7ffc0000 [ 381.633282][ T29] audit: type=1326 audit(1753668360.892:7069): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17353 comm="syz.1.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1bc0ce9a9 code=0x7ffc0000 [ 381.633642][T17354] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 381.656817][ T29] audit: type=1326 audit(1753668360.892:7070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17353 comm="syz.1.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fd1bc0ce9a9 code=0x7ffc0000 [ 381.656871][ T29] audit: type=1326 audit(1753668360.892:7071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17353 comm="syz.1.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd1bc0ce9e3 code=0x7ffc0000 [ 381.712801][ T29] audit: type=1326 audit(1753668360.892:7072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17353 comm="syz.1.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fd1bc0cd45f code=0x7ffc0000 [ 381.735373][T17359] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 381.736179][ T29] audit: type=1326 audit(1753668360.892:7073): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17353 comm="syz.1.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fd1bc0cea37 code=0x7ffc0000 [ 381.754045][T17354] netlink: 'syz.1.3937': attribute type 6 has an invalid length. [ 381.770534][ T29] audit: type=1326 audit(1753668360.892:7074): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17353 comm="syz.1.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd1bc0cd310 code=0x7ffc0000 [ 381.802118][ T29] audit: type=1326 audit(1753668360.892:7075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17353 comm="syz.1.3937" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd1bc0ce5ab code=0x7ffc0000 [ 381.895946][T17368] loop5: detected capacity change from 0 to 128 [ 381.902826][T17368] ext4: Unknown parameter 'permit_directio' [ 382.017618][T17371] loop3: detected capacity change from 0 to 2048 [ 382.026665][T17371] ext4: Unknown parameter 'obj_role' [ 382.045466][T17371] __nla_validate_parse: 3 callbacks suppressed [ 382.045483][T17371] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3944'. [ 382.100717][T17385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3948'. [ 382.577718][T17391] loop0: detected capacity change from 0 to 128 [ 382.585361][T17391] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 382.597599][T17391] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 382.617454][T17391] netlink: 'syz.0.3951': attribute type 6 has an invalid length. [ 382.713953][T17399] loop0: detected capacity change from 0 to 128 [ 382.721368][T17399] ext4: Unknown parameter 'permit_directio' [ 382.828518][T17404] pim6reg: left allmulticast mode [ 382.965984][T17410] loop1: detected capacity change from 0 to 8192 [ 383.009930][T17413] loop3: detected capacity change from 0 to 1764 [ 383.031083][T17413] siw: device registration error -23 [ 383.037886][T17415] loop5: detected capacity change from 0 to 512 [ 383.061596][T17415] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.3962: Failed to acquire dquot type 1 [ 383.095552][T17415] EXT4-fs (loop5): 1 truncate cleaned up [ 383.122786][T17415] ext4 filesystem being mounted at /438/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 383.199716][T17423] loop3: detected capacity change from 0 to 2048 [ 383.357375][T17438] loop3: detected capacity change from 0 to 128 [ 383.364913][T17438] ext4: Unknown parameter 'permit_directio' [ 383.566893][T17452] loop3: detected capacity change from 0 to 1024 [ 383.574288][T17452] EXT4-fs: Ignoring removed nobh option [ 383.580007][T17452] EXT4-fs: Ignoring removed bh option [ 383.624150][T17452] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 383.624150][T17452] program syz.3.3968 not setting count and/or reply_len properly [ 383.702577][T17468] loop0: detected capacity change from 0 to 2048 [ 383.729512][T17472] lo speed is unknown, defaulting to 1000 [ 383.735989][T17468] ext4: Unknown parameter 'obj_role' [ 383.767539][T17478] loop3: detected capacity change from 0 to 512 [ 383.781295][T17468] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3969'. [ 383.892185][T17478] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.3970: bg 0: block 16: invalid block bitmap [ 383.913263][T17478] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 383.922642][T17478] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3970: invalid indirect mapped block 5 (level 0) [ 383.939555][T17478] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3970: invalid indirect mapped block 4294967295 (level 1) [ 383.986709][T17478] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.3970: invalid indirect mapped block 4294967295 (level 2) [ 384.022888][T17478] EXT4-fs (loop3): 1 truncate cleaned up [ 384.122054][T17500] loop2: detected capacity change from 0 to 1764 [ 384.152988][T17500] siw: device registration error -23 [ 384.422112][T17525] loop3: detected capacity change from 0 to 512 [ 384.435178][T17525] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 384.444427][T17525] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 384.461024][T17525] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 384.478842][T17525] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 384.488889][T17525] System zones: 0-2, 18-18, 34-34 [ 384.505007][T17525] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.3976: iget: bad i_size value: 360287970189639680 [ 384.534829][T17525] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.3976: couldn't read orphan inode 15 (err -117) [ 384.803183][T17547] loop0: detected capacity change from 0 to 128 [ 384.842373][T17547] ext4: Unknown parameter 'permit_directio' [ 384.949234][T17556] loop0: detected capacity change from 0 to 512 [ 384.978463][T17556] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 384.987645][T17556] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 385.036517][T17556] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 385.070538][T17556] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 385.105665][T17556] System zones: 0-2, 18-18, 34-34 [ 385.136642][T17556] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.3978: iget: bad i_size value: 360287970189639680 [ 385.191824][T17556] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.3978: couldn't read orphan inode 15 (err -117) [ 385.289130][T17556] pimreg: entered allmulticast mode [ 385.334087][T17577] pim6reg: entered allmulticast mode [ 385.388376][T17582] loop3: detected capacity change from 0 to 512 [ 385.468834][T17585] pim6reg: left allmulticast mode [ 385.793804][T17582] EXT4-fs (loop3): 1 orphan inode deleted [ 385.816059][ T8743] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:29: Failed to release dquot type 1 [ 385.857091][T17582] ext4 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 385.968827][T17600] loop0: detected capacity change from 0 to 512 [ 385.981267][T17600] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3981: bg 0: block 16: invalid block bitmap [ 385.995035][T17600] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 386.004828][T17600] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.3981: invalid indirect mapped block 5 (level 0) [ 386.020253][T17600] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.3981: invalid indirect mapped block 4294967295 (level 1) [ 386.036403][T17600] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.3981: invalid indirect mapped block 4294967295 (level 2) [ 386.050727][T17600] EXT4-fs (loop0): 1 truncate cleaned up [ 386.103041][T17606] lo speed is unknown, defaulting to 1000 [ 386.145375][T17608] loop0: detected capacity change from 0 to 512 [ 386.196151][T17608] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.3983: bg 0: block 16: invalid block bitmap [ 386.209626][T17608] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 386.234462][T17614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3985'. [ 386.236863][T17608] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.3983: invalid indirect mapped block 5 (level 0) [ 386.315051][T17622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3986'. [ 386.356154][T17608] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.3983: invalid indirect mapped block 4294967295 (level 1) [ 386.374924][T17608] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.3983: invalid indirect mapped block 4294967295 (level 2) [ 386.470687][T17608] EXT4-fs (loop0): 1 truncate cleaned up [ 386.478160][T17631] loop1: detected capacity change from 0 to 512 [ 386.499466][T17631] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.3992: bg 0: block 16: invalid block bitmap [ 386.524035][T17631] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 386.537894][T17636] xt_hashlimit: max too large, truncated to 1048576 [ 386.574102][T17631] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.3992: invalid indirect mapped block 5 (level 0) [ 386.665819][T17631] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.3992: invalid indirect mapped block 4294967295 (level 1) [ 386.703785][T17631] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.3992: invalid indirect mapped block 4294967295 (level 2) [ 386.736035][T17631] EXT4-fs (loop1): 1 truncate cleaned up [ 386.879030][ T29] kauditd_printk_skb: 228 callbacks suppressed [ 386.879050][ T29] audit: type=1400 audit(1753668366.202:7301): avc: denied { read } for pid=17650 comm="syz.1.4000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 387.027577][T17654] lo speed is unknown, defaulting to 1000 [ 387.078028][T17656] lo speed is unknown, defaulting to 1000 [ 387.126287][T17657] loop0: detected capacity change from 0 to 512 [ 387.133169][T17657] EXT4-fs: Ignoring removed mblk_io_submit option [ 387.139735][T17657] EXT4-fs: Ignoring removed bh option [ 387.163898][T17657] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 387.179582][T17657] EXT4-fs (loop0): 1 truncate cleaned up [ 387.437259][T17662] loop5: detected capacity change from 0 to 512 [ 387.542149][T17662] Quota error (device loop5): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5 [ 387.552468][T17662] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota [ 387.562475][T17662] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4002: Failed to acquire dquot type 1 [ 387.974340][T17662] EXT4-fs (loop5): 1 truncate cleaned up [ 388.012997][T17662] EXT4-fs mount: 54 callbacks suppressed [ 388.013019][T17662] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 388.127658][T17662] ext4 filesystem being mounted at /443/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.271035][ T9225] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.382532][T17667] loop3: detected capacity change from 0 to 2048 [ 388.406495][T17669] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4005'. [ 388.479069][T17667] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.496630][ T29] audit: type=1400 audit(1753668367.782:7302): avc: denied { getopt } for pid=17650 comm="syz.1.4000" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 388.602157][T17674] loop2: detected capacity change from 0 to 164 [ 388.628888][ T29] audit: type=1400 audit(1753668367.962:7303): avc: denied { bind } for pid=17666 comm="syz.3.4004" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 388.708781][T13152] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.741012][T17674] 9pnet: Could not find request transport: 0xffffffffffffffff [ 389.009980][T17691] loop1: detected capacity change from 0 to 512 [ 389.038451][T17693] loop2: detected capacity change from 0 to 1764 [ 389.051497][T17691] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.4010: bg 0: block 16: invalid block bitmap [ 389.076587][T17691] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 389.087445][T17693] siw: device registration error -23 [ 389.101941][T17691] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.4010: invalid indirect mapped block 5 (level 0) [ 389.117672][T17691] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.4010: invalid indirect mapped block 4294967295 (level 1) [ 389.154716][T17691] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.4010: invalid indirect mapped block 4294967295 (level 2) [ 389.197674][T17695] loop0: detected capacity change from 0 to 1024 [ 389.220105][T12967] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.233505][T17695] EXT4-fs: Ignoring removed nobh option [ 389.239248][T17695] EXT4-fs: Ignoring removed bh option [ 389.254440][T17691] EXT4-fs (loop1): 1 truncate cleaned up [ 389.261024][T17691] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.274067][T17699] pim6reg: entered allmulticast mode [ 389.277880][T17691] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.291199][T17695] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.307703][ T29] audit: type=1326 audit(1753668368.662:7304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17702 comm="syz.3.4013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b693ce9a9 code=0x7ffc0000 [ 389.319297][T17695] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 389.319297][T17695] program syz.0.4012 not setting count and/or reply_len properly [ 389.331491][ T29] audit: type=1326 audit(1753668368.692:7305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17702 comm="syz.3.4013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b693ce9a9 code=0x7ffc0000 [ 389.372249][ T29] audit: type=1326 audit(1753668368.702:7306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17702 comm="syz.3.4013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9b693ce9a9 code=0x7ffc0000 [ 389.395857][ T29] audit: type=1326 audit(1753668368.702:7307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17702 comm="syz.3.4013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b693ce9a9 code=0x7ffc0000 [ 389.403308][T17703] loop3: detected capacity change from 0 to 128 [ 389.419493][ T29] audit: type=1326 audit(1753668368.702:7308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17702 comm="syz.3.4013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9b693ce9a9 code=0x7ffc0000 [ 389.438102][T17706] loop1: detected capacity change from 0 to 512 [ 389.451095][T17703] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 389.472237][T17704] pim6reg: left allmulticast mode [ 389.490974][T13152] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.491650][T17706] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.4015: Failed to acquire dquot type 1 [ 389.500192][T17703] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 389.520797][T17706] EXT4-fs (loop1): 1 truncate cleaned up [ 389.527456][T17706] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.541028][T17706] ext4 filesystem being mounted at /199/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.569041][T17712] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 389.575795][T17703] netlink: 'syz.3.4013': attribute type 6 has an invalid length. [ 389.589986][T13634] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.630053][T17716] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4019'. [ 389.641092][T17716] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.648797][T17716] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.694954][T17723] loop3: detected capacity change from 0 to 128 [ 389.711826][T17723] syz.3.4021: attempt to access beyond end of device [ 389.711826][T17723] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 389.728459][T17723] netlink: 'syz.3.4021': attribute type 10 has an invalid length. [ 389.780016][T17730] loop3: detected capacity change from 0 to 1764 [ 389.788005][T17732] loop0: detected capacity change from 0 to 512 [ 389.794913][T17734] loop5: detected capacity change from 0 to 512 [ 389.796694][T17732] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.4025: bg 0: block 16: invalid block bitmap [ 389.814772][T17732] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 389.827135][T17732] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.4025: invalid indirect mapped block 5 (level 0) [ 389.834694][T17730] siw: device registration error -23 [ 389.841140][T17732] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.4025: invalid indirect mapped block 4294967295 (level 1) [ 389.861676][T17732] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.4025: invalid indirect mapped block 4294967295 (level 2) [ 389.883803][T17734] EXT4-fs (loop5): 1 orphan inode deleted [ 389.890008][T17732] EXT4-fs (loop0): 1 truncate cleaned up [ 389.896495][T17732] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.896697][T17734] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.908810][ T8752] EXT4-fs error (device loop5): ext4_release_dquot:6969: comm kworker/u8:38: Failed to release dquot type 1 [ 389.922811][T17734] ext4 filesystem being mounted at /446/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 389.948727][T17740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4027'. [ 389.958590][T17732] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.995027][T17742] loop3: detected capacity change from 0 to 512 [ 390.007995][T17742] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4028: Failed to acquire dquot type 1 [ 390.020820][T17742] EXT4-fs (loop3): 1 truncate cleaned up [ 390.027178][T17742] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.039994][T17742] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.064714][T12967] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.113417][T17753] loop3: detected capacity change from 0 to 2048 [ 390.123013][T17757] loop2: detected capacity change from 0 to 128 [ 390.132367][T17757] syz.2.4034: attempt to access beyond end of device [ 390.132367][T17757] loop2: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 390.150860][T17757] netlink: 'syz.2.4034': attribute type 10 has an invalid length. [ 390.154511][T17759] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4035'. [ 390.196357][T17753] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4032'. [ 390.198584][T17761] loop2: detected capacity change from 0 to 128 [ 390.213571][T17761] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 390.226288][T17761] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 390.259625][T17766] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 390.284098][T17769] loop3: detected capacity change from 0 to 512 [ 390.307845][T17769] EXT4-fs (loop3): too many log groups per flexible block group [ 390.315706][T17769] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 390.322728][T17769] EXT4-fs (loop3): mount failed [ 390.354740][T17775] loop2: detected capacity change from 0 to 1024 [ 390.362280][T17775] EXT4-fs: Ignoring removed nobh option [ 390.367975][T17775] EXT4-fs: Ignoring removed bh option [ 390.376266][T17780] loop3: detected capacity change from 0 to 128 [ 390.378173][T17775] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.384070][T17780] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 390.400967][T17775] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 390.400967][T17775] program syz.2.4041 not setting count and/or reply_len properly [ 390.408923][T17780] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 390.444287][T17780] netlink: 'syz.3.4043': attribute type 6 has an invalid length. [ 390.452925][T13984] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.462276][T17767] loop0: detected capacity change from 0 to 1024 [ 390.469364][T17767] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 390.481736][T17767] geneve1 speed is unknown, defaulting to 1000 [ 390.490890][T17767] geneve1 speed is unknown, defaulting to 1000 [ 390.499527][T17786] pim6reg: entered allmulticast mode [ 390.505120][T17767] geneve1 speed is unknown, defaulting to 1000 [ 390.526785][T17788] loop3: detected capacity change from 0 to 512 [ 390.534132][T17788] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 390.543281][T17788] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 390.547373][T17767] infiniband syz2: set active [ 390.556300][T17767] infiniband syz2: added geneve1 [ 390.567333][T17788] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 390.578347][T17789] pim6reg: left allmulticast mode [ 390.584198][T17788] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 390.595505][T17788] System zones: 0-2, 18-18, 34-34 [ 390.611589][T17784] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 390.612020][T17767] RDS/IB: syz2: added [ 390.624647][T17767] smc: adding ib device syz2 with port count 1 [ 390.630941][T17767] smc: ib device syz2 port 1 has pnetid [ 390.637864][T17788] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.4045: iget: bad i_size value: 360287970189639680 [ 390.651286][ T3399] geneve1 speed is unknown, defaulting to 1000 [ 390.657849][ T1035] geneve1 speed is unknown, defaulting to 1000 [ 390.664458][T17767] geneve1 speed is unknown, defaulting to 1000 [ 390.666767][T17788] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.4045: couldn't read orphan inode 15 (err -117) [ 390.691741][T17796] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4047'. [ 390.705507][ T9225] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.706489][T17767] geneve1 speed is unknown, defaulting to 1000 [ 390.735577][T17788] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.756099][T17767] geneve1 speed is unknown, defaulting to 1000 [ 390.785436][T17800] loop1: detected capacity change from 0 to 128 [ 390.796927][T17767] geneve1 speed is unknown, defaulting to 1000 [ 390.833696][T17767] geneve1 speed is unknown, defaulting to 1000 [ 390.841488][T17800] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 390.856418][T17800] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 390.940313][T17802] lo speed is unknown, defaulting to 1000 [ 390.996754][T17806] loop1: detected capacity change from 0 to 128 [ 391.007628][T17802] geneve1 speed is unknown, defaulting to 1000 [ 391.011955][T17806] ext4: Unknown parameter 'permit_directio' [ 391.122894][T17812] loop0: detected capacity change from 0 to 512 [ 391.193221][T17812] EXT4-fs (loop0): too many log groups per flexible block group [ 391.201175][T17812] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 391.218222][T17812] EXT4-fs (loop0): mount failed [ 391.406950][T17824] loop5: detected capacity change from 0 to 128 [ 391.413673][T17824] ext4: Unknown parameter 'permit_directio' [ 391.437785][T12967] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.450216][T17826] loop1: detected capacity change from 0 to 512 [ 391.462264][T17828] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4060'. [ 391.505226][T17833] loop3: detected capacity change from 0 to 512 [ 391.515148][T17826] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.4058: bg 0: block 16: invalid block bitmap [ 391.542785][T17833] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4059: Failed to acquire dquot type 1 [ 391.564511][T17826] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 391.577411][T17833] EXT4-fs (loop3): 1 truncate cleaned up [ 391.583602][T17833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 391.596519][T17833] ext4 filesystem being mounted at /266/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 391.607979][T17826] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.4058: invalid indirect mapped block 5 (level 0) [ 391.626571][T17826] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.4058: invalid indirect mapped block 4294967295 (level 1) [ 391.652623][T17826] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.4058: invalid indirect mapped block 4294967295 (level 2) [ 391.677215][T12967] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.689442][T17826] EXT4-fs (loop1): 1 truncate cleaned up [ 391.701291][T17826] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 391.730024][T17826] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.753041][T17849] loop3: detected capacity change from 0 to 128 [ 391.760530][T17849] ext4: Unknown parameter 'permit_directio' [ 391.878210][T17862] loop1: detected capacity change from 0 to 164 [ 391.944608][T17855] loop0: detected capacity change from 0 to 1024 [ 391.959097][T17855] EXT4-fs: Ignoring removed nobh option [ 391.964824][T17855] EXT4-fs: Ignoring removed bh option [ 391.986356][T17871] 9pnet: Could not find request transport: 0xffffffffffffffff [ 392.019960][T17855] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 392.043526][T17855] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 392.043526][T17855] program syz.0.4064 not setting count and/or reply_len properly [ 392.111736][T13152] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.214398][T17892] lo speed is unknown, defaulting to 1000 [ 392.293632][T17892] geneve1 speed is unknown, defaulting to 1000 [ 392.380806][T17903] loop5: detected capacity change from 0 to 1764 [ 392.527544][T17919] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4071'. [ 392.571339][T17925] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4072'. [ 392.792593][T17953] loop3: detected capacity change from 0 to 512 [ 392.801539][T17953] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.4077: bg 0: block 16: invalid block bitmap [ 392.814347][T17953] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 392.825232][T17953] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.4077: invalid indirect mapped block 5 (level 0) [ 392.838860][T17953] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.4077: invalid indirect mapped block 4294967295 (level 1) [ 392.854621][T17953] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.4077: invalid indirect mapped block 4294967295 (level 2) [ 392.869561][T17953] EXT4-fs (loop3): 1 truncate cleaned up [ 392.875910][T17953] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 392.903068][T12967] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 392.951379][T17975] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4079'. [ 392.962613][T17975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.970404][T17975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 393.420815][T18020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4084'. [ 393.522496][T18030] loop1: detected capacity change from 0 to 1024 [ 393.528698][T18030] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.542788][T18030] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.619094][T18040] loop1: detected capacity change from 0 to 164 [ 393.658787][T18040] 9pnet: Could not find request transport: 0xffffffffffffffff [ 393.900758][T18060] pim6reg: entered allmulticast mode [ 394.024335][T18063] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 394.024335][T18063] program syz.5.4101 not setting count and/or reply_len properly [ 394.085161][T18074] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4105'. [ 394.088811][T18079] loop1: detected capacity change from 0 to 164 [ 394.101283][T18075] FAULT_INJECTION: forcing a failure. [ 394.101283][T18075] name failslab, interval 1, probability 0, space 0, times 0 [ 394.113962][T18075] CPU: 0 UID: 0 PID: 18075 Comm: syz.3.4106 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 394.113993][T18075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 394.114083][T18075] Call Trace: [ 394.114090][T18075] [ 394.114108][T18075] __dump_stack+0x1d/0x30 [ 394.114135][T18075] dump_stack_lvl+0xe8/0x140 [ 394.114194][T18075] dump_stack+0x15/0x1b [ 394.114214][T18075] should_fail_ex+0x265/0x280 [ 394.114253][T18075] should_failslab+0x8c/0xb0 [ 394.114301][T18075] kmem_cache_alloc_node_noprof+0x57/0x320 [ 394.114332][T18075] ? __alloc_skb+0x101/0x320 [ 394.114364][T18075] ? __rtnl_unlock+0x95/0xb0 [ 394.114402][T18075] __alloc_skb+0x101/0x320 [ 394.114475][T18075] netlink_ack+0xfd/0x500 [ 394.114570][T18075] netlink_rcv_skb+0x192/0x220 [ 394.114609][T18075] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 394.114648][T18075] rtnetlink_rcv+0x1c/0x30 [ 394.114701][T18075] netlink_unicast+0x5a8/0x680 [ 394.114743][T18075] netlink_sendmsg+0x58b/0x6b0 [ 394.114772][T18075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.114809][T18075] __sock_sendmsg+0x142/0x180 [ 394.114861][T18075] ____sys_sendmsg+0x31e/0x4e0 [ 394.114892][T18075] ___sys_sendmsg+0x17b/0x1d0 [ 394.114935][T18075] __x64_sys_sendmsg+0xd4/0x160 [ 394.115008][T18075] x64_sys_call+0x2999/0x2fb0 [ 394.115036][T18075] do_syscall_64+0xd2/0x200 [ 394.115067][T18075] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 394.115101][T18075] ? clear_bhb_loop+0x40/0x90 [ 394.115200][T18075] ? clear_bhb_loop+0x40/0x90 [ 394.115228][T18075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.115309][T18075] RIP: 0033:0x7f9b693ce9a9 [ 394.115328][T18075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.115352][T18075] RSP: 002b:00007f9b67a37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.115442][T18075] RAX: ffffffffffffffda RBX: 00007f9b695f5fa0 RCX: 00007f9b693ce9a9 [ 394.115523][T18075] RDX: 0000000000008840 RSI: 0000200000000740 RDI: 0000000000000003 [ 394.115539][T18075] RBP: 00007f9b67a37090 R08: 0000000000000000 R09: 0000000000000000 [ 394.115555][T18075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.115571][T18075] R13: 0000000000000000 R14: 00007f9b695f5fa0 R15: 00007ffe774da8c8 [ 394.115596][T18075] [ 394.380310][T18085] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4110'. [ 394.405713][T18079] 9pnet: Could not find request transport: 0xffffffffffffffff [ 394.471972][T18091] loop0: detected capacity change from 0 to 128 [ 394.473979][ T29] kauditd_printk_skb: 253 callbacks suppressed [ 394.473997][ T29] audit: type=1326 audit(1753668373.802:7555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18087 comm="syz.0.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e72ce9a9 code=0x7ffc0000 [ 394.508226][ T29] audit: type=1326 audit(1753668373.802:7556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18087 comm="syz.0.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e72ce9a9 code=0x7ffc0000 [ 394.532050][ T29] audit: type=1326 audit(1753668373.822:7557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18087 comm="syz.0.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87e72ce9a9 code=0x7ffc0000 [ 394.555630][ T29] audit: type=1326 audit(1753668373.822:7558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18087 comm="syz.0.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e72ce9a9 code=0x7ffc0000 [ 394.565059][T18091] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 394.579456][ T29] audit: type=1326 audit(1753668373.822:7559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18087 comm="syz.0.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87e72ce9a9 code=0x7ffc0000 [ 394.614626][ T29] audit: type=1326 audit(1753668373.822:7560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18087 comm="syz.0.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f87e72ce9a9 code=0x7ffc0000 [ 394.638384][ T29] audit: type=1326 audit(1753668373.822:7561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18087 comm="syz.0.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f87e72ce9e3 code=0x7ffc0000 [ 394.649091][T18091] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 394.661776][ T29] audit: type=1326 audit(1753668373.822:7562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18087 comm="syz.0.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f87e72cd45f code=0x7ffc0000 [ 394.676762][T18096] loop1: detected capacity change from 0 to 512 [ 394.694136][ T29] audit: type=1326 audit(1753668373.822:7563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18087 comm="syz.0.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f87e72cea37 code=0x7ffc0000 [ 394.724069][ T29] audit: type=1326 audit(1753668373.822:7564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18087 comm="syz.0.4111" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f87e72cd310 code=0x7ffc0000 [ 394.762104][T18098] loop3: detected capacity change from 0 to 512 [ 394.774567][T18098] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 394.783697][T18098] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 394.792946][T18098] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 394.804809][T18098] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 394.813168][T18098] System zones: 0-2, 18-18, 34-34 [ 394.825053][T18098] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.4115: iget: bad i_size value: 360287970189639680 [ 394.868643][T18096] EXT4-fs (loop1): too many log groups per flexible block group [ 394.870991][T18091] netlink: 'syz.0.4111': attribute type 6 has an invalid length. [ 394.876708][T18096] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 394.897605][T18096] EXT4-fs (loop1): mount failed [ 394.900218][T18098] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.4115: couldn't read orphan inode 15 (err -117) [ 394.957517][T18098] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 395.647439][T18137] loop2: detected capacity change from 0 to 1764 [ 395.682193][T18137] siw: device registration error -23 [ 395.690346][T12967] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 395.808756][T18141] loop2: detected capacity change from 0 to 512 [ 395.876973][T18141] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4131: Failed to acquire dquot type 1 [ 395.929793][T18141] EXT4-fs (loop2): 1 truncate cleaned up [ 395.952354][T18141] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.965069][T18141] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 395.971233][T18149] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4133'. [ 396.055046][T13984] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.098650][T18151] loop5: detected capacity change from 0 to 164 [ 396.166318][T18153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4135'. [ 396.176801][T18151] 9pnet: Could not find request transport: 0xffffffffffffffff [ 396.294862][T18167] loop0: detected capacity change from 0 to 512 [ 396.320817][T18172] loop2: detected capacity change from 0 to 512 [ 396.356186][T18167] EXT4-fs (loop0): too many log groups per flexible block group [ 396.364156][T18167] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 396.372105][T18172] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4141: bg 0: block 16: invalid block bitmap [ 396.399072][T18167] EXT4-fs (loop0): mount failed [ 396.417491][T18182] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4143'. [ 396.466452][T18172] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 396.509367][T18172] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4141: invalid indirect mapped block 5 (level 0) [ 396.546478][T18190] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4148'. [ 396.575981][T18172] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4141: invalid indirect mapped block 4294967295 (level 1) [ 396.611047][T18193] pim6reg: entered allmulticast mode [ 396.620529][T18172] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4141: invalid indirect mapped block 4294967295 (level 2) [ 396.666023][T18172] EXT4-fs (loop2): 1 truncate cleaned up [ 396.688820][T18172] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 396.747410][T18172] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.108996][T18204] lo speed is unknown, defaulting to 1000 [ 397.157831][T18205] loop2: detected capacity change from 0 to 512 [ 397.177054][T18207] loop3: detected capacity change from 0 to 512 [ 397.205335][T18207] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 397.229436][T18207] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.4154: casefold flag without casefold feature [ 397.246246][T18207] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.4154: couldn't read orphan inode 15 (err -117) [ 397.250512][T18204] geneve1 speed is unknown, defaulting to 1000 [ 397.272963][T18205] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4153: bg 0: block 16: invalid block bitmap [ 397.296769][T18207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.309963][T18205] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 397.330381][T18205] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4153: invalid indirect mapped block 5 (level 0) [ 397.366090][T12967] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.406338][T18205] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4153: invalid indirect mapped block 4294967295 (level 1) [ 397.458855][T18205] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4153: invalid indirect mapped block 4294967295 (level 2) [ 397.551302][T18224] loop0: detected capacity change from 0 to 1764 [ 397.575529][T18224] siw: device registration error -23 [ 397.612807][T18205] EXT4-fs (loop2): 1 truncate cleaned up [ 397.657759][T18205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 397.730247][T18229] loop1: detected capacity change from 0 to 8192 [ 397.758253][T18205] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.879120][T18232] loop3: detected capacity change from 0 to 512 [ 397.915578][T18232] EXT4-fs (loop3): 1 orphan inode deleted [ 397.932004][ T8773] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:59: Failed to release dquot type 1 [ 397.994709][T18232] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 398.074398][T18232] ext4 filesystem being mounted at /289/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 398.087612][T18237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4164'. [ 398.123897][T18237] loop2: detected capacity change from 0 to 7 [ 398.340691][T18250] loop2: detected capacity change from 0 to 1764 [ 398.353396][T18250] siw: device registration error -23 [ 398.370893][T18257] loop5: detected capacity change from 0 to 512 [ 398.387026][T18257] EXT4-fs (loop5): too many log groups per flexible block group [ 398.395115][T18257] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 398.447335][T18262] lo speed is unknown, defaulting to 1000 [ 398.490618][T18257] EXT4-fs (loop5): mount failed [ 398.501640][T18263] loop2: detected capacity change from 0 to 512 [ 398.514907][T18263] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4174: bg 0: block 16: invalid block bitmap [ 398.542905][T18263] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 398.558207][T18268] loop1: detected capacity change from 0 to 128 [ 398.560149][T18263] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4174: invalid indirect mapped block 5 (level 0) [ 398.566041][T18262] geneve1 speed is unknown, defaulting to 1000 [ 398.582229][T18268] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 398.611851][T18263] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4174: invalid indirect mapped block 4294967295 (level 1) [ 398.636259][T18268] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 398.654596][T18268] netlink: 'syz.1.4175': attribute type 6 has an invalid length. [ 398.692350][T18263] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4174: invalid indirect mapped block 4294967295 (level 2) [ 398.717338][T12967] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.764397][T18263] EXT4-fs (loop2): 1 truncate cleaned up [ 398.836455][T18263] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.851788][T18273] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4178'. [ 398.869428][T18263] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 398.993644][T18283] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4183'. [ 399.040655][T18284] lo speed is unknown, defaulting to 1000 [ 399.050946][T18286] loop3: detected capacity change from 0 to 512 [ 399.070560][T18286] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.4184: bg 0: block 16: invalid block bitmap [ 399.130464][T18289] loop5: detected capacity change from 0 to 512 [ 399.196374][T18292] loop2: detected capacity change from 0 to 8192 [ 399.250872][T18289] EXT4-fs: Ignoring removed mblk_io_submit option [ 399.257837][T18289] EXT4-fs: Ignoring removed bh option [ 399.260753][T18286] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 399.276671][T18289] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 399.290288][T18297] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 399.290288][T18297] program syz.0.4187 not setting count and/or reply_len properly [ 399.296888][T18286] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.4184: invalid indirect mapped block 5 (level 0) [ 399.326556][T18286] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.4184: invalid indirect mapped block 4294967295 (level 1) [ 399.366465][T18284] geneve1 speed is unknown, defaulting to 1000 [ 399.437749][T18286] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.4184: invalid indirect mapped block 4294967295 (level 2) [ 399.462979][T18286] EXT4-fs (loop3): 1 truncate cleaned up [ 399.467608][T18289] EXT4-fs (loop5): 1 truncate cleaned up [ 399.474903][T18289] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.504842][T18286] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 399.544876][T18286] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.793355][T18314] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4192'. [ 399.916512][T18325] loop3: detected capacity change from 0 to 512 [ 399.940481][T18326] pim6reg: left allmulticast mode [ 399.957866][T18325] EXT4-fs (loop3): too many log groups per flexible block group [ 399.965741][T18325] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 399.990907][T18325] EXT4-fs (loop3): mount failed [ 400.726652][T18373] loop1: detected capacity change from 0 to 512 [ 400.758282][T18373] EXT4-fs (loop1): too many log groups per flexible block group [ 400.766330][T18373] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 400.773967][T18373] EXT4-fs (loop1): mount failed [ 400.878285][T18383] loop1: detected capacity change from 0 to 2048 [ 400.968830][T18383] syz!: rxe_newlink: already configured on team_slave_0 [ 401.439126][T18439] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 401.439126][T18439] program syz.3.4208 not setting count and/or reply_len properly [ 401.529595][T18449] loop3: detected capacity change from 0 to 512 [ 401.541656][T18449] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.4209: bg 0: block 16: invalid block bitmap [ 401.564069][T18449] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 401.573512][T18449] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.4209: invalid indirect mapped block 5 (level 0) [ 401.596031][T18449] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.4209: invalid indirect mapped block 4294967295 (level 1) [ 401.634169][T18449] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.4209: invalid indirect mapped block 4294967295 (level 2) [ 401.676267][T18449] EXT4-fs (loop3): 1 truncate cleaned up [ 401.701190][T18449] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 401.739833][T18449] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.224627][T18493] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4215'. [ 402.312893][T18507] loop2: detected capacity change from 0 to 512 [ 402.321232][T18507] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 402.330362][T18507] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 402.339494][T18509] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4219'. [ 402.355872][T18510] loop1: detected capacity change from 0 to 512 [ 402.365846][T18507] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 402.374902][T18507] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 402.383598][T18507] System zones: 0-2, 18-18, 34-34 [ 402.392160][T18510] EXT4-fs (loop1): 1 orphan inode deleted [ 402.399545][T18510] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 402.412231][ T8762] __quota_error: 132 callbacks suppressed [ 402.412245][ T8762] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 402.427957][ T8762] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:48: Failed to release dquot type 1 [ 402.437330][T18510] ext4 filesystem being mounted at /247/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 402.450207][T18507] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.4221: iget: bad i_size value: 360287970189639680 [ 402.465104][T18507] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.4221: couldn't read orphan inode 15 (err -117) [ 402.478818][T18507] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 402.495852][ T29] audit: type=1326 audit(1753668381.852:7694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18508 comm="syz.1.4222" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1bc0ce9a9 code=0x0 [ 402.547779][ T9225] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 402.563691][ T29] audit: type=1326 audit(1753668381.912:7695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18506 comm="syz.2.4221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936dd3e9a9 code=0x7ffc0000 [ 402.587508][ T29] audit: type=1326 audit(1753668381.912:7696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18506 comm="syz.2.4221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936dd3e9a9 code=0x7ffc0000 [ 402.628162][ T29] audit: type=1326 audit(1753668381.942:7697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18506 comm="syz.2.4221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=201 compat=0 ip=0x7f936dd3e9a9 code=0x7ffc0000 [ 402.651900][ T29] audit: type=1326 audit(1753668381.942:7698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18506 comm="syz.2.4221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936dd3e9a9 code=0x7ffc0000 [ 402.675576][ T29] audit: type=1326 audit(1753668381.942:7699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18506 comm="syz.2.4221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f936dd3e9a9 code=0x7ffc0000 [ 402.699161][ T29] audit: type=1326 audit(1753668381.942:7700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18506 comm="syz.2.4221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936dd3e9a9 code=0x7ffc0000 [ 402.722728][ T29] audit: type=1326 audit(1753668381.942:7701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18506 comm="syz.2.4221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f936dd3e9a9 code=0x7ffc0000 [ 402.746397][ T29] audit: type=1326 audit(1753668381.942:7702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18506 comm="syz.2.4221" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936dd3e9a9 code=0x7ffc0000 [ 403.034168][T18536] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4230'. [ 403.140527][T18542] loop5: detected capacity change from 0 to 1764 [ 403.189567][T13634] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.290365][T18558] netlink: 'syz.1.4235': attribute type 6 has an invalid length. [ 403.306080][T13984] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.343222][T18565] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4237'. [ 403.368699][T18565] loop2: detected capacity change from 0 to 7 [ 403.377478][T18571] loop1: detected capacity change from 0 to 512 [ 403.408842][T18571] EXT4-fs (loop1): too many log groups per flexible block group [ 403.416957][T18571] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 403.424390][T18571] EXT4-fs (loop1): mount failed [ 403.439195][T18580] FAULT_INJECTION: forcing a failure. [ 403.439195][T18580] name failslab, interval 1, probability 0, space 0, times 0 [ 403.452177][T18580] CPU: 0 UID: 0 PID: 18580 Comm: syz.5.4239 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 403.452287][T18580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 403.452300][T18580] Call Trace: [ 403.452307][T18580] [ 403.452315][T18580] __dump_stack+0x1d/0x30 [ 403.452337][T18580] dump_stack_lvl+0xe8/0x140 [ 403.452362][T18580] dump_stack+0x15/0x1b [ 403.452378][T18580] should_fail_ex+0x265/0x280 [ 403.452427][T18580] should_failslab+0x8c/0xb0 [ 403.452492][T18580] __kmalloc_noprof+0xa5/0x3e0 [ 403.452523][T18580] ? io_cache_alloc_new+0x2a/0xb0 [ 403.452551][T18580] io_cache_alloc_new+0x2a/0xb0 [ 403.452641][T18580] io_sqe_buffer_register+0xf2/0x1430 [ 403.452693][T18580] ? __memcg_slab_post_alloc_hook+0x44c/0x580 [ 403.452741][T18580] ? __kvmalloc_node_noprof+0x398/0x4e0 [ 403.452776][T18580] ? io_sqe_buffers_register+0xc2/0x530 [ 403.452810][T18580] io_sqe_buffers_register+0x2ac/0x530 [ 403.452890][T18580] __se_sys_io_uring_register+0xa9f/0xeb0 [ 403.452999][T18580] ? fput+0x8f/0xc0 [ 403.453027][T18580] ? ksys_write+0x192/0x1a0 [ 403.453073][T18580] __x64_sys_io_uring_register+0x55/0x70 [ 403.453137][T18580] x64_sys_call+0xc91/0x2fb0 [ 403.453164][T18580] do_syscall_64+0xd2/0x200 [ 403.453187][T18580] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 403.453221][T18580] ? clear_bhb_loop+0x40/0x90 [ 403.453253][T18580] ? clear_bhb_loop+0x40/0x90 [ 403.453338][T18580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.453365][T18580] RIP: 0033:0x7fceadc1e9a9 [ 403.453444][T18580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.453523][T18580] RSP: 002b:00007fceac287038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 403.453542][T18580] RAX: ffffffffffffffda RBX: 00007fceade45fa0 RCX: 00007fceadc1e9a9 [ 403.453558][T18580] RDX: 00002000000002c0 RSI: 0000000000000000 RDI: 0000000000000003 [ 403.453573][T18580] RBP: 00007fceac287090 R08: 0000000000000000 R09: 0000000000000000 [ 403.453589][T18580] R10: 100000000000011a R11: 0000000000000246 R12: 0000000000000001 [ 403.453604][T18580] R13: 0000000000000000 R14: 00007fceade45fa0 R15: 00007ffda89f8cf8 [ 403.453631][T18580] [ 403.503747][T18588] loop2: detected capacity change from 0 to 128 [ 403.579496][T18594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4241'. [ 403.627581][T18583] syz.2.4240: attempt to access beyond end of device [ 403.627581][T18583] loop2: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 403.674386][T18598] loop5: detected capacity change from 0 to 512 [ 403.722798][T18583] netlink: 'syz.2.4240': attribute type 10 has an invalid length. [ 403.746641][T18598] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.4244: Failed to acquire dquot type 1 [ 403.768939][T18598] EXT4-fs (loop5): 1 truncate cleaned up [ 403.776873][T18605] loop0: detected capacity change from 0 to 2048 [ 403.789132][T18598] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 403.808227][T18598] ext4 filesystem being mounted at /488/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.836168][T18605] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 403.870805][ T9225] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.055266][T18640] loop0: detected capacity change from 0 to 512 [ 404.109909][T18640] EXT4-fs (loop0): 1 orphan inode deleted [ 404.117041][T18640] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.130062][ T8762] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:48: Failed to release dquot type 1 [ 404.156259][T18640] ext4 filesystem being mounted at /296/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.188289][T18640] random: crng reseeded on system resumption [ 404.279401][T18671] loop1: detected capacity change from 0 to 128 [ 404.299326][T18671] syz.1.4260: attempt to access beyond end of device [ 404.299326][T18671] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 404.327730][T18671] netlink: 'syz.1.4260': attribute type 10 has an invalid length. [ 404.386968][T18681] loop1: detected capacity change from 0 to 2048 [ 404.437257][T18681] syz!: rxe_newlink: already configured on team_slave_0 [ 404.780104][T18746] rdma_rxe: rxe_newlink: failed to add geneve1 [ 404.894210][T13152] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 404.920290][T18763] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4269'. [ 404.923497][T18765] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 404.923497][T18765] program syz.2.4270 not setting count and/or reply_len properly [ 404.969356][T18767] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 404.969356][T18767] program syz.0.4271 not setting count and/or reply_len properly [ 405.074240][T18773] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4274'. [ 405.084144][ T1035] IPVS: starting estimator thread 0... [ 405.176235][T18775] IPVS: using max 2400 ests per chain, 120000 per kthread [ 405.452002][T18795] loop3: detected capacity change from 0 to 512 [ 405.460064][T18795] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 405.469231][T18795] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 405.478587][T18795] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 405.487976][T18795] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 405.497729][T18795] System zones: 0-2, 18-18, 34-34 [ 405.503755][T18795] EXT4-fs error (device loop3): ext4_orphan_get:1393: inode #15: comm syz.3.4282: iget: bad i_size value: 360287970189639680 [ 405.519160][T18795] EXT4-fs error (device loop3): ext4_orphan_get:1398: comm syz.3.4282: couldn't read orphan inode 15 (err -117) [ 405.519255][T18803] loop1: detected capacity change from 0 to 512 [ 405.532055][T18795] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.549989][T18803] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 405.559144][T18803] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 405.569286][T18803] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 405.578607][T18803] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 405.587196][T18803] System zones: 0-2, 18-18, 34-34 [ 405.592864][T18803] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.4285: iget: bad i_size value: 360287970189639680 [ 405.606323][T18803] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.4285: couldn't read orphan inode 15 (err -117) [ 405.619286][T18803] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 405.651414][T18803] pimreg: entered allmulticast mode [ 405.686053][T13634] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.824202][T18811] loop1: detected capacity change from 0 to 512 [ 405.841795][T18811] EXT4-fs (loop1): 1 orphan inode deleted [ 405.848425][T18811] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 405.861309][ T8752] EXT4-fs error (device loop1): ext4_release_dquot:6969: comm kworker/u8:38: Failed to release dquot type 1 [ 405.873536][T18811] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 405.892913][T18811] random: crng reseeded on system resumption [ 406.134478][T18819] FAULT_INJECTION: forcing a failure. [ 406.134478][T18819] name failslab, interval 1, probability 0, space 0, times 0 [ 406.147162][T18819] CPU: 0 UID: 0 PID: 18819 Comm: syz.0.4290 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 406.147206][T18819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 406.147218][T18819] Call Trace: [ 406.147225][T18819] [ 406.147233][T18819] __dump_stack+0x1d/0x30 [ 406.147258][T18819] dump_stack_lvl+0xe8/0x140 [ 406.147281][T18819] dump_stack+0x15/0x1b [ 406.147300][T18819] should_fail_ex+0x265/0x280 [ 406.147414][T18819] should_failslab+0x8c/0xb0 [ 406.147442][T18819] __kmalloc_noprof+0xa5/0x3e0 [ 406.147467][T18819] ? security_prepare_creds+0x52/0x120 [ 406.147491][T18819] security_prepare_creds+0x52/0x120 [ 406.147513][T18819] prepare_creds+0x34a/0x4c0 [ 406.147558][T18819] __sys_setgid+0x6a/0x1d0 [ 406.147599][T18819] __x64_sys_setgid+0x1e/0x30 [ 406.147634][T18819] x64_sys_call+0xeaf/0x2fb0 [ 406.147655][T18819] do_syscall_64+0xd2/0x200 [ 406.147743][T18819] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 406.147768][T18819] ? clear_bhb_loop+0x40/0x90 [ 406.147791][T18819] ? clear_bhb_loop+0x40/0x90 [ 406.147819][T18819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.147846][T18819] RIP: 0033:0x7f87e72ce9a9 [ 406.147913][T18819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.147960][T18819] RSP: 002b:00007f87e5937038 EFLAGS: 00000246 ORIG_RAX: 000000000000006a [ 406.147984][T18819] RAX: ffffffffffffffda RBX: 00007f87e74f5fa0 RCX: 00007f87e72ce9a9 [ 406.147998][T18819] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 406.148010][T18819] RBP: 00007f87e5937090 R08: 0000000000000000 R09: 0000000000000000 [ 406.148022][T18819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.148033][T18819] R13: 0000000000000001 R14: 00007f87e74f5fa0 R15: 00007fff9b301d68 [ 406.148055][T18819] [ 406.357619][T12967] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 406.478623][T18828] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4294'. [ 406.494356][T18832] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4295'. [ 406.528305][T18836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4297'. [ 406.541437][T18836] loop2: detected capacity change from 0 to 7 [ 406.564572][T18838] loop3: detected capacity change from 0 to 1764 [ 406.618082][T18842] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 406.618082][T18842] program syz.3.4300 not setting count and/or reply_len properly [ 406.671068][T18845] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 406.671068][T18845] program syz.1.4302 not setting count and/or reply_len properly [ 406.862281][T18857] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4307'. [ 406.869266][T18862] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4308'. [ 406.944840][T18872] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 406.944840][T18872] program syz.1.4312 not setting count and/or reply_len properly [ 407.012412][T18876] loop1: detected capacity change from 0 to 164 [ 407.043242][T18876] 9pnet: Could not find request transport: 0xffffffffffffffff [ 407.154972][T18884] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4317'. [ 407.322224][T18893] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4321'. [ 407.372793][T18896] lo speed is unknown, defaulting to 1000 [ 407.399570][T18902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4320'. [ 407.414009][T18900] loop2: detected capacity change from 0 to 512 [ 407.455507][T18900] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.4322: bg 0: block 16: invalid block bitmap [ 407.456172][T18906] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 407.456172][T18906] program syz.1.4325 not setting count and/or reply_len properly [ 407.517993][T18911] loop3: detected capacity change from 0 to 128 [ 407.526069][T18900] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 407.541872][T18911] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 407.559829][T18896] geneve1 speed is unknown, defaulting to 1000 [ 407.620621][T18913] loop1: detected capacity change from 0 to 8192 [ 407.665801][T18900] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4322: invalid indirect mapped block 5 (level 0) [ 407.693720][T18911] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 407.718119][T18911] netlink: 'syz.3.4327': attribute type 6 has an invalid length. [ 407.738033][T18900] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4322: invalid indirect mapped block 4294967295 (level 1) [ 407.816035][T18900] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #13: comm syz.2.4322: invalid indirect mapped block 4294967295 (level 2) [ 407.843957][T18900] EXT4-fs (loop2): 1 truncate cleaned up [ 407.964482][T18924] loop3: detected capacity change from 0 to 512 [ 407.992843][T18924] EXT4-fs (loop3): 1 orphan inode deleted [ 408.006860][ T8773] __quota_error: 157 callbacks suppressed [ 408.006878][ T8773] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 408.022863][ T8773] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:59: Failed to release dquot type 1 [ 408.029097][T18924] ext4 filesystem being mounted at /331/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 408.111217][ T29] audit: type=1326 audit(1753668387.462:7856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18922 comm="syz.3.4331" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9b693ce9a9 code=0x0 [ 408.538966][T18943] loop0: detected capacity change from 0 to 512 [ 408.586984][T18943] EXT4-fs (loop0): too many log groups per flexible block group [ 408.595070][T18943] EXT4-fs (loop0): failed to initialize mballoc (-12) [ 408.620908][T18949] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 408.620908][T18949] program syz.1.4338 not setting count and/or reply_len properly [ 408.634498][T18943] EXT4-fs (loop0): mount failed [ 408.756194][ T29] audit: type=1400 audit(1753668388.102:7857): avc: denied { listen } for pid=18952 comm="syz.1.4339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 408.775939][ T29] audit: type=1400 audit(1753668388.112:7858): avc: denied { accept } for pid=18952 comm="syz.1.4339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 408.874816][T18959] loop0: detected capacity change from 0 to 512 [ 408.892533][T18959] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 408.913835][T18959] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 408.933851][T18959] EXT4-fs (loop0): 1 truncate cleaned up [ 409.254093][T18992] loop0: detected capacity change from 0 to 128 [ 409.273973][T18996] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 409.273973][T18996] program syz.2.4349 not setting count and/or reply_len properly [ 409.278273][T18992] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 409.374828][T18992] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 409.452611][T19009] loop2: detected capacity change from 0 to 1024 [ 409.465638][T18992] netlink: 'syz.0.4348': attribute type 6 has an invalid length. [ 409.482345][T19009] EXT4-fs: Ignoring removed bh option [ 409.546998][ T29] audit: type=1400 audit(1753668388.902:7859): avc: denied { map } for pid=19008 comm="syz.2.4351" path="/221/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 409.590005][ T29] audit: type=1400 audit(1753668388.902:7860): avc: denied { execute } for pid=19008 comm="syz.2.4351" path="/221/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 409.635804][ T29] audit: type=1326 audit(1753668388.982:7861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19008 comm="syz.2.4351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936dd3e9a9 code=0x7ffc0000 [ 409.659481][ T29] audit: type=1326 audit(1753668388.982:7862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19008 comm="syz.2.4351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936dd3e9a9 code=0x7ffc0000 [ 409.683120][ T29] audit: type=1326 audit(1753668388.982:7863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19008 comm="syz.2.4351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f936dd3e9a9 code=0x7ffc0000 [ 409.684089][T19009] FAULT_INJECTION: forcing a failure. [ 409.684089][T19009] name failslab, interval 1, probability 0, space 0, times 0 [ 409.706617][ T29] audit: type=1326 audit(1753668388.982:7864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19008 comm="syz.2.4351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f936dd3e9e3 code=0x7ffc0000 [ 409.742739][T19009] CPU: 1 UID: 0 PID: 19009 Comm: syz.2.4351 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 409.742770][T19009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 409.742786][T19009] Call Trace: [ 409.742794][T19009] [ 409.742852][T19009] __dump_stack+0x1d/0x30 [ 409.742874][T19009] dump_stack_lvl+0xe8/0x140 [ 409.742893][T19009] dump_stack+0x15/0x1b [ 409.742914][T19009] should_fail_ex+0x265/0x280 [ 409.743093][T19009] should_failslab+0x8c/0xb0 [ 409.743115][T19009] kmem_cache_alloc_node_noprof+0x57/0x320 [ 409.743222][T19009] ? __alloc_skb+0x101/0x320 [ 409.743255][T19009] __alloc_skb+0x101/0x320 [ 409.743356][T19009] ? audit_log_start+0x365/0x6c0 [ 409.743398][T19009] audit_log_start+0x380/0x6c0 [ 409.743441][T19009] audit_seccomp+0x48/0x100 [ 409.743504][T19009] ? __seccomp_filter+0x68c/0x10d0 [ 409.743531][T19009] __seccomp_filter+0x69d/0x10d0 [ 409.743562][T19009] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 409.743652][T19009] ? vfs_write+0x75e/0x8e0 [ 409.743698][T19009] ? __rcu_read_unlock+0x4f/0x70 [ 409.743720][T19009] ? __fget_files+0x184/0x1c0 [ 409.743746][T19009] __secure_computing+0x82/0x150 [ 409.743845][T19009] syscall_trace_enter+0xcf/0x1e0 [ 409.743875][T19009] do_syscall_64+0xac/0x200 [ 409.743899][T19009] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 409.743993][T19009] ? clear_bhb_loop+0x40/0x90 [ 409.744053][T19009] ? clear_bhb_loop+0x40/0x90 [ 409.744075][T19009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.744097][T19009] RIP: 0033:0x7f936dd3e9a9 [ 409.744116][T19009] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.744163][T19009] RSP: 002b:00007f936c3a7038 EFLAGS: 00000246 ORIG_RAX: 00000000000000eb [ 409.744187][T19009] RAX: ffffffffffffffda RBX: 00007f936df65fa0 RCX: 00007f936dd3e9a9 [ 409.744203][T19009] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000001ac0 [ 409.744219][T19009] RBP: 00007f936c3a7090 R08: 0000000000000000 R09: 0000000000000000 [ 409.744235][T19009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.744247][T19009] R13: 0000000000000000 R14: 00007f936df65fa0 R15: 00007ffe45b0bbb8 [ 409.744322][T19009] [ 410.144906][T19038] __nla_validate_parse: 4 callbacks suppressed [ 410.144922][T19038] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4354'. [ 410.301569][T19054] loop2: detected capacity change from 0 to 128 [ 410.317975][T19054] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 410.378763][T19054] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 410.391520][T19054] netlink: 'syz.2.4360': attribute type 6 has an invalid length. [ 410.436250][T19063] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4361'. [ 410.445862][T19063] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.453354][T19063] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.462171][T19063] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.469716][T19063] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.650058][T19082] loop2: detected capacity change from 0 to 512 [ 410.670511][T19082] EXT4-fs (loop2): 1 orphan inode deleted [ 410.679274][T19082] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 410.689994][ T8762] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:48: Failed to release dquot type 1 [ 410.963556][T19111] FAULT_INJECTION: forcing a failure. [ 410.963556][T19111] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.976758][T19111] CPU: 0 UID: 0 PID: 19111 Comm: syz.5.4367 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 410.976792][T19111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 410.976805][T19111] Call Trace: [ 410.976812][T19111] [ 410.976893][T19111] __dump_stack+0x1d/0x30 [ 410.976918][T19111] dump_stack_lvl+0xe8/0x140 [ 410.976941][T19111] dump_stack+0x15/0x1b [ 410.976960][T19111] should_fail_ex+0x265/0x280 [ 410.976996][T19111] should_fail+0xb/0x20 [ 410.977054][T19111] should_fail_usercopy+0x1a/0x20 [ 410.977093][T19111] strncpy_from_user+0x25/0x230 [ 410.977123][T19111] ? __kmalloc_cache_noprof+0x189/0x320 [ 410.977164][T19111] __se_sys_memfd_create+0x1ff/0x590 [ 410.977205][T19111] __x64_sys_memfd_create+0x31/0x40 [ 410.977285][T19111] x64_sys_call+0x122f/0x2fb0 [ 410.977314][T19111] do_syscall_64+0xd2/0x200 [ 410.977366][T19111] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 410.977459][T19111] ? clear_bhb_loop+0x40/0x90 [ 410.977486][T19111] ? clear_bhb_loop+0x40/0x90 [ 410.977516][T19111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.977544][T19111] RIP: 0033:0x7fceadc1e9a9 [ 410.977563][T19111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.977588][T19111] RSP: 002b:00007fceac286e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f [ 410.977680][T19111] RAX: ffffffffffffffda RBX: 000000000000053b RCX: 00007fceadc1e9a9 [ 410.977696][T19111] RDX: 00007fceac286ef0 RSI: 0000000000000000 RDI: 00007fceadca16fc [ 410.977711][T19111] RBP: 0000200000000b80 R08: 00007fceac286bb7 R09: 00007fceac286e40 [ 410.977726][T19111] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000000 [ 410.977801][T19111] R13: 00007fceac286ef0 R14: 00007fceac286eb0 R15: 0000200000001cc0 [ 410.977829][T19111] [ 411.203086][T19118] loop1: detected capacity change from 0 to 128 [ 411.209695][T19117] loop5: detected capacity change from 0 to 164 [ 411.213892][T19118] syz.1.4368: attempt to access beyond end of device [ 411.213892][T19118] loop1: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 411.244997][T19118] netlink: 'syz.1.4368': attribute type 10 has an invalid length. [ 411.283090][T19127] FAULT_INJECTION: forcing a failure. [ 411.283090][T19127] name failslab, interval 1, probability 0, space 0, times 0 [ 411.295950][T19127] CPU: 0 UID: 0 PID: 19127 Comm: syz.1.4371 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 411.295984][T19127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 411.296028][T19127] Call Trace: [ 411.296036][T19127] [ 411.296046][T19127] __dump_stack+0x1d/0x30 [ 411.296073][T19127] dump_stack_lvl+0xe8/0x140 [ 411.296094][T19127] dump_stack+0x15/0x1b [ 411.296114][T19127] should_fail_ex+0x265/0x280 [ 411.296152][T19127] should_failslab+0x8c/0xb0 [ 411.296180][T19127] kmem_cache_alloc_node_noprof+0x57/0x320 [ 411.296209][T19127] ? __alloc_skb+0x101/0x320 [ 411.296302][T19127] __alloc_skb+0x101/0x320 [ 411.296350][T19127] netlink_alloc_large_skb+0xba/0xf0 [ 411.296452][T19127] netlink_sendmsg+0x3cf/0x6b0 [ 411.296480][T19127] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.296506][T19127] __sock_sendmsg+0x142/0x180 [ 411.296533][T19127] ____sys_sendmsg+0x31e/0x4e0 [ 411.296568][T19127] ___sys_sendmsg+0x17b/0x1d0 [ 411.296620][T19127] __x64_sys_sendmsg+0xd4/0x160 [ 411.296652][T19127] x64_sys_call+0x2999/0x2fb0 [ 411.296680][T19127] do_syscall_64+0xd2/0x200 [ 411.296715][T19127] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 411.296749][T19127] ? clear_bhb_loop+0x40/0x90 [ 411.296775][T19127] ? clear_bhb_loop+0x40/0x90 [ 411.296803][T19127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.296895][T19127] RIP: 0033:0x7fd1bc0ce9a9 [ 411.296914][T19127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.296960][T19127] RSP: 002b:00007fd1ba737038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.297060][T19127] RAX: ffffffffffffffda RBX: 00007fd1bc2f5fa0 RCX: 00007fd1bc0ce9a9 [ 411.297072][T19127] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000004 [ 411.297083][T19127] RBP: 00007fd1ba737090 R08: 0000000000000000 R09: 0000000000000000 [ 411.297114][T19127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.297128][T19127] R13: 0000000000000000 R14: 00007fd1bc2f5fa0 R15: 00007ffc8d33d6e8 [ 411.297152][T19127] [ 411.525940][T19128] 9pnet: Could not find request transport: 0xffffffffffffffff [ 411.605723][T19143] loop2: detected capacity change from 0 to 7 [ 411.699036][T19161] loop2: detected capacity change from 0 to 512 [ 411.713054][T19161] loop2: detected capacity change from 0 to 512 [ 412.456216][T19198] loop3: detected capacity change from 0 to 512 [ 412.471533][T19198] EXT4-fs: Ignoring removed mblk_io_submit option [ 412.484961][T19198] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 412.507748][T19198] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e016c018, mo2=0002] [ 412.519983][T19198] System zones: 1-12 [ 412.534073][T19198] EXT4-fs (loop3): 1 truncate cleaned up [ 412.594548][T19211] loop1: detected capacity change from 0 to 512 [ 412.607199][T19211] EXT4-fs (loop1): too many log groups per flexible block group [ 412.615086][T19211] EXT4-fs (loop1): failed to initialize mballoc (-12) [ 412.627889][T19209] veth0_vlan: entered allmulticast mode [ 412.633763][T19211] EXT4-fs (loop1): mount failed [ 412.837903][T19230] netlink: 'syz.5.4400': attribute type 1 has an invalid length. [ 412.863189][T19230] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 412.872850][T19233] loop2: detected capacity change from 0 to 512 [ 412.884851][T19230] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 412.898696][T19230] bond1 (unregistering): Released all slaves [ 412.911699][T19235] loop3: detected capacity change from 0 to 1024 [ 412.919050][T19235] EXT4-fs: Ignoring removed nomblk_io_submit option [ 412.937977][T19233] EXT4-fs (loop2): too many log groups per flexible block group [ 412.946088][T19233] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 412.976081][T19233] EXT4-fs (loop2): mount failed [ 412.999345][T19225] lo speed is unknown, defaulting to 1000 [ 413.049663][T19242] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4402'. [ 413.118373][ T29] kauditd_printk_skb: 258 callbacks suppressed [ 413.118405][ T29] audit: type=1326 audit(1753668392.472:8120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19247 comm="syz.5.4405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceadc1e9a9 code=0x7ffc0000 [ 413.188497][ T29] audit: type=1326 audit(1753668392.472:8121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19247 comm="syz.5.4405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fceadc1e9a9 code=0x7ffc0000 [ 413.212147][ T29] audit: type=1326 audit(1753668392.472:8122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19247 comm="syz.5.4405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceadc1e9a9 code=0x7ffc0000 [ 413.224790][T19254] loop2: detected capacity change from 0 to 512 [ 413.235903][ T29] audit: type=1326 audit(1753668392.472:8123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19247 comm="syz.5.4405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fceadc1e9a9 code=0x7ffc0000 [ 413.235947][ T29] audit: type=1326 audit(1753668392.472:8124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19247 comm="syz.5.4405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceadc1e9a9 code=0x7ffc0000 [ 413.289315][ T29] audit: type=1326 audit(1753668392.472:8125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19247 comm="syz.5.4405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fceadc1e9a9 code=0x7ffc0000 [ 413.313172][ T29] audit: type=1326 audit(1753668392.472:8126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19247 comm="syz.5.4405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceadc1e9a9 code=0x7ffc0000 [ 413.336816][ T29] audit: type=1326 audit(1753668392.472:8127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19247 comm="syz.5.4405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fceadc1e9a9 code=0x7ffc0000 [ 413.359416][T19254] EXT4-fs (loop2): too many log groups per flexible block group [ 413.360361][ T29] audit: type=1326 audit(1753668392.472:8128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19247 comm="syz.5.4405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fceadc1e9a9 code=0x7ffc0000 [ 413.368251][T19254] EXT4-fs (loop2): failed to initialize mballoc (-12) [ 413.391837][ T29] audit: type=1326 audit(1753668392.472:8129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19247 comm="syz.5.4405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7fceadc1e9a9 code=0x7ffc0000 [ 413.398816][T19254] EXT4-fs (loop2): mount failed [ 413.425080][T19205] veth0_vlan: left allmulticast mode [ 413.482803][T19261] loop0: detected capacity change from 0 to 128 [ 413.529276][T19261] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 413.607603][T19261] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 413.616900][T19266] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4411'. [ 413.621702][T19261] netlink: 'syz.0.4409': attribute type 6 has an invalid length. [ 413.769523][T19225] geneve1 speed is unknown, defaulting to 1000 [ 413.937718][T19293] loop3: detected capacity change from 0 to 164 [ 414.017579][T19293] 9pnet: Could not find request transport: 0xffffffffffffffff [ 414.273893][T19303] loop2: detected capacity change from 0 to 7 [ 414.305633][T19305] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4423'. [ 414.387998][T19309] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4425'. [ 414.525668][T19315] loop3: detected capacity change from 0 to 512 [ 414.542203][T19313] loop5: detected capacity change from 0 to 1764 [ 414.582868][T19315] EXT4-fs (loop3): 1 orphan inode deleted [ 414.596089][ T8761] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:47: Failed to release dquot type 1 [ 414.631187][T19315] ext4 filesystem being mounted at /345/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.826023][T19323] loop0: detected capacity change from 0 to 512 [ 414.878612][T19323] EXT4-fs (loop0): 1 orphan inode deleted [ 414.917366][T19331] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4432'. [ 414.926876][ T8752] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u8:38: Failed to release dquot type 1 [ 414.940655][T19323] ext4 filesystem being mounted at /332/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 414.941415][T19333] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4431'. [ 414.992430][T19322] random: crng reseeded on system resumption [ 415.051722][T19335] loop2: detected capacity change from 0 to 512 [ 415.085331][T19339] loop1: detected capacity change from 0 to 128 [ 415.093300][T19339] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 415.100590][T19335] EXT4-fs (loop2): 1 orphan inode deleted [ 415.107891][T19339] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 415.113161][T19335] ext4 filesystem being mounted at /244/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 415.121275][T19341] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4436'. [ 415.142617][ T8744] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:30: Failed to release dquot type 1 [ 415.142643][T19339] netlink: 'syz.1.4435': attribute type 6 has an invalid length. [ 415.164636][T19335] random: crng reseeded on system resumption [ 415.179087][T19345] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4437'. [ 415.224071][T19349] loop5: detected capacity change from 0 to 1764 [ 415.397389][T19357] loop3: detected capacity change from 0 to 1764 [ 415.408069][T19357] siw: device registration error -23 [ 415.542622][T19360] lo speed is unknown, defaulting to 1000 [ 415.580559][T19360] geneve1 speed is unknown, defaulting to 1000 [ 415.692789][T19359] loop1: detected capacity change from 0 to 512 [ 415.699786][T19359] EXT4-fs: Ignoring removed mblk_io_submit option [ 415.706385][T19359] EXT4-fs: Ignoring removed bh option [ 415.716780][T19359] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 415.756814][T19359] EXT4-fs (loop1): 1 truncate cleaned up [ 415.809189][T19364] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4443'. [ 415.923469][T19369] FAULT_INJECTION: forcing a failure. [ 415.923469][T19369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.936624][T19369] CPU: 0 UID: 0 PID: 19369 Comm: syz.0.4446 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 415.936661][T19369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 415.936673][T19369] Call Trace: [ 415.936680][T19369] [ 415.936688][T19369] __dump_stack+0x1d/0x30 [ 415.936710][T19369] dump_stack_lvl+0xe8/0x140 [ 415.936736][T19369] dump_stack+0x15/0x1b [ 415.936765][T19369] should_fail_ex+0x265/0x280 [ 415.936880][T19369] should_fail+0xb/0x20 [ 415.936943][T19369] should_fail_usercopy+0x1a/0x20 [ 415.937017][T19369] _copy_to_user+0x20/0xa0 [ 415.937044][T19369] simple_read_from_buffer+0xb5/0x130 [ 415.937084][T19369] proc_fail_nth_read+0x100/0x140 [ 415.937172][T19369] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 415.937215][T19369] vfs_read+0x1a0/0x6f0 [ 415.937256][T19369] ? __rcu_read_unlock+0x4f/0x70 [ 415.937286][T19369] ? __fget_files+0x184/0x1c0 [ 415.937336][T19369] ksys_read+0xda/0x1a0 [ 415.937404][T19369] __x64_sys_read+0x40/0x50 [ 415.937485][T19369] x64_sys_call+0x2d77/0x2fb0 [ 415.937582][T19369] do_syscall_64+0xd2/0x200 [ 415.937605][T19369] ? arch_exit_to_user_mode_prepare+0x27/0x60 [ 415.937683][T19369] ? clear_bhb_loop+0x40/0x90 [ 415.937710][T19369] ? clear_bhb_loop+0x40/0x90 [ 415.937732][T19369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.937814][T19369] RIP: 0033:0x7f87e72cd3bc [ 415.937833][T19369] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 415.937881][T19369] RSP: 002b:00007f87e5937030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 415.937903][T19369] RAX: ffffffffffffffda RBX: 00007f87e74f5fa0 RCX: 00007f87e72cd3bc [ 415.937919][T19369] RDX: 000000000000000f RSI: 00007f87e59370a0 RDI: 0000000000000003 [ 415.937935][T19369] RBP: 00007f87e5937090 R08: 0000000000000000 R09: 0000000000000000 [ 415.938016][T19369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 415.938028][T19369] R13: 0000000000000000 R14: 00007f87e74f5fa0 R15: 00007fff9b301d68 [ 415.938048][T19369] [ 416.309649][T19374] loop0: detected capacity change from 0 to 128 [ 416.398744][T19376] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4449'. [ 416.418778][T19374] syz.0.4448: attempt to access beyond end of device [ 416.418778][T19374] loop0: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 416.478632][T19377] netlink: 'syz.0.4448': attribute type 10 has an invalid length. [ 416.580494][T19385] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 416.580494][T19385] program syz.3.4453 not setting count and/or reply_len properly [ 416.670712][T19389] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4454'. [ 416.736927][T19394] loop2: detected capacity change from 0 to 512 [ 416.777443][T19394] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.4445: Failed to acquire dquot type 1 [ 416.810837][T19394] EXT4-fs (loop2): 1 truncate cleaned up [ 416.824931][T19400] loop3: detected capacity change from 0 to 512 [ 416.842225][T19394] ext4 filesystem being mounted at /245/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 416.886950][T19400] EXT4-fs (loop3): too many log groups per flexible block group [ 416.887149][T19400] EXT4-fs (loop3): failed to initialize mballoc (-12) [ 416.887177][T19400] EXT4-fs (loop3): mount failed [ 417.019489][T19404] loop5: detected capacity change from 0 to 128 [ 417.058656][T19404] syz.5.4458: attempt to access beyond end of device [ 417.058656][T19404] loop5: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 417.106015][T19404] netlink: 'syz.5.4458': attribute type 10 has an invalid length. [ 417.322772][T19418] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4457'. [ 417.356256][T19421] loop3: detected capacity change from 0 to 128 [ 417.448961][ T3399] hid-generic 0005:0000:0000.0003: unknown main item tag 0x0 [ 417.456508][ T3399] hid-generic 0005:0000:0000.0003: unknown main item tag 0x0 [ 417.477797][T19421] syz.3.4463: attempt to access beyond end of device [ 417.477797][T19421] loop3: rw=0, sector=2072, nr_sectors = 1 limit=128 [ 417.511326][ T3399] hid-generic 0005:0000:0000.0003: unknown main item tag 0x0 [ 417.518821][ T3399] hid-generic 0005:0000:0000.0003: unknown main item tag 0x0 [ 417.526339][ T3399] hid-generic 0005:0000:0000.0003: unknown main item tag 0x0 [ 417.533886][ T3399] hid-generic 0005:0000:0000.0003: unknown main item tag 0x0 [ 417.541359][ T3399] hid-generic 0005:0000:0000.0003: unknown main item tag 0x0 [ 417.542751][T19423] lo speed is unknown, defaulting to 1000 [ 417.548794][ T3399] hid-generic 0005:0000:0000.0003: unknown main item tag 0x0 [ 417.561980][ T3399] hid-generic 0005:0000:0000.0003: unknown main item tag 0x0 [ 417.569503][ T3399] hid-generic 0005:0000:0000.0003: unknown main item tag 0x0 [ 417.576954][ T3399] hid-generic 0005:0000:0000.0003: unknown main item tag 0x0 [ 417.584370][ T3399] hid-generic 0005:0000:0000.0003: unknown main item tag 0x0 [ 417.595528][T19421] netlink: 'syz.3.4463': attribute type 10 has an invalid length. [ 417.623760][T19423] geneve1 speed is unknown, defaulting to 1000 [ 417.680056][ T3399] hid-generic 0005:0000:0000.0003: unknown main item tag 0x0 [ 417.687553][ T3399] hid-generic 0005:0000:0000.0003: unknown main item tag 0x0 [ 417.695135][ T3399] hid-generic 0005:0000:0000.0003: unknown main item tag 0x0 [ 417.702625][ T3399] hid-generic 0005:0000:0000.0003: unknown main item tag 0x0 [ 417.710194][ T3399] hid-generic 0005:0000:0000.0003: unknown main item tag 0x0 [ 417.717651][ T3399] hid-generic 0005:0000:0000.0003: unknown main item tag 0x0 [ 417.725094][ T3399] hid-generic 0005:0000:0000.0003: unknown main item tag 0x0 [ 417.732603][ T3399] hid-generic 0005:0000:0000.0003: unknown main item tag 0x0 [ 417.740070][ T3399] hid-generic 0005:0000:0000.0003: unknown main item tag 0x0 [ 417.747559][ T3399] hid-generic 0005:0000:0000.0003: unknown main item tag 0x0 [ 417.755151][ T3399] hid-generic 0005:0000:0000.0003: unknown main item tag 0x0 [ 417.762611][ T3399] hid-generic 0005:0000:0000.0003: unknown main item tag 0x0 [ 417.770154][ T3399] hid-generic 0005:0000:0000.0003: unknown main item tag 0x0 [ 417.777628][ T3399] hid-generic 0005:0000:0000.0003: unknown main item tag 0x0 [ 417.785037][ T3399] hid-generic 0005:0000:0000.0003: unknown main item tag 0x0 [ 418.018236][T19440] loop3: detected capacity change from 0 to 512 [ 418.046216][T19441] loop1: detected capacity change from 0 to 512 [ 418.055142][T19435] lo speed is unknown, defaulting to 1000 [ 418.065484][T19439] loop0: detected capacity change from 0 to 1764 [ 418.081130][T19441] EXT4-fs: Ignoring removed mblk_io_submit option [ 418.087975][T19441] EXT4-fs: Ignoring removed bh option [ 418.116137][ T3399] hid-generic 0005:0000:0000.0003: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 418.137790][T19437] lo speed is unknown, defaulting to 1000 [ 418.152613][T19441] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 418.184868][T19440] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.4469: bg 0: block 16: invalid block bitmap [ 418.210635][T19440] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 418.210886][T19440] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.4469: invalid indirect mapped block 5 (level 0) [ 418.211149][T19440] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.4469: invalid indirect mapped block 4294967295 (level 1) [ 418.211287][T19440] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.4469: invalid indirect mapped block 4294967295 (level 2) [ 418.211630][T19440] EXT4-fs (loop3): 1 truncate cleaned up [ 418.212472][T19440] EXT4-fs mount: 25 callbacks suppressed [ 418.212484][T19440] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.233353][T19441] EXT4-fs (loop1): 1 truncate cleaned up [ 418.234061][T19441] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 418.277032][T19435] geneve1 speed is unknown, defaulting to 1000 [ 418.302107][T19440] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 418.327844][ T29] kauditd_printk_skb: 140 callbacks suppressed [ 418.327859][ T29] audit: type=1400 audit(1753668397.682:8265): avc: denied { create } for pid=19450 comm="syz.2.4473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 418.328301][ T29] audit: type=1400 audit(1753668397.682:8266): avc: denied { ioctl } for pid=19450 comm="syz.2.4473" path="socket:[50973]" dev="sockfs" ino=50973 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 418.329565][ T29] audit: type=1400 audit(1753668397.682:8267): avc: denied { getopt } for pid=19450 comm="syz.2.4473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 418.333749][T19451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4473'. [ 418.333783][T19451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4473'. [ 418.336679][T19451] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.336724][T19451] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.336803][T19451] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.336836][T19451] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.338324][T19451] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4473'. [ 418.338356][T19451] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4473'. [ 418.354654][ T29] audit: type=1326 audit(1753668397.702:8268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19450 comm="syz.2.4473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936dd3e9a9 code=0x7ffc0000 [ 418.354704][ T29] audit: type=1326 audit(1753668397.702:8269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19450 comm="syz.2.4473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f936dd3e9a9 code=0x7ffc0000 [ 418.354812][ T29] audit: type=1326 audit(1753668397.702:8270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19450 comm="syz.2.4473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936dd3e9a9 code=0x7ffc0000 [ 418.493884][T19456] loop2: detected capacity change from 0 to 512 [ 418.494821][T19456] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 418.494836][T19456] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 418.513074][T19456] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended [ 418.529719][T19437] geneve1 speed is unknown, defaulting to 1000 [ 418.769950][T19456] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 418.809044][T19439] siw: device registration error -23 [ 418.816513][T19456] System zones: 0-2, 18-18, 34-34 [ 418.822092][T19456] EXT4-fs error (device loop2): ext4_orphan_get:1393: inode #15: comm syz.2.4474: iget: bad i_size value: 360287970189639680 [ 418.841615][T19456] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.4474: couldn't read orphan inode 15 (err -117) [ 418.876707][T19456] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 418.985120][T19471] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4476'. [ 419.091619][ T29] audit: type=1326 audit(1753668398.442:8271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19454 comm="syz.2.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936dd3e9a9 code=0x7ffc0000 [ 419.111827][T19478] loop3: detected capacity change from 0 to 512 [ 419.115573][ T29] audit: type=1326 audit(1753668398.442:8272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19454 comm="syz.2.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f936dd3e9a9 code=0x7ffc0000 [ 419.145573][ T29] audit: type=1326 audit(1753668398.442:8273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19454 comm="syz.2.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f936dd3e9a9 code=0x7ffc0000 [ 419.169299][ T29] audit: type=1326 audit(1753668398.442:8274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19454 comm="syz.2.4474" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f936dd3e9a9 code=0x7ffc0000 [ 419.271973][T19478] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.4481: Failed to acquire dquot type 1 [ 419.292956][T19478] EXT4-fs (loop3): 1 truncate cleaned up [ 419.323981][T19478] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 419.365690][T19478] ext4 filesystem being mounted at /361/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.377683][T13984] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.428733][T12967] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 419.853113][T19492] loop0: detected capacity change from 0 to 128 [ 419.876625][T19492] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 419.907137][T19492] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 419.924211][T19496] loop5: detected capacity change from 0 to 1764 [ 419.982490][T19498] lo speed is unknown, defaulting to 1000 [ 420.040083][T19501] loop0: detected capacity change from 0 to 512 [ 420.099376][T19501] EXT4-fs error (device loop0): ext4_validate_block_bitmap:432: comm syz.0.4488: bg 0: block 16: invalid block bitmap [ 420.121605][T19508] loop2: detected capacity change from 0 to 512 [ 420.135514][T19498] geneve1 speed is unknown, defaulting to 1000 [ 420.155479][T19501] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6548: Corrupt filesystem [ 420.176597][T19508] EXT4-fs (loop2): 1 orphan inode deleted [ 420.183071][T19508] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 420.207273][ T8743] EXT4-fs error (device loop2): ext4_release_dquot:6969: comm kworker/u8:29: Failed to release dquot type 1 [ 420.226082][T19501] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.4488: invalid indirect mapped block 5 (level 0) [ 420.226120][T19508] ext4 filesystem being mounted at /254/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 420.254607][T19501] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.4488: invalid indirect mapped block 4294967295 (level 1) [ 420.283111][T19501] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.4488: invalid indirect mapped block 4294967295 (level 2) [ 420.312077][T19501] EXT4-fs (loop0): 1 truncate cleaned up [ 420.340689][T19501] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 420.392920][T19501] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.515168][T19522] __nla_validate_parse: 1 callbacks suppressed [ 420.515184][T19522] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4495'. [ 420.953362][T13984] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 420.981159][T19529] loop2: detected capacity change from 0 to 128 [ 420.988997][T19529] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 421.003916][T19529] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 421.307676][T19538] loop3: detected capacity change from 0 to 512 [ 421.319286][T19539] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4501'. [ 421.340726][T19538] EXT4-fs (loop3): 1 orphan inode deleted [ 421.347419][T19538] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 421.360620][ T8773] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u8:59: Failed to release dquot type 1 [ 421.372891][T19538] ext4 filesystem being mounted at /365/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 421.385821][ C0] ================================================================== [ 421.394029][ C0] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 421.401231][ C0] [ 421.403564][ C0] read-write to 0xffff8881046240b8 of 8 bytes by interrupt on cpu 1: [ 421.411632][ C0] wq_worker_tick+0x60/0x230 [ 421.416235][ C0] sched_tick+0x11a/0x270 [ 421.420582][ C0] update_process_times+0x15f/0x190 [ 421.425829][ C0] tick_nohz_handler+0x249/0x2d0 [ 421.430779][ C0] __hrtimer_run_queues+0x20c/0x5a0 [ 421.435993][ C0] hrtimer_interrupt+0x21a/0x460 [ 421.440950][ C0] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 421.446863][ C0] sysvec_apic_timer_interrupt+0x6f/0x80 [ 421.452525][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 421.458567][ C0] finish_task_switch+0xb6/0x2b0 [ 421.463512][ C0] __schedule+0x6a8/0xb30 [ 421.467851][ C0] __cond_resched+0x4e/0x90 [ 421.472364][ C0] loop_process_work+0x7fa/0xa60 [ 421.477314][ C0] loop_workfn+0x31/0x40 [ 421.481580][ C0] process_scheduled_works+0x4cb/0x9d0 [ 421.487083][ C0] worker_thread+0x582/0x770 [ 421.491724][ C0] kthread+0x486/0x510 [ 421.495823][ C0] ret_from_fork+0xda/0x150 [ 421.500348][ C0] ret_from_fork_asm+0x1a/0x30 [ 421.505137][ C0] [ 421.507587][ C0] read-write to 0xffff8881046240b8 of 8 bytes by interrupt on cpu 0: [ 421.515682][ C0] wq_worker_tick+0x60/0x230 [ 421.520298][ C0] sched_tick+0x11a/0x270 [ 421.524657][ C0] update_process_times+0x15f/0x190 [ 421.529890][ C0] tick_nohz_handler+0x249/0x2d0 [ 421.534848][ C0] __hrtimer_run_queues+0x20c/0x5a0 [ 421.540073][ C0] hrtimer_interrupt+0x21a/0x460 [ 421.545028][ C0] __sysvec_apic_timer_interrupt+0x5c/0x1d0 [ 421.550947][ C0] sysvec_apic_timer_interrupt+0x6f/0x80 [ 421.556613][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 421.562637][ C0] lo_rw_aio+0xe2/0x760 [ 421.566819][ C0] loop_process_work+0x52d/0xa60 [ 421.571792][ C0] loop_rootcg_workfn+0x22/0x30 [ 421.576668][ C0] process_scheduled_works+0x4cb/0x9d0 [ 421.582157][ C0] worker_thread+0x582/0x770 [ 421.586772][ C0] kthread+0x486/0x510 [ 421.590851][ C0] ret_from_fork+0xda/0x150 [ 421.595407][ C0] ret_from_fork_asm+0x1a/0x30 [ 421.600196][ C0] [ 421.602534][ C0] value changed: 0x0000000000222e00 -> 0x0000000000225510 [ 421.609660][ C0] [ 421.612002][ C0] Reported by Kernel Concurrency Sanitizer on: [ 421.618157][ C0] CPU: 0 UID: 0 PID: 8752 Comm: kworker/u8:38 Not tainted 6.16.0-rc7-syzkaller-00142-gb711733e89a3 #0 PREEMPT(voluntary) [ 421.630844][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 421.640912][ C0] Workqueue: loop1 loop_rootcg_workfn [ 421.646316][ C0] ================================================================== [ 421.658583][T13634] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 422.144081][T12967] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.